last executing test programs:

9m26.965829936s ago: executing program 1 (id=1906):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000001080)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x41, 0x0, @multicast2}, 0x20020003}}, 0x2e)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000000c0))
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d32, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x9, 0x4, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00')
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
syz_emit_ethernet(0x23, &(0x7f0000002840)=ANY=[@ANYBLOB="aaaaaaaaaaaa0fb1bdb6cb293d09b8f100114242db84e624d4dd79e42b8787ef52a0cd"], 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280100001700000224bd700000000000ff01000000000000000000000000000100000000000000000a010101000000000000000000000000ac1414bb00000000000000000000000000000000000000000000ffffac1e01014e210000000000000200a06400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="64010101000000000000100000000024e8f21e050000006400ac1414aa0000000000000000000000004e240000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0d0000000000000000000000000000000000000000000000fcffffffffffffff0000000000000000000000000000000000000000000000000000100000004000000000000000000000000000000000000000000000000004000000000000000003000000000000000200000200000000f9ffffff3800000000040000fbffffff"], 0x128}, 0x1, 0x0, 0x0, 0x4008001}, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0xe8)
mount$bpf(0x200000000000, 0x0, 0x0, 0xb89046, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0)
mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x1f, 0x6, 0x1, 0x2000, 0x10000}, 0x28)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x2, 0x2, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100200}, 0x94)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/sem\x00', 0x1800, 0x0)
preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1, 0x9, 0x3)

9m26.585353165s ago: executing program 1 (id=1911):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x800)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380), 0x4)
perf_event_open$cgroup(&(0x7f0000000000)={0x4, 0x80, 0x8, 0xfa, 0x6, 0x6, 0x0, 0x1ff, 0x90702, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x8, 0x5}, 0x210, 0x9, 0x1, 0x8, 0x101, 0x6, 0x5, 0x0, 0x7, 0x0, 0x1}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0xb)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x1f8, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1000001}, @CTA_NAT_SRC={0x40, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00'}, @CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x14}}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_PROTOINFO={0x60, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x5c, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x25}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x10}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x5}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x8}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x4}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0xaa}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x80}, @CTA_PROTOINFO_DCCP_STATE={0x5}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0xb8}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x3}]}}, @CTA_TUPLE_MASTER={0x58, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_NAT_SRC={0x64, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x44, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @broadcast}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @remote}]}]}, 0x1f8}}, 0x0)
mkdir(0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_ro(r2, 0x0, 0x275a, 0x0)
write$cgroup_int(r3, 0x0, 0x0)
write$cgroup_int(r3, 0x0, 0x0)
r4 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f0000000880), 0x12)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_clone(0x22023500, 0x0, 0x20010, 0x0, 0x0, 0x0)
openat$cgroup_int(r3, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x541b, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\x00'], 0x50)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8946, &(0x7f0000000040)={'veth0_vlan\x00', @random='\x00\x00\x00\x00\x00 '})
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002a00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r6 = perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r6, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0, 0x8}})

9m26.34195654s ago: executing program 1 (id=1915):
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)={0x20, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0xc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400})

9m26.211167124s ago: executing program 1 (id=1917):
r0 = socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x2e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000600)={[{@grpquota}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@grpjquota}]}, 0x3, 0x79b, &(0x7f0000001200)="$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")
r1 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$peeksig(0x4209, r1, &(0x7f0000000080)={0x9, 0x1, 0xfffffdfc}, 0x0)
r2 = perf_event_open$cgroup(&(0x7f00000004c0)={0x2, 0x80, 0x40, 0x6, 0x3, 0x2d, 0x0, 0x3, 0x40000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6bc826d8, 0x1, @perf_bp={&(0x7f00000003c0), 0x8}, 0x8041, 0x4, 0xb, 0x5, 0x98, 0x7ff, 0x2, 0x0, 0x5, 0x0, 0x5}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0xd)
perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf9, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0, 0x1}, 0x800, 0xa, 0x0, 0x0, 0x1ff}, r1, 0xffffffffffffffff, r2, 0x9)
socket$packet(0x11, 0x3, 0x300)
r3 = socket$netlink(0x10, 0x3, 0x4)
write(r3, &(0x7f0000000000)="2700000014000707030e0000120f0a0111000100f5a1fadc9d150625b6e3e05660fe0012ff0000", 0x27)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0)
ioctl$INCFS_IOC_PERMIT_FILL(0xffffffffffffffff, 0x40046721, &(0x7f0000000380)={r4})
write$cgroup_int(r4, &(0x7f0000000040)=0x1f00, 0x12)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
syz_open_procfs$pagemap(r5, &(0x7f00000000c0))
recvmsg$can_raw(r4, &(0x7f0000002a80)={&(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @empty}}}}, 0x80, &(0x7f00000029c0)=[{&(0x7f00000001c0)=""/141, 0x8d}, {&(0x7f0000000280)=""/231, 0xe7}, {&(0x7f0000000380)}, {&(0x7f0000000440)=""/99, 0x63}, {&(0x7f0000000780)=""/132, 0x84}, {&(0x7f0000000840)=""/217, 0xd9}, {&(0x7f00000019c0)=""/4096, 0x1000}], 0x7, &(0x7f0000002a40)}, 0x40000060)

9m25.53065997s ago: executing program 1 (id=1921):
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)={0x124, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x104, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x88, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x8e}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_NAT_TUPLE={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, @CTA_EXPECT_NAT={0xc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400})

9m25.196456898s ago: executing program 1 (id=1927):
timerfd_create(0x8, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, 0x0, 0x0)
getpid()
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
r2 = socket$xdp(0x2c, 0x3, 0x0)
r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0)
r4 = syz_clone3(&(0x7f0000001a00)={0x102009080, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x10}, &(0x7f0000000600)=""/151, 0x97, &(0x7f0000001940)=""/75, &(0x7f00000019c0)=[0xffffffffffffffff], 0x1}, 0x58)
write$cgroup_pid(r3, &(0x7f0000001a80)=r4, 0x12)
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4)
mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000001, 0x11, r2, 0x100000000)
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000001700)={<r5=>0x0, @remote, @broadcast}, &(0x7f0000001740)=0xc)
r6 = dup2(r2, r2)
r7 = open(&(0x7f0000001800)='./file0\x00', 0x535202, 0x144)
bpf$PROG_LOAD(0x5, &(0x7f0000001880)={0x10, 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="850000001f0064491ceb0725711b2b000003f8f19db2a4810e2b85030d552571674fec"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000700)=""/4096, 0x40f00, 0x24, '\x00', r5, @fallback=0x22, 0xffffffffffffffff, 0x8, &(0x7f0000001780)={0x9, 0x4}, 0x8, 0x10, &(0x7f00000017c0)={0x2, 0xc, 0x3, 0x4}, 0x10, 0xffffffffffffffff, r6, 0x0, &(0x7f0000001840)=[r7, 0x1], 0x0, 0x10, 0x101}, 0x94)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x9}, 0x10c0e8, 0x0, 0x0, 0x3, 0x3, 0x1, 0x7fff}, 0x0, 0xff6fbfffffffffff, r3, 0x1)
write$selinux_context(r3, &(0x7f0000000280)='system_u:object_r:crack_exec_t:s0\x00', 0x22)
socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="5000000010009d972abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="d0700400400000001c0012800c0001006d6163766c616e000c0002800800010008000000140035006d6163766c616e300000000000000000"], 0x50}}, 0x40080c0)
readv(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @loopback, 0x4f21, 0x3, 'lc\x00', 0x5, 0x8, 0x6c}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x4, 0xcd, 0x1}}, 0x44)
sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

9m25.079190241s ago: executing program 32 (id=1927):
timerfd_create(0x8, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, 0x0, 0x0)
getpid()
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
r2 = socket$xdp(0x2c, 0x3, 0x0)
r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0)
r4 = syz_clone3(&(0x7f0000001a00)={0x102009080, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x10}, &(0x7f0000000600)=""/151, 0x97, &(0x7f0000001940)=""/75, &(0x7f00000019c0)=[0xffffffffffffffff], 0x1}, 0x58)
write$cgroup_pid(r3, &(0x7f0000001a80)=r4, 0x12)
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4)
mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000001, 0x11, r2, 0x100000000)
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000001700)={<r5=>0x0, @remote, @broadcast}, &(0x7f0000001740)=0xc)
r6 = dup2(r2, r2)
r7 = open(&(0x7f0000001800)='./file0\x00', 0x535202, 0x144)
bpf$PROG_LOAD(0x5, &(0x7f0000001880)={0x10, 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="850000001f0064491ceb0725711b2b000003f8f19db2a4810e2b85030d552571674fec"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000700)=""/4096, 0x40f00, 0x24, '\x00', r5, @fallback=0x22, 0xffffffffffffffff, 0x8, &(0x7f0000001780)={0x9, 0x4}, 0x8, 0x10, &(0x7f00000017c0)={0x2, 0xc, 0x3, 0x4}, 0x10, 0xffffffffffffffff, r6, 0x0, &(0x7f0000001840)=[r7, 0x1], 0x0, 0x10, 0x101}, 0x94)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x9}, 0x10c0e8, 0x0, 0x0, 0x3, 0x3, 0x1, 0x7fff}, 0x0, 0xff6fbfffffffffff, r3, 0x1)
write$selinux_context(r3, &(0x7f0000000280)='system_u:object_r:crack_exec_t:s0\x00', 0x22)
socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="5000000010009d972abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="d0700400400000001c0012800c0001006d6163766c616e000c0002800800010008000000140035006d6163766c616e300000000000000000"], 0x50}}, 0x40080c0)
readv(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @loopback, 0x4f21, 0x3, 'lc\x00', 0x5, 0x8, 0x6c}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x4, 0xcd, 0x1}}, 0x44)
sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

3m54.800910169s ago: executing program 0 (id=4115):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0xa}}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x1}}], {0x14}}, 0x50}}, 0x0)

3m54.631365293s ago: executing program 0 (id=4116):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="180200000100000000000000120000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000080)='GPL\x00'}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x68000000}, 0x0)
r1 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0xfffffffc, @private0={0xfc, 0x0, '\x00', 0x1}}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x80fe)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f00000001c0), 0x12)
r4 = openat$cgroup_devices(r2, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r4, &(0x7f0000000140)={'c', ' *:* ', 'rm\x00'}, 0x9)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0)
r5 = socket$packet(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f00000004c0)={{0x1, 0x1, 0x18, <r6=>r0, {0x4}}, './file0\x00'})
syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="184d25000700000003080000009d00008500000000000000483531f8f1d7f1376b0947a0630000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_RELOAD_REGDB(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x14, r8, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40000)
r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x50)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0xf, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r11, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x24000890}, 0x0)
ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r10, 0xf504, 0x0)

3m54.31841145s ago: executing program 0 (id=4121):
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4000005)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)

3m54.237779762s ago: executing program 0 (id=4122):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="180000007800911fdabcf8b3077fa54a07"], 0xfe33)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800"/13], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010025"], 0x0, 0x46, 0x0, 0x1}, 0x28)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x2, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20004014)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
write$tun(r1, &(0x7f0000000500)={@void, @void, @mpls={[], @ipv6=@tipc_packet={0x3, 0x6, '\x00', 0x64, 0x6, 0x0, @empty, @mcast1, {[@srh={0x3c, 0x0, 0x4, 0x0, 0x2, 0x50, 0x2}, @dstopts={0x2f, 0x0, '\x00', [@ra={0x5, 0x2, 0x9}]}, @hopopts={0x3b}], @name_distributor={{0x44, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x7, 0x0, 0x1, 0x81e, 0x1, 0x3, 0x4e21, 0x4e20, 0x4, 0x2}, [{0xfffffff7, 0xc974, 0x1cb00000, 0x3, 0x8, 0x0, 0x2, 0x3}]}}}}}, 0x8c)
setns(r1, 0x20000)

3m54.144481275s ago: executing program 0 (id=4124):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x810, &(0x7f0000000000)={[{@errors_remount}, {@grpquota}]}, 0x8, 0x4fe, &(0x7f0000000a40)="$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")
getdents64(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x9}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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")
prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a)
r1 = creat(&(0x7f00000007c0)='./bus\x00', 0x182)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148)
r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x182)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x107b42, 0x1b4)
ftruncate(r4, 0x6000000)
fallocate(r3, 0x10, 0xbf5, 0x8)
r5 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21)
pwritev2(r5, &(0x7f0000000240)=[{}], 0x1, 0x2000, 0x0, 0x3)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000740)={0xc, r1, 0x6, 0x0, 0xa697, 0x3})

3m44.648889431s ago: executing program 0 (id=4156):
syz_open_dev$vcsa(&(0x7f0000000000), 0x6, 0x14882)
socket(0x2, 0x80805, 0x0)
shutdown(0xffffffffffffffff, 0x0)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='!\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="000000000000000200"], 0x50)
ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000080)={0x2, 0xba, "bf46e9f766490cef557c9bfe90444fe6acbe27a4143511a680b4e61da05b6c124046ee62b922c24b69fb57953c3c4bd4d40f9c9b62bca557ed27a58a46533253b118afed6ad94cb9b948c625a5b73f2e8142bf611cf98f4589220e49ba18dea80e65f3baba6b307d2deb5494353992eb8ab3f5ead406c66e3e2eeffad6d2d4d35f95f8580be2e588ea3be3b38e93db81be811b9b32e0499418a627105fce5d82626e20fe68874701ad2cf882c5a6d305979618ce6601ba2ca210"})
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x1, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
r1 = socket(0x40000000015, 0x5, 0x0)
sendmsg(r1, &(0x7f0000000200)={&(0x7f0000000040)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000019580)=ANY=[], 0x20}, 0x0)
close(0x3)
bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffd4c)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00')
write$cgroup_subtree(r2, 0x0, 0x31)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380), 0xc)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="666c7573682c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c756e695f786c6174653d302c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c00a56dc300a96c9b20f3fabdcb10cad696323259cc0500e5f91620d7b9dc000000000057c51b98cfb3b59f8db941abb77112000000b8ff"], 0x1, 0x250, &(0x7f0000000b80)="$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")
r3 = getpid()
r4 = syz_pidfd_open(r3, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124)
setns(r4, 0x0)
umount2(&(0x7f0000000040)='.\x00', 0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x8, 0x80000000, 0x3ff, 0x5, 0x140a2, r2, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x50)
close_range(r0, 0xffffffffffffffff, 0x0)

3m44.505097335s ago: executing program 33 (id=4156):
syz_open_dev$vcsa(&(0x7f0000000000), 0x6, 0x14882)
socket(0x2, 0x80805, 0x0)
shutdown(0xffffffffffffffff, 0x0)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='!\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="000000000000000200"], 0x50)
ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000080)={0x2, 0xba, "bf46e9f766490cef557c9bfe90444fe6acbe27a4143511a680b4e61da05b6c124046ee62b922c24b69fb57953c3c4bd4d40f9c9b62bca557ed27a58a46533253b118afed6ad94cb9b948c625a5b73f2e8142bf611cf98f4589220e49ba18dea80e65f3baba6b307d2deb5494353992eb8ab3f5ead406c66e3e2eeffad6d2d4d35f95f8580be2e588ea3be3b38e93db81be811b9b32e0499418a627105fce5d82626e20fe68874701ad2cf882c5a6d305979618ce6601ba2ca210"})
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x1, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
r1 = socket(0x40000000015, 0x5, 0x0)
sendmsg(r1, &(0x7f0000000200)={&(0x7f0000000040)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000019580)=ANY=[], 0x20}, 0x0)
close(0x3)
bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffd4c)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00')
write$cgroup_subtree(r2, 0x0, 0x31)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380), 0xc)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="666c7573682c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c756e695f786c6174653d302c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c00a56dc300a96c9b20f3fabdcb10cad696323259cc0500e5f91620d7b9dc000000000057c51b98cfb3b59f8db941abb77112000000b8ff"], 0x1, 0x250, &(0x7f0000000b80)="$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")
r3 = getpid()
r4 = syz_pidfd_open(r3, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124)
setns(r4, 0x0)
umount2(&(0x7f0000000040)='.\x00', 0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x8, 0x80000000, 0x3ff, 0x5, 0x140a2, r2, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x50)
close_range(r0, 0xffffffffffffffff, 0x0)

5.672851995s ago: executing program 3 (id=5386):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0xfffffffe, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsopen(0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setparam(0x0, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socket$key(0xf, 0x3, 0x2)
ioctl$KDSETMODE(r4, 0x4b3a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="e50002000000000071113d00000000008510000002000000850000007d00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
fcntl$setlease(r0, 0x400, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="7a0af8ff7525707cbfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b2595285faa6ead0169191d54f8196217fc563e2fc91f6da4dad4fdc2eb1b5986fc4a3f611a7c80000040000000000b1a297cfddd73f30f2382f6cda4bfdd45be583823c0f092248a57d48621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000800db583620ce7243d1ae9f2cfe401dbef6619358399aa9c2acd068c03efefd8bc77edf2d34b12cd48a1b20fb7dd843267e0331759f4ec6b5b0af58e604f494eff289026d5045ef08000000000000007718a09f4800afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc70bb30d435aa8b5202db761014b1b999a12df6bee431a6681000000263b6233e1c0fe30e384c3cb07b74a72291a1a2b523dd81b6651b1ee48e999bb004823ebcd8c65743f31f84b263ab9b3426692f01ad194f302d7a658e90000000001000000b6b2f25ddb8c640ab321a402058c9221b6870814cf4ee23ddb79fff5eb156e0a000000000000f2bd1d4a178d86d6935eb8b75bc4eb680d10e8b6a54c5c5b011cf63ff76622939a20d4aadf85db40179c2cf83ee07e30a279d8f9f3bc282deb53a03409f8e6972f3f720d045923702cede0f3e91411f3f1b16f065624f280a7dcce8db910f93c49b9e0aa390d0da6972ed719d7e0efb2bb713d1890e317c8de105c3933fd5d5bf38f6b9fc39fc829dcfe4af8ac5fbb7314a7a433e0182767d1376eda2b9c66200349e62d4d0ab1a1dc51907c9800000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x200000e, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x600, 0x4000000}, 0x28)

4.519549162s ago: executing program 3 (id=5389):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newtaction={0x50, 0x30, 0x1, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_vlan={0x38, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x806}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x50}}, 0x4800)

4.425098625s ago: executing program 3 (id=5390):
r0 = socket$inet6(0xa, 0x1, 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
getsockopt$netlink(r1, 0x10e, 0xb, 0x0, &(0x7f0000001240))
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a0101", @ANYRES64=r2, @ANYBLOB="dd340f9317fe4fe411809e3272cd034e83fc8ef6a8482c5fe72fd64cbff11741da", @ANYRES64=r2], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0)
r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=<r6=>0x0)
sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x840)
write$nci(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="4004"], 0x7)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x5e}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x1}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x2c0c0}, 0x0)
sendmsg$inet6(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x30}, 0x0)

3.413046939s ago: executing program 5 (id=5393):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x9, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x54, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xc022, 0xa}, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000061121c00000000009500f8ff00000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x9)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x4a, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb87, &(0x7f0000002380)="$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")
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000)
preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4083, 0xffffffdf}], 0x1b, 0x0, 0x0, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r3, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xd000, 0x0, 0xfffffffa, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x61000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x8001, 0xc}, 0xa100, 0xc8, 0x1000003, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x3, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$unix(r4, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63f580fc02082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef)
perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0xfe, 0x9, 0x0, 0x0, 0x0, 0x0, 0x9184, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x100, 0x7}, 0x481a, 0x0, 0x0, 0x7, 0x0, 0x0, 0xf792, 0x0, 0xfffffffe, 0x0, 0x2000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0xa)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc02082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0xfdef)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000980)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000ff0200000000000000000000000000014e220008000000000a00000000000000786cee2cdce6962549897563db0c00d483", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a90000000000000000000000000000000100000000000000fdffffffffffffffffffffffffffffff000000000000000000000000000000000000000000000000000a0000000000000000000000804000020000000000000800000000000000000000000000000000440005000a010101000000000000000000000000000000003c000000000000007f00000100000000000000000000000002000000040300"/180], 0xfc}}, 0x0)

