last executing test programs:

41.27128406s ago: executing program 4 (id=942):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x80214, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0)
socketpair(0x18, 0x0, 0x2, &(0x7f0000000000))
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x15, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fffffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r3, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000040)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x7, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x14, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000280), &(0x7f0000000340), 0x8, 0x6e, 0x8, 0x8, &(0x7f0000000380)}}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
unshare(0x28020480)
r4 = fsopen(&(0x7f0000000080)='iso9660\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0)

41.085416431s ago: executing program 4 (id=946):
syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x121c91e, &(0x7f0000000340), 0x4, 0x503, &(0x7f0000000680)="$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") (async)
r0 = perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x8f, 0xf3, 0xd, 0x3, 0x0, 0x6, 0x121000, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x80000000, 0x1, @perf_bp={&(0x7f0000000000), 0x3}, 0x0, 0x4, 0x12f415c1, 0x3, 0x5, 0x80, 0xa46, 0x0, 0x10, 0x0, 0x585}, 0x0, 0xa, 0xffffffffffffffff, 0x8)
mmap$perf(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x12, r0, 0x0) (async)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x8) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180), 0x4)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xfffffffffffffffe)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x800) (async)
sendmsg$NFT_BATCH(r4, 0x0, 0x24040884)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e24000004000e0008000a00", @ANYRES32=r6], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) (async)
copy_file_range(r2, &(0x7f00000008c0)=0x4, r1, &(0x7f0000000100), 0x8, 0x0)
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) (async)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r10) (async, rerun: 32)
r11 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
r12 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="4fb3820f990100000000000000d538000000", @ANYRES16=r12, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
close_range(r8, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)='syzkaller\x00'}, 0x51)

41.024274644s ago: executing program 4 (id=947):
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000cc0)='./file0\x00', 0x2, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRES32], 0xff, 0x2e7, &(0x7f0000000d80)="$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")
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x7f, 0xa)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007911c00000000000850000006b00000095000000f8000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfe01, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x21)
io_pgetevents(0x0, 0x2, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000080)={'wlan0\x00', {0x2, 0x0, @multicast2}})
creat(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x103)
mknod$loop(&(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0)
creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x175)

40.638974257s ago: executing program 4 (id=949):
r0 = syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x80c406, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRES16], 0xef, 0x2b1, &(0x7f0000000100)="$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")
rt_tgsigqueueinfo(0x0, 0x0, 0xe, &(0x7f0000000240)={0x6, 0xffffffff, 0xa7})
r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff)
ppoll(&(0x7f0000000040)=[{r0, 0x68}, {r0, 0x7401}, {r0}, {r1}, {r0, 0x10}, {r0}, {r0, 0x100}, {r0, 0x8000}, {r0, 0x8016}], 0x9, &(0x7f00000000c0)={0x77359400}, &(0x7f00000003c0)={[0xffffffffffff23a8]}, 0x8)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00769a7d8200010000001495595915303d6000"})
perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402000000000003, 0x8404, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0x8}, 0x810c, 0x0, 0xc4b, 0x9, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendmsg$NFC_CMD_LLC_SDREQ(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x20000004)
r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = syz_pidfd_open(r4, 0x0)
ioctl$FS_IOC_GETVERSION(r5, 0xc040ff0b, &(0x7f0000000180))
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x202, 0x40020, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x1, 0x0, 0x100009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4)
bind$inet(r6, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x2, 0x6, 0x1000}]}, 0x10)
syz_emit_ethernet(0x6d, &(0x7f0000000b40)={@local, @broadcast, @void, {@ipv4={0x800, @dccp={{0x0, 0x4, 0x2, 0x0, 0xf, 0x66, 0x0, 0x3, 0x21, 0x0, @dev={0xac, 0x14, 0x14, 0x42}, @remote}, {{0x4e22, 0x4e22, 0x0, 0x1, 0xd, 0x0, 0x0, 0x2, 0x2, "cc33d4", 0x81, "fb2a01"}, "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"/462}}}}}, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702520f90000002020207b000007010000f8ffffffb702000008000000b70300800000000085000000060000009500000000000000000000000a0000000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000900)={0x0, 0x0, "6c7250968a0f31b3fd113649aa2a3a7c"})
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000009c0)={'ip6tnl0\x00', &(0x7f0000000940)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x46, 0xfffffff8, 0x3, @private0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8, 0x700, 0x80, 0x5}})
r7 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0x4}]}, 0x10)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab000e271f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1ff032aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f757036303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e0800000092e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9be7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa5200002fe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb0972d39e4b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e501ddddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b605908000000f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c332c34812382e57c0e0d83f3f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217b6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2a434b9048ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b4783d66661a92f174f2b88cd544b2a8e1b05ea7cf51578169fff7765f9978883b4b5983b42a35a05dabfc325ec2a2ec2f9b0882fdcf5d6f72272d2ff0d8eea60f5494ba42b4d40f144f0ab680a6f40f9094d3afb58a1efd6109894b8605c6b3b3f020c222f6446195b2274f634fbb737948a1f36ea729467e132385e9da614e4625175f4443b97a675934db90010e4b884200c3546c4d86d712c3939e11be3343f693846f509ad4c445ade5cd6d126d5694462ac5d3b527c3bd51c0a715a28d65fe94b255d02cdc1fab99b5b9c352f1b284115e4046285a824d22b6f0afbed8d6096a72fef72ebd6aae78b02fa1993e8fe2020ae93aae2bcfffa40b98549f1fb9fcefa74329909a207336d07f6f59da423ac5fa47852055d5ce6d2c56bdbbcdbf3458ba478c669f39d5272e65c90908ea2cb86d38f8ebf80a8cb85d8399b42403c94b8662af5cf1411526f177b4d476169a5d5a8c37d0d8893a77d0bd47b8a0bba60b3e26094209c889585f997ff556bcd2cc223f9c0c44de9d0fe1b5a8a815f652e79747d3e1f413fa0575d51f652d22883e143065c5ad74bdc864754ba3dad5a8fc8fc2c807d1a51dfb29884adee415c13f2ce14d307bd6165ec6ba68a766adfcbe444ea72d586bb47dd98a225467aab538a77667d19bae2e51727ba6d190e6d7"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82d", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

40.530256943s ago: executing program 4 (id=950):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8444, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x2400, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
setrlimit(0x2, &(0x7f00000000c0)={0x2000000, 0xffffffffffffffff})
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2014448, &(0x7f0000000880), 0x0, 0x545, &(0x7f0000001300)="$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")
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000010000000000000008000000850000008700000018050000786c6c250000000000202020871af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b79cc279f30000e1840000007b00000095"], &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {0x0, 0x0, 0x1be}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x6, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x3}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x218, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_MODES={0x80, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xb2}, @ETHTOOL_A_BITSET_BITS={0x74, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xcc}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '^^%\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '-$&#+-/\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}]}, @ETHTOOL_A_WOL_MODES={0xe4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x21, 0x5, "7044d8215f4c295c5ac9ed627db80cdbd8b7e18845792e95402841d984"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xa}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x94, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'police\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xf4\\-{\'\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'police\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6d5}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}]}, @ETHTOOL_A_WOL_SOPASS={0x9f, 0x3, "d32ded286d29b630d3d7cd2931fadcf3b7c5ee403d85fade066ac3cec57c874b63a54315b6009940a365b526bbb4b7ed99913e6ee8db8348a1b27e993ebee31da271e6c723e80ccd472337709a0033b353db515ad7bdc69b95e90bc92c90e987e9fe9d73e59eed7c67810b62f29378dcc04fd3c9895efc98fd737509551f84a52a10bd20938d44fc1ef21e977e457a0f02eb3feb3ad3e9efaa6ab4"}]}, 0x218}, 0x1, 0x0, 0x0, 0x4008000}, 0x80)
semget$private(0x0, 0x3, 0x20)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fffffbff390000000c00990001200000560000001c000d80180001800900020032062303c90000000500040002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000065}, 0x4008000)
sendmsg$NL80211_CMD_SET_MAC_ACL(r1, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r4, @ANYBLOB="20002abd7000ffdbdf255d00000008000300", @ANYRES32=0x0, @ANYBLOB="1c00a6800a000600ffffffffffff00000a000600ffffffffffff00001000a6800a00060008021100000100000800a500010000001000a6800a00060008021100000000004c00a6800a00060008021100000000000a00060008021100000000000a00a9610d26ffffffff00000a000600ffffffffffff00000a000600ffffffffffff00000a0006000802110000010000"], 0xac}, 0x1, 0x0, 0x0, 0x80}, 0x844)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x43, 0xb9)
ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000000)=0x20)
renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r6, 0x84, 0x81, &(0x7f0000000280)="20f6c734e3d81107", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r6, 0x84, 0x15, &(0x7f0000000200), 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
sendto$inet6(r6, &(0x7f0000000380)="b1", 0xffe0, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x1, r2, 0x700, {0x4, 0xa}, 0x7}, 0x1)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), 0xffffffffffffffff)
pipe(&(0x7f0000000500)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r8, 0x5, &(0x7f00000004c0)='fd', 0x0, r7)
fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0)
fsmount(r8, 0x0, 0x2)

40.274826278s ago: executing program 4 (id=954):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000, &(0x7f0000000400)={[{@lazytime}, {@resuid}]}, 0xee, 0x2aa, &(0x7f0000001580)="$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")
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6000)
io_submit(0x0, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r2, &(0x7f0000000000), 0x4000}])
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x284ba, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x20d, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0xfffffffe, 0x0, 0x3a5f, 0x8})
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000040)={0x6, 0x27, 0x3ff, 0xffff, 0x7})
ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000000)=0x8001)
openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0)

40.229892561s ago: executing program 32 (id=954):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000, &(0x7f0000000400)={[{@lazytime}, {@resuid}]}, 0xee, 0x2aa, &(0x7f0000001580)="$eJzs3T9oJFUYAPBvZncvF285Tm0E8Q+IiAbCWQiCjTYKB3IcIoIKJyJWciecd9jtWmlhobVKKpsgdkZL0SLYKLZRUySNhcHCIKLFyOzshnGzYePu7CTs/n6wzJuZb+a9hfnevE2YNwEsrAsR8WRENCJiJSJaEZGUA+4vPhf6q2vLm1cjsuy535NeXLFeGBx3LiK6EfF4RHOw79bGSzt/bj3z0Ps3Ww9+uvHicl3fL+LsQWlvZ/vZ/U8uv/vFpUdvpf1t7f6y/D2qlIzY1kwi7phFZadE0hwb8leWZbW0haNdefvzn/K8vzMiHujlfyvSfsp+cOPMN6145ONyfPla/vC3H++uu71AtbKsld8DuxmwcNLeGDhJVyOiKKfp6moxhv+5kcQb12+8tfL69ZvXXhvZfTRq77CAaST5b/P8B/jTXy19eW4o/39tFPl/LI/NuKXATLQjtp+/sv5LXt53F4fFcE+xyPN/5ZXOwyH/YeFMkf9nZ9UmoB7t3l/4Cu7/sFiM/2EOTJi7Q/n/TsWtAk6xcv4vnXRjgFoZ/8Mcaw0K3ZG75T/Mh/cmGMCX8/+HkceP2Og/fzAXhu7/NT6PC5y0cv4DAIslWxr7iPDu+X4oMF9Ouv8BAAAAAAAAAAAAAAAAAAAOW1vevDr41FXndx9F7D0VEc3/1l/MPNjovY94MOngbX8kediBtDhsKi/fN+UJpvRZxU9fX/6f80Ce3622/mPqDArf3zubCoZeZnHk3HadaxHdPPhis3n4+k/611+Mu9L65z9zaMftY9rZenVMQMWSofUnXvi2snN3Jjjmn/XKqp/Ipa2Ir/P+5+Ko/i+Nu3rL0f1PuzzF8oTe/HvKEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFCbfwMAAP//rvtnHA==")
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6000)
io_submit(0x0, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r2, &(0x7f0000000000), 0x4000}])
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x284ba, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x20d, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0xfffffffe, 0x0, 0x3a5f, 0x8})
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000040)={0x6, 0x27, 0x3ff, 0xffff, 0x7})
ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000000)=0x8001)
openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0)

7.668471264s ago: executing program 0 (id=1269):
uname(0x0)
uname(&(0x7f0000000000)=""/163)
r0 = io_uring_setup(0x756b, 0x0)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
fcntl$lock(r0, 0x26, &(0x7f0000000200)={0x0, 0x1, 0x1006, 0xffffffffffffffff, r1})
r2 = gettid()
setpgid(r1, r2)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x800718, &(0x7f0000000000)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@sb={'sb', 0x3d, 0x7}}, {@nouid32}, {@resgid}, {@nombcache}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x491, &(0x7f0000000980)="$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")
r3 = inotify_init()
inotify_add_watch(r3, &(0x7f00000002c0)='./file0\x00', 0x2000e0c)
removexattr(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=@known='system.posix_acl_default\x00')
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r4, &(0x7f00000005c0)="f5", 0x1, 0x20004001, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x54, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}, @in6={0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, @in6={0xa, 0x4e21, 0x9, @loopback, 0x7ab}]}, &(0x7f0000000180)=0x10)
r6 = socket$netlink(0x10, 0x3, 0x4)
r7 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r8=>0x0})
bind$can_j1939(r7, &(0x7f0000000380)={0x1d, r8, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18)
bind$can_raw(r7, 0x0, 0x0)
r9 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r9, &(0x7f00000036c0)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000340)='v', 0x1}], 0x1}}, {{&(0x7f0000000780)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000900)=[{&(0x7f00000007c0)="4867ca4ed54e9e757bd0f8f04a0ff6c9a0b50c4e042a5b52dd784aa62336483d4511091725c80f50", 0x28}, {0x0}], 0x2, &(0x7f0000000940)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x38}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x1f}, @rand_addr=0x64010100}}}], 0x38}}], 0x3, 0x48000)
socket$inet_sctp(0x2, 0x5, 0x84)
writev(r6, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400190d09034beafd0d36020a841a000000230f00000000a2bc5603ca00000f7f89004e00200000000101ff00c00e03000200000000000000000300005839c900910000", 0x48}], 0x1)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r11 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf7, 0x5c}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d147c5, 0x0, 0xfffffffffffffffe}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, r10)
open_tree(0xffffffffffffff9c, 0x0, 0x89001)

7.014451412s ago: executing program 3 (id=1274):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@noload}, {@stripe={'stripe', 0x3d, 0xdc}}, {@data_err_abort}, {@noload}, {@data_err_ignore}, {@auto_da_alloc}]}, 0xff, 0x451, &(0x7f0000000940)="$eJzs3MtvG8UfAPDvrp30/Ut+UB4tLQQKouKRNOnzwKUIJA4gIcGhiFNI0qrUbaAJEq0qKBzKEVXijjgi8RdwggsCTkhc4Y4qVaiXFiQko13vpq5rp3Hj1KX+fKRNZrzj7Hw9O/bsjDcBDKyx7EcSsTkifouIkUb2xgJjjV/Xrpyb+evKuZkk6vU3/kzyclevnJspi5bP29TI1OtFfl2b4154O2K6Vps7XeQnFk++N7Fw5uzzx09OH5s7Nndq6tChfXt3Dh+Y2t+TOLO4rm7/aH7HtlfeuvjazJGL7/z0TVbfzcX+5jh6ZMNY49Vt66keH6zftjSlk2ofK0JXKhGRNddQ3v9HohIblvaNxMuf9rVywJqq1+v1dp/PhfN14B6WRL9rAPRH+UGfXf+W2x0aetwVLh+OeP9gI/5rxdbYU420KDPUcn3bS2MRceT8319mW6zNPAQAwA2+OxwRz7Ub/6XxYFO5/xVrKKMR8f+IuC8i7o+IrRHxQERe9qGIeLjL47eukNw8/kkv3VZgK5SN/14o1raWxn//1PP4C6OVIrclj38oOXq8NreneE12x9C6LD+5zDG+f+nXzzvtax7/ZVt2/HIs2JBeqrZM0M1OL06vMuwllz+J2F5tiT+XRLmMk0TEtojY3tVfvn6FcfyZr3d0KnXr+JfRg3Wm+lcRTzfa/3y0xF9KOq5PTh48MLV/Yn3U5vZMlGfFzX7+5cLrnY6/qvh7IGv/ja3nf24p/tFkfcTCmbMn8vXahWhdIb6lC79/1vGa5nbP/+HkzTw9XDz24fTi4unJiOHk1Zsfn7r+3CJfbY5/96528af5e1wZ7SMRkZ3EOyPi0Yh4rKj74xHxRETsWib+H1988t3u419mVr6Hsvhnb9X+0dz+3ScqJ374tvv4S1n778tTu4tHVvL+t9IKrua1AwAAgP+KNP8OfJKOL6XTdHy88R3+rbExrc0vLD57dP6DU7ON78qPxlBaznSNNM2HThZzw2V+qiW/t5g3/qKyIc+Pz8zXZvsdPAy4TR36f+aPSr9rB6w592vB4NL/YXDp/zC49H8YXPo/DK52/f/jPtQDuPN8/sPg0v9hcOn/MLj0fxhIHe+NT1d1y7/EPZ+ItPtnVaOvdU66+McQd0+iutZ1Xtd2V7/fmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHrj3wAAAP//TonqKA==")
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r2=>0x0)
timer_settime(r2, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
timer_delete(r2)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@newqdisc={0x188, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x7}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x158, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_PARMS={0x38, 0x1, {0xa32, 0x6, 0x1, 0xc, 0x0, 0x4, 0x8, 0x52, 0x68d8, 0x5, 0x4, 0x7, 0x12, 0x6, 0xfffffffd, 0xfffffe01}}, @TCA_GRED_DPS={0x10, 0x3, {0x0, 0x2, 0x1}}, @TCA_GRED_LIMIT={0x8, 0x5, 0x10000002}]}}]}, 0x188}, 0x1, 0x0, 0x0, 0x40098}, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000004)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x11)
truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd)
sendfile(r7, r7, 0x0, 0xe3aa6ea)

