last executing test programs:

3m40.099217301s ago: executing program 2 (id=3):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r3 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea0"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
clock_adjtime(0x0, &(0x7f0000000500)={0x7de, 0x6b, 0x0, 0x1000, 0x1, 0x9, 0x7, 0x6, 0x9, 0x0, 0x2000000, 0x7fff, 0x81, 0xfffffffffffffff9, 0x3, 0x6, 0x8000000000000001, 0x4, 0x58fd, 0x3, 0x9, 0x2, 0x6, 0x6, 0xab, 0x5})
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x0, 0xe8, 0x0, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@multicast1, @broadcast, 0xff000000, 0xff, 0x9, 0x12, {@empty, {[0x0, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}}, 0x0, 0x3, 0x3, 0xa90a, 0x6, 0x3ff, 'veth0_vlan\x00', 'wg2\x00', {0xff}, {0xff}, 0x0, 0x71}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@arp={@empty, @loopback, 0x0, 0xffffffff, 0xe, 0x2, {@mac=@local, {[0xff, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@random="8e932bc3db22", {[0x0, 0xff, 0x0, 0xff]}}, 0x0, 0x0, 0x400, 0x4fd9, 0x0, 0x98dc, 'team_slave_1\x00', 'macsec0\x00', {0xff}, {0xff}, 0x0, 0x280}, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @loopback, 0xf, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, @loopback, @multicast1, 0xf}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r4, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r1], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x1, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r4, 0x54985, 0x49060}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x8}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x90}, 0x0)
pipe(&(0x7f0000000180)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
splice(r6, &(0x7f0000000200)=0xfffffffffffff3ff, r6, &(0x7f0000000240)=0x7, 0x56e5, 0x2)
r7 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@newtfilter={0x68, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0xfff3}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x55b1}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0xc0}}}]}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x3, 0x0, 0x8}}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1, 0x4, 0x2, 0xf0, 0x800, r5, 0xe, '\x00', r8, r6, 0x0, 0x4}, 0x50)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$eJzs3T1oLFUYBuB3Zne95t5FrtoI4g+IiAbCtRNsYqMQkBBEBBUiIjZKIsQEu8TKxkJrlVQ2QeyMlpIm2CiCVdQUsRE0WBgstFiZnURisuLPxh1xngdmZ2b3nPnOMPOe3WbYAK11Nclskk6S6SS9JMXpBnfWy9Xj3c2p3cVkMHjsh2LYrt6vnfS7kmQjyQNJdsoiL3STte2nDn7ae+Se11d7d7+7/eTURE/y2OHB/qNH78y/9sHc/WufffHdfJHZ9H93XhevGPFet0hu+jeK/UcU3aZHwF+x8Mr7X1a5vznJXcP891KmvnhvrFy308t9b/9R3ze///zWSY4VuHiDQa/6DtwYAK1TJumnKGeS1NtlOTNT/4b/qnO5fHF55eXp55dXl55reqYCLko/2X/4o0sfXjmT/287df6B/68q/48vbH1dbR91mh4NMBG31asq/9PPrN8b+YfWkX9oL/mH9pJ/aC/5h/aSf2gv+Yf2kn9oL/mH9pJ/aK/T+QcA2mVwqeknkIGmND3/AAAAAAAAAAAAAAAAAAAA521O7S6eLJOq+clbyeFDSbqj6neG/0ecXD98vfxjUTX7TVF3G8vTd4x5gDG91/DT1zd802z9T29vtv76UrLxapJr3e75+684vv/+uRv/5PPes2MW+JuKM/sPPjHZ+mf9stVs/bm95ONq/rk2av4pc8twPXr+6VfXb8z6L/085gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYmF8DAAD//xFQbUc=")
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40)=ANY=[@ANYBLOB="020000000100000000df83000400000000837000100000000000000020"], 0x24, 0x0)
open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, <r9=>0x0}, &(0x7f0000000100)=0xc)
ioctl$NS_GET_OWNER_UID(r6, 0xb704, &(0x7f0000000140)=<r10=>0x0)
lsetxattr$system_posix_acl(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f00000001c0)={{}, {}, [{0x2, 0x1, r9}, {0x2, 0x4, r10}, {0x2, 0x4, r10}], {}, [], {0x10, 0x2}}, 0x3c, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r6, &(0x7f0000000040)={0x10000001})

3m39.822034568s ago: executing program 2 (id=6):
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0xc8d0, &(0x7f0000000180)=ANY=[@ANYRES64=r2], 0x1, 0x314, &(0x7f00000002c0)="$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")
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0)
syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x248, &(0x7f0000000100), 0xfd, 0x4a4, &(0x7f0000001300)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109342, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x7)
r5 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50)
io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0)
pwrite64(r4, &(0x7f0000000140)='2', 0x1, 0x8080c61)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1400000004000000040000002200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="000000000100"/28], 0x50)
listen(0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000900)={r6, &(0x7f00000008c0)}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
listxattr(0x0, 0x0, 0x0)
write$binfmt_script(r3, &(0x7f0000000040), 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x7}, 0x8001, 0x0, 0x400, 0x1, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/diskstats\x00', 0x0, 0x0)

3m36.776935537s ago: executing program 2 (id=23):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000006800011702000000fcffff7f00000000000000010c00020001000000040000000800010001"], 0x2c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)

3m36.603861556s ago: executing program 2 (id=26):
socket$phonet(0x23, 0x2, 0x1)
prlimit64(0xffffffffffffffff, 0x7, 0x0, 0x0)
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f0000000280)={[{@init_itable_val}, {@errors_remount}]}, 0x1, 0x53a, &(0x7f0000002400)="$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")
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
quotactl_fd$Q_QUOTAON(r2, 0xffffffff80000202, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r3 = socket(0xa, 0x2, 0x0)
setsockopt$inet_int(r3, 0x0, 0xb, &(0x7f00000000c0)=0xffeffff8, 0x4)
r4 = perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
getpid()
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=r1, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e000030a08000a00", @ANYBLOB="5678b988d6df229d6d862cb2e68b9fb6d0f9fefeed0abc7c9e58f9db81ae0d9cbb05f54785ef0cd3819775be5947adc0996ae7e3b4435fd5be492a3dbc5e5964dbafbe13f5c4f9d58d990fe4cac5e61135c79dc7a155f13b858a00797f95b02881f3aae18b5d9d94cb7a8c99ecd7def1348930b97f7daf805a24f6fa165aca20fd63ef63f24af0404a618d679a448dacbb0c70e9e89df5200432fca6b611a4"], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800)
sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r6 = syz_open_dev$MSR(&(0x7f0000000240), 0xfffffffffffffffa, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5, 0x400100, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x40, 0xffffffff, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r7)
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f0000000580)=ANY=[@ANYRES64=0x0], 0x1, 0x24a, &(0x7f0000000ac0)="$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")
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5000000010003b0c00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b00010065727370616e00002000028004001200064e20000006000f0004000000060010004e200000"], 0x50}, 0x1, 0x0, 0x0, 0x81}, 0x0)
r8 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21)
getdents(0xffffffffffffffff, &(0x7f00000003c0)=""/117, 0x75)
pwritev2(r8, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x2000, 0x5, 0x3)

3m36.420698357s ago: executing program 2 (id=27):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000bc0), 0x802, 0x0)
write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000c00)={0xe, {0x4, 0x3, 0x1, 0xa7, "8235beb2a14dc993701651ae41d649a5bf77bad04fa19458eecaa97492fc339c3434d8b018f132a0081a658d3da2f70dac55d86e48579ed7ee877ca07916f7d58efc9d61205882f69d268884b4533c92977a990e4837fca6db3e6082a4d89de652d8bdab2a12014290cd99af180a4262413ec20ae77231ad7f39baa45a7f90ce22efb0d95ab78bd9cc9c76343da0db44cb59b8fabf0eee6c1a8ee174e7c85b36a2a752bed9b9a2"}}, 0xb3)
fcntl$notify(r0, 0x402, 0x10)
read(r0, &(0x7f0000001580)=""/147, 0x93)

3m34.823739744s ago: executing program 2 (id=46):
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401)
r1 = fcntl$dupfd(r0, 0x406, r0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r2 = io_uring_setup(0x1f41, &(0x7f0000000040)={0x0, 0x100aeb9, 0xd000, 0x5, 0x60})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x10}, {0xe, 0xffff}}}, 0xfffffc67}, 0x1, 0x0, 0x0, 0x40005}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)
ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0xfffffffe, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x8, 0x3}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)

3m34.783844871s ago: executing program 32 (id=46):
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401)
r1 = fcntl$dupfd(r0, 0x406, r0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r2 = io_uring_setup(0x1f41, &(0x7f0000000040)={0x0, 0x100aeb9, 0xd000, 0x5, 0x60})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x10}, {0xe, 0xffff}}}, 0xfffffc67}, 0x1, 0x0, 0x0, 0x40005}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)
ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0xfffffffe, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x8, 0x3}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)

2m54.239904733s ago: executing program 0 (id=433):
syz_mount_image$ext4(&(0x7f0000000200)='ext3\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000340), 0xff, 0x44d, &(0x7f0000000900)="$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")
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8840, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0xffffffff, 0x1, 0x8, 0xa, "ff00f70000e5020052c4f21c7f000000002000"})
r2 = syz_open_pts(r1, 0x141601)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xffeffffb, 0x2, @perf_config_ext={0x3fffffffc, 0xfffffffffffffffd}, 0x0, 0x3, 0x80, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
semtimedop(0x0, &(0x7f0000000000), 0x2aaaaaaaaaaaadde, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGETKEYCODE(r3, 0x4b4c, &(0x7f0000000000)={0x6f49, 0x1})
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4)
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840)
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x48, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x2, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
write(r2, &(0x7f0000000000)="d5", 0xfffffedf)
getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000100)=ANY=[@ANYBLOB="66696c000000000000000000000000000000000000000600000093fd14b9e90c"], &(0x7f0000000180)=0x2a)
ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)={0x1, 0x6b, 0x0, 0x3, 0x19, "bc1a64c800090d570e001e87068600"})
close_range(r0, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000bc0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="9feb010018000000000000007400000074000000"], 0x0, 0x93, 0x0, 0x1, 0xa}, 0x28)

2m50.569795387s ago: executing program 0 (id=442):
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = eventfd(0x0)
io_setup(0xc, &(0x7f0000000140)=<r2=>0x0)
io_submit(r2, 0x2, &(0x7f0000000040)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xc2, r1, &(0x7f0000000180)='\x00\x00\x00a\x00\x00\x00\x00', 0x8, 0x34}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0xffff, r1, 0x0, 0x0, 0x0, 0x0, 0x1, r1}])
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) (async)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r5=>0x0})
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00')
preadv(r6, &(0x7f0000000700)=[{&(0x7f0000004900)=""/170, 0xaa}], 0x1, 0x17e, 0x9)
pread64(r6, &(0x7f00000000c0)=""/164, 0xa4, 0x2) (async)
pread64(r6, &(0x7f00000000c0)=""/164, 0xa4, 0x2)
r7 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x280202, 0x40, 0x4}, 0x18)
file_setattr(r7, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x200, 0xd, 0x7, 0x3, 0x8}, 0x18, 0x100)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40d, 0x70bd25, 0x4, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5019}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48844}, 0x40)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000fcdbdf25120000001800018014000200766574683000000000000000080000000800090000000000080007"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r4, 0x20, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x7}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x7}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xfc}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x2}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x20)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r3, 0x101, 0x70bd26, 0x25dfdbff, {{}, {0x0, 0x4108}, {0x4c, 0x18, {0x4, @media='eth\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x4004}, 0x8000) (async)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r3, 0x101, 0x70bd26, 0x25dfdbff, {{}, {0x0, 0x4108}, {0x4c, 0x18, {0x4, @media='eth\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x4004}, 0x8000)

2m50.116001973s ago: executing program 0 (id=449):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c000280050001000000000018000280140001800800"], 0x50}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0)

2m50.085871028s ago: executing program 0 (id=450):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x100000000000009, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x8312, 0x32, 0x7, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$inet(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000002fc0)="a6", 0x5dc}], 0x2b}}], 0x5, 0x4040000)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)
mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x1080, 0x0)
perf_event_open(&(0x7f0000000500)={0x3, 0x80, 0x2a, 0x1, 0xfd, 0x0, 0x0, 0x6, 0xf61b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x5, 0x6}, 0xd192, 0x4, 0x43a1bd78, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0xffffffffffffffff, 0x4000000000, 0xffffffffffffffff, 0x8)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x22, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000010000304000300"/20, @ANYRES32=0x0, @ANYBLOB="00000000010000001c00128009000100766c616e000000000c0002800601a6a5520f000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB], 0x4c}}, 0x8000)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000011143dcf0000000000000000080001000000000008004b0013"], 0x28}}, 0x4000080)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x18, 0x0, 0x1)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x193040, 0x0)
r7 = eventfd2(0x800, 0x0)
io_setup(0x81, &(0x7f0000000400)=<r8=>0x0)
io_submit(r8, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x20, 0x1, 0x1, r6, 0x0, 0x0, 0xfffffffffffffbff, 0x0, 0x1, r7}])
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0xff, 0x0, 0x0, 0x0, 0x3}})

2m49.677528606s ago: executing program 0 (id=454):
r0 = io_uring_setup(0x1684, &(0x7f0000000200)={0x0, 0x3a2b, 0x10, 0x4, 0x2})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4084)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r7, {0x10}, {0x36}, {0xe, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x100000b, 0x200000005c831, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @multicast}, 0x0, {0x440, 0x4e24, @multicast1=0xe000cc02}})
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x0, 0x21}, 0x20)

2m49.524102462s ago: executing program 0 (id=457):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a32000000001400048008000140000000000800024000000000"], 0x88}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x58}, 0x1, 0x0, 0x0, 0x8001}, 0x0)

2m49.503239115s ago: executing program 33 (id=457):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a32000000001400048008000140000000000800024000000000"], 0x88}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x58}, 0x1, 0x0, 0x0, 0x8001}, 0x0)

34.962348922s ago: executing program 4 (id=1491):
perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x24048011}, 0x0)

34.899838413s ago: executing program 4 (id=1494):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e21, 0xc, @loopback, 0x400}}, 0x0, 0x0, 0x40, 0x0, "947116a1a606754bab1cb61212bb07a2bd205f00f81bef965a071f0d1aadd97b9640d9a0cd9ea71a5e9aec7f03d4406a7710c42cb5e754b089928abcd7589d209bc45b4064028eb7fafaa8b125736e00"}, 0xd8)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000190001090000000024000000021800000002fd010000000008000100ac1414000800050064010100100016800c0001000308010802000000060015"], 0x44}}, 0x0)

34.823326385s ago: executing program 4 (id=1497):
r0 = socket$packet(0x11, 0x2, 0x300)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
bind$packet(r0, &(0x7f00000000c0)={0x11, 0x18, r2, 0x1, 0x84, 0x6, @random="fbb6e9de22c1"}, 0x14)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c)

34.811835817s ago: executing program 4 (id=1499):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0/../file0\x00', 0x20000, 0x100)
move_mount(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="0000000d03000a00000014"], 0x340a)

34.647092244s ago: executing program 4 (id=1503):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x106)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000c80)={0x24, 0x1, 0x4, 0x3, 0x0, 0x0, {0x5}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x44)
sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041)
close(r1)
ioprio_set$uid(0x3, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x4)
write(r3, &(0x7f0000005c00)='\'\x00\x00\x00', 0x4)

34.535041264s ago: executing program 4 (id=1505):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x10, @empty, 0x4}], 0x1c)
sendto$inet6(r0, &(0x7f0000000600)='e', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xe35a}, 0x1c)
readv(r0, &(0x7f0000003f00)=[{&(0x7f0000000280)=""/59, 0x3b}], 0x1)

34.483277392s ago: executing program 34 (id=1505):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x10, @empty, 0x4}], 0x1c)
sendto$inet6(r0, &(0x7f0000000600)='e', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xe35a}, 0x1c)
readv(r0, &(0x7f0000003f00)=[{&(0x7f0000000280)=""/59, 0x3b}], 0x1)

28.99834188s ago: executing program 7 (id=1534):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$rds(0x15, 0x5, 0x0)
r1 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x6, 0x2c3, &(0x7f0000000900)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file2\x00', 0x0, 0x160)
open_by_handle_at(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='K\x00\x00\x00r', @ANYRES64=r1, @ANYRES32=r2], 0x531500)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000000)={0x8, 'team_slave_0\x00', {'ip6_vti0\x00'}, 0xd})
close(0x3)
r3 = socket$unix(0x1, 0x2, 0x0)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000054)
r5 = socket(0x10, 0x3, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', <r8=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x70bd27, 0x5, {0x2, 0x0, 0x0, 0x0, 0xfc, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4080000}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000001000000000000000063aaec9f0001000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x6}, 0x94)
sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xa4}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit={0x95, 0x0, 0x700}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x70)
close(r3)
listen(r4, 0x0)
r9 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r9, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x21, 0x0)

28.711922317s ago: executing program 7 (id=1536):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) (async)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x403, 0x1ffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x12080, 0x42}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r2}, @IFLA_GTP_FD0={0x8, 0x1, @udp=r3}]}}}]}, 0x40}, 0x1, 0xba01}, 0x0)
add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) (async)
request_key(&(0x7f0000000d40)='keyring\x00', &(0x7f0000000d80)={'syz', 0x0}, &(0x7f0000000dc0)='\x01\x02\x03\x04\x05\x06\a\b\t\n\v\f\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&\'()*+,-./0123456789:;<=>?@', 0x0)
listen(r0, 0x0)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r4, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) (async)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000280)="02042c08ec074802010e0200c52cf7c20675e005b02f0800eb", 0x19, 0x800, 0x0, 0x0) (async, rerun: 64)
ioprio_set$pid(0x2, 0x0, 0x0) (rerun: 64)
r5 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0x8e382)
sendfile(r5, r5, 0x0, 0x24002de8) (async, rerun: 64)
recvmmsg(r4, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/77, 0x4d}], 0x1}, 0x5}], 0x40000, 0x0, 0x0) (async, rerun: 64)
r6 = getpid() (async, rerun: 32)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}) (rerun: 32)
kcmp(r6, r6, 0x0, r8, r8) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000004000000020000000000001104000000ee682e4e000000000000000200000000020000000000001202000000020000000000000e0300000000000000000061"], 0x0, 0x54}, 0x28) (async)
shutdown(r4, 0x0)
write(r4, &(0x7f0000000080)="91", 0x1)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYRES64=r7], 0x14}, 0x1, 0x0, 0x0, 0x20004050}, 0xeb0f05f511a98c15) (async, rerun: 32)
r10 = socket$kcm(0x21, 0x2, 0x2) (async, rerun: 32)
r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs2/custom1\x00', 0x800, 0x0)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r11, 0xc018620c, &(0x7f0000000300))
sendmsg$kcm(r10, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) (async)
sendmsg$kcm(r10, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @rand_addr=0x64010100}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20000000)

28.628842342s ago: executing program 7 (id=1537):
quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000280)={0x7, 0xef9, 0x3, 0x6, 0x400, 0x6, 0x20000001000, 0xa, 0xfffffffd})
socket$inet6_tcp(0xa, 0x1, 0x0)

28.45445599s ago: executing program 7 (id=1538):
syz_io_uring_setup(0x621e, &(0x7f0000000180)={0x0, 0x86e1, 0x8, 0x8, 0x160}, &(0x7f0000010080), 0x0, &(0x7f0000000000))
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000980)={[{@jqfmt_vfsv1}, {}, {@barrier_val}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@acl}, {@noinit_itable}]}, 0xfc, 0x572, &(0x7f0000003780)="$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")
creat(&(0x7f0000000380)='./bus\x00', 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x84b, 0x0, 0x0, 0x1a, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})

27.652399245s ago: executing program 7 (id=1539):
mknod$loop(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, 0x0)
link(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

27.232105015s ago: executing program 7 (id=1540):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000010027bd70010000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000025000008001b000000000024001a800800028004000180180002801400018008001200070000000000"], 0x4c}, 0x1, 0x0, 0x0, 0xc0}, 0x40)

27.207736909s ago: executing program 35 (id=1540):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000010027bd70010000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000025000008001b000000000024001a800800028004000180180002801400018008001200070000000000"], 0x4c}, 0x1, 0x0, 0x0, 0xc0}, 0x40)

7.037084823s ago: executing program 8 (id=1735):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000001880)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@fwd={0x2}]}, {0x0, [0x5f, 0x2e]}}, 0x0, 0x28, 0x0, 0x1, 0x7fffffff, 0x0, @void, @value=0xfffff}, 0x28)