2.489829791s ago: executing program 5 (id=5399):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="34010000170001000000000000000000640101020000000000000000000000000000000097581e58e0000002000000000000000000000000fc020000000000000000000000000000fe8000000000000000000000000000aa0000004000"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e00000020000000000000000000000000a01010000000000000000000000000000000000020100030200002000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000b10f00000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000004000000b86b6e000000000000000000feffffff0000000000000000000000000c0008"], 0x134}}, 0x4000)
r1 = io_uring_setup(0x1b56, &(0x7f0000000100)={0x0, 0x1, 0x400, 0x3, 0x402c1})
close_range(r1, 0xffffffffffffffff, 0x0)
timer_create(0x0, 0x0, 0x0)
syz_extract_tcp_res$synack(&(0x7f0000000080), 0x1, 0x0)
fcntl$lock(0xffffffffffffffff, 0x24, 0x0)
unshare(0x22020600)
ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f00000001c0)={'macsec0\x00', {0x2, 0x0, @empty}})
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000740))
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0x42795000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendto$unix(r2, &(0x7f00000004c0)="04", 0x1, 0xd1, 0x0, 0x0)
recvfrom$unix(r3, 0x0, 0x0, 0x10102, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r4=>r0, {0x1}}, './file0\x00'})
ioctl$HIDIOCGCOLLECTIONINDEX(r4, 0x40184810, &(0x7f0000000040)={0x2, 0x0, 0x4, 0x2, 0x2, 0x71})
syz_extract_tcp_res(&(0x7f0000000180), 0x1, 0x6)

2.489371531s ago: executing program 2 (id=5400):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newtaction={0x50, 0x30, 0x1, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_vlan={0x38, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x806}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x50}}, 0x4800)

2.437435422s ago: executing program 2 (id=5401):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="180200000100000000000000120000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d0000"], &(0x7f0000000080)='GPL\x00'}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x68000000}, 0x0)
r1 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0xfffffffc, @private0={0xfc, 0x0, '\x00', 0x1}}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x80fe)
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000001c0), 0x12)
r5 = openat$cgroup_devices(r3, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r5, &(0x7f0000000140)={'c', ' *:* ', 'rm\x00'}, 0x9)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0)
r6 = socket$packet(0x11, 0x2, 0x300)
bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYRESOCT=r2, @ANYRESDEC=r4, @ANYBLOB="48f3fa05ac4ddb2b88e2906de7a011d2ce931ea9d9cceff208715df18562d707c524d1badedb3961a2009694814f20cd8ce112d2075aafff48efb8be2c7a9e31b146451ae35060b61ac50a23fe291f7f5a218344c546d3d1a9bc4a89e60e69f657b25bf779fecfc22481232357c572d07bdc15149f1e5c134d733b88e352e661e6713925d2", @ANYRES16=r3, @ANYBLOB="45e39477ac6df23e3c09170c046216d34ee0648c300430092abacd8eb3aa3b8199dcae9e5b9a90b552f498d9b2703f06a79b478df0259ca68848c6e60ab30a4bd9a1fb6e7fedd56b6d1e4c9c5e20d7153c17a4de428353b038eabe2e9445aabe4348856642a3584eb657c721ed8c28e89ee42625a61fa4463fb440c83fccbf062f8ded5a510da14d"], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f00000004c0)={{0x1, 0x1, 0x18, <r7=>r0, {0x4}}, './file0\x00'})
syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r7)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="184d25000700000003080000009d00008500000000000000483531f8f1d7f1376b0947a0630000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000180)=r8, 0x4)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_RELOAD_REGDB(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x14, r9, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40000)
r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x50)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0xf, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r12, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r13 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x24000890}, 0x0)
ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r11, 0xf504, 0x0)

2.287924516s ago: executing program 5 (id=5402):
r0 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

2.268493286s ago: executing program 5 (id=5403):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
prctl$PR_GET_NO_NEW_PRIVS(0x27) (fail_nth: 5)

2.021238742s ago: executing program 5 (id=5405):
r0 = socket$nl_route(0x10, 0x3, 0x0)
clock_adjtime(0x0, &(0x7f0000000000)={0x66b7, 0x0, 0x0, 0x7, 0x0, 0xfffffffffffffffd, 0x77, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80, 0x2, 0xf0, 0x6, 0x5, 0x0, 0xf439})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="44000000100001042cbd7000feffffff00000000", @ANYRESHEX=r0, @ANYBLOB="81020000a80006002400128009000100626f6e64000000090000028005000e00000000000100000002000000"], 0x44}, 0x1, 0x0, 0x0, 0x200080d0}, 0x54)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r2=>0x0})
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
ioctl$SNAPSHOT_SET_SWAP_AREA(r5, 0x400c330d, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000900)=""/81, &(0x7f0000000980)=0x51)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x7c, &(0x7f00000000c0)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000400110000000a600e41b0000900ac00060411000000040012000a000303ff48035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), ""/16, <r8=>0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000540)=[0x0], 0x0, 0x7a, &(0x7f0000000580), 0x0, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x7e, 0x8, 0x8, &(0x7f0000000640)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710439000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
getsockopt$inet_mreqn(r6, 0x0, 0x24, &(0x7f0000000880)={@dev}, &(0x7f0000000580)=0xc)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="12000000090000000400000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r10}, &(0x7f0000000340), &(0x7f0000000140)=r9}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r10, &(0x7f0000000040)}, 0x20)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001980)=ANY=[@ANYBLOB="500000000101010100000000000000000a000000300001802c00018014000300fe80000000000000000000000000006a14000400ff0200000000000000000000000000010c00198008000100490c0000"], 0x50}}, 0x4)
write$cgroup_subtree(r5, &(0x7f0000000c00)=ANY=[@ANYBLOB="380ce910c7f3024cc46b049fb9e246452d6e65745f636c6b8dbea93bc53582202d63707520"], 0x15)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000840)={'syztnl0\x00', &(0x7f00000007c0)={'syztnl0\x00', r8, 0x80, 0x20, 0x2, 0xe, {{0xc, 0x4, 0x1, 0x5, 0x30, 0x67, 0x0, 0x9, 0x4, 0x0, @private=0xa010101, @empty, {[@lsrr={0x83, 0x1b, 0x3f, [@empty, @multicast2, @broadcast, @local, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x37}]}]}}}}})
r12 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0)
r13 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a80), r9)
sendmsg$TIPC_CMD_GET_LINKS(r12, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10800001}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, r13, 0x300, 0x70bd29, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x6c6}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x20000840)
ioctl$OCFS2_IOC_GROUP_ADD64(r4, 0x40186f03, &(0x7f0000000040)={0x10000, 0x5, 0x1, 0x4})

1.751575769s ago: executing program 5 (id=5406):
socket$kcm(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x0, 0xec2bd, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x7, 0x800000000100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x10006, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffc46f}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x2}, 0x4, 0x0, 0x11000, 0x0, 0x1, 0x100, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000)
socket$tipc(0x1e, 0x5, 0x0)
getpid()
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @loopback, 0x4e1f, 0x3, 'lblc\x00', 0x11, 0x10000004, 0x8}, 0x2c)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, 0x0, 0x40090)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000060a010400000000000000000000300004802c0001800c000100636f756e746572001c0002800c00000000000001000900edff73797a3200000000140000001100010000000000000000000100000ad267c6e56d5b4b94071c11cb1e34f9ec4fd057c0b2bf6c67c1fccfba14688b9aae567bc1113362d4c2100667a70ed64456b18026a873711dd019df3a82000000000000000000000090781c00"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
socket$kcm(0xa, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x403, 0x70bd2e, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300, 0x14154}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x9}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x8044)
socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="b8000000190001000000000000000100e00000020000000000000000000000000000000000000000000000000000000000000010000000000a00200062000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xb8}}, 0x4004)
sendmsg$nl_xfrm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a000000870000001f2a0f94261bf18c1170ed76a503973f3a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f7ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000fbffffffffffffff000000000000000000000000000000000000000000000002000000000000000000000000c06b6e000000000000000000"], 0xb8}}, 0x2c000010)
sendmsg$nl_xfrm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x40000000, 0x800, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x800, 0x1000, 0x0, 0xa, 0x20, 0x0, 0x2}, {0x0, 0x1, 0xe}, {0x6a80, 0x6, 0x5, 0x1}, 0xfffffffe, 0x6e6bbc, 0x0, 0x0, 0x3, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x4040870}, 0x0)
r5 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000100)={@remote, @dev={0xac, 0x14, 0x14, 0x34}, 0xffffffffffffffff, "b2655c0bcb38a112b89d848fb97c4f219137ff9ab87b6540c45bfc217ffc3db2", 0x6, 0x1, 0x4, 0xe}, 0x3c)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x12, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94)

1.343375799s ago: executing program 2 (id=5411):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
sendmsg(0xffffffffffffffff, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000600)='tasks\x00', 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
sendmsg$TIPC_NL_KEY_FLUSH(r2, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f00000006c0)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r3, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x1, 0xe468, 0x3836}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20000009)
write$cgroup_pid(r1, &(0x7f0000000040), 0x12)
preadv(r1, &(0x7f0000000740)=[{&(0x7f0000000340)=""/65, 0x41}], 0x1, 0x54e7, 0x7)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x0, 0x5}, 0x1000, 0x0, 0x80000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, &(0x7f0000000080)=0x3, 0x4)
getsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, 0x0, &(0x7f0000000340))
r5 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00')
lseek(r5, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="666c7573682c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c756e695f786c6174653d302c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c00a56dc300a96c9b20f3fabdcb10cad696323259cc0500e5f91620d7b9dc000000000057c51b98cfb3b59f8db941abb77112000000b8ff"], 0x1, 0x250, &(0x7f0000000b80)="$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")
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x51c}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
getpid()
setns(0xffffffffffffffff, 0x24020000)
openat$cgroup_type(r5, &(0x7f00000003c0), 0x2, 0x0)
umount2(&(0x7f0000000040)='.\x00', 0x2)

1.325698468s ago: executing program 6 (id=5412):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
sendmsg(0xffffffffffffffff, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000600)='tasks\x00', 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
sendmsg$TIPC_NL_KEY_FLUSH(r2, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f00000006c0)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r3, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x1, 0xe468, 0x3836}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20000009)
write$cgroup_pid(r1, &(0x7f0000000040), 0x12)
preadv(r1, &(0x7f0000000740)=[{&(0x7f0000000340)=""/65, 0x41}], 0x1, 0x54e7, 0x7)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x0, 0x5}, 0x1000, 0x0, 0x80000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, &(0x7f0000000080)=0x3, 0x4)
getsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, 0x0, &(0x7f0000000340))
r5 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00')
lseek(r5, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="666c7573682c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c756e695f786c6174653d302c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c00a56dc300a96c9b20f3fabdcb10cad696323259cc0500e5f91620d7b9dc000000000057c51b98cfb3b59f8db941abb77112000000b8ff"], 0x1, 0x250, &(0x7f0000000b80)="$eJzs2k9rHHUYB/BnYqUxJd2I/2hB+kMP6mVocvIgkiAtiAFFG6EK0qmZ6JJxN2SWwIrYeNGLB1+CZ/HoTZCKFy+5+Ao8eMslxx7EkXbTNhtWyKJxS/P5XPZhn/0uz/AMw+8wu69888n6Wp2vFb2YyrKYWoztuJXFXEzFXdvx0gtXf332navvvbG0vHzp7ZQuL12ZX0gpnb3w0/ufff/czd6Zd384++Pp2Jn7YHfviz92nt45t/vXlY/bdWrXqdPtpSJd73Z7xfWqTKvtej1P6a2qLOoytTt1uTnUX6u6Gxv9VHRWZ2c2Nsu6TkWnn9bLfup1U2+zn4qPinYn5XmeZmeCf2Plu1tNE3vNo9ciu/vd7O/RiuzxlD2xmD11LXtmOzu31zStyQ7KMbm3/6ZpHvs2zty0/xPlwEN9OqL6amtla2XwOegvrUU7qijjYrTiz7h9m+wb1JdfX750Md0xF19WN/bzN7ZWHhnOz0cr5kbn5wf5NJw/HTMH8wvRiidH5xdG5qfjxecP5PNoxW8fRjeqWI3b2fv5z+dTeu3N5UP583d+BwDwsMnTPSPPb3n+T/1Bfozz4aHz1ak4f2qy105E3f90vaiqclMxTnFh3NT05GeeeHH8N1uTRTwIV3qk4pefX335ARhjv1g8vJ1JP5n4P9xf+lET08c7EAAAAAAAAAAAAEfy371F+PX+Pw61snHeLAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE6mvwMAAP//cOvMBw==")
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x51c}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
getpid()
setns(0xffffffffffffffff, 0x24020000)
openat$cgroup_type(r5, &(0x7f00000003c0), 0x2, 0x0)
socketpair(0x6, 0x800, 0x5, &(0x7f0000000400))
umount2(&(0x7f0000000040)='.\x00', 0x2)

1.25773983s ago: executing program 3 (id=5413):
r0 = socket$inet6(0xa, 0x3, 0x80000)
shmdt(0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="02000400040000000600000005000040001000004afe240bfb570e9200", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYRESOCT=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r2}, 0xc)
setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042, 0x3}, 0x10)
r4 = socket$tipc(0x1e, 0x2, 0x0)
sendmsg$tipc(r4, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0xfffd}}, 0x10, 0x0}, 0x0)
mkdir(0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/../file0\x00', &(0x7f00000000c0)={0x218280, 0x82, 0x14}, 0x18)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r5)
r6 = syz_open_procfs(0x0, 0x0)
preadv(r6, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/88, 0x58}], 0x1, 0x9, 0x29)
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r7 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
set_mempolicy(0x5, &(0x7f0000000000)=0x4000000ff9, 0xf)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0x50b, 0x70bd27, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x200, 0x5, 0x0, 0x0, 0x8f407}, 0xfffffffb, 0x1, 0x0, 0x4, 0x7, 0x4, 0x40, 0x9, 0x0, 0x1ff, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r10 = signalfd4(r3, &(0x7f0000000080)={[0x7]}, 0x8, 0x800)
ioctl$sock_qrtr_SIOCGIFADDR(r10, 0x8915, &(0x7f0000000100)={'macvlan1\x00'})

1.189911952s ago: executing program 4 (id=5415):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x800}, 0x10)
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005e000100"], 0x1c}, 0x1, 0x0, 0x0, 0x4040084}, 0x0)

1.174732302s ago: executing program 4 (id=5416):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x100008}, 0x10ecc9, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0}, 0x94)
socket$netlink(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x104046, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x7ffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff)
mount$9p_virtio(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000080), 0x4, &(0x7f0000000140)={'trans=virtio,', {[{@cache_fscache}]}})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000003040)={'batadv0\x00', <r5=>0x0})
sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000002c0)={0x30, r4, 0x1, 0x70bd2b, 0x25dfdbfb, {0x2, 0x0, 0x500}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20000884)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x14, 0x4, 0x4, 0x22}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r6, &(0x7f0000000300), 0x0}, 0x20)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x70, '\x00', 0x0, 0x19, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94)
r8 = inotify_init()
inotify_add_watch(r8, &(0x7f0000000340)='.\x00', 0xa50003d1)
open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20)
r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00')
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0)
fchdir(r9)
r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
getdents64(r10, &(0x7f0000000f80)=""/4096, 0x1000)

1.128531353s ago: executing program 6 (id=5417):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001000000"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x8000000, 0x2, 0x1ff, 0x8})
r0 = socket$netlink(0x10, 0x3, 0x4)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
clock_nanosleep(0x8, 0x10000000000, 0x0, 0xfffffffffffffffe)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x18, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000100000000000000010000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701000078ffffffb702000008000000b7030000000800008500000006000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
recvfrom(r0, &(0x7f0000000440)=""/180, 0xb4, 0x22, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x10, 0x70, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x88, &(0x7f0000000240)={[{@nogrpid}, {@min_batch_time}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nodiscard}, {@dioread_nolock}]}, 0x3, 0x46f, &(0x7f0000003f80)="$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")
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)={0x44, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x7a29293d222da6ee)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0}, 0x94)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x400003, 0x0)
getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000100), &(0x7f0000000140)=0x4)
ioctl$SIOCSIFHWADDR(r2, 0x8946, &(0x7f0000000040)={'bond0\x00', @random='\x00\x00\x00\x00\x00 '})

1.103604524s ago: executing program 2 (id=5418):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRES32=r1, @ANYBLOB="40004c060a000200aaaaaaaaaa14e3000c000e"], 0x34}, 0x1, 0x0, 0x0, 0x44801}, 0x840)

1.055521025s ago: executing program 3 (id=5419):
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x3, 0x1000000000}, 0x1006a1, 0x5, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x1c10c1, 0x9c37611dc13d0db7)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYRES8=0x0], 0x6, 0x2ca, &(0x7f0000001440)="$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")
r0 = open(&(0x7f0000000040)='.\x00', 0x163100, 0x0)
getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0)
timer_create(0x3, 0x0, &(0x7f00000001c0))
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000000)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@dax_never}, {@bh}, {@init_itable}], [{@fsmagic={'fsmagic', 0x3d, 0x2}}, {@flag='ro'}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=")
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x10000, 0x2, 0xfffffffe, 0x7, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1)
ptrace$getregset(0x4204, r1, 0x1, &(0x7f0000000100)={0x0})
syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket(0x1e, 0x4, 0x0)
syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000140)='./file2\x00', 0x1000000, &(0x7f00000000c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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")
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f00000004c0), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
ftruncate(r2, 0x9)
r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$MON_IOCX_GETX(r3, 0x4018920a, 0x0)

1.054729125s ago: executing program 4 (id=5420):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x9, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x54, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xc022, 0xa}, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000061121c00000000009500f8ff00000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x9)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x4a, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb87, &(0x7f0000002380)="$eJzs3c9vFFUcAPDvzG5LKWgX40GMCTUeIDFsW0BB4gE8Gg8mkqAnXPuDNCxgaE0sIbHcTLyowZMnT2qiR6+GGPXkweiJ/8CQEFP4A2pmdras7W5LYcuQ9vNJZve9eSzvO02++9503nQC2LFGs5c0Yn9EfJ5EjBT704gYzEtDEYutf3dv6dpktiWxvPzOv0kkEXF36dpk+/9Kivc92Us1/2T89UvEM5W1/c4tXL3QaDanrxT1sfmLH47NLVw9PHuxcX76/PSlI6+OH5147diJV47d/9DQox3rwvH0sz/ffOO7G+e+/uPHEy98msSp2Fu0dR5Hv4zG6MrPpFM1It7rd2clqRTH0+04AQB48qQdc7j9MRKVvNQyEvXZUoMDAAAA+uKTiFgGAAAAtrnE+T8AAABsc+11AHeXrk22t3JXJACPy53TEVFr5X/7/v5WSzUW8/ehGIiI4XtJx51Brfu9a33ofzQifvjq+IFsiy26Dx/obvF6RDzXbfxP8vyvFX90Y3X+pxEx3of+R1fV5T88Pt3yv3VesHH+n+pD//IfAAAAAAAA+ufm6daF/LXX/9OV9T/R5fpfpcu1u4ex8fW/9HYfugG6uHM64vWOZ/vc68j/Qq1S1J7K1wMMJDOzzenxiHg6Ig7FwK6sPrFOH9/+dPLvXm2d6/+yLeu/vRawiON2ddf/PzPVmG88yjEDLXeuRzxf7Zb/ycr4n/RY//v2A/bx29mfZ3q1bZz/wFZZ/ibiYNfx//4T3ZL1n883ls8HxtqzgrXOvvjr9736l/9Qnmz8H14//2tJ5/M65zbfx/jw4fO92h52/j+YnMmfKjpY7Pu4MT9/ZSJiMHlr7f4jm48ZtqN2PrTzJcv/Qy91P/9fb/6fJdn7xbdEGhGN4j2rf7Cqz13nfv+iVzzGfyhPlv9Tmxr/N1/48t2lM736f7Dx/1g+ph8q9vj9H6zvQRO07DgBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgSZJGxN5I0vpKOU3r9Yg9EfFsDKfNy3PzL89c/ujSVNYWUYuBdGa2OT0eESOtepLVJ/Ly/fqRVfWjEbEvIm6M7M7r9cnLzamyDx4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAVeyJibyRpPSLSvJym9Xqr7Z+RsqMDAAAA+qZWdgAAAADAlnP+DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAj2nfg5q0kIhZP7s63zGDRNlBqZMBWS8sOAChNpewAgNJUyw4AKI1zfCDZoH2oZ4sZBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBOcnD/zVtJRCye3J1vmcGibaDUyICtlpYdAFCaStkBAKWplh0AUBrn+ECyQftQzxYzCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICdZG7h6oVGszl9RWHdQjUinoAwFBQeU6HsbyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2s/8CAAD//yT3/f8=")
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000)
preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4083, 0xffffffdf}], 0x1b, 0x0, 0x0, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r3, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xd000, 0x0, 0xfffffffa, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x61000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x8001, 0xc}, 0xa100, 0xc8, 0x1000003, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x3, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$unix(r4, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63f580fc02082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef)
perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0xfe, 0x9, 0x0, 0x0, 0x0, 0x0, 0x9184, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x100, 0x7}, 0x481a, 0x0, 0x0, 0x7, 0x0, 0x0, 0xf792, 0x0, 0xfffffffe, 0x0, 0x2000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0xa)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc02082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0xfdef)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000980)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000ff0200000000000000000000000000014e220008000000000a00000000000000786cee2cdce6962549897563db0c00d483", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a90000000000000000000000000000000100000000000000fdffffffffffffffffffffffffffffff000000000000000000000000000000000000000000000000000a0000000000000000000000804000020000000000000800000000000000000000000000000000440005000a010101000000000000000000000000000000003c000000000000007f00000100000000000000000000000002000000040300"/180], 0xfc}}, 0x0)

