last executing test programs:

10.701894535s ago: executing program 1 (id=1075):
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x100000)
syz_usb_disconnect(r0)
syz_mount_image$msdos(&(0x7f0000000340), &(0x7f0000000040)='./file0\x00', 0x208010, &(0x7f0000000080)={[{@fat=@nfs_stale_rw}, {@nodots}, {@nodots}, {@fat=@check_strict}, {}, {@dots}, {@nodots}, {@dots}]}, 0x0, 0x239, &(0x7f0000000380)="$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")
syz_usb_connect(0x0, 0x1b, &(0x7f0000002000)=ANY=[], 0x0)
ioctl$EVIOCRMFF(r0, 0x40045506, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x400040, 0x14)
syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x30, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @local, @mcast2, [{0x1, 0x1, "909f50c21562"}]}}}}}}, 0x0)

9.466232768s ago: executing program 3 (id=1088):
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0xffffffff)
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0xd2000424)
mkdir(&(0x7f0000000100)='./bus\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x2, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, r1, 0xffff7fffffffffff, 0xffffffffffffffff, 0x1)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x80, 0x0, 0x0, 0x4, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000140), 0x9}, 0xc000, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unshare(0x22020400)
syz_emit_ethernet(0xaf, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000019000100000086e25cca3c10321e506de1b1d024e45200000000000280200000fd0400050000000b08000200e0000001"], 0x24}}, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000680)=""/9, 0x9}], 0x1, 0x20033, 0x51b)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r6, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10)
connect$inet(r6, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
sendmsg$inet(r6, 0x0, 0x4004045)
sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1, &(0x7f0000000300)=ANY=[@ANYRES64=r4], 0x18, 0x4855}, 0x24000052)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

9.337664733s ago: executing program 1 (id=1089):
r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
lseek(r0, 0x2f, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10042, &(0x7f00000000c0)={[{@nouid32}, {@delalloc}]}, 0xfe, 0x26f, &(0x7f0000001c80)="$eJzs3T9oJFUcB/Df7B/jJotGbQTxD4iIBkLsBJvYKAQkBBFBhYiIlSRCTLDLWtlYaK0SEGyC2BktxSbYKIJV1BS55uAuXHHhirtij9nZDZtkw132b9j5fGDZN3nvzXs7yfdNWJiZAHJrOiLmI6IYETMRUY6IpL3BM9lrurm5VdldjqjX37yRNNpl25lWv6mIqEXEyxGlVt3GzrsHt/Zef/7L9fJzP+y8UxnW52t3eLD/xtF3i1/8vPDSxl//XFtMYj6qzbr2z9FPSYeflZKIRwcx2CWRlEY9A+7H0mc//Zvm/rGIeLaR/3IUmpH9au2B38vx4rfn9f36+t9PDHOuQP/V6+X0HFirA7lTiIhqJIXZiMjKhcLsbPY//H/FycLHq2ufzny0ur7yYaMauKyqF2ma7L/268QvU6fyf7WY5R8YX9WI/beWtv9Py0fFUc8GGJj2b9ufzN7S/M+8v/lCyD/kjvxDfsk/5Jf8wxjoMrvyD/nVS/4fHNCcgOFw/ofx83CrUG4Vah3byT/kl/zDmPq+01WnJ8k/5Fd7/gGAfKlPjPoKZGBURr3+AAAAAAAAAAAAAAAAAAAAZ21Vdpdbr2GN+cc3EYevRkSp0/jF5gPHs7uNT95M0mbHkqxbT957uscd9OjHvl19Xemq10NX+jV+d/58ajD7/fzk5rkHZ3MlopY2niuVzv79JT0/8P6Re9SXP+hxgAs6fVfAV94e7vin3dke7fgLexG/pevPXHP9SQ/Q8e+/EI833juvP9X2Wyx36ZPbPe4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAobkbAAD//2SKbDc=")
r1 = creat(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5)
r7 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
tgkill(r7, r7, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100))
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYRES32=r0, @ANYBLOB="000000040000000000eaff001e00009763df13003ec1cb3440cd6c64281fb0d28842873b6633916dcc8d8de3833ffafaa30ac26b9a2dbdb2048f6ea043353f2d940db158cdcd98ddcfeb65", @ANYRES32, @ANYRES32=r1, @ANYBLOB], 0x50)
r8 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r8, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)

5.911425183s ago: executing program 1 (id=1093):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r2, 0x4002f516, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x14)
r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
r4 = perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x4, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0)
unshare(0x6c040000)
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00')
write$binfmt_script(r8, &(0x7f0000003140)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={<r9=>0x0}, &(0x7f0000000100)=0xc)
getpgid(r9)

5.686373271s ago: executing program 0 (id=1094):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000004000000000000000000000085000000bc000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r0, 0x18000000000002a0, 0x72, 0x0, &(0x7f00000025c0)="b9ff03476804263a9cc17d6a185fe0823aa733d275cf25ab81d9391e8019d936d6568dd05440f1f5ab72430416e958aa1d9f0133401d45749b096fc99b4e0603eca503d395b7663f094e1624ec18e96d9177b5c9a9e24c10bad3fbf9a01d074f4b7d17458cd5c70e0fc9d8538260cb30dfd2", 0x0, 0xcb, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

5.604868494s ago: executing program 3 (id=1095):
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x3967, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x5}, 0x50)

5.057979533s ago: executing program 3 (id=1098):
socket(0x23, 0x1, 0x44)
setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10003, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x7, 0x100}, 0x204, 0x2, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x401}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1)
write$sndseq(r1, &(0x7f0000000040)=[{0x84, 0x7a, 0x0, 0x0, @tick=0x4, {}, {0x8}, @raw32={[0x0, 0xffffffff]}}], 0x1c)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08021a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084)
r4 = socket(0x10, 0x80002, 0x0)
r5 = socket(0x2b, 0x80801, 0x1)
sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x20040000)
shutdown(r5, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000005e00679a3601ff050000000000000066f4366ec9d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x4000004)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
recvmmsg$unix(r4, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
socket(0x23, 0x1, 0x44) (async)
setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, 0x0, 0x0) (async)
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10003, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x7, 0x100}, 0x204, 0x2, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x401}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) (async)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) (async)
write$sndseq(r1, &(0x7f0000000040)=[{0x84, 0x7a, 0x0, 0x0, @tick=0x4, {}, {0x8}, @raw32={[0x0, 0xffffffff]}}], 0x1c) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) (async)
socket$kcm(0x10, 0x2, 0x0) (async)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08021a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) (async)
socket(0x10, 0x80002, 0x0) (async)
socket(0x2b, 0x80801, 0x1) (async)
sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x20040000) (async)
shutdown(r5, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000005e00679a3601ff050000000000000066f4366ec9d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x4000004) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) (async)
recvmmsg$unix(r4, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async)

4.966469096s ago: executing program 0 (id=1099):
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f0000000500))
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r2 = syz_open_dev$loop(&(0x7f0000000240), 0x40, 0x1c0862)
readv(r2, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_emit_ethernet(0x0, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x8, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x0, 0x53, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x17008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x80008000, 0x0, 0x0, 0x0, 0x0, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r8, 0x29, 0x31, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1, 0x2bc, &(0x7f00000015c0)="$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")
r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2a602, 0x0)
stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r10=>0x0})
setfsuid(r10)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4012011, r9, 0x0)

4.749429983s ago: executing program 1 (id=1100):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x3fff8000}, 0xa00, 0x1, 0x43a13d76, 0x7, 0x9, 0x6, 0x21, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0xa)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341)
ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200))
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)

4.064805117s ago: executing program 0 (id=1101):
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10)
r1 = socket$igmp(0x2, 0x3, 0x2)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081064e81f782db44b9040a1d08040600000000f309a1180002000607002603600e12080b0f0000810401a8001605200001400200000803604e0cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4ee0000001fb791643a5ee422fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd400d65afd67580ae4edef5d2defd5ccae8d3fb7c27a1059ae31c6", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r3, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000003700)=ANY=[@ANYBLOB="e80200000000000029"], 0x2e8}}], 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000000)={'wg0\x00'})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1200000008000000040000000200000000000000", @ANYRES32, @ANYBLOB="40000700fa048d779eabb1f02589f724851909bd9336ccb76f000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r5}, &(0x7f0000000700), &(0x7f0000000740)=r4}, 0x20)
r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff)
timer_create(0x2, 0x0, &(0x7f0000bbdffc)=<r7=>0x0)
timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_gettime(r7, 0x0)
timer_gettime(0x0, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
close(r8)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1a1102, 0x0)
ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22fff3)
ioctl$TUNGETVNETLE(r8, 0x40047451, &(0x7f0000001000))
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000002c0)={r5, &(0x7f0000000180), &(0x7f0000000000), 0x2}, 0x20)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))

2.823861161s ago: executing program 2 (id=1103):
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_newroute={0x1c, 0x18, 0xffffffffffffffff, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x0, 0xfd, 0x9}}, 0x1c}}, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
sendmmsg$inet6(r3, &(0x7f0000004f00)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x0)
ioctl$NILFS_IOCTL_GET_SUINFO(r2, 0x80186e84, &(0x7f00000003c0)={&(0x7f0000000300)=[{0x0, 0x6, 0x2}, {0x9, 0xf}, {0x8, 0x1000}, {0x1, 0xffff}, {0x7, 0x9, 0x2}, {0x0, 0x80000001, 0x2}, {0xb92b, 0x10, 0x2}, {0x7, 0x5, 0x3}, {0x6, 0x3, 0x1}, {0xf6, 0x5, 0x2}], 0xa, 0x10, 0xff6e, 0x9ac})
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newroute={0x30, 0x18, 0x1ef, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x2}}]}, 0x30}, 0x1, 0x11}, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11012, r0, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r4, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/16, 0x10}, 0xc44}], 0x1, 0x0, 0x0)
ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, &(0x7f0000000080)={{0x2, 0xfffc, @loopback}, {0x0, @link_local}, 0x0, {0x2, 0x4e22, @multicast1=0xe000cc02}})
setsockopt$inet6_int(r4, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4)
setsockopt$inet6_int(r4, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4)
r5 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r5, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
sendto$inet6(r5, 0x0, 0x0, 0x6d91fb6102d8195c, 0x0, 0x0)
syz_clone(0x20042400, 0x0, 0x0, 0x0, 0x0, 0x0)

2.715701345s ago: executing program 2 (id=1104):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1)
getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x12)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff0000dfa865782aadad6a3400000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}, 0x1c)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r5, 0x0, 0x0}, 0x10)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000240)='batadv0\x00', 0x10)
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TCSETAW(r6, 0x5407, &(0x7f0000000040)={0x6, 0x7, 0x9, 0x0, 0x18, "100056f200"})
ioctl$TIOCMSET(r6, 0x5418, &(0x7f0000000000)=0x8001)
openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8880, 0x85)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000bd8000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x2405a045)
r7 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xcaa1, 0xc000, 0x6, 0xbe})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffec3)
r8 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
setsockopt$sock_int(r8, 0x1, 0x31, &(0x7f0000001600), 0x4)
bind$inet6(r8, &(0x7f0000000040)={0xa, 0xe22, 0x0, @empty, 0x80002}, 0x1c)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r7, 0x221b, 0x771f, 0x16, 0x0, 0x0)
write(r3, &(0x7f00000000c0)="8f2a0a65bd", 0x5)

2.193750293s ago: executing program 4 (id=1105):
r0 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000088)

2.179107923s ago: executing program 1 (id=1106):
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="010000000a0000000080000001"], 0x50)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="3e0000070000000000000000000000000000000077029a6f3951c52e2a8b934407bc1050", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x188202, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf2509000200737955d7000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)

2.121600166s ago: executing program 3 (id=1107):
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2042, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2000001946}, 0x100, 0x0, 0x0, 0x8, 0x1, 0x7fffffff, 0xfffc, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r5, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa1400070000000000000000000000000000bb"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010)
sendmmsg$inet(r4, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x4, 0xad, 0x3, 0xb}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x38}}], 0x1, 0xc0)

2.120789235s ago: executing program 2 (id=1108):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0)
sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00000000001080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}}, 0x4040000)
sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000)
r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="700100004293e4cb5215fd9c013910fce33f8bbfb1286094e5d0448a9dc9929740a5c7aec0d354fd56d39dd75fe1746d68e538efd7e3d182b3ca1c9a6d30f51da2b6bc6e5370b473f9da8af181606055eba63281762b4bfd24d10cf3010400004e52a496110be93f9f3a91cb549964bd8abf7ec1fb88352947b5f186ec91ced35c1d440301155906c08347a1a09475c17dbfbdcf6def2c44608f40092d0a09ba8c40750ed2765f179d66d7f79b8bf7f4babae07bb972a658b6f1f4276ae25e13f1ddc13ab450a65abbbcf900a1a6695ed621d5bbf9c85064645b83e86a7cfa357a4da9f2e692cbc398ad", @ANYRES16=r2, @ANYBLOB="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"], 0x170}}, 0x20008080)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZE(r3, 0x5609, &(0x7f0000000040)={0x7af3, 0x0, 0x9})
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x531, &(0x7f0000000640)="$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")
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000140)=@req={0x8, 0x8000, 0x0, 0x2002}, 0x10)
sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@remote, 0x0, 0x400, 0x1000, 0x0, 0x2, 0x20, 0x10, 0x84}, {}, {0x0, 0x4000000000000}}}, 0xb8}}, 0x0)

2.084790347s ago: executing program 4 (id=1109):
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f0000000500))
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r2 = syz_open_dev$loop(&(0x7f0000000240), 0x40, 0x1c0862)
readv(r2, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_emit_ethernet(0x0, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x8, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x0, 0x53, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x17008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x80008000, 0x0, 0x0, 0x0, 0x0, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r8, 0x29, 0x31, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1, 0x2bc, &(0x7f00000015c0)="$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")
r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2a602, 0x0)
stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r10=>0x0})
setfsuid(r10)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4012011, r9, 0x0)

1.187570598s ago: executing program 4 (id=1110):
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
r0 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, r0, 0xec776000)
r1 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x10000, 0x2, 0x1ff, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fdinfo\x00')
fchdir(r2)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000100)={0x7, 0x1, 0x9, 0x7fff, 0x3839})
r3 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r3, &(0x7f00000001c0)={0x11, 0x10, 0x0, 0x1, 0x0, 0x6, @random="27738d50c7f5"}, 0x14)
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
sendmsg$inet(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0)
sendmsg$rds(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0)

994.008095ms ago: executing program 2 (id=1111):
r0 = socket$inet(0x2, 0x3, 0x100)
bind$inet(r0, &(0x7f00000004c0)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r0, 0x0, 0x0)

906.125318ms ago: executing program 2 (id=1112):
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x14445, &(0x7f0000000000)={[{@noauto_da_alloc}, {@min_batch_time={'min_batch_time', 0x3d, 0x10000}}, {@data_journal}, {@usrjquota}, {}]}, 0x3, 0x44a, &(0x7f0000000900)="$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")
getsockopt$inet_mptcp_buf(r0, 0x11c, 0x2, &(0x7f00000002c0)=""/211, &(0x7f0000000400)=0xd3)
close(0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, 0x0)
write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x7)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x249d, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x44a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0)
r4 = openat$cgroup_type(r3, &(0x7f0000000300), 0x2, 0x0)
write$cgroup_type(r4, &(0x7f0000000280), 0x9)
r5 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_pid(r5, &(0x7f0000000080), 0x12)
r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = openat$cgroup_procs(r8, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r9, &(0x7f00000001c0), 0x12)
r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x7ff, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xffc0}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000005c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94)