6.744986658s ago: executing program 0 (id=1277):
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l')
r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080))
read(r0, &(0x7f00000000c0)=""/114, 0x72)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680))
r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000580)=@generic={&(0x7f0000000440)='./file2\x00'}, 0x18)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48)
r3 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x42000, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ec0)={0x6, 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="18000000ffffffff00184600000500000000000000000000009500"/40], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000000300)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
r4 = dup3(r1, r1, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{0x1, <r5=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)='%pI4   \x00'}, 0x20)
r6 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r6, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e22}, 0x6e)
r7 = socket$unix(0x1, 0x2, 0x0)
ioctl$int_in(r7, 0x5421, &(0x7f0000000000)=0x5)
connect$unix(r7, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg(r7, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0)
connect$unix(r6, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
connect$unix(r6, &(0x7f0000000100)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80)
pwritev2(r8, &(0x7f0000000100), 0x0, 0x5405, 0x0, 0x0)
sendfile(r8, r8, 0x0, 0x7a680000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x0, 0xfffffffffffffffd, &(0x7f00000006c0)='syzkaller\x00', 0x4, 0x32, &(0x7f0000000240)=""/50, 0x40f00, 0x20, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000000200)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x5, 0x10, 0x9}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000003c0)=[r4, r5, r8, 0x1], &(0x7f0000000400)=[{0x3, 0x2, 0xf, 0x6}, {0x5, 0x1, 0x9, 0xa}, {0x0, 0x5, 0x8, 0x3}], 0x10, 0x1}, 0x94)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000480)=r2, 0xfffffffffffffe6b)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0x1, &(0x7f0000000000)=0x7f)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYRES8=r4, @ANYRES32=0x0, @ANYRESDEC=r9, @ANYBLOB="0000000000000000000000000000000000000000320000007f0000010000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dd000000000000000000000000000000000200"/168], 0xf0}, 0x1, 0x0, 0x0, 0x22000000}, 0x8000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0)

6.744765918s ago: executing program 3 (id=1278):
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xa00, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

5.987485622s ago: executing program 3 (id=1280):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@gettaction={0x18, 0x32, 0xe72c5f922f23cad9, 0x70bd28, 0x25dfdbf7, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xc1920335b598980a}, 0x4000000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000100)=@pptp={0x18, 0x2, {0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}, 0x80)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00038014"], 0x104}, 0x1, 0x0, 0x0, 0x10004000}, 0x20004080)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x132)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x8}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4)
sendmsg$unix(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24040080}, 0x800)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r6, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8)

5.907141577s ago: executing program 3 (id=1282):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@gettaction={0x18, 0x32, 0xe72c5f922f23cad9, 0x70bd28, 0x25dfdbf7, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xc1920335b598980a}, 0x4000000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000100)=@pptp={0x18, 0x2, {0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}, 0x80)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00038014"], 0x104}, 0x1, 0x0, 0x0, 0x10004000}, 0x20004080)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x132)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x8}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4)
sendmsg$unix(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24040080}, 0x800)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r6, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r6, 0x84, 0x5, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e23, 0x400, @ipv4={'\x00', '\xff\xff', @local}, 0x3}}}, 0x84)

5.84727196s ago: executing program 3 (id=1283):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x0, 0xd9}, 0x4006, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x3)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe, 0x4a58e87de5e2a6e7}, 0xc)
mount$9p_unix(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x301200a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = syz_io_uring_setup(0x4175, &(0x7f0000000180)={0x0, 0xa419, 0x10000, 0xfffffffe, 0x2d0}, &(0x7f0000001040), &(0x7f0000001080))
io_uring_enter(r2, 0x7b20, 0xe93c, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_IOWQ_AFF(r2, 0x11, &(0x7f0000002200)='9', 0x1)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00v\x00\t\x00'/20, @ANYRES32=0x0, @ANYBLOB="04000d80080001"], 0x24}, 0x1, 0x5502000000000000}, 0x0)
setsockopt$sock_int(r1, 0x1, 0x26, &(0x7f00000002c0)=0x759b7500, 0x4)
r4 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10)
r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0xb6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0xce, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, r0, 0x8)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
getrlimit(0x4, 0x0)
msgrcv(0x0, 0x0, 0x0, 0x1, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
rmdir(&(0x7f0000000000)='./file0\x00')
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000006c0)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)

5.213370637s ago: executing program 0 (id=1286):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x7, 0x9b, 0x5, 0x8, 0x0, 0x70bd2d, 0x25dfdbfe, [@sadb_lifetime={0x4, 0x4, 0x7, 0x0, 0x8, 0x4e}, @sadb_sa={0x2, 0x1, 0x4d5, 0xb, 0x5, 0xf0, 0x2, 0x60000000}]}, 0x40}}, 0x4008000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x3, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1c}}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x50}}, 0x0)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r6, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x1a, &(0x7f0000000200)={0x1, 'netdevsim0\x00'}, 0x18)
syz_emit_ethernet(0x55, &(0x7f0000000240)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x6, 0x47, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x89, 0x6, "c3ee0ead"}, @cipso={0x86, 0x9, 0x3, [{0x0, 0x3, "7f"}]}, @timestamp_prespec={0x44, 0x4, 0x3c, 0x3, 0x2}]}}, '\x00\x00\x00'}}}}}, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000440)=@nat={'nat\x00', 0x62, 0x5, 0x3e0, 0x0, 0x178, 0xffffffff, 0x0, 0x2a0, 0x348, 0x348, 0xffffffff, 0x348, 0x348, 0x5, 0x0, {[{{@uncond, 0x0, 0x98, 0xd0, 0x0, {0x22e}, [@common=@unspec=@state={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x25, {0x3, @local, @broadcast}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @remote, @empty, @gre_key, @gre_key}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 'batadv0\x00', 'bond0\x00'}, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}, @common=@addrtype={{0x30}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @multicast1, @multicast2, @gre_key, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @local, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x250, 0xb5, 0x29, 0x91, 0x10, 0x4dd, 0x9032, 0x4346, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x16, 0x2, 0x60, 0x40, [{{0x9, 0x4, 0x74, 0xa, 0x1, 0x2, 0x6, 0x0, 0x7, [], [{{0x9, 0x5, 0xdd7221554e5ebcc3, 0x0, 0x400, 0x4, 0x4, 0x2}}]}}]}}]}}, 0x0)

4.97722415s ago: executing program 3 (id=1289):
socket$key(0xf, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)

3.859651566s ago: executing program 1 (id=1294):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$kcm(0x29, 0x2, 0x0)
r3 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0)
pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000280)="111e", 0x2}], 0x1, 0x4000001, 0x0)
sendfile(r2, r3, 0x0, 0x8000fb00)

3.484975387s ago: executing program 5 (id=1300):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6000)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x20, 0x10, 0x4, 0xfffff00c}, {0x30, 0x0, 0xfd, 0x5ae9}, {0x6, 0x0, 0x7, 0x2}]}, 0x10)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0)
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x0)
fchdir(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd)
sendfile(r5, r5, 0x0, 0xe3aa6ea)

2.913839911s ago: executing program 1 (id=1301):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = io_uring_setup(0x4822, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x0, 0xfb})
r2 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0)
flock(r3, 0x2)
flock(r2, 0x2)
r4 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0)
flock(r4, 0x1)
r5 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0)
r6 = open(&(0x7f0000000180)='.\x00', 0x8080, 0x12e)
flock(r6, 0x1)
flock(r5, 0x1)
close_range(r1, 0xffffffffffffffff, 0x0)
io_uring_enter(r6, 0x5b30, 0xcca9, 0x6c, &(0x7f0000000000)={[0x4c3]}, 0x8)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_DATA_LEN={0x0, 0x7, 0x1, 0x0, 0xc}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0xfffffffffffffec8, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x6}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

2.630434637s ago: executing program 1 (id=1302):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x7, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x3}]}, @typedef={0x5}, @func={0x1, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x71, 0x2e, 0x5f, 0x30, 0x6f]}}, 0x0, 0x4b, 0x0, 0x1, 0x79a}, 0x28)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff}, './file1\x00'})
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x804, 0x0, 0xe723, 0x0, 0x400000002, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, r1, 0xb)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x16, 0x81, 0x63, 0x2}]})
sendmsg$nl_route(r3, 0x0, 0x0)
r4 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000d00)={[{@noauto_da_alloc}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x4c4, &(0x7f0000000d40)="$eJzs3c9vHFcdAPDvjO3Ydd3ahUr8ENBQCgFF3bU3rVX1VC4gVFVCVJw4pMbeWJZ3vZZ3HWKTg/M/IBGJE/wJHJA4IOXEnRvcEFI4IAWIQDESh0UzO3YcZ9exiL2Tej8faTTz5u3u9721573x1/a+AEbW5YjYi4hLEfFJRMwW55Niiw96W/a4Rw9vL+8/vL2cRLf78T+SvD47F0eek3m5eM2piPjBdyN+nDwdt72zu77UaNS3inK109ystnd2/7LWXFqtr9Y3arXFhcX59669Wzuzvr7R/PWD76x9+MPf/fbL9/+w962fZs2aKeqO9uMs9bo+cRgnMx4RH55HsBKMFf25VHZD+L+kEfGZiHgzu/67ZbcGABiGbnc2urNHywDARZfmObAkrRS5gJlI00qll8N7PabTRqvduXqjtb2x0suVzcVEemOtUZ8vcoVzMZFk5YX8+HG5dqx8LSJei4ifTb6UlyvLrcZKmTc+ADDCXj42//97sjf/AwAX3FTZDQAAhs78DwCjx/wPAKPH/A8Ao8f8DwCjx/wPAKPH/A8AI+X7H32Ubd394vOvV27ubK+3br69Um+vV5rby5Xl1tZmZbXVWs0/s6f5rNdrtFqbC+/E9q1qp97uVNs7u9ebre2NzvX8c72v1yeG0isA4CSvvXHvT0lE7L3/Ur7FkbUczNVwsaVlNwAozVjZDQBKM152A4DS+Bkf6LNE7xMG/onQ3YFPMbTAC+7KF+T/YVTJ/8Pokv+H0SX/D6Or202s+Q8AI0aOHziH3/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAhTeTb0laKdYCn4k0rVQiXomIuZhIbqw16vMR8WpE/HFyYjIrL5TdaADgOaV/S4r1v67MvjVzvPZS8p/JfB8RP/nFxz+/tdTpbC1k5/95eL5ztzhfOzGQpQYBoCQH8/TBPH7g0cPbywfbMNvz4Nu9xUWzuPvF1qsZj/F8P5XfOEz/KynKPdn9ytgZxN+7ExGf79f/JM+NzBUrnx6Pn8V+Zajx0yfip3ldb5+9F589g7bAqLmXjT8f9Lv+0ric7/tf/1P5CPX8Dsa//afGv/Rw/BsbMP5dPm2Md37/vYF1dyK+ON4vfnIYPxkQ/61Txv/zl77y5qC67i8jrkT/+EdjVTvNzWp7Z/fttebSan21vlGrLS4szr937d1aNc9RVw8y1U/7+/tXXz2p/9MD4k89o/9fP2X/f/XfT3701RPif/Nr/b/+r58QP5sTv3HK+EvTvxm4fHcWf6V//4vnDO7/1VPGv//X3ZVTPhQAGIL2zu76UqNR33IwtIPs3u0FaMaFO7jzqXlXs++As3idz51jU8semYDz9viiL7slAAAAAAAAAAAAAADAIMP4h6ey+wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDF9b8AAAD//3Sb1xQ=")
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f0000000040)=<r6=>0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f00000002c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r7=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r5, 0x50009418, &(0x7f00000009c0)={{r5}, r6, 0x6, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000800000000000000000000070000000000000010000000000000003c0d00000000000004000000000000000600000000000000050000000000000006000000000000000000000c0000000000000001800000000000000600000000000000090000000000000041000000000000000d00"/136]}, @devid=r7})
ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000001240)={<r8=>0x0, "7210e2604c43dbeb80b2f7d243f71007"})
r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r9, 0x80089418, &(0x7f0000000040)=<r10=>0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r9, 0x84009422, &(0x7f00000002c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r9, 0x50009418, &(0x7f00000009c0)={{r9}, r10, 0x6, @inherit={0x88, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000800000000000000000000070000000000000010000000000000003c0d00000000000004000000000000000600000000000000050000000000000006000000000000000000000c0000000000000001800000000000000600000000000000090000000000000041000000000000000d00"/136]}, @devid=r11})
ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, &(0x7f0000002240)={0x8, 0x1, {0x5, @usage=0x101, r7, 0x2, 0x5, 0x0, 0x1, 0x4, 0x60, @usage=0x7, 0x3, 0x9, [0xbb4, 0x10001, 0x5, 0x5, 0x8, 0x100]}, {0x7fffffff, @usage=0x87, r8, 0x3, 0x8, 0x9, 0x3ff, 0x0, 0x30, @usage=0x8, 0x101, 0x30000000, [0x7fffffffffffffff, 0xd57, 0xdd, 0x6, 0x1, 0x5]}, {0x0, @usage=0x8, r11, 0x6, 0x5, 0x1, 0xffffffffffffffca, 0xad, 0x20, @usage=0x100000001, 0x7, 0x7ff, [0x200, 0x27, 0x0, 0x7fff, 0x7, 0xa36]}, {0x93, 0x2458, 0x4}})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x40)
syz_open_dev$tty20(0xc, 0x4, 0x0)
pwrite64(r0, &(0x7f0000000840)="61bc004de859feb2cebfc0824faea13de2793af8e173c7b8025173fff79cb80d26ff60fbdffb596749d31197cd94409e2db3122cf52480f14242630d2aa0436224a696f4bfbbc308d29fc64006f03dfee2ff029f3b39c63e3c6153d42e15a75540d2611f7b30c6df051e67d0da47c6ff9274fc5d9b7550cd98ac931ce825ab30b11a89c207905070e20da509684259d0a600"/156, 0x9c, 0x1)

2.534548273s ago: executing program 5 (id=1304):
r0 = syz_pidfd_open(0x0, 0x0)
pwrite64(r0, &(0x7f00000000c0)="c4830338737775d734de1f0f581ee2e844e12d7123157536f56eaef203bfac448bf9bc14d3d841a0ea3502", 0x2b, 0x8)
capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000680)={0x200000, 0x200000, 0xfffffffd, 0x40, 0x400000, 0xfffffffe})
r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x4a38, 0x8000)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x27, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_fd={0x18, 0x6}, @snprintf, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='syzkaller\x00', 0x3, 0x8, &(0x7f0000000340)=""/8, 0x41000, 0x43, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x1}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0xc, 0x7}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000480)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000004c0)=[{0x2, 0x3, 0x0, 0x3}, {0x4, 0x1, 0x1, 0x4}, {0x2, 0x4, 0x5, 0x2}, {0x2, 0x3, 0x4, 0x4}, {0x2, 0x3, 0x10, 0x7}, {0x4, 0x2, 0x6, 0x6}, {0x0, 0x2, 0x2, 0x8}, {0x4, 0x1, 0x0, 0x8}], 0x10, 0x5}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="600000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="137c0300231a0500340012800e0001006970366772657461700000001a4102800600"], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20040040)
r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e0"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r5, 0x35, 0x0, 0x6, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0], 0x0, &(0x7f0000000300), <r6=>0x0}, 0x40)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0xffff, 0x4, 0x5, 0x1000, 0x1, 0xffff2d79, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x24, 0x2, 0x3}, 0x50)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@map=r7, 0xffffffffffffffff, 0x24, 0x2000, 0xffffffffffffffff, @value, @void, @void, @void, r6}, 0x20)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x9, 0xfffffffd, 0x83, 0xd44, 0x20, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x1ff}, 0x50)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000740)=ANY=[@ANYRES32=r8, @ANYRES32, @ANYBLOB="33a473570000", @ANYRES32, @ANYBLOB, @ANYRES64=r6], 0x20)
pipe2(&(0x7f00000000c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x80000)
r10 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x10, r3}, 0x18)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000006c0)=ANY=[@ANYRES32=r9, @ANYRES32=r4, @ANYBLOB="1a0000000000000000000094e6f3a36414ed00", @ANYRES32=r10, @ANYBLOB, @ANYRES64=r6], 0x20)
r11 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={0xffffffffffffffff, r1, 0x2, 0x0, @val=@perf_event={0x9ba}}, 0x18)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)={@fallback=r1, r2, 0x13, 0x2000, 0x0, @value=r11, @void, @void, @void, r6}, 0x20)
r12 = socket(0x200000000000011, 0x4000000000080002, 0x0)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'lo\x00', <r14=>0x0})
bind$packet(r12, &(0x7f0000000d00)={0x11, 0x0, r14, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14)
writev(r12, &(0x7f0000000180)=[{&(0x7f0000000400)='9', 0x1}], 0x1)
socket(0x1e, 0x4, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
r15 = getpid()
sched_setscheduler(r15, 0x2, &(0x7f0000000200)=0x7)

2.273470758s ago: executing program 5 (id=1305):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c0000000700000001000000020000060400000004008fc0a4b816be188300fb35f5ffff005f61612e30"], &(0x7f0000000900)=""/18, 0x3b, 0x12, 0x1, 0xfffffff0}, 0x28)
perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x27, 0x3, 0xff, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xffffffffffffffff, 0x8000000000000001}, 0x0, 0x10000, 0x4, 0x6, 0x100000000000008, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x5, 0xfffffffffffffff0}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x2c, r2, 0x507, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8002}, 0x20000050)

2.218982011s ago: executing program 5 (id=1306):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x200, 0x3}, 0x102802, 0x3, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000001c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
write(r1, &(0x7f0000004200)='t', 0x1)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010)
sendfile(r1, r0, 0x0, 0x3ffff)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000040)=ANY=[@ANYBLOB="03000000000000"], 0x8)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0)
open$dir(0x0, 0x20000, 0x1)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a"], 0x50}}, 0xc000)
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2})
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, 0x0}, 0x8040)
socket$nl_netfilter(0x10, 0x3, 0xc)

2.149921755s ago: executing program 2 (id=1307):
socket$kcm(0x10, 0x2, 0x0) (async)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/210, 0xd2}], 0x1}, 0x0) (async)
recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/210, 0xd2}], 0x1}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x1, 0x202, 0xc, 0xfffffffe, <r3=>0x0}, &(0x7f00000000c0)=0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
setregid(0xffffffffffffffff, 0xee00)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000140)={0x8, 0x8004, 0x81, 0x0, r3}, 0x10)
sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0300001a"], 0x34c}}, 0x0)

1.965637076s ago: executing program 2 (id=1308):
r0 = io_uring_setup(0x68f6, &(0x7f00000002c0)={0x0, 0x48c7, 0x8, 0x0, 0x100016b})
socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$kcm(0x29, 0x2, 0x0)
r2 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0)
pwritev(r2, &(0x7f00000003c0)=[{0x0}], 0x1, 0x4000001, 0x0)
sendfile(r1, r2, 0x0, 0x8000fb00)
io_setup(0x1, &(0x7f00000007c0))
close_range(r0, 0xffffffffffffffff, 0x0)

