last executing test programs:

1m41.746886984s ago: executing program 1 (id=2958):
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x40000007, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x4, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="010000000400000000000000400000f7400044d97934e4a17c0d547d6d4511a81000", @ANYRES8=r0, @ANYBLOB="000000000000000000000000001500000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000e4ffffffffffffff000000060000000000000000000000648405574ba6d08abab82785099ef699ead67863af1790306f9c4bb3bfba89f5688486df045d8927fda3d50a635d5800e0febc0a89e03dc4f12cb59456c0fe8a43ed7b9313ffb1fdf1d833206830f36e6e6b8efac0534e0f099683462e77fe142eb0903fd82f49bdc05a4e63dfdfe0c6e3247188ea1acb591e49ff03be2ddcaf0fb59e1f86d59aa1b72b4aa76b1d137c51a0b8e9db7dc34515bc9df000675c9b64efb7310b318c3c457f7bb1"], 0x50)
r2 = socket$kcm(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}})
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1e, 0x11, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4eb}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@cb_func={0x18, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00', 0x2, 0xb, &(0x7f00000001c0)=""/11, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x5, 0x6, 0x2, 0xc}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r1, 0xffffffffffffffff, r1, r1, 0xffffffffffffffff], 0x0, 0x10, 0x240}, 0x94)
socket$inet6(0xa, 0x2, 0x7)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000b80)=[@in={0x2, 0x4e24, @loopback}], 0x10)
futex(&(0x7f0000000000)=0x2, 0x1, 0x0, 0x0, 0x0, 0x1)
sendmsg$inet_sctp(r4, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000500)="1b", 0x2a000}], 0x1, 0x0, 0x0, 0x4000083}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r5=>0x0})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6)
r8 = gettid()
clock_nanosleep(0x9, 0x0, &(0x7f0000000140)={0x77359400}, 0x0)
rt_sigqueueinfo(r8, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff})
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x40718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
geteuid()
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000130001000400"/20, @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0)
r9 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r9, 0x8922, &(0x7f0000000080)={'dummy0\x00'})
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r1}, 0x38)
add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)

1m40.228787244s ago: executing program 1 (id=2971):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x1, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8917}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000040}, 0x4000040)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x2000000, {0x7}}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x43f, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11c}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x0)
close(0x3)
r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmsg$802154_raw(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)="98bd80d1b51fac3cd42404000000000000053395f2ad", 0x16}}, 0x94)

1m40.078630908s ago: executing program 1 (id=2972):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f00000002c0)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x132, 0xffffffffffffffff, 0xffffd000)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x42, 0x18e)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2000, 0xe7)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
readahead(r3, 0x6, 0x1)
getdents(0xffffffffffffffff, 0xffffffffffffffff, 0x5a)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

1m40.078290599s ago: executing program 1 (id=2973):
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x40000007, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x4, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="010000000400000000000000400000f7400044d97934e4a17c0d547d6d4511a81000", @ANYBLOB="0000000000000000000000000015000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000e4ffffffffffffff000000060000000000000000000000648405574ba6d08abab82785099ef699ead67863af1790306f9c4bb3bfba89f5688486df045d8927fda3d50a635d5800e0febc0a89e03dc4f12cb59456c0fe8a43ed7b9313ffb1fdf1d833206830f36e6e6b8efac0534e0f099683462e77fe142eb0903fd82f49bdc05a4e63dfdfe0c6e3247188ea1acb591e49ff03be2ddcaf0fb59e1f86d59aa1b72b4aa76b1d137c51a0b8e9db7dc34515bc9df000675c9b64efb7310b318c3c457f7bb1"], 0x50)
r1 = socket$kcm(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}})
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1e, 0x11, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4eb}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@cb_func={0x18, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00', 0x2, 0xb, &(0x7f00000001c0)=""/11, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x5, 0x6, 0x2, 0xc}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r0, 0xffffffffffffffff, r0, r0, 0xffffffffffffffff], 0x0, 0x10, 0x240}, 0x94)
socket$inet6(0xa, 0x2, 0x7)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000b80)=[@in={0x2, 0x4e24, @loopback}], 0x10)
futex(&(0x7f0000000000)=0x2, 0x1, 0x0, 0x0, 0x0, 0x1)
sendmsg$inet_sctp(r3, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000500)="1b", 0x2a000}], 0x1, 0x0, 0x0, 0x4000083}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r4=>0x0})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5)
r7 = gettid()
clock_nanosleep(0x9, 0x0, &(0x7f0000000140)={0x77359400}, 0x0)
rt_sigqueueinfo(r7, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff})
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x40718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
geteuid()
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000130001000400"/20, @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0)
r8 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r8, 0x8922, &(0x7f0000000080)={'dummy0\x00'})
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r0}, 0x38)
add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)

1m39.180521378s ago: executing program 1 (id=2989):
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
setpgid(0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x6}}]}, 0x1, 0x50f, &(0x7f0000000dc0)="$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")
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
connect$inet(0xffffffffffffffff, &(0x7f0000000580)={0x2, 0x4e20, @broadcast}, 0x10)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000006900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffd, 0x0, 0x6, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@rand_addr=0x64010101, 0x0, 0x32}, 0x0, @in=@private=0xa010102, 0x0, 0x0, 0x0, 0xb7, 0xcb7, 0xfffffffe}}, 0xe8)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c)
getdents64(0xffffffffffffffff, 0x0, 0x0)

1m29.912636259s ago: executing program 1 (id=3059):
prlimit64(0x0, 0xe, 0x0, 0x0)
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0)
io_setup(0x1, &(0x7f0000000b80)=<r0=>0x0)
io_submit(r0, 0x0, &(0x7f0000001d00))
creat(&(0x7f0000000040)='./file0\x00', 0x102)

1m29.677791486s ago: executing program 32 (id=3059):
prlimit64(0x0, 0xe, 0x0, 0x0)
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0)
io_setup(0x1, &(0x7f0000000b80)=<r0=>0x0)
io_submit(r0, 0x0, &(0x7f0000001d00))
creat(&(0x7f0000000040)='./file0\x00', 0x102)

13.732201394s ago: executing program 2 (id=3665):
r0 = socket$packet(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002e000000180100001f786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="c16d473d990c", @link_local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0x4, 0x1c, 0x66, 0x0, 0x2, 0x2, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1f, 0x2, 0x0, @loopback}}}}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
bind$packet(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0x22, &(0x7f0000000240)={@local, @link_local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x36}}}}}}, 0x0)
r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0)
writev(r3, 0x0, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x10, &(0x7f0000000d80)=@raw=[@tail_call, @jmp={0x5, 0x0, 0x4, 0x1, 0x1, 0x18}, @alu={0x4, 0x0, 0xd, 0x8, 0x1, 0xfffffffffffffff0, 0xfffffffffffffff0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xffffffffffffffff}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xe}], &(0x7f0000000980)='GPL\x00', 0x200002, 0x0, 0x0, 0x41000, 0xb, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0xff, '\x00', 0x0, r2, 0x5, 0x2, 0x3}, 0x50)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000023c0)=@newlink={0x28, 0x10, 0x1, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x10000, 0x201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x24040051}, 0x24040014)
recvfrom$l2tp6(0xffffffffffffffff, &(0x7f0000000100)=""/132, 0x84, 0x120, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @local}}, 0x20)

13.647450147s ago: executing program 2 (id=3666):
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
setpgid(0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x6}}]}, 0x1, 0x50f, &(0x7f0000000dc0)="$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")
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, 0x0, 0xc800)
socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
connect$inet(0xffffffffffffffff, &(0x7f0000000580)={0x2, 0x4e20, @broadcast}, 0x10)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000006900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffd, 0x0, 0x6, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@rand_addr=0x64010101, 0x0, 0x32}, 0x0, @in=@private=0xa010102, 0x0, 0x0, 0x0, 0xb7, 0xcb7, 0xfffffffe}}, 0xe8)
sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x1c)

13.396848295s ago: executing program 2 (id=3667):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000100)={<r1=>r0, &(0x7f0000000000)='\\-\x00', 0x80000, 0x0, 0x4, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000240), 0x3af4701e)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r3, 0x0)
r4 = socket$kcm(0x29, 0x2, 0x0)
write$cgroup_pressure(r4, &(0x7f0000000140)={'full'}, 0xfffffdef)
ioctl$int_in(r4, 0x5452, &(0x7f0000000240)=0x3)
sendmsg$kcm(r4, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000818)
setsockopt$sock_attach_bpf(r4, 0x1, 0x7, &(0x7f0000000340), 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee5, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000440)={{0x2, 0x4e24, @empty}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x2, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'ip6gretap0\x00'})
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x33, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r8)

12.831689513s ago: executing program 2 (id=3670):
r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10e, &(0x7f0000000340)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@stripe={'stripe', 0x3d, 0x42}}, {@sysvgroups}, {@quota}]}, 0x3, 0x454, &(0x7f0000000ec0)="$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")
r1 = openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x80044940, 0x0)
syz_mount_image$msdos(&(0x7f00000003c0), &(0x7f0000000340)='.\x00', 0x126a4b5, &(0x7f0000004140)=ANY=[@ANYRES16, @ANYRES64, @ANYRES16, @ANYRES16, @ANYRES64, @ANYRES16, @ANYRES16, @ANYBLOB="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", @ANYRES32, @ANYRES32], 0x5, 0x0, &(0x7f0000000000))
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000180)=<r2=>0x0)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace$cont(0x19, r3, 0xf, 0x0)
io_uring_setup(0x78b6, 0x0)
bpf$MAP_LOOKUP_BATCH(0x1b, 0x0, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000004c0)={"30b37bd8eff0a747ed133680f1226d32", 0x0, r2, {0x80000001, 0x8}, {0x100}, 0x120, [0x3a7, 0x4, 0x8000000000000001, 0x80000000, 0x4, 0x5, 0x9, 0x2400000000, 0x9c9, 0x4, 0x4, 0x2, 0x5669, 0x4, 0xffffffffffffffc5, 0x80000000]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x48)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
r4 = perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a09040000000000000000020000040900000000797a300000000009020000000000000000000028000480240001800b00010065787468647200001400028008000640000000010500020089000000140000001100010000000000000000000300000a"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x0)
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
unlink(&(0x7f0000000080)='./cgroup/cgroup.procs\x00')
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r7 = socket$inet6(0xa, 0x3, 0x1)
setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@empty, @in=@dev={0xac, 0x14, 0x14, 0x38}, 0x4e1f, 0x0, 0x4, 0x3, 0x2}, {0x10000, 0x200000004, 0x40000000007, 0x6811221d, 0x100000000, 0x4, 0x200000003, 0x9}, {0x5, 0xfffffffffffffffd, 0x7}, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0x2, @in=@empty, 0x3505, 0x1, 0x0, 0x0, 0x9, 0x3}}, 0xe8)
connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073000000181100", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000480)={r9}, 0xc)

11.267589924s ago: executing program 2 (id=3674):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000180)='lazytime\x00', 0x0, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x8000)

10.829846958s ago: executing program 2 (id=3679):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) (fail_nth: 1)

10.808193729s ago: executing program 33 (id=3679):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) (fail_nth: 1)

8.211069443s ago: executing program 5 (id=3706):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x810)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r1, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x3)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "54fcc1dbadb00b50", "f4d095d17fa5842e23149cba5969c47f", "8da40d64", "eb034ea618e777ea"}, 0x28)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x40000)
sendto$inet6(r1, &(0x7f0000000240), 0x0, 0x8040, 0x0, 0x0)
write$binfmt_elf64(r1, 0x0, 0x78)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair(0x28, 0x2, 0x28, &(0x7f0000001400))
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$packet(0x11, 0xa, 0x300)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x100000000000009, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x8312, 0x32, 0x43a1bd76, 0x7, 0x9, 0x200006, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket(0x15, 0x5, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delneigh={0x28, 0x1d, 0x1, 0x70bd2d, 0x25dfdbfb, {0x1c, 0x0, 0x0, 0x0, 0x1, 0xb9, 0x9}, [@NDA_DST_MAC={0xa, 0x1, @remote}]}, 0x28}}, 0x0)

5.55634762s ago: executing program 5 (id=3712):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x7, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$MAP_CREATE(0x2000000, &(0x7f0000000800)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000a75bc9"], 0x50)

5.414231144s ago: executing program 5 (id=3713):
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x181)
write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8)
madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000005000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fea000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000ff6000/0x1000)=nil, 0x0}, 0x68) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) (async)
syz_create_resource$binfmt(&(0x7f0000000100)='./file1\x00') (async)
r1 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async)
add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000100)={'fscrypt:', @desc3}, 0x0, 0x0, r1)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0)
write$cgroup_int(r2, &(0x7f0000000000)=0x922, 0x12) (async)
io_uring_setup(0x2ddf, &(0x7f0000000040)={0x0, 0x100aeb9, 0xd000, 0x20000a, 0x60, 0x0, r2})
memfd_create(&(0x7f0000000180)='<Z2>J=\t\xeb\xf8\xa7\x04\x9f\xe1hO\x8e\xd7\xb5\x93}\x8d\xed\x01L`\x93\xcd^2P\x00$x\"\xda\xf1Az\xfe_\xc5\xb3\x9b`;\x1c\xfc\xaf9\x98\x91\xe7', 0x0) (async)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@cgroup, 0x5, 0x0, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x4b) (async)
newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x4000)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000300)={[{}, {@resuid={'resuid', 0x3d, r3}}, {@errors_remount}, {@noinit_itable}]}, 0x0, 0x4e6, &(0x7f0000000980)="$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") (async)
unshare(0x2a020400) (async)
r4 = socket(0x10, 0x803, 0x0)
connect$802154_dgram(r4, 0x0, 0x0) (async)
getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value, &(0x7f0000000200)=0x8)

5.405100125s ago: executing program 0 (id=3714):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x28, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x88}, 0x1, 0x0, 0x0, 0x4044040}, 0x40)

5.334135067s ago: executing program 0 (id=3715):
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x6}}]}, 0x1, 0x50f, &(0x7f0000000dc0)="$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")
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, 0x0, 0xc800)
sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="020700"], 0x10}}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
connect$inet(0xffffffffffffffff, &(0x7f0000000580)={0x2, 0x4e20, @broadcast}, 0x10)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000006900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffd, 0x0, 0x6, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@rand_addr=0x64010101, 0x0, 0x32}, 0x0, @in=@private=0xa010102, 0x0, 0x0, 0x0, 0xb7, 0xcb7, 0xfffffffe}}, 0xe8)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c)
getdents64(0xffffffffffffffff, 0x0, 0x0)

5.148177533s ago: executing program 5 (id=3716):
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
setpgid(0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x6}}]}, 0x1, 0x50f, &(0x7f0000000dc0)="$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")
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, 0x0, 0xc800)
socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
connect$inet(0xffffffffffffffff, &(0x7f0000000580)={0x2, 0x4e20, @broadcast}, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffd, 0x0, 0x6, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@rand_addr=0x64010101, 0x0, 0x32}, 0x0, @in=@private=0xa010102, 0x0, 0x0, 0x0, 0xb7, 0xcb7, 0xfffffffe}}, 0xe8)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c)

5.095830334s ago: executing program 3 (id=3717):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
r1 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r1, 0x8)
r2 = accept4(r1, 0x0, 0x0, 0x1a449ac0db59c3f7)
write(r2, &(0x7f0000000000)="ea", 0x1)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000580)={0x5, 0x201, 0xffffffff, 0x2}, 0x10)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000ac0)={0x0, 0x2}, 0x8)
write(r2, &(0x7f00000002c0)="04", 0x1)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x3, 0x0, 0x2}, 0x10)
writev(r2, &(0x7f0000000140)=[{&(0x7f0000000040)='w', 0x1}], 0x1)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x4}, 0x8)
getpeername$netlink(r2, &(0x7f0000000000), &(0x7f0000000040)=0xc)
sendmmsg$inet6(r0, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)='KD'}, {&(0x7f0000000c80)="9f9ae8e924da189d", 0x8}, {0x0}], 0x3}}], 0x1, 0x0)

4.823198884s ago: executing program 3 (id=3718):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)='KD', 0x2}, {&(0x7f0000000c80)="9f9ae8e924da189d", 0x8}, {0x0}], 0x3}}], 0x1, 0x0) (fail_nth: 4)

4.756079176s ago: executing program 3 (id=3720):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f00000000c0)={[{@bh}, {@test_dummy_encryption}, {@nombcache}]}, 0xff, 0x548, &(0x7f0000001300)="$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")
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xfd, 0x545, &(0x7f0000000440)="$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")
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0xf8c, 0x510, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xabca, 0x5, 0xa, 0x0, 0x0, 0x0, 0x20000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

4.499523964s ago: executing program 6 (id=3680):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001cc0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_NODE_GET(r3, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002440)={0x14, r2, 0xad9a673c54048f09, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0)