1.033518536s ago: executing program 2 (id=5421):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="9f000000060000000000f1001f00"], 0x0, 0x1e, 0x0, 0x1, 0x1}, 0x28)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48)
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
r1 = syz_open_procfs$pagemap(0x0, &(0x7f00000000c0))
ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, &(0x7f0000000000)=[{0x800000000, 0x0, 0xffffffffffffffff}], 0x1, 0xbff, 0x1e, 0x0, 0x2e, 0x6e})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
bind$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0xc, 0x0, 0x1, 0x0, 0x6, @random="00eb7e41ef71"}, 0x14)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff})
fstat(r5, &(0x7f0000000180))
fsetxattr$system_posix_acl(r4, 0x0, 0x0, 0x54, 0x1)
syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r4)
setsockopt$inet_sctp_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000140)={0x0, 0x101, 0x7}, 0x8)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='cdg', 0x3)
write$binfmt_script(r2, &(0x7f0000000200), 0xfffffd9d)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa408000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="00000000000000005704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0xe0c81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r6, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
socket$nl_sock_diag(0x10, 0x3, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xfd3, 0x503, 0x0, 0xfffffffffffffeb4, 0x0, 0x0, 0x4, 0xffff80fe, 0xffffffff}, 0x50)

817.335561ms ago: executing program 6 (id=5422):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0d00000023000000040000000200000040000000", @ANYRES32=r1], 0x48)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000012c0)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x8, r2, 0x4}, 0x38)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl0\x00', <r4=>0x0, 0x29, 0xfd, 0xf7, 0x1, 0x20, @private2, @private2, 0x20, 0x40, 0x81, 0x1}})
r5 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0)
sendmmsg(r5, &(0x7f0000003240), 0x4000000000000e4, 0x0)
ioctl$sock_SIOCGIFCONF(r5, 0x8912, &(0x7f0000000140)=@req={0x28, &(0x7f0000000100)={'dvmrp0\x00', @ifru_flags=0x1000}})
r6 = syz_socket_connect_nvme_tcp()
sendto$inet_nvme_icreq_pdu(r6, &(0x7f0000000300)={{0x0, 0x1, 0x80, 0x1}, 0x0, 0x0, 0x1, 0x3}, 0x80, 0x0, 0x0, 0x0)
pipe2$watch_queue(&(0x7f00000000c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x80)
connect$unix(r8, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl0\x00', r4, 0x29, 0x9, 0x5, 0xfff, 0x39, @empty, @mcast1, 0x20, 0x8000, 0x8001, 0x51e0}})
sendmsg$inet(r0, &(0x7f0000001dc0)={&(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}, 0x8010)
ioctl$FS_IOC_SETFSLABEL(r7, 0x41009432, &(0x7f0000000380)="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")

729.942333ms ago: executing program 4 (id=5423):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="340000001300050000000000feffff", @ANYRES32=r1, @ANYBLOB="003000000000000014001a80100004800c000980"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0)

387.466141ms ago: executing program 4 (id=5424):
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000000, 0x3}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80), 0xffffffffffffffff)
r0 = socket(0x10, 0x2, 0x0)
sendto$inet6(r0, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006050a0000000d0085a168d0bf46d32345653600648d27000b000a00070849935ade4a460c89b6ec0cff3959547f509058ad86c902007a00004a32000407160012000a0000000000e000e21800003b6ed538f6523250", 0x78, 0x2251197285d76a80, 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xfd01}, 0x8)
r2 = gettid()
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r5)
sendmsg$IEEE802154_ASSOCIATE_REQ(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, r6, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xd}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, r6, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x20}, 0x1, 0x0, 0x0, 0x8184}, 0x8010)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r7 = syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0xfffffffe, 0x2, 0x83, 0x3af}, &(0x7f0000000100)=<r8=>0x0, &(0x7f0000000440)=<r9=>0x0, &(0x7f0000000180))
syz_io_uring_modify_offsets$generic(r8, r9, 0x2c, 0x1000)
io_uring_enter(r7, 0x7fffdfe, 0x2438, 0xd, 0x0, 0xfffffe86)

301.444673ms ago: executing program 6 (id=5425):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="34010000170001000000000000000000640101020000000000000000000000000000000097581e58e0000002000000000000000000000000fc020000000000000000000000000000fe8000000000000000000000000000aa0000004000"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e00000020000000000000000000000000a01010000000000000000000000000000000000020100030200002000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000b10f00000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000004000000b86b6e000000000000000000feffffff0000000000000000000000000c0008"], 0x134}}, 0x4000)

241.636255ms ago: executing program 6 (id=5426):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x800}, 0x10)
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005e000100"], 0x1c}, 0x1, 0x0, 0x0, 0x4040084}, 0x0)

179.963446ms ago: executing program 4 (id=5427):
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')
accept$inet(r0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
getpriority(0x2, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x4, 0x6, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020030000b02d25a806f8c2d94f90224fc602f1a04000a740100073582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x0)
r3 = socket(0x1, 0x3, 0x0)
bind$unix(r3, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x40002, 0x0)
ioctl$RFKILL_IOCTL_NOINPUT(r4, 0x5202)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000)
symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00')
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$rds(0x15, 0x5, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f00000007c0)={'pim6reg\x00', 0x7})
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r5, 0x114, 0xa, &(0x7f0000000000)=ANY=[@ANYBLOB="02"], 0x4)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
utimensat(0xffffffffffffffff, &(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={{0x0, 0x2710}, {0x77359400}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000300)={'sit0\x00', <r7=>0x0, 0x40, 0x7807, 0x80000000, 0x7959373d, {{0x10, 0x4, 0x2, 0x9, 0x40, 0x68, 0x0, 0x7, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x3b}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0xc, 0x97, 0x3, 0x4, [{@private=0xa010100, 0xfffffe01}]}, @generic={0x1d, 0x4, "9f88"}, @timestamp_prespec={0x44, 0x1c, 0x25, 0x3, 0x0, [{@remote, 0x4}, {@empty, 0x3}, {@dev={0xac, 0x14, 0x14, 0x43}, 0x3f}]}]}}}}})
setsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000600)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', r7}, 0x14)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000004340000001e0a050200000000000000000100000009000200737e7a320000000408000380040000800900010073797a30"], 0xb8}, 0x1, 0x0, 0x0, 0x40850}, 0x0)
sendto(r8, &(0x7f0000000480)="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", 0xfc, 0x4000882, &(0x7f0000000580)=@pppol2tpin6={0x18, 0x1, {0x0, r8, 0x2, 0x2, 0x1, 0x4, {0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7}}}, 0x80)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff)

172.716516ms ago: executing program 6 (id=5428):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
sendmsg(0xffffffffffffffff, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000600)='tasks\x00', 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
sendmsg$TIPC_NL_KEY_FLUSH(r2, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f00000006c0)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r3, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x1, 0xe468, 0x3836}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20000009)
write$cgroup_pid(r1, &(0x7f0000000040), 0x12)
preadv(r1, &(0x7f0000000740)=[{&(0x7f0000000340)=""/65, 0x41}], 0x1, 0x54e7, 0x7)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x0, 0x5}, 0x1000, 0x0, 0x80000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, &(0x7f0000000080)=0x3, 0x4)
getsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, 0x0, &(0x7f0000000340))
r5 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00')
lseek(r5, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="666c7573682c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c756e695f786c6174653d302c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c00a56dc300a96c9b20f3fabdcb10cad696323259cc0500e5f91620d7b9dc000000000057c51b98cfb3b59f8db941abb77112000000b8ff"], 0x1, 0x250, &(0x7f0000000b80)="$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")
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x51c}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
getpid()
setns(0xffffffffffffffff, 0x24020000)
openat$cgroup_type(r5, &(0x7f00000003c0), 0x2, 0x0)
umount2(&(0x7f0000000040)='.\x00', 0x2)

110.224157ms ago: executing program 3 (id=5429):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x8, &(0x7f0000000300)=@framed={{0x18, 0x8, 0x0, 0x0, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x2f}, {0x7, 0x0, 0xb, 0x9}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (fail_nth: 3)

0s ago: executing program 2 (id=5430):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
kexec_load(0x4000, 0x2, &(0x7f0000000680)=[{0x0, 0x0, 0x116094000, 0x41000000}, {0x0, 0x0, 0xb, 0x100}], 0x0) (async)
kexec_load(0x4000, 0x2, &(0x7f0000000680)=[{0x0, 0x0, 0x116094000, 0x41000000}, {0x0, 0x0, 0xb, 0x100}], 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)=ANY=[@ANYRES64=r0, @ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRESOCT=r1, @ANYBLOB="7d559ddac35538c6346725e197938d8c52fa91b86aa213901a26b5101aefca536f3e49360e857bcf351039517829245571434b6f5ec9395c1ec24bbe4630221c4b1ce0d6e7ee7ec68bf4edddf4a006264282a5941758b69f2b386a688a4f353b3162fbfa67014b3355ad8e1bdc4bb73e", @ANYRES8=r1, @ANYRESHEX=r0], 0x2c}, 0x1, 0x0, 0x0, 0x22004043}, 0x880)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r2, 0x20, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x2a}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x6c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x9}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2c}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x20049001)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg1\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg1\x00'})

kernel console output (not intermixed with test programs):