831.068731ms ago: executing program 0 (id=1113):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=@newqdisc={0x148, 0x24, 0xf0b, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xc}, {0xffff, 0xffff}, {0xd, 0xc}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "119ca8d51d85df964e173b70d2a9bc976c4592482783a0db6825d6cd86354377d626b1157ebc69714efbf12fddb86ac84012df53c341814b0f72cfa8b071b7bc99678c021131ea40768ed0b4f3c2eb0ecc1c6d975892a2088191f521a73914cb6575859f6544c9bbd2003840802fbe256bc972314130b2961af8783691799ce561d11f8b5cf61075f850825d2306172fe7063d2366634fea641c570d773de706a81ae386048ec46dd4be846fc32981115b672fcfa7a09101344f7bbe8576d2a2235c6595d65967679a172f5997332347ee68d5239949b6a034fb1313c4e03ba6eba727891635d241967eb619126bcccf1bf88bed50151278790ce92ff6259d30"}, @TCA_RED_PARMS={0x14, 0x1, {0x8, 0xb, 0x9, 0x16, 0x20, 0x6}}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x44004}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newchain={0x2c, 0x64, 0x1, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xfff1, 0xc}, {0x0, 0xc}, {0xfff2, 0xffff}}, [@TCA_CHAIN={0x8, 0xb, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24044801}, 0x20040000)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000002000)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}}], {0x14}}, 0x3c}}, 0x0)

764.381263ms ago: executing program 3 (id=1114):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x84, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xa8}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80)

762.215843ms ago: executing program 0 (id=1115):
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xc, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x4}, [@generic={0x73, 0x1, 0x1, 0xb}]}, &(0x7f0000000400)='GPL\x00', 0x80000000, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

758.739734ms ago: executing program 1 (id=1116):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, 0x0, 0x20018091)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = socket$inet(0x2, 0xa, 0x100)
prlimit64(0x0, 0x4, &(0x7f0000000140)={0x8, 0x8000009}, 0x0)
statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x100, 0x2, 0x0)
fchown(r1, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x8031, 0xffffffffffffffff, 0xc92b2000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x7)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
shutdown(r2, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
timerfd_create(0x9, 0x80000)
setsockopt$CAIFSO_LINK_SELECT(r5, 0x116, 0x7f, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x183b41, 0x51)
ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x6, 0x800800})
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x880)
syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000180)=ANY=[@ANYRESOCT=r7], 0xfe, 0x122e, &(0x7f0000001280)="$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")
r8 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc)
fallocate(r8, 0x0, 0x0, 0x8800000)

686.185506ms ago: executing program 0 (id=1117):
timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21}, &(0x7f0000000000))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x40000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc)
bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

659.934577ms ago: executing program 3 (id=1118):
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000003980)=[{{&(0x7f0000000400)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000003340)=[{&(0x7f0000000480)="bf2400d08738467ac9fc1e1438398abcd40357e577175d5cc87a6b842985f377d38258e63fd7a4cfab9243337a84d2aac2a5e0b93462700dc9fd609c44e9d5e16ae931417e34412c1a77f502764a20bb828884bf8717c91dc4aa0b5517bebdb1247781c5d1bcab63a94ad91a95e56519", 0x70}, {&(0x7f0000001340)="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", 0x1000}, {&(0x7f0000002340)="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", 0x1000}], 0x3, &(0x7f00000033c0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [r1, r1]}}], 0x38, 0x1}}, {{&(0x7f0000003400)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003640)=[{&(0x7f0000003480)="c94ef3ae9e37b858e6b06a571e80e4e31553b7078a43612a3f607b1d673b87c877283927c0efaabc291bcf40c9a37e88cdbb1d34bedcc57dd2b0990cb24e25669e47e4b85d0650ed95a50dcca3979515ad3aecb055577661ec903c625de4fc8275e351c8ff95de077dd4b7c9a1664f7675f7a3a0dbd0", 0x76}, {&(0x7f0000003500)="d5e97c155c60ed06115515ea137e26d2d03a2a3420dae5d7239328d11cffe3cc004c7c28145670f83459e29b840dcef33f7412891d820cca2e1640350333e93798b14ed7275ea8fb17f50fea633dbd95ced67d2aee806b7f41114f4b79269d4435bc4b2abc51763991dcf65d65ef2689fdc738f26a75ddbea7d0c072821596531bfe8f66929bd3cdcdaa03065e13ab142bd350fc2be656414e93bd7f63fea2ece8bdd3b8", 0xa4}, {&(0x7f0000000580)="eae1c9aefccea6c9220d332c808bfbde6075ea7b883f680075cbe6080aab4bd7ee976518d79fe90c2346e59be16fb68aa293600092ece65ba416a5545652eba42841efb92703594e4c9c01d2c534adae88def7143c433c836020669bc43da5593cf6ab4abdfb0534d8986c110d6f00817345dbbfea04b6c5a1052e4a9e0db0cb01dad9207d34beb986ac14360ea60b299ed4860be2c07c27ce6c52c26236ee31b6c9e2269a98ae20e2c18d4548a3534fa7e2f43af3092a5c9bc13d8538", 0xbd}], 0x3, &(0x7f0000003680)=[@cred={{0x1c, 0x1, 0x2, {r0}}}], 0x20, 0x24000084}}, {{&(0x7f00000036c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003940)=[{&(0x7f0000003740)="dc08ccd1f59b445b30fcaa673f39022e8d75cbc6977240c32588c3e6a8272f69906547e7e1d9d4e369178a821882eb6fad9a4a4d7d1103ac5c978cf20e1a76f51786e70e6ee547dfc8f4ae722247d006b827b1e0e1bc7fc1e19f970f87e6fe6de4", 0x61}, {&(0x7f00000037c0)="e762", 0x2}, {&(0x7f0000003800)="eca2cc7f8fd807f92f6dd81bf71a77e6dc49baeb98eaecb8011030b0925f157200350eb6da25e580d99542ff374b44cd0c0e6ec3d53b3601f7df497afc892d99aec7ba680d4cfc25d6c21fb804e600659e2f61303f42c673155a2a69268378d7e472a51e5f", 0x65}, {&(0x7f0000003880)="c957fe5aadf8645173f72b4650d69957a8fef1b9a6414b23b38cbf5d08721fcc3a987921e91c7a2b9c265033a43a072d453b162616206763669b36efbb93cb67ee5de2bc08196b2d0137d59c5f14e705b109f498b371239026d4400fbd7d9f61c4bf2a8266e7a2d7a98c9d0b3504f73adcb08b828044ede4f449dac936781ef02e7bf6f8d122057496cb2b9c10c73b86f938002b5be31c06165ce339433875", 0x9f}], 0x4, 0x0, 0x0, 0x4000}}], 0x3, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x6, @mcast2}}, {{0xa, 0x4, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffc}}}, 0x108)
r4 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x1, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9}, 0x0, 0x0, 0x800000, 0x0, 0x20002, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
inotify_init1(0x80800)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000014000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048095}, 0x4048094)
io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {}, {0xb, 0xa}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40840}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4)
socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value, &(0x7f00000003c0)=0x8)
unshare(0x28000100)
syz_emit_ethernet(0xaf, 0x0, 0x0)
poll(0x0, 0x0, 0x9)
syz_open_procfs(0x0, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0)

305.325689ms ago: executing program 4 (id=1119):
r0 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000088)

234.045992ms ago: executing program 4 (id=1120):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioprio_set$pid(0x2, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp6\x00')
preadv(r3, &(0x7f00000001c0)=[{&(0x7f0000000d80)=""/218, 0xda}], 0x1, 0x33, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xa)
write$tun(r0, &(0x7f0000000280)={@void, @void, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @remote, @val={@void}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x2, 0x14, 0x65, 0x0, 0x9, 0x6, 0x0, @broadcast, @rand_addr=0x64010102}}}}}}, 0x26)
unshare(0x2c020400)
syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000040)='./file0\x00', 0x2000800, &(0x7f0000000000)=ANY=[@ANYRES8=r0, @ANYRESOCT, @ANYRES8=r2], 0x0, 0x296, &(0x7f0000000740)="$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")
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4)
add_key(&(0x7f0000000300)='dns_resolver\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000200)="7589d70300", 0xfe07, 0xfffffffffffffffe)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000080)={0x0, 0x8000})

149.976735ms ago: executing program 4 (id=1121):
r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
lseek(r0, 0x2f, 0x0)
msgget$private(0x0, 0x483)
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10042, &(0x7f00000000c0)={[{@nouid32}, {@delalloc}]}, 0xfe, 0x26f, &(0x7f0000001c80)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4)
r6 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r7 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r7, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
tgkill(r6, r6, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100))
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYRES32=r0, @ANYBLOB="000000040000000000eaff001e00009763df13003ec1cb3440cd6c64281fb0d28842873b6633916dcc8d8de3833ffafaa30ac26b9a2dbdb2048f6ea043353f2d940db158cdcd98ddcfeb65", @ANYRES32, @ANYRES32, @ANYBLOB], 0x50)
r8 = socket(0x2b, 0x1, 0x1)
connect$inet6(r8, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)

0s ago: executing program 2 (id=1122):
r0 = socket$inet(0x2, 0x3, 0x100)
bind$inet(r0, &(0x7f00000004c0)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