6.944028139s ago: executing program 8 (id=1736):
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f00000002c0)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
timer_getoverrun(r0)
unshare(0x2040400)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
semop(0x0, 0x0, 0x0)

6.588080249s ago: executing program 8 (id=1749):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000000800000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="12000000040000"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20)
sendmmsg$inet6(r0, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="b0", 0x1}], 0x1}}], 0x1, 0x10000041)
sendmmsg$sock(r0, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)='B', 0x1}], 0x1}}], 0x1, 0x4048080)

6.45997148s ago: executing program 8 (id=1750):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x10000000, 0x4, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0x8, 0xc, 0xa708, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1a, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x81}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x2000300, 0xe, 0xfffffd83, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendto$packet(r0, &(0x7f0000000340)="05031400d3fc140000004788031c09102c28", 0xffffffffffffff97, 0x24004014, &(0x7f0000000080)={0x11, 0xf6, r1, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x4efc50a95fe7df4d}}, 0x14)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
getresgid(&(0x7f00000001c0), &(0x7f00000002c0), &(0x7f0000000300))
r4 = fsopen(&(0x7f0000000040)='ext2\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004000, 0x0, 0x0)

6.093955081s ago: executing program 8 (id=1758):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setuid(0xee00)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0x8001}, {0x6}]}, 0x10)
r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd)
r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r2)
r4 = add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f0000000240)="0000000000000002ff69000000000001000000180000000600861f4104bfeacdd5a9007d16dcdc2850b536f0", 0x2c, r3)
io_setup(0x4, &(0x7f00000014c0)=<r5=>0x0)
r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00')
io_submit(r5, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0xfffe, r6, 0x0}])
r7 = eventfd2(0xe0, 0x80801)
r8 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00')
write$binfmt_format(r8, 0x0, 0x0)
r9 = socket(0x10, 0x3, 0x0)
r10 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
sendmsg$nl_route_sched(r9, 0x0, 0x0)
r11 = eventfd2(0x8000, 0x80800)
io_submit(r5, 0x4, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x7, r0, &(0x7f0000000080)="f7177dbc6e77de3d15bb0a16849223eac6bc3e43b02ecc3d41", 0x19, 0x9, 0x0, 0x1, r7}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x2, 0x7fff, r0, &(0x7f0000000340)="648371b4de15fa8e99a8fc45c8f3c0a82b5e3c953bad5e200a11882d22a87a98df65bbe7f76326d2d4b4a572034530baceb66562eebfc3b3c21e183cb1b28232d6987344918f838307b3fc158ec632cadde7f2ea13d1300df18b2766e17cf87ecdd2123d98256bf8a7b2e96fe6d8a038724994678c31c204e5759191165d9b7e1bd1d0622955f3a40c708a559c683b4185f5abd3c524b6bd7126878fc99824fd80a9677b5e4e1458b571c241def7ba95311cc80df35c9f022d6a3d280966df54511e604b845797dc1d6840ca1c14", 0xce, 0x8, 0x0, 0x1, r8}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7, 0x8, r9, &(0x7f0000000480)="208238ee80f0ec0160482dce61082605546650d56198898a5562a8b5a99f497f4cfeb5b3bee2a8f7004d7932a0a30025fd1fcb0b062e774e248886821c178e81a19c616114786b14f3cc489811e471aa44f2dab91d8a68f6b21f22eb49aec15badc8941d8b737450b16ad1d0ed3f7e29963917fb792d0ffb267a1792badaa5802c34ade53f0b51e6690860abbd7416b74f2211ca5cdead7553537e366bd3edcf467e08236fa0", 0xa6, 0x7, 0x0, 0x2, r11}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x3, 0x6, r1, &(0x7f0000000580)="726495f8aeeeabe91ae28091ab90bd964df8dfc968d7565678a54aa4c72b9b51ca66b55e98", 0x25, 0x101, 0x0, 0x1}])
syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x3810744, &(0x7f00000000c0)={[{@nombcache}, {@inlinecrypt}, {@usrquota}, {@jqfmt_vfsv1}, {@jqfmt_vfsv0}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x844d}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@i_version}]}, 0x1, 0x46b, &(0x7f0000000b00)="$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")
keyctl$instantiate(0xc, r4, &(0x7f0000000040)=@encrypted_update={'update ', 'default', 0x20, 'trusted:', '%'}, 0x19, r3)

5.950566765s ago: executing program 8 (id=1764):
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x1, 0x0, 0x0, 0x0, 0x0, 0x9})
r0 = socket$inet6(0xa, 0x2, 0x3a)
sendmmsg$inet6(r0, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x8, 0x0, @rand_addr=' \x01\x00', 0x401}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000040)="8000102e7577d401", 0x8}], 0x1, &(0x7f00000002c0)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast2}}}], 0x28}}], 0x1, 0x4c0c0)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x15, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084)
io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x10, 0xa, 0x20002f7})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f0000000200)={0x3, &(0x7f00000001c0)=[{0x7, 0xc, 0x1, 0xa76d669c}, {0x74, 0x3, 0x57, 0x6}, {0x6, 0xfd, 0xbe, 0x7f}]})
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r2, 0x6, 0x1, 0x0, &(0x7f0000000180))
syz_io_uring_setup(0xa6a, 0x0, &(0x7f0000001340), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = gettid()
r6 = getpgrp(r5)
setpgid(r6, r1)
connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socket$nl_sock_diag(0x10, 0x3, 0x4)
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x90404, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x2}, 0x1101, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xfd, 0x1bf, &(0x7f0000000680)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)

3.69078788s ago: executing program 5 (id=1781):
socket$inet6_tcp(0xa, 0x1, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = getpid()
r4 = syz_pidfd_open(r3, 0x0)
setns(r4, 0x24020000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r5=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000180)={'veth0_virt_wifi\x00', &(0x7f00000000c0)=@ethtool_perm_addr={0x4b, 0x2e, "04a6aaed25476b145c4a935fa54f323c1829a00700e5cd0516f25e0000794168f19253c24ec8da005f19a83852a3"}})
syz_clone(0x498144ee5762a149, 0x0, 0x0, 0x0, 0x0, 0x0)

3.163904557s ago: executing program 3 (id=1796):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$team(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', <r4=>0x0}) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$fou(&(0x7f00000002c0), r1)
sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x60, r3, 0x1, 0x70bd27, 0x25dfdc01, {}, [{{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r2}}}]}}]}, 0x60}, 0x1, 0x400000000000000}, 0x40810) (async)
sendmsg$sock(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)=[{0x0}, {&(0x7f0000000600)="d9", 0x1}], 0x2}, 0x404c010) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$packet(0x11, 0x3, 0x300) (async)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) (async)
ioperm(0x2, 0xf, 0x80006) (async, rerun: 64)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) (async, rerun: 64)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) (async)
socket$inet_mptcp(0x2, 0x1, 0x106) (async, rerun: 32)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async, rerun: 32)
unshare(0x26020480) (async)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r7, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) (async, rerun: 64)
listen(r7, 0x5) (async, rerun: 64)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r8, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
close_range(r7, 0xffffffffffffffff, 0x0) (async)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async, rerun: 64)
sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x0, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) (async, rerun: 64)
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r5, &(0x7f0000000f00)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000640)={0x880, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x13}}}}, [@NL80211_ATTR_NAN_FUNC={0x3dc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x3c0, 0xd, 0x0, 0x1, [{0xe6, 0x0, "03c64c2d264e4cd123152040f5f4047deccbc486a434d4d3a4d6a1c1d60c53c773879b6aef9dd17f75ab0bd3d110ce03cd5fad1b4319bd0e63b32ad5c7a94c7ccf32628f420527c44c399cc5f0862a01c57a28eeb8fca203fb0f75ab10455d531f83d1bddd602cff0c46311801930122d93a74c8462e8c1a8c2a0892d051a67198452895afe987fb21fb2ba89e87f91421637523be90301aef81c647fd6d3b4c84933a48429a6eac26b5ec1a4f9bcd71b80848bc687808da35473a8890de17920f735c3d35acd30db521e7a799ed331c5980e2ec3f70aa953c9d9a25e874896ac816"}, {0xb9, 0x0, "6defe34a6df6348f0b7a4f623a539cbd17df7e0cf771c3ac1b17b75badd9403b11318a90185561dac5b2ceabe7ad4bb587c5336ede7ead6a81db2544bc431374fdbad1306d2ecb4c15949b72784ce99c03972de7da5f1e571b9eee6fa123dc4632d8c8cfa8628d8c00a4112779def8ed711e96ef789ed042adec751954d7026cc6dc8766813f66c2e4a235523a4e6e44cec2098ebccc996fa31247c1dd044d1bb28015d4b40e92c56d6695f96e90a65251b5356e7e"}, {0xec, 0x0, "daa15534ec64a7010b016ebbf658aeb25dc6d86886946e962ee13725a89300ffca8173e66ac6bb64cbab39422df7b97bed3a7b2ec91fc66749c1975c0b520fa6ede18ab5b2a9d50849affa64082804bd41c7f10419a67209948d80d77027aa084346d1f859cba4cd5f007e67304c3419beffa97ff8f1b153e3f9da5489c3501c674ccbe8f8134c75bf80c4a32ba234806f6744d08fe119a6ca18c660ea21507a94cb8bd9ae79499332cf4891d4e5bb7dd31840b95c1fe79fc5333de4c5708fc7f03e4dc72bc910863ed7e46da34e2f78b0fcbd89acd6109c7e483c8d932e356c3da042d81fedba79"}, {0x9f, 0x0, "9d3c03bf6305f7c25c7f66abeb9c5d5a0e95a0c9253b73b86b9f8b52fb5f0595246ebc11c95a51d6ef5fb676b711b4194a7831841aa4389586a0b5c846e3cb26ca6d3b7393c8a2728552e56d5e7c8be89e8ffea483ea64b6c440c293f1601e562073731b11a01ae6cd9857cf90ad689f54ad98f8890a8b73c5cc27f6afdc1ba5e1e0b25000ae4a003300ec08e8905c7ec35ba876fc34565306a6d2"}, {0x8b, 0x0, "a61dd1ff548c3b928d50e90fe568392d956b4b3a0dc8ef86fdd0fcf1380ffbf0f69ba0dccf1e2797c559c79f29410c3eeffc72d981f181f56e50722fde889ebf8a225e72d8eb987db38f44f51d5592d8242a54bd6d3fd1fea990e2cceb7607daa8c2d1deb6ed2b752385e760a93b7e25b63b2b726186e13df4354735534d2ae95bb2a6c7420334"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x5}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "cce61cf8f678"}]}, @NL80211_ATTR_NAN_FUNC={0x45c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_RX_MATCH_FILTER={0x428, 0xd, 0x0, 0x1, [{0xae, 0x0, "4385137d3ac9ddb5fc519716be250668ba216c0e50560525f7121390b7087a7631125c83c799084d1571458d7f8ecea4583d4ca4c04d060a5ed0f29120e25bfa092dd485afa5e1aa34c4e71910bc98cc97422bbd54373f49e2f12bfe751a6ef094d2e89e19974d0ab389093ee568959999094970623153ac122b11e195f806658a710f80229afedfe6adc777f23c93b9c81e9071587209bb718201ea72a7c1346b0a3212610fa789ab3d"}, {0x2c, 0x0, "4fc4b9c181350da599bb023dcfb218505bfb934c60292b22579c69909ca5beb6b7b6a93a1063e034"}, {0x4}, {0x7f, 0x0, "7238129a7923a3e5150a2ffe71afc80c5f383d7e77bbc1e094ef4d33ce394a2e58868aa7ac692a4ec69688ff37dc1786a352af1b77cc9d18024859723d8cb153577fc71de6f6ce4a3386ccfb5693cc719017f2a8355519176fc21c7dde45455b6af265ee397f8b2502088817c1972441ecf9fb501de0553dfc675a"}, {0x2e, 0x0, "13cd135ce335e3cccd56e1c3b6dc01e1f4f13ebe8d0b691c53a4f00c7ebf642a4771e9c40fc94b361cb7"}, {0x100, 0x0, "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"}, {0xa6, 0x0, "77eb3237cb1a281b29add767025d292ae9ec3d5a44ad8113c6ae088443c0c1ddcc16ce4675fefd72e3a54e6f5e090ecfa89deb520689942fe7765ebb07964c417e9d56206a4c6b0bb86487bcd3e89fb4a28bb1d655a4b2acef328364f5b84e7471690eec0a1cc490921fa7b7138603cd0a167207454783d33db559500cdc795fa7e3271e0642877a6cef1806471fab9a8205898c55c119b172d897ca623cd5e6fbd3"}, {0xe9, 0x0, "f21a82e4ace2a2ff343db31be3457472d31b7e6558a54e986ecf483fd8f07af9bf6f05004ef394f3bac4dc8915cc0536cae01714bdc778f27ffb0385aa91cbeae0ef2f85620b571eb3a75e3f04613054607cac59637d099e9e2b301fee2de1f28f9c7d5d02c3207e8195dcd96bb656402b24b1c599ff269e1623e43c5b3b9aeb7d7a204e6b2648ebd5aae073b27c59cbcac8c468054c5feb02c1e75c785d6fa6e7d4d782dd7a6cc094b2676265eab68387c33d0be9dccffd064257eeb423a48347a4b7dd778e905aa7ef809fc3078ad46b69e710c1311046029fc5cff1e8eb24ba4c902756"}]}, @NL80211_NAN_FUNC_SRF={0x14, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_MAC_ADDRS={0x10, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}]}]}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x7}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "51b91ecd9c75"}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0xd}]}, @NL80211_ATTR_NAN_FUNC={0x14, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x14, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x6d}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x18}]}]}, 0x880}, 0x1, 0x0, 0x0, 0x8010}, 0x4000041)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x10)

1.397458689s ago: executing program 3 (id=1798):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000000800000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="12000000040000000800"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20)
sendmmsg$inet6(r0, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="b0", 0x1}], 0x1}}], 0x1, 0x10000041)
sendmmsg$sock(r0, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)='B', 0x1}], 0x1}}], 0x1, 0x4048080)

1.296746916s ago: executing program 6 (id=1800):
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x0, 0x5, 0xfffffffd})
prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000001880)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@fwd={0x2}]}}, 0x0, 0x26, 0x0, 0x1, 0x7fffffff}, 0x28)

1.20799482s ago: executing program 3 (id=1801):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setuid(0xee00)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0x8001}, {0x6}]}, 0x10)
r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd)
r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r2)
r4 = add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f0000000240)="0000000000000002ff69000000000001000000180000000600861f4104bfeacdd5a9007d16dcdc2850b536f0", 0x2c, r3)
io_setup(0x4, &(0x7f00000014c0)=<r5=>0x0)
r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00')
io_submit(r5, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0xfffe, r6, 0x0}])
r7 = eventfd2(0xe0, 0x80801)
r8 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00')
write$binfmt_format(r8, 0x0, 0x0)
r9 = socket(0x10, 0x3, 0x0)
r10 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r11 = eventfd2(0x8000, 0x80800)
io_submit(r5, 0x4, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x7, r0, &(0x7f0000000080)="f7177dbc6e77de3d15bb0a16849223eac6bc3e43b02ecc3d41", 0x19, 0x9, 0x0, 0x1, r7}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x2, 0x7fff, r0, &(0x7f0000000340)="648371b4de15fa8e99a8fc45c8f3c0a82b5e3c953bad5e200a11882d22a87a98df65bbe7f76326d2d4b4a572034530baceb66562eebfc3b3c21e183cb1b28232d6987344918f838307b3fc158ec632cadde7f2ea13d1300df18b2766e17cf87ecdd2123d98256bf8a7b2e96fe6d8a038724994678c31c204e5759191165d9b7e1bd1d0622955f3a40c708a559c683b4185f5abd3c524b6bd7126878fc99824fd80a9677b5e4e1458b571c241def7ba95311cc80df35c9f022d6a3d280966df54511e604b845797dc1d6840ca1c14", 0xce, 0x8, 0x0, 0x1, r8}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7, 0x8, r9, &(0x7f0000000480)="208238ee80f0ec0160482dce61082605546650d56198898a5562a8b5a99f497f4cfeb5b3bee2a8f7004d7932a0a30025fd1fcb0b062e774e248886821c178e81a19c616114786b14f3cc489811e471aa44f2dab91d8a68f6b21f22eb49aec15badc8941d8b737450b16ad1d0ed3f7e29963917fb792d0ffb267a1792badaa5802c34ade53f0b51e6690860abbd7416b74f2211ca5cdead7553537e366bd3edcf467e08236fa0", 0xa6, 0x7, 0x0, 0x2, r11}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x3, 0x6, r1, &(0x7f0000000580)="726495f8aeeeabe91ae28091ab90bd964df8dfc968d7565678a54aa4c72b9b51ca66b55e98", 0x25, 0x101, 0x0, 0x1}])
syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x3810744, &(0x7f00000000c0)={[{@nombcache}, {@inlinecrypt}, {@usrquota}, {@jqfmt_vfsv1}, {@jqfmt_vfsv0}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x844d}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@i_version}]}, 0x1, 0x46b, &(0x7f0000000b00)="$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")
keyctl$instantiate(0xc, r4, &(0x7f0000000040)=@encrypted_update={'update ', 'default', 0x20, 'trusted:', '%'}, 0x19, r3)

1.20760245s ago: executing program 6 (id=1802):
r0 = socket(0x40000000015, 0x5, 0x9)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback, 0x3}, 0x1c)
r1 = open(&(0x7f0000001200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x400103842, 0x2)
mmap(&(0x7f0000474000/0x4000)=nil, 0x4000, 0x6800006, 0x92, r1, 0x205fc000)
r2 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x566, &(0x7f00000015c0)="$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")
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
getsockopt$bt_hci(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000000)=[{r3}, {r3, 0x40}], 0x2, 0x5e5f)
shutdown(r4, 0x1)
unshare(0x26020480)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r5, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
dup2(r5, r6)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c)
sendto$inet6(r6, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c)
sendmsg$inet6(r6, &(0x7f0000000240)={&(0x7f0000000180)={0xa, 0x4e21, 0x1000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x461}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000400)="cf", 0x1}], 0x1}, 0x4040090)
r7 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000140)=@assoc_value={<r8=>0x0}, &(0x7f0000000300)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r6, 0x84, 0x19, &(0x7f0000000340)={r8, 0x7}, 0x8)
getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=r8, &(0x7f0000000140)=0x4)
r9 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
preadv(r9, &(0x7f0000000000)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1, 0x300, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x3, @loopback={0xe0}, 0xfffffffc}, 0x1c)

1.207463511s ago: executing program 5 (id=1803):
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (fail_nth: 3)

978.924818ms ago: executing program 1 (id=1805):
pipe(0x0)
r0 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x2)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)

951.454893ms ago: executing program 1 (id=1806):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c000000"], 0x0, 0x26}, 0x28)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, <r0=>0x0}, 0x8)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000600006000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
fsync(0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x10, 0xf, &(0x7f0000000900)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000000080)='GPL\x00', 0x2, 0x41, &(0x7f0000000300)=""/65, 0x41100, 0x12, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x4, 0x4}, 0x8, 0x10, &(0x7f00000006c0)={0x1, 0x5, 0xff, 0x8}, 0x10, r0, r1, 0x4, 0x0, &(0x7f0000000880)=[{0x3, 0x1, 0xb, 0xc}, {0x3, 0x2, 0xa, 0x2}, {0x2, 0x1, 0xb}, {0x1, 0x0, 0xe, 0x3}], 0x10, 0xf815}, 0x94)

900.336512ms ago: executing program 5 (id=1807):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000007000000060000000300000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000a4ffedd1685a575900cfa3401bdc4fecf6b5598aef31b07e654c6ed0175a433e1d3bd8516ae495c2ee042b497822170b0f086be4c187d9fa9e67142de56db200d1ed10485e2511ee7032ba9849af1b02f6cdd4e0c85e8e2ad12025ac62cfeedadbaeb69689fc7e6cf91f183990c9ba100ecac5545b3215317429cdc0ee69cd08b4bb4b75b1f782d1bf1fa03b5f56bbf54ac0f3f128853344a4126e48c9a45129d0d502ce520126ac15cd794d3b8e8c09d6afdf8b33f2"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xfffffffd, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000640)={r4, r1, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6fc}}, 0x40)
syz_emit_ethernet(0xfd02, &(0x7f0000000000)={@random="e904a200", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0x4}}}}}}}, 0x0)

899.820171ms ago: executing program 3 (id=1808):
getrandom(&(0x7f0000000040)=""/43, 0x2b, 0x1)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
r1 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080)
setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000100), 0x4)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x6, 0x5, 0x2, 0x1, 0x81, 0x80000001, 0x4, 0x9}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x55}, 0xc010)
sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000e00), 0x140, 0x0)
ioctl$sock_inet_tcp_SIOCINQ(r5, 0x541b, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfb, {0x60, 0x0, 0x0, r7, {}, {0xffe0, 0xa}, {0xfff3, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0xc010)