rval 1, probability 0, space 0, times 0
[  764.382660][T19243] CPU: 1 UID: 0 PID: 19243 Comm: syz.3.4687 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  764.382808][T19243] Tainted: [W]=WARN
[  764.382823][T19243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  764.382901][T19243] Call Trace:
[  764.382911][T19243]  <TASK>
[  764.382921][T19243]  __dump_stack+0x1d/0x30
[  764.382956][T19243]  dump_stack_lvl+0x95/0xd0
[  764.382980][T19243]  dump_stack+0x15/0x1b
[  764.383091][T19243]  should_fail_ex+0x25e/0x270
[  764.383134][T19243]  should_failslab+0x8c/0xb0
[  764.383167][T19243]  __kvmalloc_node_noprof+0x15b/0x590
[  764.383206][T19243]  ? vmemdup_user+0x2b/0xd0
[  764.383310][T19243]  ? vmemdup_user+0x2b/0xd0
[  764.383353][T19243]  ? should_fail_usercopy+0x1a/0x20
[  764.383399][T19243]  vmemdup_user+0x2b/0xd0
[  764.383496][T19243]  path_setxattrat+0x1b3/0x320
[  764.383569][T19243]  __x64_sys_setxattr+0x6e/0x90
[  764.383599][T19243]  x64_sys_call+0x2ee2/0x3020
[  764.383631][T19243]  do_syscall_64+0x136/0x3c0
[  764.383669][T19243]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  764.383812][T19243] RIP: 0033:0x7f82300ade59
[  764.383834][T19243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  764.383858][T19243] RSP: 002b:00007f822eb07028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
[  764.383942][T19243] RAX: ffffffffffffffda RBX: 00007f8230335fa0 RCX: 00007f82300ade59
[  764.383957][T19243] RDX: 0000200000001400 RSI: 0000200000000100 RDI: 0000200000000380
[  764.383974][T19243] RBP: 00007f822eb07090 R08: 0000000000000000 R09: 0000000000000000
[  764.383991][T19243] R10: 0000000000000835 R11: 0000000000000246 R12: 0000000000000001
[  764.384008][T19243] R13: 00007f8230336038 R14: 00007f8230335fa0 R15: 00007ffdd8b85298
[  764.384033][T19243]  </TASK>
[  764.481902][T19260] loop4: detected capacity change from 0 to 2048
[  764.656118][T19260] EXT4-fs: test_dummy_encryption option not supported
[  764.746124][T12623] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  764.805492][T19075] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  764.816010][   T28] audit: type=1400 audit(1784168589.583:2717): avc:  denied  { map } for  pid=19270 comm="syz.6.4692" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=65767 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  764.865715][T19075] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  764.901116][T19075] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  764.937239][T19284] loop4: detected capacity change from 0 to 256
[  764.963902][   T28] audit: type=1400 audit(1784168589.583:2718): avc:  denied  { read write } for  pid=19270 comm="syz.6.4692" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=65767 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  764.996192][T19290] loop6: detected capacity change from 0 to 512
[  764.998284][   T28] audit: type=1400 audit(1784168589.684:2719): avc:  denied  { write } for  pid=19262 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  765.047494][T19075] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  765.067337][   T28] audit: type=1400 audit(1784168589.784:2720): avc:  denied  { write } for  pid=19286 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  765.131889][T19075] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  765.153397][T19290] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  765.210988][T19290] EXT4-fs error (device loop6): xattr_find_entry:337: inode #15: comm syz.6.4694: corrupted xattr entries
[  765.229298][T19075] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  765.238452][T19075] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  765.435948][T19290] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  765.436709][T19290] EXT4-fs (loop6): 1 orphan inode deleted
[  765.452216][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  765.452240][    C0] EXT4-fs (loop6): initial error at time 1784168590: xattr_find_entry:337: inode 15
[  765.452292][    C0] EXT4-fs (loop6): last error at time 1784168590: xattr_find_entry:337: inode 15
[  765.557044][T19301] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4695'.
[  765.630513][T19295] loop2: detected capacity change from 0 to 512
[  765.654634][   T28] audit: type=1326 audit(1784168590.406:2721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19285 comm="syz.3.4691" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f82300ade59 code=0x0
[  765.765995][T19295] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.4697: corrupted in-inode xattr: invalid ea_ino
[  765.784417][T19301] xt_ecn: cannot match TCP bits for non-tcp packets
[  765.865928][T19290] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  765.944514][T19295] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  765.951659][T19295] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.4697: couldn't read orphan inode 15 (err -117)
[  765.963355][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  765.963943][    C0] EXT4-fs (loop2): initial error at time 1784168590: ext4_iget_extra_inode:5180: inode 15
[  765.964435][    C0] EXT4-fs (loop2): last error at time 1784168590: ext4_iget_extra_inode:5180: inode 15
[  766.210038][T19075] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  766.261338][T17328] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  766.283505][T19295] loop2: lost filesystem error report for type 5 error -117
[  766.323062][T19295] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  766.755927][T19318] loop6: detected capacity change from 0 to 512
[  766.780644][T19318] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  766.807559][T19318] ext4 filesystem being mounted at /111/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  767.041621][T13805] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  767.065755][T17328] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  767.087254][T19075] 8021q: adding VLAN 0 to HW filter on device bond0
[  767.102602][T19075] 8021q: adding VLAN 0 to HW filter on device team0
[  767.115336][ T3970] bridge0: port 1(bridge_slave_0) entered blocking state
[  767.125068][ T3970] bridge0: port 1(bridge_slave_0) entered forwarding state
[  767.143789][ T3980] bridge0: port 2(bridge_slave_1) entered blocking state
[  767.152575][ T3980] bridge0: port 2(bridge_slave_1) entered forwarding state
[  767.373055][T19324] loop6: detected capacity change from 0 to 2048
[  767.397238][T19324] EXT4-fs: test_dummy_encryption option not supported
[  767.963255][T19353] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4707'.
[  768.897489][T19346] loop3: detected capacity change from 0 to 512
[  769.885712][T19346] EXT4-fs: Mount option(s) incompatible with ext2
[  769.916017][T19075] 8021q: adding VLAN 0 to HW filter on device batadv0
[  769.926753][T19361] loop2: detected capacity change from 0 to 512
[  769.952895][T19361] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  769.962946][T19362] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4709'.
[  769.993152][T19361] EXT4-fs error (device loop2): xattr_find_entry:337: inode #15: comm syz.2.4708: corrupted xattr entries
[  770.017090][T19361] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  770.017489][T19361] EXT4-fs (loop2): 1 orphan inode deleted
[  770.028826][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  770.028846][    C0] EXT4-fs (loop2): initial error at time 1784168594: xattr_find_entry:337: inode 15
[  770.028895][    C0] EXT4-fs (loop2): last error at time 1784168594: xattr_find_entry:337: inode 15
[  770.137923][T19361] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  770.167678][T13805] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  770.322015][T19376] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4712'.
[  770.675639][T19387] loop6: detected capacity change from 0 to 128
[  770.685155][T19391] random: crng reseeded on system resumption
[  770.719317][T19387] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  770.745106][T19391] netlink: 'syz.3.4712': attribute type 4 has an invalid length.
[  770.756925][T19387] ext4 filesystem being mounted at /116/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  770.796404][   T28] audit: type=1400 audit(1784168595.589:2722): avc:  denied  { write } for  pid=19383 comm="syz.6.4714" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  770.853655][   T28] audit: type=1400 audit(1784168595.609:2723): avc:  denied  { write } for  pid=19383 comm="syz.6.4714" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  770.926770][   T28] audit: type=1400 audit(1784168595.609:2724): avc:  denied  { write } for  pid=19383 comm="syz.6.4714" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  770.983717][   T28] audit: type=1400 audit(1784168595.609:2725): avc:  denied  { write } for  pid=19383 comm="syz.6.4714" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  771.057997][   T28] audit: type=1400 audit(1784168595.619:2726): avc:  denied  { write } for  pid=19383 comm="syz.6.4714" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  771.119334][   T28] audit: type=1400 audit(1784168595.619:2727): avc:  denied  { write } for  pid=19383 comm="syz.6.4714" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  771.347117][T17328] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  771.369282][T19406] loop4: detected capacity change from 0 to 2048
[  771.391626][T19406] EXT4-fs: test_dummy_encryption option not supported
[  771.464876][   T28] audit: type=1400 audit(1784168596.201:2728): avc:  denied  { lock } for  pid=19407 comm="syz.6.4719" path="socket:[66062]" dev="sockfs" ino=66062 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[  771.588154][T19408] loop6: detected capacity change from 0 to 1024
[  771.616091][T19408] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  771.628234][T19408] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 2: comm syz.6.4719: lblock 2 mapped to illegal pblock 2 (length 1)
[  771.642212][T19408] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  771.647174][T19408] Quota error (device loop6): qtree_write_dquot: dquota write failed
[  771.667681][T19408] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 48: comm syz.6.4719: lblock 0 mapped to illegal pblock 48 (length 1)
[  771.690651][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  771.690891][    C0] EXT4-fs (loop6): initial error at time 1784168596: ext4_map_blocks:791: inode 3: block 2
[  771.691028][    C0] EXT4-fs (loop6): last error at time 1784168596: ext4_map_blocks:791: inode 3: block 2
[  771.745331][T19408] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  771.749596][T19408] Quota error (device loop6): v2_write_file_info: Can't write info structure
[  771.764244][T19075] veth0_vlan: entered promiscuous mode
[  771.791677][T19408] EXT4-fs error (device loop6): ext4_acquire_dquot:7041: comm syz.6.4719: Failed to acquire dquot type 0
[  771.809283][T19408] loop6: lost filesystem error report for type 5 error -117
[  771.809539][T19408] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6435: Corrupt filesystem
[  771.819708][T19418] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4720'.
[  771.830604][T19408] loop6: lost filesystem error report for type 5 error -117
[  771.831120][T19408] EXT4-fs error (device loop6): ext4_evict_inode:267: inode #11: comm syz.6.4719: mark_inode_dirty error
[  771.875651][T19075] veth1_vlan: entered promiscuous mode
[  771.894170][T19418] random: crng reseeded on system resumption
[  771.895930][T19420] loop3: detected capacity change from 0 to 764
[  771.904824][T19408] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  771.922498][T19418] netlink: 'syz.2.4720': attribute type 4 has an invalid length.
[  771.936900][T19408] EXT4-fs warning (device loop6): ext4_evict_inode:270: couldn't mark inode dirty (err -117)
[  771.949899][T19408] EXT4-fs (loop6): 1 orphan inode deleted
[  771.956179][T19408] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  771.972310][T19075] veth0_macvtap: entered promiscuous mode
[  772.005580][ T3979] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:19: lblock 1 mapped to illegal pblock 1 (length 1)
[  772.017589][T19075] veth1_macvtap: entered promiscuous mode
[  772.030303][T19420] rock: directory entry would overflow storage
[  772.046642][T19420] rock: sig=0x4f50, size=4, remaining=3
[  772.051258][T19075] batman_adv: batadv0: Interface activated: batadv_slave_0
[  772.055135][T19420] iso9660: Corrupted directory entry in block 4 of inode 1792
[  772.079527][T19075] batman_adv: batadv0: Interface activated: batadv_slave_1
[  772.106012][ T3970] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  772.116400][ T3970] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  772.121783][T19423] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4721'.
[  772.126049][ T3970] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  772.157229][ T3979] Quota error (device loop6): remove_tree: Can't read quota data block 1
[  772.176392][ T3970] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  772.198245][ T3979] EXT4-fs error (device loop6): ext4_release_dquot:7077: comm kworker/u8:19: Failed to release dquot type 0
[  772.218644][T19422] loop4: detected capacity change from 0 to 512
[  772.245614][T19422] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  772.262204][T19422] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.4722: iget: bad i_size value: 38620345925642
[  772.280482][T19422] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  772.295625][T19422] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.4722: couldn't read orphan inode 15 (err -117)
[  772.300411][T19408] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  772.309378][T19422] loop4: lost filesystem error report for type 5 error -117
[  772.399234][T19422] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  772.502230][T19448] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4730'.
[  772.519854][T19448] random: crng reseeded on system resumption
[  772.532461][T19448] netlink: 'syz.5.4730': attribute type 4 has an invalid length.
[  772.543985][T17328] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  772.738216][T12944] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  776.597210][T19486] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4740'.
[  776.630689][T19486] random: crng reseeded on system resumption
[  776.641282][T19486] netlink: 'syz.3.4740': attribute type 4 has an invalid length.
[  776.664056][T19492] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4743'.
[  776.715041][T19497] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4744'.
[  776.750158][T19498] random: crng reseeded on system resumption
[  776.779333][T19498] netlink: 'syz.6.4743': attribute type 4 has an invalid length.
[  776.846552][T19503] netlink: 'syz.5.4744': attribute type 4 has an invalid length.
[  776.874848][T19506] loop4: detected capacity change from 0 to 512
[  776.892507][T19506] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  776.912580][T19506] EXT4-fs error (device loop4): xattr_find_entry:337: inode #15: comm syz.4.4746: corrupted xattr entries
[  776.929082][T19506] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  776.929385][T19506] EXT4-fs (loop4): 1 orphan inode deleted
[  776.941244][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  776.941283][    C0] EXT4-fs (loop4): initial error at time 1784168601: xattr_find_entry:337: inode 15
[  776.941314][    C0] EXT4-fs (loop4): last error at time 1784168601: xattr_find_entry:337: inode 15
[  776.993437][T19506] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  777.075604][T19512] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4747'.
[  777.121944][T19514] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  777.136126][T19514] syzkaller0: entered promiscuous mode
[  777.144611][T19514] syzkaller0: entered allmulticast mode
[  777.601643][T19528] FAULT_INJECTION: forcing a failure.
[  777.601643][T19528] name failslab, interval 1, probability 0, space 0, times 0
[  777.615410][T19528] CPU: 1 UID: 0 PID: 19528 Comm: syz.2.4752 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  777.615447][T19528] Tainted: [W]=WARN
[  777.615454][T19528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  777.615467][T19528] Call Trace:
[  777.615479][T19528]  <TASK>
[  777.615490][T19528]  __dump_stack+0x1d/0x30
[  777.615530][T19528]  dump_stack_lvl+0x95/0xd0
[  777.615554][T19528]  dump_stack+0x15/0x1b
[  777.615639][T19528]  should_fail_ex+0x25e/0x270
[  777.615669][T19528]  ? __pollwait+0x18b/0x230
[  777.615691][T19528]  should_failslab+0x8c/0xb0
[  777.615718][T19528]  __kmalloc_cache_noprof+0x7b/0x3d0
[  777.615755][T19528]  ? __pollwait+0x18b/0x230
[  777.615786][T19528]  __pollwait+0x18b/0x230
[  777.615810][T19528]  ? __pfx___pollwait+0x10/0x10
[  777.615859][T19528]  pipe_poll+0x111/0x270
[  777.615940][T19528]  ? __pfx_pipe_poll+0x10/0x10
[  777.615968][T19528]  do_sys_poll+0x6e1/0xc00
[  777.616021][T19528]  ? __pfx___pollwait+0x10/0x10
[  777.616059][T19528]  ? __pfx_pollwake+0x10/0x10
[  777.616091][T19528]  ? __pfx_pollwake+0x10/0x10
[  777.616119][T19528]  ? __pfx_pollwake+0x10/0x10
[  777.616144][T19528]  ? __pfx_pollwake+0x10/0x10
[  777.616237][T19528]  ? __pfx_pollwake+0x10/0x10
[  777.616271][T19528]  ? __pfx_pollwake+0x10/0x10
[  777.616373][T19528]  ? __pfx_pollwake+0x10/0x10
[  777.616537][T19528]  ? __pfx_pollwake+0x10/0x10
[  777.616572][T19528]  ? __pfx_pollwake+0x10/0x10
[  777.616641][T19528]  ? timespec64_add_safe+0x106/0x150
[  777.616674][T19528]  __x64_sys_poll+0x12c/0x230
[  777.616775][T19528]  x64_sys_call+0x2891/0x3020
[  777.616909][T19528]  do_syscall_64+0x136/0x3c0
[  777.616943][T19528]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  777.616969][T19528] RIP: 0033:0x7fbdb75fde59
[  777.616990][T19528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  777.617016][T19528] RSP: 002b:00007fbdb6057028 EFLAGS: 00000246 ORIG_RAX: 0000000000000007
[  777.617055][T19528] RAX: ffffffffffffffda RBX: 00007fbdb7885fa0 RCX: 00007fbdb75fde59
[  777.617073][T19528] RDX: 0000000000000009 RSI: 20000000000000b5 RDI: 0000200000000000
[  777.617091][T19528] RBP: 00007fbdb6057090 R08: 0000000000000000 R09: 0000000000000000
[  777.617110][T19528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  777.617127][T19528] R13: 00007fbdb7886038 R14: 00007fbdb7885fa0 R15: 00007fff65047d88
[  777.617220][T19528]  </TASK>
[  778.192398][T19534] loop2: detected capacity change from 0 to 512
[  778.208709][T19535] loop3: detected capacity change from 0 to 128
[  778.239425][T12944] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  778.278181][T19535] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  778.295259][T19534] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.4756: invalid indirect mapped block 256 (level 2)
[  778.359725][T19534] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  778.360179][T19534] EXT4-fs (loop2): 2 truncates cleaned up
[  778.372995][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  778.373033][    C1] EXT4-fs (loop2): initial error at time 1784168603: ext4_free_branches:1023: inode 11
[  778.373073][    C1] EXT4-fs (loop2): last error at time 1784168603: ext4_free_branches:1023: inode 11
[  778.438835][T19535] ext4 filesystem being mounted at /404/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  778.507055][T19543] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4758'.
[  778.539885][T19545] loop6: detected capacity change from 0 to 128
[  778.578252][T19545] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  778.597312][T19548] random: crng reseeded on system resumption
[  778.607206][   T28] kauditd_printk_skb: 2 callbacks suppressed
[  778.607225][   T28] audit: type=1400 audit(1784168603.418:2731): avc:  denied  { write } for  pid=19531 comm="syz.3.4755" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  778.659760][T19549] netlink: 'syz.4.4758': attribute type 4 has an invalid length.
[  778.672359][T19545] ext4 filesystem being mounted at /124/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  778.714404][T19534] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  778.742325][T12623] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  778.769018][   T28] audit: type=1400 audit(1784168603.459:2732): avc:  denied  { write } for  pid=19531 comm="syz.3.4755" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  778.879223][T19554] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.4756: bg 0: block 5: invalid block bitmap
[  778.894048][T19554] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 28
[  778.924138][   T28] audit: type=1400 audit(1784168603.459:2733): avc:  denied  { write } for  pid=19531 comm="syz.3.4755" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  778.949138][T19554] EXT4-fs (loop2): This should not happen!! Data will be lost
[  778.949138][T19554] 
[  778.974056][T19554] EXT4-fs (loop2): Total free blocks count 0
[  779.009953][T19554] EXT4-fs (loop2): Free/Dirty block details
[  779.037380][T19554] EXT4-fs (loop2): free_blocks=0
[  779.068226][   T28] audit: type=1400 audit(1784168603.459:2734): avc:  denied  { write } for  pid=19531 comm="syz.3.4755" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  779.136557][T19554] EXT4-fs (loop2): dirty_blocks=688
[  779.160819][T19554] EXT4-fs (loop2): Block reservation details
[  779.193385][T19554] EXT4-fs (loop2): i_reserved_data_blocks=688
[  779.223026][T19553] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 684 with error 28
[  779.249623][   T28] audit: type=1400 audit(1784168603.459:2735): avc:  denied  { write } for  pid=19531 comm="syz.3.4755" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  779.335340][T17328] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  779.349546][   T28] audit: type=1400 audit(1784168603.459:2736): avc:  denied  { write } for  pid=19531 comm="syz.3.4755" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  779.403403][   T28] audit: type=1400 audit(1784168603.619:2737): avc:  denied  { write } for  pid=19533 comm="syz.2.4756" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  779.465703][   T28] audit: type=1400 audit(1784168603.659:2738): avc:  denied  { write } for  pid=19544 comm="syz.6.4757" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  779.528126][   T28] audit: type=1400 audit(1784168603.669:2739): avc:  denied  { write } for  pid=19544 comm="syz.6.4757" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  779.585218][   T28] audit: type=1400 audit(1784168603.669:2740): avc:  denied  { write } for  pid=19544 comm="syz.6.4757" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  781.370523][T13805] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  784.000760][T19610] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4777'.
[  784.939386][T19612] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  785.355094][T19626] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4780'.
[  785.405384][T19626] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4780'.
[  785.465165][T19637] loop2: detected capacity change from 0 to 256
[  786.687584][T19640] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4784'.
[  786.900554][T19640] xt_ecn: cannot match TCP bits for non-tcp packets
[  787.338859][T19656] loop3: detected capacity change from 0 to 1024
[  787.355856][T19656] ext4: Unknown parameter 'silent'
[  787.982509][T19666] loop3: detected capacity change from 0 to 512
[  787.992402][T19671] loop5: detected capacity change from 0 to 512