4.375346818s ago: executing program 4 (id=3722):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3021040, &(0x7f0000000600)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x4, 0x521, &(0x7f0000000640)="$eJzs3d9rK1kdAPDvTJtue2/XZlXkuuDu4q7cu+hN2q2rVWR3BdGnBXV9v9Y2LaVpU5p0vS2LdvEPEERU8A/wRfDBR0H2TxDhgr6LiiJ6rz7qHZlkqv2RtLFNm2v6+cBpzsmZOd9zhmaSmTnMBHBtvRARb0TEWES8HBEzxftpkWK/k/LlHj18ZylPSWTZW39NIineO2grL49HxM1itcmI+OqXIr6RnIzb3N1bX6zXa9tFudra2Ko2d/furm0srtZWa5vz83M/j4hXF2azwoXGWY6I177wxx989ydffO2Xn/jm7+79+c638m597kOdfkfE0oUC9NBpu9TeFgfybbR9GcGGJB9PaWzYvQAAoB/5b/z3R8RH27//Z2Ks/WsOAAAAGCXZ69PxzyQiAwAAAEZWGhHTkaSVYi7AdKRppdKZw/vBuJHWG83Wx1caO5vLeV1EOUrpylq9NlvMFS5HKcnLc8Uc24PyK8fK8xHxTER8f2aqXa4sNerLwz75AQAAANfEzeePHv//YyZt5wEAAIARU+5ZAAAAAEaFQ34AAAAYfY7/AQAAYKR9+c0385QdPMd7+e3dnfXG23eXa831ysbOUmWpsb1VWW00Vtv37Ns4q716o7H1ydjcuV9t1ZqtanN3795GY2ezdW/tyCOwAQAAgCv0zPPv/TaJiP3PTrVTFPcBBDjiD8PuADBIY8PuADA048PuADA0pTOXsIeAUZecUX9y8k7nXGH86nL6AwAADN7tD5+8/j9R1J19bgD4f2auDwBcP0ev7k0NrR/A1SuddwbgrUH3BBiW93VenupV3/PmHX1c/++cY8iyc3UMAAAYmOl2StJKcQwwHWlaqUQ8HY+zcpSSlbV6bbao+81M6am8PNdeMzlzzjAAAAAAAAAAAAAAAAAAAAAAAAAA0JFlSWQAAADASItI/5S07+YfcXvmpemjZweOPfXrx2/98P5iq7U9FzGR/G0mf2siIlo/Kt5/JfNIAAAAABiuqfxP5zi9eJ0bdpcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDWPHr6zdJCuMu5fPh8R5W7xx2Oy/ToZpYi48fckxg+tl0TE2ADi778bEbe6xU/icZZl5aIX3eJPXXL8cnvTdI+fRsTNAcSH6+y9fP/zRrfPXxovtF+7f/7Gi3RRvfd/6X/2f2M99j9PHyv38uyDn1V7xn834tnx7vufg/hJJ/6REHnhxT7H+PWv7e11rTjUZLf4h2NVWxtb1ebu3t21jcXV2mptc35+7lMLn154dWG2urJWrxV/u4b53kd+8fi08d/oEb98dPwntv9LfY0+i389uP/wA51CqVv8Oy92//691SN+Wnz3fazI5/W3D/L7nfxhz/3018+dNv7lHuOfPGP8d/oaf3zm5a985/dda05sDQDgKjR399YX6/Xa9imZyT6W+Z8yERdt5/WB9udJyMTZy0w+IV29jEz27c7/48XaueDqJzLZRVYfjwF0Y+LE53QszttgErGft9XnPyQAADBi/vuj/7QrSAAAAAAAAAAAAAAAAAAAAMBlOudtySYjou+Fj8fcH85QAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABO9e8AAAD//zDU0hs=")
openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r0 = socket(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)={{0x14, 0x453, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x3f8}}, 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x40000)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x101000, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x11)
ioctl$FIONREAD(r1, 0x8924, 0x0)
socket(0x1e, 0x4, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x4d)

4.270279631s ago: executing program 6 (id=3723):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0x1, 0x53b, &(0x7f0000000b80)="$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") (fail_nth: 5)

4.254348922s ago: executing program 0 (id=3724):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x28, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x88}, 0x1, 0x0, 0x0, 0x4044040}, 0x40)

4.215106343s ago: executing program 5 (id=3725):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0x0, 0x0, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf51c}, 0x94)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = syz_open_dev$usbfs(0x0, 0x77, 0x41341)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200))
keyctl$chown(0x4, 0x0, 0xee01, 0x0)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)

3.933769813s ago: executing program 0 (id=3726):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f0000000240)={0x0, 0xfb, 0xb2, 0x2, 0xf8, "d6000586d486b3170fca9fdf6b4b690d", "92ab5112303706a59e6b93009893305f8b65cc43e2bab524c49ecda33c86bdcaae08983d81c711da697d516d36d363c1ebd5606844405a308332b152c1c693df0cffd8e2f7070e13650d35d9c1c65437e7f9620ec0438157d01200b654c4bb7f82f5305aee8d313ecd99387f29856ead08819f6bffea72d788606212080da0f8ad42c8f481ef23284bb4f5bcb5d8be55f6de6290d587b25071344e6fd4"}, 0xb2, 0x0)
quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000300))
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000cc0)='./file0\x00', 0x2, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="3638919e178389777d715e4daffbe0cc32aded742429e0ff6b95eedbeee750d5193411b770539f09cb29c22f3a1507d93643aafc88aadc859e3e4f758642d45bffcdee0ae4296933e00baf3474e752d392586846d197b23c3de36c6242c8ead9088decbae3bb86bd0ee7a121c63830965f71f1eb8a43f2a995f5394b5553aa2a0e93d85646e2fc452c5b0c6ffbd7f15190d6974094be62f48b5b856f3d754d025edf8c9833f2299d9a9acfa07c65b615c48c292eef"], 0xff, 0x2e7, &(0x7f0000000d80)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e)
recvmsg$unix(r3, &(0x7f00000004c0)={&(0x7f0000000680), 0x6e, 0x0}, 0x40)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000140), 0x5}, 0x38)
ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000000)={0x5, 0xb719, 0x5})
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
socket$unix(0x1, 0x1, 0x0)

3.776162728s ago: executing program 6 (id=3727):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4)
r6 = syz_io_uring_setup(0xc6d, 0x0, 0x0, 0x0, &(0x7f0000000000))
io_uring_enter(r6, 0x3516, 0xa00100, 0x0, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x143862, 0x0)
mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0xedcb, 0x9, 0x100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100627269646765000014"], 0x44}}, 0x80)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002ebd7000000000001400000018000180140002006e657464657673696d3000000000000008001c"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x800)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$key(0xf, 0x3, 0x2)
r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f, 0x5f]}}, 0x0, 0x35, 0x0, 0x1}, 0x28)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000f2dcc6d0e5bfb6ecc27477a80d1fcf4b137d054bd61743b079bac97f2141d9f3fc65776a653c4ec621d3c20287f5605901decf24849b329a36c04e4b9ed84e68605ca797889c2552b819a920c3ea749c4760aa70f09c9c56b6a43f7c5b6d22e5b85ad8359b1ca3ce6562fb42785fa4a7fee635efcaa4ba6fab659971224383e4bf1cf7f3e03373a9750690557a2efd747ce8afce6d4cd5"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r9, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r10, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffff97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)

3.775819808s ago: executing program 4 (id=3728):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) (fail_nth: 2)

3.665895641s ago: executing program 3 (id=3729):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800ff001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_open_dev$sg(0x0, 0x80000001, 0x40a02)
sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x20000045)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0))
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4010)

2.803181189s ago: executing program 3 (id=3730):
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
setpgid(0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x6}}]}, 0x1, 0x50f, &(0x7f0000000dc0)="$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")
socket$key(0xf, 0x3, 0x2)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000006900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffd, 0x0, 0x6, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@rand_addr=0x64010101, 0x0, 0x32}, 0x0, @in=@private=0xa010102, 0x0, 0x0, 0x0, 0xb7, 0xcb7, 0xfffffffe}}, 0xe8)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c)

1.600185498s ago: executing program 4 (id=3731):
set_mempolicy(0x3, &(0x7f0000000040)=0x401, 0x2)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f00000005c0), 0x10)
recvmmsg(r0, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {0x0}], 0x2}, 0x1}], 0x2, 0x10002, 0x0)
sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x404c880)
sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000680001ed"], 0x2c}}, 0x4000)
setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000000)=ANY=[], 0xffc9)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r2, 0x0, 0x12, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4028055}, 0x0)

735.744756ms ago: executing program 5 (id=3732):
r0 = socket$igmp(0x2, 0x3, 0x2)
select(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x100000000000000, 0x7})
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_addr=@multicast2, @remote}, 0x10)
setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000280)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc3fd440829c82ae"}, 0x3c)
setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000040)=0x6, 0x4)

388.807858ms ago: executing program 4 (id=3733):
r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c021c00", @ANYRES16=r0, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f40108807000008048000980280000f8060001000a00000014000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000908000200e0000001050003000000000024000100000000000000000000000000000000000000000000000000000000000000000080010080200004000a004e2000000005200100000000000000000000000000000800000006000500b01f00000800030006000000060005000500000008000a000100000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff200004000a034e200000040100000000000000000000ffffac14142a06000000240001000000000000000000000000000000000000000000000000000000000000000000d4000980"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804)

363.001758ms ago: executing program 4 (id=3734):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xa9, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400000000000d07, 0x40}, 0x100b28, 0x6, 0x7, 0x5, 0x8000000008, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
r1 = socket$inet6_icmp(0xa, 0x2, 0x3a)
sendmsg$inet6(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x4)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00')
pread64(r2, &(0x7f0000000180)=""/187, 0xbb, 0xa3)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002f61afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a0101"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a34000000050a010400000000000000e4ffffff000900010473797a30000000000840e440000073797a3100000000140000001100010000000000000000000100000a", @ANYRES8=r3, @ANYRES8=r3, @ANYRES32=r3], 0x5c}, 0x1, 0x0, 0x0, 0x40000d0}, 0x40)

361.474449ms ago: executing program 6 (id=3735):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x8, 0x3}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000003, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
creat(0x0, 0x18)
openat(0xffffffffffffff9c, 0x0, 0xa4c42, 0x108)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000d00)='./file0\x00', 0xa0004a, &(0x7f00000001c0)={[{@minixdf}, {@noquota}, {@orlov}, {@noload}, {@delalloc}, {@mblk_io_submit}, {@commit}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x4}}]}, 0x1, 0x477, &(0x7f0000001900)="$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")
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x180)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x4000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x1c77, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

219.868803ms ago: executing program 0 (id=3736):
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
fchdir(r0)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, &(0x7f0000001dc0)={0xf, 0x5, 0x0, {r0}}, 0x20)
r1 = syz_io_uring_setup(0x6a18, 0x0, &(0x7f0000000100), &(0x7f00000000c0), 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x20040802)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="700200000d0a010800000000000000000a0000010900020073797a31000000000900010073797a310000000044020380400200800800034000000003"], 0x270}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
r3 = eventfd2(0x3ff, 0x80801)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000000)=r3, 0x1)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280)={[{@errors_remount}, {@usrquota}, {@minixdf}, {@nombcache}]}, 0x1, 0x51a, &(0x7f0000000f00)="$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")
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x395c06b, 0x0, 0x11, 0x0, &(0x7f0000000000))
rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00')
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32], 0x44}}, 0x0)
r4 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000340)={r4})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000027000701feffffff0000000007"], 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001c80), 0xffffffffffffffff)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001f80)={0xffffffffffffffff, 0xe0, &(0x7f0000001e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000001cc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r7=>0x0, 0x0, 0x0, 0x0, 0x7, 0x9, &(0x7f0000001d00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001d40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xba, &(0x7f0000001d80)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000001dc0), &(0x7f0000001e00), 0x8, 0x35, 0x8, 0x8, &(0x7f0000001e40)}}, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000002180)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10100001}, 0xc, &(0x7f0000002140)={&(0x7f00000020c0)={0x48, r6, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5c1626c9}]}, 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x20040011)
sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="0500000000000000", @ANYRES16=r6, @ANYBLOB="010028bd7000fbdbdf250900000020000680060001000a00000014000400fc02000000000000000000000000000108000400ff07000005000500ed000000080003000300000004000680"], 0x50}, 0x1, 0x0, 0x0, 0x20000040}, 0x8001)
r8 = socket$kcm(0x10, 0x2, 0x4)
r9 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, 0x0, 0x0)
setsockopt$inet6_int(r0, 0x29, 0xcb, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet6(r9, &(0x7f00000002c0)={&(0x7f0000000140)={0xa, 0x4e21, 0x80000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=[@tclass={{0x14, 0x29, 0x43, 0x591}}], 0x18}, 0x840)
sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)="5c00000015006b03004e21000af32c6e020675f80025030040010000002c740e17d34460bc24eab5fac905251e6182949a36c23d3b48dfd8cdbf9364c9f8ffffffffffffffd0bdd70000b6c0504bb9189d5208eddedf0cd7ecc1c31b", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'caif0\x00'})

210.179324ms ago: executing program 4 (id=3737):
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x40000007, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x4, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="010000000400000000000000400000f7400044d97934e4a17c0d547d6d4511a81000", @ANYRES8=r0, @ANYBLOB="0000000000000000000000000015000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000e4ffffffffffffff000000060000000000000000000000648405574ba6d08abab82785099ef699ead67863af1790306f9c4bb3bfba89f5688486df045d8927fda3d50a635d5800e0febc0a89e03dc4f12cb59456c0fe8a43ed7b9313ffb1fdf1d833206830f36e6e6b8efac0534e0f099683462e77fe142eb0903fd82f49bdc05a4e63dfdfe0c6e3247188ea1acb591e49ff03be2ddcaf0fb59e1f86d59aa1b72b4aa76b1d137c51a0b8e9db7dc34515bc9df000675c9b64efb7310b318c3c457f7bb1"], 0x50)
r2 = socket$kcm(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}})
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1e, 0x11, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4eb}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@cb_func={0x18, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x2, 0xb, &(0x7f00000001c0)=""/11, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x5, 0x6, 0x2, 0xc}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r1, 0xffffffffffffffff, r1, r1, 0xffffffffffffffff], 0x0, 0x10, 0x240}, 0x94)
socket$inet6(0xa, 0x2, 0x7)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000b80)=[@in={0x2, 0x4e24, @loopback}], 0x10)
futex(&(0x7f0000000000)=0x2, 0x1, 0x0, 0x0, 0x0, 0x1)
sendmsg$inet_sctp(r4, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000500)="1b", 0x2a000}], 0x1, 0x0, 0x0, 0x4000083}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r5=>0x0})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6)
r8 = gettid()
clock_nanosleep(0x9, 0x0, &(0x7f0000000140)={0x77359400}, 0x0)
rt_sigqueueinfo(r8, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff})
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x40718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
geteuid()
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000130001000400"/20, @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0)
r9 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r9, 0x8922, &(0x7f0000000080)={'dummy0\x00'})
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r1}, 0x38)
add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)

103.842717ms ago: executing program 0 (id=3738):
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0719, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x1, @perf_bp={0x0}, 0xa822, 0x4005, 0xb, 0x3, 0x6, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (fail_nth: 4)

42.822709ms ago: executing program 3 (id=3739):
r0 = socket(0x10, 0x3, 0x0)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$set_timeout(0xf, r1, 0xc740)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$kcm(r3, &(0x7f0000000200)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r4, 0x4}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)='-', 0x1}], 0x1}, 0x4c00c)
ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={@loopback, @remote, @mcast2, 0xfffffff9, 0x8, 0xe6, 0x400, 0x0, 0x40001, r4})
r5 = socket$inet6(0xa, 0x80002, 0x0)
bind$inet6(r5, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x23}}, 0x80ad}, 0x1c)
r6 = socket$inet6(0xa, 0x2, 0x0)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x2}, 0x8)
sendto$inet6(r7, &(0x7f00000005c0)="f5", 0x1, 0x20000880, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @private1, 0xfffffffd}, 0x1c)
r8 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r8, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r8, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
setsockopt$sock_int(r8, 0x1, 0x28, &(0x7f00000000c0)=0xc, 0x4)
sendto$inet6(r8, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt(r9, 0x1, 0x4a, &(0x7f0000000000)="11237c5c", 0x4)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8)
bind$inet6(r6, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x10000}, 0x1c)
syz_emit_ethernet(0x32, &(0x7f0000000000)={@random="5bb65d3f2511", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1e, 0x24, 0x65, 0x0, 0x3, 0x11, 0x0, @empty, @empty=0xe0000001}, {0x4e20, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x6, 0x100}}}}}}}, 0x0)
ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000080)=0x1)
sendto$inet6(r0, &(0x7f0000000000)="7800000018002507b9409b14ffff00000202be04020506050e130204430009003f0020480a0000000d0085a168d0bf46d32345653600648d27000b000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a3200040016000b000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0)
r10 = syz_open_dev$MSR(&(0x7f0000000180), 0x10001, 0x0)
read$msr(r10, &(0x7f0000000400)=""/186, 0xba)