811.716996ms ago: executing program 1 (id=1809):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(r0, &(0x7f00000011c0)={0xfc, {"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", 0x1000}}, 0xffbc)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x20, 0x3) (async)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x20, 0x3)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
setreuid(0xee01, 0xee01)
socket(0x11, 0x3, 0x10001)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x24, 0x1, 0x2, 0x0, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_EXPECT_MASTER={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x44005}, 0x4001)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newtaction={0x68, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x0, 0x6, 0x3}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xef}]}, {0x4}, {0xfffffffffffffd6c, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x68}}, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newtaction={0x68, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x0, 0x6, 0x3}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xef}]}, {0x4}, {0xfffffffffffffd6c, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x68}}, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xa98, 0x3}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xa98, 0x3}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$inet_udp(0x2, 0x2, 0x0) (async)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000c80)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1e0001000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000007f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414bb00"/1284], 0x590)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) (async)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
socket$nl_generic(0x10, 0x3, 0x10)
memfd_secret(0x0) (async)
r5 = memfd_secret(0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r5, 0x0)
ftruncate(r5, 0x51a9497)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x24008080)
socket(0x400000000010, 0x3, 0x0) (async)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10)
write(r7, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe000000000200000800040001000000", 0x24)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0xe740f48209a4d873}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0xc}, @TCA_FQ_CODEL_ECN={0x8}]}}]}, 0x48}}, 0x4c840) (async)
sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0xe740f48209a4d873}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0xc}, @TCA_FQ_CODEL_ECN={0x8}]}}]}, 0x48}}, 0x4c840)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)

750.926196ms ago: executing program 5 (id=1810):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="900000009c20db0ff896918a78c038f8d4170a2b3f3a3f092d0f3c52c93c514fce7761683ea88847cdcf7e47d59b446365e040ff3ef7f2ab045b96092d7d9433210c8624622b32ed5116b59b0bd83dc376368157df19b18a731ef7354b350f5ce5dcf6275b41babcc990fbb52dceabb3e7abe8bd1d3ef47a146edcd84fd682164e77adc15d695940cbf917b43dd4d407c2f03962874bba8e15bf", @ANYRES16=r1, @ANYBLOB="01002dbd7000fbdbdf250100000014000200776731000000000000000000000000006800088064000080200004000a004e2300000050fe88000000000000000000000000fc01020000001400040002004c23640101020000000000000000080003000200000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922"], 0x90}, 0x1, 0x0, 0x0, 0x20d0}, 0x44000)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x301142, 0x0)
close(r3)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5)
sendmsg$NFC_CMD_DEV_UP(r5, 0x0, 0x4008054)
sendmsg$NFC_CMD_LLC_GET_PARAMS(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r6, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040041}, 0x4800)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast})
write$cgroup_devices(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="1bd4000c"], 0xffdd)

746.765967ms ago: executing program 6 (id=1811):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00'})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'})
r1 = socket$inet6(0xa, 0x4, 0x7ffd)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
r5 = getpid()
r6 = syz_pidfd_open(r5, 0x0)
fcntl$F_GET_FILE_RW_HINT(r4, 0x40d, &(0x7f00000001c0))
setns(r6, 0x24020000)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000fedbdf25030000005800018044000400200001000a004e220000000500000000000000000040ffffe000000102000000200002000a00000000000000ff0100000000000000000000000000019c0000000d0001007564703a73"], 0x6c}, 0x1, 0x0, 0x0, 0x20000014}, 0x0)
ioctl$OCFS2_IOC_UNRESVSP(r7, 0x40305829, &(0x7f00000000c0)={0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x1fc, 0x3})

580.121174ms ago: executing program 3 (id=1812):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000000800000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="120000000400000008000000"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20)
sendmmsg$inet6(r0, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="b0", 0x1}], 0x1}}], 0x1, 0x10000041)
sendmmsg$sock(r0, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)='B', 0x1}], 0x1}}], 0x1, 0x4048080)

545.21407ms ago: executing program 3 (id=1813):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000bc0)={0x2, {{0x2, 0x4e21, @multicast2}}, 0x0, 0xb, [{{0x2, 0x0, @empty}}, {{0x2, 0x4e20, @multicast1}}, {{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3e}}}, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x4e22, @broadcast}}, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x4622, @empty}}, {{0x2, 0x4e1f, @empty}}, {{0x2, 0x4e22, @remote}}, {{0x2, 0x5e22, @multicast1}}]}, 0x610)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x2, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x8)
syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0)
mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r1, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00004cb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f000067c000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000778000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ba1000/0x1000)=nil, &(0x7f0000eb4000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000dc1000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
waitid(0x0, 0x0, &(0x7f0000002b80), 0x41000004, &(0x7f0000000040))
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000002500)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB, @ANYRES16], 0x8, 0x2fc, &(0x7f0000003680)="$eJzs3E1PE1sYwPGnL5S2BMri5t5cE8OJbnQzgepaaQwkxiaSSo0vickAU206tqTTYGqM6Mqt8UO4ICzZkShfgI073bhxx8bEhSyMNZ0XWspAtS0U4f9LSB/OOc/0nA4lz2k6s3Xn9eNCztJyekWCUSUBEZFtkVEJiivgNIrdEpCINHshF4e+fTx76+69G6l0eiqj1HRq9lJSKTUy9u7Js5g7bH1QNkcfbH1Nftn8d/P/rZ+zj/KWyluqWKooXc2VPlf0OdNQC3mroCk1Yxq6Zah80TLKTn/J6c+ZpcXFqtKLC8PxxbJhWUovVlXBqKpKSVXKVRV6qOeLStM0NRwXtJNdyWT0VIfJ8z2eDA5JuZzSQyIS29OTXenLhAAAQF+11v9BUa31v1f+d1L/r57bqAzdXhtx6//1iF/9f/mTc6xd9X9URHzrf+/5fet//c/q/70V0enSVf2P42Essqcp0AjrneWUHnffv7aX91fH7YD6HwAAAAAAAAAAAAAAAAAAAACAv8F2rZao1WoJ79H7GRSRqIh4v/ukhkTkah+mjB7q4vzjBLAv3IumpzIqPCJivlrKLmWdR3fAhoiYYsi4JOSH/ffgqsfelUeqblTem8tu/vJSNmT3pHKSt/MnJDEgrfm12vT19NSEcuzOH5B4c35SEvKPf37SNz8iF8435WuSkA/zUhJTFux5NPKfTyh17Wa6JT9mjwMAAAAA4CTQ1A7f/bum7dfv5O/sr1s/Hwg19tfjvvvzsJwJ93ftAAAAAACcFlb1aUE3TaN8QBCT9mM6D8KHdGRvhb+b5X2X4fBWekDgPfmurqjb2POXJdD0snR4coPSSdZYfTWq21V4HxvtN0ZmJo/+DNrBf2/efu/dAa+sRdustPMgdPD7YuDI/gEBAAAAODKNot9rmezvhAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOIXa3ypMJNDl/f/6vUYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADguPgVAAD//6q5AmU=")
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
r3 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108)
r4 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0xfe, @remote}}}, 0x108)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101})
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x12)
sendfile(r1, r0, &(0x7f0000000100)=0x8000000000000000, 0x0)
r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341)
pidfd_send_signal(0xffffffffffffffff, 0xc, 0x0, 0x8000000)
ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)

500.300797ms ago: executing program 1 (id=1814):
r0 = socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) (async, rerun: 64)
r1 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64)
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async)
writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) (async, rerun: 32)
r2 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32)
r3 = open(&(0x7f0000000140)='./file0\x00', 0x101020, 0x20) (async)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000740)={<r4=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000180)={r4, 0x2, r2, 0x8e9, 0x80000})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000040000000000000003000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000006c00000095", @ANYRES16=0x0, @ANYRES8, @ANYRESOCT=r0, @ANYRES64=r1], &(0x7f0000000180)='syzkaller\x00', 0x10006, 0x0, 0x0, 0x40f00, 0x38, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94)

412.129502ms ago: executing program 1 (id=1815):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0)
sendto(0xffffffffffffffff, &(0x7f0000000140)="1200", 0x2, 0x20000090, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000140)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r0, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000000)) (fail_nth: 1)

410.917422ms ago: executing program 5 (id=1816):
pipe(0x0)
r0 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x2)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)

409.802062ms ago: executing program 6 (id=1817):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0)
sendto(0xffffffffffffffff, &(0x7f0000000140)="1200", 0x2, 0x20000090, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000140)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r0, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000000))

353.377912ms ago: executing program 5 (id=1818):
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x2000)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xfe, 0x0, 0x7fff7ffc}]})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6(0xa, 0x80000, 0xe74b)
setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000001000030400000000ffdbdf2500000000", @ANYRES32=0x0, @ANYRES8=r2, @ANYRES32=r2, @ANYBLOB="8100000000000000ff41"], 0x38}, 0x1, 0xba01, 0x0, 0x4008850}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f00000001c0)={[{@debug}, {@delalloc}, {@inlinecrypt}, {@test_dummy_encryption}, {@errors_continue}, {@barrier}, {@delalloc}, {@nombcache}]}, 0x1, 0xbe0, &(0x7f0000004a80)="$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")
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, 0x0, 0x4000)
r3 = socket(0x80000000000000a, 0x2, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000aba000/0x3000)=nil, &(0x7f00000fd000/0x1000)=nil, &(0x7f000050b000/0x2000)=nil, &(0x7f000011a000/0x4000)=nil, &(0x7f000047a000/0x1000)=nil, &(0x7f0000454000/0x2000)=nil, &(0x7f000033f000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00004e7000/0x2000)=nil, &(0x7f00005a4000/0x1000)=nil, &(0x7f0000b23000/0x3000)=nil, &(0x7f0000000380)="1b2761af75b7e06ecd86aaa1581c8e93cb29e3d2165f1c902d22333e9553cc980afcaf5c2249d7b245446fe47d1776f8410f2e326dbe2ac1657d6ae6c6b320b5259dc73e7a8a8d1408719cd278e2298decae42e139cf40d2c6473f4d3ca5d4c497cdef13102d65bd460aa28392bf015bdc03", 0x72, r3}, 0x68)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x2, 0x0, @mcast2}}}, 0x108)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2f, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r4, 0x0, 0x1a, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r5 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000004c0)={<r7=>0xffffffffffffffff})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0}, 0x68)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)
bind$unix(r7, &(0x7f0000000100)=@file={0x1, './bus\x00'}, 0x6e)

349.511803ms ago: executing program 6 (id=1819):
io_setup(0x3, &(0x7f0000004200)=<r0=>0x0)
socket$igmp6(0xa, 0x3, 0x2)
eventfd2(0xe8a, 0x1)
io_submit(r0, 0x1, &(0x7f00000008c0)=[0x0])

62.67044ms ago: executing program 6 (id=1820):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000000004, 0x511, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x2, 0x10000, 0x0, 0x5, 0x80000000, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_usb_connect(0x0, 0x56, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000440)=[{0x16, 0xff, 0x0, 0x7fff0000}]})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x1, 0x80000001}, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0xe, 0xfffffffffffffffc, 0x7, 0x8, 0x0, 0xfefffffffffffffc}, &(0x7f0000000280), 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x3, 0x18696, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x5}, 0x200, 0x1fb, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}]}}}]}, 0x3c}}, 0x40800)
listen(r0, 0x220c)
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r0, @ANYRES16=r0, @ANYRES64=r0, @ANYRES32=r0], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x4008052)
prctl$PR_SET_MM(0x23, 0xb, &(0x7f00005b4000/0x3000)=nil)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x20, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@bloom_filter={0x1e, 0x0, 0xb6, 0x1dff0a73, 0xc8, 0xffffffffffffffff, 0x402, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x0, 0x6}, 0x50)
mbind(&(0x7f00005b7000/0x1000)=nil, 0x1000, 0x1, &(0x7f00000000c0)=0x1, 0x1, 0x4)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x5, 0x600, 0x1}}, 0x20)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@deltaction={0x24, 0x31, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffd}}]}]}, 0x24}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000240), 0x3af4701e)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000001c0)={'vlan0\x00', 0x100})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r4, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x9c}, {0x6}]}, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="7800000039000900000f0f000000000003"], 0x78}}, 0x0)
r6 = socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$PNPIPE_ENCAP(r6, 0x113, 0x1, &(0x7f0000000000), 0x4)

0s ago: executing program 1 (id=1821):
socket$netlink(0x10, 0x3, 0x0)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r0 = creat(0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x84000)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x51, 0xd, &(0x7f0000000380))
dup2(r2, r1)
write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8)
ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000480)={0x60, 0x3, &(0x7f0000333000/0x1000)=nil, &(0x7f0000353000/0x2000)=nil, 0xfffffffffffffff8, &(0x7f00000003c0)=[{0x9, 0x87e, 0x6}, {0xa6, 0x8, 0x5}, {0x0, 0x0, 0xfffffffffffffffe}, {0x5, 0x400080000000000, 0x100000000}, {0x1, 0x4, 0x3}, {0x1, 0x6, 0x9}], 0x6, 0xfffffffffffffff1, 0x2, 0x1, 0x60, 0x60})
madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040), 0x4)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280))
socket$xdp(0x2c, 0x3, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
getrandom(&(0x7f0000000180)=""/113, 0x71, 0x2)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[], 0xff2e)
ioctl$TCSETS(r3, 0x5402, &(0x7f0000000140)={0x8001, 0x7, 0x4, 0xffffffff, 0x15, "2e4e807295f700"})

kernel console output (not intermixed with test programs):