[  788.698797][T19671] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.4797: iget: bad i_size value: 38620345925642
[  788.955644][T19671] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  788.956342][T19671] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.4797: couldn't read orphan inode 15 (err -117)
[  788.968093][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  788.968117][    C0] EXT4-fs (loop5): initial error at time 1784168613: ext4_orphan_get:1399: inode 15
[  788.968157][    C0] EXT4-fs (loop5): last error at time 1784168613: ext4_orphan_get:1399: inode 15
[  789.714729][T19671] loop5: lost filesystem error report for type 5 error -117
[  789.762314][T19671] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  789.822694][   T28] kauditd_printk_skb: 5 callbacks suppressed
[  789.822710][   T28] audit: type=1400 audit(1784168614.663:2746): avc:  denied  { write } for  pid=19669 comm="syz.5.4797" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  789.972926][T19671] EXT4-fs (loop5): shut down requested (1)
[  790.520689][T19075] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  790.577568][   T28] audit: type=1326 audit(1784168615.404:2747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19691 comm="syz.6.4804" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2f84c47bd7 code=0x7ffc0000
[  790.613808][   T28] audit: type=1326 audit(1784168615.404:2748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19691 comm="syz.6.4804" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2f84c47bd7 code=0x7ffc0000
[  790.652840][   T28] audit: type=1326 audit(1784168615.404:2749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19691 comm="syz.6.4804" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2f84bef1d9 code=0x7ffc0000
[  790.682710][   T28] audit: type=1326 audit(1784168615.404:2750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19691 comm="syz.6.4804" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2f84c47bd7 code=0x7ffc0000
[  790.713949][   T28] audit: type=1326 audit(1784168615.404:2751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19691 comm="syz.6.4804" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2f84bef1d9 code=0x7ffc0000
[  790.745926][   T28] audit: type=1326 audit(1784168615.404:2752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19691 comm="syz.6.4804" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2f84c47bd7 code=0x7ffc0000
[  790.802847][   T28] audit: type=1326 audit(1784168615.404:2753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19691 comm="syz.6.4804" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2f84bef1d9 code=0x7ffc0000
[  790.830850][   T28] audit: type=1326 audit(1784168615.404:2754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19691 comm="syz.6.4804" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2f84c47bd7 code=0x7ffc0000
[  790.837812][T19706] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4808'.
[  790.861559][   T28] audit: type=1326 audit(1784168615.404:2755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19691 comm="syz.6.4804" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2f84bef1d9 code=0x7ffc0000
[  790.881331][T19706] random: crng reseeded on system resumption
[  790.949729][T19706] netlink: 'syz.4.4808': attribute type 4 has an invalid length.
[  790.970196][T19709] loop5: detected capacity change from 0 to 256
[  790.992608][T19709] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  791.010074][T19709] FAT-fs (loop5): error, allocated dir entry found after end-of-directory marker (i_pos 1)
[  791.039975][T19709] FAT-fs (loop5): Filesystem has been set read-only
[  791.145122][T19717] loop2: detected capacity change from 0 to 512
[  791.440801][T19744] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4822'.
[  791.454160][T19744] random: crng reseeded on system resumption
[  791.461931][T19744] netlink: 'syz.6.4822': attribute type 4 has an invalid length.
[  791.514203][T19746] loop6: detected capacity change from 0 to 256
[  791.829556][T19759] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4823'.
[  791.978132][T19755] loop3: detected capacity change from 0 to 512
[  791.990035][T19755] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  792.010675][T19755] EXT4-fs error (device loop3): xattr_find_entry:337: inode #15: comm syz.3.4826: corrupted xattr entries
[  792.022432][T19755] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  792.023980][T19755] EXT4-fs (loop3): 1 orphan inode deleted
[  792.047732][T19755] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  792.084314][T19759] xt_ecn: cannot match TCP bits for non-tcp packets
[  792.629843][T12623] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  792.946547][T19783] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4835'.
[  792.984784][T19783] random: crng reseeded on system resumption
[  792.999529][T19783] netlink: 'syz.2.4835': attribute type 4 has an invalid length.
[  794.135402][T19802] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  794.807331][T19818] loop4: detected capacity change from 0 to 512
[  795.061513][T16705] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  795.076804][T19818] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  795.113579][T19818] EXT4-fs error (device loop4): xattr_find_entry:337: inode #15: comm syz.4.4842: corrupted xattr entries
[  795.126122][T19818] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  795.131122][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  795.152214][    C1] EXT4-fs (loop4): initial error at time 1784168619: xattr_find_entry:337: inode 15
[  795.161737][    C1] EXT4-fs (loop4): last error at time 1784168619: xattr_find_entry:337: inode 15
[  795.192119][T19818] EXT4-fs (loop4): 1 orphan inode deleted
[  795.219148][T19818] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  795.395825][T12944] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  795.511170][T19842] loop4: detected capacity change from 0 to 128
[  795.542738][T19842] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  795.562245][T19845] loop3: detected capacity change from 0 to 256
[  795.590313][T19842] ext4 filesystem being mounted at /394/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  795.785596][T12944] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  796.380700][T19849] xt_ecn: cannot match TCP bits for non-tcp packets
[  796.834248][T19860] FAULT_INJECTION: forcing a failure.
[  796.834248][T19860] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  797.580504][T19860] CPU: 1 UID: 0 PID: 19860 Comm: syz.5.4859 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  797.580574][T19860] Tainted: [W]=WARN
[  797.580585][T19860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  797.580602][T19860] Call Trace:
[  797.580611][T19860]  <TASK>
[  797.580620][T19860]  __dump_stack+0x1d/0x30
[  797.580691][T19860]  dump_stack_lvl+0x95/0xd0
[  797.580717][T19860]  dump_stack+0x15/0x1b
[  797.580758][T19860]  should_fail_ex+0x25e/0x270
[  797.580827][T19860]  should_fail+0xb/0x20
[  797.580862][T19860]  should_fail_usercopy+0x1a/0x20
[  797.580895][T19860]  copy_fpstate_to_sigframe+0x61a/0x7b0
[  797.580922][T19860]  ? copy_fpstate_to_sigframe+0xe5/0x7b0
[  797.581038][T19860]  ? x86_task_fpu+0x36/0x60
[  797.581067][T19860]  get_sigframe+0x34f/0x470
[  797.581104][T19860]  x64_setup_rt_frame+0xa7/0x4e0
[  797.581143][T19860]  arch_do_signal_or_restart+0x27c/0x480
[  797.581244][T19860]  exit_to_user_mode_loop+0x15d/0x8c0
[  797.581276][T19860]  do_syscall_64+0x23c/0x3c0
[  797.581357][T19860]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  797.581383][T19860] RIP: 0033:0x7fa27b75de57
[  797.581406][T19860] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89
[  797.581431][T19860] RSP: 002b:00007fa27a1b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000057
[  797.581569][T19860] RAX: 0000000000000057 RBX: 00007fa27b9e5fa0 RCX: 00007fa27b75de59
[  797.581587][T19860] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100
[  797.581670][T19860] RBP: 00007fa27a1b7090 R08: 0000000000000000 R09: 0000000000000000
[  797.581686][T19860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  797.581703][T19860] R13: 00007fa27b9e6038 R14: 00007fa27b9e5fa0 R15: 00007ffc9f482438
[  797.581797][T19860]  </TASK>
[  798.815614][T19870] RDS: rds_bind could not find a transport for ::ffff:172.30.0.7, load rds_tcp or rds_rdma?
[  799.063613][    C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  799.983592][T19870] loop6: detected capacity change from 0 to 764
[  799.990519][T19870] iso9660: Unknown parameter '³¶Zís£
ÙPìΩñû�b�RRÂ/µ:ñÉÑ•ŒHÔ�Ââ<§çñ® ˜Uݨeçôq½…˜ÍØ [\@ëpúPžB'
[  800.176982][T19878] loop4: detected capacity change from 0 to 512
[  801.049327][T19983] loop3: detected capacity change from 0 to 4096
[  801.072836][T19983] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  801.093220][   T28] kauditd_printk_skb: 2729 callbacks suppressed
[  801.093238][   T28] audit: type=1400 audit(1784168625.944:5485): avc:  denied  { write } for  pid=19982 comm="syz.3.4872" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  801.138665][T19983] loop2: detected capacity change from 0 to 7
[  801.165920][   T28] audit: type=1400 audit(1784168625.985:5486): avc:  denied  { write } for  pid=19982 comm="syz.3.4872" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  801.192513][T19983] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4872'.
[  801.332176][   T28] audit: type=1400 audit(1784168626.105:5487): avc:  denied  { getopt } for  pid=19982 comm="syz.3.4872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  801.567183][T12623] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  801.802874][T20002] xt_ecn: cannot match TCP bits for non-tcp packets
[  802.373431][T20016] loop5: detected capacity change from 0 to 128
[  802.566433][T20019] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  802.657871][T20019] loop3: detected capacity change from 0 to 128
[  802.680265][   T28] audit: type=1400 audit(1784168627.537:5488): avc:  denied  { create } for  pid=20018 comm="syz.3.4879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  802.910086][   T28] audit: type=1326 audit(1784168627.758:5489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20030 comm="syz.3.4889" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f82300ade59 code=0x0
[  802.961686][T20035] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4891'.
[  803.050628][T20035] random: crng reseeded on system resumption
[  803.077029][T20035] netlink: 'syz.5.4891': attribute type 4 has an invalid length.
[  803.115193][T20034] loop4: detected capacity change from 0 to 512
[  803.299738][T20034] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  803.317719][T20034] ext4 filesystem being mounted at /402/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  803.527600][T12944] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  803.868996][T20072] FAULT_INJECTION: forcing a failure.
[  803.868996][T20072] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  803.906351][T20072] CPU: 1 UID: 0 PID: 20072 Comm: syz.6.4903 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  803.906452][T20072] Tainted: [W]=WARN
[  803.906460][T20072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  803.906514][T20072] Call Trace:
[  803.906522][T20072]  <TASK>
[  803.906531][T20072]  __dump_stack+0x1d/0x30
[  803.906557][T20072]  dump_stack_lvl+0x95/0xd0
[  803.906607][T20072]  dump_stack+0x15/0x1b
[  803.906627][T20072]  should_fail_ex+0x25e/0x270
[  803.906658][T20072]  should_fail+0xb/0x20
[  803.906728][T20072]  should_fail_usercopy+0x1a/0x20
[  803.906760][T20072]  _copy_from_user+0x1c/0xb0
[  803.906780][T20072]  get_timespec64+0x4c/0x100
[  803.906826][T20072]  __x64_sys_recvmmsg+0xa3/0x170
[  803.906867][T20072]  x64_sys_call+0x80f/0x3020
[  803.906894][T20072]  do_syscall_64+0x136/0x3c0
[  803.906924][T20072]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  803.906953][T20072] RIP: 0033:0x7f2f84c4de59
[  803.906975][T20072] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  803.906996][T20072] RSP: 002b:00007f2f836a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  803.907017][T20072] RAX: ffffffffffffffda RBX: 00007f2f84ed5fa0 RCX: 00007f2f84c4de59
[  803.907089][T20072] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003
[  803.907104][T20072] RBP: 00007f2f836a7090 R08: 0000200000003700 R09: 0000000000000000
[  803.907149][T20072] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000001
[  803.907166][T20072] R13: 00007f2f84ed6038 R14: 00007f2f84ed5fa0 R15: 00007ffce3987288
[  803.907187][T20072]  </TASK>
[  804.302283][T20083] : Can't lookup blockdev
[  804.467871][T20092] loop5: detected capacity change from 0 to 128
[  804.531263][T20092] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  804.583338][T20092] ext4 filesystem being mounted at /46/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  804.663210][   T28] audit: type=1400 audit(1784168629.521:5490): avc:  denied  { write } for  pid=20091 comm="syz.5.4911" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  804.720920][T19075] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  804.877825][   T28] audit: type=1400 audit(1784168629.561:5491): avc:  denied  { write } for  pid=20091 comm="syz.5.4911" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  805.593917][T20113] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  806.434289][T20149] loop5: detected capacity change from 0 to 128
[  806.526404][T20149] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  806.546312][T20149] ext4 filesystem being mounted at /51/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  806.772735][   T28] audit: type=1400 audit(1784168631.634:5492): avc:  denied  { write } for  pid=20148 comm="syz.5.4928" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  806.969695][    C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  807.346218][T19075] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  807.509308][T20161] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4931'.
[  807.524722][T20161] random: crng reseeded on system resumption
[  807.651494][T20161] netlink: 'syz.5.4931': attribute type 4 has an invalid length.
[  807.759054][T20165] loop5: detected capacity change from 0 to 2048
[  808.469127][T20165]  loop5: p1 < > p3
[  808.474719][T20165] loop5: p3 size 134217728 extends beyond EOD, truncated
[  808.485542][ T2980]  loop5: p1 < > p3
[  808.491293][ T2980] loop5: p3 size 134217728 extends beyond EOD, truncated
[  809.454884][T13847] udevd[13847]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  809.473485][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory
[  809.744378][T13847] udevd[13847]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  809.754813][ T6094] udevd[6094]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory
[  809.962900][T20193] loop6: detected capacity change from 0 to 128
[  810.384742][T20193] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  810.984622][T20193] ext4 filesystem being mounted at /158/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  811.424436][   T28] audit: type=1400 audit(1784168636.302:5493): avc:  denied  { write } for  pid=20189 comm="syz.6.4941" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  811.554147][T17328] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  811.997823][T20218] loop4: detected capacity change from 0 to 512
[  813.140259][T20228] syzkaller1: entered promiscuous mode
[  813.147783][T20228] syzkaller1: entered allmulticast mode
[  813.190784][T20218] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4949'.
[  813.212603][T20228] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4949'.
[  813.236661][T20235] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4953'.
[  813.250795][T20234] loop2: detected capacity change from 0 to 512
[  813.295731][T20234] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  813.308369][T20235] random: crng reseeded on system resumption
[  813.318778][T20235] netlink: 'syz.5.4953': attribute type 4 has an invalid length.
[  813.329516][T20234] EXT4-fs error (device loop2): xattr_find_entry:337: inode #15: comm syz.2.4951: corrupted xattr entries
[  813.342805][T20234] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  813.351291][T20234] EXT4-fs (loop2): 1 orphan inode deleted
[  813.363874][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  813.363906][    C0] EXT4-fs (loop2): initial error at time 1784168638: xattr_find_entry:337: inode 15
[  813.363971][    C0] EXT4-fs (loop2): last error at time 1784168638: xattr_find_entry:337: inode 15
[  813.581793][T20234] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  814.555395][T20245] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4956'.
[  814.574753][T20245] random: crng reseeded on system resumption
[  814.586349][T20245] netlink: 'syz.4.4956': attribute type 4 has an invalid length.
[  814.847198][T13805] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  816.714181][T20271] loop6: detected capacity change from 0 to 2048
[  818.163567][T20272] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  818.834492][T20278] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4965'.
[  819.636664][T20289] loop3: detected capacity change from 0 to 2048
[  820.193791][T20289]  loop3: p1 < > p3
[  820.207801][T20289] loop3: p3 size 134217728 extends beyond EOD, truncated
[  820.327810][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  820.345600][T13847] udevd[13847]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  821.982715][T20326] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  822.118878][T20345] loop2: detected capacity change from 0 to 512
[  822.162593][T20351] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4983'.
[  822.190094][T20351] random: crng reseeded on system resumption
[  822.222775][T20351] netlink: 'syz.3.4983': attribute type 4 has an invalid length.
[  822.306176][    C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  824.453194][T20345] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  824.473109][T20345] ext4 filesystem being mounted at /358/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  825.096672][T20388] loop4: detected capacity change from 0 to 256
[  825.109105][T20388] FAULT_INJECTION: forcing a failure.
[  825.109105][T20388] name failslab, interval 1, probability 0, space 0, times 0
[  825.109145][T20388] CPU: 1 UID: 0 PID: 20388 Comm: syz.4.4993 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  825.109193][T20388] Tainted: [W]=WARN
[  825.109206][T20388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  825.109357][T20388] Call Trace:
[  825.109367][T20388]  <TASK>
[  825.109377][T20388]  __dump_stack+0x1d/0x30
[  825.109460][T20388]  dump_stack_lvl+0x95/0xd0
[  825.109484][T20388]  dump_stack+0x15/0x1b
[  825.109511][T20388]  should_fail_ex+0x25e/0x270
[  825.109557][T20388]  should_failslab+0x8c/0xb0
[  825.109673][T20388]  kmem_cache_alloc_lru_noprof+0x81/0x3d0
[  825.109700][T20388]  ? __d_alloc+0x34/0x320
[  825.109785][T20388]  ? __d_alloc+0x34/0x320
[  825.109853][T20388]  __d_alloc+0x34/0x320
[  825.109897][T20388]  d_alloc+0x2e/0x100
[  825.109940][T20388]  lookup_one_qstr_excl+0x95/0x240
[  825.110059][T20388]  filename_create+0x155/0x220
[  825.110105][T20388]  filename_mkdirat+0x81/0x300
[  825.110141][T20388]  __se_sys_mkdir+0x31/0xf0
[  825.110171][T20388]  __x64_sys_mkdir+0x31/0x40
[  825.110207][T20388]  x64_sys_call+0x2eab/0x3020
[  825.110269][T20388]  do_syscall_64+0x136/0x3c0
[  825.110299][T20388]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  825.110324][T20388] RIP: 0033:0x7f7e888cde59
[  825.110381][T20388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  825.110414][T20388] RSP: 002b:00007f7e87327028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
[  825.110444][T20388] RAX: ffffffffffffffda RBX: 00007f7e88b55fa0 RCX: 00007f7e888cde59
[  825.110517][T20388] RDX: 0000000000000000 RSI: 0000000000000111 RDI: 0000200000000140
[  825.110533][T20388] RBP: 00007f7e87327090 R08: 0000000000000000 R09: 0000000000000000
[  825.110553][T20388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  825.110567][T20388] R13: 00007f7e88b56038 R14: 00007f7e88b55fa0 R15: 00007ffd2773f628
[  825.110600][T20388]  </TASK>
[  825.253813][T20397] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4996'.
[  826.581426][   T28] audit: type=1400 audit(1784168651.474:5494): avc:  denied  { create } for  pid=20389 comm="syz.6.4994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1
[  828.907373][T13805] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  829.023065][T20420] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5001'.
[  829.051473][T20423] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5004'.
[  829.246868][T20429] random: crng reseeded on system resumption
[  829.257609][T20429] netlink: 'syz.5.5004': attribute type 4 has an invalid length.
[  829.270524][T20430] netlink: 'syz.6.5001': attribute type 4 has an invalid length.
[  830.526591][T20432] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  830.959141][T20451] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5009'.
[  831.208472][T20460] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5012'.
[  831.265885][T20461] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5010'.
[  831.297342][T20461] netlink: 2 bytes leftover after parsing attributes in process `syz.5.5010'.
[  831.337714][T20461] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5010'.
[  831.372511][T20463] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5013'.
[  831.399890][T20461] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5010'.
[  831.431869][T20461] netlink: 2 bytes leftover after parsing attributes in process `syz.5.5010'.
[  831.562866][T20461] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5010'.
[  831.578980][T20473] loop5: detected capacity change from 0 to 128
[  831.590616][T20461] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5010'.
[  833.046979][T20495] random: crng reseeded on system resumption
[  833.243087][T20495] netlink: 'syz.5.5021': attribute type 4 has an invalid length.
[  834.675846][   T28] audit: type=1400 audit(1784168659.575:5495): avc:  denied  { ioctl } for  pid=20506 comm="syz.6.5024" path="socket:[72173]" dev="sockfs" ino=72173 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  834.759044][T20512] loop2: detected capacity change from 0 to 256
[  834.913350][T20517] loop4: detected capacity change from 0 to 128
[  835.410566][T20521] xt_ecn: cannot match TCP bits for non-tcp packets
[  835.440647][T20528] loop3: detected capacity change from 0 to 128
[  835.511758][T20528] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  835.845154][T20528] ext4 filesystem being mounted at /468/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  836.233151][T20533] xt_TPROXY: Can be used only with -p tcp or -p udp
[  836.274918][   T28] audit: type=1400 audit(1784168661.157:5496): avc:  denied  { write } for  pid=20527 comm="syz.3.5032" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  836.495506][T12623] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  837.667941][T20544] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  838.138412][T20550] __nla_validate_parse: 57 callbacks suppressed
[  838.138436][T20550] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5038'.
[  838.240518][T20550] random: crng reseeded on system resumption
[  838.283796][T20550] netlink: 'syz.2.5038': attribute type 4 has an invalid length.