0s ago: executing program 6 (id=3740):
socket$nl_route(0x10, 0x3, 0x0)
unshare(0x24020400)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0, @ANYRES64=r0, @ANYRESDEC=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
r2 = perf_event_open(&(0x7f00000012c0)={0x2, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x9, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
openat$null(0xffffffffffffff9c, 0x0, 0x188202, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = io_uring_setup(0xaae, &(0x7f0000000300)={0x0, 0xbfffeffb, 0x800, 0x7, 0x2})
io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x2300000000000000, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@noload}, {@stripe={'stripe', 0x3d, 0xdc}}, {@data_err_abort}, {@noload}, {@data_err_ignore}, {@auto_da_alloc}]}, 0xff, 0x451, &(0x7f0000000940)="$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")
r4 = mq_open(&(0x7f0000000a00)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xeeux\x00\xbf@\xf4\x1c\xbce\xca\x97\xd5pkv\x88L\xe8$\xef\xfeI\xdaW1\xfcg\xa1\xdb$,0y$\xcd{zl.\xae\x805\xa8\xd6\x85\x15\xd2\x0e~\xcc\x90\x97\xe8h\v\x1a9X\a\xca{\x11#\x95m{U\xe5-\xabRw\xcafy\xe6\aNhX4Ll[\x14\x15<z\xb2\x03d\xad\x925\xbfP\x1b\xea\vt\xe9C\xe9\xb4R\x85*\xdc\xc4@\xee\xd2\xae\x06\x1a\xe1\xd2s\x01\xb8\xf3\xf2\rr\x01mq\xd2\xaf\xe2{\xe4\x1a\xd3Z\x01C\xfbW', 0x6e93ebbbcc0884f2, 0x1c4, &(0x7f0000000040)={0x0, 0x2, 0x4, 0x3})
setuid(0xee00)
r5 = msgget$private(0x0, 0x0)
msgsnd(r5, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0)
mq_timedreceive(r4, &(0x7f0000000280)=""/211, 0xd3, 0x800000000000, 0x0)
r6 = inotify_init()
inotify_add_watch(r6, &(0x7f00000000c0)='.\x00', 0x5000009)
r7 = inotify_init1(0x80000)
inotify_add_watch(r7, &(0x7f0000000240)='.\x00', 0x60000726)
r8 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r8, 0x402, 0x8000003d)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r9)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)

kernel console output (not intermixed with test programs):