46023][   T28] audit: type=1400 audit(1775076011.471:866): avc:  denied  { write } for  pid=6290 comm="syz.1.734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  163.572512][ T6293] netlink: 20 bytes leftover after parsing attributes in process `syz.2.735'.
[  163.692773][ T6293] msdos: Unknown parameter '¨hų0x000000000000ee00'
[  163.800671][ T6293] netlink: 'syz.2.735': attribute type 1 has an invalid length.
[  163.935685][ T6296] netlink: 'syz.3.736': attribute type 1 has an invalid length.
[  164.586531][   T28] audit: type=1326 audit(1775076012.511:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6317 comm="syz.1.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287c2ac819 code=0x7ffc0000
[  164.655425][   T28] audit: type=1326 audit(1775076012.511:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6317 comm="syz.1.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287c2ac819 code=0x7ffc0000
[  164.690288][ T6322] set_capacity_and_notify: 5 callbacks suppressed
[  164.690304][ T6322] loop7: detected capacity change from 0 to 16384
[  164.704173][   T28] audit: type=1326 audit(1775076012.511:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6317 comm="syz.1.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287c2ac819 code=0x7ffc0000
[  164.771382][   T28] audit: type=1326 audit(1775076012.511:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6317 comm="syz.1.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287c2ac819 code=0x7ffc0000
[  164.835652][   T28] audit: type=1326 audit(1775076012.511:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6317 comm="syz.1.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f287c2ac819 code=0x7ffc0000
[  164.894903][   T28] audit: type=1326 audit(1775076012.511:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6317 comm="syz.1.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287c2ac819 code=0x7ffc0000
[  164.953085][   T28] audit: type=1326 audit(1775076012.511:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6317 comm="syz.1.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287c2ac819 code=0x7ffc0000
[  165.018502][   T28] audit: type=1326 audit(1775076012.511:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6317 comm="syz.1.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287c2ac819 code=0x7ffc0000
[  165.099866][   T28] audit: type=1326 audit(1775076012.511:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6317 comm="syz.1.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287c2ac819 code=0x7ffc0000
[  165.156208][ T6325] loop3: detected capacity change from 0 to 512
[  165.316430][ T6325] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  165.369523][ T6325] ext4 filesystem being mounted at /166/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  165.422477][ T6339] netlink: 20 bytes leftover after parsing attributes in process `syz.2.748'.
[  165.441506][ T3319] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  165.466452][ T6337] SELinux:  policydb magic number 0x100 does not match expected magic number 0xf97cff8c
[  165.476474][ T6337] SELinux: failed to load policy
[  165.501605][ T6339] loop2: detected capacity change from 0 to 256
[  165.516501][ T6339] msdos: Unknown parameter '¨hų0x000000000000ee00'
[  165.530508][ T6342] FAULT_INJECTION: forcing a failure.
[  165.530508][ T6342] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  165.547879][ T6339] netlink: 'syz.2.748': attribute type 1 has an invalid length.
[  165.557407][ T6342] CPU: 0 UID: 0 PID: 6342 Comm: syz.4.749 Not tainted syzkaller #0 PREEMPT(full) 
[  165.557443][ T6342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  165.557460][ T6342] Call Trace:
[  165.557468][ T6342]  <TASK>
[  165.557477][ T6342]  __dump_stack+0x1d/0x30
[  165.557596][ T6342]  dump_stack_lvl+0x95/0xd0
[  165.557626][ T6342]  dump_stack+0x15/0x1b
[  165.557728][ T6342]  should_fail_ex+0x263/0x280
[  165.557788][ T6342]  should_fail+0xb/0x20
[  165.557819][ T6342]  should_fail_usercopy+0x1a/0x20
[  165.557907][ T6342]  _copy_from_iter+0xcf/0xea0
[  165.557992][ T6342]  ? __rcu_read_unlock+0x4e/0x70
[  165.558021][ T6342]  ? terminate_walk+0x1e6/0x210
[  165.558165][ T6342]  ? path_openat+0x1ab2/0x2050
[  165.558202][ T6342]  tun_get_user+0x15f/0x27c0
[  165.558235][ T6342]  ? ref_tracker_alloc+0x1eb/0x2f0
[  165.558270][ T6342]  tun_chr_write_iter+0x15e/0x210
[  165.558395][ T6342]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  165.558425][ T6342]  vfs_write+0x5a6/0x9f0
[  165.558463][ T6342]  ksys_write+0xdc/0x1a0
[  165.558483][ T6342]  __x64_sys_write+0x40/0x50
[  165.558501][ T6342]  x64_sys_call+0x27e1/0x3020
[  165.558534][ T6342]  do_syscall_64+0x12c/0x370
[  165.558565][ T6342]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.558631][ T6342] RIP: 0033:0x7feaf127c819
[  165.558648][ T6342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  165.558666][ T6342] RSP: 002b:00007feaefccf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  165.558686][ T6342] RAX: ffffffffffffffda RBX: 00007feaf14f5fa0 RCX: 00007feaf127c819
[  165.558701][ T6342] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000003
[  165.558717][ T6342] RBP: 00007feaefccf090 R08: 0000000000000000 R09: 0000000000000000
[  165.558768][ T6342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  165.558780][ T6342] R13: 00007feaf14f6038 R14: 00007feaf14f5fa0 R15: 00007ffc3ab4ab98
[  165.558802][ T6342]  </TASK>
[  165.767156][ T6325] syz.3.744 (6325) used greatest stack depth: 9288 bytes left
[  165.783092][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.793302][ T3320] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  165.846634][ T6350] loop0: detected capacity change from 0 to 512
[  165.889975][ T6350] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  165.904959][ T6354] loop2: detected capacity change from 0 to 1024
[  165.916697][ T6354] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  165.936588][ T6354] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  165.936919][ T6352] netlink: 'syz.1.754': attribute type 6 has an invalid length.
[  165.949626][ T6350] EXT4-fs (loop0): orphan file too big: 4294967295
[  165.949772][ T6350] EXT4-fs (loop0): mount failed
[  166.141893][ T6365] option changes via remount are deprecated (pid=6360 comm=syz.4.757)
[  166.174057][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.183518][ T6365] cgroup: option or name mismatch, new: 0x0 "none", old: 0x0 ""
[  166.623583][ T6384] ip6gre1: entered promiscuous mode
[  166.763897][ T6384] ip6gre1: entered allmulticast mode
[  167.245988][ T6382] loop4: detected capacity change from 0 to 512
[  167.310763][ T6396] __nla_validate_parse: 4 callbacks suppressed
[  167.310779][ T6396] netlink: 20 bytes leftover after parsing attributes in process `syz.0.766'.
[  167.377514][ T6386] loop3: detected capacity change from 0 to 512
[  167.460650][ T6397] loop0: detected capacity change from 0 to 256
[  167.486243][ T6397] msdos: Unknown parameter '¨hų0x000000000000ee00'
[  167.536689][ T6386] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  167.560616][ T6397] netlink: 'syz.0.766': attribute type 1 has an invalid length.
[  167.580827][ T6382] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  167.610279][ T6386] ext4 filesystem being mounted at /170/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  167.629037][ T6382] ext4 filesystem being mounted at /134/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  167.742136][ T6386] netlink: 52 bytes leftover after parsing attributes in process `syz.3.764'.
[  167.769701][ T6386] netlink: 52 bytes leftover after parsing attributes in process `syz.3.764'.
[  167.794289][ T6386] netlink: 52 bytes leftover after parsing attributes in process `syz.3.764'.
[  168.121535][ T6403] hub 8-0:1.0: USB hub found
[  168.127246][ T6403] hub 8-0:1.0: 8 ports detected
[  168.280474][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.311608][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.320915][ T6387] syz.2.761 (6387) used greatest stack depth: 9208 bytes left
[  168.378113][ T6407] hub 8-0:1.0: USB hub found
[  168.389725][ T6411] loop1: detected capacity change from 0 to 128
[  168.396407][ T6407] hub 8-0:1.0: 8 ports detected
[  168.404387][ T6413] netlink: 'syz.0.772': attribute type 21 has an invalid length.
[  168.413807][ T6416] netlink: 28 bytes leftover after parsing attributes in process `syz.2.773'.
[  168.428738][ T6413] netlink: 128 bytes leftover after parsing attributes in process `syz.0.772'.
[  168.439378][ T6411] loop1: detected capacity change from 0 to 128
[  168.452488][   T36] Bluetooth: hci0: Frame reassembly failed (-84)
[  168.467696][ T6413] netlink: 'syz.0.772': attribute type 5 has an invalid length.
[  168.478204][ T6413] netlink: 'syz.0.772': attribute type 6 has an invalid length.
[  168.487376][ T6413] netlink: 3 bytes leftover after parsing attributes in process `syz.0.772'.
[  168.515521][ T6423] netlink: 104 bytes leftover after parsing attributes in process `syz.2.775'.
[  168.644559][   T28] kauditd_printk_skb: 64 callbacks suppressed
[  168.644577][   T28] audit: type=1400 audit(1775076016.571:940): avc:  denied  { block_suspend } for  pid=6430 comm="syz.0.778" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  168.745871][   T28] audit: type=1400 audit(1775076016.671:941): avc:  denied  { read } for  pid=6424 comm="syz.3.776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  168.904853][ T6436] vfat: Unknown parameter ''
[  169.021014][   T28] audit: type=1400 audit(1775076016.941:942): avc:  denied  { create } for  pid=6428 comm="syz.2.779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  169.048719][   T28] audit: type=1400 audit(1775076016.941:943): avc:  denied  { setopt } for  pid=6428 comm="syz.2.779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  169.233761][ T6427] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  169.259557][ T6427] ext4 filesystem being mounted at /137/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  169.310457][   T28] audit: type=1400 audit(1775076017.221:944): avc:  denied  { setattr } for  pid=6426 comm="syz.4.777" path="/137/file0" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  169.365669][ T6427] netlink: 52 bytes leftover after parsing attributes in process `syz.4.777'.
[  169.377321][ T6427] netlink: 20 bytes leftover after parsing attributes in process `syz.4.777'.
[  169.411857][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  169.548098][ T6450] msdos: Unknown parameter '¨hų0x000000000000ee00'
[  169.553005][ T6441] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  169.569632][ T6450] netlink: 'syz.2.783': attribute type 1 has an invalid length.
[  169.582909][ T6441] ext4 filesystem being mounted at /173/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  169.669947][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  169.692204][ T6460] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  169.733237][   T28] audit: type=1400 audit(1775076017.661:945): avc:  denied  { setopt } for  pid=6464 comm="syz.2.789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  169.753260][ T6460] EXT4-fs (loop0): orphan file too big: 4294967295
[  169.754803][   T28] audit: type=1400 audit(1775076017.661:946): avc:  denied  { audit_read } for  pid=6464 comm="syz.2.789" capability=37  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  169.781310][ T6463] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4)
[  169.787893][ T6463] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  169.797641][ T6463] vhci_hcd vhci_hcd.0: Device attached
[  169.806852][   T28] audit: type=1400 audit(1775076017.661:947): avc:  denied  { bind } for  pid=6461 comm="syz.4.788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  169.826973][   T28] audit: type=1400 audit(1775076017.661:948): avc:  denied  { write } for  pid=6461 comm="syz.4.788" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  169.851432][   T28] audit: type=1400 audit(1775076017.711:949): avc:  denied  { mount } for  pid=6462 comm="syz.3.787" name="/" dev="hugetlbfs" ino=15835 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[  169.851782][ T6460] EXT4-fs (loop0): mount failed
[  169.881420][ T6463] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(6)
[  169.886944][ T6467] set_capacity_and_notify: 5 callbacks suppressed
[  169.886989][ T6467] loop3: detected capacity change from 0 to 512
[  169.888254][ T6463] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  169.892774][ T6463] vhci_hcd vhci_hcd.0: Device attached
[  169.929482][ T6467] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  169.953907][ T6467] EXT4-fs (loop3): #blocks per group too big: 3940352
[  169.961257][ T6474] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(9)
[  169.967928][ T6474] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  169.976045][ T6474] vhci_hcd vhci_hcd.0: Device attached
[  170.067661][    T9] usb 9-1: new low-speed USB device number 2 using vhci_hcd
[  170.099863][ T6482] hub 8-0:1.0: USB hub found
[  170.104623][ T6482] hub 8-0:1.0: 8 ports detected
[  170.152671][ T6484] loop3: detected capacity change from 0 to 128
[  170.275939][ T6488] loop3: detected capacity change from 0 to 512
[  170.284089][ T6488] EXT4-fs: Ignoring removed mblk_io_submit option
[  170.306288][ T6488] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  170.334255][ T6488] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  170.347030][ T6488] ext4 filesystem being mounted at /179/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  170.375240][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  170.470186][ T3705] Bluetooth: hci0: command 0x1003 tx timeout
[  170.471352][ T3628] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  170.608095][ T6470] vhci_hcd: connection closed
[  170.639799][ T6468] vhci_hcd: connection reset by peer
[  170.647079][ T6475] vhci_hcd: connection closed
[  170.650011][   T30] vhci_hcd vhci_hcd.4: stop threads
[  170.668578][   T30] vhci_hcd vhci_hcd.4: release socket
[  170.674212][   T30] vhci_hcd vhci_hcd.4: disconnect device
[  170.680577][   T30] vhci_hcd vhci_hcd.4: stop threads
[  170.685869][   T30] vhci_hcd vhci_hcd.4: release socket
[  170.692014][   T30] vhci_hcd vhci_hcd.4: disconnect device
[  170.698190][   T30] vhci_hcd vhci_hcd.4: stop threads
[  170.703710][   T30] vhci_hcd vhci_hcd.4: release socket
[  170.710469][   T30] vhci_hcd vhci_hcd.4: disconnect device
[  171.082948][ T6504] netlink: 'syz.1.800': attribute type 6 has an invalid length.
[  171.203403][ T6498] loop3: detected capacity change from 0 to 512
[  171.273845][ T6514] loop4: detected capacity change from 0 to 128
[  171.304233][ T6514] loop4: detected capacity change from 0 to 128
[  171.309614][ T6498] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  171.332037][ T6516] hub 8-0:1.0: USB hub found
[  171.338592][ T6516] hub 8-0:1.0: 8 ports detected
[  171.350088][ T6498] ext4 filesystem being mounted at /181/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  171.478108][ T6522] loop1: detected capacity change from 0 to 512
[  171.487752][ T6522] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  171.507638][ T6523] program syz.0.806 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  171.520667][ T6522] EXT4-fs (loop1): orphan file too big: 4294967295
[  171.528171][ T6522] EXT4-fs (loop1): mount failed
[  171.536778][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.544360][ T6526] loop2: detected capacity change from 0 to 128
[  171.568403][ T6528] loop3: detected capacity change from 0 to 128
[  171.585761][ T6526] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  171.609096][ T6526] ext4 filesystem being mounted at /179/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  172.324017][ T6540] loop0: detected capacity change from 0 to 128
[  172.363797][ T6540] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  172.583204][ T6540] ext4 filesystem being mounted at /141/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  173.448945][ T3705] Bluetooth: hci0: command 0x1003 tx timeout
[  173.487664][ T3628] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  173.519421][ T3313] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  173.758075][ T6550] __nla_validate_parse: 12 callbacks suppressed
[  173.758822][ T6550] netlink: 28 bytes leftover after parsing attributes in process `syz.4.814'.
[  173.824373][ T6552] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  173.933901][ T6552] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters
[  173.957624][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  173.964180][    C1] EXT4-fs (loop2): initial error at time 1775076021: ext4_mb_generate_buddy:1317
[  173.973447][    C1] EXT4-fs (loop2): last error at time 1775076021: ext4_mb_generate_buddy:1317
[  174.067679][ T6552] __quota_error: 76 callbacks suppressed
[  174.067708][ T6552] Quota error (device loop2): write_blk: dquota write failed
[  174.155331][ T6552] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5
[  174.188503][ T6552] Quota error (device loop2): write_blk: dquota write failed
[  174.196431][ T6552] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota
[  174.206970][ T6552] EXT4-fs error (device loop2): ext4_acquire_dquot:7026: comm syz.2.813: Failed to acquire dquot type 1
[  174.228479][ T6552] loop2: lost filesystem error report for type 5 error -28
[  174.229000][ T6552] EXT4-fs (loop2): 1 truncate cleaned up
[  174.279515][ T6564] hub 8-0:1.0: USB hub found
[  174.289024][ T6564] hub 8-0:1.0: 8 ports detected
[  174.304941][ T6552] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  174.422383][   T28] audit: type=1400 audit(1775076022.351:1026): avc:  denied  { remount } for  pid=6551 comm="syz.2.813" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  174.446642][ T6552] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  174.788516][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  174.830355][   T28] audit: type=1326 audit(1775076022.751:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6577 comm="syz.2.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ba8cc819 code=0x7ffc0000