1.89401236s ago: executing program 2 (id=1309):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_uring_setup(0x68f6, &(0x7f00000002c0)={0x0, 0x48c7, 0x8, 0x0, 0x100016b})
socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$kcm(0x29, 0x2, 0x0)
r2 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0)
pwritev(r2, &(0x7f00000003c0)=[{&(0x7f0000000280)="111e", 0x2}], 0x1, 0x4000001, 0x0)
sendfile(r1, r2, 0x0, 0x8000fb00)

1.765102508s ago: executing program 1 (id=1310):
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0600000004000000990500000a"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001340), &(0x7f0000000900), 0x404, r3, 0x0, 0x1ba8847c99}, 0x38)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb87, &(0x7f00000017c0)="$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")
r4 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r4, 0x5000)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x1)
fallocate(r4, 0x0, 0x0, 0x8800000)
socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0xe, 0xa, 0x9}]}, 0x10)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x0)
getsockopt$sock_buf(r5, 0x1, 0x1a, &(0x7f0000001140)=""/4096, &(0x7f0000000000)=0x1000)
pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3)

1.464438745s ago: executing program 1 (id=1311):
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000cc0)='./file0\x00', 0x2, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRES32], 0xff, 0x2e7, &(0x7f0000000d80)="$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")
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x7f, 0xa)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007911c00000000000850000006b00000095000000f8000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfe01, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x21)
io_pgetevents(0x0, 0x2, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000080)={'wlan0\x00', {0x2, 0x0, @multicast2}})
creat(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x38)
creat(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x103)
mknod$loop(&(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, 0x1)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0)
pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)
creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x175)

1.266476146s ago: executing program 0 (id=1312):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x2e}]}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x4c)

1.156603723s ago: executing program 0 (id=1313):
unshare(0x6a040000)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x3c, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x6}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008000}, 0x814)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x40d, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5019}}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x200500bc)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@acquire={0x128, 0x17, 0x1, 0x70bd25, 0x0, {{@in=@multicast1, 0x0, 0xff}, @in=@broadcast, {@in6=@mcast1, @in=@broadcast, 0x4e23, 0x0, 0x0, 0x0, 0xa, 0x0, 0x56befe125658cbe4}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in6=@mcast2, 0x0, 0x0, 0x1, 0x0, 0xa, 0xa0, 0x20, 0x3b}, {0x0, 0xfc62, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x40000000000000}, {0x4000, 0x2}, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x2}, 0xfffffff9, 0x38, 0x9}}, 0x128}}, 0x0)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$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")
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0)
ppoll(&(0x7f0000000280)=[{r3, 0x6200}], 0x1, 0x0, 0x0, 0x0)
write$binfmt_aout(r3, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x7f, 0x6, 0x1, "42341f9b1000007e4f00"})
r4 = syz_open_pts(r3, 0x40000)
dup3(r4, r3, 0x0)
splice(r3, 0x0, r2, 0x0, 0x7ffff000, 0x0)

1.155523973s ago: executing program 1 (id=1314):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x7, 0x9b, 0x5, 0x8, 0x0, 0x70bd2d, 0x25dfdbfe, [@sadb_lifetime={0x4, 0x4, 0x7, 0x0, 0x8, 0x4e}, @sadb_sa={0x2, 0x1, 0x4d5, 0xb, 0x5, 0xf0, 0x2, 0x60000000}]}, 0x40}}, 0x4008000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x3, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1c}}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x50}}, 0x0)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r6, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x1a, &(0x7f0000000200)={0x1, 'netdevsim0\x00'}, 0x18)
syz_emit_ethernet(0x55, &(0x7f0000000240)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x6, 0x47, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x89, 0x6, "c3ee0ead"}, @cipso={0x86, 0x9, 0x3, [{0x0, 0x3, "7f"}]}, @timestamp_prespec={0x44, 0x4, 0x3c, 0x3, 0x2}]}}, '\x00\x00\x00'}}}}}, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000440)=@nat={'nat\x00', 0x62, 0x5, 0x3e0, 0x0, 0x178, 0xffffffff, 0x0, 0x2a0, 0x348, 0x348, 0xffffffff, 0x348, 0x348, 0x5, 0x0, {[{{@uncond, 0x0, 0x98, 0xd0, 0x0, {0x22e}, [@common=@unspec=@state={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x25, {0x3, @local, @broadcast}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @remote, @empty, @gre_key, @gre_key}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 'batadv0\x00', 'bond0\x00'}, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}, @common=@addrtype={{0x30}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @multicast1, @multicast2, @gre_key, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @local, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x250, 0xb5, 0x29, 0x91, 0x10, 0x4dd, 0x9032, 0x4346, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x16, 0x2, 0x60, 0x40, [{{0x9, 0x4, 0x74, 0xa, 0x1, 0x2, 0x6, 0x0, 0x7, [], [{{0x9, 0x5, 0xdd7221554e5ebcc3, 0x0, 0x400, 0x4, 0x4, 0x2}}]}}]}}]}}, 0x0)

954.908625ms ago: executing program 2 (id=1315):
r0 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f0000001d00)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x6b}, 0x0)

926.247646ms ago: executing program 2 (id=1316):
socket$unix(0x1, 0x1, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = socket(0x1e, 0x4, 0x0)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0xfffffff5}}], 0x2e288501978821b, 0x80)
r4 = dup3(r3, r2, 0x0)
recvmmsg$unix(r4, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000005140)=""/4111, 0x100f}], 0x1}}], 0x1, 0x58ca2280, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r5, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0)

586.212896ms ago: executing program 2 (id=1317):
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1e000000000000000a000000fbffff7f"], 0x50)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
ftruncate(r3, 0x8008976)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r3, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="ac020000", @ANYRES16=r5, @ANYBLOB="bf4400000000000000000c0000008000058014000280080001000000000008000100090000002c0002800800020001000000080004005fbe0000080001001b00000008000200000000000800020009000000070001006962000034000280080003006400000008000400090000000800030051bd000008000300fc"], 0x2ac}}, 0x0)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r6, 0x5}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20)
sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3)
sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x80)

300.665683ms ago: executing program 0 (id=1318):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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")
creat(0x0, 0x268)
socket$inet6(0xa, 0x80002, 0x0)
r1 = socket$inet(0x2, 0xa, 0x86)
bind$inet(r1, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48)
write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000000), 0xfea7)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000005}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x82, '\x00', 0x0, @fallback=0x1e, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

273.258754ms ago: executing program 5 (id=1319):
syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x29, 0xd0, 0x6, 0x2, 0x21, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, 0x10, 0x700, 0xd, 0x1ff}})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={0x1, 0x58, &(0x7f0000000380)}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f00000008c0)={'gre0\x00', 0x0, 0x20, 0x20, 0x25, 0x8, {{0x1e, 0x4, 0x3, 0x2a, 0x78, 0x64, 0x0, 0x4, 0x2f, 0x0, @multicast2, @empty, {[@ssrr={0x89, 0x1f, 0xef, [@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @remote, @broadcast, @broadcast, @local, @rand_addr=0x64010101]}, @timestamp={0x44, 0x1c, 0xa9, 0x0, 0xe, [0xfffffffd, 0x3, 0x7ff, 0xfff, 0x6, 0x9]}, @rr={0x7, 0x27, 0x6, [@local, @dev={0xac, 0x14, 0x14, 0x1d}, @loopback, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}]}}}}})
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000540)={0x0, @rand_addr, @dev}, &(0x7f0000000580)=0xc)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'rose0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r1], 0x20}}, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x5}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x3}]}}]}, 0x40}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'batadv_slave_0\x00'})
r5 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'lo\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbff, {0xa, 0x17, 0x0, 0xff, r6}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_FLAGS={0x8, 0x8, 0x288}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0)

0s ago: executing program 5 (id=1320):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000440)={0x2000000})
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r3 = syz_open_dev$sg(0x0, 0x0, 0x800)
ioctl$SG_GET_VERSION_NUM(r3, 0x2284, &(0x7f0000000080))
getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, 0x0, &(0x7f0000000000))
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x1, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x22421, 0x20}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000004}, 0x80) (fail_nth: 2)

kernel console output (not intermixed with test programs):