ng mounted at /132/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  437.297610][T16890] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  437.349158][   T28] kauditd_printk_skb: 7 callbacks suppressed
[  437.349175][   T28] audit: type=1400 audit(1774942268.977:7310): avc:  denied  { write open } for  pid=16882 comm="syz.4.3309" path="/132/bus/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  437.407044][T16890] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  437.426747][   T28] audit: type=1400 audit(1774942268.977:7311): avc:  denied  { write } for  pid=16896 comm="syz.0.3313" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  437.576213][T16890] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  437.658712][T16909] loop2: detected capacity change from 0 to 512
[  437.674536][T14858] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  437.718179][T16909] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  437.731274][T16909] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  437.750238][T16914] loop0: detected capacity change from 0 to 256
[  437.807587][T16914] FAT-fs (loop0): Directory bread(block 64) failed
[  437.814340][T16914] FAT-fs (loop0): Directory bread(block 65) failed
[  437.821001][T16914] FAT-fs (loop0): Directory bread(block 66) failed
[  437.827584][T16914] FAT-fs (loop0): Directory bread(block 67) failed
[  437.834153][T16914] FAT-fs (loop0): Directory bread(block 68) failed
[  437.840788][T16914] FAT-fs (loop0): Directory bread(block 69) failed
[  437.847388][T16914] FAT-fs (loop0): Directory bread(block 70) failed
[  437.854089][T16914] FAT-fs (loop0): Directory bread(block 71) failed
[  437.860767][T16914] FAT-fs (loop0): Directory bread(block 72) failed
[  437.867527][T16914] FAT-fs (loop0): Directory bread(block 73) failed
[  438.336774][   T28] audit: type=1400 audit(1774942269.959:7312): avc:  denied  { setopt } for  pid=16915 comm="syz.3.3317" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  438.442861][   T28] audit: type=1400 audit(1774942270.043:7313): avc:  denied  { append } for  pid=16917 comm="syz.3.3318" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  438.506305][   T28] audit: type=1400 audit(1774942270.043:7314): avc:  denied  { open } for  pid=16917 comm="syz.3.3318" path="/dev/ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  438.555290][T15516] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  438.599271][T16923] loop2: detected capacity change from 0 to 512
[  438.674444][   T28] audit: type=1400 audit(1774942270.277:7315): avc:  denied  { bind } for  pid=16926 comm="syz.2.3321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  438.726554][   T28] audit: type=1400 audit(1774942270.324:7316): avc:  denied  { create } for  pid=16928 comm="syz.2.3322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  438.767000][   T28] audit: type=1400 audit(1774942270.342:7317): avc:  denied  { ioctl } for  pid=16928 comm="syz.2.3322" path="socket:[53683]" dev="sockfs" ino=53683 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  438.901934][T16935] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  439.007388][T15516] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  439.255117][T14508] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  439.313151][T16941] set_capacity_and_notify: 2 callbacks suppressed
[  439.313169][T16941] loop2: detected capacity change from 0 to 512
[  439.330330][T16943] loop4: detected capacity change from 0 to 512
[  439.336852][   T28] audit: type=1400 audit(1774942270.894:7318): avc:  denied  { name_bind } for  pid=16942 comm="syz.0.3329" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  439.365262][T16943] EXT4-fs: Ignoring removed mblk_io_submit option
[  439.374623][   T28] audit: type=1400 audit(1774942270.894:7319): avc:  denied  { node_bind } for  pid=16942 comm="syz.0.3329" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[  439.377066][T16941] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  439.409885][T16947] Cannot find add_set index 2 as target
[  439.423981][T16943] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  439.438011][T16941] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  439.457048][T16949] loop3: detected capacity change from 0 to 512
[  439.485451][T16943] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  439.499242][T16943] ext4 filesystem being mounted at /133/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  439.500839][T16949] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  439.558592][T16949] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  439.610896][T14508] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  439.655975][T16967] loop4: detected capacity change from 0 to 512
[  439.698629][T16967] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  439.776293][T16967] ext4 filesystem being mounted at /134/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  440.433814][T14858] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  440.496898][T17053] loop0: detected capacity change from 0 to 512
[  440.544139][T15516] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  440.581262][T17071] loop3: detected capacity change from 0 to 512
[  440.626943][ T9240] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  440.640144][T17071] EXT4-fs: Ignoring removed mblk_io_submit option
[  440.665110][ T9240] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  440.678720][T17071] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  440.705434][T17079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  440.724515][T17076] syzkaller0: entered promiscuous mode
[  440.731012][T17076] syzkaller0: entered allmulticast mode
[  440.738935][T11192] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  440.747291][T14508] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  440.747637][T17079] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  440.757817][T17071] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  440.777447][T17071] ext4 filesystem being mounted at /90/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  440.863973][T14858] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  440.875702][T17084] loop2: detected capacity change from 0 to 512
[  440.901573][T17084] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  440.940202][T17084] EXT4-fs (loop2): invalid journal inode
[  440.959455][T17084] EXT4-fs (loop2): can't get journal size
[  440.986209][T17084] EXT4-fs (loop2): 1 truncate cleaned up
[  441.003261][T17084] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  441.077503][T11192] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  441.099939][T17093] loop4: detected capacity change from 0 to 512
[  441.106769][T17093] EXT4-fs: Ignoring removed mblk_io_submit option
[  441.116155][T17093] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  441.135719][T17093] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  441.148555][T17093] ext4 filesystem being mounted at /136/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  441.204777][T14508] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  441.231836][T17102] 9p: Bad value for 'wfdno'
[  441.267322][T17104] loop4: detected capacity change from 0 to 4096
[  441.280352][T17104] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  441.329377][T17108] loop0: detected capacity change from 0 to 512
[  441.407277][T17114] __nla_validate_parse: 54 callbacks suppressed
[  441.407294][T17114] netlink: 288 bytes leftover after parsing attributes in process `syz.5.3348'.
[  441.438997][T14508] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  441.498214][T17120] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  441.545731][T17128] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3355'.
[  441.558530][T17120] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  441.573219][T17133] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3355'.
[  441.600429][T15516] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  441.616476][T17120] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  441.644683][T17137] 9p: Bad value for 'wfdno'
[  441.659322][T17120] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  441.696557][T17146] netlink: 288 bytes leftover after parsing attributes in process `syz.2.3361'.
[  441.725657][T11192] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  441.742187][T11192] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  441.754703][T11192] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  441.773549][T11192] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  441.790003][T17148] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  441.885811][T14508] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  442.050165][T17160] hub 9-0:1.0: USB hub found
[  442.054930][T17160] hub 9-0:1.0: 8 ports detected
[  442.186299][T17172] 9p: Bad value for 'rfdno'
[  442.225890][ T3537] IPVS: starting estimator thread 0...
[  442.307841][T17184] xt_CT: You must specify a L4 protocol and not use inversions on it
[  442.354921][T17191] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  442.412317][T17178] IPVS: using max 2496 ests per chain, 124800 per kthread
[  442.478655][T16020] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  442.644058][T17200] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3376'.
[  442.654290][T17200] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3376'.
[  443.048326][T17207] hub 9-0:1.0: USB hub found
[  443.054146][T17207] hub 9-0:1.0: 8 ports detected
[  443.170700][T17209] 9p: Bad value for 'rfdno'
[  443.284310][T17213] FAULT_INJECTION: forcing a failure.
[  443.284310][T17213] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  443.298347][T17213] CPU: 0 UID: 0 PID: 17213 Comm: syz.5.3385 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  443.298383][T17213] Tainted: [W]=WARN
[  443.298391][T17213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  443.298432][T17213] Call Trace:
[  443.298437][T17213]  <TASK>
[  443.298444][T17213]  __dump_stack+0x1d/0x30
[  443.298471][T17213]  dump_stack_lvl+0x95/0xd0
[  443.298499][T17213]  dump_stack+0x15/0x1b
[  443.298525][T17213]  should_fail_ex+0x263/0x280
[  443.298619][T17213]  should_fail+0xb/0x20
[  443.298642][T17213]  should_fail_usercopy+0x1a/0x20
[  443.298672][T17213]  _copy_from_user+0x1c/0xb0
[  443.298739][T17213]  __sys_bpf+0x183/0x7e0
[  443.298830][T17213]  __x64_sys_bpf+0x41/0x50
[  443.298850][T17213]  x64_sys_call+0x10cb/0x3020
[  443.298881][T17213]  do_syscall_64+0x12c/0x370
[  443.298988][T17213]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  443.299007][T17213] RIP: 0033:0x7f2dc15dc819
[  443.299022][T17213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  443.299113][T17213] RSP: 002b:00007f2dc002f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  443.299133][T17213] RAX: ffffffffffffffda RBX: 00007f2dc1855fa0 RCX: 00007f2dc15dc819
[  443.299173][T17213] RDX: 0000000000000038 RSI: 0000200000000900 RDI: 000000000000001a
[  443.299188][T17213] RBP: 00007f2dc002f090 R08: 0000000000000000 R09: 0000000000000000
[  443.299236][T17213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  443.299247][T17213] R13: 00007f2dc1856038 R14: 00007f2dc1855fa0 R15: 00007fff1565fc18
[  443.299278][T17213]  </TASK>
[  443.531123][   T28] kauditd_printk_skb: 51 callbacks suppressed
[  443.531138][   T28] audit: type=1400 audit(1774942275.793:7371): avc:  denied  { connect } for  pid=17216 comm="syz.0.3386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  443.716455][T17228] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  443.740588][T16020] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  443.764317][T17230] EXT4-fs: Ignoring removed mblk_io_submit option
[  443.784513][T17230] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  443.835877][T17230] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  443.855425][T17239] 9p: Bad value for 'rfdno'
[  443.860811][T17230] ext4 filesystem being mounted at /58/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  443.895088][   T28] audit: type=1326 audit(1774942276.167:7372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17240 comm="syz.4.3395" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee22dec819 code=0x0
[  443.995337][T17243] EXT4-fs: Ignoring removed mblk_io_submit option
[  444.008486][T17243] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  444.021816][T17243] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  444.034933][T17243] ext4 filesystem being mounted at /151/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  444.096626][T14508] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  444.331726][   T28] audit: type=1400 audit(1774942276.578:7373): avc:  denied  { bind } for  pid=17248 comm="syz.3.3398" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  444.397308][T17253] 9p: Bad value for 'wfdno'
[  444.433219][T17253] netlink: 'syz.0.3392': attribute type 3 has an invalid length.
[  444.487818][   T28] audit: type=1400 audit(1774942277.694:7374): avc:  denied  { create } for  pid=17254 comm="syz.2.3399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  444.507921][T17253] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3392'.
[  444.528060][T17266] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3401'.
[  444.545605][T15590] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  444.561036][   T28] audit: type=1400 audit(1774942277.694:7375): avc:  denied  { ioctl } for  pid=17254 comm="syz.2.3399" path="socket:[54670]" dev="sockfs" ino=54670 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  444.587252][T17266] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3401'.
[  444.619371][T17269] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  444.634492][   T28] audit: type=1400 audit(1774942277.778:7376): avc:  denied  { setattr } for  pid=17264 comm="syz.4.3401" name="NETLINK" dev="sockfs" ino=54219 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  444.683735][T17272] netlink: 'syz.3.3404': attribute type 12 has an invalid length.
[  444.695945][T15590] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  444.705370][T17272] netlink: 'syz.3.3404': attribute type 29 has an invalid length.
[  444.713385][   T28] audit: type=1400 audit(1774942277.778:7377): avc:  denied  { name_connect } for  pid=17252 comm="syz.0.3392" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[  444.734540][T17272] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3404'.
[  444.779218][   T28] audit: type=1326 audit(1774942277.984:7378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17279 comm="syz.5.3406" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2dc15dc819 code=0x0
[  444.820350][T17284] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  444.841005][   T28] audit: type=1400 audit(1774942278.040:7379): avc:  denied  { setopt } for  pid=17285 comm="syz.4.3409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  444.895868][T17284] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  444.917359][   T28] audit: type=1400 audit(1774942279.114:7380): avc:  denied  { search } for  pid=17291 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  444.942301][T17299] set_capacity_and_notify: 6 callbacks suppressed
[  444.942320][T17299] loop5: detected capacity change from 0 to 512
[  444.966643][T17299] EXT4-fs: Ignoring removed mblk_io_submit option
[  445.000816][T17284] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  445.015451][T17299] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  445.040614][T17299] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  445.053828][T17299] ext4 filesystem being mounted at /61/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  445.106363][T17284] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  445.190359][T17321] loop4: detected capacity change from 0 to 4096
[  445.208709][T15590] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  445.229755][T17321] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  445.269247][T17319] vxcan1: tx drop: invalid da for name 0x0000000000000002
[  445.334064][T14508] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  445.460370][T17347] loop4: detected capacity change from 0 to 512
[  445.508082][T17347] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  445.538417][T17347] ext4 filesystem being mounted at /160/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  445.656564][T17366] loop3: detected capacity change from 0 to 512
[  445.704228][T17366] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  445.758577][T17378] loop2: detected capacity change from 0 to 512
[  445.821302][T17378] EXT4-fs: Ignoring removed mblk_io_submit option
[  445.867481][T17391] loop4: detected capacity change from 0 to 512
[  445.880433][T17378] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  445.912697][T17391] EXT4-fs: Ignoring removed mblk_io_submit option
[  445.927037][T17391] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  445.948358][T17378] ext4 filesystem being mounted at /63/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  445.978373][T17391] ext4 filesystem being mounted at /162/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  446.351657][T11184] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  446.382743][T11184] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  446.414022][T11184] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  446.437724][T17418] hub 9-0:1.0: USB hub found
[  446.439442][T11184] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  446.454914][T17418] hub 9-0:1.0: 8 ports detected
[  446.587238][T17459] loop2: detected capacity change from 0 to 512
[  446.619411][T17459] EXT4-fs error (device loop2): ext4_map_blocks:786: inode #11: block 10: comm syz.2.3436: lblock 0 mapped to illegal pblock 10 (length 1)
[  446.671246][T17459] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  446.671363][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  446.686994][    C0] EXT4-fs (loop2): initial error at time 1774942282: ext4_map_blocks:786: inode 11: block 10
[  446.697249][    C0] EXT4-fs (loop2): last error at time 1774942282: ext4_map_blocks:786: inode 11: block 10
[  446.715221][T17459] EXT4-fs (loop2): Remounting filesystem read-only
[  446.721980][T17459] EXT4-fs warning (device loop2): ext4_evict_inode:268: couldn't mark inode dirty (err -30)
[  446.738410][T17459] EXT4-fs (loop2): 1 orphan inode deleted
[  446.905174][T17498] loop3: detected capacity change from 0 to 512
[  447.625350][T17517] random: crng reseeded on system resumption
[  447.685054][T17517] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  447.712086][T17517] bond1 (unregistering): Released all slaves
[  447.937572][T17498] EXT4-fs: Ignoring removed mblk_io_submit option
[  447.951069][T17498] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  447.989854][T17498] ext4 filesystem being mounted at /106/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  448.339376][T17534] __nla_validate_parse: 4 callbacks suppressed
[  448.339409][T17534] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3449'.
[  448.512128][T17540] loop3: detected capacity change from 0 to 512
[  448.577929][T17540] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  448.658695][T17546] 9p: Bad value for 'wfdno'
[  448.686338][T17546] netlink: 'syz.4.3453': attribute type 3 has an invalid length.
[  448.735547][T17546] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3453'.
[  448.998434][T17556] loop3: detected capacity change from 0 to 256
[  449.145870][T17556] FAT-fs (loop3): Directory bread(block 64) failed
[  449.152481][T17556] FAT-fs (loop3): Directory bread(block 65) failed
[  449.159117][T17556] FAT-fs (loop3): Directory bread(block 66) failed
[  449.165725][T17556] FAT-fs (loop3): Directory bread(block 67) failed
[  449.172591][T17556] FAT-fs (loop3): Directory bread(block 68) failed
[  449.179250][T17556] FAT-fs (loop3): Directory bread(block 69) failed
[  449.185853][T17556] FAT-fs (loop3): Directory bread(block 70) failed
[  449.192586][T17556] FAT-fs (loop3): Directory bread(block 71) failed
[  449.199504][T17556] FAT-fs (loop3): Directory bread(block 72) failed
[  449.206162][T17556] FAT-fs (loop3): Directory bread(block 73) failed
[  449.228004][T17556] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3454'.
[  449.237327][T17556] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3454'.
[  449.246975][T17556] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3454'.
[  449.256084][T17556] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3454'.
[  449.265219][T17556] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3454'.
[  449.274899][T17556] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3454'.
[  449.284264][T17556] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3454'.
[  449.293375][T17556] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3454'.
[  449.818152][T17566] netlink: 'syz.4.3458': attribute type 10 has an invalid length.
[  449.855533][T17566] hsr0: entered promiscuous mode
[  449.866952][T17566] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  449.899218][T17566] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  449.923535][   T28] kauditd_printk_skb: 52 callbacks suppressed
[  449.923566][   T28] audit: type=1400 audit(1774942286.800:7433): avc:  denied  { getopt } for  pid=17545 comm="syz.0.3463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  449.977271][T17566] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  449.988714][   T28] audit: type=1400 audit(1774942286.837:7434): avc:  denied  { mount } for  pid=17564 comm="syz.4.3458" name="/" dev="configfs" ino=2098 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  450.088489][   T28] audit: type=1400 audit(1774942286.903:7435): avc:  denied  { create } for  pid=17564 comm="syz.4.3458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  450.249108][   T28] audit: type=1400 audit(1774942286.903:7436): avc:  denied  { write } for  pid=17564 comm="syz.4.3458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  450.705794][   T28] audit: type=1400 audit(1774942286.903:7437): avc:  denied  { create } for  pid=17564 comm="syz.4.3458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  450.725645][   T28] audit: type=1400 audit(1774942286.903:7438): avc:  denied  { write } for  pid=17564 comm="syz.4.3458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  450.913512][T17582] set_capacity_and_notify: 1 callbacks suppressed
[  450.913599][T17582] loop3: detected capacity change from 0 to 512
[  451.062680][   T28] audit: type=1400 audit(1774942287.520:7439): avc:  denied  { mount } for  pid=17570 comm="syz.5.3460" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  451.106802][   T28] audit: type=1400 audit(1774942287.520:7440): avc:  denied  { read } for  pid=17570 comm="syz.5.3460" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  451.162818][T17582] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  451.255797][   T28] audit: type=1400 audit(1774942289.034:7441): avc:  denied  { read } for  pid=17597 comm="syz.4.3472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  451.478222][T17610] loop3: detected capacity change from 0 to 512