path="/251/file0/file2" dev="loop1" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1
[  189.874996][ T7347] loop4: detected capacity change from 0 to 512
[  189.927944][ T7347] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  189.955618][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  189.989688][   T28] audit: type=1400 audit(189.964:2189): avc:  denied  { bind } for  pid=7353 comm="syz.4.1204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  190.025972][   T28] audit: type=1400 audit(189.964:2190): avc:  denied  { name_bind } for  pid=7353 comm="syz.4.1204" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[  190.047146][   T28] audit: type=1400 audit(189.964:2191): avc:  denied  { node_bind } for  pid=7353 comm="syz.4.1204" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[  190.126038][ T7359] netlink: 332 bytes leftover after parsing attributes in process `syz.5.1206'.
[  190.137561][ T7359] netlink: 'syz.5.1206': attribute type 9 has an invalid length.
[  190.145539][ T7359] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1206'.
[  190.156496][ T7359] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1206'.
[  190.174892][ T7361] loop1: detected capacity change from 0 to 512
[  190.184044][ T7361] EXT4-fs: Ignoring removed oldalloc option
[  190.192380][   T28] audit: type=1400 audit(190.164:2192): avc:  denied  { mounton } for  pid=7360 comm="syz.1.1207" path="/254/file1" dev="tmpfs" ino=1366 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  190.228840][ T7361] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  190.248267][ T7363] loop5: detected capacity change from 0 to 164
[  190.261894][   T28] audit: type=1400 audit(190.194:2193): avc:  denied  { read write } for  pid=3662 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  190.263911][ T7363] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  190.288104][ T7361] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.1207: iget: bad i_size value: 38620345925642
[  190.288142][ T7361] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  190.288285][ T7361] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.1207: couldn't read orphan inode 15 (err -117)
[  190.288314][ T7361] loop1: lost filesystem error report for type 5 error -117
[  190.289342][ T7361] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  190.350318][   T28] audit: type=1400 audit(190.194:2194): avc:  denied  { open } for  pid=3662 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  190.373926][   T28] audit: type=1400 audit(190.194:2195): avc:  denied  { ioctl } for  pid=3662 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  190.399277][   T28] audit: type=1400 audit(190.204:2196): avc:  denied  { recv } for  pid=3303 comm="udevd" saddr=10.128.0.163 src=30036 daddr=10.128.0.94 dest=32798 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  190.426941][ T7363] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  190.435436][ T7363] Symlink component flag not implemented
[  190.441144][ T7363] Symlink component flag not implemented
[  190.447405][ T7363] Symlink component flag not implemented (7)
[  190.453418][ T7363] Symlink component flag not implemented (116)
[  190.459746][   T28] audit: type=1400 audit(190.304:2197): avc:  denied  { open } for  pid=7364 comm="syz.6.1209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  190.616885][ T7370] loop6: detected capacity change from 0 to 1024
[  190.623767][ T7370] EXT4-fs: test_dummy_encryption option not supported
[  190.723598][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  190.796101][ T7372] lo speed is unknown, defaulting to 1000
[  191.424525][ T7379] loop6: detected capacity change from 0 to 1024
[  191.458057][ T7379] ext4: Unknown parameter 'nouser_xattr'
[  191.841522][ T7378] loop4: detected capacity change from 0 to 164
[  192.578741][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  192.717384][ T7386] loop6: detected capacity change from 0 to 8192
[  192.853647][ T7404] loop4: detected capacity change from 0 to 512
[  192.889310][ T7404] EXT4-fs: Ignoring removed oldalloc option
[  192.974127][ T7411] 9pnet_fd: Insufficient options for proto=fd
[  193.026696][ T7404] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  193.133972][ T7404] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.1224: iget: bad i_size value: 38620345925642
[  193.221020][ T7414] loop3: detected capacity change from 0 to 256
[  193.268733][ T7404] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  193.269509][ T7404] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.1224: couldn't read orphan inode 15 (err -117)
[  193.278755][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  193.278788][    C0] EXT4-fs (loop4): initial error at time 193: ext4_orphan_get:1397: inode 15
[  193.278843][    C0] EXT4-fs (loop4): last error at time 193: ext4_orphan_get:1397: inode 15
[  193.369981][ T7414] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  193.469283][ T7414] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2048)
[  193.537395][ T7404] loop4: lost filesystem error report for type 5 error -117
[  193.539534][ T7404] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  193.542995][ T7414] FAT-fs (loop3): Filesystem has been set read-only
[  193.593336][ T7415] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2048)
[  193.865856][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  193.925332][ T7428] netlink: 'syz.6.1232': attribute type 3 has an invalid length.
[  194.128914][ T7437] netlink: 538 bytes leftover after parsing attributes in process `syz.3.1235'.
[  194.206798][ T7439] lo speed is unknown, defaulting to 1000
[  194.581447][ T7447] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  194.666712][ T5065] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.834077][ T7456] set_capacity_and_notify: 2 callbacks suppressed
[  194.834146][ T7456] loop4: detected capacity change from 0 to 512
[  194.855240][ T7456] EXT4-fs: Ignoring removed oldalloc option
[  194.874965][   T28] kauditd_printk_skb: 144 callbacks suppressed
[  194.874986][   T28] audit: type=1400 audit(194.844:2342): avc:  denied  { tracepoint } for  pid=7451 comm="syz.6.1239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  194.993569][ T7462] loop1: detected capacity change from 0 to 512
[  195.031936][ T7456] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  195.123079][ T7456] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.1240: iget: bad i_size value: 38620345925642
[  195.305244][ T7456] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  195.306298][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  195.322535][    C1] EXT4-fs (loop4): initial error at time 195: ext4_orphan_get:1397: inode 15
[  195.331389][    C1] EXT4-fs (loop4): last error at time 195: ext4_orphan_get:1397: inode 15
[  195.342970][ T7456] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.1240: couldn't read orphan inode 15 (err -117)
[  195.397489][ T7456] loop4: lost filesystem error report for type 5 error -117
[  195.404218][ T7456] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  195.695096][ T7471] loop1: detected capacity change from 0 to 1024
[  195.724870][ T7471] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  195.782671][ T7471] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  195.852632][   T28] audit: type=1400 audit(194.874:2343): avc:  denied  { read } for  pid=7458 comm="syz.1.1242" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  195.874703][   T28] audit: type=1400 audit(194.874:2344): avc:  denied  { open } for  pid=7458 comm="syz.1.1242" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  195.901480][ T7471] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  195.928393][   T28] audit: type=1400 audit(195.174:2345): avc:  denied  { ioctl } for  pid=7458 comm="syz.1.1242" path="socket:[18387]" dev="sockfs" ino=18387 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  195.953165][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  195.969123][   T28] audit: type=1400 audit(195.444:2346): avc:  denied  { setopt } for  pid=7464 comm="syz.3.1243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  195.995744][ T7471] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1245'.
[  196.007615][ T7471] ext4: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿš@­LqE�:†‹� á艞Õt}²0ü�$‰'
[  196.018264][   T28] audit: type=1400 audit(195.964:2347): avc:  denied  { create } for  pid=7470 comm="syz.1.1245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  196.039123][   T28] audit: type=1400 audit(195.964:2348): avc:  denied  { write } for  pid=7470 comm="syz.1.1245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  196.041660][ T7472] xt_hashlimit: size too large, truncated to 1048576
[  196.059912][   T28] audit: type=1400 audit(195.964:2349): avc:  denied  { nlmsg_write } for  pid=7470 comm="syz.1.1245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  196.059946][   T28] audit: type=1400 audit(195.984:2350): avc:  denied  { remount } for  pid=7470 comm="syz.1.1245" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  196.145064][ T7483] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1248'.
[  196.170303][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.257540][   T28] audit: type=1400 audit(196.224:2351): avc:  denied  { ioctl } for  pid=7485 comm="syz.4.1251" path="socket:[19603]" dev="sockfs" ino=19603 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  196.441301][ T7486] loop1: detected capacity change from 0 to 8192
[  196.812705][ T7498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1254'.
[  196.852192][ T7498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1254'.
[  196.872992][ T7498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1254'.
[  197.106203][ T7504] lo speed is unknown, defaulting to 1000
[  197.122278][ T7508] loop6: detected capacity change from 0 to 512
[  197.157680][ T7508] EXT4-fs: Ignoring removed oldalloc option
[  197.184494][ T7508] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  197.226080][ T7508] EXT4-fs error (device loop6): ext4_orphan_get:1397: inode #15: comm syz.6.1257: iget: bad i_size value: 38620345925642
[  197.246356][ T7508] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  197.246549][ T7508] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.1257: couldn't read orphan inode 15 (err -117)
[  197.267622][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  197.267646][    C0] EXT4-fs (loop6): initial error at time 197: ext4_orphan_get:1397: inode 15
[  197.267679][    C0] EXT4-fs (loop6): last error at time 197: ext4_orphan_get:1397: inode 15
[  197.391840][ T7508] loop6: lost filesystem error report for type 5 error -117
[  197.429118][ T7508] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  197.685863][ T5065] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.906629][ T7523] dummy0: entered promiscuous mode
[  198.002493][ T7523] dummy0: left promiscuous mode
[  198.451005][ T7525] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  198.510257][ T7527] loop4: detected capacity change from 0 to 512
[  198.596652][ T7527] EXT4-fs error (device loop4): ext4_do_update_inode:5602: inode #15: comm syz.4.1265: corrupted inode contents
[  198.648309][ T7527] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  198.648507][ T7527] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem
[  198.657718][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  198.657741][    C1] EXT4-fs (loop4): initial error at time 198: ext4_do_update_inode:5602: inode 15
[  198.657777][    C1] EXT4-fs (loop4): last error at time 198: ext4_do_update_inode:5602: inode 15
[  198.700280][ T7529] loop6: detected capacity change from 0 to 8192
[  198.743269][ T7529] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  198.861245][ T7538] loop3: detected capacity change from 0 to 164
[  198.880109][ T7527] loop4: lost filesystem error report for type 5 error -117
[  198.880285][ T7527] EXT4-fs error (device loop4): ext4_do_update_inode:5602: inode #15: comm syz.4.1265: corrupted inode contents
[  198.993249][ T7527] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  199.009062][ T7527] EXT4-fs error (device loop4): ext4_evict_inode:313: inode #15: comm syz.4.1265: mark_inode_dirty error
[  199.360687][ T7527] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  199.421907][ T7527] EXT4-fs (loop4): 1 orphan inode deleted
[  199.527263][ T7527] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  199.556947][ T7548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1271'.
[  199.567125][ T7550] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[  199.733984][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.901853][ T7558] loop1: detected capacity change from 0 to 256
[  199.915327][ T7558] vfat: Unknown parameter 'dos1xfl1250'
[  199.942880][   T28] kauditd_printk_skb: 13 callbacks suppressed
[  199.942898][   T28] audit: type=1400 audit(199.914:2365): avc:  denied  { write } for  pid=7555 comm="syz.6.1274" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  199.976578][ T7561] FAULT_INJECTION: forcing a failure.
[  199.976578][ T7561] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  200.009530][ T7561] CPU: 0 UID: 0 PID: 7561 Comm: syz.3.1276 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  200.009582][ T7561] Tainted: [W]=WARN
[  200.009592][ T7561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  200.009609][ T7561] Call Trace:
[  200.009616][ T7561]  <TASK>
[  200.009625][ T7561]  __dump_stack+0x1d/0x30
[  200.009659][ T7561]  dump_stack_lvl+0x95/0xd0
[  200.009691][ T7561]  dump_stack+0x15/0x1b
[  200.009797][ T7561]  should_fail_ex+0x263/0x280
[  200.009866][ T7561]  should_fail+0xb/0x20
[  200.009899][ T7561]  should_fail_usercopy+0x1a/0x20
[  200.009937][ T7561]  _copy_from_user+0x1c/0xb0
[  200.010013][ T7561]  __se_sys_mount+0x10d/0x2e0
[  200.010039][ T7561]  ? fput+0x8f/0xc0
[  200.010065][ T7561]  ? ksys_write+0x194/0x1a0
[  200.010091][ T7561]  __x64_sys_mount+0x67/0x80
[  200.010125][ T7561]  x64_sys_call+0x2d61/0x3020
[  200.010158][ T7561]  do_syscall_64+0x12c/0x370
[  200.010187][ T7561]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  200.010275][ T7561] RIP: 0033:0x7f178037c819
[  200.010295][ T7561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  200.010313][ T7561] RSP: 002b:00007f177edd7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  200.010396][ T7561] RAX: ffffffffffffffda RBX: 00007f17805f5fa0 RCX: 00007f178037c819
[  200.010409][ T7561] RDX: 0000200000000580 RSI: 0000200000000000 RDI: 0000000000000000
[  200.010422][ T7561] RBP: 00007f177edd7090 R08: 0000200000000300 R09: 0000000000000000
[  200.010497][ T7561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  200.010512][ T7561] R13: 00007f17805f6038 R14: 00007f17805f5fa0 R15: 00007ffd40fe7d58
[  200.010542][ T7561]  </TASK>
[  200.014105][ T7561] tmpfs: Bad value for 'mpol'
[  200.196340][   T28] audit: type=1400 audit(199.984:2366): avc:  denied  { mounton } for  pid=7559 comm="syz.3.1276" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[  200.308874][ T7567] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1278'.
[  200.366490][ T7569] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1278'.
[  200.501506][ T7578] loop4: detected capacity change from 0 to 512
[  200.523820][ T7578] EXT4-fs: Ignoring removed mblk_io_submit option
[  200.541210][ T7578] EXT4-fs: quotafile must be on filesystem root
[  200.659808][ T7579] loop3: detected capacity change from 0 to 8192
[  200.668367][   T28] audit: type=1400 audit(200.644:2367): avc:  denied  { create } for  pid=7580 comm="syz.1.1281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  200.693460][   T28] audit: type=1400 audit(200.644:2368): avc:  denied  { create } for  pid=7576 comm="syz.4.1280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  200.723227][ T7579] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  200.877861][ T7581] loop1: detected capacity change from 0 to 512
[  200.933243][ T7583] lo speed is unknown, defaulting to 1000
[  200.971776][ T7585] lo speed is unknown, defaulting to 1000
[  200.978612][ T7581] EXT4-fs: Ignoring removed nobh option
[  200.990037][ T7589] usb usb7: check_ctrlrecip: process 7589 (syz.3.1284) requesting ep 01 but needs 81
[  201.002271][   T28] audit: type=1400 audit(200.964:2369): avc:  denied  { append } for  pid=7588 comm="syz.3.1284" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  201.013401][ T7589] usb usb7: usbfs: process 7589 (syz.3.1284) did not claim interface 0 before use
[  201.057698][ T7581] EXT4-fs: Mount option(s) incompatible with ext3
[  201.113665][   T28] audit: type=1400 audit(201.054:2370): avc:  denied  { bind } for  pid=7580 comm="syz.1.1281" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  201.193290][   T28] audit: type=1400 audit(201.144:2371): avc:  denied  { read } for  pid=7592 comm="syz.4.1287" name="usbmon9" dev="devtmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  201.247760][ T7597] netlink: 'syz.4.1287': attribute type 1 has an invalid length.
[  201.265133][   T28] audit: type=1400 audit(201.144:2372): avc:  denied  { open } for  pid=7592 comm="syz.4.1287" path="/dev/usbmon9" dev="devtmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  201.291609][   T28] audit: type=1400 audit(201.144:2373): avc:  denied  { ioctl } for  pid=7592 comm="syz.4.1287" path="/dev/usbmon9" dev="devtmpfs" ino=169 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  201.353039][ T7597] 8021q: adding VLAN 0 to HW filter on device bond2
[  201.377221][   T28] audit: type=1400 audit(201.324:2374): avc:  denied  { getopt } for  pid=7580 comm="syz.1.1281" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  201.413169][ T7603] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1287'.
[  201.425655][ T7603] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1287'.
[  201.480449][ T7607] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1290'.
[  201.519158][ T7607] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1290'.
[  201.530762][ T7609] FAULT_INJECTION: forcing a failure.
[  201.530762][ T7609] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  201.562837][ T7609] CPU: 0 UID: 0 PID: 7609 Comm: syz.3.1291 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  201.562932][ T7609] Tainted: [W]=WARN
[  201.562941][ T7609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  201.562959][ T7609] Call Trace:
[  201.562965][ T7609]  <TASK>
[  201.562979][ T7609]  __dump_stack+0x1d/0x30
[  201.563015][ T7609]  dump_stack_lvl+0x95/0xd0
[  201.563047][ T7609]  dump_stack+0x15/0x1b
[  201.563076][ T7609]  should_fail_ex+0x263/0x280
[  201.563125][ T7609]  should_fail+0xb/0x20
[  201.563233][ T7609]  should_fail_usercopy+0x1a/0x20
[  201.563267][ T7609]  _copy_from_user+0x1c/0xb0
[  201.563337][ T7609]  ___sys_sendmsg+0xc1/0x1e0
[  201.563381][ T7609]  __x64_sys_sendmsg+0xd4/0x160
[  201.563412][ T7609]  x64_sys_call+0x194c/0x3020
[  201.563448][ T7609]  do_syscall_64+0x12c/0x370
[  201.563535][ T7609]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.563564][ T7609] RIP: 0033:0x7f178037c819
[  201.563651][ T7609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  201.563675][ T7609] RSP: 002b:00007f177edd7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  201.563702][ T7609] RAX: ffffffffffffffda RBX: 00007f17805f5fa0 RCX: 00007f178037c819
[  201.563721][ T7609] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003
[  201.563737][ T7609] RBP: 00007f177edd7090 R08: 0000000000000000 R09: 0000000000000000
[  201.563754][ T7609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  201.563789][ T7609] R13: 00007f17805f6038 R14: 00007f17805f5fa0 R15: 00007ffd40fe7d58
[  201.563814][ T7609]  </TASK>
[  201.740966][ T7603] macsec2: entered promiscuous mode
[  201.748014][ T7603] bond2: entered promiscuous mode
[  201.754012][ T7603] macsec2: entered allmulticast mode
[  201.768782][ T7612] loop6: detected capacity change from 0 to 128
[  201.779515][ T7603] bond2: entered allmulticast mode
[  201.792242][ T7605] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  201.855167][ T7612] syz.6.1292: attempt to access beyond end of device
[  201.855167][ T7612] loop6: rw=2049, sector=154, nr_sectors = 6 limit=128
[  201.874276][ T7619] loop1: detected capacity change from 0 to 8192
[  201.883222][ T7612] syz.6.1292: attempt to access beyond end of device
[  201.883222][ T7612] loop6: rw=8390657, sector=158, nr_sectors = 2 limit=128
[  201.898186][ T7612] Buffer I/O error on dev loop6, logical block 79, lost async page write
[  201.906926][ T7612] syz.6.1292: attempt to access beyond end of device
[  201.906926][ T7612] loop6: rw=8390657, sector=160, nr_sectors = 2 limit=128
[  201.921805][ T7612] Buffer I/O error on dev loop6, logical block 80, lost async page write
[  201.933015][ T7619] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  201.954917][ T7612] syz.6.1292: attempt to access beyond end of device
[  201.954917][ T7612] loop6: rw=2049, sector=162, nr_sectors = 6 limit=128
[  201.971584][ T7612] syz.6.1292: attempt to access beyond end of device
[  201.971584][ T7612] loop6: rw=8390657, sector=166, nr_sectors = 2 limit=128
[  201.986865][ T7612] Buffer I/O error on dev loop6, logical block 83, lost async page write
[  202.037926][ T7624] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7624 comm=syz.4.1298
[  202.051557][ T7621] netlink: 538 bytes leftover after parsing attributes in process `syz.5.1296'.
[  202.061994][ T7621] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5131 sclass=netlink_route_socket pid=7621 comm=syz.5.1296
[  202.062344][ T7612] syz.6.1292: attempt to access beyond end of device
[  202.062344][ T7612] loop6: rw=8390657, sector=168, nr_sectors = 2 limit=128
[  202.092020][ T7612] Buffer I/O error on dev loop6, logical block 84, lost async page write
[  202.105295][ T7612] syz.6.1292: attempt to access beyond end of device
[  202.105295][ T7612] loop6: rw=2049, sector=186, nr_sectors = 6 limit=128
[  202.154170][ T7612] syz.6.1292: attempt to access beyond end of device
[  202.154170][ T7612] loop6: rw=8390657, sector=190, nr_sectors = 2 limit=128
[  202.168543][ T7612] Buffer I/O error on dev loop6, logical block 95, lost async page write
[  202.177239][ T7612] syz.6.1292: attempt to access beyond end of device
[  202.177239][ T7612] loop6: rw=8390657, sector=192, nr_sectors = 2 limit=128
[  202.290802][ T7612] Buffer I/O error on dev loop6, logical block 96, lost async page write
[  202.303746][ T7612] syz.6.1292: attempt to access beyond end of device
[  202.303746][ T7612] loop6: rw=2049, sector=194, nr_sectors = 6 limit=128
[  202.322225][ T7612] Buffer I/O error on dev loop6, logical block 99, lost async page write
[  202.332307][ T7612] Buffer I/O error on dev loop6, logical block 100, lost async page write
[  202.349972][ T7612] Buffer I/O error on dev loop6, logical block 111, lost async page write
[  202.355125][ T7632] lo speed is unknown, defaulting to 1000
[  202.376367][ T7612] Buffer I/O error on dev loop6, logical block 112, lost async page write
[  202.440267][ T7635] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1302'.
[  202.493837][ T7635] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1302'.
[  202.551918][ T7639] loop3: detected capacity change from 0 to 256
[  202.607851][ T7639] msdos: Bad value for 'tz'
[  202.704013][ T7639] loop3: detected capacity change from 0 to 512
[  202.732873][ T7639] EXT4-fs: Ignoring removed nobh option