idge0: left allmulticast mode
[  109.039821][ T6923] loop2: detected capacity change from 0 to 2048
[  109.054838][ T6923] EXT4-fs: Ignoring removed i_version option
[  109.072477][ T6923] EXT4-fs: Ignoring removed mblk_io_submit option
[  109.108832][ T6940] program syz.3.751 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  109.148052][ T6940] loop3: detected capacity change from 0 to 512
[  109.223850][ T6923] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  109.311894][ T6923] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.745: bg 0: block 234: padding at end of block bitmap is not set
[  109.361030][ T6923] EXT4-fs (loop2): Remounting filesystem read-only
[  109.369593][ T6923] EXT4-fs (loop2): error restoring inline_data for inode -- potential data loss! (inode 15, error -30)
[  109.389186][ T6949] loop3: detected capacity change from 0 to 8192
[  109.452326][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.495402][ T6963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  109.504101][ T6963] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  109.782982][ T6980] netlink: 44 bytes leftover after parsing attributes in process `syz.2.757'.
[  109.792598][ T6980] netlink: 43 bytes leftover after parsing attributes in process `syz.2.757'.
[  109.804473][ T6980] netlink: 'syz.2.757': attribute type 5 has an invalid length.
[  109.820900][ T6980] netlink: 43 bytes leftover after parsing attributes in process `syz.2.757'.
[  109.938808][   T28] audit: type=1400 audit(2000000035.820:985): avc:  denied  { listen } for  pid=6985 comm="syz.1.759" lport=49245 faddr=::ffff:100.1.1.1 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  110.038899][ T7006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  110.047611][ T7006] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  110.631778][ T7003] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  110.640708][ T7003] System zones: 0-1, 3-36
[  110.656585][ T7003] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.761: bad orphan inode 134217728
[  110.669790][ T7003] loop1: lost filesystem error report for type 5 error -117
[  110.679990][ T7003] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  110.806929][ T7079] netlink: 48 bytes leftover after parsing attributes in process `syz.1.761'.
[  110.911064][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.966194][ T7094] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  110.977867][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.001961][ T7094] EXT4-fs (loop0): 1 truncate cleaned up
[  111.009210][ T7094] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  111.067076][ T7106] FAULT_INJECTION: forcing a failure.
[  111.067076][ T7106] name failslab, interval 1, probability 0, space 0, times 0
[  111.092971][ T7106] CPU: 1 UID: 0 PID: 7106 Comm: syz.1.764 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  111.093064][ T7106] Tainted: [W]=WARN
[  111.093074][ T7106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  111.093091][ T7106] Call Trace:
[  111.093100][ T7106]  <TASK>
[  111.093109][ T7106]  __dump_stack+0x1d/0x30
[  111.093141][ T7106]  dump_stack_lvl+0x95/0xd0
[  111.093175][ T7106]  dump_stack+0x15/0x1b
[  111.093204][ T7106]  should_fail_ex+0x263/0x280
[  111.093242][ T7106]  should_failslab+0x8c/0xb0
[  111.093327][ T7106]  kmem_cache_alloc_noprof+0x66/0x400
[  111.093364][ T7106]  ? security_file_alloc+0x32/0xf0
[  111.093500][ T7106]  security_file_alloc+0x32/0xf0
[  111.093550][ T7106]  init_file+0x5b/0x1b0
[  111.093655][ T7106]  alloc_empty_file+0x8b/0x200
[  111.093688][ T7106]  path_openat+0x65/0x2050
[  111.093794][ T7106]  ? _parse_integer_limit+0x170/0x190
[  111.093874][ T7106]  ? _parse_integer+0x27/0x40
[  111.093973][ T7106]  ? kstrtoull+0x111/0x140
[  111.093999][ T7106]  ? kstrtouint+0x76/0xc0
[  111.094034][ T7106]  do_file_open+0x16c/0x290
[  111.094136][ T7106]  do_sys_openat2+0x94/0x130
[  111.094244][ T7106]  __x64_sys_openat+0xf2/0x120
[  111.094275][ T7106]  x64_sys_call+0x1e39/0x3020
[  111.094306][ T7106]  do_syscall_64+0x12c/0x370
[  111.094343][ T7106]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.094434][ T7106] RIP: 0033:0x7fa5eda3bf79
[  111.094454][ T7106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  111.094542][ T7106] RSP: 002b:00007fa5ec476028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  111.094569][ T7106] RAX: ffffffffffffffda RBX: 00007fa5edcb6090 RCX: 00007fa5eda3bf79
[  111.094584][ T7106] RDX: 0000000000020c01 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  111.094597][ T7106] RBP: 00007fa5ec476090 R08: 0000000000000000 R09: 0000000000000000
[  111.094683][ T7106] R10: 000000000000010c R11: 0000000000000246 R12: 0000000000000001
[  111.094701][ T7106] R13: 00007fa5edcb6128 R14: 00007fa5edcb6090 R15: 00007ffd6d9632f8
[  111.094777][ T7106]  </TASK>
[  111.333963][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.413169][ T7118] netlink: 'syz.0.767': attribute type 16 has an invalid length.
[  111.423218][ T7118] netlink: 'syz.0.767': attribute type 17 has an invalid length.
[  111.460451][ T7118] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  111.532386][   T28] audit: type=1326 audit(2000000037.420:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7126 comm="syz.0.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a0c47bf79 code=0x7ffc0000
[  111.559866][   T28] audit: type=1326 audit(2000000037.420:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7126 comm="syz.0.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a0c47bf79 code=0x7ffc0000
[  111.584266][   T28] audit: type=1326 audit(2000000037.420:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7126 comm="syz.0.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a0c47bf79 code=0x7ffc0000
[  111.607605][   T28] audit: type=1326 audit(2000000037.420:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7126 comm="syz.0.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a0c47bf79 code=0x7ffc0000
[  111.632678][   T28] audit: type=1326 audit(2000000037.440:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7126 comm="syz.0.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8a0c47bf79 code=0x7ffc0000
[  111.657079][   T28] audit: type=1326 audit(2000000037.440:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7126 comm="syz.0.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a0c47bf79 code=0x7ffc0000
[  111.681442][   T28] audit: type=1326 audit(2000000037.440:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7126 comm="syz.0.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a0c47bf79 code=0x7ffc0000
[  111.706119][   T28] audit: type=1326 audit(2000000037.440:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7126 comm="syz.0.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a0c47bf79 code=0x7ffc0000
[  111.974024][ T7141] set_capacity_and_notify: 4 callbacks suppressed
[  111.974157][ T7141] loop0: detected capacity change from 0 to 8192
[  112.353788][ T7143] loop1: detected capacity change from 0 to 1024
[  112.394796][ T7143] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  112.404616][ T7143] System zones: 0-1, 3-36
[  112.418025][ T7143] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.773: bad orphan inode 134217728
[  112.431047][ T7143] loop1: lost filesystem error report for type 5 error -117
[  112.440627][ T7143] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  112.559722][ T7148] netlink: 48 bytes leftover after parsing attributes in process `syz.1.773'.
[  112.585861][ T7147] program syz.4.774 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  112.812807][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.955397][ T7159] FAULT_INJECTION: forcing a failure.
[  112.955397][ T7159] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  112.969178][ T7159] CPU: 1 UID: 0 PID: 7159 Comm: syz.1.779 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  112.969281][ T7159] Tainted: [W]=WARN
[  112.969290][ T7159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  112.969308][ T7159] Call Trace:
[  112.969316][ T7159]  <TASK>
[  112.969326][ T7159]  __dump_stack+0x1d/0x30
[  112.969426][ T7159]  dump_stack_lvl+0x95/0xd0
[  112.969467][ T7159]  dump_stack+0x15/0x1b
[  112.969491][ T7159]  should_fail_ex+0x263/0x280
[  112.969571][ T7159]  should_fail+0xb/0x20
[  112.969652][ T7159]  should_fail_usercopy+0x1a/0x20
[  112.969690][ T7159]  _copy_from_iter+0xcf/0xea0
[  112.969745][ T7159]  ? __alloc_skb+0x4f6/0x690
[  112.969839][ T7159]  ? __alloc_skb+0x200/0x690
[  112.969925][ T7159]  netlink_sendmsg+0x4ae/0x6f0
[  112.969959][ T7159]  ? __pfx_netlink_sendmsg+0x10/0x10
[  112.969989][ T7159]  ____sys_sendmsg+0x5af/0x600
[  112.970100][ T7159]  ___sys_sendmsg+0x195/0x1e0
[  112.970150][ T7159]  __x64_sys_sendmsg+0xd4/0x160
[  112.970185][ T7159]  x64_sys_call+0x194c/0x3020
[  112.970289][ T7159]  do_syscall_64+0x12c/0x370
[  112.970327][ T7159]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  112.970357][ T7159] RIP: 0033:0x7fa5eda3bf79
[  112.970378][ T7159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  112.970447][ T7159] RSP: 002b:00007fa5ec497028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  112.970474][ T7159] RAX: ffffffffffffffda RBX: 00007fa5edcb5fa0 RCX: 00007fa5eda3bf79
[  112.970494][ T7159] RDX: 0000000000000004 RSI: 0000200000000140 RDI: 0000000000000003
[  112.970509][ T7159] RBP: 00007fa5ec497090 R08: 0000000000000000 R09: 0000000000000000
[  112.970525][ T7159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  112.970543][ T7159] R13: 00007fa5edcb6038 R14: 00007fa5edcb5fa0 R15: 00007ffd6d9632f8
[  112.970636][ T7159]  </TASK>
[  113.161564][ T7159] loop1: detected capacity change from 0 to 512
[  113.197179][ T7166] netlink: 112 bytes leftover after parsing attributes in process `syz.1.781'.
[  113.279857][   T28] kauditd_printk_skb: 131 callbacks suppressed
[  113.279941][   T28] audit: type=1400 audit(2000000039.110:1125): avc:  denied  { lock } for  pid=7168 comm="syz.1.782" path="socket:[13414]" dev="sockfs" ino=13414 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  113.387576][ T7150] loop4: detected capacity change from 0 to 1024
[  113.417342][ T7182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  113.426135][ T7182] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  113.493125][ T7150] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  113.509769][ T7150] System zones: 0-1, 3-36
[  113.523581][ T7150] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.775: bad orphan inode 134217728
[  113.541823][ T7150] loop4: lost filesystem error report for type 5 error -117
[  113.557016][ T7150] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  113.710023][ T7202] netlink: 48 bytes leftover after parsing attributes in process `syz.4.775'.
[  113.750934][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.026316][ T7208] loop0: detected capacity change from 0 to 512
[  114.090742][ T7208] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  114.139716][ T7208] EXT4-fs (loop0): 1 truncate cleaned up
[  114.194762][ T7208] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  114.729026][ T7289] loop2: detected capacity change from 0 to 512
[  114.755736][ T7289] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  114.782595][ T7289] netlink: 72 bytes leftover after parsing attributes in process `syz.2.799'.
[  114.863422][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.111026][ T7324] netlink: 'syz.4.792': attribute type 16 has an invalid length.
[  115.119020][ T7324] netlink: 'syz.4.792': attribute type 17 has an invalid length.
[  115.150444][ T7324] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  115.341605][   T28] audit: type=1400 audit(2000000041.230:1126): avc:  denied  { create } for  pid=7346 comm="syz.3.797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1
[  115.360887][ T7350] netlink: 68 bytes leftover after parsing attributes in process `syz.2.796'.
[  115.381716][ T7347] sctp: [Deprecated]: syz.3.797 (pid 7347) Use of struct sctp_assoc_value in delayed_ack socket option.
[  115.381716][ T7347] Use struct sctp_sack_info instead
[  115.433696][ T7351] loop2: detected capacity change from 0 to 512
[  115.440307][ T7351] ext3: Unknown parameter 'smackfsdef'
[  115.515999][   T28] audit: type=1400 audit(2000000041.400:1127): avc:  denied  { sqpoll } for  pid=7354 comm="syz.3.800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  115.701210][ T7362] loop4: detected capacity change from 0 to 8192
[  116.457359][ T7375] netlink: 'syz.1.805': attribute type 16 has an invalid length.
[  116.465176][ T7375] netlink: 'syz.1.805': attribute type 17 has an invalid length.
[  116.506812][ T7375] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  116.667099][ T7381] loop1: detected capacity change from 0 to 512
[  116.880269][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.487708][ T7411] loop4: detected capacity change from 0 to 512
[  117.562338][ T7415] FAULT_INJECTION: forcing a failure.
[  117.562338][ T7415] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  117.590974][ T7415] CPU: 0 UID: 0 PID: 7415 Comm: syz.3.816 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  117.591012][ T7415] Tainted: [W]=WARN
[  117.591022][ T7415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  117.591151][ T7415] Call Trace:
[  117.591161][ T7415]  <TASK>
[  117.591171][ T7415]  __dump_stack+0x1d/0x30
[  117.591203][ T7415]  dump_stack_lvl+0x95/0xd0
[  117.591231][ T7415]  dump_stack+0x15/0x1b
[  117.591323][ T7415]  should_fail_ex+0x263/0x280
[  117.591364][ T7415]  should_fail+0xb/0x20
[  117.591431][ T7415]  should_fail_usercopy+0x1a/0x20
[  117.591463][ T7415]  _copy_to_user+0x20/0xa0
[  117.591584][ T7415]  simple_read_from_buffer+0xb5/0x130
[  117.591688][ T7415]  proc_fail_nth_read+0x10e/0x150
[  117.591757][ T7415]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  117.591784][ T7415]  vfs_read+0x1ab/0x7f0
[  117.591816][ T7415]  ? __rcu_read_unlock+0x4e/0x70
[  117.591915][ T7415]  ? __fget_files+0x184/0x1c0
[  117.592007][ T7415]  ? mutex_lock+0x57/0x90
[  117.592026][ T7415]  ksys_read+0xdc/0x1a0
[  117.592114][ T7415]  __x64_sys_read+0x40/0x50
[  117.592145][ T7415]  x64_sys_call+0x2886/0x3020
[  117.592194][ T7415]  do_syscall_64+0x12c/0x370
[  117.592295][ T7415]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  117.592320][ T7415] RIP: 0033:0x7ff7635fc84e
[  117.592339][ T7415] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  117.592367][ T7415] RSP: 002b:00007ff76208efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  117.592392][ T7415] RAX: ffffffffffffffda RBX: 00007ff76208f6c0 RCX: 00007ff7635fc84e
[  117.592471][ T7415] RDX: 000000000000000f RSI: 00007ff76208f0a0 RDI: 0000000000000005
[  117.592488][ T7415] RBP: 00007ff76208f090 R08: 0000000000000000 R09: 0000000000000000
[  117.592504][ T7415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  117.592519][ T7415] R13: 00007ff7638b6038 R14: 00007ff7638b5fa0 R15: 00007fff9cb81218
[  117.592545][ T7415]  </TASK>
[  117.846426][   T28] audit: type=1400 audit(2000000043.730:1128): avc:  denied  { append } for  pid=7423 comm="syz.3.820" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  117.881898][ T7421] netlink: 'syz.2.819': attribute type 16 has an invalid length.
[  117.889920][ T7421] netlink: 'syz.2.819': attribute type 17 has an invalid length.
[  117.912266][ T7425] Cannot find add_set index 1 as target
[  117.941009][   T28] audit: type=1400 audit(2000000043.730:1129): avc:  denied  { ioctl } for  pid=7423 comm="syz.3.820" path="/dev/ptp0" dev="devtmpfs" ino=247 ioctlcmd=0x3d07 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  117.967557][ T7421] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  117.985859][ T7429] netlink: 36 bytes leftover after parsing attributes in process `syz.4.817'.
[  118.086044][ T7437] loop3: detected capacity change from 0 to 512
[  118.271183][ T7437] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  118.311415][ T7437] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002]
[  118.340110][ T7437] EXT4-fs (loop3): orphan cleanup on readonly fs
[  118.346891][ T7437] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.824: bad orphan inode 267
[  118.381257][ T7437] loop3: lost filesystem error report for type 5 error -117
[  118.381432][ T7437] EXT4-fs (loop3): Remounting filesystem read-only
[  118.422190][ T7437] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  118.501574][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  118.553484][ T7440] loop3: detected capacity change from 0 to 256
[  118.575161][ T7440] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  118.875007][   T28] audit: type=1400 audit(2000000044.760:1130): avc:  denied  { mount } for  pid=7445 comm="syz.0.828" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  118.964820][ T7453] loop1: detected capacity change from 0 to 1024
[  118.990495][ T7453] EXT4-fs: Ignoring removed orlov option
[  119.027805][ T7453] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  119.052385][ T7453] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  119.070281][ T7453] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.108635][ T7459] loop2: detected capacity change from 0 to 512
[  119.147337][ T7459] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  119.161384][ T7462] loop1: detected capacity change from 0 to 512
[  119.190979][ T7459] ext4 filesystem being mounted at /166/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  119.214362][ T7459] FAULT_INJECTION: forcing a failure.
[  119.214362][ T7459] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  119.227893][ T7459] CPU: 0 UID: 0 PID: 7459 Comm: syz.2.831 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  119.227929][ T7459] Tainted: [W]=WARN
[  119.227936][ T7459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  119.227949][ T7459] Call Trace:
[  119.227989][ T7459]  <TASK>
[  119.227999][ T7459]  __dump_stack+0x1d/0x30
[  119.228031][ T7459]  dump_stack_lvl+0x95/0xd0
[  119.228055][ T7459]  dump_stack+0x15/0x1b
[  119.228114][ T7459]  should_fail_ex+0x263/0x280
[  119.228152][ T7459]  should_fail+0xb/0x20
[  119.228243][ T7459]  should_fail_usercopy+0x1a/0x20
[  119.228321][ T7459]  strncpy_from_user+0x27/0x250
[  119.228344][ T7459]  ? kmem_cache_alloc_noprof+0x18c/0x400
[  119.228381][ T7459]  do_getname+0x59/0x1c0
[  119.228447][ T7459]  getname_uflags+0x23/0x30
[  119.228489][ T7459]  do_utimes+0xbb/0x210
[  119.228515][ T7459]  __x64_sys_utimes+0xc6/0x1c0
[  119.228541][ T7459]  x64_sys_call+0x2a96/0x3020
[  119.228608][ T7459]  do_syscall_64+0x12c/0x370
[  119.228647][ T7459]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.228696][ T7459] RIP: 0033:0x7f51ac3fbf79
[  119.228713][ T7459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  119.228732][ T7459] RSP: 002b:00007f51aae57028 EFLAGS: 00000246 ORIG_RAX: 00000000000000eb
[  119.228752][ T7459] RAX: ffffffffffffffda RBX: 00007f51ac675fa0 RCX: 00007f51ac3fbf79
[  119.228866][ T7459] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000640
[  119.228884][ T7459] RBP: 00007f51aae57090 R08: 0000000000000000 R09: 0000000000000000
[  119.228901][ T7459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  119.228918][ T7459] R13: 00007f51ac676038 R14: 00007f51ac675fa0 R15: 00007fff7cab41f8
[  119.228945][ T7459]  </TASK>
[  119.251468][ T7459] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #12: comm syz.2.831: corrupted xattr block 6: invalid header
[  119.570003][ T7459] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop2 ino=12
[  119.579304][ T7459] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #12: comm syz.2.831: corrupted xattr block 6: invalid header
[  119.593044][ T7459] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop2 ino=12
[  119.602407][ T7459] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #12: comm syz.2.831: corrupted xattr block 6: invalid header
[  119.750479][ T7459] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop2 ino=12
[  119.768538][ T7459] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #12: comm syz.2.831: corrupted xattr block 6: invalid header
[  119.840759][ T7459] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop2 ino=12
[  119.967066][ T7475] loop4: detected capacity change from 0 to 512
[  119.980423][ T7459] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #12: comm syz.2.831: corrupted xattr block 6: invalid header
[  120.002958][   T28] audit: type=1400 audit(2000000045.860:1131): avc:  denied  { add_name } for  pid=7458 comm="syz.2.831" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  120.075968][ T7475] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  120.110631][ T7477] FAULT_INJECTION: forcing a failure.
[  120.110631][ T7477] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  120.144626][ T7459] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop2 ino=12
[  120.169591][ T7477] CPU: 0 UID: 0 PID: 7477 Comm: syz.3.836 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  120.169661][ T7477] Tainted: [W]=WARN
[  120.169670][ T7477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  120.169693][ T7477] Call Trace:
[  120.169701][ T7477]  <TASK>
[  120.169710][ T7477]  __dump_stack+0x1d/0x30
[  120.169748][ T7477]  dump_stack_lvl+0x95/0xd0
[  120.169774][ T7477]  dump_stack+0x15/0x1b
[  120.169798][ T7477]  should_fail_ex+0x263/0x280
[  120.169904][ T7477]  should_fail+0xb/0x20
[  120.169988][ T7477]  should_fail_usercopy+0x1a/0x20
[  120.170022][ T7477]  _copy_from_user+0x1c/0xb0
[  120.170119][ T7477]  ___sys_sendmsg+0xc1/0x1e0
[  120.170208][ T7477]  __x64_sys_sendmsg+0xd4/0x160
[  120.170239][ T7477]  x64_sys_call+0x194c/0x3020
[  120.170267][ T7477]  do_syscall_64+0x12c/0x370
[  120.170298][ T7477]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  120.170378][ T7477] RIP: 0033:0x7ff76363bf79
[  120.170417][ T7477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  120.170440][ T7477] RSP: 002b:00007ff76208f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  120.170467][ T7477] RAX: ffffffffffffffda RBX: 00007ff7638b5fa0 RCX: 00007ff76363bf79
[  120.170562][ T7477] RDX: 0000000020004080 RSI: 00002000000003c0 RDI: 0000000000000005
[  120.170577][ T7477] RBP: 00007ff76208f090 R08: 0000000000000000 R09: 0000000000000000
[  120.170593][ T7477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  120.170607][ T7477] R13: 00007ff7638b6038 R14: 00007ff7638b5fa0 R15: 00007fff9cb81218
[  120.170634][ T7477]  </TASK>
[  120.351968][ T7475] EXT4-fs (loop4): 1 truncate cleaned up