[  451.503829][   T28] audit: type=1400 audit(1774942289.043:7442): avc:  denied  { setopt } for  pid=17596 comm="syz.0.3471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  451.504870][T17610] EXT4-fs: Ignoring removed mblk_io_submit option
[  452.128590][T17614] loop4: detected capacity change from 0 to 256
[  452.141295][T17615] loop0: detected capacity change from 0 to 256
[  453.581267][T17610] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  454.668578][T17610] EXT4-fs warning (device loop3): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop3.
[  454.704381][T17615] FAT-fs (loop0): Directory bread(block 64) failed
[  454.711054][T17615] FAT-fs (loop0): Directory bread(block 65) failed
[  454.717609][T17615] FAT-fs (loop0): Directory bread(block 66) failed
[  454.724224][T17615] FAT-fs (loop0): Directory bread(block 67) failed
[  454.730748][T17615] FAT-fs (loop0): Directory bread(block 68) failed
[  454.737376][T17615] FAT-fs (loop0): Directory bread(block 69) failed
[  454.743969][T17615] FAT-fs (loop0): Directory bread(block 70) failed
[  454.750492][T17615] FAT-fs (loop0): Directory bread(block 71) failed
[  454.757100][T17615] FAT-fs (loop0): Directory bread(block 72) failed
[  454.763647][T17615] FAT-fs (loop0): Directory bread(block 73) failed
[  454.792867][T17614] FAT-fs (loop4): Directory bread(block 64) failed
[  454.799456][T17614] FAT-fs (loop4): Directory bread(block 65) failed
[  454.806034][T17614] FAT-fs (loop4): Directory bread(block 66) failed
[  454.812630][T17614] FAT-fs (loop4): Directory bread(block 67) failed
[  454.819317][T17614] FAT-fs (loop4): Directory bread(block 68) failed
[  454.825878][T17614] FAT-fs (loop4): Directory bread(block 69) failed
[  454.832453][T17614] FAT-fs (loop4): Directory bread(block 70) failed
[  454.839045][T17614] FAT-fs (loop4): Directory bread(block 71) failed
[  454.845592][T17614] FAT-fs (loop4): Directory bread(block 72) failed
[  454.852279][T17614] FAT-fs (loop4): Directory bread(block 73) failed
[  454.961834][T17622] __nla_validate_parse: 22 callbacks suppressed
[  454.961850][T17622] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3477'.
[  455.029646][T17622] 8021q: adding VLAN 0 to HW filter on device bond1
[  455.051228][T17624] bond1: (slave macvlan1): Enslaving as an active interface with an up link
[  455.085193][T17622] bond1 (unregistering): (slave macvlan1): Releasing backup interface
[  455.102123][T17627] loop0: detected capacity change from 0 to 512
[  455.123316][T17629] loop3: detected capacity change from 0 to 512
[  455.140904][T17622] bond1 (unregistering): Released all slaves
[  455.176469][T17627] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  455.204399][T17629] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  455.234223][T17638] loop2: detected capacity change from 0 to 128
[  455.336109][T17638] msdos: Bad value for 'gid'
[  455.348268][T17642] FAULT_INJECTION: forcing a failure.
[  455.348268][T17642] name failslab, interval 1, probability 0, space 0, times 0
[  455.348305][T17642] CPU: 1 UID: 0 PID: 17642 Comm: syz.5.3484 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  455.348387][T17642] Tainted: [W]=WARN
[  455.348393][T17642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  455.348408][T17642] Call Trace:
[  455.348414][T17642]  <TASK>
[  455.348428][T17642]  __dump_stack+0x1d/0x30
[  455.348461][T17642]  dump_stack_lvl+0x95/0xd0
[  455.348524][T17642]  dump_stack+0x15/0x1b
[  455.348548][T17642]  should_fail_ex+0x263/0x280
[  455.348612][T17642]  should_failslab+0x8c/0xb0
[  455.348638][T17642]  kmem_cache_alloc_noprof+0x66/0x400
[  455.348727][T17642]  ? radix_tree_node_alloc+0x8a/0x1f0
[  455.348767][T17642]  radix_tree_node_alloc+0x8a/0x1f0
[  455.348792][T17642]  idr_get_free+0x1fa/0x550
[  455.348878][T17642]  idr_alloc_u32+0xf2/0x1a0
[  455.348914][T17642]  tcf_idr_check_alloc+0x1ff/0x2e0
[  455.348944][T17642]  tcf_ife_init+0x31a/0x8c0
[  455.349053][T17642]  ? __pfx_tcf_ife_init+0x10/0x10
[  455.349088][T17642]  tcf_action_init_1+0x395/0x4d0
[  455.349160][T17642]  tcf_action_init+0x29c/0x700
[  455.349240][T17642]  tc_ctl_action+0x29b/0x830
[  455.349291][T17642]  ? __pfx_tc_ctl_action+0x10/0x10
[  455.349369][T17642]  rtnetlink_rcv_msg+0x6a7/0x720
[  455.349398][T17642]  netlink_rcv_skb+0x123/0x220
[  455.349487][T17642]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  455.349521][T17642]  rtnetlink_rcv+0x1c/0x30
[  455.349545][T17642]  netlink_unicast+0x5c0/0x690
[  455.349585][T17642]  netlink_sendmsg+0x5c8/0x6f0
[  455.349653][T17642]  ? __pfx_netlink_sendmsg+0x10/0x10
[  455.349673][T17642]  ____sys_sendmsg+0x563/0x5b0
[  455.349799][T17642]  ___sys_sendmsg+0x195/0x1e0
[  455.349902][T17642]  __x64_sys_sendmsg+0xd4/0x160
[  455.349932][T17642]  x64_sys_call+0x194c/0x3020
[  455.349985][T17642]  do_syscall_64+0x12c/0x370
[  455.350016][T17642]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  455.350062][T17642] RIP: 0033:0x7f2dc15dc819
[  455.350081][T17642] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  455.350103][T17642] RSP: 002b:00007f2dc002f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  455.350127][T17642] RAX: ffffffffffffffda RBX: 00007f2dc1855fa0 RCX: 00007f2dc15dc819
[  455.350145][T17642] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005
[  455.350210][T17642] RBP: 00007f2dc002f090 R08: 0000000000000000 R09: 0000000000000000
[  455.350226][T17642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  455.350242][T17642] R13: 00007f2dc1856038 R14: 00007f2dc1855fa0 R15: 00007fff1565fc18
[  455.350266][T17642]  </TASK>
[  455.389890][T17646] loop3: detected capacity change from 0 to 512
[  455.505910][T17646] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  455.577113][T17638] msdos: Bad value for 'gid'
[  455.755281][T17631] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3481'.
[  455.805153][   T28] kauditd_printk_skb: 2 callbacks suppressed
[  455.805177][   T28] audit: type=1400 audit(1774942293.309:7445): avc:  denied  { map_create } for  pid=17652 comm="syz.4.3487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  455.835457][T17631] loop2: detected capacity change from 0 to 1024
[  455.875384][T17631] ext4: Invalid gid '0x00000000ffffffff'
[  455.891113][   T28] audit: type=1400 audit(1774942293.327:7446): avc:  denied  { prog_load } for  pid=17652 comm="syz.4.3487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  455.972655][T17655] netlink: 228 bytes leftover after parsing attributes in process `syz.5.3488'.
[  455.992603][   T28] audit: type=1400 audit(1774942293.327:7447): avc:  denied  { bpf } for  pid=17652 comm="syz.4.3487" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  456.059967][   T28] audit: type=1400 audit(1774942293.327:7448): avc:  denied  { perfmon } for  pid=17652 comm="syz.4.3487" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  456.111037][   T28] audit: type=1400 audit(1774942293.337:7449): avc:  denied  { read write } for  pid=17630 comm="syz.2.3481" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  456.170021][   T28] audit: type=1400 audit(1774942293.337:7450): avc:  denied  { open } for  pid=17630 comm="syz.2.3481" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  456.209687][   T28] audit: type=1400 audit(1774942293.337:7451): avc:  denied  { ioctl } for  pid=17630 comm="syz.2.3481" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  456.260328][   T28] audit: type=1400 audit(1774942293.365:7452): avc:  denied  { mounton } for  pid=17630 comm="syz.2.3481" path="/72/file0" dev="tmpfs" ino=406 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  456.330566][   T28] audit: type=1400 audit(1774942293.374:7453): avc:  denied  { write } for  pid=17656 comm="syz.4.3489" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  456.361348][T17662] loop5: detected capacity change from 0 to 512
[  456.369092][T17657] hub 9-0:1.0: USB hub found
[  456.377254][T17657] hub 9-0:1.0: 8 ports detected
[  456.378366][   T28] audit: type=1400 audit(1774942293.374:7454): avc:  denied  { execmem } for  pid=17656 comm="syz.4.3489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  456.444334][T17662] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  456.520124][T17670] loop0: detected capacity change from 0 to 512
[  456.565991][T17677] netlink: 564 bytes leftover after parsing attributes in process `syz.5.3495'.
[  456.575040][T17670] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  456.607334][T17677] netlink: 564 bytes leftover after parsing attributes in process `syz.5.3495'.
[  456.663330][T17680] openvswitch: netlink: Flow actions attr not present in new flow.
[  456.770086][T17682] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  456.783495][T17683] loop5: detected capacity change from 0 to 512
[  456.841362][T17687] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3500'.
[  457.049602][T17694] loop4: detected capacity change from 0 to 8192
[  457.181954][T13660]  loop4: p2 p3 p4 < >
[  457.206960][T17697] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  457.229258][T13660] loop4: partition table partially beyond EOD, truncated
[  457.329944][T13660] loop4: p2 size 590592 extends beyond EOD, truncated
[  457.385077][T17703] loop3: detected capacity change from 0 to 512
[  457.389626][T13660] loop4: p3 start 4294967295 is beyond EOD, truncated
[  457.429838][T13660] loop4: p4 start 117440516 is beyond EOD, truncated
[  457.440444][T17694]  loop4: p2 p3 p4 < >
[  457.440453][T17694] loop4: partition table partially beyond EOD, truncated
[  457.440515][T17694] loop4: p2 size 590592 extends beyond EOD, truncated
[  457.441076][T17694] loop4: p3 start 4294967295 is beyond EOD, truncated
[  457.441097][T17694] loop4: p4 start 117440516 is beyond EOD, truncated
[  457.460154][T17703] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  457.650539][T17719] loop0: detected capacity change from 0 to 512
[  457.702660][T13712] udevd[13712]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  457.718216][T17719] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  457.750015][T17728] loop4: detected capacity change from 0 to 512
[  457.759623][T17723] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  457.813059][T17728] ext4 filesystem being mounted at /179/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  457.882771][T17723] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  457.998313][T17735] loop0: detected capacity change from 0 to 512
[  458.040198][T17723] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  458.040770][T17735] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  458.221268][T17723] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  458.243973][T17740] openvswitch: netlink: Flow actions attr not present in new flow.
[  458.626428][T17743] loop5: detected capacity change from 0 to 8192
[  458.730917][T13712]  loop5: p2 p3 p4 < >
[  458.735111][T13712] loop5: partition table partially beyond EOD, truncated
[  458.747690][T11192] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  458.757826][T13712] loop5: p2 size 590592 extends beyond EOD, truncated
[  458.794056][T11192] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  458.862004][T11192] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  458.880640][T13712] loop5: p3 start 4294967295 is beyond EOD, truncated
[  458.917681][T13712] loop5: p4 start 117440516 is beyond EOD, truncated
[  458.935500][T11192] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  458.969361][T17743]  loop5: p2 p3 p4 < >
[  458.973492][T17743] loop5: partition table partially beyond EOD, truncated
[  458.980802][T17743] loop5: p2 size 590592 extends beyond EOD, truncated
[  458.988737][T17743] loop5: p3 start 4294967295 is beyond EOD, truncated
[  458.995615][T17743] loop5: p4 start 117440516 is beyond EOD, truncated
[  459.176278][T17752] netlink: 'syz.4.3518': attribute type 10 has an invalid length.
[  459.204654][T17752] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3518'.
[  459.243600][T17752] ipvlan2: entered promiscuous mode
[  459.275380][T17753] SELinux: failed to load policy
[  459.318538][T17756] openvswitch: netlink: Flow actions attr not present in new flow.
[  459.331943][T17759] loop5: detected capacity change from 0 to 512
[  459.669004][T17754] hub 9-0:1.0: USB hub found
[  459.673780][T17754] hub 9-0:1.0: 8 ports detected
[  459.949969][T13696]  loop2: p2 p3 p4 < >
[  459.966813][T13696] loop2: partition table partially beyond EOD, truncated
[  460.016646][T13696] loop2: p2 size 590592 extends beyond EOD, truncated
[  460.029294][T17759] ext4 filesystem being mounted at /81/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  460.071939][T13696] loop2: p3 start 4294967295 is beyond EOD, truncated
[  460.089163][T17763] EXT4-fs (loop0): 1 orphan inode deleted
[  460.095623][T13696] loop2: p4 start 117440516 is beyond EOD, truncated
[  460.114079][T17766]  loop2: p2 p3 p4 < >
[  460.118208][T17766] loop2: partition table partially beyond EOD, truncated
[  460.125403][T17766] loop2: p2 size 590592 extends beyond EOD, truncated
[  460.133319][T17766] loop2: p3 start 4294967295 is beyond EOD, truncated
[  460.140217][T17766] loop2: p4 start 117440516 is beyond EOD, truncated
[  460.149015][ T3001]  loop2: p2 p3 p4 < >
[  460.153231][ T3001] loop2: partition table partially beyond EOD, truncated
[  460.179006][ T3001] loop2: p2 size 590592 extends beyond EOD, truncated
[  460.190250][ T3001] loop2: p3 start 4294967295 is beyond EOD, truncated
[  460.200903][T17781] netlink: 564 bytes leftover after parsing attributes in process `syz.4.3525'.
[  460.203538][ T3001] loop2: p4 start 117440516 is beyond EOD, truncated
[  460.219555][T17781] netlink: 564 bytes leftover after parsing attributes in process `syz.4.3525'.
[  460.247890][T17779] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  460.324971][T13712] udevd[13712]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[  460.356976][T13712] udevd[13712]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[  460.388629][T17787] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  460.400544][T13712] udevd[13712]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[  460.419619][T17790] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  460.473803][T17797] openvswitch: netlink: Flow actions attr not present in new flow.
[  460.648260][T17802] openvswitch: netlink: Flow actions attr not present in new flow.
[  461.622485][T17790] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  461.715124][T13712]  loop2: p2 p3 p4 < >
[  461.719680][T13696]  loop4: p2 p3 p4 < >
[  461.726808][T13712] loop2: partition table partially beyond EOD, truncated
[  461.734998][T13712] loop2: p2 size 590592 extends beyond EOD, truncated
[  461.741987][T13696] loop4: partition table partially beyond EOD, truncated
[  461.753448][T17790] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  461.765375][T13696] loop4: p2 size 590592 extends beyond EOD, truncated
[  461.772660][T13712] loop2: p3 start 4294967295 is beyond EOD, truncated
[  461.779593][T13696] loop4: p3 start 4294967295 is beyond EOD, truncated
[  461.786481][T13696] loop4: p4 start 117440516 is beyond EOD, truncated
[  461.793371][T13712] loop2: p4 start 117440516 is beyond EOD, truncated
[  461.804896][T17804]  loop2: p2 p3 p4 < >
[  461.809065][T17804] loop2: partition table partially beyond EOD, truncated
[  461.816282][T17804] loop2: p2 size 590592 extends beyond EOD, truncated
[  461.823944][T17806]  loop4: p2 p3 p4 < >
[  461.828063][T17806] loop4: partition table partially beyond EOD, truncated
[  461.834810][T17804] loop2: p3 start 4294967295 is beyond EOD, truncated
[  461.835339][T17806] loop4: p2 size 590592 extends beyond EOD, truncated
[  461.842006][T17804] loop2: p4 start 117440516 is beyond EOD, truncated
[  461.906840][T17806] loop4: p3 start 4294967295 is beyond EOD, truncated
[  461.913730][T17806] loop4: p4 start 117440516 is beyond EOD, truncated
[  461.932628][T17790] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  461.944660][T16020] EXT4-fs unmount: 40 callbacks suppressed
[  461.944689][T16020] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  461.966862][   T28] kauditd_printk_skb: 100 callbacks suppressed
[  461.966885][   T28] audit: type=1400 audit(1774942300.068:7555): avc:  denied  { execute } for  pid=17808 comm="syz.2.3533" path="/82/file0" dev="tmpfs" ino=461 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  462.002158][T13712] udevd[13712]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[  462.018677][T13712] udevd[13712]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[  462.045551][T17809] syzkaller1: entered promiscuous mode
[  462.045584][   T28] audit: type=1400 audit(1774942300.143:7556): avc:  denied  { ioctl } for  pid=17808 comm="syz.2.3533" path="socket:[57507]" dev="sockfs" ino=57507 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  462.051158][T17809] syzkaller1: entered allmulticast mode
[  462.096490][T17803] hub 9-0:1.0: USB hub found
[  462.096691][T17813] set_capacity_and_notify: 7 callbacks suppressed
[  462.096744][T17813] loop0: detected capacity change from 0 to 512
[  462.102726][T17803] hub 9-0:1.0: 8 ports detected
[  462.153957][T17813] EXT4-fs: Ignoring removed orlov option
[  462.172179][T17813] EXT4-fs: Ignoring removed mblk_io_submit option
[  462.205133][   T28] audit: type=1400 audit(1774942300.274:7557): avc:  denied  { connect } for  pid=17814 comm="syz.4.3535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  462.246430][ T9240] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  462.255109][T17813] EXT4-fs error (device loop0): ext4_iget_extra_inode:5040: inode #15: comm syz.0.3534: corrupted in-inode xattr: e_value size too large
[  462.281178][T13696] udevd[13696]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  462.297173][   T28] audit: type=1400 audit(1774942300.274:7558): avc:  denied  { write } for  pid=17814 comm="syz.4.3535" lport=12622 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  462.316748][ T9240] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  462.325979][T17813] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  462.326190][T17813] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.3534: couldn't read orphan inode 15 (err -117)
[  462.335382][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  462.335412][    C0] EXT4-fs (loop0): initial error at time 1774942300: ext4_iget_extra_inode:5040: inode 15
[  462.335445][    C0] EXT4-fs (loop0): last error at time 1774942300: ext4_iget_extra_inode:5040: inode 15
[  462.376953][T17813] loop0: lost filesystem error report for type 5 error -117
[  462.379733][T17813] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  462.392089][T17819] loop5: detected capacity change from 0 to 512
[  462.408048][ T9240] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  462.416615][T17819] EXT4-fs: Ignoring removed nobh option
[  462.423754][T17819] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  462.434233][T17819] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002]
[  462.442543][T17819] System zones: 1-12
[  462.447054][T17819] EXT4-fs (loop5): orphan cleanup on readonly fs
[  462.457643][ T9240] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  462.466749][T17819] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3536: bg 0: block 273: padding at end of block bitmap is not set
[  462.482493][T17819] loop5: lost filesystem error report for type 5 error -117
[  462.482781][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  462.496550][    C0] EXT4-fs (loop5): initial error at time 1774942300: ext4_validate_block_bitmap:441
[  462.505982][    C0] EXT4-fs (loop5): last error at time 1774942300: ext4_validate_block_bitmap:441
[  462.513741][T17819] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6685: Corrupt filesystem
[  462.524550][T17823] openvswitch: netlink: Flow actions attr not present in new flow.
[  462.564283][T17819] loop5: lost filesystem error report for type 5 error -117
[  462.580060][T17819] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #11: comm syz.5.3536: attempt to clear invalid blocks 1024 len 1
[  462.610935][T17826] FAULT_INJECTION: forcing a failure.
[  462.610935][T17826] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  462.627440][T17826] CPU: 0 UID: 0 PID: 17826 Comm: syz.3.3539 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  462.627577][T17826] Tainted: [W]=WARN
[  462.627586][T17826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  462.627603][T17826] Call Trace:
[  462.627612][T17826]  <TASK>
[  462.627622][T17826]  __dump_stack+0x1d/0x30
[  462.627657][T17826]  dump_stack_lvl+0x95/0xd0
[  462.627687][T17826]  dump_stack+0x15/0x1b
[  462.627790][T17826]  should_fail_ex+0x263/0x280
[  462.627822][T17826]  should_fail+0xb/0x20
[  462.627897][T17826]  should_fail_usercopy+0x1a/0x20
[  462.627924][T17826]  _copy_from_user+0x1c/0xb0
[  462.627954][T17826]  ___sys_sendmsg+0xc1/0x1e0
[  462.628011][T17826]  __x64_sys_sendmsg+0xd4/0x160
[  462.628099][T17826]  x64_sys_call+0x194c/0x3020
[  462.628207][T17826]  do_syscall_64+0x12c/0x370
[  462.628232][T17826]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  462.628255][T17826] RIP: 0033:0x7f608077c819
[  462.628269][T17826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  462.628350][T17826] RSP: 002b:00007f607f1d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  462.628372][T17826] RAX: ffffffffffffffda RBX: 00007f60809f5fa0 RCX: 00007f608077c819
[  462.628384][T17826] RDX: 0000000000040000 RSI: 00002000000000c0 RDI: 0000000000000003
[  462.628396][T17826] RBP: 00007f607f1d7090 R08: 0000000000000000 R09: 0000000000000000
[  462.628475][T17826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  462.628490][T17826] R13: 00007f60809f6038 R14: 00007f60809f5fa0 R15: 00007ffea1168ef8
[  462.628508][T17826]  </TASK>
[  462.657069][T17819] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  462.736871][T17829] xt_hashlimit: overflow, try lower: 18446744073709551615/255
[  462.748874][T17819] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3536: invalid indirect mapped block 1811939328 (level 0)
[  462.755977][T16020] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  462.761723][T17819] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  462.842084][   T28] audit: type=1400 audit(1774942300.882:7559): avc:  denied  { write } for  pid=17828 comm="syz.3.3540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  462.874419][T17831] loop0: detected capacity change from 0 to 512
[  462.914404][T17834] loop4: detected capacity change from 0 to 8192
[  462.932016][T17819] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3536: invalid indirect mapped block 2 (level 2)