[  175.018877][   T28] audit: type=1326 audit(1775076022.751:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6577 comm="syz.2.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ba8cc819 code=0x7ffc0000
[  175.068276][   T28] audit: type=1326 audit(1775076022.751:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6577 comm="syz.2.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ba8cc819 code=0x7ffc0000
[  175.117572][   T28] audit: type=1326 audit(1775076022.751:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6577 comm="syz.2.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ba8cc819 code=0x7ffc0000
[  175.167671][   T28] audit: type=1326 audit(1775076022.781:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6577 comm="syz.2.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f61ba8cc819 code=0x7ffc0000
[  175.207926][    T9] usb 9-1: enqueue for inactive port 0
[  175.213472][    T9] usb 9-1: enqueue for inactive port 0
[  175.287604][    T9] vhci_hcd vhci_hcd.4: vhci_device speed not set
[  175.325263][ T6586] netlink: 'syz.3.821': attribute type 4 has an invalid length.
[  175.363426][ T6590] set_capacity_and_notify: 1 callbacks suppressed
[  175.363449][ T6590] loop4: detected capacity change from 0 to 512
[  175.376997][ T6591] netlink: 'syz.3.821': attribute type 4 has an invalid length.
[  175.408582][ T6588] loop2: detected capacity change from 0 to 512
[  175.418378][ T6590] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  175.437948][ T6588] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  175.456380][ T6590] ext4 filesystem being mounted at /145/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  175.477981][ T6588] EXT4-fs (loop2): orphan file too big: 4294967295
[  175.494707][ T6588] EXT4-fs (loop2): mount failed
[  175.536975][ T6586] loop3: detected capacity change from 0 to 1024
[  175.547099][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  175.579130][ T6582] loop1: detected capacity change from 0 to 512
[  175.602852][ T6597] loop4: detected capacity change from 0 to 128
[  175.683046][   T12] Bluetooth: hci0: Frame reassembly failed (-84)
[  175.696333][ T6601] loop3: detected capacity change from 0 to 128
[  175.718262][ T6582] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  175.746538][ T6601] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  175.771732][ T6582] ext4 filesystem being mounted at /163/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  175.786716][ T6601] ext4 filesystem being mounted at /188/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  175.846732][ T6582] netlink: 52 bytes leftover after parsing attributes in process `syz.1.819'.
[  175.856841][ T6582] netlink: 20 bytes leftover after parsing attributes in process `syz.1.819'.
[  175.867534][ T6582] netlink: 52 bytes leftover after parsing attributes in process `syz.1.819'.
[  175.877508][ T6582] netlink: 20 bytes leftover after parsing attributes in process `syz.1.819'.
[  175.888440][ T6582] netlink: 52 bytes leftover after parsing attributes in process `syz.1.819'.
[  175.932279][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  177.527432][ T3317] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  177.651925][ T6619] netlink: 28 bytes leftover after parsing attributes in process `syz.3.830'.
[  177.673078][ T6611] lo speed is unknown, defaulting to 1000
[  177.777640][ T3705] Bluetooth: hci0: command 0x1003 tx timeout
[  177.783746][ T3628] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  177.955907][ T6630] loop3: detected capacity change from 0 to 128
[  177.982146][ T6630] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  178.011587][ T6634] FAULT_INJECTION: forcing a failure.
[  178.011587][ T6634] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  178.025883][ T6630] ext4 filesystem being mounted at /192/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  178.061879][ T6636] ip6gre1: entered promiscuous mode
[  178.072376][ T6636] ip6gre1: entered allmulticast mode
[  178.084084][ T6634] CPU: 0 UID: 0 PID: 6634 Comm: syz.2.835 Not tainted syzkaller #0 PREEMPT(full) 
[  178.084163][ T6634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  178.084179][ T6634] Call Trace:
[  178.084188][ T6634]  <TASK>
[  178.084197][ T6634]  __dump_stack+0x1d/0x30
[  178.084258][ T6634]  dump_stack_lvl+0x95/0xd0
[  178.084287][ T6634]  dump_stack+0x15/0x1b
[  178.084311][ T6634]  should_fail_ex+0x263/0x280
[  178.084338][ T6634]  should_fail+0xb/0x20
[  178.084364][ T6634]  should_fail_usercopy+0x1a/0x20
[  178.084433][ T6634]  _copy_to_user+0x20/0xa0
[  178.084470][ T6634]  put_user_ifreq+0x57/0xa0
[  178.084491][ T6634]  sock_do_ioctl+0x1de/0x230
[  178.084528][ T6634]  sock_ioctl+0x41b/0x610
[  178.084558][ T6634]  ? mutex_lock+0x57/0x90
[  178.084594][ T6634]  ? __pfx_sock_ioctl+0x10/0x10
[  178.084693][ T6634]  __se_sys_ioctl+0xce/0x140
[  178.084719][ T6634]  __x64_sys_ioctl+0x43/0x50
[  178.084796][ T6634]  x64_sys_call+0x1563/0x3020
[  178.084829][ T6634]  do_syscall_64+0x12c/0x370
[  178.084860][ T6634]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  178.084882][ T6634] RIP: 0033:0x7f61ba8cc819
[  178.084898][ T6634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  178.084920][ T6634] RSP: 002b:00007f61b9327028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  178.084945][ T6634] RAX: ffffffffffffffda RBX: 00007f61bab45fa0 RCX: 00007f61ba8cc819
[  178.084958][ T6634] RDX: 0000200000000080 RSI: 000000000000891d RDI: 0000000000000004
[  178.084971][ T6634] RBP: 00007f61b9327090 R08: 0000000000000000 R09: 0000000000000000
[  178.085016][ T6634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  178.085079][ T6634] R13: 00007f61bab46038 R14: 00007f61bab45fa0 R15: 00007ffd13f2c0b8
[  178.085115][ T6634]  </TASK>
[  178.268679][ T6636] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  178.308250][   T36] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  178.321179][   T36] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  178.337622][    T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  178.359973][ T6639] loop4: detected capacity change from 0 to 136
[  178.368366][ T6640] loop2: detected capacity change from 0 to 512
[  178.391436][ T6640] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  178.433939][ T6640] EXT4-fs (loop2): orphan file too big: 4294967295
[  178.452423][ T6640] EXT4-fs (loop2): mount failed
[  178.845162][ T6662] loop1: detected capacity change from 0 to 512
[  178.972000][ T3320] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  178.981264][   T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  178.990022][ T6669] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  179.019503][ T6662] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  179.037434][ T6669] ext4 filesystem being mounted at /150/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  179.060917][ T6673] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  179.103570][ T6662] ext4 filesystem being mounted at /166/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  179.137360][ T6673] ext4 filesystem being mounted at /142/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  179.201954][   T28] kauditd_printk_skb: 119 callbacks suppressed
[  179.201973][   T28] audit: type=1400 audit(1775076027.131:1151): avc:  denied  { create } for  pid=6666 comm="syz.4.840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  179.268474][ T6662] netlink: 124 bytes leftover after parsing attributes in process `syz.1.839'.
[  179.281445][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  179.290537][   T28] audit: type=1400 audit(1775076027.181:1152): avc:  denied  { sqpoll } for  pid=6678 comm="syz.2.842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  179.310171][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  179.332275][ T6684] netlink: 28 bytes leftover after parsing attributes in process `syz.4.844'.
[  179.355104][   T28] audit: type=1400 audit(1775076027.251:1153): avc:  denied  { ioctl } for  pid=6678 comm="syz.2.842" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=16794 ioctlcmd=0x2406 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  179.381403][   T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  179.403690][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  179.509469][ T6690] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a002e018, mo2=0002]
[  179.517814][ T6690] System zones: 0-2, 18-18, 34-34
[  179.528997][ T6690] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters
[  179.543776][ T6690] EXT4-fs error (device loop1): ext4_do_update_inode:5602: inode #16: comm syz.1.845: corrupted inode contents
[  179.555710][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  179.555745][    C1] EXT4-fs (loop1): initial error at time 1775076027: ext4_mb_generate_buddy:1317
[  179.555795][    C1] EXT4-fs (loop1): last error at time 1775076027: ext4_mb_generate_buddy:1317
[  179.580824][ T6690] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  179.581060][ T6690] EXT4-fs error (device loop1): ext4_dirty_inode:6495: inode #16: comm syz.1.845: mark_inode_dirty error
[  179.601818][ T6690] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  179.602015][ T6690] EXT4-fs error (device loop1): ext4_do_update_inode:5602: inode #16: comm syz.1.845: corrupted inode contents
[  179.623241][ T6690] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  179.623439][ T6690] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #16: comm syz.1.845: mark_inode_dirty error
[  179.644730][ T6690] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  179.644934][ T6690] EXT4-fs error (device loop1): ext4_do_update_inode:5602: inode #16: comm syz.1.845: corrupted inode contents
[  179.666886][ T6690] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  179.667083][ T6690] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #16: comm syz.1.845: mark_inode_dirty error
[  179.689306][ T6690] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  179.689549][ T6690] EXT4-fs error (device loop1): ext4_do_update_inode:5602: inode #16: comm syz.1.845: corrupted inode contents
[  179.710643][ T6690] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  179.710824][ T6690] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem
[  179.728734][ T6690] loop1: lost filesystem error report for type 5 error -117
[  179.728904][ T6690] EXT4-fs error (device loop1): ext4_do_update_inode:5602: inode #16: comm syz.1.845: corrupted inode contents
[  179.748597][ T6690] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  179.748812][ T6690] EXT4-fs error (device loop1): ext4_truncate:4602: inode #16: comm syz.1.845: mark_inode_dirty error
[  179.769718][ T6690] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  179.769921][ T6690] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem
[  179.788008][ T6690] loop1: lost filesystem error report for type 5 error -117
[  179.788462][ T6690] EXT4-fs (loop1): 1 truncate cleaned up
[  179.801983][ T6690] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  179.824522][ T6690] ext4 filesystem being mounted at /167/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  179.837812][   T12] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  179.847757][   T12] EXT4-fs error (device loop1): ext4_release_dquot:7062: comm kworker/u8:0: Failed to release dquot type 1
[  180.344904][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  180.404155][ T6700] set_capacity_and_notify: 6 callbacks suppressed
[  180.404175][ T6700] loop1: detected capacity change from 0 to 512
[  180.420536][ T6700] EXT4-fs: Ignoring removed i_version option
[  180.422605][ T6695] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  180.442094][ T6695] ext4 filesystem being mounted at /188/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  180.457235][ T6700] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  180.514321][ T6695] netlink: 52 bytes leftover after parsing attributes in process `syz.2.846'.
[  180.531855][   T28] audit: type=1400 audit(1775076028.451:1154): avc:  denied  { read write } for  pid=6699 comm="syz.1.848" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  180.556427][ T6695] netlink: 20 bytes leftover after parsing attributes in process `syz.2.846'.
[  180.569340][ T6695] netlink: 52 bytes leftover after parsing attributes in process `syz.2.846'.
[  180.581207][   T28] audit: type=1400 audit(1775076028.451:1155): avc:  denied  { open } for  pid=6699 comm="syz.1.848" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  180.608553][ T6695] netlink: 20 bytes leftover after parsing attributes in process `syz.2.846'.
[  180.618497][ T6695] netlink: 52 bytes leftover after parsing attributes in process `syz.2.846'.
[  180.652178][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  180.690493][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  180.710607][ T6705] loop4: detected capacity change from 0 to 512
[  180.736837][ T6705] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  180.758346][ T6709] loop2: detected capacity change from 0 to 128
[  180.765280][ T6705] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002]
[  180.770239][ T6708] ip6gre1: entered promiscuous mode
[  180.778048][ T6705] EXT4-fs (loop4): orphan cleanup on readonly fs
[  180.785817][ T6705] EXT4-fs warning (device loop4): ext4_enable_quotas:7261: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  180.807645][ T6708] ip6gre1: entered allmulticast mode
[  180.823231][ T6705] EXT4-fs (loop4): Cannot turn on quotas: error -22
[  180.832713][ T6705] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.850: bad orphan inode 13
[  180.872299][ T6705] loop4: lost filesystem error report for type 5 error -117
[  180.873521][ T6705] ext4_test_bit(bit=12, block=1) = 0
[  180.887560][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  180.894044][    C0] EXT4-fs (loop4): last error at time 1775076028: ext4_orphan_get:1423
[  180.908032][ T6705] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  180.911749][ T6713] loop1: detected capacity change from 0 to 512
[  180.929868][ T6705] ip6_vti0 speed is unknown, defaulting to 1000
[  180.936782][ T6705] ip6_vti0 speed is unknown, defaulting to 1000
[  180.948417][ T6713] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  180.961568][ T6713] EXT4-fs (loop1): orphan file too big: 4294967295
[  180.968552][ T6705] ip6_vti0 speed is unknown, defaulting to 1000
[  180.977687][ T6713] EXT4-fs (loop1): mount failed
[  181.031094][ T6705] infiniband syz2: set down
[  181.035662][   T10] ip6_vti0 speed is unknown, defaulting to 1000
[  181.042167][ T6705] infiniband syz2: added ip6_vti0
[  181.055886][ T6705] RDS/IB: syz2: added
[  181.060111][ T6705] smc: adding ib device syz2 with port count 1
[  181.068783][ T6705] smc:    ib device syz2 port 1 has no pnetid
[  181.075566][   T10] ip6_vti0 speed is unknown, defaulting to 1000
[  181.082109][ T6705] ip6_vti0 speed is unknown, defaulting to 1000
[  181.133033][ T6705] ip6_vti0 speed is unknown, defaulting to 1000
[  181.168288][ T3317] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  181.178384][ T6705] ip6_vti0 speed is unknown, defaulting to 1000
[  181.196514][ T6724] loop3: detected capacity change from 0 to 512
[  181.229679][ T6724] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  181.239628][ T6705] ip6_vti0 speed is unknown, defaulting to 1000
[  181.243083][ T6724] ext4 filesystem being mounted at /193/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  181.272442][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  181.300450][   T28] audit: type=1400 audit(1775076029.231:1156): avc:  denied  { write } for  pid=6727 comm="syz.3.854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  181.324582][ T6705] ip6_vti0 speed is unknown, defaulting to 1000
[  181.408849][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  181.427589][ T3628] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  181.631881][ T6743] netlink: 28 bytes leftover after parsing attributes in process `syz.4.861'.
[  181.693981][ T6746] loop4: detected capacity change from 0 to 128
[  181.745922][ T6751] loop1: detected capacity change from 0 to 512
[  181.804659][ T6751] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  181.848359][ T6758] lo speed is unknown, defaulting to 1000
[  181.855419][ T6758] ip6_vti0 speed is unknown, defaulting to 1000
[  182.032225][ T6751] ext4 filesystem being mounted at /172/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  182.079708][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  182.126231][ T6763] lo speed is unknown, defaulting to 1000
[  182.136584][ T6763] ip6_vti0 speed is unknown, defaulting to 1000
[  182.374908][   T28] audit: type=1400 audit(1775076030.301:1157): avc:  denied  { checkpoint_restore } for  pid=6771 comm="syz.1.867" capability=40  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  182.502239][ T6777] loop2: detected capacity change from 0 to 128
[  182.520159][   T12] Bluetooth: hci0: Frame reassembly failed (-84)
[  182.547630][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  182.651435][ T6786] netlink: 28 bytes leftover after parsing attributes in process `syz.3.872'.
[  182.741351][ T6791] netlink: 56 bytes leftover after parsing attributes in process `syz.4.873'.
[  182.769912][ T6793] netlink: 'syz.3.874': attribute type 29 has an invalid length.
[  182.790277][ T6793] netlink: 'syz.3.874': attribute type 29 has an invalid length.
[  182.850652][   T28] audit: type=1400 audit(1775076030.771:1158): avc:  denied  { relabelfrom } for  pid=6794 comm="syz.3.875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  182.877585][   T28] audit: type=1400 audit(1775076030.771:1159): avc:  denied  { relabelto } for  pid=6794 comm="syz.3.875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  182.919554][ T6796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  182.949898][ T6796] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  183.123746][ T6801] loop3: detected capacity change from 0 to 1024