[  120.358117][ T7475] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  120.374261][ T7475] netlink: 'syz.4.835': attribute type 1 has an invalid length.
[  120.382436][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  120.391700][ T7475] netlink: 5 bytes leftover after parsing attributes in process `syz.4.835'.
[  120.513725][ T7487] loop2: detected capacity change from 0 to 1024
[  120.520414][ T7487] EXT4-fs: Ignoring removed orlov option
[  120.539948][ T7487] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  120.564048][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  120.575792][ T7487] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  120.655348][   T28] audit: type=1400 audit(2000000046.540:1132): avc:  denied  { lock } for  pid=7493 comm="syz.4.842" path="socket:[13872]" dev="sockfs" ino=13872 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  120.763231][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  120.992119][ T7503] program syz.2.845 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  121.178840][ T7505] loop4: detected capacity change from 0 to 128
[  121.230270][   T28] audit: type=1326 audit(2000000047.110:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7504 comm="syz.4.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a26fbf79 code=0x7ffc0000
[  121.316991][ T7510] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  121.338202][ T7510] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.357374][   T28] audit: type=1326 audit(2000000047.110:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7504 comm="syz.4.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a26fbf79 code=0x7ffc0000
[  121.605273][ T7518] loop3: detected capacity change from 0 to 512
[  121.624637][ T7510] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  121.646207][ T7510] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.746559][ T7510] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  121.760370][ T7510] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.862884][ T7522] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  121.875662][ T7522] ext4 filesystem being mounted at /162/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  121.891481][ T7510] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  121.901929][ T7510] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.914445][   T28] audit: type=1326 audit(2000000047.110:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7504 comm="syz.4.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a26fbf79 code=0x7ffc0000
[  121.938222][   T28] audit: type=1326 audit(2000000047.110:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7504 comm="syz.4.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a26fbf79 code=0x7ffc0000
[  121.962981][   T28] audit: type=1326 audit(2000000047.110:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7504 comm="syz.4.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f25a26fbf79 code=0x7ffc0000
[  121.987621][   T28] audit: type=1326 audit(2000000047.120:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7504 comm="syz.4.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a26fbf79 code=0x7ffc0000
[  122.012092][   T28] audit: type=1326 audit(2000000047.120:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7504 comm="syz.4.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a26fbf79 code=0x7ffc0000
[  122.070608][   T50] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  122.080724][ T7522] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #12: comm syz.3.851: corrupted xattr block 6: invalid header
[  122.083059][   T50] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  122.136510][ T7522] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=12
[  122.158516][ T7522] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #12: comm syz.3.851: corrupted xattr block 6: invalid header
[  122.173070][ T7527] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #12: comm syz.3.851: corrupted xattr block 6: invalid header
[  122.173037][ T7522] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=12
[  122.195348][ T3424] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  122.203862][ T3424] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  122.215430][ T3424] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  122.224312][ T3424] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  122.232902][ T7527] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=12
[  122.242214][ T7527] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #12: comm syz.3.851: corrupted xattr block 6: invalid header
[  122.255337][ T3424] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  122.265650][ T3424] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  122.274221][ T7527] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=12
[  122.283459][ T7527] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #12: comm syz.3.851: corrupted xattr block 6: invalid header
[  122.296855][ T7527] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=12
[  122.308518][ T7527] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #12: comm syz.3.851: corrupted xattr block 6: invalid header
[  122.323088][ T7527] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=12
[  122.441842][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  122.538940][ T7544] netlink: 112 bytes leftover after parsing attributes in process `syz.3.857'.
[  122.692728][ T7546] netlink: 'syz.1.858': attribute type 16 has an invalid length.
[  122.700725][ T7546] netlink: 'syz.1.858': attribute type 17 has an invalid length.
[  122.838213][ T7546] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  123.419873][ T7564] netlink: 4 bytes leftover after parsing attributes in process `syz.2.864'.
[  123.486729][ T7564] hsr_slave_0: left promiscuous mode
[  123.520166][ T7564] hsr_slave_1: left promiscuous mode
[  123.855081][ T7574] netlink: 'syz.3.866': attribute type 16 has an invalid length.
[  123.863197][ T7574] netlink: 'syz.3.866': attribute type 17 has an invalid length.
[  123.959456][ T7574] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  124.064519][ T7577] netlink: 'syz.3.868': attribute type 21 has an invalid length.
[  124.108283][ T7577] netlink: 'syz.3.868': attribute type 1 has an invalid length.
[  124.141132][ T7577] netlink: 144 bytes leftover after parsing attributes in process `syz.3.868'.
[  124.298835][ T7560] set_capacity_and_notify: 1 callbacks suppressed
[  124.298860][ T7560] loop1: detected capacity change from 0 to 1024
[  124.412205][ T7560] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  124.497195][ T7560] System zones: 0-1, 3-36
[  124.539818][ T7582] netlink: 112 bytes leftover after parsing attributes in process `syz.3.870'.
[  124.567076][ T7560] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.862: bad orphan inode 134217728
[  124.582330][ T7560] loop1: lost filesystem error report for type 5 error -117
[  124.609369][ T7560] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  124.808888][   T28] kauditd_printk_skb: 66 callbacks suppressed
[  124.808955][   T28] audit: type=1400 audit(2000000050.690:1206): avc:  denied  { ioctl } for  pid=7585 comm="syz.0.872" path="socket:[14719]" dev="sockfs" ino=14719 ioctlcmd=0x8934 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  124.888665][ T7598] netlink: 12 bytes leftover after parsing attributes in process `syz.3.877'.
[  124.911683][ T7598] netlink: 28 bytes leftover after parsing attributes in process `syz.3.877'.
[  124.963333][ T7601] netlink: 48 bytes leftover after parsing attributes in process `syz.1.862'.
[  124.979870][ T7604] 8021q: adding VLAN 0 to HW filter on device bond3
[  125.030681][   T28] audit: type=1400 audit(2000000050.880:1207): avc:  denied  { create } for  pid=7603 comm="syz.3.878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1
[  125.106740][ T7609] loop3: detected capacity change from 0 to 1024
[  125.127332][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  125.175041][ T7609] netlink: 12 bytes leftover after parsing attributes in process `syz.3.880'.
[  125.366566][ T7619] program syz.3.883 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  125.489691][ T7621] netlink: 40 bytes leftover after parsing attributes in process `syz.4.884'.
[  125.607004][ T7629] loop4: detected capacity change from 0 to 512
[  125.664762][   T28] audit: type=1400 audit(2000000051.550:1208): avc:  denied  { write } for  pid=7622 comm="syz.2.885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  125.711124][ T7629] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  125.749367][ T7641] loop0: detected capacity change from 0 to 128
[  125.921548][ T7629] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  125.980776][ T7629] ext4 filesystem being mounted at /168/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  126.099271][ T7652] netlink: 'syz.1.893': attribute type 16 has an invalid length.
[  126.132093][ T7652] netlink: 'syz.1.893': attribute type 17 has an invalid length.
[  126.144161][ T7655] hub 8-0:1.0: USB hub found
[  126.148928][ T7655] hub 8-0:1.0: 8 ports detected
[  126.170247][ T7624] loop3: detected capacity change from 0 to 1024
[  126.216059][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  126.226583][ T7652] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  126.271618][ T7624] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  126.283317][ T7624] System zones: 0-1, 3-36
[  126.340714][ T7624] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.886: bad orphan inode 134217728
[  126.358616][ T7624] loop3: lost filesystem error report for type 5 error -117
[  126.367983][ T7624] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  126.393393][ T7658] audit: audit_backlog=65 > audit_backlog_limit=64
[  126.400158][ T7658] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64
[  126.408270][ T7658] audit: backlog limit exceeded
[  126.413491][ T7658] audit: audit_backlog=65 > audit_backlog_limit=64
[  126.430014][ T7658] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64
[  126.462573][ T7658] audit: backlog limit exceeded
[  126.537946][ T7660] netlink: 48 bytes leftover after parsing attributes in process `syz.3.886'.
[  126.556635][   T28] audit: type=1326 audit(2000000051.680:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7640 comm="syz.0.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a0c47bf79 code=0x7ffc0000
[  126.727242][ T7666] loop1: detected capacity change from 0 to 4096
[  126.751444][ T7672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.898'.
[  126.778103][ T7672] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.787858][ T7666] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  126.801394][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  126.839420][ T7672] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.874336][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  126.886713][ T7672] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.935041][ T7672] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.969640][ T7683] pim6reg9: entered allmulticast mode
[  126.999585][   T69] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  127.025441][   T69] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  127.034736][   T69] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  127.048912][ T1635] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  127.072238][ T7687] loop1: detected capacity change from 0 to 512
[  127.093162][ T7687] loop1: detected capacity change from 0 to 512
[  127.101846][ T7687] EXT4-fs (loop1): Unsupported encryption level 252
[  127.125550][ T7691] netlink: zone id is out of range
[  127.130741][ T7691] netlink: zone id is out of range
[  127.136027][ T7691] netlink: del zone limit has 8 unknown bytes
[  127.180477][ T7693] loop0: detected capacity change from 0 to 2048
[  127.206058][ T7693] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  127.219851][ T7693] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.554487][ T7706] loop2: detected capacity change from 0 to 128
[  127.575016][ T7700] netlink: 'syz.4.906': attribute type 16 has an invalid length.
[  127.582931][ T7700] netlink: 'syz.4.906': attribute type 17 has an invalid length.
[  127.612959][ T7700] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  127.731724][ T7717] Symlink component flag not implemented
[  127.744843][ T7717] Symlink component flag not implemented (116)
[  127.884318][ T7727] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  127.968266][ T7733] ipip0: entered promiscuous mode
[  127.984459][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.071725][ T7739] EXT4-fs: Ignoring removed oldalloc option
[  128.095937][ T7739] EXT4-fs (loop3): 1 truncate cleaned up
[  128.142149][ T7739] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  128.187273][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.573966][ T7716] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  128.584225][ T7716] System zones: 0-1, 3-36
[  128.617572][ T7716] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.911: bad orphan inode 134217728
[  128.629734][ T7716] loop4: lost filesystem error report for type 5 error -117
[  128.667085][ T7716] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  128.752764][ T7760] vfat: Unknown parameter '00000000000000000003'
[  128.764941][ T7761] __nla_validate_parse: 3 callbacks suppressed
[  128.764956][ T7761] netlink: 48 bytes leftover after parsing attributes in process `syz.4.911'.
[  128.800534][ T7763] netlink: 'syz.2.922': attribute type 16 has an invalid length.
[  128.817361][ T7763] netlink: 'syz.2.922': attribute type 17 has an invalid length.
[  128.830001][ T7766] FAULT_INJECTION: forcing a failure.
[  128.830001][ T7766] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  128.870766][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.880050][ T7766] CPU: 0 UID: 0 PID: 7766 Comm: syz.3.924 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  128.880153][ T7766] Tainted: [W]=WARN
[  128.880210][ T7766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  128.880224][ T7766] Call Trace:
[  128.880232][ T7766]  <TASK>
[  128.880238][ T7766]  __dump_stack+0x1d/0x30
[  128.880263][ T7766]  dump_stack_lvl+0x95/0xd0
[  128.880288][ T7766]  dump_stack+0x15/0x1b
[  128.880330][ T7766]  should_fail_ex+0x263/0x280
[  128.880444][ T7766]  should_fail+0xb/0x20
[  128.880486][ T7766]  should_fail_usercopy+0x1a/0x20
[  128.880526][ T7766]  _copy_from_user+0x1c/0xb0
[  128.880641][ T7766]  vt_ioctl+0x98e/0x18d0
[  128.880670][ T7766]  tty_ioctl+0x7d7/0xb80
[  128.880763][ T7766]  ? __pfx_tty_ioctl+0x10/0x10
[  128.880798][ T7766]  __se_sys_ioctl+0xce/0x140
[  128.880830][ T7766]  __x64_sys_ioctl+0x43/0x50
[  128.880860][ T7766]  x64_sys_call+0x1563/0x3020
[  128.880917][ T7766]  do_syscall_64+0x12c/0x370
[  128.880997][ T7766]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.881018][ T7766] RIP: 0033:0x7ff76363bf79
[  128.881035][ T7766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  128.881057][ T7766] RSP: 002b:00007ff76208f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  128.881083][ T7766] RAX: ffffffffffffffda RBX: 00007ff7638b5fa0 RCX: 00007ff76363bf79
[  128.881117][ T7766] RDX: 0000200000000340 RSI: 0000000000004b72 RDI: 0000000000000005
[  128.881134][ T7766] RBP: 00007ff76208f090 R08: 0000000000000000 R09: 0000000000000000
[  128.881152][ T7766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  128.881217][ T7766] R13: 00007ff7638b6038 R14: 00007ff7638b5fa0 R15: 00007fff9cb81218
[  128.881321][ T7766]  </TASK>
[  128.936387][ T7768] netlink: 112 bytes leftover after parsing attributes in process `syz.1.925'.
[  129.078736][ T7763] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  129.263649][ T7785] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  129.274804][ T7785] FAT-fs (loop2): Filesystem has been set read-only
[  129.286791][ T7785] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  129.314246][ T7785] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  129.340209][ T7791] set_capacity_and_notify: 7 callbacks suppressed
[  129.340226][ T7791] loop0: detected capacity change from 0 to 128
[  130.020929][   T28] kauditd_printk_skb: 211 callbacks suppressed
[  130.020943][   T28] audit: type=1326 audit(2000000055.900:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7790 comm="syz.0.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f8a0c47bf79 code=0x7ffc0000
[  130.274907][ T7812] netlink: 112 bytes leftover after parsing attributes in process `syz.1.939'.
[  130.308660][ T7816] netlink: 'syz.2.940': attribute type 16 has an invalid length.
[  130.325120][ T7816] netlink: 'syz.2.940': attribute type 17 has an invalid length.
[  130.366653][ T7816] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  130.492089][ T7826] loop4: detected capacity change from 0 to 512
[  130.502898][ T7827] netlink: 'syz.4.946': attribute type 1 has an invalid length.
[  130.623744][ T7835] loop4: detected capacity change from 0 to 128
[  130.676277][   T28] audit: type=1326 audit(2000000056.560:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7834 comm="syz.4.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a26fbf79 code=0x7ffc0000
[  130.706481][   T28] audit: type=1326 audit(2000000056.560:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7834 comm="syz.4.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a26fbf79 code=0x7ffc0000
[  130.730527][   T28] audit: type=1326 audit(2000000056.560:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7834 comm="syz.4.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a26fbf79 code=0x7ffc0000
[  130.758706][   T28] audit: type=1326 audit(2000000056.560:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7834 comm="syz.4.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a26fbf79 code=0x7ffc0000
[  130.794073][   T28] audit: type=1326 audit(2000000056.560:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7834 comm="syz.4.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f25a26fbf79 code=0x7ffc0000
[  130.818290][   T28] audit: type=1326 audit(2000000056.560:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7834 comm="syz.4.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a26fbf79 code=0x7ffc0000
[  130.839426][ T7803] loop0: detected capacity change from 0 to 1024
[  130.841779][   T28] audit: type=1326 audit(2000000056.560:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7834 comm="syz.4.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a26fbf79 code=0x7ffc0000
[  130.841816][   T28] audit: type=1326 audit(2000000056.560:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7834 comm="syz.4.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a26fbf79 code=0x7ffc0000
[  130.841919][   T28] audit: type=1326 audit(2000000056.560:1430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7834 comm="syz.4.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a26fbf79 code=0x7ffc0000
[  130.950366][ T7803] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  130.959538][ T7803] System zones: 0-1, 3-36
[  130.983431][ T7846] loop4: detected capacity change from 0 to 128
[  131.012593][ T7803] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.936: bad orphan inode 134217728
[  131.034563][ T7803] loop0: lost filesystem error report for type 5 error -117
[  131.042963][ T7803] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  131.162386][ T7848] netlink: 48 bytes leftover after parsing attributes in process `syz.0.936'.
[  131.287319][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.358606][ T3424] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.383187][ T7855] netlink: 204 bytes leftover after parsing attributes in process `syz.0.951'.
[  131.414387][ T3424] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.501937][ T3424] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.576376][ T3424] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.610548][ T7862] netlink: 'syz.0.956': attribute type 16 has an invalid length.
[  131.619099][ T7862] netlink: 'syz.0.956': attribute type 17 has an invalid length.
[  131.643325][ T7862] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  131.670009][ T7873] ipt_ECN: cannot use operation on non-tcp rule
[  132.262884][ T7894] netlink: 8 bytes leftover after parsing attributes in process `syz.1.963'.
[  132.291335][ T3424] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  132.383278][ T3424] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  132.395873][ T3424] bond0 (unregistering): Released all slaves
[  132.419368][ T3424] bond1 (unregistering): Released all slaves
[  132.463999][ T3424] bond2 (unregistering): Released all slaves
[  132.599287][ T3424] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  132.618338][ T3424] batman_adv: batadv0: Removing interface: batadv_slave_0
[  132.635971][ T7901] loop2: detected capacity change from 0 to 8192
[  132.644970][ T3424] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  132.664159][ T3424] batman_adv: batadv0: Removing interface: batadv_slave_1
[  132.681012][ T7909] loop1: detected capacity change from 0 to 512
[  132.723762][ T7901]  loop2: p1 p2 p4 < >
[  132.730303][ T3424] veth1_macvtap: left promiscuous mode
[  132.737164][ T7901] loop2: partition table partially beyond EOD, truncated
[  132.760882][ T3424] veth0_macvtap: left promiscuous mode
[  132.774773][ T3424] veth1_vlan: left promiscuous mode
[  132.780172][ T3424] veth0_vlan: left promiscuous mode
[  132.782433][ T7901] loop2: p1 start 16777216 is beyond EOD, truncated
[  132.797227][ T7901] loop2: p2 size 515840 extends beyond EOD, truncated
[  132.811269][ T7901] loop2: p4 start 16777216 is beyond EOD, truncated
[  132.906196][ T3424] team0 (unregistering): Port device team_slave_1 removed
[  132.917649][ T3424] team0 (unregistering): Port device team_slave_0 removed
[  132.944770][ T2991]  loop2: p1 p2 p4 < >
[  132.948929][ T2991] loop2: partition table partially beyond EOD, truncated
[  132.961806][ T2991] loop2: p1 start 16777216 is beyond EOD, truncated
[  132.975169][ T2991] loop2: p2 size 515840 extends beyond EOD, truncated
[  132.991687][ T2991] loop2: p4 start 16777216 is beyond EOD, truncated
[  133.025668][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[  133.062016][ T7921] netlink: 76 bytes leftover after parsing attributes in process `syz.3.969'.
[  133.115080][ T7918] netlink: 'syz.2.968': attribute type 16 has an invalid length.