[  202.761603][ T7639] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  202.793924][ T7650] loop5: detected capacity change from 0 to 512
[  202.809459][ T7639] EXT4-fs (loop3): 1 truncate cleaned up
[  202.822966][ T7650] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  202.839962][ T7639] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  203.130228][ T7658] loop1: detected capacity change from 0 to 8192
[  203.153870][ T7658] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  203.624269][ T7665] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  203.907319][ T7675] tipc: Failed to obtain node identity
[  203.935821][ T7675] tipc: Enabling of bearer <ib:gretap0> rejected, failed to enable media
[  203.953214][ T7678] FAULT_INJECTION: forcing a failure.
[  203.953214][ T7678] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  204.051812][ T7678] CPU: 0 UID: 0 PID: 7678 Comm: syz.6.1316 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  204.051894][ T7678] Tainted: [W]=WARN
[  204.051904][ T7678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  204.051921][ T7678] Call Trace:
[  204.051929][ T7678]  <TASK>
[  204.051939][ T7678]  __dump_stack+0x1d/0x30
[  204.051974][ T7678]  dump_stack_lvl+0x95/0xd0
[  204.052061][ T7678]  dump_stack+0x15/0x1b
[  204.052090][ T7678]  should_fail_ex+0x263/0x280
[  204.052159][ T7678]  should_fail+0xb/0x20
[  204.052192][ T7678]  should_fail_usercopy+0x1a/0x20
[  204.052281][ T7678]  _copy_to_user+0x20/0xa0
[  204.052325][ T7678]  simple_read_from_buffer+0xb5/0x130
[  204.052404][ T7678]  proc_fail_nth_read+0x10e/0x150
[  204.052448][ T7678]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  204.052520][ T7678]  vfs_read+0x1ab/0x7f0
[  204.052542][ T7678]  ? __rcu_read_unlock+0x4e/0x70
[  204.052571][ T7678]  ? __fget_files+0x184/0x1c0
[  204.052632][ T7678]  ? fdget_pos+0x26/0x1d0
[  204.052724][ T7678]  ? mutex_lock+0x57/0x90
[  204.052748][ T7678]  ksys_read+0xdc/0x1a0
[  204.052771][ T7678]  __x64_sys_read+0x40/0x50
[  204.052795][ T7678]  x64_sys_call+0x2886/0x3020
[  204.052904][ T7678]  do_syscall_64+0x12c/0x370
[  204.052941][ T7678]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  204.052971][ T7678] RIP: 0033:0x7fe439dad04e
[  204.052992][ T7678] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  204.053016][ T7678] RSP: 002b:00007fe438846fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  204.053048][ T7678] RAX: ffffffffffffffda RBX: 00007fe4388476c0 RCX: 00007fe439dad04e
[  204.053067][ T7678] RDX: 000000000000000f RSI: 00007fe4388470a0 RDI: 0000000000000004
[  204.053085][ T7678] RBP: 00007fe438847090 R08: 0000000000000000 R09: 0000000000000000
[  204.053102][ T7678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  204.053116][ T7678] R13: 00007fe43a066038 R14: 00007fe43a065fa0 R15: 00007ffdb44a22b8
[  204.053142][ T7678]  </TASK>
[  204.128183][ T7679] msdos: Bad value for 'tz'
[  204.765587][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.862169][ T3662] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.005619][ T7683] netlink: 'syz.6.1320': attribute type 1 has an invalid length.
[  205.121073][ T7683] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1320'.
[  205.168210][ T7691] netlink: 'syz.3.1321': attribute type 1 has an invalid length.
[  205.365145][   T28] kauditd_printk_skb: 354 callbacks suppressed
[  205.365163][   T28] audit: type=1400 audit(524493.329:2729): avc:  denied  { egress } for  pid=3387 comm="kworker/0:3" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::16 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1
[  205.472875][ T7679] set_capacity_and_notify: 1 callbacks suppressed
[  205.472896][ T7679] loop1: detected capacity change from 0 to 512
[  205.511299][   T28] audit: type=1400 audit(524493.329:2730): avc:  denied  { sendto } for  pid=3387 comm="kworker/0:3" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::16 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1
[  205.585060][ T7683] 8021q: adding VLAN 0 to HW filter on device bond2
[  205.593186][ T7679] EXT4-fs: Ignoring removed nobh option
[  205.704701][ T7679] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  205.779081][ T7696] bond3: (slave geneve2): making interface the new active one
[  205.811118][ T7696] bond3: (slave geneve2): Enslaving as an active interface with an up link
[  205.972453][ T7706] loop6: detected capacity change from 0 to 512
[  206.020003][ T7706] EXT4-fs: inline encryption not supported
[  206.079402][ T7706] EXT4-fs: Ignoring removed bh option
[  206.120204][ T7706] EXT4-fs (loop6): 1 orphan inode deleted
[  206.131055][ T7679] EXT4-fs (loop1): 1 truncate cleaned up
[  206.146229][ T7679] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  206.151041][ T7706] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  206.210583][ T7706] EXT4-fs error (device loop6): ext4_add_entry:2415: inode #2: comm syz.6.1324: Directory hole found for htree leaf block 0
[  206.245492][   T30] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  206.266455][   T30] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  206.278603][ T5065] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  206.281395][   T30] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  206.297970][   T30] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  206.385727][ T7716] tmpfs: Unknown parameter 'tmpfs'
[  206.468318][ T7713] loop3: detected capacity change from 0 to 8192
[  206.486105][ T7716] loop4: detected capacity change from 0 to 4096
[  206.521076][ T7716] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  206.640889][ T7722] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1330'.
[  206.647445][ T7716] lo speed is unknown, defaulting to 1000
[  206.674292][ T7722] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1330'.
[  206.688132][ T7722] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1330'.
[  206.693995][   T28] audit: type=1400 audit(524494.639:2731): avc:  denied  { mounton } for  pid=7714 comm="syz.4.1329" path="/251/file0" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  206.724843][ T7722] loop5: detected capacity change from 0 to 128
[  206.738400][ T7723] sctp: [Deprecated]: syz.4.1329 (pid 7723) Use of struct sctp_assoc_value in delayed_ack socket option.
[  206.738400][ T7723] Use struct sctp_sack_info instead
[  206.766462][   T28] audit: type=1400 audit(524494.639:2732): avc:  denied  { mount } for  pid=7714 comm="syz.4.1329" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  206.793945][   T28] audit: type=1400 audit(524494.709:2733): avc:  denied  { remount } for  pid=7721 comm="syz.5.1330" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[  206.824020][   T28] audit: type=1401 audit(524494.768:2734): op=setxattr invalid_context="system_u:object_r:udev_helper_exec_t:s0"
[  206.836441][   T28] audit: type=1400 audit(524494.768:2735): avc:  denied  { mounton } for  pid=7714 comm="syz.4.1329" path="/251/file0/file0/file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  207.034859][   T28] audit: type=1400 audit(524494.977:2736): avc:  denied  { unmount } for  pid=3312 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  207.055712][ T7734] loop6: detected capacity change from 0 to 512
[  207.066090][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  207.076245][   T28] audit: type=1326 audit(524494.987:2737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7733 comm="syz.6.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe439dec819 code=0x7ffc0000
[  207.099716][ T7735] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1333'.
[  207.109479][ T7734] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  207.122362][   T28] audit: type=1326 audit(524494.987:2738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7733 comm="syz.6.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe439dec819 code=0x7ffc0000
[  207.181432][ T7737] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7737 comm=syz.6.1337
[  207.294225][ T7735] syzkaller1: entered promiscuous mode
[  207.300493][ T7735] syzkaller1: entered allmulticast mode
[  207.401680][ T7757] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1341'.
[  207.449160][ T7762] netlink: 'syz.4.1342': attribute type 1 has an invalid length.
[  207.479481][ T7766] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1343'.
[  207.491996][ T7768] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1340'.
[  207.502771][ T7773] netlink: 'syz.4.1342': attribute type 1 has an invalid length.
[  207.966332][ T7807] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1352'.
[  208.132686][ T7824] netlink: 'syz.5.1356': attribute type 1 has an invalid length.
[  208.175540][ T7824] netlink: 'syz.5.1356': attribute type 1 has an invalid length.
[  208.298235][ T7828] loop4: detected capacity change from 0 to 8192
[  208.373294][ T7831] lo speed is unknown, defaulting to 1000
[  208.382210][ T7830] loop5: detected capacity change from 0 to 4096
[  208.414258][ T7830] EXT4-fs error (device loop5): ext4_ext_check_inode:521: inode #2: comm syz.5.1361: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  208.441505][ T7830] loop5: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117
[  208.442667][ T7830] EXT4-fs (loop5): get root inode failed
[  208.451790][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  208.451810][    C0] EXT4-fs (loop5): initial error at time 524752: ext4_ext_check_inode:521: inode 2
[  208.451847][    C0] EXT4-fs (loop5): last error at time 524752: ext4_ext_check_inode:521: inode 2
[  208.482600][ T7830] EXT4-fs (loop5): mount failed
[  208.513545][ T7830] loop5: detected capacity change from 0 to 128
[  208.721964][ T7838] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1363'.
[  208.894292][ T7843] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=26393 sclass=netlink_xfrm_socket pid=7843 comm=syz.5.1365
[  209.241414][ T7861] loop5: detected capacity change from 0 to 8192
[  209.264450][ T7861] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  209.694591][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  209.792270][ T1032] kernel read not supported for file /vcs (pid: 1032 comm: kworker/1:2)
[  209.828359][ T7879] lo speed is unknown, defaulting to 1000
[  209.863037][ T7885] .` (unregistering): Released all slaves
[  210.024267][ T7893] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  210.167115][ T7893] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz.1.1384: iget: bad i_size value: 2533274857506816
[  210.181534][ T7893] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz.1.1384: iget: bad i_size value: 2533274857506816
[  210.195258][ T7893] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz.1.1384: iget: bad i_size value: 2533274857506816
[  210.371375][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  210.413366][   T28] kauditd_printk_skb: 209 callbacks suppressed
[  210.413386][   T28] audit: type=1400 audit(524754.258:2948): avc:  denied  { execmem } for  pid=7899 comm="syz.3.1385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  210.472835][   T28] audit: type=1400 audit(524754.418:2949): avc:  denied  { create } for  pid=7902 comm="syz.1.1386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  210.539346][   T28] audit: type=1400 audit(524754.438:2950): avc:  denied  { write } for  pid=7902 comm="syz.1.1386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  210.637764][ T7907] set_capacity_and_notify: 2 callbacks suppressed
[  210.637999][ T7907] loop3: detected capacity change from 0 to 512
[  210.663867][ T7907] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  210.684703][ T7906] __nla_validate_parse: 6 callbacks suppressed
[  210.684736][ T7906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1386'.
[  210.775407][ T7907] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.1385: bg 0: block 104: invalid block bitmap
[  210.788799][ T7907] loop3: lost filesystem error report for type 5 error -117
[  210.789676][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  210.803549][    C0] EXT4-fs (loop3): initial error at time 524754: ext4_validate_block_bitmap:432
[  210.812738][    C0] EXT4-fs (loop3): last error at time 524754: ext4_validate_block_bitmap:432
[  210.825985][ T7907] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6685: Corrupt filesystem
[  210.836015][ T7907] loop3: lost filesystem error report for type 5 error -117
[  210.838690][ T7907] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1385: invalid indirect mapped block 1 (level 1)
[  210.860981][ T7907] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  210.863928][ T7907] EXT4-fs (loop3): 1 truncate cleaned up
[  210.892319][ T7907] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  211.046490][   T28] audit: type=1400 audit(524754.858:2951): avc:  denied  { read write open } for  pid=7899 comm="syz.3.1385" path="/304/file1/file1" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  211.183150][ T7914] loop1: detected capacity change from 0 to 512
[  211.239357][ T7914] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  211.290097][   T28] audit: type=1400 audit(524754.978:2952): avc:  denied  { unmount } for  pid=3662 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[  211.358011][ T7914] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.1390: bg 0: block 104: invalid block bitmap
[  211.396087][ T7921] loop5: detected capacity change from 0 to 512
[  211.437999][ T7921] EXT4-fs: Ignoring removed oldalloc option
[  211.448353][ T7914] loop1: lost filesystem error report for type 5 error -117
[  211.448519][ T7914] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6685: Corrupt filesystem
[  211.456175][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  211.456201][    C0] EXT4-fs (loop1): initial error at time 524755: ext4_validate_block_bitmap:432
[  211.456231][    C0] EXT4-fs (loop1): last error at time 524755: ext4_validate_block_bitmap:432
[  211.469809][   T28] audit: type=1400 audit(524755.228:2953): avc:  denied  { create } for  pid=7917 comm="syz.6.1392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  211.472596][ T7914] loop1: lost filesystem error report for type 5 error -117
[  211.480749][ T7921] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  211.490288][ T7914] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1390: invalid indirect mapped block 1 (level 1)
[  211.539377][ T7914] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  211.603425][ T7916] loop4: detected capacity change from 0 to 8192
[  211.657625][ T7921] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.1393: iget: bad i_size value: 38620345925642
[  211.697886][ T7914] EXT4-fs (loop1): 1 truncate cleaned up
[  211.714922][ T7916] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  211.804787][ T7914] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  211.863878][ T7921] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  211.864199][ T7921] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.1393: couldn't read orphan inode 15 (err -117)
[  211.873460][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  211.873477][    C0] EXT4-fs (loop5): initial error at time 524755: ext4_orphan_get:1397: inode 15
[  211.873501][    C0] EXT4-fs (loop5): last error at time 524755: ext4_orphan_get:1397: inode 15
[  212.264269][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  212.354360][   T28] audit: type=1400 audit(524755.228:2954): avc:  denied  { setopt } for  pid=7917 comm="syz.6.1392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  212.374008][ T7921] loop5: lost filesystem error report for type 5 error -117
[  212.374200][   T28] audit: type=1400 audit(524755.258:2955): avc:  denied  { create } for  pid=7917 comm="syz.6.1392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  212.447621][ T7921] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  212.754863][   T28] audit: type=1400 audit(524755.258:2956): avc:  denied  { bind } for  pid=7917 comm="syz.6.1392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  212.791394][ T7930] 9p: Bad value for 'wfdno'
[  212.812695][ T7931] lo speed is unknown, defaulting to 1000
[  212.830009][ T7930] loop4: detected capacity change from 0 to 512
[  212.844266][   T28] audit: type=1400 audit(524755.298:2957): avc:  denied  { create } for  pid=7919 comm="syz.5.1393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  213.049799][ T7930] EXT4-fs (loop4): 1 orphan inode deleted
[  213.068843][ T7930] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  213.104996][ T7930] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  213.245047][ T3662] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  213.487419][ T7940] syzkaller0: entered promiscuous mode
[  213.493136][ T7940] syzkaller0: entered allmulticast mode
[  213.816834][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  213.865696][ T7958] loop1: detected capacity change from 0 to 512
[  213.906240][ T7958] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  213.918168][ T7958] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.1405: bg 0: block 104: invalid block bitmap
[  213.931248][ T7958] loop1: lost filesystem error report for type 5 error -117
[  213.931502][ T7958] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6685: Corrupt filesystem
[  213.947606][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  213.947632][    C1] EXT4-fs (loop1): initial error at time 524757: ext4_validate_block_bitmap:432
[  213.947660][    C1] EXT4-fs (loop1): last error at time 524757: ext4_validate_block_bitmap:432
[  213.972880][ T7958] loop1: lost filesystem error report for type 5 error -117
[  213.973220][ T7958] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1405: invalid indirect mapped block 1 (level 1)
[  213.990326][ T7959] loop5: detected capacity change from 0 to 8192
[  214.000474][ T7958] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  214.001288][ T7958] EXT4-fs (loop1): 1 truncate cleaned up
[  214.026848][ T7958] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  214.067575][ T7959] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  214.104111][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  214.305695][ T7970] loop5: detected capacity change from 0 to 8192
[  214.479526][ T7980] loop5: detected capacity change from 0 to 512
[  214.505653][ T7980] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  214.573332][ T7974] loop3: detected capacity change from 0 to 512
[  214.580830][ T3662] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  214.622581][ T7974] ext4: Unknown parameter 'obj_role'
[  214.854222][ T7974] syz.3.1408 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  215.571258][ T8004] batadv_slave_1: entered promiscuous mode
[  215.636612][ T8005] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1419'.
[  215.755046][ T8003] batadv_slave_1: left promiscuous mode
[  215.895595][ T8008] loop4: detected capacity change from 0 to 8192
[  215.906862][ T8008] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  216.008361][   T28] kauditd_printk_skb: 35 callbacks suppressed
[  216.008376][   T28] audit: type=1400 audit(525015.944:2993): avc:  denied  { read append } for  pid=8013 comm="syz.4.1423" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  216.244572][ T8021] loop3: detected capacity change from 0 to 512
[  216.335185][   T28] audit: type=1400 audit(525015.994:2994): avc:  denied  { open } for  pid=8013 comm="syz.4.1423" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  216.380852][ T8021] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  216.762359][   T28] audit: type=1400 audit(525016.064:2995): avc:  denied  { bind } for  pid=8012 comm="syz.3.1422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  216.790761][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  217.003651][   T28] audit: type=1400 audit(525016.944:2996): avc:  denied  { write } for  pid=8030 comm="syz.5.1428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  217.040198][ T8029] lo speed is unknown, defaulting to 1000
[  217.102158][   T28] audit: type=1400 audit(525016.974:2997): avc:  denied  { write } for  pid=8030 comm="syz.5.1428" name="icmp6" dev="proc" ino=4026533380 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  217.208721][   T28] audit: type=1400 audit(525017.114:2998): avc:  denied  { create } for  pid=8035 comm="syz.4.1430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  217.256221][ T8036] lo speed is unknown, defaulting to 1000
[  217.362211][ T8041] loop4: detected capacity change from 0 to 2048
[  217.401617][ T8041] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  217.580822][   T28] audit: type=1400 audit(525017.524:2999): avc:  denied  { ioctl } for  pid=8035 comm="syz.4.1430" path="/270/file0/file1" dev="loop4" ino=15 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  217.608722][ T8047] loop3: detected capacity change from 0 to 8192
[  217.648357][ T8047] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  217.859625][   T28] audit: type=1400 audit(525017.794:3000): avc:  denied  { ioctl } for  pid=8054 comm="syz.3.1434" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  218.460107][   T28] audit: type=1400 audit(525018.404:3001): avc:  denied  { read write } for  pid=8064 comm="syz.5.1438" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  218.735475][   T28] audit: type=1400 audit(525018.404:3002): avc:  denied  { open } for  pid=8064 comm="syz.5.1438" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  218.991501][ T7983] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set
[  219.069909][ T7983] EXT4-fs (loop4): Remounting filesystem read-only
[  219.259521][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  219.892264][ T8081] loop5: detected capacity change from 0 to 512
[  219.979820][ T8081] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  220.035207][ T8081] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.1443: Invalid inode bitmap blk 4 in block_group 0
[  220.049436][ T8081] loop5: lost filesystem error report for type 5 error -117
[  220.049707][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  220.063590][    C0] EXT4-fs (loop5): initial error at time 525019: ext4_read_inode_bitmap:139
[  220.068002][ T8081] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  220.072355][    C0] EXT4-fs (loop5): last error at time 525019: ext4_read_inode_bitmap:139
[  220.085256][ T8086] loop3: detected capacity change from 0 to 4096
[  220.115128][ T8081] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters
[  220.132451][ T8086] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  220.219643][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  220.259125][ T3662] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  220.291564][ T8102] loop6: detected capacity change from 0 to 8192
[  220.311800][ T8108] tipc: Started in network mode
[  220.316800][ T8108] tipc: Node identity 00000000000003120000000000000001, cluster identity 4711
[  220.326093][ T8108] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  220.418970][ T8100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  220.429098][ T8100] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  220.483127][ T8119] netlink: 'syz.6.1458': attribute type 10 has an invalid length.
[  220.523038][ T8119] 8021q: adding VLAN 0 to HW filter on device batadv0
[  220.550567][ T8123] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1449'.
[  220.579551][ T8119] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  220.607973][ T8123] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1449'.