[  183.149513][ T6801] EXT4-fs: Ignoring removed mblk_io_submit option
[  183.182195][ T6801] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  183.206105][ T6801] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  183.236633][ T6801] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #11: comm syz.3.877: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  183.272897][ T6801] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  183.273057][ T6801] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.877: couldn't read orphan inode 11 (err -117)
[  183.282282][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  183.282309][    C1] EXT4-fs (loop3): initial error at time 1775076031: ext4_ext_check_inode:521: inode 11
[  183.282344][    C1] EXT4-fs (loop3): last error at time 1775076031: ext4_ext_check_inode:521: inode 11
[  183.337156][ T6801] loop3: lost filesystem error report for type 5 error -117
[  183.337728][ T6801] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  183.420006][ T6801] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.877: Invalid block bitmap block 0 in block_group 0
[  183.448813][ T6801] EXT4-fs error (device loop3): ext4_acquire_dquot:7026: comm syz.3.877: Failed to acquire dquot type 0
[  183.484761][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  183.525337][ T6809] loop3: detected capacity change from 0 to 2048
[  183.617282][ T6810] lo speed is unknown, defaulting to 1000
[  183.624365][ T6810] ip6_vti0 speed is unknown, defaulting to 1000
[  183.840388][ T6809] Alternate GPT is invalid, using primary GPT.
[  183.847344][ T6809]  loop3: p1 p2 p3
[  183.881094][ T6812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  183.944509][ T6812] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  184.189480][ T6822] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  184.203710][ T6822] ext4 filesystem being mounted at /149/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  184.277847][ T6818] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  184.292607][ T6818] ext4 filesystem being mounted at /159/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  184.385732][ T6818] netlink: 124 bytes leftover after parsing attributes in process `syz.4.880'.
[  184.547645][ T3628] Bluetooth: hci0: command 0x1003 tx timeout
[  184.607310][ T3705] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  184.621086][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  184.647037][   T28] kauditd_printk_skb: 7 callbacks suppressed
[  184.647153][   T28] audit: type=1326 audit(1775076032.571:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6829 comm="syz.1.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287c2ac819 code=0x7ffc0000
[  184.842761][ T6834] netlink: 28 bytes leftover after parsing attributes in process `syz.1.884'.
[  184.866515][ T6837] EXT4-fs: Ignoring removed i_version option
[  184.872870][   T28] audit: type=1326 audit(1775076032.571:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6829 comm="syz.1.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287c2ac819 code=0x7ffc0000
[  184.902431][ T6838] EXT4-fs: Ignoring removed i_version option
[  184.962468][ T6837] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[  184.972572][ T6838] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  185.034845][ T6837] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2
[  185.059188][   T28] audit: type=1326 audit(1775076032.571:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6829 comm="syz.1.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287c2ac819 code=0x7ffc0000
[  185.097296][ T6837] EXT4-fs (loop2): 1 truncate cleaned up
[  185.121859][ T6837] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  185.171413][   T28] audit: type=1326 audit(1775076032.571:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6829 comm="syz.1.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f287c2ac819 code=0x7ffc0000
[  185.197631][ T6837] EXT4-fs error (device loop2): ext4_append:79: inode #2: comm syz.2.885: Logical block already allocated
[  185.367581][   T28] audit: type=1326 audit(1775076032.571:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6829 comm="syz.1.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287c2ac819 code=0x7ffc0000
[  185.773722][ T6854] set_capacity_and_notify: 4 callbacks suppressed
[  185.773833][ T6854] loop1: detected capacity change from 0 to 256
[  185.790645][ T6854] vfat: Unknown parameter 'utfflush'
[  186.139484][ T6857] loop1: detected capacity change from 0 to 128
[  186.147679][   T28] audit: type=1326 audit(1775076032.571:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6829 comm="syz.1.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287c2ac819 code=0x7ffc0000
[  186.189087][ T6857] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  186.211610][ T6857] ext4 filesystem being mounted at /181/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  186.222388][   T28] audit: type=1326 audit(1775076032.571:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6829 comm="syz.1.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287c2ac819 code=0x7ffc0000
[  186.415206][   T28] audit: type=1326 audit(1775076032.621:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6829 comm="syz.1.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287c2ac819 code=0x7ffc0000
[  186.754654][   T28] audit: type=1326 audit(1775076032.621:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6829 comm="syz.1.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f287c2ac819 code=0x7ffc0000
[  186.835777][   T28] audit: type=1326 audit(1775076032.621:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6829 comm="syz.1.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287c2ac819 code=0x7ffc0000
[  187.149106][ T6859] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  187.187877][ T3320] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  187.439150][ T6864] loop0: detected capacity change from 0 to 512
[  187.517446][ T6864] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  187.549171][ T6864] ext4 filesystem being mounted at /150/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  187.926508][ T6869] loop3: detected capacity change from 0 to 512
[  187.943485][ T6869] EXT4-fs: Ignoring removed nobh option
[  187.960050][ T6869] ------------[ cut here ]------------
[  187.965599][ T6869] EA inode 11 i_nlink=1026
[  187.965624][ T6869] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#0: syz.3.893/6869
[  187.980846][ T6869] Modules linked in:
[  187.984982][ T6869] CPU: 0 UID: 0 PID: 6869 Comm: syz.3.893 Not tainted syzkaller #0 PREEMPT(full) 
[  187.994410][ T6869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  188.004662][ T6869] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350
[  188.011498][ T6869] Code: d4 35 99 ff 4c 8d 2d ad a1 5d 05 49 8d 7e 40 e8 54 cd b5 ff 49 8b 6e 40 4c 89 e7 e8 88 c8 b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 2f c4 dd 03 66 66 66 66 66 66 2e
[  188.031427][ T6869] RSP: 0018:ffffc9000102b5a8 EFLAGS: 00010246
[  188.037575][ T6869] RAX: ffff888102063d08 RBX: ffff88811b545328 RCX: ffffffff81c02b68
[  188.045707][ T6869] RDX: 0000000000000402 RSI: 000000000000000b RDI: ffffffff871dcd00
[  188.053755][ T6869] RBP: 000000000000000b R08: 000188811b5452db R09: 0000000000000000
[  188.061842][ T6869] R10: 0000000000086e68 R11: 0001c9000102b4d8 R12: ffff88811b5452d8
[  188.069950][ T6869] R13: ffffffff871dcd00 R14: ffff88811b545290 R15: 0000000000000001
[  188.077976][ T6869] FS:  00007f471d6976c0(0000) GS:ffff8882ae8d8000(0000) knlGS:0000000000000000
[  188.086983][ T6869] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  188.093633][ T6869] CR2: 00007f57d773e000 CR3: 000000010b8e0000 CR4: 00000000003506f0
[  188.101646][ T6869] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000
[  188.109750][ T6869] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  188.117869][ T6869] Call Trace:
[  188.121181][ T6869]  <TASK>
[  188.124152][ T6869]  ext4_xattr_set_entry+0x77c/0x1010
[  188.129611][ T6869]  ext4_xattr_ibody_set+0x184/0x3c0
[  188.134966][ T6869]  ext4_expand_extra_isize_ea+0xd7b/0x11a0
[  188.140851][ T6869]  __ext4_expand_extra_isize+0x246/0x280
[  188.146666][ T6869]  __ext4_mark_inode_dirty+0x29b/0x400
[  188.152315][ T6869]  ext4_evict_inode+0x865/0xe40
[  188.157317][ T6869]  ? __pfx_ext4_evict_inode+0x10/0x10
[  188.162836][ T6869]  evict+0x2af/0x510
[  188.166850][ T6869]  ? __dquot_initialize+0x146/0x7c0
[  188.172240][ T6869]  iput+0x41a/0x580
[  188.176152][ T6869]  ext4_process_orphan+0x1a9/0x1c0
[  188.181373][ T6869]  ext4_orphan_cleanup+0x6a8/0xa00
[  188.186541][ T6869]  ext4_fill_super+0x3414/0x37c0
[  188.191572][ T6869]  ? set_blocksize+0x14c/0x270
[  188.196531][ T6869]  ? setup_bdev_super+0x30e/0x370
[  188.201664][ T6869]  ? __pfx_ext4_fill_super+0x10/0x10
[  188.207003][ T6869]  get_tree_bdev_flags+0x291/0x300
[  188.212346][ T6869]  ? __pfx_ext4_fill_super+0x10/0x10
[  188.217740][ T6869]  get_tree_bdev+0x1f/0x30
[  188.222216][ T6869]  ext4_get_tree+0x1c/0x30
[  188.226685][ T6869]  vfs_get_tree+0x57/0x1d0
[  188.231223][ T6869]  do_new_mount+0x288/0x8d0
[  188.235777][ T6869]  path_mount+0x4d0/0xbc0
[  188.240166][ T6869]  __se_sys_mount+0x28c/0x2e0
[  188.245155][ T6869]  __x64_sys_mount+0x67/0x80
[  188.249897][ T6869]  x64_sys_call+0x2d61/0x3020
[  188.254640][ T6869]  do_syscall_64+0x12c/0x370
[  188.259501][ T6869]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.265579][ T6869] RIP: 0033:0x7f471ec3da8a
[  188.270215][ T6869] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  188.290039][ T6869] RSP: 002b:00007f471d696e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  188.298770][ T6869] RAX: ffffffffffffffda RBX: 00007f471d696ee0 RCX: 00007f471ec3da8a
[  188.306928][ T6869] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 00007f471d696ea0
[  188.314979][ T6869] RBP: 0000200000000180 R08: 00007f471d696ee0 R09: 0000000000800718
[  188.323170][ T6869] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000140
[  188.331273][ T6869] R13: 00007f471d696ea0 R14: 00000000000004a3 R15: 000000000000002c
[  188.339392][ T6869]  </TASK>
[  188.342421][ T6869] ---[ end trace 0000000000000000 ]---
[  188.378817][ T6869] EXT4-fs (loop3): 1 orphan inode deleted
[  188.403141][ T6875] hub 8-0:1.0: USB hub found
[  188.415182][ T6875] hub 8-0:1.0: 8 ports detected
[  188.503404][ T6884] loop2: detected capacity change from 0 to 512
[  188.638678][ T6884] ext4 filesystem being mounted at /195/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  188.657460][ T6888] loop1: detected capacity change from 0 to 512
[  188.706903][ T6888] ext4 filesystem being mounted at /183/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  189.006925][ T6894] loop3: detected capacity change from 0 to 1024
[  189.013899][ T6894] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  189.053096][ T6898] loop1: detected capacity change from 0 to 1024
[  189.103472][ T6898] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  189.247760][ T6901] loop4: detected capacity change from 0 to 764
[  189.267987][ T6901] rock: directory entry would overflow storage
[  189.283563][ T6901] rock: sig=0x4654, size=5, remaining=4
[  189.449284][ T6921] loop0: detected capacity change from 0 to 512
[  189.481496][ T6921] ext4 filesystem being mounted at /155/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  189.605369][ T6919] ext4 filesystem being mounted at /185/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  189.644228][ T6919] netlink: 52 bytes leftover after parsing attributes in process `syz.1.906'.
[  189.654093][ T6919] netlink: 20 bytes leftover after parsing attributes in process `syz.1.906'.
[  189.663753][ T6919] netlink: 52 bytes leftover after parsing attributes in process `syz.1.906'.
[  189.673659][ T6919] netlink: 20 bytes leftover after parsing attributes in process `syz.1.906'.
[  189.684052][ T6919] netlink: 52 bytes leftover after parsing attributes in process `syz.1.906'.
[  189.728256][ T6934] ext4 filesystem being mounted at /186/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  190.109139][ T6944] ext4 filesystem being mounted at /197/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  190.237668][   T36] Bluetooth: hci0: Frame reassembly failed (-84)
[  190.614700][ T6952] ext4 filesystem being mounted at /157/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  190.841320][ T6965] netlink: 20 bytes leftover after parsing attributes in process `syz.3.921'.
[  190.861962][ T6965] set_capacity_and_notify: 6 callbacks suppressed
[  190.861981][ T6965] loop3: detected capacity change from 0 to 256
[  190.877337][ T6965] msdos: Unknown parameter '¨hų0x000000000000ee00'
[  190.935317][ T6965] netlink: 'syz.3.921': attribute type 1 has an invalid length.
[  190.947173][ T6967] loop0: detected capacity change from 0 to 1024
[  190.994163][ T6967] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  191.105235][ T6969] loop2: detected capacity change from 0 to 512
[  191.154418][ T6969] ext4 filesystem being mounted at /198/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  191.197605][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  191.453528][ T6978] loop3: detected capacity change from 0 to 512
[  191.479417][ T6978] ext4 filesystem being mounted at /210/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  191.501008][   T28] kauditd_printk_skb: 69 callbacks suppressed
[  191.501026][   T28] audit: type=1400 audit(1775076039.431:1244): avc:  denied  { map } for  pid=6981 comm="syz.2.925" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  191.552787][ T6989] loop1: detected capacity change from 0 to 128
[  191.637908][ T6999] netlink: 20 bytes leftover after parsing attributes in process `syz.2.928'.
[  191.695987][ T6999] loop2: detected capacity change from 0 to 256
[  191.714824][ T6999] msdos: Unknown parameter '¨hų0x000000000000ee00'
[  191.833843][ T7022] netlink: 24 bytes leftover after parsing attributes in process `syz.0.929'.
[  191.851339][ T7022] xfrm1: entered allmulticast mode
[  191.866183][ T7022] loop0: detected capacity change from 0 to 512
[  191.873137][ T7022] EXT4-fs: Ignoring removed mblk_io_submit option
[  191.886318][ T7022] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  191.939141][ T7022] ext4 filesystem being mounted at /159/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  191.960649][   T28] audit: type=1400 audit(1775076039.891:1245): avc:  denied  { append } for  pid=7011 comm="syz.0.929" name="file2" dev="loop0" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  191.984529][ T7022] EXT4-fs (loop0): shut down requested (2)
[  191.994954][ T7022] netlink: 8 bytes leftover after parsing attributes in process `syz.0.929'.
[  192.005879][   T28] audit: type=1400 audit(1775076039.931:1246): avc:  denied  { read } for  pid=2982 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  192.028807][   T28] audit: type=1400 audit(1775076039.931:1247): avc:  denied  { search } for  pid=2982 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  192.060878][   T28] audit: type=1400 audit(1775076039.931:1248): avc:  denied  { search } for  pid=2982 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  192.082920][   T28] audit: type=1400 audit(1775076039.931:1249): avc:  denied  { add_name } for  pid=2982 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  192.113350][   T28] audit: type=1400 audit(1775076039.931:1250): avc:  denied  { create } for  pid=2982 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  192.144227][   T28] audit: type=1400 audit(1775076039.931:1251): avc:  denied  { append open } for  pid=2982 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  192.168832][   T28] audit: type=1400 audit(1775076039.931:1252): avc:  denied  { getattr } for  pid=2982 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  192.310497][ T3628] Bluetooth: hci0: command 0x1003 tx timeout
[  192.316837][ T3705] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  192.422087][ T7001] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  192.497648][ T6999] netlink: 'syz.2.928': attribute type 1 has an invalid length.
[  192.709181][ T7114] lo speed is unknown, defaulting to 1000
[  192.719929][ T7114] ip6_vti0 speed is unknown, defaulting to 1000
[  192.737901][   T28] audit: type=1400 audit(1775076040.661:1253): avc:  denied  { connect } for  pid=7112 comm="syz.0.934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  192.842200][ T7071] loop4: detected capacity change from 0 to 512
[  192.911304][ T7110] loop1: detected capacity change from 0 to 512
[  192.967046][ T7071] ext4 filesystem being mounted at /168/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  192.995033][ T7110] ext4 filesystem being mounted at /189/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  193.454248][ T7110] netlink: 52 bytes leftover after parsing attributes in process `syz.1.933'.
[  193.562920][ T7138] loop0: detected capacity change from 0 to 512
[  193.585427][ T3314] EXT4-fs unmount: 34 callbacks suppressed
[  193.585446][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  193.605771][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  193.651927][ T7144] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  193.670899][ T7138] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  193.695623][ T7138] ext4 filesystem being mounted at /161/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  193.706705][ T7146] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  193.723732][ T7144] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  193.778195][ T7146] ext4 filesystem being mounted at /169/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  193.797985][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  193.983173][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.977856][ T7158] __nla_validate_parse: 9 callbacks suppressed