[  838.395529][T20561] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5043'.
[  838.661622][T20573] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  839.087565][T20570] loop4: detected capacity change from 0 to 512
[  839.680094][T12100] hid_parser_main: 24 callbacks suppressed
[  839.680120][T12100] hid-generic 0000:0000:000E.000A: unknown main item tag 0x0
[  839.716456][T12100] hid-generic 0000:0000:000E.000A: unknown main item tag 0x0
[  839.730205][T20580] loop3: detected capacity change from 0 to 128
[  839.773807][T12100] hid-generic 0000:0000:000E.000A: unknown main item tag 0x0
[  840.002709][T20580] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal
[  840.041957][T12100] hid-generic 0000:0000:000E.000A: unknown main item tag 0x0
[  840.098099][T12100] hid-generic 0000:0000:000E.000A: unknown main item tag 0x0
[  840.115645][T20587] loop5: detected capacity change from 0 to 128
[  840.160741][T12100] hid-generic 0000:0000:000E.000A: unknown main item tag 0x0
[  840.199603][T20587] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  840.231093][T12100] hid-generic 0000:0000:000E.000A: unknown main item tag 0x0
[  840.241304][T12100] hid-generic 0000:0000:000E.000A: unknown main item tag 0x0
[  840.253629][T12100] hid-generic 0000:0000:000E.000A: unknown main item tag 0x0
[  840.263863][T12100] hid-generic 0000:0000:000E.000A: unknown main item tag 0x0
[  840.442439][T20587] ext4 filesystem being mounted at /79/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  840.452930][T12100] hid-generic 0000:0000:000E.000A: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  841.469133][   T28] audit: type=1400 audit(1784168666.383:5497): avc:  denied  { write } for  pid=20586 comm="syz.5.5050" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  841.693901][T19075] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  842.448693][T20612] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5056'.
[  842.481237][T20614] FAULT_INJECTION: forcing a failure.
[  842.481237][T20614] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  842.494340][T20614] CPU: 1 UID: 0 PID: 20614 Comm: syz.5.5057 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  842.494433][T20614] Tainted: [W]=WARN
[  842.494443][T20614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  842.494462][T20614] Call Trace:
[  842.494471][T20614]  <TASK>
[  842.494482][T20614]  __dump_stack+0x1d/0x30
[  842.494575][T20614]  dump_stack_lvl+0x95/0xd0
[  842.494603][T20614]  dump_stack+0x15/0x1b
[  842.494632][T20614]  should_fail_ex+0x25e/0x270
[  842.494665][T20614]  should_fail+0xb/0x20
[  842.494771][T20614]  should_fail_usercopy+0x1a/0x20
[  842.494910][T20614]  _copy_to_user+0x20/0xa0
[  842.494937][T20614]  readlink_copy+0x52/0xb0
[  842.494974][T20614]  proc_ns_readlink+0x170/0x270
[  842.495004][T20614]  ? atime_needs_update+0x3be/0x3e0
[  842.495087][T20614]  ? __pfx_proc_ns_readlink+0x10/0x10
[  842.495111][T20614]  vfs_readlink+0x348/0x390
[  842.495144][T20614]  do_readlinkat+0x150/0x2f0
[  842.495176][T20614]  __x64_sys_readlinkat+0x51/0x60
[  842.495352][T20614]  x64_sys_call+0x2a54/0x3020
[  842.495385][T20614]  do_syscall_64+0x136/0x3c0
[  842.495420][T20614]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  842.495519][T20614] RIP: 0033:0x7fa27b75de59
[  842.495538][T20614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  842.495563][T20614] RSP: 002b:00007fa27a1b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000010b
[  842.495587][T20614] RAX: ffffffffffffffda RBX: 00007fa27b9e5fa0 RCX: 00007fa27b75de59
[  842.495601][T20614] RDX: 0000200000000840 RSI: 0000200000000100 RDI: 0000000000000004
[  842.495615][T20614] RBP: 00007fa27a1b7090 R08: 0000000000000000 R09: 0000000000000000
[  842.495631][T20614] R10: 0000000000000042 R11: 0000000000000246 R12: 0000000000000001
[  842.495727][T20614] R13: 00007fa27b9e6038 R14: 00007fa27b9e5fa0 R15: 00007ffc9f482438
[  842.495748][T20614]  </TASK>
[  842.813497][T20601] fido_id[20601]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  843.154786][T20632] usb usb8: usbfs: process 20632 (syz.4.5061) did not claim interface 9 before use
[  843.722737][T20655] loop5: detected capacity change from 0 to 512
[  843.761351][T20657] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5070'.
[  843.775757][T20655] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  843.797374][T20657] random: crng reseeded on system resumption
[  843.823860][T20655] EXT4-fs error (device loop5): xattr_find_entry:337: inode #15: comm syz.5.5068: corrupted xattr entries
[  843.840830][T20655] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  843.842189][T20657] netlink: 'syz.6.5070': attribute type 4 has an invalid length.
[  843.853250][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  843.853283][    C1] EXT4-fs (loop5): initial error at time 1784168668: xattr_find_entry:337: inode 15
[  843.853314][    C1] EXT4-fs (loop5): last error at time 1784168668: xattr_find_entry:337: inode 15
[  843.897344][T20655] EXT4-fs (loop5): 1 orphan inode deleted
[  843.904190][T20655] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  843.985570][T19075] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  844.051957][T20671] loop4: detected capacity change from 0 to 512
[  844.316976][T20681] xt_TPROXY: Can be used only with -p tcp or -p udp
[  844.352887][T20671] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  844.369109][T20671] ext4 filesystem being mounted at /433/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  844.524101][T12944] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  844.645920][T20696] loop4: detected capacity change from 0 to 128
[  844.675563][T20696] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  844.686491][T20696] FAT-fs (loop4): data area starts beyond volume (36 > 6)
[  844.694010][T20696] FAT-fs (loop4): Can't find a valid FAT filesystem
[  844.797252][T20708] loop3: detected capacity change from 0 to 256
[  844.856124][T20712] loop5: detected capacity change from 0 to 512
[  844.873599][T20714] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5086'.
[  844.901032][T20712] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  844.933579][T20712] EXT4-fs error (device loop5): xattr_find_entry:337: inode #15: comm syz.5.5084: corrupted xattr entries
[  844.960138][T20712] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  844.960500][T20712] EXT4-fs (loop5): 1 orphan inode deleted
[  844.977795][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  844.977819][    C1] EXT4-fs (loop5): initial error at time 1784168669: xattr_find_entry:337: inode 15
[  844.977877][    C1] EXT4-fs (loop5): last error at time 1784168669: xattr_find_entry:337: inode 15
[  845.245983][T20712] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  845.316404][T19075] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  845.451773][T20721] xt_ecn: cannot match TCP bits for non-tcp packets
[  846.342284][T20734] loop5: detected capacity change from 0 to 512
[  846.782851][T20734] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  846.804313][T20734] ext4 filesystem being mounted at /91/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  847.373869][T19075] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  847.454843][T20753] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5097'.
[  847.537949][T20758] loop2: detected capacity change from 0 to 512
[  847.555457][T20760] loop3: detected capacity change from 0 to 128
[  847.567532][T20758] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  847.583089][T20763] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5100'.
[  847.626210][T20760] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  847.659467][T20758] EXT4-fs error (device loop2): xattr_find_entry:337: inode #15: comm syz.2.5098: corrupted xattr entries
[  847.671577][T20760] ext4 filesystem being mounted at /476/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  847.710258][T20758] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  847.710549][T20758] EXT4-fs (loop2): 1 orphan inode deleted
[  847.720633][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  847.720660][    C0] EXT4-fs (loop2): initial error at time 1784168672: xattr_find_entry:337: inode 15
[  847.720689][    C0] EXT4-fs (loop2): last error at time 1784168672: xattr_find_entry:337: inode 15
[  847.752314][T20758] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  847.811652][   T28] audit: type=1400 audit(1784168672.730:5498): avc:  denied  { write } for  pid=20759 comm="syz.3.5099" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  848.174173][T20774] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  848.398749][T12623] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  848.414398][T13805] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  848.816274][T20788] loop5: detected capacity change from 0 to 128
[  848.933617][T20792] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5104'.
[  848.978291][T20792] random: crng reseeded on system resumption
[  848.998299][T20792] netlink: 'syz.3.5104': attribute type 4 has an invalid length.
[  849.037077][T20790] loop2: detected capacity change from 0 to 4096
[  849.095869][T20790] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  849.135664][T20798] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5107'.
[  849.147816][   T28] audit: type=1400 audit(1784168674.072:5499): avc:  denied  { write } for  pid=20789 comm="syz.2.5103" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  849.168294][T20790] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5103'.
[  849.202080][T20798] random: crng reseeded on system resumption
[  849.212065][T20798] netlink: 'syz.3.5107': attribute type 4 has an invalid length.
[  849.272984][   T28] audit: type=1400 audit(1784168674.082:5500): avc:  denied  { write } for  pid=20789 comm="syz.2.5103" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  850.100911][T20809] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  850.155308][T20812] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5110'.
[  850.419580][T13805] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  850.926659][T20829] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5118'.
[  850.945807][T20829] random: crng reseeded on system resumption
[  850.959148][T20829] netlink: 'syz.5.5118': attribute type 4 has an invalid length.
[  851.244520][T20835] loop2: detected capacity change from 0 to 128
[  851.279268][T20835] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  851.358827][T20835] ext4 filesystem being mounted at /376/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  851.572788][   T28] audit: type=1400 audit(1784168676.495:5501): avc:  denied  { write } for  pid=20834 comm="syz.2.5114" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  852.091716][T20843] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  852.483610][T20842] loop6: detected capacity change from 0 to 512
[  852.504656][T13805] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  852.532809][T20850] loop5: detected capacity change from 0 to 128
[  852.572763][T20842] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  852.608718][T20842] ext4 filesystem being mounted at /189/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  852.647955][T17328] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  852.713000][T20859] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5124'.
[  852.768903][T20859] random: crng reseeded on system resumption
[  852.776894][T20861] FAULT_INJECTION: forcing a failure.
[  852.776894][T20861] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  852.795283][T20859] netlink: 'syz.2.5124': attribute type 4 has an invalid length.
[  852.806697][T20861] CPU: 1 UID: 0 PID: 20861 Comm: syz.6.5127 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  852.806749][T20861] Tainted: [W]=WARN
[  852.806757][T20861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  852.806770][T20861] Call Trace:
[  852.806778][T20861]  <TASK>
[  852.806786][T20861]  __dump_stack+0x1d/0x30
[  852.806818][T20861]  dump_stack_lvl+0x95/0xd0
[  852.806899][T20861]  dump_stack+0x15/0x1b
[  852.806926][T20861]  should_fail_ex+0x25e/0x270
[  852.806965][T20861]  should_fail+0xb/0x20
[  852.806998][T20861]  should_fail_usercopy+0x1a/0x20
[  852.807121][T20861]  _copy_from_user+0x1c/0xb0
[  852.807143][T20861]  __sys_connect+0xd0/0x2a0
[  852.807202][T20861]  __x64_sys_connect+0x3f/0x50
[  852.807243][T20861]  x64_sys_call+0x2df0/0x3020
[  852.807268][T20861]  do_syscall_64+0x136/0x3c0
[  852.807290][T20861]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  852.807378][T20861] RIP: 0033:0x7f2f84c4de59
[  852.807398][T20861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  852.807421][T20861] RSP: 002b:00007f2f836a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  852.807445][T20861] RAX: ffffffffffffffda RBX: 00007f2f84ed5fa0 RCX: 00007f2f84c4de59
[  852.807529][T20861] RDX: 0000000000000010 RSI: 0000200000000200 RDI: 0000000000000003
[  852.807542][T20861] RBP: 00007f2f836a7090 R08: 0000000000000000 R09: 0000000000000000
[  852.807603][T20861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  852.807620][T20861] R13: 00007f2f84ed6038 R14: 00007f2f84ed5fa0 R15: 00007ffce3987288
[  852.807720][T20861]  </TASK>
[  853.035294][   T28] audit: type=1400 audit(1784168677.956:5502): avc:  denied  { getopt } for  pid=20851 comm="syz.3.5125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  853.115782][T20869] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5129'.
[  853.149629][  T952] IPVS: starting estimator thread 0...
[  853.170877][T20875] random: crng reseeded on system resumption
[  853.204717][T20877] loop6: detected capacity change from 0 to 128
[  853.224711][T20869] netlink: 'syz.2.5129': attribute type 4 has an invalid length.
[  853.241034][T20874] IPVS: using max 2256 ests per chain, 112800 per kthread
[  853.252250][T20877] EXT4-fs (loop6): can't mount with data=, fs mounted w/o journal
[  853.945729][T20892] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5136'.
[  854.266913][    C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  854.280763][T20902] loop4: detected capacity change from 0 to 128
[  855.197067][T20908] xt_hashlimit: size too large, truncated to 1048576
[  856.214446][T20913] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5142'.
[  856.372692][T20913] random: crng reseeded on system resumption
[  856.851671][T20903] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  857.240529][T20919] FAULT_INJECTION: forcing a failure.
[  857.240529][T20919] name failslab, interval 1, probability 0, space 0, times 0
[  857.548627][T20919] CPU: 0 UID: 0 PID: 20919 Comm: syz.4.5143 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  857.548687][T20919] Tainted: [W]=WARN
[  857.548696][T20919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  857.548714][T20919] Call Trace:
[  857.548760][T20919]  <TASK>
[  857.548771][T20919]  __dump_stack+0x1d/0x30
[  857.548795][T20919]  dump_stack_lvl+0x95/0xd0
[  857.548816][T20919]  dump_stack+0x15/0x1b
[  857.548910][T20919]  should_fail_ex+0x25e/0x270
[  857.548944][T20919]  should_failslab+0x8c/0xb0
[  857.549034][T20919]  __kmalloc_noprof+0xd4/0x4a0
[  857.549075][T20919]  ? io_cache_alloc_new+0x2a/0xb0
[  857.549114][T20919]  ? io_cache_alloc_new+0x2a/0xb0
[  857.549155][T20919]  io_cache_alloc_new+0x2a/0xb0
[  857.549238][T20919]  __io_prep_rw+0x121/0x740
[  857.549287][T20919]  ? __io_alloc_req_refill+0x176/0x1d0
[  857.549319][T20919]  io_prep_write+0x34/0xe0
[  857.549337][T20919]  ? blk_start_plug_nr_ios+0xc2/0xe0
[  857.549394][T20919]  io_submit_sqes+0x737/0x1180
[  857.549433][T20919]  __se_sys_io_uring_enter+0x25c/0xf90
[  857.549457][T20919]  ? mutex_unlock+0x4e/0x90
[  857.549487][T20919]  ? fput+0x8f/0xc0
[  857.549542][T20919]  __x64_sys_io_uring_enter+0x78/0x90
[  857.549572][T20919]  x64_sys_call+0x1e16/0x3020
[  857.549606][T20919]  do_syscall_64+0x136/0x3c0
[  857.549668][T20919]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  857.549690][T20919] RIP: 0033:0x7f7e888cde59
[  857.549780][T20919] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  857.549808][T20919] RSP: 002b:00007f7e87327028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[  857.549835][T20919] RAX: ffffffffffffffda RBX: 00007f7e88b55fa0 RCX: 00007f7e888cde59
[  857.549853][T20919] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000
[  857.549866][T20919] RBP: 00007f7e87327090 R08: 0000000000000000 R09: 0000000000000000
[  857.549879][T20919] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001
[  857.549974][T20919] R13: 00007f7e88b56038 R14: 00007f7e88b55fa0 R15: 00007ffd2773f628
[  857.550002][T20919]  </TASK>
[  859.010927][T20906] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  859.370468][   T28] audit: type=1400 audit(1784168684.263:5503): avc:  denied  { write } for  pid=20927 comm="syz.3.5146" name="usbmon1" dev="devtmpfs" ino=143 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  859.399810][T20928] netlink: 'syz.3.5146': attribute type 12 has an invalid length.
[  859.407671][T20928] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5146'.
[  859.420717][T20930] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5147'.
[  859.450237][T20930] random: crng reseeded on system resumption
[  859.467501][T20930] netlink: 'syz.2.5147': attribute type 4 has an invalid length.
[  859.496407][T20933] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5148'.
[  859.602895][T20940] loop3: detected capacity change from 0 to 128
[  859.636197][T20940] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal
[  859.657067][T20942] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  859.706421][T20942] loop6: detected capacity change from 0 to 128
[  860.604937][T20950] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  860.962017][T20956] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5155'.
[  860.988269][T20956] netlink: 2 bytes leftover after parsing attributes in process `syz.3.5155'.
[  861.021081][T20956] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5155'.
[  861.032418][T20956] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5155'.
[  861.044461][T20956] netlink: 2 bytes leftover after parsing attributes in process `syz.3.5155'.
[  861.056867][T20956] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5155'.
[  861.067940][T20956] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5155'.
[  861.089066][T20959] loop4: detected capacity change from 0 to 512
[  861.189035][T20956] loop3: detected capacity change from 0 to 128
[  862.324682][T20959] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  862.337223][T20959] ext4 filesystem being mounted at /452/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  862.404488][T12944] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  862.598038][   T28] audit: type=1400 audit(1784168687.506:5504): avc:  denied  { listen } for  pid=20990 comm="syz.3.5166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[  863.378895][T21008] loop6: detected capacity change from 0 to 4096
[  863.481138][T21008] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  863.550939][   T28] audit: type=1400 audit(1784168688.487:5505): avc:  denied  { write } for  pid=21007 comm="syz.6.5171" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  863.599690][T21008] loop2: detected capacity change from 0 to 7
[  863.655130][   T28] audit: type=1400 audit(1784168688.527:5506): avc:  denied  { write } for  pid=21007 comm="syz.6.5171" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  863.807648][T17328] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  863.810319][T21019] FAULT_INJECTION: forcing a failure.
[  863.810319][T21019] name failslab, interval 1, probability 0, space 0, times 0
[  863.835009][T21019] CPU: 0 UID: 0 PID: 21019 Comm: syz.3.5177 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  863.835053][T21019] Tainted: [W]=WARN
[  863.835062][T21019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  863.835077][T21019] Call Trace:
[  863.835084][T21019]  <TASK>
[  863.835092][T21019]  __dump_stack+0x1d/0x30
[  863.835122][T21019]  dump_stack_lvl+0x95/0xd0
[  863.835213][T21019]  dump_stack+0x15/0x1b
[  863.835235][T21019]  should_fail_ex+0x25e/0x270
[  863.835271][T21019]  should_failslab+0x8c/0xb0
[  863.835370][T21019]  kmem_cache_alloc_node_noprof+0x85/0x3d0
[  863.835404][T21019]  ? __alloc_skb+0x2db/0x6f0
[  863.835511][T21019]  ? __alloc_skb+0x2db/0x6f0
[  863.835617][T21019]  __alloc_skb+0x2db/0x6f0
[  863.835653][T21019]  ? ahci_port_start+0x370/0x410
[  863.835691][T21019]  ? __alloc_skb+0x205/0x6f0
[  863.835728][T21019]  netlink_ack+0xfd/0x530
[  863.835767][T21019]  netlink_rcv_skb+0x18d/0x220
[  863.835798][T21019]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  863.835833][T21019]  rtnetlink_rcv+0x1c/0x30
[  863.835857][T21019]  netlink_unicast+0x5a7/0x680
[  863.835921][T21019]  netlink_sendmsg+0x5be/0x6f0
[  863.835954][T21019]  ? __pfx_netlink_sendmsg+0x10/0x10
[  863.836039][T21019]  ____sys_sendmsg+0x532/0x580
[  863.836087][T21019]  ___sys_sendmsg+0x195/0x1e0
[  863.836216][T21019]  __x64_sys_sendmsg+0xd4/0x160
[  863.836266][T21019]  x64_sys_call+0x194c/0x3020
[  863.836298][T21019]  do_syscall_64+0x136/0x3c0
[  863.836325][T21019]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  863.836387][T21019] RIP: 0033:0x7f82300ade59
[  863.836409][T21019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  863.836435][T21019] RSP: 002b:00007f822eb07028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  863.836519][T21019] RAX: ffffffffffffffda RBX: 00007f8230335fa0 RCX: 00007f82300ade59
[  863.836540][T21019] RDX: 0000000000040000 RSI: 0000200000000200 RDI: 0000000000000005
[  863.836558][T21019] RBP: 00007f822eb07090 R08: 0000000000000000 R09: 0000000000000000
[  863.836576][T21019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  863.836593][T21019] R13: 00007f8230336038 R14: 00007f8230335fa0 R15: 00007ffdd8b85298
[  863.836622][T21019]  </TASK>
[  864.928156][T21047] loop5: detected capacity change from 0 to 512
[  865.162513][T21047] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  865.179240][T21047] ext4 filesystem being mounted at /111/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  865.318403][T21051] __nla_validate_parse: 30 callbacks suppressed
[  865.318452][T21051] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5185'.
[  865.359093][T21055] loop2: detected capacity change from 0 to 256
[  865.369363][T19075] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  865.377062][T21051] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5185'.
[  865.510824][T21063] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5190'.
[  865.913319][T21072] xt_ecn: cannot match TCP bits for non-tcp packets
[  866.060966][T21084] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5196'.
[  866.261428][T21087] loop4: detected capacity change from 0 to 512
[  866.389646][T21087] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 4294967295)!
[  866.546936][T21087] EXT4-fs (loop4): group descriptors corrupted!
[  866.836210][T21096] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5201'.
[  866.855366][T21096] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5201'.
[  866.973445][T21100] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5203'.
[  867.043327][T21100] random: crng reseeded on system resumption
[  867.299067][T21127] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5213'.
[  867.323877][T21127] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5213'.