[  220.668254][ T8127] loop6: detected capacity change from 0 to 128
[  220.707574][ T8127] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  220.741474][ T8117] loop5: detected capacity change from 0 to 1024
[  220.787163][ T8117] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  220.803205][ T8117] System zones: 0-1, 3-36
[  220.818383][ T8117] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.1457: bad orphan inode 134217728
[  220.830553][ T8117] loop5: lost filesystem error report for type 5 error -117
[  220.844512][ T8117] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  220.969033][ T5065] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  221.243632][ T8138] loop6: detected capacity change from 0 to 2048
[  221.262036][ T8140] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1463'.
[  221.271115][ T8140] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1463'.
[  221.391523][ T8138]  loop6: p3 < > p4 < >
[  221.396419][ T3662] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  221.399877][ T8138] loop6: partition table partially beyond EOD, truncated
[  221.413285][ T8138] loop6: p3 start 4284289 is beyond EOD, truncated
[  221.461880][ T3000]  loop6: p3 < > p4 < >
[  221.476303][ T3000] loop6: partition table partially beyond EOD, truncated
[  221.489129][ T8145] loop1: detected capacity change from 0 to 8192
[  221.495622][ T3000] loop6: p3 start 4284289 is beyond EOD, truncated
[  221.596271][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory
[  221.628117][ T8162] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1472'.
[  221.657540][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory
[  221.738711][   T28] kauditd_printk_skb: 20 callbacks suppressed
[  221.738730][   T28] audit: type=1400 audit(525021.674:3023): avc:  denied  { write } for  pid=8172 comm="syz.3.1475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  221.884815][ T8195] netlink: 764 bytes leftover after parsing attributes in process `syz.5.1481'.
[  221.931830][ T8188] loop6: detected capacity change from 0 to 8192
[  221.950415][   T28] audit: type=1400 audit(525021.874:3024): avc:  denied  { mount } for  pid=8194 comm="syz.5.1481" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  222.003977][ T8195] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1481'.
[  222.027246][ T8204] loop3: detected capacity change from 0 to 512
[  222.087457][ T8204] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  222.188506][ T8195] macvlan4: entered promiscuous mode
[  222.195650][ T8195] macvlan4: entered allmulticast mode
[  222.202017][ T8195] veth0_virt_wifi: entered allmulticast mode
[  222.222765][ T8208] bond0: (slave bridge_slave_1): Enslaving as an active interface with a down link
[  222.244434][ T8215] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1488'.
[  222.264409][ T8204] TCP: TCP_TX_DELAY enabled
[  222.278843][   T28] audit: type=1400 audit(525022.214:3025): avc:  denied  { read } for  pid=8213 comm="syz.6.1488" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  222.316520][   T28] audit: type=1400 audit(525022.214:3026): avc:  denied  { open } for  pid=8213 comm="syz.6.1488" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  222.340452][   T28] audit: type=1400 audit(525022.214:3027): avc:  denied  { ioctl } for  pid=8213 comm="syz.6.1488" path="/dev/uhid" dev="devtmpfs" ino=253 ioctlcmd=0x941b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  222.369632][ T8220] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1491'.
[  222.377260][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  222.381275][   T28] audit: type=1326 audit(525022.214:3028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8213 comm="syz.6.1488" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe439dec819 code=0x0
[  222.536153][ T8240] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 13308
[  222.576486][   T28] audit: type=1400 audit(525022.514:3029): avc:  denied  { create } for  pid=8243 comm="syz.1.1501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  222.598579][ T8244] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4)
[  222.605168][ T8244] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  222.616089][ T8239] loop3: detected capacity change from 0 to 8192
[  222.622643][   T28] audit: type=1400 audit(525022.544:3030): avc:  denied  { connect } for  pid=8243 comm="syz.1.1501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  222.635821][ T8244] vhci_hcd vhci_hcd.0: Device attached
[  222.698549][   T28] audit: type=1400 audit(525022.624:3031): avc:  denied  { unmount } for  pid=3312 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  222.724715][ T8244] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(9)
[  222.731327][ T8244] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  222.739200][ T8244] vhci_hcd vhci_hcd.0: Device attached
[  222.747194][ T8244] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(11)
[  222.753847][ T8244] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  222.762650][ T8244] vhci_hcd vhci_hcd.0: Device attached
[  222.771389][ T8244] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(13)
[  222.778126][ T8244] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  222.787192][ T8244] vhci_hcd vhci_hcd.0: Device attached
[  222.795738][ T8244] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  222.809728][ T3387] vhci_hcd vhci_hcd.1: vhci_device speed not set
[  222.821105][ T8244] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(17)
[  222.827767][ T8244] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  222.837969][ T8261] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1506'.
[  222.849219][ T8244] vhci_hcd vhci_hcd.0: Device attached
[  222.858404][ T8258] vhci_hcd: connection closed
[  222.858560][ T8256] vhci_hcd: connection closed
[  222.859115][ T8245] vhci_hcd: connection closed
[  222.863779][ T8254] vhci_hcd: connection closed
[  222.868535][ T8251] vhci_hcd: connection closed
[  222.872991][   T36] vhci_hcd vhci_hcd.1: stop threads
[  222.877533][ T3387] usb 3-1: new full-speed USB device number 2 using vhci_hcd
[  222.877619][ T8246] vhci_hcd: sendmsg failed!, ret=-32 for 48
[  222.885128][   T36] vhci_hcd vhci_hcd.1: release socket
[  222.920092][   T36] vhci_hcd vhci_hcd.1: disconnect device
[  222.926112][   T36] vhci_hcd vhci_hcd.1: stop threads
[  222.931650][   T36] vhci_hcd vhci_hcd.1: release socket
[  222.937261][   T36] vhci_hcd vhci_hcd.1: disconnect device
[  222.943228][   T36] vhci_hcd vhci_hcd.1: stop threads
[  222.948590][   T36] vhci_hcd vhci_hcd.1: release socket
[  222.954736][   T36] vhci_hcd vhci_hcd.1: disconnect device
[  222.960982][   T28] audit: type=1400 audit(525022.904:3032): avc:  denied  { mounton } for  pid=8265 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  222.988211][   T36] vhci_hcd vhci_hcd.1: stop threads
[  222.993852][   T36] vhci_hcd vhci_hcd.1: release socket
[  222.999413][   T36] vhci_hcd vhci_hcd.1: disconnect device
[  223.019858][   T36] vhci_hcd vhci_hcd.1: stop threads
[  223.027486][ T8269] loop5: detected capacity change from 0 to 1764
[  223.032737][   T36] vhci_hcd vhci_hcd.1: release socket
[  223.039639][   T36] vhci_hcd vhci_hcd.1: disconnect device
[  223.060709][ T8269] iso9660: Corrupted directory entry in block 2 of inode 1920
[  223.136916][ T8265] lo speed is unknown, defaulting to 1000
[  223.288423][ T8265] chnl_net:caif_netlink_parms(): no params data found
[  223.382880][ T8265] bridge0: port 1(bridge_slave_0) entered blocking state
[  223.390184][ T8265] bridge0: port 1(bridge_slave_0) entered disabled state
[  223.397774][ T8265] bridge_slave_0: entered allmulticast mode
[  223.404673][ T8265] bridge_slave_0: entered promiscuous mode
[  223.411796][ T8265] bridge0: port 2(bridge_slave_1) entered blocking state
[  223.419024][ T8265] bridge0: port 2(bridge_slave_1) entered disabled state
[  223.426844][ T8265] bridge_slave_1: entered allmulticast mode
[  223.434470][ T8265] bridge_slave_1: entered promiscuous mode
[  223.456368][ T8294] 9p: Bad value for 'wfdno'
[  223.464806][ T8292] loop5: detected capacity change from 0 to 256
[  223.517103][ T8292] msdos: Bad value for 'tz'
[  223.524198][ T8265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  223.578306][ T8265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  223.646599][ T8265] team0: Port device team_slave_0 added
[  223.689349][ T8265] team0: Port device team_slave_1 added
[  223.713643][ T8309] loop3: detected capacity change from 0 to 1764
[  223.757548][ T8309] iso9660: Corrupted directory entry in block 2 of inode 1920
[  223.764249][ T8265] batman_adv: batadv0: Adding interface: batadv_slave_0
[  223.784659][ T8265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  223.944442][ T8265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  223.960452][ T8265] batman_adv: batadv0: Adding interface: batadv_slave_1
[  223.967443][ T8265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  224.054451][ T8265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  224.062506][ T8295] loop6: detected capacity change from 0 to 256
[  224.130141][ T8265] hsr_slave_0: entered promiscuous mode
[  224.136264][ T8265] hsr_slave_1: entered promiscuous mode
[  224.155647][ T8265] debugfs: 'hsr0' already exists in 'hsr'
[  224.169686][ T8265] Cannot create hsr debugfs directory
[  224.247188][ T8295] msdos: Bad value for 'tz'
[  224.385418][ T8291] loop5: detected capacity change from 0 to 512
[  224.429620][ T8265] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  224.460272][ T8265] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  224.490555][ T8291] EXT4-fs: Ignoring removed nobh option
[  224.490603][ T8265] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  224.506195][ T8265] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  224.569217][ T8291] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  224.624639][ T8265] 8021q: adding VLAN 0 to HW filter on device bond0
[  224.661121][ T8265] 8021q: adding VLAN 0 to HW filter on device team0
[  224.704221][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  224.711552][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  224.721041][ T8291] EXT4-fs (loop5): 1 truncate cleaned up
[  224.757141][ T8291] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  224.758880][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  224.777061][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  224.919508][ T8265] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  225.084997][ T8265] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  225.310329][ T8265] 8021q: adding VLAN 0 to HW filter on device batadv0
[  225.406383][ T8295] EXT4-fs: Ignoring removed nobh option
[  225.541594][ T8295] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  225.747840][ T8295] EXT4-fs (loop6): 1 truncate cleaned up
[  225.767348][ T8295] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  226.218286][ T8265] veth0_vlan: entered promiscuous mode
[  226.250948][ T8265] veth1_vlan: entered promiscuous mode
[  226.318279][ T8265] veth0_macvtap: entered promiscuous mode
[  226.351126][ T8265] veth1_macvtap: entered promiscuous mode
[  226.395758][ T8265] batman_adv: batadv0: Interface activated: batadv_slave_0
[  226.446613][ T8265] batman_adv: batadv0: Interface activated: batadv_slave_1
[  226.506784][   T36] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  226.569009][   T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  226.613306][   T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  226.671512][   T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  226.693787][ T8356] FAULT_INJECTION: forcing a failure.
[  226.693787][ T8356] name failslab, interval 1, probability 0, space 0, times 0
[  226.742138][   T28] kauditd_printk_skb: 4 callbacks suppressed
[  226.742157][   T28] audit: type=1400 audit(525026.684:3037): avc:  denied  { mounton } for  pid=8265 comm="syz-executor" path="/root/syzkaller.Eip9ny/syz-tmp" dev="sda1" ino=2051 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[  226.747787][ T8356] CPU: 0 UID: 0 PID: 8356 Comm: syz.1.1527 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  226.747947][ T8356] Tainted: [W]=WARN
[  226.747969][ T8356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  226.748012][ T8356] Call Trace:
[  226.748034][ T8356]  <TASK>
[  226.748057][ T8356]  __dump_stack+0x1d/0x30
[  226.748161][ T8356]  dump_stack_lvl+0x95/0xd0
[  226.748299][ T8356]  dump_stack+0x15/0x1b
[  226.748448][ T8356]  should_fail_ex+0x263/0x280
[  226.748544][ T8356]  should_failslab+0x8c/0xb0
[  226.748730][ T8356]  kmem_cache_alloc_noprof+0x66/0x400
[  226.748806][ T8356]  ? do_getname+0x2e/0x1c0
[  226.748894][ T8356]  do_getname+0x2e/0x1c0
[  226.748978][ T8356]  __se_sys_linkat+0x2f/0x1d0
[  226.749141][ T8356]  __x64_sys_linkat+0x67/0x80
[  226.749257][ T8356]  x64_sys_call+0x20e4/0x3020
[  226.749351][ T8356]  do_syscall_64+0x12c/0x370
[  226.749453][ T8356]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  226.749564][ T8356] RIP: 0033:0x7fda9d03c819
[  226.749617][ T8356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  226.749752][ T8356] RSP: 002b:00007fda9ba97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000109
[  226.749839][ T8356] RAX: ffffffffffffffda RBX: 00007fda9d2b5fa0 RCX: 00007fda9d03c819
[  226.749884][ T8356] RDX: ffffffffffffff9c RSI: 0000200000000040 RDI: 0000000000000000
[  226.750003][ T8356] RBP: 00007fda9ba97090 R08: 0000000000001000 R09: 0000000000000000
[  226.750047][ T8356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  226.750090][ T8356] R13: 00007fda9d2b6038 R14: 00007fda9d2b5fa0 R15: 00007ffe25f56fb8
[  226.750177][ T8356]  </TASK>
[  226.996342][ T8358] set_capacity_and_notify: 2 callbacks suppressed
[  226.996370][ T8358] loop1: detected capacity change from 0 to 2048
[  227.062422][ T8358] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  227.119995][   T28] audit: type=1400 audit(525026.684:3038): avc:  denied  { mount } for  pid=8265 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  227.141963][ T8358] loop1: detected capacity change from 0 to 128
[  227.143081][   T28] audit: type=1400 audit(525026.684:3039): avc:  denied  { mount } for  pid=8265 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  227.170675][   T28] audit: type=1400 audit(525026.684:3040): avc:  denied  { mounton } for  pid=8265 comm="syz-executor" path="/root/syzkaller.Eip9ny/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  227.197172][   T28] audit: type=1400 audit(525026.684:3041): avc:  denied  { mounton } for  pid=8265 comm="syz-executor" path="/root/syzkaller.Eip9ny/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=23625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[  227.224596][   T28] audit: type=1400 audit(525026.884:3042): avc:  denied  { mounton } for  pid=8265 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[  227.247359][   T28] audit: type=1400 audit(525026.884:3043): avc:  denied  { mount } for  pid=8265 comm="syz-executor" name="/" dev="gadgetfs" ino=3912 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  227.290981][ T8363] loop3: detected capacity change from 0 to 1764
[  227.303258][ T8365] loop7: detected capacity change from 0 to 1024
[  227.324800][ T8363] iso9660: Corrupted directory entry in block 2 of inode 1920
[  227.368363][ T8365] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  227.405864][ T8365] EXT4-fs error (device loop7): ext4_map_blocks:828: inode #15: comm syz.7.1530: lblock 0 mapped to illegal pblock 0 (length 1)
[  227.474856][ T8365] EXT4-fs (loop7): Remounting filesystem read-only
[  227.509755][   T28] audit: type=1400 audit(525027.434:3044): avc:  denied  { map } for  pid=8364 comm="syz.7.1530" path="/1/file1/file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  227.947554][ T3387] usb 3-1: enqueue for inactive port 0
[  227.953164][ T3387] usb 3-1: enqueue for inactive port 0
[  227.976675][ T8376] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1533'.
[  227.988403][   T28] audit: type=1400 audit(525027.914:3045): avc:  denied  { create } for  pid=8375 comm="syz.1.1533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  227.990194][ T8376] macvtap1: entered promiscuous mode
[  228.030651][ T3387] vhci_hcd vhci_hcd.1: vhci_device speed not set
[  228.039754][ T8376] bond0: entered promiscuous mode
[  228.050146][ T8378] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1533'.
[  228.064870][   T28] audit: type=1400 audit(525027.974:3046): avc:  denied  { setopt } for  pid=8364 comm="syz.7.1530" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  228.079818][ T8376] bond_slave_0: entered promiscuous mode
[  228.109890][ T8376] bond_slave_1: entered promiscuous mode
[  228.118123][ T8376] macvtap1: entered allmulticast mode
[  228.132693][ T8376] bond0: entered allmulticast mode
[  228.145541][ T8376] bond_slave_0: entered allmulticast mode
[  228.159041][ T8376] bond_slave_1: entered allmulticast mode
[  228.180078][ T8376] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  228.212207][ T8378] bond0: left allmulticast mode
[  228.231863][ T8378] bond_slave_0: left allmulticast mode
[  228.253664][ T8378] bond_slave_1: left allmulticast mode
[  228.284513][ T8378] bond0: left promiscuous mode
[  228.289478][ T8378] bond_slave_0: left promiscuous mode
[  228.330397][ T8265] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  228.337810][ T8378] bond_slave_1: left promiscuous mode
[  228.383677][ T8380] loop7: detected capacity change from 0 to 256
[  228.659705][ T8389] loop1: detected capacity change from 0 to 256
[  228.667722][ T8389] msdos: Bad value for 'tz'
[  228.682938][ T8389] loop1: detected capacity change from 0 to 512
[  228.690520][ T8389] EXT4-fs: Ignoring removed nobh option
[  228.706491][ T8389] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  228.721663][ T8389] EXT4-fs (loop1): 1 truncate cleaned up
[  228.728871][ T8389] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  229.107243][ T8394] loop7: detected capacity change from 0 to 1024
[  229.245919][ T8394] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  229.599742][ T8394] loop7: detected capacity change from 1024 to 4
[  229.718432][ T8265] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  229.759742][ T8395] bio_check_eod: 32 callbacks suppressed
[  229.759763][ T8395] kmmpd-loop7: attempt to access beyond end of device
[  229.759763][ T8395] loop7: rw=8402945, sector=128, nr_sectors = 2 limit=4
[  229.839712][ T8395] buffer_io_error: 18 callbacks suppressed
[  229.839730][ T8395] Buffer I/O error on dev loop7, logical block 64, lost sync page write
[  230.060625][   T12] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.172592][   T12] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.252846][   T12] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.334949][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  230.370292][   T12] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.540323][ T8404] loop1: detected capacity change from 0 to 8192
[  230.567552][ T8404] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  230.602342][ T8398] lo speed is unknown, defaulting to 1000
[  230.629892][   T12] bridge_slave_1: left allmulticast mode
[  230.635750][   T12] bridge_slave_1: left promiscuous mode
[  230.669754][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  230.679565][   T12] bridge_slave_0: left allmulticast mode
[  230.698327][   T12] bridge_slave_0: left promiscuous mode
[  230.699038][ T3662] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  230.704412][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  230.767775][ T8419] netlink: 'syz.5.1546': attribute type 1 has an invalid length.
[  230.853544][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  230.863410][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  230.873387][   T12] bond0 (unregistering): Released all slaves
[  230.899727][ T8416] team0: Device gtp0 is of different type
[  230.918450][ T8428] netlink: 'syz.3.1548': attribute type 8 has an invalid length.
[  230.929199][ T8429] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1546'.
[  230.965222][ T8419] 8021q: adding VLAN 0 to HW filter on device bond2
[  231.003794][ T8424] bond2: (slave veth3): Enslaving as an active interface with a down link
[  231.041406][ T8425] bond2: (slave dummy0): making interface the new active one
[  231.069835][ T8425] dummy0: entered promiscuous mode
[  231.075205][ T8425] bond2: (slave dummy0): Enslaving as an active interface with an up link
[  231.127750][ T8429] bond2: (slave dummy0): Releasing active interface
[  231.173971][ T8429] dummy0 (unregistering): left promiscuous mode
[  231.202791][ T8449] program syz.3.1549 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  231.222674][   T12] hsr_slave_0: left promiscuous mode
[  231.234245][   T12] hsr_slave_1: left promiscuous mode
[  231.240490][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  231.240919][ T5065] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  231.248112][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  231.265852][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  231.274847][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  231.298741][   T12] veth1_macvtap: left promiscuous mode
[  231.307510][   T12] veth0_macvtap: left promiscuous mode
[  231.313349][   T12] veth1_vlan: left promiscuous mode
[  231.318759][   T12] veth0_vlan: left promiscuous mode
[  231.381447][ T8418] syz.5.1546: attempt to access beyond end of device
[  231.381447][ T8418] loop5: rw=2049, sector=138, nr_sectors = 112 limit=128
[  231.426784][   T12] team0 (unregistering): Port device team_slave_1 removed
[  231.436624][   T12] team0 (unregistering): Port device team_slave_0 removed
[  231.696857][ T8398] chnl_net:caif_netlink_parms(): no params data found
[  232.007052][ T8486] set_capacity_and_notify: 1 callbacks suppressed
[  232.008007][ T8486] loop3: detected capacity change from 0 to 512
[  233.105946][ T8488] loop6: detected capacity change from 0 to 256
[  233.128446][ T8488] msdos: Bad value for 'tz'
[  233.969354][ T8488] loop6: detected capacity change from 0 to 512
[  234.099393][ T8488] EXT4-fs: Ignoring removed nobh option
[  234.841539][ T8488] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  234.856197][ T8488] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR
[  234.856419][ T8488] EXT4-fs: failed to create workqueue
[  234.872971][ T8488] EXT4-fs (loop6): mount failed
[  234.983287][ T8486] EXT4-fs warning (device loop3): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop3.
[  235.048067][ T8398] bridge0: port 1(bridge_slave_0) entered blocking state
[  235.629516][ T8398] bridge0: port 1(bridge_slave_0) entered disabled state
[  235.637070][ T8398] bridge_slave_0: entered allmulticast mode
[  235.643663][ T8398] bridge_slave_0: entered promiscuous mode
[  235.651028][ T8398] bridge0: port 2(bridge_slave_1) entered blocking state
[  235.658137][ T8398] bridge0: port 2(bridge_slave_1) entered disabled state
[  235.665617][ T8398] bridge_slave_1: entered allmulticast mode
[  235.672294][ T8398] bridge_slave_1: entered promiscuous mode
[  235.698565][ T8504] loop1: detected capacity change from 0 to 512
[  235.748463][ T8398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  235.769970][ T8506] netlink: 'syz.3.1561': attribute type 21 has an invalid length.
[  235.796068][ T3305] udevd[3305]: incorrect ext4 checksum on /dev/loop1
[  235.803314][ T8504] EXT4-fs (loop1): VFS: Found ext4 filesystem with invalid superblock checksum.  Run e2fsck?