[  462.946076][   T28] audit: type=1400 audit(1774942300.985:7560): avc:  denied  { ioctl } for  pid=17828 comm="syz.3.3540" path="socket:[57609]" dev="sockfs" ino=57609 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  462.977565][T17819] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  462.982059][T17819] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #11: comm syz.5.3536: data will be lost
[  463.006931][T13712]  loop4: p2 p3 p4 < >
[  463.011013][T13712] loop4: partition table partially beyond EOD, truncated
[  463.034410][T13712] loop4: p2 size 590592 extends beyond EOD, truncated
[  463.050115][T13712] loop4: p3 start 4294967295 is beyond EOD, truncated
[  463.058372][T17831] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  463.073064][T13712] loop4: p4 start 117440516 is beyond EOD, truncated
[  463.080570][T17834]  loop4: p2 p3 p4 < >
[  463.084731][T17834] loop4: partition table partially beyond EOD, truncated
[  463.092075][T17834] loop4: p2 size 590592 extends beyond EOD, truncated
[  463.100013][T17834] loop4: p3 start 4294967295 is beyond EOD, truncated
[  463.106882][T17834] loop4: p4 start 117440516 is beyond EOD, truncated
[  463.115915][ T3001]  loop4: p2 p3 p4 < >
[  463.120045][   T28] audit: type=1400 audit(1774942300.985:7561): avc:  denied  { bind } for  pid=17828 comm="syz.3.3540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  463.142168][ T3001] loop4: partition table partially beyond EOD, truncated
[  463.152705][T17831] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  463.165489][T17819] EXT4-fs (loop5): 1 truncate cleaned up
[  463.173454][ T3001] loop4: p2 size 590592 extends beyond EOD, truncated
[  463.182596][T17819] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  463.198031][ T3001] loop4: p3 start 4294967295 is beyond EOD, truncated
[  463.215311][ T3001] loop4: p4 start 117440516 is beyond EOD, truncated
[  463.284915][T15590] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  463.371648][T13712] udevd[13712]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  463.444528][   T28] audit: type=1400 audit(1774942301.444:7562): avc:  denied  { write } for  pid=17841 comm="syz.4.3542" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  463.481535][   T28] audit: type=1400 audit(1774942301.472:7563): avc:  denied  { open } for  pid=17841 comm="syz.4.3542" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  463.575380][T17846] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  463.655375][T17849] loop4: detected capacity change from 0 to 512
[  463.703160][T17849] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  463.730880][T17849] ext4 filesystem being mounted at /189/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  463.749747][T17846] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  463.767506][T16020] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  463.810668][T17846] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  463.905425][T17854] netlink: 564 bytes leftover after parsing attributes in process `syz.0.3546'.
[  463.962197][T17855] loop0: detected capacity change from 0 to 512
[  463.979570][T17854] netlink: 564 bytes leftover after parsing attributes in process `syz.0.3546'.
[  463.989825][T17846] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  464.073990][ T8488] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  464.087268][ T8488] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  464.115292][ T8488] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  464.142392][ T8488] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  464.161229][   T28] audit: type=1400 audit(1774942302.117:7564): avc:  denied  { getopt } for  pid=17856 comm="syz.0.3547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  464.465503][T17872] openvswitch: netlink: Flow actions attr not present in new flow.
[  464.819250][T17882] loop0: detected capacity change from 0 to 8192
[  464.878002][T13712]  loop0: p2 p3 p4 < >
[  464.914086][T13712] loop0: partition table partially beyond EOD, truncated
[  464.932637][T14508] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  464.970811][T13712] loop0: p2 size 590592 extends beyond EOD, truncated
[  465.055647][T13712] loop0: p3 start 4294967295 is beyond EOD, truncated
[  465.111701][T13712] loop0: p4 start 117440516 is beyond EOD, truncated
[  465.120902][T17882]  loop0: p2 p3 p4 < >
[  465.125157][T17882] loop0: partition table partially beyond EOD, truncated
[  465.132360][T17882] loop0: p2 size 590592 extends beyond EOD, truncated
[  465.140380][T17882] loop0: p3 start 4294967295 is beyond EOD, truncated
[  465.147287][T17882] loop0: p4 start 117440516 is beyond EOD, truncated
[  465.181381][T17888] loop4: detected capacity change from 0 to 512
[  465.193832][T17890] netlink: 564 bytes leftover after parsing attributes in process `syz.5.3557'.
[  465.203290][T17890] netlink: 564 bytes leftover after parsing attributes in process `syz.5.3557'.
[  465.228472][T17888] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  465.258302][T17888] ext4 filesystem being mounted at /190/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  465.391917][T17899] loop2: detected capacity change from 0 to 512
[  465.437189][T17899] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  465.503711][T17899] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  465.763675][T17918] netlink: 564 bytes leftover after parsing attributes in process `syz.0.3568'.
[  465.782175][T17918] netlink: 564 bytes leftover after parsing attributes in process `syz.0.3568'.
[  465.822231][T17916] random: crng reseeded on system resumption
[  465.845115][T17920] loop0: detected capacity change from 0 to 512
[  465.858341][T17920] EXT4-fs: Ignoring removed mblk_io_submit option
[  465.927133][T17920] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  465.981303][T17920] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  465.997778][T17924] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  466.033655][T17920] ext4 filesystem being mounted at /90/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  466.099077][T14858] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  466.132239][T14508] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  466.146089][T16020] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  466.353383][T17936] openvswitch: netlink: Flow actions attr not present in new flow.
[  466.967231][T17940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3574'.
[  467.110124][T17940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3574'.
[  467.120102][T17940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3574'.
[  467.129551][T17940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3574'.
[  467.320166][T17937] hub 9-0:1.0: USB hub found
[  467.328835][T17937] hub 9-0:1.0: 8 ports detected
[  467.336965][T15516] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  467.564894][   T28] kauditd_printk_skb: 59 callbacks suppressed
[  467.564926][   T28] audit: type=1400 audit(1774975079.377:7624): avc:  denied  { bind } for  pid=17931 comm="syz.0.3574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  467.935715][   T28] audit: type=1400 audit(1774975079.408:7625): avc:  denied  { ioctl } for  pid=17931 comm="syz.0.3574" path="socket:[56185]" dev="sockfs" ino=56185 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  468.159667][T17945] set_capacity_and_notify: 1 callbacks suppressed
[  468.159683][T17945] loop3: detected capacity change from 0 to 8192
[  468.262146][T17951] loop2: detected capacity change from 0 to 256
[  468.405306][T13712]  loop3: p2 p3 p4 < >
[  468.409517][T13712] loop3: partition table partially beyond EOD, truncated
[  468.517020][T13712] loop3: p2 size 590592 extends beyond EOD, truncated
[  468.525820][T13712] loop3: p3 start 4294967295 is beyond EOD, truncated
[  468.532930][T13712] loop3: p4 start 117440516 is beyond EOD, truncated
[  468.885919][T17958] loop0: detected capacity change from 0 to 256
[  469.160933][T17961] loop4: detected capacity change from 0 to 256
[  469.385867][T17962] __nla_validate_parse: 5 callbacks suppressed
[  469.385956][T17962] netlink: 564 bytes leftover after parsing attributes in process `syz.5.3579'.
[  469.643626][T17945] loop_reread_partitions: partition scan of loop3 () failed (rc=-16)
[  471.943209][T17969] loop5: detected capacity change from 0 to 512
[  471.967743][T17961] FAT-fs (loop4): Directory bread(block 64) failed
[  471.974318][T17961] FAT-fs (loop4): Directory bread(block 65) failed
[  471.980949][T17961] FAT-fs (loop4): Directory bread(block 66) failed
[  471.987498][T17961] FAT-fs (loop4): Directory bread(block 67) failed
[  471.994095][T17961] FAT-fs (loop4): Directory bread(block 68) failed
[  472.000679][T17961] FAT-fs (loop4): Directory bread(block 69) failed
[  472.007300][T17961] FAT-fs (loop4): Directory bread(block 70) failed
[  472.013834][T17961] FAT-fs (loop4): Directory bread(block 71) failed
[  472.020443][T17961] FAT-fs (loop4): Directory bread(block 72) failed
[  472.027011][T17961] FAT-fs (loop4): Directory bread(block 73) failed
[  472.086235][T17958] FAT-fs (loop0): Directory bread(block 64) failed
[  472.092870][T17958] FAT-fs (loop0): Directory bread(block 65) failed
[  472.099457][T17958] FAT-fs (loop0): Directory bread(block 66) failed
[  472.106014][T17958] FAT-fs (loop0): Directory bread(block 67) failed
[  472.112704][T17958] FAT-fs (loop0): Directory bread(block 68) failed
[  472.119228][T17958] FAT-fs (loop0): Directory bread(block 69) failed
[  472.125797][T17958] FAT-fs (loop0): Directory bread(block 70) failed
[  472.132409][T17958] FAT-fs (loop0): Directory bread(block 71) failed
[  472.139019][T17958] FAT-fs (loop0): Directory bread(block 72) failed
[  472.145594][T17958] FAT-fs (loop0): Directory bread(block 73) failed
[  472.183511][   T28] audit: type=1400 audit(1774975084.111:7626): avc:  denied  { mount } for  pid=17953 comm="syz.4.3578" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[  472.212653][   T28] audit: type=1400 audit(1774975084.290:7627): avc:  denied  { unmount } for  pid=14508 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[  472.354357][T17969] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  472.403873][T17978] loop4: detected capacity change from 0 to 512
[  472.449730][T17969] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  472.466928][T17978] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  472.510795][T17978] ext4 filesystem being mounted at /194/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  472.614926][   T28] audit: type=1400 audit(1774975084.689:7628): avc:  denied  { write } for  pid=17984 comm="syz.3.3585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  472.645076][T17985] loop3: detected capacity change from 0 to 512
[  472.685832][T17985] ext2: Bad value for 'init_itable'
[  472.730372][T17989] loop0: detected capacity change from 0 to 512
[  472.740237][T17989] EXT4-fs: Ignoring removed orlov option
[  472.769631][T17989] EXT4-fs: Ignoring removed mblk_io_submit option
[  472.812917][T15590] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  472.837779][   T28] audit: type=1400 audit(1774975084.930:7629): avc:  denied  { ioctl } for  pid=17984 comm="syz.3.3585" path="/dev/virtual_nci" dev="devtmpfs" ino=132 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  472.891238][T17989] EXT4-fs error (device loop0): ext4_iget_extra_inode:5040: inode #15: comm syz.0.3586: corrupted in-inode xattr: e_value size too large
[  472.936240][T17989] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  472.938995][    C1] EXT4-fs (loop0): error count since last fsck: 1
[  472.956329][    C1] EXT4-fs (loop0): initial error at time 1774975085: ext4_iget_extra_inode:5040: inode 15
[  472.967102][    C1] EXT4-fs (loop0): last error at time 1774975085: ext4_iget_extra_inode:5040: inode 15
[  472.968250][T17989] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.3586: couldn't read orphan inode 15 (err -117)
[  472.978470][   T28] audit: type=1400 audit(1774975084.993:7630): avc:  denied  { create } for  pid=17996 comm="syz.2.3589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  473.008908][   T28] audit: type=1400 audit(1774975085.025:7631): avc:  denied  { connect } for  pid=17996 comm="syz.2.3589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  473.023589][T17989] loop0: lost filesystem error report for type 5 error -117
[  473.028836][   T28] audit: type=1400 audit(1774975085.025:7632): avc:  denied  { ioctl } for  pid=17996 comm="syz.2.3589" path="socket:[57977]" dev="sockfs" ino=57977 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  473.063509][T17989] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  473.080544][T18000] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  473.115916][   T28] audit: type=1400 audit(1774975085.235:7633): avc:  denied  { name_bind } for  pid=18004 comm="syz.3.3592" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[  473.142508][T18005] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3592'.
[  473.164315][   T28] audit: type=1400 audit(1774975085.287:7634): avc:  denied  { name_connect } for  pid=18006 comm="syz.2.3593" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[  473.197533][T16020] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  473.208633][T18010] openvswitch: netlink: Flow actions attr not present in new flow.
[  473.214918][T18000] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  473.251784][T14508] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  473.279798][   T28] audit: type=1400 audit(1774975085.403:7635): avc:  denied  { read } for  pid=18006 comm="syz.2.3593" path="socket:[57998]" dev="sockfs" ino=57998 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  473.314351][T18000] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  473.377023][   T28] audit: type=1400 audit(1774975085.508:7636): avc:  denied  { name_bind } for  pid=18013 comm="syz.0.3595" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  473.477934][   T28] audit: type=1400 audit(1774975085.508:7637): avc:  denied  { node_bind } for  pid=18013 comm="syz.0.3595" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[  473.666173][T18022] loop3: detected capacity change from 0 to 8192
[  474.210870][T18026] loop4: detected capacity change from 0 to 256
[  474.236178][T18026] FAT-fs (loop4): Directory bread(block 64) failed
[  474.243111][T18026] FAT-fs (loop4): Directory bread(block 65) failed
[  474.249776][T18026] FAT-fs (loop4): Directory bread(block 66) failed
[  474.256454][T18026] FAT-fs (loop4): Directory bread(block 67) failed
[  474.263027][T18026] FAT-fs (loop4): Directory bread(block 68) failed
[  474.269625][T18026] FAT-fs (loop4): Directory bread(block 69) failed
[  474.276291][T18026] FAT-fs (loop4): Directory bread(block 70) failed
[  474.282873][T18026] FAT-fs (loop4): Directory bread(block 71) failed
[  474.289408][T18026] FAT-fs (loop4): Directory bread(block 72) failed
[  474.296053][T18026] FAT-fs (loop4): Directory bread(block 73) failed
[  474.349481][T13712]  loop3: p2 p3 p4 < >
[  474.353882][T13712] loop3: partition table partially beyond EOD, truncated
[  474.380636][T18000] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  474.393510][T13712] loop3: p2 size 590592 extends beyond EOD, truncated
[  474.427352][T18025] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3596'.
[  474.436649][T18025] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3596'.
[  474.446203][T18025] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3596'.
[  474.455545][T18025] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3596'.
[  474.464860][T18025] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3596'.
[  474.474361][T18025] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3596'.
[  474.483619][T18025] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3596'.
[  474.492902][T18025] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3596'.
[  474.502323][T18025] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3596'.
[  474.511485][T18025] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3596'.
[  474.529468][T13712] loop3: p3 start 4294967295 is beyond EOD, truncated
[  474.537689][T13712] loop3: p4 start 117440516 is beyond EOD, truncated
[  474.648693][T18022]  loop3: p2 p3 p4 < >
[  474.652959][T18022] loop3: partition table partially beyond EOD, truncated
[  474.660198][T18022] loop3: p2 size 590592 extends beyond EOD, truncated
[  474.667497][T18022] loop3: p3 start 4294967295 is beyond EOD, truncated
[  474.674345][T18022] loop3: p4 start 117440516 is beyond EOD, truncated
[  474.758917][ T9067] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  474.804111][ T9067] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  475.622800][T13712] udevd[13712]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[  475.640714][T11192] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  475.692243][T11192] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  475.852866][T18033] loop0: detected capacity change from 0 to 512
[  475.920073][T13712] udevd[13712]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[  475.933195][T18033] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  475.982414][T18033] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  476.121040][T18052] IPVS: length: 24 != 6072
[  476.299688][T18058] loop5: detected capacity change from 0 to 512
[  476.303127][T16020] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  476.325345][T18059] loop2: detected capacity change from 0 to 512
[  476.351147][T18061] loop4: detected capacity change from 0 to 512
[  476.369162][T18059] EXT4-fs: Ignoring removed orlov option
[  476.374982][T18059] EXT4-fs: Ignoring removed mblk_io_submit option
[  476.380140][T18058] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  476.406399][T18059] EXT4-fs error (device loop2): ext4_iget_extra_inode:5040: inode #15: comm syz.2.3606: corrupted in-inode xattr: e_value size too large
[  476.420948][T18058] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  476.433904][T18059] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  476.434859][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  476.450481][    C0] EXT4-fs (loop2): initial error at time 1774975088: ext4_iget_extra_inode:5040: inode 15
[  476.452320][T18061] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  476.460455][    C0] EXT4-fs (loop2): last error at time 1774975088: ext4_iget_extra_inode:5040: inode 15
[  476.485906][T18059] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.3606: couldn't read orphan inode 15 (err -117)
[  476.498004][T18059] loop2: lost filesystem error report for type 5 error -117
[  476.498144][T18061] ext4 filesystem being mounted at /198/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  476.500549][T18059] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  476.529220][T18065] loop0: detected capacity change from 0 to 512
[  476.707311][T15516] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  477.102012][T18074] hub 9-0:1.0: USB hub found
[  477.119029][T18074] hub 9-0:1.0: 8 ports detected
[  477.168921][T15590] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  477.228153][T14508] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  477.291533][T18093] netlink: 'syz.4.3615': attribute type 1 has an invalid length.
[  477.330619][T18094] FAULT_INJECTION: forcing a failure.
[  477.330619][T18094] name failslab, interval 1, probability 0, space 0, times 0
[  477.359142][T18094] CPU: 0 UID: 0 PID: 18094 Comm: syz.0.3617 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  477.359228][T18094] Tainted: [W]=WARN
[  477.359236][T18094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  477.359305][T18094] Call Trace:
[  477.359313][T18094]  <TASK>
[  477.359322][T18094]  __dump_stack+0x1d/0x30
[  477.359387][T18094]  dump_stack_lvl+0x95/0xd0
[  477.359508][T18094]  dump_stack+0x15/0x1b
[  477.359597][T18094]  should_fail_ex+0x263/0x280
[  477.359625][T18094]  ? __tcf_chain_get+0x91/0x270
[  477.359713][T18094]  should_failslab+0x8c/0xb0
[  477.359743][T18094]  __kmalloc_cache_noprof+0x5f/0x410
[  477.359785][T18094]  __tcf_chain_get+0x91/0x270
[  477.359823][T18094]  tc_new_tfilter+0x60d/0x1200
[  477.359878][T18094]  ? __rcu_read_unlock+0x4e/0x70
[  477.359959][T18094]  ? avc_has_perm_noaudit+0xab/0x130
[  477.360013][T18094]  ? ns_capable+0x7c/0xb0
[  477.360036][T18094]  ? __pfx_tc_new_tfilter+0x10/0x10
[  477.360132][T18094]  rtnetlink_rcv_msg+0x64b/0x720
[  477.360164][T18094]  netlink_rcv_skb+0x123/0x220
[  477.360250][T18094]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  477.360291][T18094]  rtnetlink_rcv+0x1c/0x30
[  477.360317][T18094]  netlink_unicast+0x5c0/0x690
[  477.360432][T18094]  netlink_sendmsg+0x5c8/0x6f0
[  477.360462][T18094]  ? __pfx_netlink_sendmsg+0x10/0x10
[  477.360488][T18094]  ____sys_sendmsg+0x563/0x5b0
[  477.360640][T18094]  ___sys_sendmsg+0x195/0x1e0
[  477.360687][T18094]  __x64_sys_sendmsg+0xd4/0x160
[  477.360719][T18094]  x64_sys_call+0x194c/0x3020
[  477.360749][T18094]  do_syscall_64+0x12c/0x370
[  477.360839][T18094]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  477.360868][T18094] RIP: 0033:0x7fd3cdb5c819
[  477.360965][T18094] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  477.360989][T18094] RSP: 002b:00007fd3cc5b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  477.361071][T18094] RAX: ffffffffffffffda RBX: 00007fd3cddd5fa0 RCX: 00007fd3cdb5c819
[  477.361090][T18094] RDX: 0000000020000800 RSI: 0000200000000900 RDI: 0000000000000006
[  477.361107][T18094] RBP: 00007fd3cc5b7090 R08: 0000000000000000 R09: 0000000000000000
[  477.361136][T18094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  477.361151][T18094] R13: 00007fd3cddd6038 R14: 00007fd3cddd5fa0 R15: 00007ffd63f8ba98
[  477.361208][T18094]  </TASK>
[  477.596557][   T28] kauditd_printk_skb: 119 callbacks suppressed
[  477.596640][   T28] audit: type=1326 audit(1774975089.938:7757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18080 comm="syz.3.3613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f608077c819 code=0x7ffc0000
[  477.704739][T18076] hub 9-0:1.0: USB hub found
[  477.709457][T18076] hub 9-0:1.0: 8 ports detected
[  477.734853][T18101] loop4: detected capacity change from 0 to 512
[  477.743528][   T28] audit: type=1326 audit(1774975089.948:7758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18080 comm="syz.3.3613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6080776597 code=0x7ffc0000
[  477.825075][T18103] loop0: detected capacity change from 0 to 512
[  477.847923][T18103] EXT4-fs: Ignoring removed bh option
[  477.868842][   T28] audit: type=1326 audit(1774975089.948:7759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18080 comm="syz.3.3613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f608071db99 code=0x7ffc0000
[  477.900279][   T28] audit: type=1326 audit(1774975089.948:7760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18080 comm="syz.3.3613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f608077c819 code=0x7ffc0000