[  867.850991][T21147] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5220'.
[  867.879810][T21147] random: crng reseeded on system resumption
[  868.142756][   T28] audit: type=1400 audit(1784168693.081:5507): avc:  denied  { open } for  pid=21171 comm="syz.3.5230" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=74466 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  868.172624][T21172] 9p: Bad value for 'rfdno'
[  868.275175][T21187] random: crng reseeded on system resumption
[  868.331822][T21180] loop4: detected capacity change from 0 to 4096
[  868.528447][T21180] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  868.554671][   T28] audit: type=1400 audit(1784168693.502:5508): avc:  denied  { write } for  pid=21175 comm="syz.4.5231" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  869.436747][T21212] loop2: detected capacity change from 0 to 4096
[  869.468756][   T28] audit: type=1400 audit(1784168694.022:5509): avc:  denied  { write } for  pid=21175 comm="syz.4.5231" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  869.497194][T21212] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  869.516637][   T28] audit: type=1400 audit(1784168694.463:5510): avc:  denied  { write } for  pid=21210 comm="syz.2.5244" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  869.555292][   T28] audit: type=1400 audit(1784168694.493:5511): avc:  denied  { write } for  pid=21210 comm="syz.2.5244" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  869.600281][T12944] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  869.647973][T13805] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  869.822940][T21228] loop5: detected capacity change from 0 to 2048
[  870.574912][T21228]  loop5: p1 < > p3
[  870.600981][T21228] loop5: p3 size 134217728 extends beyond EOD, truncated
[  870.628824][T21234] __nla_validate_parse: 7 callbacks suppressed
[  870.628928][T21234] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5250'.
[  870.687833][ T2980]  loop5: p1 < > p3
[  870.703784][ T2980] loop5: p3 size 134217728 extends beyond EOD, truncated
[  870.798910][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory
[  870.817753][T13847] udevd[13847]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  870.880271][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory
[  870.904691][T13847] udevd[13847]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  870.960142][T21259] loop2: detected capacity change from 0 to 128
[  870.983372][T21260] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5255'.
[  871.018637][T21260] netlink: 2 bytes leftover after parsing attributes in process `syz.3.5255'.
[  871.043562][T21260] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5255'.
[  871.056611][T21260] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5255'.
[  871.074163][T21260] netlink: 2 bytes leftover after parsing attributes in process `syz.3.5255'.
[  871.093327][T21260] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5255'.
[  871.106395][T21260] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5255'.
[  871.118592][T21260] netlink: 2 bytes leftover after parsing attributes in process `syz.3.5255'.
[  871.145485][T21260] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5255'.
[  871.160059][T21275] loop6: detected capacity change from 0 to 128
[  871.178522][T21278] loop3: detected capacity change from 0 to 128
[  871.423152][T21291] loop2: detected capacity change from 0 to 128
[  871.936547][T21296] loop3: detected capacity change from 0 to 128
[  871.969256][T21298] loop6: detected capacity change from 0 to 512
[  871.979504][T21298] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2
[  871.987689][T21298] EXT4-fs error (device loop6): ext4_iget_extra_inode:5180: inode #15: comm syz.6.5268: corrupted in-inode xattr: e_value size too large
[  872.008008][T21298] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  872.008210][T21298] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.5268: couldn't read orphan inode 15 (err -117)
[  872.021334][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  872.021360][    C0] EXT4-fs (loop6): initial error at time 1784168696: ext4_iget_extra_inode:5180: inode 15
[  872.021414][    C0] EXT4-fs (loop6): last error at time 1784168696: ext4_iget_extra_inode:5180: inode 15
[  872.070984][T21298] loop6: lost filesystem error report for type 5 error -117
[  872.071599][T21298] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  872.104878][T21298] EXT4-fs: Cannot specify journal on remount
[  872.125913][T21302] loop4: detected capacity change from 0 to 512
[  872.138542][T21302] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2
[  872.151979][T17328] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  872.157398][T21302] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.5269: corrupted in-inode xattr: e_value size too large
[  872.190750][T21302] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  872.195396][T21302] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.5269: couldn't read orphan inode 15 (err -117)
[  872.206089][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  872.206110][    C0] EXT4-fs (loop4): initial error at time 1784168697: ext4_iget_extra_inode:5180: inode 15
[  872.206153][    C0] EXT4-fs (loop4): last error at time 1784168697: ext4_iget_extra_inode:5180: inode 15
[  872.264201][T21302] loop4: lost filesystem error report for type 5 error -117
[  872.266095][T21302] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  872.298722][T21302] FAULT_INJECTION: forcing a failure.
[  872.298722][T21302] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  872.318064][T21302] CPU: 0 UID: 0 PID: 21302 Comm: syz.4.5269 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  872.318171][T21302] Tainted: [W]=WARN
[  872.318178][T21302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  872.318193][T21302] Call Trace:
[  872.318203][T21302]  <TASK>
[  872.318213][T21302]  __dump_stack+0x1d/0x30
[  872.318315][T21302]  dump_stack_lvl+0x95/0xd0
[  872.318337][T21302]  dump_stack+0x15/0x1b
[  872.318356][T21302]  should_fail_ex+0x25e/0x270
[  872.318391][T21302]  should_fail+0xb/0x20
[  872.318426][T21302]  should_fail_usercopy+0x1a/0x20
[  872.318473][T21302]  strncpy_from_user+0x27/0x250
[  872.318507][T21302]  do_getname+0x59/0x1c0
[  872.318540][T21302]  __se_sys_mkdirat+0x21/0xf0
[  872.318603][T21302]  __x64_sys_mkdirat+0x43/0x50
[  872.318630][T21302]  x64_sys_call+0x2c4e/0x3020
[  872.318657][T21302]  do_syscall_64+0x136/0x3c0
[  872.318753][T21302]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  872.318776][T21302] RIP: 0033:0x7f7e888cccc7
[  872.318792][T21302] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  872.318818][T21302] RSP: 002b:00007f7e87326e58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  872.318881][T21302] RAX: ffffffffffffffda RBX: 00007f7e87326ee0 RCX: 00007f7e888cccc7
[  872.318896][T21302] RDX: 00000000000001ff RSI: 0000200000000040 RDI: 00000000ffffff9c
[  872.318910][T21302] RBP: 0000200000000180 R08: 0000200000000000 R09: 0000000000000000
[  872.318977][T21302] R10: 0000200000000180 R11: 0000000000000246 R12: 0000200000000040
[  872.319049][T21302] R13: 00007f7e87326ea0 R14: 0000000000000000 R15: 00002000000001c0
[  872.319150][T21302]  </TASK>
[  872.572756][T21302] EXT4-fs: Cannot specify journal on remount
[  872.605545][T12944] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  872.733908][   T28] audit: type=1400 audit(1784168697.676:5512): avc:  denied  { mounton } for  pid=21322 comm="syz.6.5276" path="/222/file0" dev="tmpfs" ino=1220 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1
[  872.810956][T21330] loop3: detected capacity change from 0 to 4096
[  872.824338][T21330] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  872.886735][T21334] loop5: detected capacity change from 0 to 128
[  872.948504][   T28] audit: type=1400 audit(1784168697.886:5513): avc:  denied  { write } for  pid=21329 comm="syz.3.5279" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  873.068485][T12623] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  873.146752][T21354] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12288 sclass=netlink_route_socket pid=21354 comm=syz.3.5288
[  873.305550][T21365] loop3: detected capacity change from 0 to 1024
[  873.324126][T21365] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[  873.350866][T21365] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002]
[  873.373381][T21365] System zones: 0-1, 2-3, 5-36, 22-22, 98-101, 102-102
[  873.386905][T21365] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  873.438282][T21365] EXT4-fs error (device loop3): __ext4_iget:5533: inode #15: block 1803188595: comm syz.3.5291: invalid block
[  873.468489][T12623] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  873.868435][T21389] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12288 sclass=netlink_route_socket pid=21389 comm=syz.3.5300
[  873.923475][T21393] random: crng reseeded on system resumption
[  873.942125][T21395] netlink: 'syz.5.5303': attribute type 1 has an invalid length.
[  874.019056][T21395] 8021q: adding VLAN 0 to HW filter on device bond1
[  874.070485][T21400] bond1: (slave veth0_to_bond): making interface the new active one
[  874.082318][T21400] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  874.101955][T21402] macvlan1: entered promiscuous mode
[  874.111821][T21402] erspan0: entered promiscuous mode
[  874.142777][T21405] bond1: entered promiscuous mode
[  874.154227][T21405] veth0_to_bond: entered promiscuous mode
[  874.164553][T21405] bond1: entered allmulticast mode
[  874.172863][T21405] veth0_to_bond: entered allmulticast mode
[  874.302222][T21395] macvlan2: entered promiscuous mode
[  874.311374][T21395] macvlan2: entered allmulticast mode
[  875.311303][T21432] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12288 sclass=netlink_route_socket pid=21432 comm=syz.6.5315
[  875.407270][T21439] FAULT_INJECTION: forcing a failure.
[  875.407270][T21439] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  875.420987][T21436] random: crng reseeded on system resumption
[  875.445263][T21439] CPU: 0 UID: 0 PID: 21439 Comm: syz.3.5316 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  875.445336][T21439] Tainted: [W]=WARN
[  875.445426][T21439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  875.445439][T21439] Call Trace:
[  875.445446][T21439]  <TASK>
[  875.445455][T21439]  __dump_stack+0x1d/0x30
[  875.445482][T21439]  dump_stack_lvl+0x95/0xd0
[  875.445573][T21439]  dump_stack+0x15/0x1b
[  875.445600][T21439]  should_fail_ex+0x25e/0x270
[  875.445637][T21439]  should_fail+0xb/0x20
[  875.445747][T21439]  should_fail_usercopy+0x1a/0x20
[  875.445866][T21439]  _copy_from_user+0x1c/0xb0
[  875.445894][T21439]  get_timespec64+0x4c/0x100
[  875.445931][T21439]  __x64_sys_recvmmsg+0xa3/0x170
[  875.446018][T21439]  x64_sys_call+0x80f/0x3020
[  875.446094][T21439]  do_syscall_64+0x136/0x3c0
[  875.446130][T21439]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  875.446198][T21439] RIP: 0033:0x7f82300ade59
[  875.446221][T21439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  875.446304][T21439] RSP: 002b:00007f822eb07028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  875.446324][T21439] RAX: ffffffffffffffda RBX: 00007f8230335fa0 RCX: 00007f82300ade59
[  875.446342][T21439] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003
[  875.446362][T21439] RBP: 00007f822eb07090 R08: 0000200000003700 R09: 0000000000000000
[  875.446381][T21439] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000001
[  875.446443][T21439] R13: 00007f8230336038 R14: 00007f8230335fa0 R15: 00007ffdd8b85298
[  875.446464][T21439]  </TASK>
[  875.759338][T21449] __nla_validate_parse: 176 callbacks suppressed
[  875.759367][T21449] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5321'.
[  875.957921][T21455] random: crng reseeded on system resumption
[  875.980763][T21455] netlink: 'syz.3.5324': attribute type 4 has an invalid length.
[  876.234894][T21461] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  878.213958][T21467] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  878.583188][T21477] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12288 sclass=netlink_route_socket pid=21477 comm=syz.2.5328
[  878.754362][T21484] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5330'.
[  878.833011][T21486] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5332'.
[  879.032841][T21490] set_capacity_and_notify: 1 callbacks suppressed
[  879.032863][T21490] loop6: detected capacity change from 0 to 4096
[  879.100271][T21490] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  879.411771][   T28] audit: type=1400 audit(1784168704.352:5514): avc:  denied  { write } for  pid=21489 comm="syz.6.5334" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  879.591708][T21495] netlink: 'syz.2.5335': attribute type 1 has an invalid length.
[  879.639317][T21495] 8021q: adding VLAN 0 to HW filter on device bond2
[  879.682071][T21495] bond2: (slave veth0_to_bond): making interface the new active one
[  879.696654][T21495] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  879.892455][T21501] bond2: entered promiscuous mode
[  879.899291][T21501] veth0_to_bond: entered promiscuous mode
[  880.028995][T21501] bond2: entered allmulticast mode
[  880.035128][T21495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5335'.
[  880.044551][T21501] veth0_to_bond: entered allmulticast mode
[  880.208623][T21495] macvlan2: entered promiscuous mode
[  880.221324][T21495] macvlan2: entered allmulticast mode
[  880.256288][T21504] loop3: detected capacity change from 0 to 128
[  880.271708][T21505] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  880.301688][T17328] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  880.350210][T21505] loop5: detected capacity change from 0 to 128
[  880.449070][T21517] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5343'.
[  880.463665][T21520] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5344'.
[  880.478579][T21517] random: crng reseeded on system resumption
[  880.510964][T21517] netlink: 'syz.4.5343': attribute type 4 has an invalid length.
[  880.843324][T21531] loop2: detected capacity change from 0 to 4096
[  881.027711][T21531] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  881.111240][   T28] audit: type=1400 audit(1784168706.053:5515): avc:  denied  { write } for  pid=21530 comm="syz.2.5349" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  881.163634][   T28] audit: type=1400 audit(1784168706.063:5516): avc:  denied  { write } for  pid=21530 comm="syz.2.5349" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  881.195866][T21531] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5349'.
[  881.452383][T13805] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  881.467733][T21541] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5350'.
[  881.495262][T21541] random: crng reseeded on system resumption
[  881.504041][   T28] audit: type=1326 audit(1784168706.463:5517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21542 comm="syz.3.5354" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82300ade59 code=0x7ffc0000
[  881.574885][   T28] audit: type=1326 audit(1784168706.463:5518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21542 comm="syz.3.5354" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f82300ade59 code=0x7ffc0000
[  881.627098][T21549] can: request_module (can-proto-0) failed.
[  881.648314][T21551] can: request_module (can-proto-0) failed.
[  881.692230][   T28] audit: type=1326 audit(1784168706.463:5519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21542 comm="syz.3.5354" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82300ade59 code=0x7ffc0000
[  881.719596][T21559] netlink: 'syz.5.5356': attribute type 10 has an invalid length.
[  881.731889][   T28] audit: type=1326 audit(1784168706.463:5520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21542 comm="syz.3.5354" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82300ade59 code=0x7ffc0000
[  881.767094][T21559] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5356'.
[  881.780644][T21559] team0: entered promiscuous mode
[  881.789923][T21559] team_slave_0: entered promiscuous mode
[  881.802220][   T28] audit: type=1326 audit(1784168706.463:5521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21542 comm="syz.3.5354" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f82300ade59 code=0x7ffc0000
[  881.811585][T21559] team_slave_1: entered promiscuous mode
[  881.838716][   T28] audit: type=1326 audit(1784168706.463:5522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21542 comm="syz.3.5354" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82300ade59 code=0x7ffc0000
[  881.846793][T21559] team0: entered allmulticast mode
[  881.883946][   T28] audit: type=1326 audit(1784168706.463:5523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21542 comm="syz.3.5354" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82300ade59 code=0x7ffc0000
[  881.889785][T21559] team_slave_0: entered allmulticast mode
[  881.929015][T21568] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5358'.
[  881.945652][T21559] team_slave_1: entered allmulticast mode
[  881.957973][T21559] bridge0: port 3(team0) entered blocking state
[  881.970371][T21559] bridge0: port 3(team0) entered disabled state
[  881.983741][T21559] bridge0: port 3(team0) entered blocking state
[  881.992642][T21559] bridge0: port 3(team0) entered forwarding state
[  882.005398][T21571] random: crng reseeded on system resumption
[  882.014136][T21571] netlink: 'syz.2.5358': attribute type 4 has an invalid length.
[  882.275055][T21574] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  882.342134][T21582] loop2: detected capacity change from 0 to 4096
[  882.401124][T21582] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  882.494719][T21591] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5365'.
[  882.508799][T21591] random: crng reseeded on system resumption
[  882.519379][T21556] uprobe: syz.6.5355:21556 failed to unregister, leaking uprobe
[  882.552946][T21582] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5362'.
[  882.660015][T21603] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5366'.
[  882.684988][T21603] netlink: 2 bytes leftover after parsing attributes in process `syz.6.5366'.
[  882.700355][T13805] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  882.747000][T21603] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5366'.
[  882.790122][T21603] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5366'.
[  882.835080][T21608] loop6: detected capacity change from 0 to 128
[  882.907380][T21613] netlink: 'syz.3.5371': attribute type 4 has an invalid length.
[  883.658294][T21637] FAULT_INJECTION: forcing a failure.
[  883.658294][T21637] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  883.712915][T21637] CPU: 1 UID: 0 PID: 21637 Comm: syz.6.5377 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  883.712972][T21637] Tainted: [W]=WARN
[  883.712983][T21637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  883.712997][T21637] Call Trace:
[  883.713006][T21637]  <TASK>
[  883.713015][T21637]  __dump_stack+0x1d/0x30
[  883.713040][T21637]  dump_stack_lvl+0x95/0xd0
[  883.713114][T21637]  dump_stack+0x15/0x1b
[  883.713138][T21637]  should_fail_ex+0x25e/0x270
[  883.713175][T21637]  should_fail+0xb/0x20
[  883.713234][T21637]  should_fail_usercopy+0x1a/0x20
[  883.713327][T21637]  _copy_from_iter+0xcc/0xe70
[  883.713376][T21637]  ? __alloc_skb+0x511/0x6f0
[  883.713408][T21637]  ? __alloc_skb+0x205/0x6f0
[  883.713461][T21637]  netlink_sendmsg+0x4a4/0x6f0
[  883.713619][T21637]  ? __pfx_netlink_sendmsg+0x10/0x10
[  883.713647][T21637]  ____sys_sendmsg+0x532/0x580
[  883.713693][T21637]  ___sys_sendmsg+0x195/0x1e0
[  883.713780][T21637]  __x64_sys_sendmsg+0xd4/0x160
[  883.713824][T21637]  x64_sys_call+0x194c/0x3020
[  883.713858][T21637]  do_syscall_64+0x136/0x3c0
[  883.713892][T21637]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  883.714068][T21637] RIP: 0033:0x7f2f84c4de59
[  883.714089][T21637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  883.714114][T21637] RSP: 002b:00007f2f836a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  883.714141][T21637] RAX: ffffffffffffffda RBX: 00007f2f84ed5fa0 RCX: 00007f2f84c4de59
[  883.714158][T21637] RDX: 0000000000000010 RSI: 0000200000000700 RDI: 0000000000000004
[  883.714217][T21637] RBP: 00007f2f836a7090 R08: 0000000000000000 R09: 0000000000000000
[  883.714235][T21637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  883.714248][T21637] R13: 00007f2f84ed6038 R14: 00007f2f84ed5fa0 R15: 00007ffce3987288
[  883.714278][T21637]  </TASK>
[  884.008825][T21639] random: crng reseeded on system resumption
[  884.187305][T21652] netlink: 'syz.6.5383': attribute type 4 has an invalid length.
[  884.780254][T21668] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  885.521706][T21667] loop5: detected capacity change from 0 to 4096
[  885.593222][   T28] kauditd_printk_skb: 17 callbacks suppressed
[  885.593243][   T28] audit: type=1400 audit(1784168710.547:5541): avc:  denied  { getopt } for  pid=21675 comm="syz.3.5390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  885.731341][T21674] loop6: detected capacity change from 0 to 512
[  885.752416][T21667] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  885.780501][T21674] EXT4-fs error (device loop6): ext4_orphan_get:1425: comm syz.6.5391: bad orphan inode 13
[  885.794254][T21674] loop6: lost filesystem error report for type 5 error -117
[  885.795768][T21674] ext4_test_bit(bit=12, block=4) = 1
[  885.814497][T21674] is_bad_inode(inode)=0
[  885.820303][T21674] NEXT_ORPHAN(inode)=0
[  885.829864][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  885.829939][    C1] EXT4-fs (loop6): initial error at time 1784168710: ext4_orphan_get:1425
[  885.830060][    C1] EXT4-fs (loop6): last error at time 1784168710: ext4_orphan_get:1425
[  885.912217][   T28] audit: type=1400 audit(1784168710.837:5542): avc:  denied  { write } for  pid=21666 comm="syz.5.5388" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  885.961700][T21667] loop2: detected capacity change from 0 to 7
[  885.990651][   T28] audit: type=1400 audit(1784168710.847:5543): avc:  denied  { write } for  pid=21666 comm="syz.5.5388" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  886.066624][T21674] max_ino=32
[  886.070991][T21674] i_nlink=1
[  886.076656][T21674] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  886.219560][T21674] EXT4-fs warning (device loop6): dx_probe:813: inode #2: comm syz.6.5391: Hash code is SIPHASH, but hash not in dirent
[  886.236040][T21674] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.5391: Corrupt directory, running e2fsck is recommended
[  886.254460][T21674] EXT4-fs warning (device loop6): dx_probe:813: inode #2: comm syz.6.5391: Hash code is SIPHASH, but hash not in dirent
[  886.272529][T21674] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.5391: Corrupt directory, running e2fsck is recommended
[  886.288365][T21674] EXT4-fs error (device loop6): ext4_find_dest_de:2050: inode #2: block 13: comm syz.6.5391: bad entry in directory: directory entry overrun - offset=24, inode=0, rec_len=131076, size=1024 fake=0
[  886.318103][   T28] audit: type=1400 audit(1784168711.177:5544): avc:  denied  { write } for  pid=21673 comm="syz.6.5391" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  886.387970][T21674] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  886.522064][T21685] __nla_validate_parse: 33 callbacks suppressed