[  235.812609][ T8506] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1561'.
[  235.826049][ T8398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  235.841420][ T3303] udevd[3303]: incorrect ext4 checksum on /dev/loop1
[  235.876691][ T8398] team0: Port device team_slave_0 added
[  235.982958][ T8504] IPVS: set_ctl: invalid protocol: 4 172.30.0.2:20000
[  235.995157][   T28] kauditd_printk_skb: 28 callbacks suppressed
[  235.995175][   T28] audit: type=1400 audit(525035.924:3075): avc:  denied  { setopt } for  pid=8502 comm="syz.1.1560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  236.106426][ T8523] netlink: 'syz.6.1563': attribute type 21 has an invalid length.
[  236.143146][ T8506] netlink: 'syz.3.1561': attribute type 4 has an invalid length.
[  236.176924][   T28] audit: type=1400 audit(525036.114:3076): avc:  denied  { create } for  pid=8521 comm="syz.6.1563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  236.217206][ T8506] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1561'.
[  236.279465][   T28] audit: type=1400 audit(525036.144:3077): avc:  denied  { read } for  pid=8521 comm="syz.6.1563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  236.402769][ T8398] team0: Port device team_slave_1 added
[  236.420999][ T8523] netlink: 156 bytes leftover after parsing attributes in process `syz.6.1563'.
[  236.472680][ T8398] batman_adv: batadv0: Adding interface: batadv_slave_0
[  236.489214][ T8398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  236.534555][ T8540] FAULT_INJECTION: forcing a failure.
[  236.534555][ T8540] name failslab, interval 1, probability 0, space 0, times 0
[  236.554474][ T8398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  236.569127][ T8398] batman_adv: batadv0: Adding interface: batadv_slave_1
[  236.623178][ T8540] CPU: 0 UID: 0 PID: 8540 Comm: syz.1.1567 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  236.623215][ T8540] Tainted: [W]=WARN
[  236.623222][ T8540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  236.623235][ T8540] Call Trace:
[  236.623286][ T8540]  <TASK>
[  236.623296][ T8540]  __dump_stack+0x1d/0x30
[  236.623369][ T8540]  dump_stack_lvl+0x95/0xd0
[  236.623393][ T8540]  dump_stack+0x15/0x1b
[  236.623414][ T8540]  should_fail_ex+0x263/0x280
[  236.623443][ T8540]  should_failslab+0x8c/0xb0
[  236.623540][ T8540]  kmem_cache_alloc_noprof+0x66/0x400
[  236.623633][ T8540]  ? do_getname+0x2e/0x1c0
[  236.623758][ T8540]  do_getname+0x2e/0x1c0
[  236.623782][ T8540]  user_path_at+0x28/0x100
[  236.623816][ T8540]  __x64_sys_pivot_root+0x74/0x110
[  236.623853][ T8540]  x64_sys_call+0x20a/0x3020
[  236.623917][ T8540]  do_syscall_64+0x12c/0x370
[  236.624032][ T8540]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  236.624061][ T8540] RIP: 0033:0x7fda9d03c819
[  236.624115][ T8540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  236.624135][ T8540] RSP: 002b:00007fda9ba97028 EFLAGS: 00000246 ORIG_RAX: 000000000000009b
[  236.624154][ T8540] RAX: ffffffffffffffda RBX: 00007fda9d2b5fa0 RCX: 00007fda9d03c819
[  236.624170][ T8540] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000200000000340
[  236.624187][ T8540] RBP: 00007fda9ba97090 R08: 0000000000000000 R09: 0000000000000000
[  236.624276][ T8540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  236.624292][ T8540] R13: 00007fda9d2b6038 R14: 00007fda9d2b5fa0 R15: 00007ffe25f56fb8
[  236.624315][ T8540]  </TASK>
[  236.799674][ T8398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  236.826420][ T8398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  236.872790][ T8398] hsr_slave_0: entered promiscuous mode
[  236.889158][ T8398] hsr_slave_1: entered promiscuous mode
[  236.910458][ T8398] debugfs: 'hsr0' already exists in 'hsr'
[  236.981969][ T8398] Cannot create hsr debugfs directory
[  237.007649][ T8506] loop3: detected capacity change from 0 to 256
[  237.306221][ T8565] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  237.326552][ T8565] gretap1: entered allmulticast mode
[  237.343163][   T28] audit: type=1400 audit(525037.284:3078): avc:  denied  { read } for  pid=8564 comm="syz.1.1573" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  237.343886][ T8565] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1573'.
[  237.405240][ T8565] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1573'.
[  237.417554][   T28] audit: type=1400 audit(525037.284:3079): avc:  denied  { open } for  pid=8564 comm="syz.1.1573" path="/dev/input/event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  237.473915][ T8398] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  237.499848][   T28] audit: type=1400 audit(525037.354:3080): avc:  denied  { write } for  pid=8568 comm="syz.5.1574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  237.506460][ T8572] loop1: detected capacity change from 0 to 1024
[  237.524425][ T8398] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  237.542087][ T8398] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  237.567789][   T28] audit: type=1400 audit(525037.384:3081): avc:  denied  { nlmsg_write } for  pid=8568 comm="syz.5.1574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  237.614229][ T8398] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  237.621156][   T28] audit: type=1400 audit(525037.434:3082): avc:  denied  { bind } for  pid=8571 comm="syz.1.1575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  237.626631][ T8572] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  237.649883][   T28] audit: type=1400 audit(525037.434:3083): avc:  denied  { setopt } for  pid=8571 comm="syz.1.1575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  237.721815][   T28] audit: type=1400 audit(525037.664:3084): avc:  denied  { append } for  pid=8571 comm="syz.1.1575" name="mISDNtimer" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  237.735048][ T8398] 8021q: adding VLAN 0 to HW filter on device bond0
[  237.756172][ T8398] 8021q: adding VLAN 0 to HW filter on device team0
[  237.767447][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  237.774606][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  237.888236][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  237.895421][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  237.905873][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  238.001365][ T8398] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  238.182441][ T8602] loop1: detected capacity change from 0 to 128
[  238.216813][ T8602] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1)
[  238.281019][ T8398] 8021q: adding VLAN 0 to HW filter on device batadv0
[  238.595357][ T8398] veth0_vlan: entered promiscuous mode
[  238.612992][ T8398] veth1_vlan: entered promiscuous mode
[  238.651755][ T8398] veth0_macvtap: entered promiscuous mode
[  238.670660][ T8398] veth1_macvtap: entered promiscuous mode
[  238.711685][ T8398] batman_adv: batadv0: Interface activated: batadv_slave_0
[  238.737141][ T8398] batman_adv: batadv0: Interface activated: batadv_slave_1
[  238.768414][   T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  238.782644][   T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  238.814357][   T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  238.847877][   T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  238.863630][ T8644] loop1: detected capacity change from 0 to 764
[  238.888132][ T8644] iso9660: Bad value for 'uid'
[  238.893212][ T8644] iso9660: Bad value for 'uid'
[  239.206517][ T8644] loop1: detected capacity change from 0 to 128
[  239.984325][ T8681] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1603'.
[  241.200708][ T8693] netlink: 'syz.5.1608': attribute type 21 has an invalid length.
[  241.238715][ T8693] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1608'.
[  241.395724][   T28] kauditd_printk_skb: 12 callbacks suppressed
[  241.395741][   T28] audit: type=1400 audit(525041.334:3097): avc:  denied  { read } for  pid=8701 comm="syz.3.1612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  241.484142][ T8705] netlink: 'syz.5.1613': attribute type 4 has an invalid length.
[  241.541251][ T8705] loop5: detected capacity change from 0 to 128
[  241.679336][   T28] audit: type=1400 audit(525041.614:3098): avc:  denied  { connect } for  pid=8713 comm="syz.5.1616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  241.713921][ T8714] loop5: detected capacity change from 0 to 1024
[  241.755710][ T8714] EXT4-fs (loop5): stripe (4) is not aligned with cluster size (4096), stripe is disabled
[  241.791561][ T8714] EXT4-fs error (device loop5): ext4_map_blocks:786: inode #3: block 2: comm syz.5.1616: lblock 2 mapped to illegal pblock 2 (length 1)
[  241.821002][ T8714] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  241.821172][ T8714] Quota error (device loop5): qtree_write_dquot: dquota write failed
[  241.830440][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  241.830462][    C1] EXT4-fs (loop5): initial error at time 525041: ext4_map_blocks:786: inode 3: block 2
[  241.830509][    C1] EXT4-fs (loop5): last error at time 525041: ext4_map_blocks:786: inode 3: block 2
[  241.864783][ T8714] EXT4-fs error (device loop5): ext4_map_blocks:786: inode #3: block 48: comm syz.5.1616: lblock 0 mapped to illegal pblock 48 (length 1)
[  241.879309][ T8714] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  241.879423][ T8714] Quota error (device loop5): v2_write_file_info: Can't write info structure
[  241.911022][ T8714] EXT4-fs error (device loop5): ext4_acquire_dquot:7026: comm syz.5.1616: Failed to acquire dquot type 0
[  241.928762][ T8714] loop5: lost filesystem error report for type 5 error -117
[  241.928919][ T8714] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6291: Corrupt filesystem
[  241.956253][ T8726] FAULT_INJECTION: forcing a failure.
[  241.956253][ T8726] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  241.972788][ T8714] loop5: lost filesystem error report for type 5 error -117
[  241.972903][ T8714] EXT4-fs error (device loop5): ext4_evict_inode:265: inode #11: comm syz.5.1616: mark_inode_dirty error
[  241.992187][ T8726] CPU: 0 UID: 0 PID: 8726 Comm: syz.1.1621 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  241.992233][ T8726] Tainted: [W]=WARN
[  241.992242][ T8726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  241.992257][ T8726] Call Trace:
[  241.992266][ T8726]  <TASK>
[  241.992276][ T8726]  __dump_stack+0x1d/0x30
[  241.992316][ T8726]  dump_stack_lvl+0x95/0xd0
[  241.992405][ T8726]  dump_stack+0x15/0x1b
[  241.992429][ T8726]  should_fail_ex+0x263/0x280
[  241.992457][ T8726]  should_fail+0xb/0x20
[  241.992485][ T8726]  should_fail_usercopy+0x1a/0x20
[  241.992588][ T8726]  _copy_from_user+0x1c/0xb0
[  241.992668][ T8726]  snd_seq_ioctl+0x125/0x2f0
[  241.992697][ T8726]  ? __pfx_snd_seq_ioctl+0x10/0x10
[  241.992738][ T8726]  __se_sys_ioctl+0xce/0x140
[  241.992815][ T8726]  __x64_sys_ioctl+0x43/0x50
[  241.992839][ T8726]  x64_sys_call+0x1563/0x3020
[  241.992880][ T8726]  do_syscall_64+0x12c/0x370
[  241.992917][ T8726]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  241.992987][ T8726] RIP: 0033:0x7fda9d03c819
[  241.993007][ T8726] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  241.993031][ T8726] RSP: 002b:00007fda9ba97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  241.993057][ T8726] RAX: ffffffffffffffda RBX: 00007fda9d2b5fa0 RCX: 00007fda9d03c819
[  241.993120][ T8726] RDX: 0000200000000880 RSI: 00000000c0a85320 RDI: 0000000000000003
[  241.993137][ T8726] RBP: 00007fda9ba97090 R08: 0000000000000000 R09: 0000000000000000
[  241.993154][ T8726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  241.993221][ T8726] R13: 00007fda9d2b6038 R14: 00007fda9d2b5fa0 R15: 00007ffe25f56fb8
[  241.993252][ T8726]  </TASK>
[  242.171989][ T8714] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  242.178600][ T8714] EXT4-fs warning (device loop5): ext4_evict_inode:268: couldn't mark inode dirty (err -117)
[  242.208818][ T8714] EXT4-fs (loop5): 1 orphan inode deleted
[  242.225735][   T50] EXT4-fs error (device loop5): ext4_map_blocks:786: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1)
[  242.241931][ T8714] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  242.255079][   T50] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  242.259757][   T50] Quota error (device loop5): remove_tree: Can't read quota data block 1
[  242.292034][   T50] EXT4-fs error (device loop5): ext4_release_dquot:7062: comm kworker/u8:3: Failed to release dquot type 0
[  242.319758][   T28] audit: type=1400 audit(525042.254:3099): avc:  denied  { create } for  pid=8713 comm="syz.5.1616" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1
[  242.358784][ T3662] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  242.369498][   T28] audit: type=1400 audit(525042.254:3100): avc:  denied  { create } for  pid=8713 comm="syz.5.1616" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1
[  242.410636][   T50] EXT4-fs error (device loop5): ext4_map_blocks:786: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1)
[  242.459885][   T50] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  242.460093][   T50] Quota error (device loop5): remove_tree: Can't read quota data block 1
[  242.494779][   T50] EXT4-fs error (device loop5): ext4_release_dquot:7062: comm kworker/u8:3: Failed to release dquot type 0
[  242.506846][   T50] loop5: lost filesystem error report for type 5 error -117
[  242.516732][ T3662] EXT4-fs error (device loop5): __ext4_get_inode_loc:4797: comm syz-executor: Invalid inode table block 1 in block_group 0
[  242.556571][ T8744] loop3: detected capacity change from 0 to 1024
[  242.559889][ T3662] loop5: lost filesystem error report for type 5 error -117
[  242.563020][   T28] audit: type=1400 audit(525042.494:3101): avc:  denied  { create } for  pid=8736 comm="syz.1.1627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  242.595448][ T3662] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6291: Corrupt filesystem
[  242.596141][ T8742] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1627'.
[  242.639796][ T3662] loop5: lost filesystem error report for type 5 error -117
[  242.639909][ T3662] EXT4-fs error (device loop5): ext4_quota_off:7310: inode #3: comm syz-executor: mark_inode_dirty error
[  242.648499][ T8744] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback.
[  242.661175][ T3662] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  242.674699][ T8742] hsr_slave_1 (unregistering): left promiscuous mode
[  242.793796][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  242.813083][   T28] audit: type=1400 audit(525042.734:3102): avc:  denied  { setopt } for  pid=8749 comm="syz.1.1631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  242.936138][ T8748] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1625'.
[  242.948247][ T8759] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1630'.
[  243.116717][ T8766] loop6: detected capacity change from 0 to 512
[  243.127535][ T8766] EXT4-fs (loop6): corrupt root inode, run e2fsck
[  243.134751][ T8764] loop3: detected capacity change from 0 to 512
[  243.141115][ T8766] EXT4-fs (loop6): mount failed
[  243.152971][ T8764] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  243.227896][ T8759] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1630'.
[  243.248773][ T8780] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1640'.
[  243.445949][ T8792] tipc: New replicast peer: 255.255.255.255
[  243.458286][ T8792] tipc: Enabled bearer <udp:syz2>, priority 10
[  243.599893][ T8792] netlink: 399 bytes leftover after parsing attributes in process `syz.5.1645'.
[  244.264358][ T8792] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16)
[  244.459782][ T3387] tipc: Node number set to 3762356222
[  244.491560][ T8820] FAULT_INJECTION: forcing a failure.
[  244.491560][ T8820] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  244.559775][ T8820] CPU: 1 UID: 0 PID: 8820 Comm: syz.1.1649 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  244.559816][ T8820] Tainted: [W]=WARN
[  244.559824][ T8820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  244.559888][ T8820] Call Trace:
[  244.559896][ T8820]  <TASK>
[  244.559905][ T8820]  __dump_stack+0x1d/0x30
[  244.559939][ T8820]  dump_stack_lvl+0x95/0xd0
[  244.559971][ T8820]  dump_stack+0x15/0x1b
[  244.559995][ T8820]  should_fail_ex+0x263/0x280
[  244.560097][ T8820]  should_fail+0xb/0x20
[  244.560126][ T8820]  should_fail_usercopy+0x1a/0x20
[  244.560214][ T8820]  strncpy_from_user+0x27/0x250
[  244.560246][ T8820]  __se_sys_memfd_create+0x20f/0x3b0
[  244.560293][ T8820]  __x64_sys_memfd_create+0x31/0x40
[  244.560424][ T8820]  x64_sys_call+0x1f22/0x3020
[  244.560467][ T8820]  do_syscall_64+0x12c/0x370
[  244.560506][ T8820]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  244.560572][ T8820] RIP: 0033:0x7fda9d03c819
[  244.560592][ T8820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  244.560612][ T8820] RSP: 002b:00007fda9ba96e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[  244.560631][ T8820] RAX: ffffffffffffffda RBX: 000000000000048d RCX: 00007fda9d03c819
[  244.560648][ T8820] RDX: 00007fda9ba96ee0 RSI: 0000000000000000 RDI: 00007fda9d0d2e71
[  244.560693][ T8820] RBP: 0000200000000a00 R08: 00000000ffffffff R09: 0000000000000000
[  244.560710][ T8820] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000540
[  244.560759][ T8820] R13: 00007fda9ba96ee0 R14: 00007fda9ba96ea0 R15: 0000200000000200
[  244.560779][ T8820]  </TASK>
[  244.770796][ T8830] loop1: detected capacity change from 0 to 512
[  244.839080][ T8830] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  244.895817][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  244.994412][ T8845] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1658'.
[  245.010932][ T8845] netlink: 'syz.6.1658': attribute type 1 has an invalid length.
[  245.028635][ T8845] netlink: 568 bytes leftover after parsing attributes in process `syz.6.1658'.
[  245.070281][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  245.135528][ T8857] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8857 comm=syz.8.1662
[  245.188311][ T8861] loop8: detected capacity change from 0 to 512
[  245.214216][ T8861] EXT4-fs (loop8): revision level too high, forcing read-only mode
[  245.231196][ T8861] EXT4-fs (loop8): orphan cleanup on readonly fs
[  245.250144][ T8861] EXT4-fs error (device loop8): ext4_do_update_inode:5602: inode #16: comm syz.8.1664: corrupted inode contents
[  245.262267][ T8861] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  245.265980][ T8861] EXT4-fs (loop8): Remounting filesystem read-only
[  245.275192][    C0] EXT4-fs (loop8): error count since last fsck: 1
[  245.275218][    C0] EXT4-fs (loop8): initial error at time 525301: ext4_do_update_inode:5602: inode 16
[  245.275262][    C0] EXT4-fs (loop8): last error at time 525301: ext4_do_update_inode:5602: inode 16
[  245.313118][ T8861] EXT4-fs (loop8): 1 truncate cleaned up
[  245.319156][   T12] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  245.342306][   T12] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  245.372134][   T12] EXT4-fs (loop8): Quota write (off=8, len=24) cancelled because transaction is not started
[  245.372354][ T8853] loop6: detected capacity change from 0 to 2048
[  245.393536][ T8861] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  245.421735][ T8876] loop3: detected capacity change from 0 to 512
[  245.428516][ T8876] EXT4-fs: inline encryption not supported
[  245.434833][ T3854]  loop6: p1 p2
[  245.440538][ T8876] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.1668: bad orphan inode 15
[  245.451552][ T8876] loop3: lost filesystem error report for type 5 error -117
[  245.451742][ T8876] ext4_test_bit(bit=14, block=5) = 0
[  245.459828][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  245.459848][    C0] EXT4-fs (loop3): initial error at time 525301: ext4_orphan_get:1423
[  245.459873][    C0] EXT4-fs (loop3): last error at time 525301: ext4_orphan_get:1423
[  245.497625][ T8876] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  245.511285][ T8398] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  245.530210][ T8876] EXT4-fs error (device loop3): __ext4_new_inode:1079: comm syz.3.1668: reserved inode found cleared - inode=1
[  245.530478][ T8853]  loop6: p1 p2
[  245.576082][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  245.655451][ T8886] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1672'.
[  245.702732][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory
[  245.714191][ T3854] udevd[3854]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[  245.745238][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory
[  245.752050][ T3854] udevd[3854]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[  245.836525][ T8889] can0: slcan on ptm0.
[  245.946996][ T8904] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  245.983899][ T8904] block device autoloading is deprecated and will be removed.
[  246.393864][ T8922] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1679'.
[  246.569943][ T8882] can0 (unregistered): slcan off ptm0.
[  246.580540][ T8935] loop6: detected capacity change from 0 to 4096
[  246.608303][ T8935] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  246.772832][ T8943] loop1: detected capacity change from 0 to 256
[  246.790818][ T8943] msdos: Bad value for 'tz'
[  246.892431][ T8943] loop1: detected capacity change from 0 to 512
[  246.907262][ T8943] EXT4-fs: Ignoring removed nobh option
[  246.986045][   T28] kauditd_printk_skb: 28 callbacks suppressed
[  246.986073][   T28] audit: type=1400 audit(525302.927:3125): avc:  denied  { mounton } for  pid=8934 comm="syz.6.1683" path="/bus" dev="proc" ino=4026531853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1
[  247.354417][ T8950] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  247.485202][   T28] audit: type=1400 audit(525302.977:3126): avc:  denied  { append } for  pid=8934 comm="syz.6.1683" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  247.620374][ T8943] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  247.652417][ T8943] EXT4-fs (loop1): 1 truncate cleaned up
[  247.670281][ T8943] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  247.792313][   T28] audit: type=1400 audit(525303.007:3127): avc:  denied  { read } for  pid=8934 comm="syz.6.1683" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  247.856637][   T28] audit: type=1400 audit(525303.007:3128): avc:  denied  { open } for  pid=8934 comm="syz.6.1683" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  248.194851][   T28] audit: type=1400 audit(525303.917:3129): avc:  denied  { mount } for  pid=8967 comm="syz.8.1689" name="/" dev="ramfs" ino=25742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  248.769620][ T5065] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  248.854584][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  248.898638][   T28] audit: type=1326 audit(525304.837:3130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8991 comm="syz.1.1697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda9d03c819 code=0x7ffc0000
[  248.929721][   T28] audit: type=1326 audit(525304.867:3131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8991 comm="syz.1.1697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda9d03c819 code=0x7ffc0000