[  477.924064][T18103] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  477.941090][   T28] audit: type=1326 audit(1774975089.948:7761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18080 comm="syz.3.3613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f608077c819 code=0x7ffc0000
[  477.943170][T18101] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  477.944992][T18103] EXT4-fs (loop0): 1 truncate cleaned up
[  477.967195][   T28] audit: type=1326 audit(1774975090.001:7762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18080 comm="syz.3.3613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f608077c819 code=0x7ffc0000
[  477.967230][   T28] audit: type=1326 audit(1774975090.001:7763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18080 comm="syz.3.3613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f608077c819 code=0x7ffc0000
[  477.967292][   T28] audit: type=1326 audit(1774975090.011:7764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18080 comm="syz.3.3613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7f608077c819 code=0x7ffc0000
[  477.967322][   T28] audit: type=1326 audit(1774975090.011:7765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18080 comm="syz.3.3613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f608077c819 code=0x7ffc0000
[  477.967381][   T28] audit: type=1326 audit(1774975090.011:7766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18080 comm="syz.3.3613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f608077c819 code=0x7ffc0000
[  478.012517][T18110] loop2: detected capacity change from 0 to 512
[  478.034734][T18101] ext4 filesystem being mounted at /200/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  478.066570][T18110] EXT4-fs: Ignoring removed orlov option
[  478.133861][T18103] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  478.149048][T18110] EXT4-fs: Ignoring removed mblk_io_submit option
[  478.172054][T18103] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  478.191981][T18110] EXT4-fs error (device loop2): ext4_iget_extra_inode:5040: inode #15: comm syz.2.3621: corrupted in-inode xattr: e_value size too large
[  478.236652][T18110] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  478.236919][T18110] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.3621: couldn't read orphan inode 15 (err -117)
[  478.246143][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  478.246167][    C0] EXT4-fs (loop2): initial error at time 1774975090: ext4_iget_extra_inode:5040: inode 15
[  478.246204][    C0] EXT4-fs (loop2): last error at time 1774975090: ext4_iget_extra_inode:5040: inode 15
[  478.285337][T18113] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  478.296474][T18110] loop2: lost filesystem error report for type 5 error -117
[  478.297213][T18110] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  478.337843][T18113] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  478.379631][T18105] hub 9-0:1.0: USB hub found
[  478.385007][T18105] hub 9-0:1.0: 8 ports detected
[  478.399355][T18113] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  478.416700][T15516] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  478.457583][T18118] loop2: detected capacity change from 0 to 512
[  478.465133][T18113] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  478.490326][T18118] EXT4-fs: Ignoring removed nobh option
[  478.514601][T18120] loop5: detected capacity change from 0 to 512
[  478.521539][T18118] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  478.533551][T18118] EXT4-fs (loop2): 1 truncate cleaned up
[  478.539833][T18118] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  478.590333][ T9058] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  478.655877][T18120] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  478.668786][T18120] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  478.681126][ T9058] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  478.693833][T14508] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  478.707510][ T9058] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  478.720988][ T9058] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  478.810070][T18131] loop4: detected capacity change from 0 to 1024
[  478.820997][T18129] loop3: detected capacity change from 0 to 1024
[  478.828959][T18131] EXT4-fs (loop4): unsupported inode size: 143
[  478.835230][T18131] EXT4-fs (loop4): blocksize: 1024
[  478.894046][T18129] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869)
[  478.935588][T18129] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  478.974023][T18129] EXT4-fs error (device loop3): ext4_get_journal_inode:5888: comm syz.3.3626: inode #4294967295: comm syz.3.3626: iget: illegal inode #
[  479.005746][T18129] loop3: lost filesystem error report for type 5 error -117
[  479.016166][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  479.030002][    C1] EXT4-fs (loop3): initial error at time 1774975091: ext4_get_journal_inode:5888
[  479.039342][    C1] EXT4-fs (loop3): last error at time 1774975091: ext4_get_journal_inode:5888
[  479.083098][T18129] EXT4-fs (loop3): no journal found
[  479.100421][T18129] EXT4-fs (loop3): can't get journal size
[  479.109888][T18137] loop4: detected capacity change from 0 to 1024
[  479.117359][T18129] EXT4-fs (loop3): failed to initialize system zone (-22)
[  479.132022][T18129] EXT4-fs (loop3): mount failed
[  479.137675][T18137] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869)
[  479.197644][T18137] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  479.378582][T18137] EXT4-fs error (device loop4): ext4_get_journal_inode:5888: comm syz.4.3629: inode #4294967295: comm syz.4.3629: iget: illegal inode #
[  479.396114][T18135] bridge0: port 2(bridge_slave_1) entered disabled state
[  479.403359][T18135] bridge0: port 1(bridge_slave_0) entered disabled state
[  479.553225][T18137] loop4: lost filesystem error report for type 5 error -117
[  479.554123][T18137] EXT4-fs (loop4): no journal found
[  479.561505][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  479.561527][    C1] EXT4-fs (loop4): initial error at time 1774975091: ext4_get_journal_inode:5888
[  479.561576][    C1] EXT4-fs (loop4): last error at time 1774975091: ext4_get_journal_inode:5888
[  479.591434][T18137] EXT4-fs (loop4): can't get journal size
[  479.650690][T18137] EXT4-fs (loop4): failed to initialize system zone (-22)
[  479.664723][T18137] EXT4-fs (loop4): mount failed
[  480.040178][T15590] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  480.234625][T18156] loop5: detected capacity change from 0 to 512
[  480.290966][T18135] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  480.354671][T18135] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  480.383249][T18156] EXT4-fs (loop5): 1 orphan inode deleted
[  480.407009][ T8488] EXT4-fs error (device loop5): ext4_release_dquot:7062: comm kworker/u8:9: Failed to release dquot type 1
[  480.415082][T18156] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  480.447551][ T8488] loop5: lost filesystem error report for type 5 error -117
[  480.506141][ T9058] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  480.526750][ T9058] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  480.536568][T18156] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  480.539901][ T9058] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  480.571303][T18154] __nla_validate_parse: 21 callbacks suppressed
[  480.571318][T18154] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3632'.
[  480.593151][T18160] loop0: detected capacity change from 0 to 512
[  480.612018][T18156] EXT4-fs error (device loop5): ext4_lookup:1785: inode #15: comm syz.5.3633: iget: bad i_size value: 360287970189639690
[  480.633384][T18160] EXT4-fs: Ignoring removed orlov option
[  480.705741][T18160] EXT4-fs: Ignoring removed mblk_io_submit option
[  480.723637][T18160] EXT4-fs error (device loop0): ext4_iget_extra_inode:5040: inode #15: comm syz.0.3634: corrupted in-inode xattr: e_value size too large
[  480.769459][T18160] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  480.777179][T18160] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.3634: couldn't read orphan inode 15 (err -117)
[  480.786449][    C1] EXT4-fs (loop0): error count since last fsck: 1
[  480.786473][    C1] EXT4-fs (loop0): initial error at time 1774975093: ext4_iget_extra_inode:5040: inode 15
[  480.786507][    C1] EXT4-fs (loop0): last error at time 1774975093: ext4_iget_extra_inode:5040: inode 15
[  480.858572][ T9058] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  480.859182][T18160] loop0: lost filesystem error report for type 5 error -117
[  480.869893][T18160] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  480.968084][T15590] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  480.987068][T16020] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  480.996593][T18174] FAULT_INJECTION: forcing a failure.
[  480.996593][T18174] name failslab, interval 1, probability 0, space 0, times 0
[  481.034115][ T3423] IPVS: starting estimator thread 0...
[  481.064508][T18174] CPU: 0 UID: 0 PID: 18174 Comm: syz.3.3640 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  481.064539][T18174] Tainted: [W]=WARN
[  481.064546][T18174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  481.064559][T18174] Call Trace:
[  481.064567][T18174]  <TASK>
[  481.064576][T18174]  __dump_stack+0x1d/0x30
[  481.064683][T18174]  dump_stack_lvl+0x95/0xd0
[  481.064761][T18174]  dump_stack+0x15/0x1b
[  481.064802][T18174]  should_fail_ex+0x263/0x280
[  481.064889][T18174]  should_failslab+0x8c/0xb0
[  481.064972][T18174]  kmem_cache_alloc_noprof+0x66/0x400
[  481.064996][T18174]  ? alloc_empty_file+0x76/0x200
[  481.065026][T18174]  alloc_empty_file+0x76/0x200
[  481.065067][T18174]  alloc_file_pseudo+0xf6/0x190
[  481.065150][T18174]  hugetlb_file_setup+0x2a6/0x3d0
[  481.065187][T18174]  ksys_mmap_pgoff+0x156/0x310
[  481.065357][T18174]  x64_sys_call+0x14df/0x3020
[  481.065388][T18174]  do_syscall_64+0x12c/0x370
[  481.065454][T18174]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  481.065554][T18174] RIP: 0033:0x7f608077c819
[  481.065626][T18174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  481.065645][T18174] RSP: 002b:00007f607f1d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  481.065669][T18174] RAX: ffffffffffffffda RBX: 00007f60809f5fa0 RCX: 00007f608077c819
[  481.065687][T18174] RDX: 0000000004000002 RSI: 0000000000c00000 RDI: 0000200000400000
[  481.065703][T18174] RBP: 00007f607f1d7090 R08: ffffffffffffffff R09: 0000000000000000
[  481.065761][T18174] R10: 0000000000050032 R11: 0000000000000246 R12: 0000000000000001
[  481.065772][T18174] R13: 00007f60809f6038 R14: 00007f60809f5fa0 R15: 00007ffea1168ef8
[  481.065792][T18174]  </TASK>
[  481.274088][T18179] IPVS: using max 2064 ests per chain, 103200 per kthread
[  481.313492][T18189] loop4: detected capacity change from 0 to 128
[  481.318927][T18190] loop3: detected capacity change from 0 to 1024
[  481.320867][T18189] /dev/loop4: Can't open blockdev
[  481.388687][T18190] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  481.408428][T18196] netlink: 564 bytes leftover after parsing attributes in process `syz.0.3646'.
[  481.459979][T14858] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  481.481721][T18200] loop3: detected capacity change from 0 to 512
[  481.497696][T18200] EXT4-fs: Ignoring removed orlov option
[  481.509099][T18200] EXT4-fs: Ignoring removed mblk_io_submit option
[  481.536527][T18200] EXT4-fs error (device loop3): ext4_iget_extra_inode:5040: inode #15: comm syz.3.3648: corrupted in-inode xattr: e_value size too large
[  481.559594][T18200] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  481.569032][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  481.584647][    C0] EXT4-fs (loop3): initial error at time 1774975094: ext4_iget_extra_inode:5040: inode 15
[  481.594616][    C0] EXT4-fs (loop3): last error at time 1774975094: ext4_iget_extra_inode:5040: inode 15
[  481.604591][T18200] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.3648: couldn't read orphan inode 15 (err -117)
[  481.706105][T18200] loop3: lost filesystem error report for type 5 error -117
[  481.708844][T18200] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  481.762635][T14858] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  481.918435][T15516] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  481.959622][T18213] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  481.979508][T18213] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  482.070161][T15516] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  482.180130][T18226] FAULT_INJECTION: forcing a failure.
[  482.180130][T18226] name failslab, interval 1, probability 0, space 0, times 0
[  482.217418][T18226] CPU: 0 UID: 0 PID: 18226 Comm: syz.5.3656 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  482.217454][T18226] Tainted: [W]=WARN
[  482.217462][T18226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  482.217477][T18226] Call Trace:
[  482.217485][T18226]  <TASK>
[  482.217493][T18226]  __dump_stack+0x1d/0x30
[  482.217561][T18226]  dump_stack_lvl+0x95/0xd0
[  482.217656][T18226]  dump_stack+0x15/0x1b
[  482.217678][T18226]  should_fail_ex+0x263/0x280
[  482.217731][T18226]  should_failslab+0x8c/0xb0
[  482.217804][T18226]  kmem_cache_alloc_noprof+0x66/0x400
[  482.217842][T18226]  ? __inet_bhash2_update_saddr+0x128/0xf70
[  482.217878][T18226]  __inet_bhash2_update_saddr+0x128/0xf70
[  482.217911][T18226]  ? xfrm_lookup_route+0xd6/0x110
[  482.218049][T18226]  ? ip_route_output_flow+0xdb/0x110
[  482.218076][T18226]  inet_bhash2_update_saddr+0x25/0x30
[  482.218161][T18226]  tcp_v4_connect+0x61e/0xac0
[  482.218189][T18226]  __inet_stream_connect+0x169/0x7f0
[  482.218278][T18226]  ? _raw_spin_lock_bh+0x56/0xb0
[  482.218306][T18226]  ? _raw_spin_unlock_bh+0x18/0x20
[  482.218363][T18226]  ? lock_sock_nested+0x132/0x160
[  482.218402][T18226]  ? selinux_netlbl_socket_connect+0x114/0x130
[  482.218435][T18226]  inet_stream_connect+0x44/0x70
[  482.218508][T18226]  ? __pfx_inet_stream_connect+0x10/0x10
[  482.218548][T18226]  __sys_connect+0x1f1/0x2a0
[  482.218649][T18226]  __x64_sys_connect+0x3f/0x50
[  482.218731][T18226]  x64_sys_call+0x2df0/0x3020
[  482.218758][T18226]  do_syscall_64+0x12c/0x370
[  482.218793][T18226]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  482.218890][T18226] RIP: 0033:0x7f2dc15dc819
[  482.218910][T18226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  482.218940][T18226] RSP: 002b:00007f2dc002f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  482.219095][T18226] RAX: ffffffffffffffda RBX: 00007f2dc1855fa0 RCX: 00007f2dc15dc819
[  482.219110][T18226] RDX: 0000000000000010 RSI: 00002000000001c0 RDI: 0000000000000003
[  482.219183][T18226] RBP: 00007f2dc002f090 R08: 0000000000000000 R09: 0000000000000000
[  482.219199][T18226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  482.219214][T18226] R13: 00007f2dc1856038 R14: 00007f2dc1855fa0 R15: 00007fff1565fc18
[  482.219242][T18226]  </TASK>
[  482.493525][T18230] netlink: 564 bytes leftover after parsing attributes in process `syz.2.3658'.
[  482.595255][   T28] kauditd_printk_skb: 54 callbacks suppressed
[  482.595273][   T28] audit: type=1400 audit(1774975095.155:7820): avc:  denied  { create } for  pid=18227 comm="syz.3.3657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  483.081134][   T28] audit: type=1400 audit(1774975095.155:7821): avc:  denied  { setopt } for  pid=18227 comm="syz.3.3657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  483.114083][T18242] EXT4-fs: Ignoring removed orlov option
[  483.142304][T18242] EXT4-fs: Ignoring removed mblk_io_submit option
[  483.201274][   T28] audit: type=1400 audit(1774975095.176:7822): avc:  denied  { write } for  pid=18227 comm="syz.3.3657" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  483.222764][T18242] EXT4-fs error (device loop2): ext4_iget_extra_inode:5040: inode #15: comm syz.2.3660: corrupted in-inode xattr: e_value size too large
[  483.264701][T18242] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  483.265051][T18242] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.3660: couldn't read orphan inode 15 (err -117)
[  483.274252][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  483.274289][    C0] EXT4-fs (loop2): initial error at time 1774975095: ext4_iget_extra_inode:5040: inode 15
[  483.274314][    C0] EXT4-fs (loop2): last error at time 1774975095: ext4_iget_extra_inode:5040: inode 15
[  483.331923][   T28] audit: type=1400 audit(1774975095.743:7823): avc:  denied  { create } for  pid=18188 comm="syz.4.3645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  483.430049][T18242] loop2: lost filesystem error report for type 5 error -117
[  483.430699][T18242] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  483.612199][T15516] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  483.655760][   T28] audit: type=1400 audit(1774975096.310:7824): avc:  denied  { create } for  pid=18244 comm="syz.5.3662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  483.683678][T18248] set_capacity_and_notify: 2 callbacks suppressed
[  483.683694][T18248] loop2: detected capacity change from 0 to 164
[  483.714960][   T28] audit: type=1400 audit(1774975096.342:7825): avc:  denied  { connect } for  pid=18244 comm="syz.5.3662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  483.790386][   T28] audit: type=1400 audit(1774975096.342:7826): avc:  denied  { create } for  pid=18244 comm="syz.5.3662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  483.903288][   T28] audit: type=1400 audit(1774975096.342:7827): avc:  denied  { getopt } for  pid=18244 comm="syz.5.3662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  484.022326][   T28] audit: type=1400 audit(1774975096.520:7828): avc:  denied  { mount } for  pid=18247 comm="syz.2.3661" name="/" dev="loop2" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1
[  484.080114][T18258] loop2: detected capacity change from 0 to 512
[  484.152206][T18258] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  484.174752][   T28] audit: type=1400 audit(1774975096.520:7829): avc:  denied  { setopt } for  pid=18247 comm="syz.2.3661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  484.217305][T18258] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  484.308828][T15516] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  484.396182][T18261] loop5: detected capacity change from 0 to 256
[  484.425242][T18261] FAT-fs (loop5): Directory bread(block 64) failed
[  484.431879][T18261] FAT-fs (loop5): Directory bread(block 65) failed
[  484.438471][T18261] FAT-fs (loop5): Directory bread(block 66) failed
[  484.445005][T18261] FAT-fs (loop5): Directory bread(block 67) failed
[  484.451636][T18261] FAT-fs (loop5): Directory bread(block 68) failed
[  484.458205][T18261] FAT-fs (loop5): Directory bread(block 69) failed
[  484.464761][T18261] FAT-fs (loop5): Directory bread(block 70) failed
[  484.471337][T18261] FAT-fs (loop5): Directory bread(block 71) failed
[  484.477980][T18261] FAT-fs (loop5): Directory bread(block 72) failed
[  484.484606][T18261] FAT-fs (loop5): Directory bread(block 73) failed
[  484.510893][T18261] bridge_slave_0: left allmulticast mode
[  484.516617][T18261] bridge_slave_0: left promiscuous mode
[  484.522373][T18261] bridge0: port 1(bridge_slave_0) entered disabled state
[  484.585798][T18261] bridge_slave_1: left allmulticast mode
[  484.591559][T18261] bridge_slave_1: left promiscuous mode
[  484.597322][T18261] bridge0: port 2(bridge_slave_1) entered disabled state
[  484.633144][T18261] bond0: (slave bond_slave_0): Releasing backup interface
[  484.643583][T18261] bond0: (slave bond_slave_1): Releasing backup interface
[  484.656690][T18261] team0: Port device team_slave_0 removed
[  484.666086][T18261] team0: Port device team_slave_1 removed
[  484.672991][T18261] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  484.680500][T18261] batman_adv: batadv0: Removing interface: batadv_slave_0
[  484.688932][T18261] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  484.696357][T18261] batman_adv: batadv0: Removing interface: batadv_slave_1
[  484.706439][T18261] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  485.031767][T18274] loop2: detected capacity change from 0 to 512
[  485.049516][T18274] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  485.084874][T18275] loop0: detected capacity change from 0 to 512
[  485.118507][T18277] loop3: detected capacity change from 0 to 512
[  485.220675][T18277] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002]
[  485.228886][T18277] System zones: 0-2, 18-18, 34-34
[  485.239421][T18277] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters
[  485.254238][T18277] EXT4-fs (loop3): Remounting filesystem read-only
[  485.260850][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  485.260875][    C0] EXT4-fs (loop3): initial error at time 1774975097: ext4_mb_generate_buddy:1317
[  485.260920][    C0] EXT4-fs (loop3): last error at time 1774975097: ext4_mb_generate_buddy:1317
[  485.286548][T18277] EXT4-fs (loop3): 1 truncate cleaned up
[  485.293278][T18277] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  485.306039][T18277] ext4 filesystem being mounted at /151/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  485.330404][ T9058] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  485.983404][ T9058] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  486.033382][T18274] EXT4-fs (loop2): 1 orphan inode deleted
[  486.136404][T18274] EXT4-fs (loop2): 1 truncate cleaned up
[  486.142972][T18274] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  486.157497][T18274] ext4: Unknown parameter '���������������������������@�LqE�:��� �艞�t}�0��$�'
[  486.183444][ T9058] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started
[  486.323646][T18274] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3670'.
[  486.610571][T18290] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  486.683383][T18300] loop5: detected capacity change from 0 to 512
[  486.741748][T18300] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  486.784541][T18300] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  486.863851][T14858] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  486.880956][T15590] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  486.968925][T18309] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3682'.
[  486.971539][T18307] loop3: detected capacity change from 0 to 512
[  487.021544][T18309] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3682'.
[  487.039565][T18315] loop0: detected capacity change from 0 to 512
[  487.078252][T18315] EXT4-fs: Ignoring removed mblk_io_submit option
[  487.080419][ T9067] bridge_slave_1: left allmulticast mode
[  487.099289][ T9067] bridge_slave_1: left promiscuous mode
[  487.119924][T18315] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  487.124114][ T9067] bridge0: port 2(bridge_slave_1) entered disabled state