[  133.122967][ T7918] netlink: 'syz.2.968': attribute type 17 has an invalid length.
[  133.154678][ T7925] loop3: detected capacity change from 0 to 4096
[  133.169975][ T7918] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  133.177062][ T7925] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  133.196519][ T7859] chnl_net:caif_netlink_parms(): no params data found
[  133.293197][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.317121][ T7859] bridge0: port 1(bridge_slave_0) entered blocking state
[  133.324580][ T7859] bridge0: port 1(bridge_slave_0) entered disabled state
[  133.331813][ T7859] bridge_slave_0: entered allmulticast mode
[  133.348626][ T7859] bridge_slave_0: entered promiscuous mode
[  133.355628][ T7859] bridge0: port 2(bridge_slave_1) entered blocking state
[  133.363084][ T7859] bridge0: port 2(bridge_slave_1) entered disabled state
[  133.370255][ T7859] bridge_slave_1: entered allmulticast mode
[  133.381735][ T7859] bridge_slave_1: entered promiscuous mode
[  133.412407][ T7859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  133.421910][ T7947] loop3: detected capacity change from 0 to 128
[  133.444666][ T7859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  133.487048][ T7859] team0: Port device team_slave_0 added
[  133.501380][ T7859] team0: Port device team_slave_1 added
[  133.507768][ T7954] loop2: detected capacity change from 0 to 256
[  133.530059][ T7859] batman_adv: batadv0: Adding interface: batadv_slave_0
[  133.550309][ T7859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  133.621524][ T7859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  133.643170][ T7859] batman_adv: batadv0: Adding interface: batadv_slave_1
[  133.650335][ T7859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  133.699617][ T7859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  133.737023][ T7973] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  133.848534][ T7957] ipvlan2: entered allmulticast mode
[  133.858261][ T7957] dummy0: entered allmulticast mode
[  133.977208][ T7981] netlink: 4 bytes leftover after parsing attributes in process `syz.1.986'.
[  133.986418][ T7981] team0: left allmulticast mode
[  133.991631][ T7981] team_slave_0: left allmulticast mode
[  133.997178][ T7981] team_slave_1: left allmulticast mode
[  134.003417][ T7981] team0: left promiscuous mode
[  134.010302][ T7981] team_slave_0: left promiscuous mode
[  134.017114][ T7981] team_slave_1: left promiscuous mode
[  134.024470][ T7981] bridge0: port 3(team0) entered disabled state
[  134.047327][ T7981] bridge_slave_1: left allmulticast mode
[  134.053058][ T7981] bridge_slave_1: left promiscuous mode
[  134.058763][ T7981] bridge0: port 2(bridge_slave_1) entered disabled state
[  134.066706][ T7981] bridge_slave_0: left allmulticast mode
[  134.073202][ T7981] bridge_slave_0: left promiscuous mode
[  134.078895][ T7981] bridge0: port 1(bridge_slave_0) entered disabled state
[  134.150991][ T7859] hsr_slave_0: entered promiscuous mode
[  134.167326][ T7859] hsr_slave_1: entered promiscuous mode
[  134.185538][ T8005] netlink: 16 bytes leftover after parsing attributes in process `syz.2.990'.
[  134.327602][ T7859] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  134.345332][ T7859] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  134.365308][ T7859] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  134.382399][ T7859] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  134.460509][ T7859] 8021q: adding VLAN 0 to HW filter on device bond0
[  134.548516][ T7859] 8021q: adding VLAN 0 to HW filter on device team0
[  134.889501][ T3655] bridge0: port 1(bridge_slave_0) entered blocking state
[  134.896815][ T3655] bridge0: port 1(bridge_slave_0) entered forwarding state
[  134.916267][ T3655] bridge0: port 2(bridge_slave_1) entered blocking state
[  134.923493][ T3655] bridge0: port 2(bridge_slave_1) entered forwarding state
[  135.082785][    C1] sd 0:0:1:0: [sda] tag#1868 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  135.093220][    C1] sd 0:0:1:0: [sda] tag#1868 CDB: Read(10)
[  135.099061][    C1] sd 0:0:1:0: [sda] tag#1868 CDB[00]: 28 08 f9 9a 33 66 0a 01 f5 68 8f dd cd 98 d3 83
[  135.108669][    C1] sd 0:0:1:0: [sda] tag#1868 CDB[10]: 9b 21 1e 42 6d f2 ce 63 12 ea
[  135.127093][ T7859] 8021q: adding VLAN 0 to HW filter on device batadv0
[  135.229004][ T8075] set_capacity_and_notify: 2 callbacks suppressed
[  135.229019][ T8075] loop1: detected capacity change from 0 to 512
[  135.305503][ T8075] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  135.320998][ T8075] ext4 filesystem being mounted at /229/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  135.363703][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  135.451417][ T8093] loop3: detected capacity change from 0 to 1024
[  135.469206][ T8093] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  135.546421][ T8099] loop1: detected capacity change from 0 to 512
[  135.564763][   T28] kauditd_printk_skb: 143 callbacks suppressed
[  135.564780][   T28] audit: type=1400 audit(2000000061.450:1574): avc:  denied  { read write } for  pid=8092 comm="syz.3.1003" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  135.595283][   T28] audit: type=1400 audit(2000000061.460:1575): avc:  denied  { open } for  pid=8102 comm="syz.2.1005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  135.636585][ T8099] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e018, mo2=0002]
[  135.650926][   T28] audit: type=1400 audit(2000000061.460:1576): avc:  denied  { kernel } for  pid=8102 comm="syz.2.1005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  135.692462][ T8099] System zones: 1-12
[  135.696744][ T8099] EXT4-fs warning (device loop1): ext4_xattr_inode_get:546: inode #11: comm syz.1.1004: ea_inode file size=0 entry size=6
[  135.729209][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  135.748768][   T28] audit: type=1400 audit(2000000061.480:1577): avc:  denied  { open } for  pid=8092 comm="syz.3.1003" path="/199/file0/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  135.777040][ T8099] EXT4-fs (loop1): 1 orphan inode deleted
[  135.777678][ T7859] veth0_vlan: entered promiscuous mode
[  135.789095][ T8099] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  135.802149][   T28] audit: type=1400 audit(2000000061.480:1578): avc:  denied  { mounton } for  pid=8098 comm="syz.1.1004" path="/231/file0" dev="tmpfs" ino=1255 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  135.826151][   T28] audit: type=1400 audit(2000000061.600:1579): avc:  denied  { sys_module } for  pid=7859 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  135.834869][ T8099] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  135.875996][ T7859] veth1_vlan: entered promiscuous mode
[  135.908435][ T7859] veth0_macvtap: entered promiscuous mode
[  135.938022][   T28] audit: type=1400 audit(2000000061.800:1580): avc:  denied  { tracepoint } for  pid=8110 comm="syz.0.1007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  135.967798][ T7859] veth1_macvtap: entered promiscuous mode
[  136.001458][ T7859] batman_adv: batadv0: Interface activated: batadv_slave_0
[  136.018685][   T28] audit: type=1400 audit(2000000000.040:1581): avc:  denied  { write } for  pid=8117 comm="syz.3.1009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  136.039076][ T7859] batman_adv: batadv0: Interface activated: batadv_slave_1
[  136.071941][ T3424] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  136.096273][ T3424] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  136.110039][   T28] audit: type=1326 audit(2000000000.140:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8120 comm="syz.1.1010" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa5eda3bf79 code=0x0
[  136.116423][ T3424] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  136.167198][ T8104] loop2: detected capacity change from 0 to 1024
[  136.176471][ T3424] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  136.232971][   T28] audit: type=1400 audit(2000000000.260:1583): avc:  denied  { mounton } for  pid=7859 comm="syz-executor" path="/root/syzkaller.MAJOMb/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=17187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[  136.270835][ T8127] FAULT_INJECTION: forcing a failure.
[  136.270835][ T8127] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  136.299588][ T8127] CPU: 0 UID: 0 PID: 8127 Comm: syz.1.1011 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  136.299623][ T8127] Tainted: [W]=WARN
[  136.299632][ T8127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  136.299646][ T8127] Call Trace:
[  136.299653][ T8127]  <TASK>
[  136.299667][ T8127]  __dump_stack+0x1d/0x30
[  136.299738][ T8127]  dump_stack_lvl+0x95/0xd0
[  136.299765][ T8127]  dump_stack+0x15/0x1b
[  136.299789][ T8127]  should_fail_ex+0x263/0x280
[  136.299901][ T8127]  should_fail+0xb/0x20
[  136.299931][ T8127]  should_fail_usercopy+0x1a/0x20
[  136.299966][ T8127]  _copy_from_user+0x1c/0xb0
[  136.300004][ T8127]  ___sys_sendmsg+0xc1/0x1e0
[  136.300081][ T8127]  __x64_sys_sendmsg+0xd4/0x160
[  136.300156][ T8127]  x64_sys_call+0x194c/0x3020
[  136.300179][ T8127]  do_syscall_64+0x12c/0x370
[  136.300256][ T8127]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  136.300282][ T8127] RIP: 0033:0x7fa5eda3bf79
[  136.300322][ T8127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  136.300344][ T8127] RSP: 002b:00007fa5ec497028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  136.300407][ T8127] RAX: ffffffffffffffda RBX: 00007fa5edcb5fa0 RCX: 00007fa5eda3bf79
[  136.300419][ T8127] RDX: 0000000000040800 RSI: 00002000000001c0 RDI: 0000000000000007
[  136.300432][ T8127] RBP: 00007fa5ec497090 R08: 0000000000000000 R09: 0000000000000000
[  136.300447][ T8127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  136.300461][ T8127] R13: 00007fa5edcb6038 R14: 00007fa5edcb5fa0 R15: 00007ffd6d9632f8
[  136.300485][ T8127]  </TASK>
[  136.497158][ T8104] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  136.507300][ T8104] System zones: 0-1, 3-36
[  136.552184][ T8104] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.1005: bad orphan inode 134217728
[  136.574304][ T8104] loop2: lost filesystem error report for type 5 error -117
[  136.594952][ T8104] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  136.957903][ T8104] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1005'.
[  137.357004][ T8157] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1020'.
[  137.381674][ T8160] loop3: detected capacity change from 0 to 512
[  137.388289][ T8157] bond1: option ad_user_port_key: invalid value (1136)
[  137.397379][ T8160] EXT4-fs: Ignoring removed oldalloc option
[  137.409062][ T8157] bond1: option ad_user_port_key: allowed values 0 - 1023
[  137.418138][ T8157] bond1 (unregistering): Released all slaves
[  137.446370][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.462758][ T8160] EXT4-fs (loop3): 1 truncate cleaned up
[  137.468952][ T8160] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  137.522245][ T8168] netlink: 'syz.1.1022': attribute type 16 has an invalid length.
[  137.530212][ T8168] netlink: 'syz.1.1022': attribute type 17 has an invalid length.
[  137.580535][ T8168] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  137.634179][ T8170] loop2: detected capacity change from 0 to 512
[  137.641490][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.671318][ T8170] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  137.682468][ T8182] loop5: detected capacity change from 0 to 1024
[  137.692132][ T8170] ext4 filesystem being mounted at /202/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  137.741068][ T8182] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  137.830706][ T8173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  137.868932][ T8173] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  138.128847][ T8207] atomic_op ffff88810c770928 conn xmit_atomic 0000000000000000
[  138.442206][ T7859] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.533539][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.762612][ T8252] bridge0: port 2(bridge_slave_1) entered disabled state
[  138.769843][ T8252] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.827703][ T8252] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  138.837595][ T8252] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  138.888111][ T1635] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  138.945265][ T1635] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  138.986250][ T1635] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  139.017508][ T1635] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  139.089229][ T8284] loop2: detected capacity change from 0 to 128
[  139.926125][ T8331] loop1: detected capacity change from 0 to 1024
[  139.948551][ T8336] netlink: 'syz.3.1044': attribute type 16 has an invalid length.
[  139.956726][ T8336] netlink: 'syz.3.1044': attribute type 17 has an invalid length.
[  139.966981][ T8339] team_slave_0: left promiscuous mode
[  139.981111][ T8339] team0 (unregistering): Port device team_slave_0 removed
[  139.991997][ T8339] team_slave_1: left promiscuous mode
[  140.004499][ T8339] team0 (unregistering): Port device team_slave_1 removed
[  140.044241][ T8336] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  140.071944][ T8345] veth1_to_bond: entered allmulticast mode
[  140.078624][ T8331] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  140.215924][ T8327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  140.257821][ T8327] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  140.274002][ T8321] loop0: detected capacity change from 0 to 1024
[  140.333848][ T8332] veth1_to_bond: left allmulticast mode
[  140.382844][ T8321] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  140.412453][ T8321] System zones: 0-1, 3-36
[  140.414122][ T8323] loop5: detected capacity change from 0 to 1024
[  140.486744][ T8321] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.1038: bad orphan inode 134217728
[  140.515114][ T8321] loop0: lost filesystem error report for type 5 error -117
[  140.522918][ T8321] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  140.569887][ T8323] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  140.582619][ T8323] System zones: 0-1, 3-36
[  140.611594][ T8365] loop2: detected capacity change from 0 to 512
[  140.651910][ T8323] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.1039: bad orphan inode 134217728
[  140.680232][ T8366] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1038'.
[  140.718859][ T8323] loop5: lost filesystem error report for type 5 error -117
[  140.726130][ T8323] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  140.760312][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  140.979822][ T8376] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1039'.
[  141.127348][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  141.405860][   T28] kauditd_printk_skb: 7 callbacks suppressed
[  141.405877][   T28] audit: type=1400 audit(2000000005.430:1591): avc:  denied  { write } for  pid=8386 comm="syz.0.1056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  141.459749][ T7859] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  141.473628][   T28] audit: type=1326 audit(2000000005.470:1592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8386 comm="syz.0.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a0c47bf79 code=0x7ffc0000
[  141.520533][   T28] audit: type=1326 audit(2000000005.470:1593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8386 comm="syz.0.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a0c47bf79 code=0x7ffc0000
[  141.558318][ T8389] loop1: detected capacity change from 0 to 8192
[  141.574052][   T28] audit: type=1326 audit(2000000005.470:1594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8386 comm="syz.0.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a0c47bf79 code=0x7ffc0000
[  141.597894][   T28] audit: type=1326 audit(2000000005.470:1595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8386 comm="syz.0.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8a0c47bf79 code=0x7ffc0000
[  141.622617][   T28] audit: type=1326 audit(2000000005.470:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8386 comm="syz.0.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a0c47bf79 code=0x7ffc0000
[  141.650571][ T8400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1060'.
[  141.667789][ T8402] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1061'.
[  141.677936][ T8402] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1061'.
[  141.748431][   T28] audit: type=1326 audit(2000000005.470:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8386 comm="syz.0.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a0c47bf79 code=0x7ffc0000
[  141.778256][ T8406] loop0: detected capacity change from 0 to 512
[  141.791034][   T28] audit: type=1326 audit(2000000005.470:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8386 comm="syz.0.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a0c47bf79 code=0x7ffc0000
[  141.816768][ T8408] program syz.2.1062 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  141.817945][   T28] audit: type=1326 audit(2000000005.470:1599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8386 comm="syz.0.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8a0c47bf79 code=0x7ffc0000
[  141.850663][ T8400] loop3: detected capacity change from 0 to 1024
[  141.863342][   T28] audit: type=1326 audit(2000000005.470:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8386 comm="syz.0.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a0c47bf79 code=0x7ffc0000
[  141.888228][ T8406] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2
[  141.904710][ T8400] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  141.919901][ T8406] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.1061: invalid indirect mapped block 256 (level 1)
[  141.940232][ T8400] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869)
[  141.950855][ T8406] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  141.950969][ T8400] EXT4-fs (loop3): stripe (216) is not aligned with cluster size (16), stripe is disabled
[  141.970712][ T8400] EXT4-fs error (device loop3): ext4_get_journal_inode:5861: inode #32: comm syz.3.1060: iget: special inode unallocated
[  141.994616][ T8406] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.1061: invalid indirect mapped block 2683928664 (level 1)
[  141.998579][ T8400] loop3: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117
[  142.010094][ T8406] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  142.012817][ T8400] EXT4-fs (loop3): no journal found
[  142.023430][ T8406] EXT4-fs (loop0): 1 truncate cleaned up
[  142.039831][ T8400] EXT4-fs (loop3): can't get journal size
[  142.043546][ T8400] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  142.055296][ T8400] EXT4-fs error (device loop3): ext4_protect_reserved_inode:160: inode #32: comm syz.3.1060: iget: special inode unallocated
[  142.068681][ T8400] loop3: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117
[  142.068832][ T8400] EXT4-fs (loop3): failed to initialize system zone (-117)
[  142.086285][ T8400] EXT4-fs (loop3): mount failed
[  142.091969][ T8406] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  142.182250][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  142.222200][ T8423] loop5: detected capacity change from 0 to 128
[  142.228770][ T8423] msdos: Unknown parameter 'n��ots'
[  142.488604][    C0] vcan0: j1939_tp_rxtimer: 0xffff88811b3b9800: rx timeout, send abort
[  142.988638][    C0] vcan0: j1939_tp_rxtimer: 0xffff88811b254000: rx timeout, send abort
[  142.996955][    C0] vcan0: j1939_tp_rxtimer: 0xffff88811b3b9800: abort rx timeout. Force session deactivation
[  143.135926][ T8453] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1078'.
[  143.375629][ T8464] Q�6�`Ҙ: renamed from lo (while UP)
[  143.479722][ T8473] loop3: detected capacity change from 0 to 164
[  143.497015][    C0] vcan0: j1939_tp_rxtimer: 0xffff88811b254000: abort rx timeout. Force session deactivation
[  143.715071][ T8482] dummy0: entered promiscuous mode
[  143.732478][ T8482] macsec1: entered allmulticast mode
[  143.752845][ T8482] dummy0: left promiscuous mode
[  143.846216][ T8486] loop1: detected capacity change from 0 to 512
[  143.894256][ T8486] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  143.928877][ T8486] ext4 filesystem being mounted at /250/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  144.142702][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  144.185949][ T8499] netlink: 'syz.2.1094': attribute type 16 has an invalid length.
[  144.196769][ T8499] netlink: 'syz.2.1094': attribute type 17 has an invalid length.
[  144.253306][ T8499] 8021q: adding VLAN 0 to HW filter on device bond0
[  144.273521][ T8499] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  144.292799][ T8511] loop1: detected capacity change from 0 to 128
[  144.419103][ T8519] iso9660: Unknown parameter '��)�@�����
[  144.419103][ T8519] �I4���͕\)�� ��]l���2�$1?{k��eK��h캩�F��3ȼ)�Ke
[  144.419103][ T8519] �HU��<4��4\�I�|Pe�ܪT��V�?�:
[  144.419103][ T8519] "�:x������7��/'
[  144.751593][ T8517] EXT4-fs (loop1): 1 orphan inode deleted
[  144.798948][ T8517] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  144.906237][ T8517] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  144.973925][ T8529] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  145.108879][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  145.134880][ T8529] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1105'.
[  145.151680][ T8529] 8021q: adding VLAN 0 to HW filter on device bond1
[  145.205722][ T8529] macvlan2: entered promiscuous mode
[  145.263811][ T8529] macvlan2: entered allmulticast mode
[  145.738840][ T8495] set_capacity_and_notify: 3 callbacks suppressed
[  145.739050][ T8495] loop5: detected capacity change from 0 to 1024
[  145.770590][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.035874][ T8495] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  146.085311][ T8495] System zones: 0-1, 3-36
[  146.611392][ T8556] loop2: detected capacity change from 0 to 512
[  146.656791][ T8556] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  146.741501][ T8562] netlink: 'syz.1.1112': attribute type 16 has an invalid length.
[  146.793633][ T8562] netlink: 'syz.1.1112': attribute type 17 has an invalid length.