[  248.962964][   T28] audit: type=1326 audit(525304.867:3132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8991 comm="syz.1.1697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fda9d03c819 code=0x7ffc0000
[  248.986728][   T28] audit: type=1326 audit(525304.867:3133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8991 comm="syz.1.1697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda9d03c819 code=0x7ffc0000
[  249.048723][ T9005] loop8: detected capacity change from 0 to 512
[  249.069554][ T9005] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  249.087138][ T9006] FAULT_INJECTION: forcing a failure.
[  249.087138][ T9006] name failslab, interval 1, probability 0, space 0, times 0
[  249.090096][   T28] audit: type=1326 audit(525304.867:3134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8991 comm="syz.1.1697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda9d03c819 code=0x7ffc0000
[  249.145009][ T9006] CPU: 0 UID: 0 PID: 9006 Comm: syz.5.1700 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  249.145053][ T9006] Tainted: [W]=WARN
[  249.145063][ T9006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  249.145078][ T9006] Call Trace:
[  249.145085][ T9006]  <TASK>
[  249.145092][ T9006]  __dump_stack+0x1d/0x30
[  249.145201][ T9006]  dump_stack_lvl+0x95/0xd0
[  249.145234][ T9006]  dump_stack+0x15/0x1b
[  249.145309][ T9006]  should_fail_ex+0x263/0x280
[  249.145346][ T9006]  ? getname_long+0x32/0x100
[  249.145424][ T9006]  should_failslab+0x8c/0xb0
[  249.145514][ T9006]  __kmalloc_cache_noprof+0x5f/0x410
[  249.145550][ T9006]  ? should_fail_usercopy+0x1a/0x20
[  249.145591][ T9006]  getname_long+0x32/0x100
[  249.145662][ T9006]  do_getname+0x12e/0x1c0
[  249.145730][ T9006]  __se_sys_renameat+0x26/0x1c0
[  249.145766][ T9006]  __x64_sys_renameat+0x55/0x70
[  249.145801][ T9006]  x64_sys_call+0x2c90/0x3020
[  249.145843][ T9006]  do_syscall_64+0x12c/0x370
[  249.145944][ T9006]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  249.145978][ T9006] RIP: 0033:0x7febf99cc819
[  249.145997][ T9006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  249.146019][ T9006] RSP: 002b:00007febf841f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000108
[  249.146043][ T9006] RAX: ffffffffffffffda RBX: 00007febf9c45fa0 RCX: 00007febf99cc819
[  249.146119][ T9006] RDX: ffffffffffffffff RSI: 0000200000000a80 RDI: ffffffffffffffff
[  249.146137][ T9006] RBP: 00007febf841f090 R08: 0000000000000000 R09: 0000000000000000
[  249.146157][ T9006] R10: 0000200000000c80 R11: 0000000000000246 R12: 0000000000000001
[  249.146183][ T9006] R13: 00007febf9c46038 R14: 00007febf9c45fa0 R15: 00007fffe0a2f3b8
[  249.146273][ T9006]  </TASK>
[  249.326607][ T9005] EXT4-fs error (device loop8): xattr_find_entry:337: inode #15: comm syz.8.1698: corrupted xattr entries
[  249.339691][ T9005] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  249.349671][    C1] EXT4-fs (loop8): error count since last fsck: 1
[  249.365405][    C1] EXT4-fs (loop8): initial error at time 525305: xattr_find_entry:337: inode 15
[  249.374522][    C1] EXT4-fs (loop8): last error at time 525305: xattr_find_entry:337: inode 15
[  249.389034][ T9005] EXT4-fs (loop8): 1 truncate cleaned up
[  249.395482][ T9005] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  249.402127][ T9020] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1703'.
[  249.471165][ T9027] netlink: 'syz.6.1704': attribute type 1 has an invalid length.
[  249.504702][ T9027] 8021q: adding VLAN 0 to HW filter on device bond3
[  249.528471][ T9027] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  249.547310][ T9027] bond3: (slave ip6erspan0): making interface the new active one
[  249.556793][ T9027] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link
[  249.567588][ T9035] netlink: 'syz.6.1704': attribute type 1 has an invalid length.
[  249.614541][ T8398] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  249.746328][ T9061] loop8: detected capacity change from 0 to 512
[  249.780851][ T9061] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  249.830977][ T8398] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  249.840469][ T9071] loop5: detected capacity change from 0 to 1024
[  249.848652][ T9071] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  249.886143][ T9071] EXT4-fs (loop5): Couldn't mount because of unsupported optional features (40000)
[  249.895770][ T9071] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities
[  249.989114][ T9087] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1724'.
[  250.029471][ T9092] loop5: detected capacity change from 0 to 1764
[  250.048411][ T9092] grow_buffers: requested out-of-range block 18446744072010032070 for device loop5
[  250.067631][ T9092] isofs_fill_super: bread failed, dev=loop5, iso_blknum=1297723875, block=-1699519546
[  250.166283][ T9102] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1728'.
[  250.176267][ T9094] 9pnet: p9_errstr2errno: server reported unknown error 0x00000
[  250.226630][ T9107] loop5: detected capacity change from 0 to 256
[  250.313615][ T9114] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1733'.
[  250.467262][ T9128] loop3: detected capacity change from 0 to 2048
[  250.496064][ T9132] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  250.540161][ T9128] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  250.577415][ T9128] EXT4-fs (loop3): shut down requested (0)
[  250.682437][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  250.700701][ T9145] loop1: detected capacity change from 0 to 2048
[  250.724985][ T9145] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  250.783803][ T9145] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  250.827476][ T9142] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  250.880614][ T9145] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28
[  250.911642][ T9145] EXT4-fs (loop1): This should not happen!! Data will be lost
[  250.911642][ T9145] 
[  250.962368][ T9145] EXT4-fs (loop1): Total free blocks count 0
[  250.980489][ T9145] EXT4-fs (loop1): Free/Dirty block details
[  250.986454][ T9145] EXT4-fs (loop1): free_blocks=2415919504
[  251.012481][ T9145] EXT4-fs (loop1): dirty_blocks=64
[  251.027865][ T9145] EXT4-fs (loop1): Block reservation details
[  251.081192][ T9179] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  251.100886][ T9145] EXT4-fs (loop1): i_reserved_data_blocks=4
[  251.109760][ T9144] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28
[  251.139891][ T3311] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  251.370061][ T9218] 9p: Bad value for 'rfdno'
[  251.501759][ T9231] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1766'.
[  251.739215][ T9242] loop1: detected capacity change from 0 to 256
[  251.757604][ T9242] msdos: Bad value for 'tz'
[  251.865353][ T9242] loop1: detected capacity change from 0 to 512
[  251.879692][ T9242] EXT4-fs: Ignoring removed nobh option
[  251.894991][ T9242] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  251.955502][ T9242] EXT4-fs (loop1): 1 truncate cleaned up
[  251.972840][ T9242] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  252.099748][   T28] kauditd_printk_skb: 75 callbacks suppressed
[  252.099765][   T28] audit: type=1326 audit(525308.047:3210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9227 comm="syz.5.1766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febf99cc819 code=0x7ffc0000
[  252.210501][ T9246] loop6: detected capacity change from 0 to 1024
[  252.470518][ T9246] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  252.513366][   T28] audit: type=1326 audit(525308.087:3212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9227 comm="syz.5.1766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7febf99cc582 code=0x7ffc0000
[  252.555078][ T9246] audit: audit_backlog=65 > audit_backlog_limit=64
[  252.582131][ T9246] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64
[  252.615161][ T9246] audit: backlog limit exceeded
[  252.620512][   T28] audit: type=1326 audit(525308.077:3211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9227 comm="syz.5.1766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febf99cc819 code=0x7ffc0000
[  252.726705][   T28] audit: type=1326 audit(525308.087:3213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9227 comm="syz.5.1766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febf99cc819 code=0x7ffc0000
[  252.770353][ T5065] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  252.836304][   T28] audit: type=1326 audit(525308.087:3214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9227 comm="syz.5.1766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7febf99cc617 code=0x7ffc0000
[  252.982393][   T28] audit: type=1326 audit(525308.087:3215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9227 comm="syz.5.1766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7febf9989511 code=0x7ffc0000
[  253.007391][ T9245] msdos: Unknown parameter 'quit'
[  253.025896][ T9263] lo speed is unknown, defaulting to 1000
[  253.089795][   T28] audit: type=1326 audit(525308.087:3216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9227 comm="syz.5.1766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7febf99cd609 code=0x7ffc0000
[  253.290321][ T9259] EXT4-fs (loop3): invalid inodes per group: 1
[  253.290321][ T9259] 
[  253.477531][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  253.774523][ T9286] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1782'.
[  254.132905][ T9312] lo speed is unknown, defaulting to 1000
[  254.455773][ T9321] set_capacity_and_notify: 2 callbacks suppressed
[  254.455789][ T9321] loop1: detected capacity change from 0 to 512
[  255.181600][ T9325] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  256.110224][ T9334] loop6: detected capacity change from 0 to 1024
[  256.130880][ T9337] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1804'.
[  256.143671][ T9339] FAULT_INJECTION: forcing a failure.
[  256.143671][ T9339] name failslab, interval 1, probability 0, space 0, times 0
[  256.156939][ T9339] CPU: 1 UID: 0 PID: 9339 Comm: syz.5.1803 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  256.157107][ T9339] Tainted: [W]=WARN
[  256.157116][ T9339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  256.157144][ T9339] Call Trace:
[  256.157152][ T9339]  <TASK>
[  256.157162][ T9339]  __dump_stack+0x1d/0x30
[  256.157195][ T9339]  dump_stack_lvl+0x95/0xd0
[  256.157225][ T9339]  dump_stack+0x15/0x1b
[  256.157310][ T9339]  should_fail_ex+0x263/0x280
[  256.157371][ T9339]  should_failslab+0x8c/0xb0
[  256.157398][ T9339]  kmem_cache_alloc_noprof+0x66/0x400
[  256.157428][ T9339]  ? do_getname+0x2e/0x1c0
[  256.157513][ T9339]  do_getname+0x2e/0x1c0
[  256.157579][ T9339]  __se_sys_renameat+0x35/0x1c0
[  256.157613][ T9339]  __x64_sys_renameat+0x55/0x70
[  256.157646][ T9339]  x64_sys_call+0x2c90/0x3020
[  256.157731][ T9339]  do_syscall_64+0x12c/0x370
[  256.157766][ T9339]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  256.157794][ T9339] RIP: 0033:0x7febf99cc819
[  256.157813][ T9339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  256.157836][ T9339] RSP: 002b:00007febf841f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000108
[  256.157922][ T9339] RAX: ffffffffffffffda RBX: 00007febf9c45fa0 RCX: 00007febf99cc819
[  256.157941][ T9339] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: ffffffffffffffff
[  256.157959][ T9339] RBP: 00007febf841f090 R08: 0000000000000000 R09: 0000000000000000
[  256.157976][ T9339] R10: 0000200000000c80 R11: 0000000000000246 R12: 0000000000000001
[  256.157993][ T9339] R13: 00007febf9c46038 R14: 00007febf9c45fa0 R15: 00007fffe0a2f3b8
[  256.158095][ T9339]  </TASK>
[  256.379856][ T9334] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  256.571116][ T9352] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  256.592255][ T5065] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  256.710369][ T9360] syzkaller0: entered promiscuous mode
[  256.724660][ T9360] syzkaller0: entered allmulticast mode
[  256.750056][ T9360] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 65487
[  256.779689][ T9363] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  256.922273][ T9379] FAULT_INJECTION: forcing a failure.
[  256.922273][ T9379] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  256.936824][ T9368] loop3: detected capacity change from 0 to 128
[  256.952621][ T9368] FAT-fs (loop3): Directory bread(block 288) failed
[  256.980839][ T9368] FAT-fs (loop3): Directory bread(block 289) failed
[  256.999695][ T9385] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1818'.
[  257.019059][ T9379] CPU: 0 UID: 0 PID: 9379 Comm: syz.1.1815 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  257.019093][ T9379] Tainted: [W]=WARN
[  257.019099][ T9379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  257.019189][ T9379] Call Trace:
[  257.019198][ T9379]  <TASK>
[  257.019209][ T9379]  __dump_stack+0x1d/0x30
[  257.019263][ T9379]  dump_stack_lvl+0x95/0xd0
[  257.019293][ T9379]  dump_stack+0x15/0x1b
[  257.019322][ T9379]  should_fail_ex+0x263/0x280
[  257.019439][ T9379]  should_fail+0xb/0x20
[  257.019464][ T9379]  should_fail_usercopy+0x1a/0x20
[  257.019495][ T9379]  _copy_to_user+0x20/0xa0
[  257.019572][ T9379]  simple_read_from_buffer+0xb5/0x130
[  257.019603][ T9379]  proc_fail_nth_read+0x10e/0x150
[  257.019658][ T9379]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  257.019740][ T9379]  vfs_read+0x1ab/0x7f0
[  257.019763][ T9379]  ? __rcu_read_unlock+0x4e/0x70
[  257.019816][ T9379]  ? __fget_files+0x184/0x1c0
[  257.019847][ T9379]  ? mutex_lock+0x57/0x90
[  257.019929][ T9379]  ksys_read+0xdc/0x1a0
[  257.019953][ T9379]  __x64_sys_read+0x40/0x50
[  257.019977][ T9379]  x64_sys_call+0x2886/0x3020
[  257.020012][ T9379]  do_syscall_64+0x12c/0x370
[  257.020054][ T9379]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  257.020082][ T9379] RIP: 0033:0x7fda9cffd04e
[  257.020100][ T9379] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  257.020123][ T9379] RSP: 002b:00007fda9ba96fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  257.020167][ T9379] RAX: ffffffffffffffda RBX: 00007fda9ba976c0 RCX: 00007fda9cffd04e
[  257.020186][ T9379] RDX: 000000000000000f RSI: 00007fda9ba970a0 RDI: 0000000000000005
[  257.020202][ T9379] RBP: 00007fda9ba97090 R08: 0000000000000000 R09: 0000000000000000
[  257.020227][ T9379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  257.020243][ T9379] R13: 00007fda9d2b6038 R14: 00007fda9d2b5fa0 R15: 00007ffe25f56fb8
[  257.020285][ T9379]  </TASK>
[  257.259525][ T9368] FAT-fs (loop3): Directory bread(block 290) failed
[  257.266281][ T9368] FAT-fs (loop3): Directory bread(block 291) failed
[  257.288564][   T28] kauditd_printk_skb: 73 callbacks suppressed
[  257.288581][   T28] audit: type=1326 audit(525313.227:3290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9388 comm="syz.6.1820" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe439dec819 code=0x0
[  257.309920][ T9368] FAT-fs (loop3): Directory bread(block 292) failed
[  257.340913][ T9385] loop5: detected capacity change from 0 to 4096
[  257.347647][ T9385] EXT4-fs: inline encryption not supported
[  257.364868][ T9368] FAT-fs (loop3): Directory bread(block 293) failed
[  257.378635][ T9392] geneve2: entered promiscuous mode
[  257.388931][ T9392] geneve2: entered allmulticast mode
[  257.413169][ T9385] EXT4-fs: test_dummy_encryption option not supported
[  257.422130][   T30] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  257.427155][ T9368] FAT-fs (loop3): Directory bread(block 294) failed
[  257.458324][   T30] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  257.479052][  T309] ==================================================================
[  257.482596][ T9368] FAT-fs (loop3): Directory bread(block 295) failed
[  257.487209][  T309] BUG: KCSAN: data-race in n_tty_lookahead_flow_ctrl / tty_set_termios
[  257.502159][  T309] 
[  257.504527][  T309] write to 0xffff88810fb24108 of 44 bytes by task 9395 on cpu 1:
[  257.512291][  T309]  tty_set_termios+0xc0/0x910
[  257.517022][  T309]  set_termios+0x373/0x4f0
[  257.521486][  T309]  tty_mode_ioctl+0x37f/0x5b0
[  257.526215][  T309]  n_tty_ioctl_helper+0x87/0x370
[  257.531203][  T309]  n_tty_ioctl+0x101/0x230
[  257.535655][  T309]  tty_ioctl+0x83e/0xb80
[  257.539953][  T309]  __se_sys_ioctl+0xce/0x140
[  257.544584][  T309]  __x64_sys_ioctl+0x43/0x50
[  257.549221][  T309]  x64_sys_call+0x1563/0x3020
[  257.553942][  T309]  do_syscall_64+0x12c/0x370
[  257.558574][  T309]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  257.564598][  T309] 
[  257.566956][  T309] read to 0xffff88810fb24121 of 1 bytes by task 309 on cpu 0:
[  257.574439][  T309]  n_tty_lookahead_flow_ctrl+0x126/0x300
[  257.580124][  T309]  tty_port_default_lookahead_buf+0x91/0xc0
[  257.586098][  T309]  flush_to_ldisc+0x288/0x340
[  257.590843][  T309]  process_scheduled_works+0x513/0xa10
[  257.596357][  T309]  worker_thread+0x58a/0x780
[  257.600989][  T309]  kthread+0x22a/0x280
[  257.605086][  T309]  ret_from_fork+0x150/0x360
[  257.609753][  T309]  ret_from_fork_asm+0x1a/0x30
[  257.614597][  T309] 
[  257.616950][  T309] value changed: 0x11 -> 0x00
[  257.621655][  T309] 
[  257.624017][  T309] Reported by Kernel Concurrency Sanitizer on:
[  257.630220][  T309] CPU: 0 UID: 0 PID: 309 Comm: kworker/u8:5 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  257.641296][  T309] Tainted: [W]=WARN
[  257.645123][  T309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  257.655221][  T309] Workqueue: events_unbound flush_to_ldisc
[  257.661124][  T309] ==================================================================
[  257.682319][   T28] audit: type=1400 audit(525313.617:3291): avc:  denied  { ioctl } for  pid=9367 comm="syz.3.1813" path="socket:[26984]" dev="sockfs" ino=26984 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  257.689872][   T30] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  257.716112][   T30] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  257.729258][ T9375] FAT-fs (loop3): Directory bread(block 288) failed
[  257.741139][ T9375] FAT-fs (loop3): Directory bread(block 289) failed
[  257.769046][ T9368] hub 9-0:1.0: USB hub found
[  257.784460][ T9394] netlink: 84 bytes leftover after parsing attributes in process `syz.6.1820'.
[  257.806291][ T9368] hub 9-0:1.0: 8 ports detected
[  257.815625][   T28] audit: type=1400 audit(525313.707:3292): avc:  denied  { write } for  pid=9367 comm="syz.3.1813" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  257.885863][   T28] audit: type=1400 audit(525313.797:3293): avc:  denied  { setopt } for  pid=9388 comm="syz.6.1820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  259.197808][ T5065] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  259.209007][ T5065] CPU: 0 UID: 0 PID: 5065 Comm: syz-executor Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  259.209049][ T5065] Tainted: [W]=WARN
[  259.209057][ T5065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  259.209149][ T5065] Call Trace:
[  259.209159][ T5065]  <TASK>
[  259.209237][ T5065]  __dump_stack+0x1d/0x30
[  259.209269][ T5065]  dump_stack_lvl+0x95/0xd0
[  259.209301][ T5065]  dump_stack+0x15/0x1b
[  259.209339][ T5065]  dump_header+0x80/0x240
[  259.209426][ T5065]  oom_kill_process+0x295/0x350
[  259.209457][ T5065]  out_of_memory+0x97d/0xb80
[  259.209489][ T5065]  try_charge_memcg+0x62e/0xa10
[  259.209573][ T5065]  mem_cgroup_swapin_charge_folio+0x103/0x1f0
[  259.209641][ T5065]  __swap_cache_prepare_and_add+0x67/0x460
[  259.209730][ T5065]  ? alloc_pages_mpol+0x217/0x260
[  259.209789][ T5065]  swap_cache_alloc_folio+0xa2/0x120
[  259.209844][ T5065]  swap_cluster_readahead+0x26e/0x3d0
[  259.209891][ T5065]  swapin_readahead+0xde/0x840
[  259.210078][ T5065]  ? __rcu_read_unlock+0x4e/0x70
[  259.210105][ T5065]  ? __perf_event_task_sched_in+0xa65/0xad0
[  259.210139][ T5065]  ? __rcu_read_unlock+0x4e/0x70
[  259.210165][ T5065]  ? swap_cache_get_folio+0x26f/0x280
[  259.210281][ T5065]  do_swap_page+0x2fe/0x21e0
[  259.210320][ T5065]  ? __schedule+0x93c/0xd40
[  259.210361][ T5065]  ? __rcu_read_lock+0x36/0x50
[  259.210418][ T5065]  ? pte_offset_map_rw_nolock+0x19e/0x200
[  259.210461][ T5065]  handle_mm_fault+0xb46/0x3020
[  259.210505][ T5065]  ? vma_start_read+0x1c7/0x2c0
[  259.210544][ T5065]  do_user_addr_fault+0x62f/0x1050
[  259.210712][ T5065]  ? trace_page_fault_user+0x1f/0xe0
[  259.210760][ T5065]  exc_page_fault+0x62/0xa0
[  259.210787][ T5065]  asm_exc_page_fault+0x26/0x30
[  259.210836][ T5065] RIP: 0033:0x7fe439da7997
[  259.210886][ T5065] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  259.210911][ T5065] RSP: 002b:00007ffdb44a25b0 EFLAGS: 00010202
[  259.210932][ T5065] RAX: 0000000000000000 RBX: 000055558e722500 RCX: 00007fe439da7997
[  259.210950][ T5065] RDX: 00007ffdb44a25f0 RSI: 0000000000000000 RDI: 0000000000000000
[  259.210966][ T5065] RBP: 00007ffdb44a265c R08: 0000000000000000 R09: 0000000000000000
[  259.210983][ T5065] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388
[  259.210999][ T5065] R13: 00000000000927c0 R14: 000000000003ef13 R15: 00007ffdb44a26b0
[  259.211149][ T5065]  </TASK>
[  259.454863][ T5065] memory: usage 296800kB, limit 307200kB, failcnt 19390
[  259.464064][ T5065] memory+swap: usage 365144kB, limit 9007199254740988kB, failcnt 0
[  259.472555][ T5065] kmem: usage 277268kB, limit 9007199254740988kB, failcnt 0
[  259.480243][ T5065] Memory cgroup stats for /syz6:
[  259.480525][ T5065] cache 0
[  259.488686][ T5065] rss 36864
[  259.492170][ T5065] shmem 0
[  259.495171][ T5065] mapped_file 0
[  259.498688][ T5065] dirty 0
[  259.502126][ T5065] writeback 28672
[  259.506096][ T5065] workingset_refault_anon 8
[  259.511035][ T5065] workingset_refault_file 0
[  259.515911][ T5065] swap 81166336
[  259.520050][ T5065] swapcached 81252352
[  259.534462][ T5065] pgpgin 203518
[  259.548910][ T5065] pgpgout 203497
[  259.559756][ T5065] pgfault 179104
[  259.566736][ T5065] pgmajfault 1
[  259.576807][ T5065] inactive_anon 28672
[  259.581907][ T5065] active_anon 32768
[  259.585895][ T5065] inactive_file 24576
[  259.590224][ T5065] active_file 0
[  259.593867][ T5065] unevictable 0
[  259.597402][ T5065] hierarchical_memory_limit 314572800
[  259.603147][ T5065] hierarchical_memsw_limit 9223372036854771712
[  259.609386][ T5065] total_cache 0
[  259.613159][ T5065] total_rss 36864
[  259.616877][ T5065] total_shmem 0
[  259.620619][ T5065] total_mapped_file 0
[  259.624728][ T5065] total_dirty 0
[  259.628322][ T5065] total_writeback 28672
[  259.632806][ T5065] total_workingset_refault_anon 8
[  259.638016][ T5065] total_workingset_refault_file 0
[  259.643307][ T5065] total_swap 81166336
[  259.647355][ T5065] total_swapcached 81252352
[  259.652070][ T5065] total_pgpgin 203518
[  259.656141][ T5065] total_pgpgout 203497
[  259.660551][ T5065] total_pgfault 179104
[  259.664719][ T5065] total_pgmajfault 1
[  259.668722][ T5065] total_inactive_anon 28672
[  259.673621][ T5065] total_active_anon 32768
[  259.678084][ T5065] total_inactive_file 24576
[  259.686424][ T5065] total_active_file 0
[  259.690604][ T5065] total_unevictable 0
[  259.694656][ T5065] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.1820,pid=9388,uid=0
[  259.709726][ T5065] Memory cgroup out of memory: Killed process 9388 (syz.6.1820) total-vm:104816kB, anon-rss:1344kB, file-rss:30828kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000
[  259.710585][ T9392] syz.6.1820 (9392) used greatest stack depth: 8248 bytes left