[  487.139148][T18307] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  487.154092][ T9067] bridge_slave_0: left allmulticast mode
[  487.164424][ T9067] bridge_slave_0: left promiscuous mode
[  487.170656][ T9067] bridge0: port 1(bridge_slave_0) entered disabled state
[  487.181445][T18315] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  487.190097][T18307] ext4 filesystem being mounted at /152/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  487.213969][T18315] ext4 filesystem being mounted at /112/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  487.245569][T18307] 9p: Bad value for 'rq'
[  487.289063][ T9067] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  487.299487][ T9067] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  487.318873][ T9067] bond0 (unregistering): Released all slaves
[  487.361265][T14858] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  487.398197][   T28] kauditd_printk_skb: 119 callbacks suppressed
[  487.398275][   T28] audit: type=1400 audit(1774975100.226:7941): avc:  denied  { remove_name } for  pid=18338 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=29401 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  487.434968][   T28] audit: type=1400 audit(1774975100.226:7942): avc:  denied  { unlink } for  pid=18338 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=29401 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  487.503501][ T9067] hsr_slave_0: left promiscuous mode
[  487.517230][T18347] loop3: detected capacity change from 0 to 512
[  487.526237][ T9067] hsr_slave_1: left promiscuous mode
[  487.542318][T18347] EXT4-fs: Ignoring removed mblk_io_submit option
[  487.553179][   T28] audit: type=1400 audit(1774975100.384:7943): avc:  denied  { cpu } for  pid=18345 comm="syz.0.3687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  487.572634][T18347] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  487.580258][ T9067] batman_adv: batadv0: Removing interface: batadv_slave_0
[  487.599803][   T28] audit: type=1400 audit(1774975100.384:7944): avc:  denied  { create } for  pid=18345 comm="syz.0.3687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  487.621101][ T9067] batman_adv: batadv0: Removing interface: batadv_slave_1
[  487.628434][   T28] audit: type=1400 audit(1774975100.384:7945): avc:  denied  { connect } for  pid=18345 comm="syz.0.3687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  487.648230][   T28] audit: type=1400 audit(1774975100.384:7946): avc:  denied  { ioctl } for  pid=18345 comm="syz.0.3687" path="socket:[58789]" dev="sockfs" ino=58789 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  487.695577][T18347] ext4 filesystem being mounted at /153/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  487.711347][   T28] audit: type=1400 audit(1774975100.447:7947): avc:  denied  { mount } for  pid=18349 comm="syz.5.3688" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  487.736069][ T9067] team0 (unregistering): Port device team_slave_1 removed
[  487.745835][   T28] audit: type=1400 audit(1774975100.468:7948): avc:  denied  { create } for  pid=18345 comm="syz.0.3687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  487.765583][ T9067] team0 (unregistering): Port device team_slave_0 removed
[  487.785060][   T28] audit: type=1400 audit(1774975100.468:7949): avc:  denied  { setopt } for  pid=18345 comm="syz.0.3687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  487.828396][T18346] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  487.839507][T18346] bond1 (unregistering): Released all slaves
[  487.964269][T18367] vhci_hcd vhci_hcd.0: default hub control req: 0206 v0103 i0000 l0
[  488.003244][   T28] audit: type=1400 audit(1774975100.866:7950): avc:  denied  { map } for  pid=18366 comm="syz.3.3690" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=58818 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  488.090530][T18310] chnl_net:caif_netlink_parms(): no params data found
[  488.194555][T18310] bridge0: port 1(bridge_slave_0) entered blocking state
[  488.221977][T18310] bridge0: port 1(bridge_slave_0) entered disabled state
[  488.246835][T18310] bridge_slave_0: entered allmulticast mode
[  488.261343][T18310] bridge_slave_0: entered promiscuous mode
[  488.291160][T18310] bridge0: port 2(bridge_slave_1) entered blocking state
[  488.313393][T18310] bridge0: port 2(bridge_slave_1) entered disabled state
[  488.336016][T18310] bridge_slave_1: entered allmulticast mode
[  488.361503][T18310] bridge_slave_1: entered promiscuous mode
[  488.444273][T18310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  488.467529][T18310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  488.606881][T18310] team0: Port device team_slave_0 added
[  488.624842][T18415] loop3: detected capacity change from 0 to 512
[  488.635867][T18310] team0: Port device team_slave_1 added
[  488.653032][T18415] EXT4-fs: Ignoring removed mblk_io_submit option
[  488.655765][T18417] loop5: detected capacity change from 0 to 512
[  488.688862][T18415] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  488.700236][T18417] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  488.735484][T18415] ext4 filesystem being mounted at /157/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  488.789612][T18310] batman_adv: batadv0: Adding interface: batadv_slave_0
[  488.815066][T18310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  488.889840][T18310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  488.934284][T18310] batman_adv: batadv0: Adding interface: batadv_slave_1
[  488.943701][T18310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  489.067829][T18310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  489.097463][T18310] hsr_slave_0: entered promiscuous mode
[  489.103954][T18310] hsr_slave_1: entered promiscuous mode
[  489.165822][T18438] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3700'.
[  489.209461][T18446] netlink: 564 bytes leftover after parsing attributes in process `syz.3.3701'.
[  489.236675][T18446] netlink: 564 bytes leftover after parsing attributes in process `syz.3.3701'.
[  489.270540][T18446] loop3: detected capacity change from 0 to 512
[  489.330764][T18310] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  489.353794][T18310] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  489.383982][T18310] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  489.407995][T18456] loop3: detected capacity change from 0 to 128
[  489.416711][T18310] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  489.497215][T18310] 8021q: adding VLAN 0 to HW filter on device bond0
[  489.523867][T18310] 8021q: adding VLAN 0 to HW filter on device team0
[  489.562929][ T9058] bridge0: port 1(bridge_slave_0) entered blocking state
[  489.570204][ T9058] bridge0: port 1(bridge_slave_0) entered forwarding state
[  489.590327][T18468] netlink: 'syz.5.3706': attribute type 39 has an invalid length.
[  489.592216][ T9058] bridge0: port 2(bridge_slave_1) entered blocking state
[  489.605381][ T9058] bridge0: port 2(bridge_slave_1) entered forwarding state
[  491.609445][T18310] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  491.620009][T18310] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  491.659254][T18474] loop0: detected capacity change from 0 to 512
[  492.040869][T18492] netlink: 564 bytes leftover after parsing attributes in process `syz.0.3711'.
[  492.068948][T18494] loop4: detected capacity change from 0 to 128
[  492.080477][T18310] 8021q: adding VLAN 0 to HW filter on device batadv0
[  492.099581][T18495] loop0: detected capacity change from 0 to 512
[  492.152424][T18492] netlink: 564 bytes leftover after parsing attributes in process `syz.0.3711'.
[  492.414225][T18511] loop0: detected capacity change from 0 to 512
[  492.493422][T18511] EXT4-fs mount: 7 callbacks suppressed
[  492.493437][T18511] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  492.545889][T18522] loop5: detected capacity change from 0 to 512
[  492.573838][T18511] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  492.612936][T18522] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  492.630592][T18310] veth0_vlan: entered promiscuous mode
[  492.642799][T18522] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  492.659477][T18310] veth1_vlan: entered promiscuous mode
[  492.672997][   T28] kauditd_printk_skb: 33 callbacks suppressed
[  492.673012][   T28] audit: type=1400 audit(1774975105.769:7984): avc:  denied  { listen } for  pid=18527 comm="syz.3.3717" lport=34790 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  492.727482][   T28] audit: type=1400 audit(1774975105.822:7985): avc:  denied  { write } for  pid=18527 comm="syz.3.3717" laddr=fe80::12 lport=58 faddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  492.764041][T18310] veth0_macvtap: entered promiscuous mode
[  492.776652][T18310] veth1_macvtap: entered promiscuous mode
[  492.831523][T18310] batman_adv: batadv0: Interface activated: batadv_slave_0
[  492.865373][T18310] batman_adv: batadv0: Interface activated: batadv_slave_1
[  492.895515][ T9067] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  492.914133][ T9067] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  492.938317][ T9067] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  492.948240][   T28] audit: type=1400 audit(1774975106.053:7986): avc:  denied  { shutdown } for  pid=18532 comm="syz.4.3719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  492.969973][ T9067] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  492.998412][T18535] loop3: detected capacity change from 0 to 512
[  493.020404][T18535] EXT4-fs: Ignoring removed bh option
[  493.025947][   T28] audit: type=1400 audit(1774975106.126:7987): avc:  denied  { getopt } for  pid=18532 comm="syz.4.3719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  493.055604][T18535] EXT4-fs: test_dummy_encryption option not supported
[  493.096753][T18538] FAULT_INJECTION: forcing a failure.
[  493.096753][T18538] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  493.109839][   T28] audit: type=1400 audit(1774975106.126:7988): avc:  denied  { name_connect } for  pid=18532 comm="syz.4.3719" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[  493.149946][   T28] audit: type=1400 audit(1774975106.126:7989): avc:  denied  { mounton } for  pid=18310 comm="syz-executor" path="/root/syzkaller.phVmGC/syz-tmp" dev="sda1" ino=2057 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[  493.151160][T18538] CPU: 1 UID: 0 PID: 18538 Comm: syz.4.3721 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  493.151307][T18538] Tainted: [W]=WARN
[  493.151327][T18538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  493.151364][T18538] Call Trace:
[  493.151383][T18538]  <TASK>
[  493.151402][T18538]  __dump_stack+0x1d/0x30
[  493.151535][T18538]  dump_stack_lvl+0x95/0xd0
[  493.151652][T18538]  dump_stack+0x15/0x1b
[  493.151717][T18538]  should_fail_ex+0x263/0x280
[  493.151803][T18538]  should_fail+0xb/0x20
[  493.151878][T18538]  should_fail_usercopy+0x1a/0x20
[  493.152013][T18538]  _copy_to_user+0x20/0xa0
[  493.152100][T18538]  simple_read_from_buffer+0xb5/0x130
[  493.152168][T18538]  proc_fail_nth_read+0x10e/0x150
[  493.152310][T18538]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  493.152390][T18538]  vfs_read+0x1ab/0x7f0
[  493.152444][T18538]  ? __rcu_read_unlock+0x4e/0x70
[  493.152599][T18538]  ? __fget_files+0x184/0x1c0
[  493.152678][T18538]  ? mutex_lock+0x57/0x90
[  493.152752][T18538]  ksys_read+0xdc/0x1a0
[  493.152810][T18538]  __x64_sys_read+0x40/0x50
[  493.152879][T18538]  x64_sys_call+0x2886/0x3020
[  493.152980][T18538]  do_syscall_64+0x12c/0x370
[  493.153074][T18538]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  493.153132][T18538] RIP: 0033:0x7fee22dad04e
[  493.153178][T18538] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  493.153264][T18538] RSP: 002b:00007fee21846fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  493.153338][T18538] RAX: ffffffffffffffda RBX: 00007fee218476c0 RCX: 00007fee22dad04e
[  493.153386][T18538] RDX: 000000000000000f RSI: 00007fee218470a0 RDI: 0000000000000005
[  493.153423][T18538] RBP: 00007fee21847090 R08: 0000000000000000 R09: 0000000000000000
[  493.153531][T18538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  493.153586][T18538] R13: 00007fee23066038 R14: 00007fee23065fa0 R15: 00007ffe366f9ff8
[  493.153728][T18538]  </TASK>
[  493.379413][   T28] audit: type=1400 audit(1774975106.126:7990): avc:  denied  { mount } for  pid=18310 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  493.403337][   T28] audit: type=1400 audit(1774975106.126:7991): avc:  denied  { mounton } for  pid=18310 comm="syz-executor" path="/root/syzkaller.phVmGC/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  493.453305][T18543] can0: slcan on ptm0.
[  493.461106][   T28] audit: type=1400 audit(1774975106.126:7992): avc:  denied  { mounton } for  pid=18310 comm="syz-executor" path="/root/syzkaller.phVmGC/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=59070 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[  493.490435][T18546] FAULT_INJECTION: forcing a failure.
[  493.490435][T18546] name failslab, interval 1, probability 0, space 0, times 0
[  493.499556][T16020] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  493.505670][T18546] CPU: 0 UID: 0 PID: 18546 Comm: syz.6.3723 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  493.505805][T18546] Tainted: [W]=WARN
[  493.505832][T18546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  493.505873][T18546] Call Trace:
[  493.505892][T18546]  <TASK>
[  493.505921][T18546]  __dump_stack+0x1d/0x30
[  493.506055][T18546]  dump_stack_lvl+0x95/0xd0
[  493.506149][T18546]  dump_stack+0x15/0x1b
[  493.506218][T18546]  should_fail_ex+0x263/0x280
[  493.506368][T18546]  should_failslab+0x8c/0xb0
[  493.506437][T18546]  kmem_cache_alloc_noprof+0x66/0x400
[  493.506547][T18546]  ? security_inode_alloc+0x37/0x100
[  493.506697][T18546]  security_inode_alloc+0x37/0x100
[  493.506806][T18546]  inode_init_always_gfp+0x4b7/0x500
[  493.506902][T18546]  ? __pfx_shmem_alloc_inode+0x10/0x10
[  493.507096][T18546]  alloc_inode+0x58/0x170
[  493.507164][T18546]  new_inode+0x1d/0xe0
[  493.507227][T18546]  shmem_get_inode+0x246/0x750
[  493.507407][T18546]  __shmem_file_setup+0x112/0x210
[  493.507508][T18546]  shmem_file_setup+0x3b/0x50
[  493.507576][T18546]  memfd_alloc_file+0x4e/0x300
[  493.507707][T18546]  __se_sys_memfd_create+0x2e1/0x3b0
[  493.507809][T18546]  __x64_sys_memfd_create+0x31/0x40
[  493.507900][T18546]  x64_sys_call+0x1f22/0x3020
[  493.508025][T18546]  do_syscall_64+0x12c/0x370
[  493.508155][T18546]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  493.508222][T18546] RIP: 0033:0x7f956bd9c819
[  493.508263][T18546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  493.508319][T18546] RSP: 002b:00007f956a7cde08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[  493.508383][T18546] RAX: ffffffffffffffda RBX: 000000000000053b RCX: 00007f956bd9c819
[  493.508498][T18546] RDX: 00007f956a7cdee0 RSI: 0000000000000000 RDI: 00007f956be32e71
[  493.508517][T18546] RBP: 0000200000000b80 R08: 00000000ffffffff R09: 0000000000000000
[  493.508529][T18546] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000000
[  493.508541][T18546] R13: 00007f956a7cdee0 R14: 00007f956a7cdea0 R15: 00002000000001c0
[  493.508559][T18546]  </TASK>
[  493.511717][   T28] audit: type=1400 audit(1774975106.179:7993): avc:  denied  { mounton } for  pid=18310 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[  493.513321][T15590] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  493.785309][T18552] set_capacity_and_notify: 1 callbacks suppressed
[  493.785323][T18552] loop0: detected capacity change from 0 to 128
[  493.800264][T18542] can0 (unregistered): slcan off ptm0.
[  495.201972][T18562] 9p: Bad value for 'source'
[  495.808904][T18564] loop3: detected capacity change from 0 to 512
[  497.240543][T18576] pimreg: entered allmulticast mode
[  497.286262][T18576] pimreg: left allmulticast mode
[  497.347481][T18564] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  497.368953][T18584] loop6: detected capacity change from 0 to 512
[  497.375468][T18564] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  497.386856][T18584] EXT4-fs: Ignoring removed orlov option
[  497.399226][T18584] EXT4-fs: Ignoring removed mblk_io_submit option
[  497.421604][T18584] EXT4-fs error (device loop6): ext4_iget_extra_inode:5040: inode #15: comm syz.6.3735: corrupted in-inode xattr: e_value size too large
[  497.449183][T18582] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3734'.
[  497.479960][T18588] netlink: 564 bytes leftover after parsing attributes in process `syz.0.3736'.
[  497.492828][T18584] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  497.493094][T18584] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.3735: couldn't read orphan inode 15 (err -117)
[  497.502265][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  497.502289][    C1] EXT4-fs (loop6): initial error at time 1774975110: ext4_iget_extra_inode:5040: inode 15
[  497.502324][    C1] EXT4-fs (loop6): last error at time 1774975110: ext4_iget_extra_inode:5040: inode 15
[  497.545584][T18588] netlink: 564 bytes leftover after parsing attributes in process `syz.0.3736'.
[  497.560660][T18588] loop0: detected capacity change from 0 to 512
[  497.604116][T18584] loop6: lost filesystem error report for type 5 error -117
[  497.605508][T18584] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  497.610291][   T28] kauditd_printk_skb: 8 callbacks suppressed
[  497.610336][   T28] audit: type=1400 audit(1774975110.945:8002): avc:  denied  { read } for  pid=18593 comm="syz.0.3738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  497.663503][T14858] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  497.673827][   T28] audit: type=1326 audit(1774975110.997:8003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18589 comm="syz.4.3737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee22dec819 code=0x7ffc0000
[  497.674231][T18310] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  497.707271][   T28] audit: type=1326 audit(1774975110.997:8004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18589 comm="syz.4.3737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee22dec819 code=0x7ffc0000
[  497.731346][   T28] audit: type=1326 audit(1774975110.997:8005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18589 comm="syz.4.3737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee22dec819 code=0x7ffc0000
[  497.731901][T14858] ==================================================================
[  497.763505][T14858] BUG: KCSAN: data-race in has_bh_in_lru / invalidate_bh_lru
[  497.770924][T14858] 
[  497.773256][T14858] write to 0xffff888237c27760 of 8 bytes by task 18310 on cpu 0:
[  497.780979][T14858]  invalidate_bh_lru+0x89/0xe0
[  497.785774][T14858]  smp_call_function_many_cond+0x743/0xc30
[  497.791603][T14858]  on_each_cpu_cond_mask+0x3c/0x80
[  497.796770][T14858]  invalidate_bh_lrus+0x2a/0x30
[  497.801642][T14858]  invalidate_bdev+0x42/0x70
[  497.806247][T14858]  ext4_put_super+0x610/0x7b0
[  497.810946][T14858]  generic_shutdown_super+0xee/0x220
[  497.816258][T14858]  kill_block_super+0x2a/0x70
[  497.820956][T14858]  ext4_kill_sb+0x42/0x80
[  497.825303][T14858]  deactivate_locked_super+0x75/0x1c0
[  497.830783][T14858]  deactivate_super+0x97/0xa0
[  497.835476][T14858]  cleanup_mnt+0x2bb/0x330
[  497.839957][T14858]  __cleanup_mnt+0x19/0x20
[  497.844405][T14858]  task_work_run+0x130/0x1a0
[  497.849022][T14858]  exit_to_user_mode_loop+0x1f4/0x6f0
[  497.854406][T14858]  do_syscall_64+0x249/0x370
[  497.859057][T14858]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  497.864965][T14858] 
[  497.867325][T14858] read to 0xffff888237c27760 of 8 bytes by task 14858 on cpu 1:
[  497.874958][T14858]  has_bh_in_lru+0x35/0x1f0
[  497.879476][T14858]  smp_call_function_many_cond+0x2c1/0xc30
[  497.885301][T14858]  on_each_cpu_cond_mask+0x3c/0x80
[  497.890455][T14858]  invalidate_bh_lrus+0x2a/0x30
[  497.895320][T14858]  invalidate_bdev+0x42/0x70
[  497.899955][T14858]  ext4_put_super+0x610/0x7b0
[  497.904656][T14858]  generic_shutdown_super+0xee/0x220
[  497.909999][T14858]  kill_block_super+0x2a/0x70
[  497.914699][T14858]  ext4_kill_sb+0x42/0x80
[  497.919062][T14858]  deactivate_locked_super+0x75/0x1c0
[  497.924466][T14858]  deactivate_super+0x97/0xa0
[  497.929175][T14858]  cleanup_mnt+0x2bb/0x330
[  497.933642][T14858]  __cleanup_mnt+0x19/0x20
[  497.938085][T14858]  task_work_run+0x130/0x1a0
[  497.942696][T14858]  exit_to_user_mode_loop+0x1f4/0x6f0
[  497.948095][T14858]  do_syscall_64+0x249/0x370
[  497.952729][T14858]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  497.958638][T14858] 
[  497.960973][T14858] value changed: 0xffff888100440680 -> 0x0000000000000000
[  497.968177][T14858] 
[  497.970519][T14858] Reported by Kernel Concurrency Sanitizer on:
[  497.976697][T14858] CPU: 1 UID: 0 PID: 14858 Comm: syz-executor Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  497.987829][T14858] Tainted: [W]=WARN
[  497.991647][T14858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  498.001716][T14858] ==================================================================
[  498.010303][   T28] audit: type=1326 audit(1774975110.997:8006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18589 comm="syz.4.3737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee22dec819 code=0x7ffc0000
[  498.034027][   T28] audit: type=1326 audit(1774975110.997:8007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18589 comm="syz.4.3737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee22dec819 code=0x7ffc0000
[  498.057703][   T28] audit: type=1326 audit(1774975110.997:8008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18589 comm="syz.4.3737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fee22dec819 code=0x7ffc0000
[  498.081261][   T28] audit: type=1326 audit(1774975110.997:8009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18589 comm="syz.4.3737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee22dec819 code=0x7ffc0000
[  498.117206][   T28] audit: type=1326 audit(1774975110.997:8010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18589 comm="syz.4.3737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fee22dec819 code=0x7ffc0000
[  498.153097][   T28] audit: type=1326 audit(1774975111.008:8011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18589 comm="syz.4.3737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee22dec819 code=0x7ffc0000
[  498.263983][T18603] loop6: detected capacity change from 0 to 512
[  498.274650][T18603] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[  498.288507][T18603] EXT4-fs (loop6): 1 truncate cleaned up
[  498.294933][T18603] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  498.393658][T18607] netlink: 'syz.3.3739': attribute type 11 has an invalid length.
[  498.983101][T18310] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.