[  146.802207][ T8556] EXT4-fs (loop2): 1 truncate cleaned up
[  146.842271][ T8556] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  146.865550][ T8495] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.1092: bad orphan inode 134217728
[  146.910094][ T8495] loop5: lost filesystem error report for type 5 error -117
[  146.915475][ T8556] netlink: 4436 bytes leftover after parsing attributes in process `syz.2.1111'.
[  146.933952][ T8562] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  146.958311][ T8495] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  147.019244][ T8556] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096
[  147.138831][ T8586] loop1: detected capacity change from 0 to 512
[  147.151142][ T8586] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  147.215124][ T8590] program syz.0.1116 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  147.301228][ T8586] EXT4-fs (loop1): 1 truncate cleaned up
[  147.311975][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.325631][ T8586] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  147.395057][ T7859] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.424149][   T28] kauditd_printk_skb: 10 callbacks suppressed
[  147.424168][   T28] audit: type=1400 audit(2000000011.450:1611): avc:  denied  { ioctl } for  pid=8580 comm="syz.1.1115" path="/syzcgroup/unified/syz1/syz1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/cpu.stat" dev="loop1" ino=19 ioctlcmd=0x583b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  147.540844][   T28] audit: type=1400 audit(2000000011.510:1612): avc:  denied  { create } for  pid=8580 comm="syz.1.1115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  147.571572][   T28] audit: type=1400 audit(2000000011.510:1613): avc:  denied  { bind } for  pid=8580 comm="syz.1.1115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  147.684913][ T8610] loop0: detected capacity change from 0 to 1024
[  147.708338][ T8610] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  147.721528][ T8610] System zones: 0-1, 3-36
[  147.731271][ T8610] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.1121: bad orphan inode 134217728
[  147.742075][ T8610] loop0: lost filesystem error report for type 5 error -117
[  147.775663][ T8610] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  147.987875][ T8613] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1121'.
[  148.601366][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  148.819234][ T8606] loop2: detected capacity change from 0 to 1024
[  148.998578][ T8606] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  149.019212][ T8661] netlink: 'syz.5.1126': attribute type 16 has an invalid length.
[  149.027891][ T8661] netlink: 'syz.5.1126': attribute type 17 has an invalid length.
[  149.036651][ T8606] System zones: 0-1, 3-36
[  149.082555][ T8595] loop3: detected capacity change from 0 to 1024
[  149.099923][ T8606] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.1119: bad orphan inode 134217728
[  149.123860][ T8595] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  149.128650][ T8606] loop2: lost filesystem error report for type 5 error -117
[  149.134366][ T8595] System zones: 
[  149.169119][ T8606] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  149.210399][ T8595] 0-1, 3-36
[  149.225090][ T8661] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  149.255830][ T8595] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.1117: bad orphan inode 134217728
[  149.279963][ T8595] loop3: lost filesystem error report for type 5 error -117
[  149.290127][ T8595] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  149.369783][ T8606] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1119'.
[  149.448162][ T8670] loop0: detected capacity change from 0 to 8192
[  149.568843][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.676898][ T8680] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1131'.
[  149.879790][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.908324][ T8688] netlink: 2 bytes leftover after parsing attributes in process `syz.5.1134'.
[  149.917416][   T28] audit: type=1400 audit(2000000013.930:1614): avc:  denied  { ioctl } for  pid=8687 comm="syz.5.1134" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0x940a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  149.984773][   T28] audit: type=1400 audit(2000000013.930:1615): avc:  denied  { nlmsg_read } for  pid=8687 comm="syz.5.1134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  150.081595][ T8693] program syz.3.1136 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  150.364818][ T8700] loop0: detected capacity change from 0 to 128
[  150.425054][ T8682] loop2: detected capacity change from 0 to 1024
[  150.464345][ T8682] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  150.480355][ T8682] System zones: 0-1, 3-36
[  150.503868][ T8682] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.1130: bad orphan inode 134217728
[  150.516378][ T8682] loop2: lost filesystem error report for type 5 error -117
[  150.522268][ T8682] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  150.623404][ T8705] netlink: 'syz.0.1140': attribute type 16 has an invalid length.
[  150.632076][ T8705] netlink: 'syz.0.1140': attribute type 17 has an invalid length.
[  150.673238][ T8705] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  150.721404][ T8716] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1130'.
[  150.760429][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.007778][   T28] audit: type=1326 audit(2000000015.020:1616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8718 comm="syz.0.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a0c47bf79 code=0x7ffc0000
[  151.060360][ T8709] loop3: detected capacity change from 0 to 1024
[  151.092158][ T8728] loop2: detected capacity change from 0 to 8192
[  151.150629][ T8733] FAULT_INJECTION: forcing a failure.
[  151.150629][ T8733] name failslab, interval 1, probability 0, space 0, times 0
[  151.202590][   T28] audit: type=1326 audit(2000000015.020:1617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8718 comm="syz.0.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a0c47bf79 code=0x7ffc0000
[  151.294407][ T8733] CPU: 0 UID: 0 PID: 8733 Comm: syz.5.1147 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  151.294450][ T8733] Tainted: [W]=WARN
[  151.294460][ T8733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  151.294475][ T8733] Call Trace:
[  151.294483][ T8733]  <TASK>
[  151.294494][ T8733]  __dump_stack+0x1d/0x30
[  151.294539][ T8733]  dump_stack_lvl+0x95/0xd0
[  151.294568][ T8733]  dump_stack+0x15/0x1b
[  151.294595][ T8733]  should_fail_ex+0x263/0x280
[  151.294628][ T8733]  should_failslab+0x8c/0xb0
[  151.294745][ T8733]  __kmalloc_noprof+0xb8/0x4e0
[  151.294879][ T8733]  ? security_msg_msg_alloc+0x45/0x100
[  151.294910][ T8733]  ? should_fail_ex+0xd9/0x280
[  151.294937][ T8733]  security_msg_msg_alloc+0x45/0x100
[  151.294961][ T8733]  load_msg+0x222/0x2f0
[  151.295073][ T8733]  do_msgsnd+0xe8/0xba0
[  151.295090][ T8733]  ? perf_trace_run_bpf_submit+0xe5/0x110
[  151.295162][ T8733]  ? __rcu_read_unlock+0x4e/0x70
[  151.295226][ T8733]  ? __fget_files+0x184/0x1c0
[  151.295264][ T8733]  ? mutex_lock+0x57/0x90
[  151.295282][ T8733]  ? mutex_unlock+0x4e/0x90
[  151.295303][ T8733]  ? fput+0x8f/0xc0
[  151.295326][ T8733]  __x64_sys_msgsnd+0xa8/0xc0
[  151.295361][ T8733]  x64_sys_call+0x15e7/0x3020
[  151.295393][ T8733]  do_syscall_64+0x12c/0x370
[  151.295471][ T8733]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  151.295501][ T8733] RIP: 0033:0x7f00911bbf79
[  151.295517][ T8733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  151.295536][ T8733] RSP: 002b:00007f008fc17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000045
[  151.295555][ T8733] RAX: ffffffffffffffda RBX: 00007f0091435fa0 RCX: 00007f00911bbf79
[  151.295642][ T8733] RDX: 0000000000002000 RSI: 0000200000000380 RDI: 0000000000000000
[  151.295657][ T8733] RBP: 00007f008fc17090 R08: 0000000000000000 R09: 0000000000000000
[  151.295749][ T8733] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001
[  151.295766][ T8733] R13: 00007f0091436038 R14: 00007f0091435fa0 R15: 00007ffdfa90ef98
[  151.295786][ T8733]  </TASK>
[  151.296413][ T8709] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  151.522751][   T28] audit: type=1326 audit(2000000015.020:1618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8718 comm="syz.0.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f8a0c47bf79 code=0x7ffc0000
[  151.554233][ T8709] System zones: 0-1, 3-36
[  151.562909][   T28] audit: type=1326 audit(2000000015.020:1619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8718 comm="syz.0.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a0c47bf79 code=0x7ffc0000
[  151.586600][   T28] audit: type=1326 audit(2000000015.020:1620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8718 comm="syz.0.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a0c47bf79 code=0x7ffc0000
[  151.609957][ T8709] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.1141: bad orphan inode 134217728
[  151.610119][ T8709] loop3: lost filesystem error report for type 5 error -117
[  151.656037][ T8709] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  151.695459][ T8211] Bluetooth: hci0: Frame reassembly failed (-84)
[  151.774599][ T8741] loop0: detected capacity change from 0 to 512
[  151.788365][ T8741] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 3)!
[  151.798816][ T8741] EXT4-fs (loop0): group descriptors corrupted!
[  151.851886][ T8709] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1141'.
[  151.895950][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.961773][ T8751] netlink: 'syz.0.1153': attribute type 10 has an invalid length.
[  151.971521][ T8751] veth0_vlan: entered allmulticast mode
[  151.993906][ T8751] veth0_vlan: left promiscuous mode
[  152.011683][ T8751] veth0_vlan: entered promiscuous mode
[  152.033251][ T8751] team0: Device veth0_vlan failed to register rx_handler
[  152.087354][ T8759] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1154'.
[  152.184241][ T8761] netlink: 'syz.0.1155': attribute type 16 has an invalid length.
[  152.192364][ T8761] netlink: 'syz.0.1155': attribute type 17 has an invalid length.
[  152.243762][ T8761] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  152.309090][ T8772] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1158'.
[  152.356125][ T8774] syzkaller0: entered promiscuous mode
[  152.366017][ T8774] syzkaller0: entered allmulticast mode
[  152.414916][ T8776] loop3: detected capacity change from 0 to 256
[  152.430437][ T8776] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  152.468525][   T28] kauditd_printk_skb: 23 callbacks suppressed
[  152.468544][   T28] audit: type=1400 audit(2000000016.490:1644): avc:  denied  { create } for  pid=8775 comm="syz.3.1160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  152.528742][   T28] audit: type=1400 audit(2000000016.540:1645): avc:  denied  { ioctl } for  pid=8775 comm="syz.3.1160" path="socket:[17936]" dev="sockfs" ino=17936 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  152.568075][ T8778] loop5: detected capacity change from 0 to 8192
[  152.836460][ T8787] loop0: detected capacity change from 0 to 128
[  153.222062][ T8791] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8791 comm=syz.0.1167
[  153.511913][ T8799] netlink: 'syz.0.1169': attribute type 16 has an invalid length.
[  153.519877][ T8799] netlink: 'syz.0.1169': attribute type 17 has an invalid length.
[  153.560552][ T8799] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  153.639743][ T8794] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1168'.
[  153.710936][ T8737] Bluetooth: hci0: command 0x1003 tx timeout
[  153.717032][ T3704] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  153.741612][ T8805] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1170'.
[  153.900647][ T8780] loop3: detected capacity change from 0 to 1024
[  153.919676][ T8820] IPv6: sit1: Disabled Multicast RS
[  153.934640][   T28] audit: type=1400 audit(2000000017.960:1646): avc:  denied  { create } for  pid=8806 comm="syz.1.1171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1
[  153.965855][ T8780] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  153.974935][ T8780] System zones: 0-1, 3-36
[  153.991649][ T8780] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.1162: bad orphan inode 134217728
[  154.007898][ T8780] loop3: lost filesystem error report for type 5 error -117
[  154.027762][ T8780] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  154.095411][ T8830] loop5: detected capacity change from 0 to 128
[  154.263658][ T8832] loop5: detected capacity change from 0 to 8192
[  154.275462][ T8839] loop2: detected capacity change from 0 to 512
[  154.287809][ T8842] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1162'.
[  154.360576][ T8839] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  154.393694][ T8839] ext4 filesystem being mounted at /232/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  154.449710][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  154.518790][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  154.609649][ T8846] netlink: 'syz.3.1181': attribute type 16 has an invalid length.
[  154.617571][ T8846] netlink: 'syz.3.1181': attribute type 17 has an invalid length.
[  154.668245][ T8846] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  154.708306][ T8851] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1182'.
[  154.994558][   T28] audit: type=1400 audit(2000000019.020:1647): avc:  denied  { create } for  pid=8859 comm="syz.3.1187" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tipc_socket permissive=1
[  155.282078][ T8874] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  155.350062][ T8874] ext4 filesystem being mounted at /247/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  155.466659][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  155.528193][ T8890] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1196'.
[  155.559813][ T8888] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  155.591042][ T8888] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  155.603814][ T8885] netlink: 'syz.0.1195': attribute type 16 has an invalid length.
[  155.675706][ T8885] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  155.725860][ T8898] ip6gre1: entered promiscuous mode
[  155.762353][ T8900] EXT4-fs: Ignoring removed bh option
[  155.793783][ T8900] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  155.876479][ T8900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1199'.
[  155.921439][ T8900] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1199'.
[  156.091317][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  156.784711][ T8918] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1194'.
[  157.077689][ T8924] set_capacity_and_notify: 7 callbacks suppressed
[  157.077708][ T8924] loop2: detected capacity change from 0 to 512
[  157.136025][ T8924] EXT4-fs (loop2): VFS: Found ext4 filesystem with invalid superblock checksum.  Run e2fsck?
[  157.151161][ T3296] udevd[3296]: incorrect ext4 checksum on /dev/loop2
[  157.400881][ T8878] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  158.173291][ T8933] validate_nla: 1 callbacks suppressed
[  158.173307][ T8933] netlink: 'syz.0.1211': attribute type 16 has an invalid length.
[  158.186951][ T8933] netlink: 'syz.0.1211': attribute type 17 has an invalid length.
[  158.207174][ T8933] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  158.231234][ T8941] loop3: detected capacity change from 0 to 512
[  158.238684][ T8941] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  158.253523][ T8941] EXT4-fs (loop3): orphan cleanup on readonly fs
[  158.268971][ T8941] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.1213: Allocating blocks 41-42 which overlap fs metadata
[  158.283778][ T8941] loop3: lost filesystem error report for type 5 error -117
[  158.294065][ T8941] Quota error (device loop3): write_blk: dquota write failed
[  158.316882][ T8941] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5
[  158.346692][ T8941] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.1213: Allocating blocks 41-42 which overlap fs metadata
[  158.357498][ T3424] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28
[  158.361158][ T8941] loop3: lost filesystem error report for type 5 error -117
[  158.381507][ T8941] Quota error (device loop3): write_blk: dquota write failed
[  158.386568][ T3424] EXT4-fs (loop5): This should not happen!! Data will be lost
[  158.386568][ T3424] 
[  158.405847][ T8941] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  158.405986][ T8941] EXT4-fs error (device loop3): ext4_acquire_dquot:6998: comm syz.3.1213: Failed to acquire dquot type 1
[  158.406009][ T8941] loop3: lost filesystem error report for type 5 error -117
[  158.407087][ T8941] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, 
[  158.417856][ T3424] EXT4-fs (loop5): Total free blocks count 0
[  158.427851][ T8941] inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  158.437939][ T3424] EXT4-fs (loop5): Free/Dirty block details
[  158.465121][ T8941] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.1213: corrupted inode contents
[  158.477033][ T8941] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  158.477195][ T3424] EXT4-fs (loop5): free_blocks=65280
[  158.477222][ T8941] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #12: comm syz.3.1213: mark_inode_dirty error
[  158.504197][ T3424] EXT4-fs (loop5): dirty_blocks=4238
[  158.509662][ T3424] EXT4-fs (loop5): Block reservation details
[  158.515889][ T3424] EXT4-fs (loop5): i_reserved_data_blocks=4238
[  158.522962][ T8941] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  158.531419][ T8941] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.1213: corrupted inode contents
[  158.546500][ T8945] loop0: detected capacity change from 0 to 8192
[  158.563928][ T8941] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  158.564145][ T8941] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.1213: mark_inode_dirty error
[  158.565808][ T8949] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1217'.
[  158.598003][ T3424] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 2068 with max blocks 2048 with error 28
[  158.599866][ T8941] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  158.641976][ T8953] loop2: detected capacity change from 0 to 128
[  158.663569][ T8941] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.1213: corrupted inode contents
[  158.691458][ T8941] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  158.696804][ T8941] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem
[  158.732037][ T8941] loop3: lost filesystem error report for type 5 error -117
[  158.733600][ T8941] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.1213: corrupted inode contents
[  158.766818][ T8941] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  158.768620][ T8941] EXT4-fs error (device loop3): ext4_truncate:4635: inode #12: comm syz.3.1213: mark_inode_dirty error
[  158.789687][ T8941] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  158.801677][ T8941] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem
[  158.827273][ T8957] loop5: detected capacity change from 0 to 512
[  158.841143][ T8941] loop3: lost filesystem error report for type 5 error -117
[  158.842817][ T8941] EXT4-fs (loop3): 1 truncate cleaned up
[  158.909069][ T8941] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  158.931383][ T8941] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.974092][ T8941] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1213'.
[  159.054403][ T8968] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1224'.
[  159.147257][ T8970] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1225'.
[  159.167773][ T8970] openvswitch: netlink: Key 0 has unexpected len 2 expected 0
[  159.303962][ T8978] netlink: 'syz.3.1227': attribute type 16 has an invalid length.
[  159.329720][ T8978] netlink: 'syz.3.1227': attribute type 17 has an invalid length.
[  159.380383][ T8980] loop0: detected capacity change from 0 to 512
[  159.394764][ T8978] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  159.433188][ T8980] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1228: bg 0: block 393: padding at end of block bitmap is not set
[  159.465465][ T8984] macvlan0: entered allmulticast mode
[  159.477641][ T8980] loop0: lost filesystem error report for type 5 error -117
[  159.481570][ T8980] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6688: Corrupt filesystem
[  159.507845][ T8984] veth1_vlan: entered allmulticast mode
[  159.576868][ T8980] loop0: lost filesystem error report for type 5 error -117
[  159.577268][ T8980] EXT4-fs (loop0): 2 truncates cleaned up
[  159.602544][ T8986] loop3: detected capacity change from 0 to 128
[  159.610091][ T8980] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  159.692952][ T8989] loop3: detected capacity change from 0 to 128
[  159.738175][ T8980] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1228'.
[  159.757135][ T8980] hsr_slave_0: left promiscuous mode
[  159.780578][   T28] audit: type=1400 audit(2000000023.800:1648): avc:  denied  { wake_alarm } for  pid=8993 comm="syz.3.1233" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  159.815233][ T8980] hsr_slave_1: left promiscuous mode
[  159.822674][ T8992] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  159.899981][ T9003] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9)
[  159.906625][ T9003] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  159.944294][ T9003] vhci_hcd vhci_hcd.0: Device attached
[  159.951102][ T9009] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1236'.
[  159.991251][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.000286][ T9010] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(12)
[  160.006966][ T9010] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  160.014497][ T9003] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(11)
[  160.021124][ T9003] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  160.029167][ T9003] vhci_hcd vhci_hcd.0: Device attached
[  160.039251][ T9010] vhci_hcd vhci_hcd.0: Device attached
[  160.045805][ T9003] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(16)
[  160.052462][ T9003] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  160.060309][ T9003] vhci_hcd vhci_hcd.0: Device attached