[  886.522158][T21685] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5392'.
[  886.556393][T19075] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  886.596136][T21685] random: crng reseeded on system resumption
[  886.711067][T21689] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5394'.
[  886.762378][T21689] netlink: 'syz.6.5394': attribute type 4 has an invalid length.
[  886.783677][T21687] loop5: detected capacity change from 0 to 4096
[  886.819514][T21687] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  886.891727][   T28] audit: type=1400 audit(1784168711.848:5545): avc:  denied  { write } for  pid=21686 comm="syz.5.5393" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  886.934147][T21694] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=21694 comm=syz.6.5395
[  886.957615][   T28] audit: type=1400 audit(1784168711.888:5546): avc:  denied  { write } for  pid=21686 comm="syz.5.5393" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  886.986091][T21695] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5393'.
[  887.010990][T21687] loop2: detected capacity change from 0 to 7
[  887.062264][T21700] loop2: detected capacity change from 0 to 512
[  887.072506][T21700] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.5396: bad orphan inode 13
[  887.082703][T21700] loop2: lost filesystem error report for type 5 error -117
[  887.082914][T21700] ext4_test_bit(bit=12, block=4) = 1
[  887.095630][T21700] is_bad_inode(inode)=0
[  887.099826][T21700] NEXT_ORPHAN(inode)=0
[  887.103917][T21700] max_ino=32
[  887.107136][T21700] i_nlink=1
[  887.110778][T21700] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  887.124191][T21700] FAULT_INJECTION: forcing a failure.
[  887.124191][T21700] name failslab, interval 1, probability 0, space 0, times 0
[  887.144540][T21700] CPU: 1 UID: 0 PID: 21700 Comm: syz.2.5396 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  887.144584][T21700] Tainted: [W]=WARN
[  887.144591][T21700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  887.144604][T21700] Call Trace:
[  887.144618][T21700]  <TASK>
[  887.144628][T21700]  __dump_stack+0x1d/0x30
[  887.144728][T21700]  dump_stack_lvl+0x95/0xd0
[  887.144754][T21700]  dump_stack+0x15/0x1b
[  887.144778][T21700]  should_fail_ex+0x25e/0x270
[  887.144877][T21700]  should_failslab+0x8c/0xb0
[  887.145059][T21700]  kmem_cache_alloc_noprof+0x7f/0x3c0
[  887.145111][T21700]  ? do_getname+0x2e/0x1c0
[  887.145199][T21700]  ? do_getname+0x2e/0x1c0
[  887.145225][T21700]  do_getname+0x2e/0x1c0
[  887.145311][T21700]  __se_sys_mkdirat+0x21/0xf0
[  887.145346][T21700]  __x64_sys_mkdirat+0x43/0x50
[  887.145407][T21700]  x64_sys_call+0x2c4e/0x3020
[  887.145520][T21700]  do_syscall_64+0x136/0x3c0
[  887.145577][T21700]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  887.145639][T21700] RIP: 0033:0x7fbdb75fccc7
[  887.145662][T21700] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  887.145694][T21700] RSP: 002b:00007fbdb6056e58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  887.145774][T21700] RAX: ffffffffffffffda RBX: 00007fbdb6056ee0 RCX: 00007fbdb75fccc7
[  887.145802][T21700] RDX: 00000000000001ff RSI: 00002000000008c0 RDI: 00000000ffffff9c
[  887.145821][T21700] RBP: 0000200000001080 R08: 00002000000010c0 R09: 0000000000000000
[  887.145836][T21700] R10: 0000200000001080 R11: 0000000000000246 R12: 00002000000008c0
[  887.145851][T21700] R13: 00007fbdb6056ea0 R14: 0000000000000000 R15: 0000000000000000
[  887.145871][T21700]  </TASK>
[  887.410194][T21700] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  887.423815][T21705] IPVS: length: 17 != 8
[  887.431249][T21705] loop4: detected capacity change from 0 to 512
[  887.440655][T19075] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  887.446464][T21705] EXT4-fs (loop4): can't mount with commit=, fs mounted w/o journal
[  887.563696][T21705] loop4: detected capacity change from 0 to 128
[  887.576825][T21705] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  887.589450][T21705] ext4 filesystem being mounted at /482/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  887.627835][   T28] audit: type=1400 audit(1784168712.519:5547): avc:  denied  { write } for  pid=21704 comm="syz.4.5398" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  887.631494][T21705] IPVS: set_ctl: invalid protocol: 29 172.20.20.170:20004
[  887.705374][T12944] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  887.718031][   T28] audit: type=1326 audit(1784168712.679:5548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21721 comm="syz.5.5403" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa27b75de59 code=0x7ffc0000
[  887.718722][T21722] FAULT_INJECTION: forcing a failure.
[  887.718722][T21722] name failslab, interval 1, probability 0, space 0, times 0
[  887.765718][T21722] CPU: 1 UID: 0 PID: 21722 Comm: syz.5.5403 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  887.765755][T21722] Tainted: [W]=WARN
[  887.765765][T21722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  887.765783][T21722] Call Trace:
[  887.765793][T21722]  <TASK>
[  887.765803][T21722]  __dump_stack+0x1d/0x30
[  887.765879][T21722]  dump_stack_lvl+0x95/0xd0
[  887.765909][T21722]  dump_stack+0x15/0x1b
[  887.765932][T21722]  should_fail_ex+0x25e/0x270
[  887.765987][T21722]  should_failslab+0x8c/0xb0
[  887.766013][T21722]  kmem_cache_alloc_noprof+0x7f/0x3c0
[  887.766037][T21722]  ? audit_log_start+0x34c/0x730
[  887.766066][T21722]  ? audit_log_start+0x34c/0x730
[  887.766180][T21722]  audit_log_start+0x34c/0x730
[  887.766312][T21722]  audit_seccomp+0x49/0x110
[  887.766344][T21722]  __seccomp_filter+0x905/0x1370
[  887.766368][T21722]  ? static_key_count+0x23/0x40
[  887.766474][T21722]  ? security_task_prctl+0x13c/0x160
[  887.766509][T21722]  __secure_computing+0x7d/0x150
[  887.766606][T21722]  do_syscall_64+0xd4/0x3c0
[  887.766630][T21722]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  887.766663][T21722] RIP: 0033:0x7fa27b71e68e
[  887.766691][T21722] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  887.766798][T21722] RSP: 002b:00007fa27a1b6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  887.766826][T21722] RAX: ffffffffffffffda RBX: 00007fa27a1b76c0 RCX: 00007fa27b71e68e
[  887.766843][T21722] RDX: 000000000000000f RSI: 00007fa27a1b70a0 RDI: 0000000000000003
[  887.766856][T21722] RBP: 00007fa27a1b7090 R08: 0000000000000000 R09: 0000000000000000
[  887.766869][T21722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  887.766882][T21722] R13: 00007fa27b9e6038 R14: 00007fa27b9e5fa0 R15: 00007ffc9f482438
[  887.766930][T21722]  </TASK>
[  887.766965][T21722] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64
[  887.809069][   T28] audit: type=1326 audit(1784168712.679:5549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21721 comm="syz.5.5403" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa27b75de59 code=0x7ffc0000
[  887.895699][T21728] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5405'.
[  887.955773][T21729] loop4: detected capacity change from 0 to 512
[  887.979470][T21728] random: crng reseeded on system resumption
[  888.057167][T21729] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  888.072712][T21728] netlink: 'syz.5.5405': attribute type 4 has an invalid length.
[  888.107921][T21729] EXT4-fs error (device loop4): xattr_find_entry:337: inode #15: comm syz.4.5404: corrupted xattr entries
[  888.125017][T21729] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  888.125280][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  888.147394][    C0] EXT4-fs (loop4): initial error at time 1784168713: xattr_find_entry:337: inode 15
[  888.160564][    C0] EXT4-fs (loop4): last error at time 1784168713: xattr_find_entry:337: inode 15
[  888.177485][T21729] EXT4-fs (loop4): 1 orphan inode deleted
[  888.185364][T21729] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  888.217794][T12944] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  888.249330][T21737] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=21737 comm=syz.4.5407
[  888.364199][T21743] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5406'.
[  888.388636][T21743] gtp0: entered promiscuous mode
[  888.395706][T21742] loop4: detected capacity change from 0 to 4096
[  888.407287][T21743] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5406'.
[  888.442417][T21742] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  888.484147][T21742] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5409'.
[  888.549632][T12944] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  888.586447][T21676] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  888.669538][T21750] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  888.690189][T21748] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  888.890786][T21766] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=21766 comm=syz.2.5418
[  888.945406][T21770] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  888.965536][T21767] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  889.011116][T21770] EXT4-fs error (device loop6): xattr_find_entry:337: inode #15: comm syz.6.5417: corrupted xattr entries
[  889.026645][T21770] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  889.040253][T21767] ext4 filesystem being mounted at /547/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  889.064187][T21769] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  889.076949][T21770] EXT4-fs (loop6): 1 orphan inode deleted
[  889.083353][T21770] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  889.110744][T21769] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5420'.
[  889.150247][T17328] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  889.206522][T12944] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  889.247599][T21735] syz.5.5406 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000
[  889.266368][T21735] CPU: 1 UID: 0 PID: 21735 Comm: syz.5.5406 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  889.266423][T21735] Tainted: [W]=WARN
[  889.266433][T21735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  889.266450][T21735] Call Trace:
[  889.266460][T21735]  <TASK>
[  889.266471][T21735]  __dump_stack+0x1d/0x30
[  889.266502][T21735]  dump_stack_lvl+0x95/0xd0
[  889.266531][T21735]  dump_stack+0x15/0x1b
[  889.266574][T21735]  dump_header+0x80/0x240
[  889.266603][T21735]  oom_kill_process+0x295/0x350
[  889.266701][T21735]  out_of_memory+0x981/0xbc0
[  889.266745][T21735]  try_charge_memcg+0x621/0xa00
[  889.266801][T21735]  __memcg_kmem_charge_page+0x199/0x3a0
[  889.266843][T21735]  __alloc_frozen_pages_noprof+0x18a/0x350
[  889.266887][T21735]  alloc_pages_mpol+0xa9/0x1d0
[  889.266986][T21735]  alloc_pages_noprof+0x8f/0x140
[  889.267026][T21735]  __vmalloc_node_range_noprof+0xae9/0x11e0
[  889.267077][T21735]  __kvmalloc_node_noprof+0x3a0/0x590
[  889.267143][T21735]  ? futex_hash_allocate+0x192/0x920
[  889.267172][T21735]  ? futex_hash_allocate+0x192/0x920
[  889.267199][T21735]  ? futex_hash_allocate+0x192/0x920
[  889.267230][T21735]  futex_hash_allocate+0x192/0x920
[  889.267329][T21735]  ? cap_task_prctl+0x13f/0x6b0
[  889.267376][T21735]  futex_hash_prctl+0xd8/0xf0
[  889.267403][T21735]  __se_sys_prctl+0x4f4/0x13b0
[  889.267485][T21735]  __x64_sys_prctl+0x67/0x80
[  889.267520][T21735]  x64_sys_call+0x2533/0x3020
[  889.267553][T21735]  do_syscall_64+0x136/0x3c0
[  889.267581][T21735]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  889.267618][T21735] RIP: 0033:0x7fa27b75de59
[  889.267636][T21735] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  889.267656][T21735] RSP: 002b:00007fa27a1b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d
[  889.267681][T21735] RAX: ffffffffffffffda RBX: 00007fa27b9e5fa0 RCX: 00007fa27b75de59
[  889.267702][T21735] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e
[  889.267720][T21735] RBP: 00007fa27b7f3e6f R08: 0000000000000000 R09: 0000000000000000
[  889.267798][T21735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  889.267817][T21735] R13: 00007fa27b9e6038 R14: 00007fa27b9e5fa0 R15: 00007ffc9f482438
[  889.267839][T21735]  </TASK>
[  889.267849][T21735] memory: usage 307200kB, limit 307200kB, failcnt 1633
[  889.289768][T21783] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5423'.
[  889.404523][T21735] memory+swap: usage 319072kB, limit 9007199254740988kB, failcnt 0
[  889.635442][T21735] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0
[  889.680467][T21735] Memory cgroup stats for /syz5:
[  889.680734][T21735] cache 0
[  889.713985][T21735] rss 0
[  889.717121][T21735] shmem 0
[  889.720205][T21735] mapped_file 0
[  889.735447][T21735] dirty 0
[  889.744094][T21735] writeback 0
[  889.751040][T21735] workingset_refault_anon 235
[  889.780723][T21735] workingset_refault_file 2940
[  889.788545][T21735] swap 12156928
[  889.806748][T21735] swapcached 56524800
[  889.818982][T21735] pgpgin 450820
[  889.830436][T21735] pgpgout 450819
[  889.836022][T21799] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  889.850242][T21735] pgfault 446143
[  889.863496][T21735] pgmajfault 149
[  889.872931][T12623] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816
[  889.909749][T21735] inactive_anon 0
[  889.914466][T21735] active_anon 4096
[  889.920225][T21735] inactive_file 0
[  889.925567][T21735] active_file 0
[  889.932113][T12623] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816
[  889.932232][T21735] ==================================================================
[  889.932274][T21735] BUG: KCSAN: data-race in _prb_read_valid / data_alloc
[  889.932310][T21735] 
[  889.932319][T21735] write to 0xffffffff86c82ca8 of 8 bytes by task 12623 on cpu 0:
[  889.932344][T21735]  data_alloc+0x2fc/0x380
[  889.932376][T21735]  prb_reserve+0x8e3/0xaf0
[  889.932403][T21735]  vprintk_store+0x54a/0x910
[  889.932436][T21735]  vprintk_emit+0x1a4/0x600
[  889.932467][T21735]  vprintk_default+0x26/0x30
[  889.932495][T21735]  vprintk+0x1d/0x30
[  889.932534][T21735]  _printk+0x79/0xa0
[  889.932556][T21735]  __ext4_error_inode+0x298/0x3a0
[  889.932595][T21735]  __ext4_iget+0x10f5/0x2400
[  889.932630][T21735]  ext4_lookup+0x173/0x3a0
[  889.932665][T21735]  __lookup_slow+0x155/0x200
[  889.932699][T21735]  lookup_slow+0x3c/0x60
[  889.932737][T21735]  path_lookupat+0x2b2/0x4c0
[  889.932773][T21735]  filename_lookup+0x18f/0x390
[  889.932809][T21735]  vfs_statx+0x96/0x170
[  889.932841][T21735]  vfs_fstatat+0x118/0x170
[  889.932875][T21735]  __se_sys_newfstatat+0x55/0x3e0
[  889.932912][T21735]  __x64_sys_newfstatat+0x55/0x70
[  889.932948][T21735]  x64_sys_call+0x2c64/0x3020
[  889.932975][T21735]  do_syscall_64+0x136/0x3c0
[  889.932994][T21735]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  889.933018][T21735] 
[  889.933026][T21735] read to 0xffffffff86c82ca8 of 16 bytes by task 21735 on cpu 1:
[  889.933051][T21735]  _prb_read_valid+0x183/0x930
[  889.933080][T21735]  prb_read_valid+0x3c/0x60
[  889.933105][T21735]  printk_get_next_message+0xea/0x550
[  889.933134][T21735]  console_flush_all+0x2bc/0x6b0
[  889.933162][T21735]  console_unlock+0xa1/0x280
[  889.933190][T21735]  vprintk_emit+0x3e4/0x600
[  889.933222][T21735]  vprintk_default+0x26/0x30
[  889.933271][T21735]  vprintk+0x1d/0x30
[  889.933313][T21735]  _printk+0x79/0xa0
[  889.933336][T21735]  seq_buf_do_printk+0x113/0x1a0
[  889.933379][T21735]  mem_cgroup_print_oom_meminfo+0x17d/0x260
[  889.933407][T21735]  dump_header+0xa2/0x240
[  889.933428][T21735]  oom_kill_process+0x295/0x350
[  889.933473][T21735]  out_of_memory+0x981/0xbc0
[  889.933517][T21735]  try_charge_memcg+0x621/0xa00
[  889.933554][T21735]  __memcg_kmem_charge_page+0x199/0x3a0
[  889.933585][T21735]  __alloc_frozen_pages_noprof+0x18a/0x350
[  889.933623][T21735]  alloc_pages_mpol+0xa9/0x1d0
[  889.933659][T21735]  alloc_pages_noprof+0x8f/0x140
[  889.933699][T21735]  __vmalloc_node_range_noprof+0xae9/0x11e0
[  889.933728][T21735]  __kvmalloc_node_noprof+0x3a0/0x590
[  889.933759][T21735]  futex_hash_allocate+0x192/0x920
[  889.933781][T21735]  futex_hash_prctl+0xd8/0xf0
[  889.933807][T21735]  __se_sys_prctl+0x4f4/0x13b0
[  889.933844][T21735]  __x64_sys_prctl+0x67/0x80
[  889.933872][T21735]  x64_sys_call+0x2533/0x3020
[  889.933897][T21735]  do_syscall_64+0x136/0x3c0
[  889.933920][T21735]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  889.933951][T21735] 
[  889.933957][T21735] Reported by Kernel Concurrency Sanitizer on:
[  889.933979][T21735] CPU: 1 UID: 0 PID: 21735 Comm: syz.5.5406 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  889.934016][T21735] Tainted: [W]=WARN
[  889.934027][T21735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  889.934046][T21735] ==================================================================
[  890.024266][T21797] netlink: 'syz.4.5427': attribute type 4 has an invalid length.
[  890.239601][T21735] unevictable 0
[  890.325974][T21797] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.5427'.
[  890.456837][T14831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  890.470920][T21735] hierarchical_memory_limit 314572800
[  890.480526][T21735] hierarchical_memsw_limit 9223372036854771712
[  890.495165][T21735] total_cache 0
[  890.499645][T21735] total_rss 0
[  890.504630][T21735] total_shmem 0
[  890.509266][T21735] total_mapped_file 0
[  890.515586][T21735] total_dirty 0
[  890.520421][T21735] total_writeback 0
[  890.525546][T21735] total_workingset_refault_anon 235
[  890.531507][T21735] total_workingset_refault_file 2940
[  890.537406][T21735] total_swap 12156928
[  890.541921][T21735] total_swapcached 56524800
[  890.546929][T21735] total_pgpgin 450820
[  890.551285][T21735] total_pgpgout 450819
[  890.556180][T21735] total_pgfault 446143
[  890.564131][T21735] total_pgmajfault 149
[  890.571698][T21735] total_inactive_anon 0
[  890.576868][T21735] total_active_anon 4096
[  890.583847][T21735] total_inactive_file 0
[  890.589430][T21735] total_active_file 0
[  890.594916][T21735] total_unevictable 0
[  890.600597][T21735] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.5406,pid=21734,uid=0
[  890.625929][T21735] Memory cgroup out of memory: Killed process 21734 (syz.5.5406) total-vm:94312kB, anon-rss:1236kB, file-rss:22560kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000
[  890.756947][ T3970] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  890.767510][ T3970] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  890.816273][ T3970] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  890.826653][ T3970] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  890.879411][ T3970] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  890.896594][ T3970] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  890.945956][ T3970] netdevsim netdevsim3 netdevsim0 (unregistering): left allmulticast mode
[  890.957761][ T3970] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  890.972496][ T3970] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  891.079397][ T3970] bridge0: port 3(team0) entered disabled state
[  891.090931][ T3970] bridge_slave_1: left allmulticast mode
[  891.115029][ T3970] bridge_slave_1: left promiscuous mode
[  891.122678][ T3970] bridge0: port 2(bridge_slave_1) entered disabled state
[  891.143561][ T3970] bridge_slave_0: left allmulticast mode
[  891.162806][ T3970] bridge_slave_0: left promiscuous mode
[  891.182940][ T3970] bridge0: port 1(bridge_slave_0) entered disabled state
[  891.193484][   T28] kauditd_printk_skb: 20 callbacks suppressed
[  891.193500][   T28] audit: type=1400 audit(1784168716.152:5569): avc:  denied  { write } for  pid=21813 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  891.247290][ T3970] pim6reg: left allmulticast mode
[  891.262973][   T28] audit: type=1400 audit(1784168716.202:5570): avc:  denied  { write } for  pid=21824 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  891.295746][ T3970] bond_slave_0: left promiscuous mode
[  891.303897][ T3970] bond_slave_1: left promiscuous mode
[  891.377771][ T3970] bond2 (unregistering): (slave bridge2): Releasing backup interface
[  891.388547][ T3970] bridge2 (unregistering): left promiscuous mode
[  891.398772][ T3970] bridge2 (unregistering): left allmulticast mode
[  891.413491][ T3970] bond0 (unregistering): left allmulticast mode
[  891.423710][ T3970] bond_slave_0: left allmulticast mode
[  891.430958][ T3970] bond_slave_1: left allmulticast mode
[  891.443077][ T3970] bond1 (unregistering): (slave macvlan2): Removing an active aggregator
[  891.456116][ T3970] bond1 (unregistering): (slave macvlan2): Releasing backup interface
[  891.467400][ T3970] macvlan2 (unregistering): left allmulticast mode
[  891.483778][ T3970] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  891.495520][ T3970] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  891.510494][ T3970] bond0 (unregistering): Released all slaves
[  891.520204][ T3970] bond1 (unregistering): Released all slaves
[  891.534701][ T3970] bond2 (unregistering): Released all slaves
[  891.545324][ T3019] 8021q: adding VLAN 0 to HW filter on device eth5
[  891.587844][ T3970] tipc: Left network mode
[  891.595882][ T3970] IPVS: stopping backup sync thread 14832 ...
[  891.625326][ T3970] hsr_slave_0: left promiscuous mode
[  891.642967][ T3970] hsr_slave_1: left promiscuous mode
[  891.649937][ T3970] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  891.682448][ T3970] batman_adv: batadv0: Removing interface: batadv_slave_0
[  891.698793][   T28] audit: type=1400 audit(1784168716.662:5571): avc:  denied  { write } for  pid=21827 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  891.731663][ T3970] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  891.751786][ T3970] batman_adv: batadv0: Removing interface: batadv_slave_1
[  891.775185][   T28] audit: type=1400 audit(1784168716.742:5572): avc:  denied  { write } for  pid=21838 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  891.809456][ T3970] veth1_macvtap: left promiscuous mode
[  891.822402][ T3970] veth0_macvtap: left promiscuous mode
[  891.830583][ T3970] veth1_vlan: left promiscuous mode
[  891.837894][ T3970] veth0_vlan: left promiscuous mode
[  891.922630][ T3970] team_slave_1 (unregistering): left allmulticast mode
[  891.937595][ T3970] team0 (unregistering): Port device team_slave_1 removed
[  891.950663][ T3970] team_slave_0 (unregistering): left promiscuous mode
[  891.959891][ T3970] team_slave_0 (unregistering): left allmulticast mode
[  891.969423][ T3970] team0 (unregistering): Port device team_slave_0 removed
[  892.011231][ T3019] 8021q: adding VLAN 0 to HW filter on device eth6
[  892.129845][   T28] audit: type=1400 audit(1784168717.092:5573): avc:  denied  { write } for  pid=21841 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  892.183520][   T28] audit: type=1400 audit(1784168717.152:5574): avc:  denied  { write } for  pid=21852 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  892.228569][ T3019] 8021q: adding VLAN 0 to HW filter on device eth8
[  892.252442][ T3970] IPVS: stop unused estimator thread 0...
[  892.347006][   T28] audit: type=1400 audit(1784168717.312:5575): avc:  denied  { write } for  pid=21855 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  892.414491][ T3019] 8021q: adding VLAN 0 to HW filter on device eth7
[  892.431766][   T28] audit: type=1400 audit(1784168717.363:5576): avc:  denied  { write } for  pid=21866 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1