[  194.977948][ T7158] netlink: 56 bytes leftover after parsing attributes in process `syz.0.941'.
[  195.493940][ T7166] lo speed is unknown, defaulting to 1000
[  195.560594][ T7166] ip6_vti0 speed is unknown, defaulting to 1000
[  195.572040][ T7173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  195.583953][ T7173] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  195.718122][ T7174] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  195.758178][ T7174] ext4 filesystem being mounted at /193/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  195.943856][ T3319] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  196.035803][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.096577][ T7180] set_capacity_and_notify: 3 callbacks suppressed
[  196.096621][ T7180] loop2: detected capacity change from 0 to 512
[  196.193191][ T7180] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  196.339650][ T7180] ext4 filesystem being mounted at /205/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  196.402809][ T7192] loop1: detected capacity change from 0 to 512
[  196.448152][ T7192] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  196.467666][ T7192] ext4 filesystem being mounted at /195/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  196.485523][ T7184] loop4: detected capacity change from 0 to 512
[  196.572279][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.636291][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.674190][ T7184] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  196.689870][ T7184] ext4 filesystem being mounted at /170/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  196.707606][   T28] kauditd_printk_skb: 15 callbacks suppressed
[  196.707626][   T28] audit: type=1326 audit(1775076044.631:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7200 comm="syz.1.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287c2ac819 code=0x7ffc0000
[  196.787586][   T28] audit: type=1326 audit(1775076044.631:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7200 comm="syz.1.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287c2ac819 code=0x7ffc0000
[  196.815217][ T7205] FAULT_INJECTION: forcing a failure.
[  196.815217][ T7205] name failslab, interval 1, probability 0, space 0, times 0
[  196.836467][ T7205] CPU: 1 UID: 0 PID: 7205 Comm: syz.2.955 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  196.836508][ T7205] Tainted: [W]=WARN
[  196.836516][ T7205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  196.836597][ T7205] Call Trace:
[  196.836605][ T7205]  <TASK>
[  196.836614][ T7205]  __dump_stack+0x1d/0x30
[  196.836687][ T7205]  dump_stack_lvl+0x95/0xd0
[  196.836718][ T7205]  dump_stack+0x15/0x1b
[  196.836742][ T7205]  should_fail_ex+0x263/0x280
[  196.836846][ T7205]  should_failslab+0x8c/0xb0
[  196.836868][ T7205]  __kvmalloc_node_noprof+0x155/0x650
[  196.836957][ T7205]  ? obj_cgroup_charge_account+0x122/0x1a0
[  196.837098][ T7205]  ? bpf_test_run_xdp_live+0x137/0x1360
[  196.837147][ T7205]  bpf_test_run_xdp_live+0x137/0x1360
[  196.837194][ T7205]  ? avc_has_perm+0x101/0x190
[  196.837277][ T7205]  ? selinux_file_open+0x2e6/0x330
[  196.837319][ T7205]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[  196.837350][ T7205]  ? _copy_from_user+0x89/0xb0
[  196.837507][ T7205]  ? bpf_test_init+0xf4/0x130
[  196.837547][ T7205]  bpf_prog_test_run_xdp+0x57b/0xa10
[  196.837610][ T7205]  ? __rcu_read_unlock+0x4e/0x70
[  196.837638][ T7205]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  196.837690][ T7205]  bpf_prog_test_run+0x204/0x340
[  196.837723][ T7205]  __sys_bpf+0x52e/0x7e0
[  196.837768][ T7205]  __x64_sys_bpf+0x41/0x50
[  196.837789][ T7205]  x64_sys_call+0x10cb/0x3020
[  196.837823][ T7205]  do_syscall_64+0x12c/0x370
[  196.837858][ T7205]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  196.837925][ T7205] RIP: 0033:0x7f61ba8cc819
[  196.837946][ T7205] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  196.837970][ T7205] RSP: 002b:00007f61b9327028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  196.837995][ T7205] RAX: ffffffffffffffda RBX: 00007f61bab45fa0 RCX: 00007f61ba8cc819
[  196.838012][ T7205] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a
[  196.838036][ T7205] RBP: 00007f61b9327090 R08: 0000000000000000 R09: 0000000000000000
[  196.838048][ T7205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  196.838060][ T7205] R13: 00007f61bab46038 R14: 00007f61bab45fa0 R15: 00007ffd13f2c0b8
[  196.838081][ T7205]  </TASK>
[  197.062663][   T28] audit: type=1326 audit(1775076044.631:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7200 comm="syz.1.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287c2ac819 code=0x7ffc0000
[  197.086194][   T28] audit: type=1326 audit(1775076044.671:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7200 comm="syz.1.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287c2ac819 code=0x7ffc0000
[  197.091432][ T7195] loop0: detected capacity change from 0 to 512
[  197.110049][   T28] audit: type=1326 audit(1775076044.671:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7200 comm="syz.1.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287c2ac819 code=0x7ffc0000
[  197.110089][   T28] audit: type=1326 audit(1775076044.671:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7200 comm="syz.1.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f287c2ac819 code=0x7ffc0000
[  197.110119][   T28] audit: type=1326 audit(1775076044.671:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7200 comm="syz.1.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287c2ac819 code=0x7ffc0000
[  197.110156][   T28] audit: type=1326 audit(1775076044.671:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7200 comm="syz.1.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287c2ac819 code=0x7ffc0000
[  197.110189][   T28] audit: type=1326 audit(1775076044.671:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7200 comm="syz.1.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287c2ac819 code=0x7ffc0000
[  197.110221][   T28] audit: type=1326 audit(1775076044.671:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7200 comm="syz.1.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f287c2ac819 code=0x7ffc0000
[  197.288130][ T7212] loop1: detected capacity change from 0 to 256
[  197.299570][ T7212] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  197.311361][ T7212] FAULT_INJECTION: forcing a failure.
[  197.311361][ T7212] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  197.325908][ T7212] CPU: 1 UID: 0 PID: 7212 Comm: syz.1.958 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  197.325961][ T7212] Tainted: [W]=WARN
[  197.325970][ T7212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  197.325987][ T7212] Call Trace:
[  197.325995][ T7212]  <TASK>
[  197.326006][ T7212]  __dump_stack+0x1d/0x30
[  197.326040][ T7212]  dump_stack_lvl+0x95/0xd0
[  197.326090][ T7212]  dump_stack+0x15/0x1b
[  197.326113][ T7212]  should_fail_ex+0x263/0x280
[  197.326147][ T7212]  should_fail+0xb/0x20
[  197.326190][ T7212]  should_fail_usercopy+0x1a/0x20
[  197.326291][ T7212]  _copy_to_user+0x20/0xa0
[  197.326370][ T7212]  simple_read_from_buffer+0xb5/0x130
[  197.326402][ T7212]  proc_fail_nth_read+0x10e/0x150
[  197.326445][ T7212]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  197.326496][ T7212]  vfs_read+0x1ab/0x7f0
[  197.326519][ T7212]  ? __rcu_read_unlock+0x4e/0x70
[  197.326582][ T7212]  ? __fget_files+0x184/0x1c0
[  197.326616][ T7212]  ? mutex_lock+0x57/0x90
[  197.326642][ T7212]  ksys_read+0xdc/0x1a0
[  197.326668][ T7212]  __x64_sys_read+0x40/0x50
[  197.326727][ T7212]  x64_sys_call+0x2886/0x3020
[  197.326821][ T7212]  do_syscall_64+0x12c/0x370
[  197.326858][ T7212]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  197.326890][ T7212] RIP: 0033:0x7f287c26d04e
[  197.326911][ T7212] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  197.326934][ T7212] RSP: 002b:00007f287ad06fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  197.326960][ T7212] RAX: ffffffffffffffda RBX: 00007f287ad076c0 RCX: 00007f287c26d04e
[  197.327083][ T7212] RDX: 000000000000000f RSI: 00007f287ad070a0 RDI: 0000000000000005
[  197.327096][ T7212] RBP: 00007f287ad07090 R08: 0000000000000000 R09: 0000000000000000
[  197.327108][ T7212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  197.327119][ T7212] R13: 00007f287c526038 R14: 00007f287c525fa0 R15: 00007ffe1a6181e8
[  197.327168][ T7212]  </TASK>
[  197.539078][ T7220] loop2: detected capacity change from 0 to 256
[  197.597520][ T7220] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  197.612102][ T7220] tipc: Failed to remove unknown binding: 66,0,0/0:369155295/369155296
[  197.622035][ T7220] tipc: Failed to remove unknown binding: 66,0,0/0:369155295/369155296
[  197.639598][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.653314][ T7219] loop3: detected capacity change from 0 to 512
[  197.655458][ T7195] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  197.706344][ T7228] netlink: 48 bytes leftover after parsing attributes in process `syz.4.962'.
[  197.722145][ T7195] ext4 filesystem being mounted at /163/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  197.747259][ T7219] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  197.764920][ T7231] loop1: detected capacity change from 0 to 512
[  197.771551][ T7195] netlink: 52 bytes leftover after parsing attributes in process `syz.0.952'.
[  197.772729][ T7219] ext4 filesystem being mounted at /215/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  197.782658][ T7195] netlink: 20 bytes leftover after parsing attributes in process `syz.0.952'.
[  197.817884][ T7195] netlink: 52 bytes leftover after parsing attributes in process `syz.0.952'.
[  197.848434][ T7195] netlink: 20 bytes leftover after parsing attributes in process `syz.0.952'.
[  197.853863][ T7231] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  197.859055][ T7195] netlink: 52 bytes leftover after parsing attributes in process `syz.0.952'.
[  197.898502][ T7234] loop4: detected capacity change from 0 to 2048
[  197.914022][ T7238] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2
[  197.915431][ T7231] ext4 filesystem being mounted at /201/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  197.960909][ T7238] loop2: detected capacity change from 0 to 8192
[  197.965991][ T3307] Alternate GPT is invalid, using primary GPT.
[  197.976202][ T3307]  loop4: p1 p2 p3
[  197.988978][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.002587][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.012383][ T3302]  loop2: p1 p3
[  198.020195][ T3302] loop2: p1 start 51316480 is beyond EOD, truncated
[  198.036853][ T3302] loop2: p3 start 393216 is beyond EOD, truncated
[  198.043573][ T7234] Alternate GPT is invalid, using primary GPT.
[  198.050140][ T7234]  loop4: p1 p2 p3
[  198.050458][ T7238]  loop2: p1 p3
[  198.070409][ T7234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  198.078770][ T7238] loop2: p1 start 51316480 is beyond EOD, truncated
[  198.085575][ T7244] EXT4-fs: Ignoring removed mblk_io_submit option
[  198.090399][ T7238] loop2: p3 start 393216 is beyond EOD, truncated
[  198.099684][ T7234] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  198.121561][ T7244] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  198.175726][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.190300][ T7244] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  198.213294][ T7244] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #11: comm syz.1.967: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  198.274838][ T7244] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  198.274948][ T7244] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.967: couldn't read orphan inode 11 (err -117)
[  198.284195][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  198.284219][    C1] EXT4-fs (loop1): initial error at time 1775076046: ext4_ext_check_inode:521: inode 11
[  198.284259][    C1] EXT4-fs (loop1): last error at time 1775076046: ext4_ext_check_inode:521: inode 11
[  198.325453][ T7244] loop1: lost filesystem error report for type 5 error -117
[  198.325921][ T7244] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  198.407133][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.497843][ T7265] netlink: 4 bytes leftover after parsing attributes in process `syz.3.971'.
[  199.177033][ T7273] hub 8-0:1.0: USB hub found
[  199.182632][ T7271] msdos: Unknown parameter '˙184467440737095516150xffffffffffffffff'
[  199.200352][ T7271] netlink: 20 bytes leftover after parsing attributes in process `syz.1.972'.
[  199.211717][ T7273] hub 8-0:1.0: 8 ports detected
[  199.296849][ T7279] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  199.317777][ T7279] ext4 filesystem being mounted at /218/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  199.371344][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.435466][ T7286] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  199.471420][ T7286] EXT4-fs (loop2): orphan file too big: 4294967295
[  199.478088][ T7286] EXT4-fs (loop2): mount failed
[  199.480760][ T7277] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  199.613099][ T7295] netlink: 822 bytes leftover after parsing attributes in process `syz.0.980'.
[  199.622582][ T7295] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma?
[  199.638444][ T7277] ext4 filesystem being mounted at /175/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  199.755452][ T7297] FAULT_INJECTION: forcing a failure.
[  199.755452][ T7297] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  199.770823][ T7297] CPU: 0 UID: 60928 PID: 7297 Comm: syz.1.981 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  199.770855][ T7297] Tainted: [W]=WARN
[  199.770863][ T7297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  199.770957][ T7297] Call Trace:
[  199.770964][ T7297]  <TASK>
[  199.771009][ T7297]  __dump_stack+0x1d/0x30
[  199.771111][ T7297]  dump_stack_lvl+0x95/0xd0
[  199.771135][ T7297]  dump_stack+0x15/0x1b
[  199.771156][ T7297]  should_fail_ex+0x263/0x280
[  199.771190][ T7297]  should_fail+0xb/0x20
[  199.771284][ T7297]  should_fail_usercopy+0x1a/0x20
[  199.771320][ T7297]  _copy_to_user+0x20/0xa0
[  199.771428][ T7297]  simple_read_from_buffer+0xb5/0x130
[  199.771516][ T7297]  proc_fail_nth_read+0x10e/0x150
[  199.771614][ T7297]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  199.771683][ T7297]  vfs_read+0x1ab/0x7f0
[  199.771710][ T7297]  ? fdget_pos+0x13e/0x1d0
[  199.771798][ T7297]  ? mutex_lock+0x57/0x90
[  199.771824][ T7297]  ksys_read+0xdc/0x1a0
[  199.771850][ T7297]  __x64_sys_read+0x40/0x50
[  199.771872][ T7297]  x64_sys_call+0x2886/0x3020
[  199.771980][ T7297]  do_syscall_64+0x12c/0x370
[  199.772035][ T7297]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  199.772137][ T7297] RIP: 0033:0x7f287c26d04e
[  199.772153][ T7297] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  199.772184][ T7297] RSP: 002b:00007f287ace5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  199.772208][ T7297] RAX: ffffffffffffffda RBX: 00007f287ace66c0 RCX: 00007f287c26d04e
[  199.772225][ T7297] RDX: 000000000000000f RSI: 00007f287ace60a0 RDI: 0000000000000009
[  199.772240][ T7297] RBP: 00007f287ace6090 R08: 0000000000000000 R09: 0000000000000000
[  199.772288][ T7297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  199.772303][ T7297] R13: 00007f287c526128 R14: 00007f287c526090 R15: 00007ffe1a6181e8
[  199.772324][ T7297]  </TASK>
[  199.973328][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.002329][ T7300] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  200.026499][ T7300] ext4 filesystem being mounted at /205/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  200.224120][ T7306] netlink: 'syz.4.984': attribute type 1 has an invalid length.
[  200.238515][ T7306] bond1: entered promiscuous mode
[  200.248212][ T7306] 8021q: adding VLAN 0 to HW filter on device bond1
[  200.644916][ T7313] __nla_validate_parse: 5 callbacks suppressed
[  200.644970][ T7313] netlink: 44 bytes leftover after parsing attributes in process `syz.3.986'.
[  201.018086][ T7306] lo speed is unknown, defaulting to 1000
[  201.050306][ T7318] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  201.093803][ T7322] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  201.119807][ T7318] ext4 filesystem being mounted at /168/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  201.141340][ T7306] lo speed is unknown, defaulting to 1000
[  201.147425][ T7306] lo speed is unknown, defaulting to 1000
[  201.153597][ T7322] ext4 filesystem being mounted at /221/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  201.216487][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.240809][ T7324] set_capacity_and_notify: 10 callbacks suppressed
[  201.240835][ T7324] loop4: detected capacity change from 0 to 1024
[  201.288442][ T7324] EXT4-fs: Ignoring removed mblk_io_submit option
[  201.367968][ T7324] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  201.439006][ T7324] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  201.451757][ T7306] infiniband syU×: set down
[  201.456332][ T3750] lo speed is unknown, defaulting to 1000
[  201.462209][ T7306] infiniband syU×: added lo
[  201.475823][ T7324] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #11: comm syz.4.984: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  201.637470][ T7306] RDS/IB: syU×: added
[  201.655090][ T7306] smc: adding ib device syU× with port count 1
[  201.692956][ T7306] smc:    ib device syU× port 1 has no pnetid
[  201.717840][ T7324] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  201.718252][ T7324] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.984: couldn't read orphan inode 11 (err -117)