[  160.066214][ T9014] vhci_hcd: connection closed
[  160.066361][ T9012] vhci_hcd: connection closed
[  160.067836][ T9016] vhci_hcd: connection closed
[  160.076638][ T8317] vhci_hcd vhci_hcd.5: stop threads
[  160.097188][ T8317] vhci_hcd vhci_hcd.5: release socket
[  160.106109][ T9005] vhci_hcd: connection closed
[  160.119776][ T8317] vhci_hcd vhci_hcd.5: disconnect device
[  160.158665][ T8317] vhci_hcd vhci_hcd.5: stop threads
[  160.163501][ T9022] netlink: 'syz.2.1239': attribute type 16 has an invalid length.
[  160.166346][ T8317] vhci_hcd vhci_hcd.5: release socket
[  160.172413][ T9022] netlink: 'syz.2.1239': attribute type 17 has an invalid length.
[  160.177792][ T8317] vhci_hcd vhci_hcd.5: disconnect device
[  160.198790][ T9022] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  160.203676][ T8317] vhci_hcd vhci_hcd.5: stop threads
[  160.220767][ T8317] vhci_hcd vhci_hcd.5: release socket
[  160.221008][ T3436] usb 12-1: SetAddress Request (2) to port 0
[  160.233593][ T8317] vhci_hcd vhci_hcd.5: disconnect device
[  160.239328][ T3436] usb 12-1: new SuperSpeed USB device number 2 using vhci_hcd
[  160.251822][ T8317] vhci_hcd vhci_hcd.5: stop threads
[  160.263657][ T8317] vhci_hcd vhci_hcd.5: release socket
[  160.278918][ T9025] loop0: detected capacity change from 0 to 8192
[  160.285168][ T8317] vhci_hcd vhci_hcd.5: disconnect device
[  161.144407][ T9053] FAULT_INJECTION: forcing a failure.
[  161.144407][ T9053] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  161.158580][ T9053] CPU: 1 UID: 0 PID: 9053 Comm: syz.5.1246 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  161.158660][ T9053] Tainted: [W]=WARN
[  161.158667][ T9053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  161.158680][ T9053] Call Trace:
[  161.158685][ T9053]  <TASK>
[  161.158693][ T9053]  __dump_stack+0x1d/0x30
[  161.158732][ T9053]  dump_stack_lvl+0x95/0xd0
[  161.158789][ T9053]  dump_stack+0x15/0x1b
[  161.158848][ T9053]  should_fail_ex+0x263/0x280
[  161.158896][ T9053]  should_fail+0xb/0x20
[  161.158928][ T9053]  should_fail_usercopy+0x1a/0x20
[  161.158964][ T9053]  _copy_from_user+0x1c/0xb0
[  161.158998][ T9053]  ___sys_recvmsg+0xaa/0x3b0
[  161.159044][ T9053]  do_recvmmsg+0x1ef/0x560
[  161.159086][ T9053]  __x64_sys_recvmmsg+0xe5/0x170
[  161.159120][ T9053]  x64_sys_call+0x80f/0x3020
[  161.159212][ T9053]  do_syscall_64+0x12c/0x370
[  161.159245][ T9053]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  161.159287][ T9053] RIP: 0033:0x7f00911bbf79
[  161.159305][ T9053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  161.159354][ T9053] RSP: 002b:00007f008fc17028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  161.159442][ T9053] RAX: ffffffffffffffda RBX: 00007f0091435fa0 RCX: 00007f00911bbf79
[  161.159456][ T9053] RDX: 0000000000000a0d RSI: 00002000000066c0 RDI: 0000000000000005
[  161.159522][ T9053] RBP: 00007f008fc17090 R08: 0000000000000000 R09: 0000000000000000
[  161.159540][ T9053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  161.159556][ T9053] R13: 00007f0091436038 R14: 00007f0091435fa0 R15: 00007ffdfa90ef98
[  161.159583][ T9053]  </TASK>
[  161.461017][   T28] audit: type=1400 audit(2000000025.470:1649): avc:  denied  { bind } for  pid=9060 comm="syz.0.1250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  162.274102][ T9076] netlink: 'syz.0.1252': attribute type 16 has an invalid length.
[  162.375975][ T9076] netlink: 'syz.0.1252': attribute type 17 has an invalid length.
[  162.512467][ T9081] loop3: detected capacity change from 0 to 128
[  162.531130][ T9076] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  162.613083][ T9084] netlink: 'syz.0.1257': attribute type 10 has an invalid length.
[  162.660156][ T9087] loop3: detected capacity change from 0 to 128
[  163.081626][ T9102] loop5: detected capacity change from 0 to 512
[  163.090499][ T9102] EXT4-fs: test_dummy_encryption option not supported
[  163.217985][ T9106] vhci_hcd vhci_hcd.0: default hub control req: 4750 v004c i0000 l0
[  163.970407][ T9115] loop0: detected capacity change from 0 to 512
[  163.987888][ T9115] EXT4-fs (loop0): VFS: Can't find ext4 filesystem
[  164.126098][   T28] audit: type=1400 audit(2000000028.150:1650): avc:  denied  { create } for  pid=9114 comm="syz.0.1269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  164.190813][   T28] audit: type=1400 audit(2000000028.180:1651): avc:  denied  { ioctl } for  pid=9114 comm="syz.0.1269" path="socket:[19445]" dev="sockfs" ino=19445 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  164.240835][   T28] audit: type=1400 audit(2000000028.180:1652): avc:  denied  { bind } for  pid=9114 comm="syz.0.1269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  164.305860][   T28] audit: type=1400 audit(2000000028.330:1653): avc:  denied  { write } for  pid=9122 comm="syz.5.1271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  164.345290][ T9123] loop5: detected capacity change from 0 to 2048
[  164.399182][ T9123] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  164.491967][ T9123] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1271: bg 0: block 234: padding at end of block bitmap is not set
[  164.511724][ T9123] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 854 with error 28
[  164.553531][ T9123] EXT4-fs (loop5): This should not happen!! Data will be lost
[  164.553531][ T9123] 
[  164.563268][ T9135] loop3: detected capacity change from 0 to 512
[  164.570169][ T9135] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  164.578916][ T9123] EXT4-fs (loop5): Total free blocks count 0
[  164.585841][ T9123] EXT4-fs (loop5): Free/Dirty block details
[  164.592831][ T9123] EXT4-fs (loop5): free_blocks=0
[  164.598119][ T9123] EXT4-fs (loop5): dirty_blocks=864
[  164.603551][ T9135] EXT4-fs (loop3): 1 truncate cleaned up
[  164.609853][ T9135] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  164.614419][ T9123] EXT4-fs (loop5): Block reservation details
[  164.676749][ T9123] EXT4-fs (loop5): i_reserved_data_blocks=54
[  164.744379][ T7859] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.845783][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.311371][ T3436] usb 12-1: device descriptor read/8, error -110
[  165.420989][ T3436] usb 12-1: new SuperSpeed USB device number 2 using vhci_hcd
[  165.461300][ T3436] usb 12-1: enqueue for inactive port 0
[  165.466945][ T3436] usb 12-1: enqueue for inactive port 0
[  165.490335][ T3436] usb 12-1: enqueue for inactive port 0
[  165.660090][ T9152] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1280'.
[  165.727968][ T9156] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1282'.
[  165.792160][   T28] audit: type=1400 audit(2000000029.820:1654): avc:  denied  { bind } for  pid=9157 comm="syz.3.1283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  165.977888][ T9160] netlink: 'syz.2.1284': attribute type 16 has an invalid length.
[  165.980893][   T28] audit: type=1400 audit(2000000029.980:1655): avc:  denied  { setopt } for  pid=9157 comm="syz.3.1283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  165.985924][ T9160] netlink: 'syz.2.1284': attribute type 17 has an invalid length.
[  166.065675][ T9160] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  166.088804][ T9163] netlink: 'syz.3.1283': attribute type 10 has an invalid length.
[  166.124914][ T9163] 8021q: adding VLAN 0 to HW filter on device batadv0
[  166.142775][ T9163] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  166.445973][ T9170] loop2: detected capacity change from 0 to 128
[  166.555365][   T28] audit: type=1400 audit(2000000030.580:1656): avc:  denied  { relabelto } for  pid=9171 comm="syz.2.1288" name="253" dev="tmpfs" ino=1355 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0"
[  166.630650][   T28] audit: type=1326 audit(2000000030.620:1657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9171 comm="syz.2.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51ac3fbf79 code=0x7ffc0000
[  166.669842][ T9154] loop5: detected capacity change from 0 to 1024
[  166.691050][ T3436] usb usb12-port1: attempt power cycle
[  166.710806][   T28] audit: type=1326 audit(2000000030.620:1658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9171 comm="syz.2.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51ac3fbf79 code=0x7ffc0000
[  166.799843][ T9172] FAULT_INJECTION: forcing a failure.
[  166.799843][ T9172] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  166.828812][ T9154] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  166.846659][   T28] audit: type=1326 audit(2000000030.620:1659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9171 comm="syz.2.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51ac3fbf79 code=0x7ffc0000
[  166.898798][ T9154] System zones: 0-1, 3-36
[  166.914143][ T9172] CPU: 0 UID: 0 PID: 9172 Comm: syz.2.1288 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  166.914184][ T9172] Tainted: [W]=WARN
[  166.914193][ T9172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  166.914206][ T9172] Call Trace:
[  166.914213][ T9172]  <TASK>
[  166.914222][ T9172]  __dump_stack+0x1d/0x30
[  166.914288][ T9172]  dump_stack_lvl+0x95/0xd0
[  166.914315][ T9172]  dump_stack+0x15/0x1b
[  166.914339][ T9172]  should_fail_ex+0x263/0x280
[  166.914445][ T9172]  should_fail+0xb/0x20
[  166.914470][ T9172]  should_fail_usercopy+0x1a/0x20
[  166.914504][ T9172]  copy_folio_from_iter_atomic+0x269/0x1170
[  166.914576][ T9172]  ? shmem_write_begin+0xfc/0x1f0
[  166.914597][ T9172]  ? shmem_write_begin+0x135/0x1f0
[  166.914618][ T9172]  generic_perform_write+0x2c1/0x490
[  166.914697][ T9172]  shmem_file_write_iter+0xc5/0xf0
[  166.914723][ T9172]  ? __pfx_shmem_file_write_iter+0x10/0x10
[  166.914756][ T9172]  vfs_write+0x5a6/0x9f0
[  166.914792][ T9172]  ksys_write+0xdc/0x1a0
[  166.914849][ T9172]  __x64_sys_write+0x40/0x50
[  166.914896][ T9172]  x64_sys_call+0x27e1/0x3020
[  166.914925][ T9172]  do_syscall_64+0x12c/0x370
[  166.914954][ T9172]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  166.914975][ T9172] RIP: 0033:0x7f51ac3bc84e
[  166.914994][ T9172] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  166.915017][ T9172] RSP: 002b:00007f51aae56da8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  166.915038][ T9172] RAX: ffffffffffffffda RBX: 00007f51aae576c0 RCX: 00007f51ac3bc84e
[  166.915098][ T9172] RDX: 0000000000020000 RSI: 00007f51a2a37000 RDI: 000000000000000a
[  166.915111][ T9172] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  166.915123][ T9172] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a
[  166.915135][ T9172] R13: 00007f51aae56ee0 R14: 00007f51aae56ea0 R15: 00007f51a2a37000
[  166.915155][ T9172]  </TASK>
[  166.920427][ T9172] loop2: detected capacity change from 0 to 256
[  167.030137][ T9154] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.1281: bad orphan inode 134217728
[  167.030588][ T9154] loop5: lost filesystem error report for type 5 error -117
[  167.088182][ T9154] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  167.235662][ T9172] FAT-fs (loop2): Directory bread(block 1285) failed
[  167.278643][ T9172] FAT-fs (loop2): Directory bread(block 1286) failed
[  167.307381][ T9172] FAT-fs (loop2): Directory bread(block 1287) failed
[  167.321554][ T9172] FAT-fs (loop2): Directory bread(block 1288) failed
[  167.348719][ T9185] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1281'.
[  167.368717][ T9172] FAT-fs (loop2): Directory bread(block 1285) failed
[  167.392280][ T9172] FAT-fs (loop2): Directory bread(block 1286) failed
[  167.406067][ T9172] FAT-fs (loop2): Directory bread(block 1287) failed
[  167.422565][ T9188] netlink: 'syz.2.1288': attribute type 15 has an invalid length.
[  167.455883][ T9172] FAT-fs (loop2): Directory bread(block 1288) failed
[  167.479447][ T9188] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1288'.
[  167.523569][ T9189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  167.528059][ T9172] FAT-fs (loop2): FAT read failed (blocknr 1281)
[  167.538364][ T9189] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  167.658429][ T7859] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.686816][ T9200] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1292'.
[  167.722311][ T9205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1293'.
[  167.891057][ T9218] netlink: 'syz.2.1296': attribute type 16 has an invalid length.
[  167.910697][ T9218] netlink: 'syz.2.1296': attribute type 17 has an invalid length.
[  167.942805][ T9218] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  167.988080][ T9228] loop5: detected capacity change from 0 to 128
[  168.252847][ T9234] loop2: detected capacity change from 0 to 8192
[  168.661130][ T3436] usb usb12-port1: unable to enumerate USB device
[  168.946222][ T9264] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1301'.
[  169.055243][ T9289] loop2: detected capacity change from 0 to 1024
[  169.098713][ T9289] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  169.105162][ T9294] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1304'.
[  169.127085][ T9294] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1304'.
[  169.201710][ T9294] lo speed is unknown, defaulting to 1000
[  169.207766][ T9294] lo speed is unknown, defaulting to 1000
[  169.214150][ T9294] lo speed is unknown, defaulting to 1000
[  169.220706][ T9294] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  169.235500][ T9294] lo speed is unknown, defaulting to 1000
[  169.242226][ T9294] lo speed is unknown, defaulting to 1000
[  169.248362][ T9294] lo speed is unknown, defaulting to 1000
[  169.255227][ T9294] lo speed is unknown, defaulting to 1000
[  169.262725][ T9294] lo speed is unknown, defaulting to 1000
[  169.457921][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  169.509606][ T9323] netlink: 'syz.2.1307': attribute type 29 has an invalid length.
[  169.531644][ T9323] netlink: 'syz.2.1307': attribute type 29 has an invalid length.
[  169.550167][ T9324] netlink: 'syz.2.1307': attribute type 29 has an invalid length.
[  169.568867][ T9323] netlink: 604 bytes leftover after parsing attributes in process `syz.2.1307'.
[  169.921640][   T28] kauditd_printk_skb: 145 callbacks suppressed
[  169.921656][   T28] audit: type=1400 audit(2000000033.940:1805): avc:  denied  { map } for  pid=9347 comm="syz.1.1310" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  169.961900][ T9348] vhci_hcd vhci_hcd.2: invalid port number 96
[  169.968018][ T9348] vhci_hcd vhci_hcd.2: default hub control req: 2000 vfffc i0060 l7
[  170.164711][   T28] audit: type=1326 audit(2000000034.190:1806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9363 comm="syz.1.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5eda3bf79 code=0x7ffc0000
[  170.238684][   T28] audit: type=1326 audit(2000000034.210:1807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9363 comm="syz.1.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5eda3bf79 code=0x7ffc0000
[  170.297698][   T28] audit: type=1326 audit(2000000034.210:1808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9363 comm="syz.1.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5eda3bf79 code=0x7ffc0000
[  170.388229][ T9317] loop5: detected capacity change from 0 to 1024
[  170.400456][   T28] audit: type=1326 audit(2000000034.210:1809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9363 comm="syz.1.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5eda3bf79 code=0x7ffc0000
[  170.490481][   T28] audit: type=1326 audit(2000000034.210:1810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9363 comm="syz.1.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa5eda3bf79 code=0x7ffc0000
[  170.514150][ T9384] lo speed is unknown, defaulting to 1000
[  170.564651][   T28] audit: type=1326 audit(2000000034.220:1811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9363 comm="syz.1.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5eda3bf79 code=0x7ffc0000
[  170.618858][   T28] audit: type=1326 audit(2000000034.220:1812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9363 comm="syz.1.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5eda3bf79 code=0x7ffc0000
[  170.632667][ T9394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  170.690991][ T9317] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  170.699982][ T9317] System zones: 0-1, 3-36
[  170.708497][ T9390] loop0: detected capacity change from 0 to 512
[  170.725119][ T9390] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  170.738057][   T28] audit: type=1326 audit(2000000034.220:1813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9363 comm="syz.1.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5eda3bf79 code=0x7ffc0000
[  170.746327][ T9394] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  170.779786][   T28] audit: type=1326 audit(2000000034.220:1814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9363 comm="syz.1.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7fa5eda3bf79 code=0x7ffc0000
[  170.812819][ T9390] EXT4-fs (loop0): 1 truncate cleaned up
[  170.843450][ T9390] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  170.862593][ T9317] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.1306: bad orphan inode 134217728
[  170.862794][ T9317] loop5: lost filesystem error report for type 5 error -117
[  170.902275][ T9317] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  171.171521][ T9425] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1306'.
[  171.313110][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.334161][ T7859] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.435059][ T9419] netlink: 536 bytes leftover after parsing attributes in process `syz.2.1317'.
[  171.464546][ T9446] netlink: 'syz.5.1319': attribute type 16 has an invalid length.
[  171.473503][ T9446] netlink: 'syz.5.1319': attribute type 17 has an invalid length.
[  171.506225][ T9446] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  171.563127][   T35] lo speed is unknown, defaulting to 1000
[  171.576204][ T9419] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1317'.
[  171.615048][ T9437] loop0: detected capacity change from 0 to 8192
[  171.668631][ T9457] FAULT_INJECTION: forcing a failure.
[  171.668631][ T9457] name failslab, interval 1, probability 0, space 0, times 0
[  171.712547][ T9461] ==================================================================
[  171.720689][ T9461] BUG: KCSAN: data-race in fat16_ent_put / fat_mirror_bhs
[  171.727880][ T9461] 
[  171.730233][ T9461] write to 0xffff88810cbaa2c4 of 2 bytes by task 9437 on cpu 0:
[  171.737901][ T9461]  fat16_ent_put+0x28/0x60
[  171.742047][ T9457] CPU: 0 UID: 0 PID: 9457 Comm: syz.5.1320 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  171.742152][ T9457] Tainted: [W]=WARN
[  171.742176][ T9457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  171.742238][ T9457] Call Trace:
[  171.742257][ T9457]  <TASK>
[  171.742286][ T9457]  __dump_stack+0x1d/0x30
[  171.742363][ T9457]  dump_stack_lvl+0x95/0xd0
[  171.742506][ T9457]  dump_stack+0x15/0x1b
[  171.742584][ T9457]  should_fail_ex+0x263/0x280
[  171.742677][ T9457]  should_failslab+0x8c/0xb0
[  171.742781][ T9457]  kmem_cache_alloc_node_noprof+0x6d/0x460
[  171.742887][ T9457]  ? __alloc_skb+0x2d6/0x690
[  171.742945][ T9457]  __alloc_skb+0x2d6/0x690
[  171.743063][ T9457]  ? __alloc_skb+0x200/0x690
[  171.743134][ T9457]  netlink_alloc_large_skb+0xbf/0xf0
[  171.743228][ T9457]  netlink_sendmsg+0x40c/0x6f0
[  171.743305][ T9457]  ? __pfx_netlink_sendmsg+0x10/0x10
[  171.743415][ T9457]  ____sys_sendmsg+0x5af/0x600
[  171.743552][ T9457]  ___sys_sendmsg+0x195/0x1e0
[  171.743679][ T9457]  __x64_sys_sendmsg+0xd4/0x160
[  171.743775][ T9457]  x64_sys_call+0x194c/0x3020
[  171.743991][ T9457]  do_syscall_64+0x12c/0x370
[  171.744085][ T9457]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.744218][ T9457] RIP: 0033:0x7f00911bbf79
[  171.744272][ T9457] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  171.744329][ T9457] RSP: 002b:00007f008fc17028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  171.744395][ T9457] RAX: ffffffffffffffda RBX: 00007f0091435fa0 RCX: 00007f00911bbf79
[  171.744450][ T9457] RDX: 0000000000000080 RSI: 0000200000000280 RDI: 0000000000000003
[  171.744499][ T9457] RBP: 00007f008fc17090 R08: 0000000000000000 R09: 0000000000000000
[  171.744542][ T9457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  171.744583][ T9457] R13: 00007f0091436038 R14: 00007f0091435fa0 R15: 00007ffdfa90ef98
[  171.744724][ T9457]  </TASK>
[  171.935130][ T9461]  fat_ent_write+0x6c/0xe0
[  171.939580][ T9461]  fat_truncate_blocks+0x365/0x5a0
[  171.944715][ T9461]  fat_write_end+0xba/0x160
[  171.949238][ T9461]  generic_perform_write+0x311/0x490
[  171.954546][ T9461]  __generic_file_write_iter+0x9e/0x120
[  171.960115][ T9461]  generic_file_write_iter+0x8d/0x310
[  171.965515][ T9461]  vfs_write+0x5a6/0x9f0
[  171.969792][ T9461]  ksys_write+0xdc/0x1a0
[  171.974062][ T9461]  __x64_sys_write+0x40/0x50
[  171.978677][ T9461]  x64_sys_call+0x27e1/0x3020
[  171.983372][ T9461]  do_syscall_64+0x12c/0x370
[  171.987998][ T9461]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.993906][ T9461] 
[  171.996243][ T9461] read to 0xffff88810cbaa200 of 512 bytes by task 9461 on cpu 1:
[  172.003972][ T9461]  fat_mirror_bhs+0x1df/0x320
[  172.008675][ T9461]  fat_alloc_clusters+0xb48/0xc50
[  172.013731][ T9461]  fat_get_block+0x258/0x5e0
[  172.018356][ T9461]  __block_write_begin_int+0x400/0xf90
[  172.023935][ T9461]  cont_write_begin+0x5fe/0x970
[  172.028823][ T9461]  fat_write_begin+0x4f/0xe0
[  172.033453][ T9461]  generic_perform_write+0x183/0x490
[  172.038754][ T9461]  __generic_file_write_iter+0x9e/0x120
[  172.044324][ T9461]  generic_file_write_iter+0x8d/0x310
[  172.049721][ T9461]  vfs_write+0x5a6/0x9f0
[  172.054011][ T9461]  ksys_write+0xdc/0x1a0
[  172.058291][ T9461]  __x64_sys_write+0x40/0x50
[  172.062910][ T9461]  x64_sys_call+0x27e1/0x3020
[  172.067702][ T9461]  do_syscall_64+0x12c/0x370
[  172.072322][ T9461]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  172.078234][ T9461] 
[  172.080596][ T9461] Reported by Kernel Concurrency Sanitizer on:
[  172.086774][ T9461] CPU: 1 UID: 0 PID: 9461 Comm: syz.0.1318 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  172.097716][ T9461] Tainted: [W]=WARN
[  172.101532][ T9461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  172.111608][ T9461] ==================================================================