[  201.739209][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  201.739248][    C1] EXT4-fs (loop4): initial error at time 1775076049: ext4_ext_check_inode:521: inode 11
[  201.739273][    C1] EXT4-fs (loop4): last error at time 1775076049: ext4_ext_check_inode:521: inode 11
[  201.860296][   T35] lo speed is unknown, defaulting to 1000
[  201.866597][ T7306] lo speed is unknown, defaulting to 1000
[  202.079810][ T7306] lo speed is unknown, defaulting to 1000
[  202.136201][ T7324] loop4: lost filesystem error report for type 5 error -117
[  202.156880][ T7324] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  202.186428][   T28] kauditd_printk_skb: 66 callbacks suppressed
[  202.186447][   T28] audit: type=1326 audit(1775076050.111:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7310 comm="syz.2.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f61ba8cc819 code=0x7ffc0000
[  202.220631][ T3314] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  202.244573][ T7338] netlink: 'syz.2.992': attribute type 1 has an invalid length.
[  202.272357][   T28] audit: type=1400 audit(1775076050.201:1346): avc:  denied  { create } for  pid=7340 comm="syz.1.991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  202.296374][   T28] audit: type=1400 audit(1775076050.201:1347): avc:  denied  { ioctl } for  pid=7340 comm="syz.1.991" path="socket:[18893]" dev="sockfs" ino=18893 ioctlcmd=0x7202 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  202.320490][ T7324] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.984: Invalid block bitmap block 0 in block_group 0
[  202.323566][   T28] audit: type=1400 audit(1775076050.221:1348): avc:  denied  { write } for  pid=7340 comm="syz.1.991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  202.356364][   T28] audit: type=1400 audit(1775076050.221:1349): avc:  denied  { read } for  pid=7340 comm="syz.1.991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  202.366405][ T7338] 8021q: adding VLAN 0 to HW filter on device bond1
[  202.377242][   T28] audit: type=1400 audit(1775076050.221:1350): avc:  denied  { create } for  pid=7305 comm="syz.4.984" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1
[  202.411143][ T7345] netlink: 48 bytes leftover after parsing attributes in process `syz.2.992'.
[  202.422744][ T7324] Quota error (device loop4): write_blk: dquota write failed
[  202.459668][ T7344] bond1: (slave macvlan1): making interface the new active one
[  202.467605][ T7347] loop0: detected capacity change from 0 to 512
[  202.511384][ T7344] bond1: (slave macvlan1): Enslaving as an active interface with an up link
[  202.525520][ T7324] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  202.536761][ T7347] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  202.554054][ T7347] ext4 filesystem being mounted at /170/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  202.625988][ T7306] lo speed is unknown, defaulting to 1000
[  202.633867][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.647630][ T7324] EXT4-fs error (device loop4): ext4_acquire_dquot:7026: comm syz.4.984: Failed to acquire dquot type 0
[  202.677904][ T7354] loop0: detected capacity change from 0 to 128
[  202.688813][ T7354] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  202.711262][ T7354] ext4 filesystem being mounted at /171/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  202.901760][ T7306] lo speed is unknown, defaulting to 1000
[  203.209041][ T7360] loop1: detected capacity change from 0 to 512
[  203.264293][ T7360] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  203.438797][ T7360] EXT4-fs (loop1): orphan file too big: 4294967295
[  203.445935][ T7360] EXT4-fs (loop1): mount failed
[  203.685186][ T7306] lo speed is unknown, defaulting to 1000
[  203.890124][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.017454][ T7366] netlink: 16 bytes leftover after parsing attributes in process `syz.4.997'.
[  204.075564][ T7368] loop4: detected capacity change from 0 to 128
[  204.378181][ T7365] loop2: detected capacity change from 0 to 512
[  204.386700][ T7372] bridge1: entered promiscuous mode
[  204.542370][ T7365] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  204.589093][ T7365] ext4 filesystem being mounted at /216/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  204.606630][ T3320] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  204.672611][ T7377] loop0: detected capacity change from 0 to 512
[  204.717151][ T3442] kworker/u8:8: attempt to access beyond end of device
[  204.717151][ T3442] loop4: rw=1, sector=145, nr_sectors = 8 limit=128
[  204.735600][ T3442] kworker/u8:8: attempt to access beyond end of device
[  204.735600][ T3442] loop4: rw=1, sector=161, nr_sectors = 8 limit=128
[  204.758528][ T7377] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  204.777697][ T7377] ext4 filesystem being mounted at /172/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  204.789453][ T3442] kworker/u8:8: attempt to access beyond end of device
[  204.789453][ T3442] loop4: rw=1, sector=177, nr_sectors = 8 limit=128
[  204.807720][ T7365] netlink: 52 bytes leftover after parsing attributes in process `syz.2.998'.
[  204.827792][ T3442] kworker/u8:8: attempt to access beyond end of device
[  204.827792][ T3442] loop4: rw=1, sector=193, nr_sectors = 8 limit=128
[  204.838405][ T7365] netlink: 20 bytes leftover after parsing attributes in process `syz.2.998'.
[  204.851436][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.860796][ T7365] netlink: 52 bytes leftover after parsing attributes in process `syz.2.998'.
[  204.870620][ T7365] netlink: 20 bytes leftover after parsing attributes in process `syz.2.998'.
[  204.877971][ T3442] kworker/u8:8: attempt to access beyond end of device
[  204.877971][ T3442] loop4: rw=1, sector=209, nr_sectors = 8 limit=128
[  204.880697][ T7365] netlink: 52 bytes leftover after parsing attributes in process `syz.2.998'.
[  204.994219][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.022366][ T3442] kworker/u8:8: attempt to access beyond end of device
[  205.022366][ T3442] loop4: rw=1, sector=225, nr_sectors = 8 limit=128
[  205.036404][ T3442] kworker/u8:8: attempt to access beyond end of device
[  205.036404][ T3442] loop4: rw=1, sector=241, nr_sectors = 8 limit=128
[  205.049891][ T3442] kworker/u8:8: attempt to access beyond end of device
[  205.049891][ T3442] loop4: rw=1, sector=257, nr_sectors = 8 limit=128
[  205.063285][ T3442] kworker/u8:8: attempt to access beyond end of device
[  205.063285][ T3442] loop4: rw=1, sector=273, nr_sectors = 8 limit=128
[  205.076689][ T3442] kworker/u8:8: attempt to access beyond end of device
[  205.076689][ T3442] loop4: rw=1, sector=289, nr_sectors = 8 limit=128
[  205.143362][ T7385] loop4: detected capacity change from 0 to 128
[  205.221515][ T7387] lo speed is unknown, defaulting to 1000
[  205.228253][ T7387] ip6_vti0 speed is unknown, defaulting to 1000
[  205.301243][ T7387] lo speed is unknown, defaulting to 1000
[  205.600308][   T28] audit: type=1400 audit(1775076053.441:1351): avc:  denied  { getopt } for  pid=7381 comm="syz.0.1002" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  205.636479][ T7390] loop2: detected capacity change from 0 to 512
[  205.676262][ T7385] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  205.691940][ T7390] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  205.704967][ T7385] ext4 filesystem being mounted at /179/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  205.726226][ T7390] ext4 filesystem being mounted at /217/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  205.855172][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.924282][ T7392] loop1: detected capacity change from 0 to 512
[  205.999808][   T28] audit: type=1400 audit(1775076053.931:1352): avc:  denied  { write } for  pid=7398 comm="syz.2.1006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  206.222560][ T7396] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  206.294499][ T7392] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  206.479591][ T7399] lo speed is unknown, defaulting to 1000
[  206.486005][ T7399] ip6_vti0 speed is unknown, defaulting to 1000
[  206.498682][ T7396] ext4 filesystem being mounted at /174/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  206.528811][ T7392] ext4 filesystem being mounted at /209/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  206.570389][ T7407] set_capacity_and_notify: 1 callbacks suppressed
[  206.570437][ T7407] loop2: detected capacity change from 0 to 2048
[  206.584673][ T7396] FAULT_INJECTION: forcing a failure.
[  206.584673][ T7396] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  206.638847][ T7396] CPU: 1 UID: 0 PID: 7396 Comm: syz.0.1005 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  206.638910][ T7396] Tainted: [W]=WARN
[  206.638919][ T7396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  206.638935][ T7396] Call Trace:
[  206.638941][ T7396]  <TASK>
[  206.638949][ T7396]  __dump_stack+0x1d/0x30
[  206.638976][ T7396]  dump_stack_lvl+0x95/0xd0
[  206.638999][ T7396]  dump_stack+0x15/0x1b
[  206.639117][ T7396]  should_fail_ex+0x263/0x280
[  206.639154][ T7396]  should_fail+0xb/0x20
[  206.639205][ T7396]  should_fail_usercopy+0x1a/0x20
[  206.639233][ T7396]  strncpy_from_user+0x27/0x250
[  206.639258][ T7396]  ? kmem_cache_alloc_noprof+0x18c/0x400
[  206.639296][ T7396]  do_getname+0x59/0x1c0
[  206.639401][ T7396]  getname_flags+0x1d/0x30
[  206.639424][ T7396]  __se_sys_quotactl+0x157/0x660
[  206.639464][ T7396]  __x64_sys_quotactl+0x55/0x70
[  206.639493][ T7396]  x64_sys_call+0x1a2a/0x3020
[  206.639519][ T7396]  do_syscall_64+0x12c/0x370
[  206.639625][ T7396]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  206.639654][ T7396] RIP: 0033:0x7fc5f00ac819
[  206.639674][ T7396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  206.639738][ T7396] RSP: 002b:00007fc5eeb07028 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3
[  206.639762][ T7396] RAX: ffffffffffffffda RBX: 00007fc5f0325fa0 RCX: 00007fc5f00ac819
[  206.639780][ T7396] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffff80000900
[  206.639799][ T7396] RBP: 00007fc5eeb07090 R08: 0000000000000000 R09: 0000000000000000
[  206.639815][ T7396] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001
[  206.639832][ T7396] R13: 00007fc5f0326038 R14: 00007fc5f0325fa0 R15: 00007ffec5b1d678
[  206.639854][ T7396]  </TASK>
[  206.874064][ T7399] lo speed is unknown, defaulting to 1000
[  207.041779][ T7392] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1004'.
[  207.084709][ T7392] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1004'.
[  207.109196][ T7392] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1004'.
[  207.138505][ T7392] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1004'.
[  207.149260][ T7407] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  207.177920][ T7392] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1004'.
[  207.251560][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  207.697332][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  207.697507][ T3317] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  207.728994][ T3319] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  207.753179][ T7414] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1007'.
[  207.770688][ T7416] loop4: detected capacity change from 0 to 764
[  207.782234][ T7416] rock: directory entry would overflow storage
[  207.789089][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  207.789529][ T7416] rock: sig=0x4654, size=5, remaining=4
[  207.824488][   T28] audit: type=1400 audit(1775076055.751:1353): avc:  denied  { mount } for  pid=7415 comm="syz.4.1010" name="/" dev="configfs" ino=2050 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  207.847375][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  207.857769][ T7419] Driver unsupported XDP return value 0 on prog  (id 336) dev N/A, expect packet loss!
[  207.869330][ T7421] loop1: detected capacity change from 0 to 256
[  207.876050][ T7421] msdos: Unknown parameter '¨hų0x000000000000ee00'
[  207.898273][ T7421] netlink: 'syz.1.1007': attribute type 1 has an invalid length.
[  207.920356][ T7424] loop0: detected capacity change from 0 to 1024
[  207.927565][   T28] audit: type=1400 audit(1775076055.751:1354): avc:  denied  { search } for  pid=7415 comm="syz.4.1010" name="/" dev="configfs" ino=2050 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  207.970095][ T7424] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  207.983308][ T7430] loop3: detected capacity change from 0 to 512
[  207.996541][   T28] audit: type=1400 audit(1775076055.751:1355): avc:  denied  { search } for  pid=7415 comm="syz.4.1010" name="/" dev="configfs" ino=2050 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  208.019994][ T7433] loop4: detected capacity change from 0 to 128
[  208.027232][ T7424] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  208.098489][ T7430] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  208.103800][   T28] audit: type=1400 audit(1775076055.831:1356): avc:  denied  { create } for  pid=7411 comm="syz.2.1009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  208.147170][ T7430] ext4 filesystem being mounted at /223/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  208.152086][ T7444] xt_hashlimit: size too large, truncated to 1048576
[  208.189123][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.242096][ T7448] ------------[ cut here ]------------
[  208.247666][ T7448] verifier bug: REG INVARIANTS VIOLATION (true_reg1): range bounds violation u64=[0xffffdfcd, 0xffffffffffffdfcc] s64=[0x80000000ffffdfcd, 0x7fffffffffffdfcc] u32=[0xffffdfcd, 0xffffdfcc] s32=[0xffffdfcd, 0xffffdfcc] var_off=(0xffffdfcc, 0xffffffff00000000)
[  208.272369][ T7448] WARNING: kernel/bpf/verifier.c:2823 at reg_bounds_sanity_check+0x15b/0x660, CPU#0: syz.3.1016/7448
[  208.283360][ T7448] Modules linked in:
[  208.287355][ T7448] CPU: 0 UID: 0 PID: 7448 Comm: syz.3.1016 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  208.298297][ T7448] Tainted: [W]=WARN
[  208.302131][ T7448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  208.312287][ T7448] RIP: 0010:reg_bounds_sanity_check+0x27d/0x660
[  208.318752][ T7448] Code: 24 78 4c 8b 44 24 70 4c 8b 4c 24 60 41 ff 74 24 20 41 55 53 ff 74 24 68 ff 74 24 78 ff b4 24 90 00 00 00 ff b4 24 b0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 4c 8b ac 24 98 00 00 00 49 8d 85 80 08
[  208.338425][ T7448] RSP: 0018:ffffc900125d3370 EFLAGS: 00010246
[  208.344526][ T7448] RAX: ffff888104a5cdc8 RBX: 00000000ffffdfcc RCX: 00000000ffffdfcd
[  208.352560][ T7448] RDX: ffffffff86819943 RSI: ffffffff866dae3b RDI: ffffffff871d2830
[  208.360591][ T7448] RBP: ffff88812413ca70 R08: ffffffffffffdfcc R09: 80000000ffffdfcd
[  208.368608][ T7448] R10: ffffffff893d5bd8 R11: 7ffffffffffffffc R12: ffff88812413ca30
[  208.376614][ T7448] R13: 00000000ffffdfcc R14: ffff88812413ca7c R15: ffff88812413ca68
[  208.383964][ T7436] loop2: detected capacity change from 0 to 512
[  208.384780][ T7448] FS:  00007f471d6976c0(0000) GS:ffff8882ae8d8000(0000) knlGS:0000000000000000
[  208.384803][ T7448] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  208.384821][ T7448] CR2: 0000200000001000 CR3: 000000010ba78000 CR4: 00000000003506f0
[  208.384843][ T7448] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000
[  208.384932][ T7448] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  208.385003][ T7448] Call Trace:
[  208.385011][ T7448]  <TASK>
[  208.385033][ T7448]  reg_set_min_max+0x1c8/0x260
[  208.385074][ T7448]  check_cond_jmp_op+0x13b2/0x1a80
[  208.385118][ T7448]  do_check+0x4a9b/0x9840
[  208.385216][ T7448]  do_check_common+0xd0b/0x1630
[  208.385253][ T7448]  bpf_check+0x2f78/0xcc30
[  208.385295][ T7448]  ? __alloc_frozen_pages_noprof+0x18a/0x360
[  208.385400][ T7448]  ? alloc_pages_bulk_noprof+0x4aa/0x530
[  208.473104][ T7448]  ? __vmap_pages_range_noflush+0xb9c/0xcc0
[  208.479284][ T7448]  ? pcpu_block_update+0x232/0x3b0
[  208.484461][ T7448]  ? _find_next_zero_bit+0x64/0xa0
[  208.489662][ T7448]  ? pcpu_block_update+0x24e/0x3b0
[  208.494936][ T7448]  ? pcpu_block_refresh_hint+0x157/0x170
[  208.500672][ T7448]  ? _find_next_zero_bit+0x29/0xa0
[  208.505816][ T7448]  ? pcpu_block_refresh_hint+0x157/0x170
[  208.511518][ T7448]  ? pcpu_block_update_hint_alloc+0x640/0x660
[  208.517722][ T7448]  ? css_rstat_updated+0xbb/0x280
[  208.522793][ T7448]  ? mod_memcg_state+0x182/0x270
[  208.527918][ T7448]  ? __rcu_read_unlock+0x4e/0x70
[  208.532901][ T7448]  ? avc_has_perm_noaudit+0xab/0x130
[  208.538334][ T7448]  ? avc_has_perm+0x101/0x190
[  208.543100][ T7448]  ? selinux_bpf_prog_load+0x197/0x1c0
[  208.548634][ T7448]  ? security_bpf_prog_load+0x9e/0x140
[  208.554292][ T7448]  bpf_prog_load+0xf76/0x1140
[  208.559044][ T7448]  ? security_bpf+0x2b/0x90
[  208.563601][ T7448]  __sys_bpf+0x505/0x7e0
[  208.567908][ T7448]  __x64_sys_bpf+0x41/0x50
[  208.572361][ T7448]  x64_sys_call+0x10cb/0x3020
[  208.577140][ T7448]  do_syscall_64+0x12c/0x370
[  208.581800][ T7448]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  208.587742][ T7448] RIP: 0033:0x7f471ec3c819
[  208.590206][ T7436] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  208.592182][ T7448] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  208.592227][ T7448] RSP: 002b:00007f471d697028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  208.592253][ T7448] RAX: ffffffffffffffda RBX: 00007f471eeb5fa0 RCX: 00007f471ec3c819
[  208.592271][ T7448] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005
[  208.592286][ T7448] RBP: 00007f471ecd2c91 R08: 0000000000000000 R09: 0000000000000000
[  208.592302][ T7448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  208.592318][ T7448] R13: 00007f471eeb6038 R14: 00007f471eeb5fa0 R15: 00007ffec26493e8
[  208.592421][ T7448]  </TASK>
[  208.592472][ T7448] ---[ end trace 0000000000000000 ]---
[  208.690517][ T7436] ext4 filesystem being mounted at /220/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  208.760951][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.897766][   T28] audit: type=1400 audit(1775076056.821:1357): avc:  denied  { create } for  pid=7470 comm="syz.4.1020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  208.919267][ T7466] lo speed is unknown, defaulting to 1000
[  208.925880][ T7466] ip6_vti0 speed is unknown, defaulting to 1000
[  209.401358][ T7474] loop4: detected capacity change from 0 to 1024
[  209.416783][ T7474] EXT4-fs: inline encryption not supported
[  209.457620][ T7477] loop3: detected capacity change from 0 to 1024
[  209.466454][ T7474] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  209.487935][ T7477] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  209.501798][ T7474] ext4 filesystem being mounted at /182/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  209.565539][ T7472] syz.1.1017 (7472) used greatest stack depth: 8840 bytes left
[  209.592334][ T7477] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  209.617240][ T7474] EXT4-fs error (device loop4): ext4_map_blocks:828: inode #15: comm syz.4.1020: lblock 0 mapped to illegal pblock 0 (length 1)
[  209.639803][ T7466] lo speed is unknown, defaulting to 1000
[  209.666335][ T7474] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  209.708313][ T7474] EXT4-fs (loop4): This should not happen!! Data will be lost
[  209.708313][ T7474] 
[  210.505198][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  210.515965][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  210.535543][ T3319] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  210.596791][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  210.597383][ T7496] loop2: detected capacity change from 0 to 1024
[  210.636503][ T7498] EXT4-fs: Ignoring removed mblk_io_submit option
[  210.645555][ T7496] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  210.655442][ T7498] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  210.664624][ T7498] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  210.723749][ T7498] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #11: comm syz.3.1028: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  210.829438][ T7498] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  210.829590][ T7498] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.1028: couldn't read orphan inode 11 (err -117)
[  210.838869][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  210.838900][    C0] EXT4-fs (loop3): initial error at time 1775076058: ext4_ext_check_inode:521: inode 11
[  210.838954][    C0] EXT4-fs (loop3): last error at time 1775076058: ext4_ext_check_inode:521: inode 11
[  210.936162][ T7498] loop3: lost filesystem error report for type 5 error -117
[  210.961083][ T7507] ext4 filesystem being mounted at /183/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  211.091678][ T7498] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1028: Invalid block bitmap block 0 in block_group 0
[  211.141466][ T7498] Quota error (device loop3): write_blk: dquota write failed
[  211.151905][ T7498] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  211.162647][ T7498] EXT4-fs error (device loop3): ext4_acquire_dquot:7026: comm syz.3.1028: Failed to acquire dquot type 0
[  211.176526][ T7517] EXT4-fs error (device loop3): __ext4_get_inode_loc:4797: comm syz.3.1028: Invalid inode table block 8589934593 in block_group 0
[  211.240992][ T7104] EXT4-fs error (device loop3): __ext4_get_inode_loc:4797: comm kworker/u8:18: Invalid inode table block 8589934593 in block_group 0
[  211.480568][   T28] audit: type=1400 audit(1775076059.411:1358): avc:  denied  { create } for  pid=7505 comm="syz.1.1030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  211.511701][ T7508] lo speed is unknown, defaulting to 1000
[  211.518289][ T7508] ip6_vti0 speed is unknown, defaulting to 1000
[  211.559507][ T7508] lo speed is unknown, defaulting to 1000
[  211.579851][ T7520] set_capacity_and_notify: 3 callbacks suppressed
[  211.579875][ T7520] loop4: detected capacity change from 0 to 256
[  211.597458][ T7524] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1034'.
[  211.626000][   T28] audit: type=1400 audit(1775076059.551:1359): avc:  denied  { map } for  pid=7521 comm="syz.3.1034" path="socket:[18139]" dev="sockfs" ino=18139 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  211.652152][ T7520] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1032'.
[  211.680727][ T7527] loop0: detected capacity change from 0 to 1024
[  211.725053][ T7527] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  211.727864][   T28] audit: type=1400 audit(1775076059.551:1360): avc:  denied  { read accept } for  pid=7521 comm="syz.3.1034" path="socket:[18139]" dev="sockfs" ino=18139 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  211.910898][ T7531] FAULT_INJECTION: forcing a failure.
[  211.910898][ T7531] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  211.928580][ T7540] loop1: detected capacity change from 0 to 512
[  211.945266][ T7531] CPU: 1 UID: 0 PID: 7531 Comm: syz.3.1036 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  211.945297][ T7531] Tainted: [W]=WARN
[  211.945303][ T7531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  211.945319][ T7531] Call Trace:
[  211.945372][ T7531]  <TASK>
[  211.945381][ T7531]  __dump_stack+0x1d/0x30
[  211.945438][ T7531]  dump_stack_lvl+0x95/0xd0
[  211.945460][ T7531]  dump_stack+0x15/0x1b
[  211.945480][ T7531]  should_fail_ex+0x263/0x280
[  211.945513][ T7531]  should_fail+0xb/0x20
[  211.945591][ T7531]  should_fail_usercopy+0x1a/0x20
[  211.945619][ T7531]  _copy_to_user+0x20/0xa0
[  211.945655][ T7531]  simple_read_from_buffer+0xb5/0x130
[  211.945685][ T7531]  proc_fail_nth_read+0x10e/0x150
[  211.945741][ T7531]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  211.945790][ T7531]  vfs_read+0x1ab/0x7f0
[  211.945813][ T7531]  ? __rcu_read_unlock+0x4e/0x70
[  211.945889][ T7531]  ? __fget_files+0x184/0x1c0
[  211.945919][ T7531]  ? mutex_lock+0x57/0x90
[  211.945938][ T7531]  ksys_read+0xdc/0x1a0
[  211.946014][ T7531]  __x64_sys_read+0x40/0x50
[  211.946085][ T7531]  x64_sys_call+0x2886/0x3020
[  211.946154][ T7531]  do_syscall_64+0x12c/0x370
[  211.946179][ T7531]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  211.946200][ T7531] RIP: 0033:0x7f471ebfd04e
[  211.946217][ T7531] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  211.946315][ T7531] RSP: 002b:00007f471d696fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  211.946339][ T7531] RAX: ffffffffffffffda RBX: 00007f471d6976c0 RCX: 00007f471ebfd04e
[  211.946389][ T7531] RDX: 000000000000000f RSI: 00007f471d6970a0 RDI: 0000000000000004
[  211.946444][ T7531] RBP: 00007f471d697090 R08: 0000000000000000 R09: 0000000000000000
[  211.946460][ T7531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  211.946472][ T7531] R13: 00007f471eeb6038 R14: 00007f471eeb5fa0 R15: 00007ffec26493e8
[  211.946497][ T7531]  </TASK>
[  212.155267][ T7540] EXT4-fs error (device loop1): ext4_init_orphan_info:583: comm syz.1.1039: inode #0: comm syz.1.1039: iget: illegal inode #
[  212.187475][ T7540] loop1: lost filesystem error report for type 5 error -117
[  212.191278][ T7540] EXT4-fs (loop1): get orphan inode failed
[  212.207575][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  212.214038][    C0] EXT4-fs (loop1): initial error at time 1775076060: ext4_init_orphan_info:583
[  212.223070][    C0] EXT4-fs (loop1): last error at time 1775076060: ext4_init_orphan_info:583
[  212.274556][ T7540] EXT4-fs (loop1): mount failed
[  212.314399][ T7550] loop3: detected capacity change from 0 to 512
[  212.367431][ T7550] ext4 filesystem being mounted at /232/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  212.545032][ T7548] loop2: detected capacity change from 0 to 512
[  212.553952][ T7553] lo speed is unknown, defaulting to 1000
[  212.644552][ T7548] ext4 filesystem being mounted at /224/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  212.657268][ T7548] EXT4-fs error (device loop2): ext4_find_dest_de:2050: inode #2: block 3: comm syz.2.1041: bad entry in directory: inode out of bounds - offset=0, inode=4294377480, rec_len=2048, size=2048 fake=1
[  212.975987][ T7553] ip6_vti0 speed is unknown, defaulting to 1000
[  213.562558][ T7553] lo speed is unknown, defaulting to 1000
[  214.048327][ T7582] lo speed is unknown, defaulting to 1000
[  214.054488][ T7582] ip6_vti0 speed is unknown, defaulting to 1000
[  214.098431][ T7587] FAULT_INJECTION: forcing a failure.
[  214.098431][ T7587] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  214.134996][ T7587] CPU: 1 UID: 0 PID: 7587 Comm: syz.3.1051 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  214.135068][ T7587] Tainted: [W]=WARN
[  214.135077][ T7587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  214.135092][ T7587] Call Trace:
[  214.135101][ T7587]  <TASK>
[  214.135109][ T7587]  __dump_stack+0x1d/0x30
[  214.135136][ T7587]  dump_stack_lvl+0x95/0xd0
[  214.135159][ T7587]  dump_stack+0x15/0x1b
[  214.135232][ T7587]  should_fail_ex+0x263/0x280
[  214.135294][ T7587]  should_fail+0xb/0x20
[  214.135317][ T7587]  should_fail_usercopy+0x1a/0x20
[  214.135346][ T7587]  _copy_to_user+0x20/0xa0
[  214.135422][ T7587]  simple_read_from_buffer+0xb5/0x130
[  214.135511][ T7587]  proc_fail_nth_read+0x10e/0x150
[  214.135543][ T7587]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  214.135630][ T7587]  vfs_read+0x1ab/0x7f0
[  214.135647][ T7587]  ? __rcu_read_unlock+0x4e/0x70
[  214.135668][ T7587]  ? __fget_files+0x184/0x1c0
[  214.135761][ T7587]  ? mutex_lock+0x57/0x90
[  214.135840][ T7587]  ksys_read+0xdc/0x1a0
[  214.135878][ T7587]  __x64_sys_read+0x40/0x50
[  214.135901][ T7587]  x64_sys_call+0x2886/0x3020
[  214.135945][ T7587]  do_syscall_64+0x12c/0x370
[  214.135971][ T7587]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  214.135999][ T7587] RIP: 0033:0x7f471ebfd04e
[  214.136059][ T7587] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  214.136077][ T7587] RSP: 002b:00007f471d675fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  214.136096][ T7587] RAX: ffffffffffffffda RBX: 00007f471d6766c0 RCX: 00007f471ebfd04e
[  214.136110][ T7587] RDX: 000000000000000f RSI: 00007f471d6760a0 RDI: 0000000000000004
[  214.136122][ T7587] RBP: 00007f471d676090 R08: 0000000000000000 R09: 0000000000000000
[  214.136134][ T7587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  214.136154][ T7587] R13: 00007f471eeb6128 R14: 00007f471eeb6090 R15: 00007ffec26493e8
[  214.136178][ T7587]  </TASK>
[  214.544039][ T7609] loop1: detected capacity change from 0 to 1024
[  214.551360][ T7609] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  214.659474][ T7611] loop3: detected capacity change from 0 to 512
[  214.684234][ T7582] lo speed is unknown, defaulting to 1000
[  214.813587][ T7620] lo speed is unknown, defaulting to 1000
[  214.819818][ T7620] ip6_vti0 speed is unknown, defaulting to 1000
[  214.859529][ T7620] lo speed is unknown, defaulting to 1000
[  214.891847][ T7611] ext4 filesystem being mounted at /238/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  214.974869][ T7626] loop0: detected capacity change from 0 to 8192
[  215.014868][ T7626] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  215.097908][ T7632] loop2: detected capacity change from 0 to 512
[  215.156864][ T7635] netlink: 'syz.1.1066': attribute type 1 has an invalid length.
[  215.191881][ T7642] FAULT_INJECTION: forcing a failure.
[  215.191881][ T7642] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  215.209055][ T7642] CPU: 0 UID: 0 PID: 7642 Comm: syz.3.1070 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  215.209086][ T7642] Tainted: [W]=WARN
[  215.209092][ T7642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  215.209107][ T7642] Call Trace:
[  215.209114][ T7642]  <TASK>
[  215.209124][ T7642]  __dump_stack+0x1d/0x30
[  215.209233][ T7642]  dump_stack_lvl+0x95/0xd0
[  215.209257][ T7642]  dump_stack+0x15/0x1b
[  215.209305][ T7642]  should_fail_ex+0x263/0x280
[  215.209424][ T7642]  should_fail+0xb/0x20
[  215.209456][ T7642]  should_fail_usercopy+0x1a/0x20
[  215.209494][ T7642]  _copy_to_user+0x20/0xa0
[  215.209534][ T7642]  simple_read_from_buffer+0xb5/0x130
[  215.209638][ T7642]  proc_fail_nth_read+0x10e/0x150
[  215.209673][ T7642]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  215.209787][ T7642]  vfs_read+0x1ab/0x7f0
[  215.209803][ T7642]  ? __rcu_read_unlock+0x4e/0x70
[  215.209829][ T7642]  ? __fget_files+0x184/0x1c0
[  215.209885][ T7642]  ? fput+0x8f/0xc0
[  215.209910][ T7642]  ? mutex_lock+0x57/0x90
[  215.209988][ T7642]  ksys_read+0xdc/0x1a0
[  215.210008][ T7642]  __x64_sys_read+0x40/0x50
[  215.210030][ T7642]  x64_sys_call+0x2886/0x3020
[  215.210140][ T7642]  do_syscall_64+0x12c/0x370
[  215.210169][ T7642]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  215.210243][ T7642] RIP: 0033:0x7f471ebfd04e
[  215.210259][ T7642] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  215.210283][ T7642] RSP: 002b:00007f471d696fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  215.210307][ T7642] RAX: ffffffffffffffda RBX: 00007f471d6976c0 RCX: 00007f471ebfd04e
[  215.210424][ T7642] RDX: 000000000000000f RSI: 00007f471d6970a0 RDI: 0000000000000004
[  215.210441][ T7642] RBP: 00007f471d697090 R08: 0000000000000000 R09: 0000000000000000
[  215.210454][ T7642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  215.210468][ T7642] R13: 00007f471eeb6038 R14: 00007f471eeb5fa0 R15: 00007ffec26493e8
[  215.210503][ T7642]  </TASK>
[  215.428808][ T7649] loop3: detected capacity change from 0 to 128
[  215.437018][ T7649] ext4 filesystem being mounted at /242/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  215.529354][ T7645] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  215.539708][ T7645] bond1: (slave vxcan3): Setting fail_over_mac to active for active-backup mode
[  215.562556][ T7645] bond1: (slave vxcan3): making interface the new active one
[  215.570068][ T7654] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  215.613619][ T7645] bond1: (slave vxcan3): Enslaving as an active interface with an up link
[  217.245633][ T7665] set_capacity_and_notify: 1 callbacks suppressed
[  217.245652][ T7665] loop4: detected capacity change from 0 to 1024
[  217.334279][ T7663] lo speed is unknown, defaulting to 1000
[  217.340469][ T7663] ip6_vti0 speed is unknown, defaulting to 1000
[  217.388564][ T7663] lo speed is unknown, defaulting to 1000
[  217.452721][   T28] kauditd_printk_skb: 4 callbacks suppressed
[  217.452735][   T28] audit: type=1400 audit(1775076065.381:1365): avc:  denied  { mount } for  pid=7672 comm="syz.3.1078" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  217.533242][ T7667] loop1: detected capacity change from 0 to 128
[  217.556821][   T28] audit: type=1400 audit(1775076065.471:1366): avc:  denied  { sqpoll } for  pid=7672 comm="syz.3.1078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  217.589227][ T7681] netlink: 'syz.4.1079': attribute type 39 has an invalid length.
[  217.608369][ T7667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  217.631572][ T7667] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  217.781934][ T7685] program syz.0.1080 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  217.796789][ T7681] hsr_slave_1 (unregistering): left promiscuous mode
[  217.841773][ T7678] loop4: detected capacity change from 0 to 4096
[  217.895532][ T7692] netlink: 'syz.2.1083': attribute type 3 has an invalid length.
[  217.905170][   T28] audit: type=1400 audit(1775076065.831:1367): avc:  denied  { bind } for  pid=7691 comm="syz.2.1083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  217.940346][   T28] audit: type=1400 audit(1775076065.831:1368): avc:  denied  { listen } for  pid=7691 comm="syz.2.1083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  217.960748][   T28] audit: type=1400 audit(1775076065.831:1369): avc:  denied  { connect } for  pid=7691 comm="syz.2.1083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  217.980788][   T28] audit: type=1400 audit(1775076065.831:1370): avc:  denied  { write } for  pid=7691 comm="syz.2.1083" path="socket:[19515]" dev="sockfs" ino=19515 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  218.007949][ T7701] netlink: 'syz.0.1085': attribute type 4 has an invalid length.
[  218.068642][ T7708] loop2: detected capacity change from 0 to 1024
[  218.078824][ T7708] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  218.104603][   T28] audit: type=1400 audit(1775076066.001:1371): avc:  denied  { watch } for  pid=7709 comm="syz.3.1088" path="/247/file0" dev="tmpfs" ino=1391 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[  218.187794][ T7714] netlink: 'syz.0.1085': attribute type 4 has an invalid length.
[  218.217742][ T3377] lo speed is unknown, defaulting to 1000
[  218.223607][ T3377] syz0: Port: 1 Link ACTIVE
[  218.307257][ T7718] loop1: detected capacity change from 0 to 128
[  218.402058][ T7718] ext4 filesystem being mounted at /227/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  219.405813][ T7730] loop4: detected capacity change from 0 to 128
[  219.418409][ T7730] ext4 filesystem being mounted at /193/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  222.010335][   T28] audit: type=1400 audit(1775076069.941:1372): avc:  denied  { create } for  pid=7746 comm="syz.2.1097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  222.031759][ T7747] loop2: detected capacity change from 0 to 128
[  222.047381][   T28] audit: type=1400 audit(1775076069.961:1373): avc:  denied  { ioctl } for  pid=7746 comm="syz.2.1097" path="socket:[20557]" dev="sockfs" ino=20557 ioctlcmd=0x89eb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  222.195339][ T7752] lo speed is unknown, defaulting to 1000
[  222.202602][ T7752] ip6_vti0 speed is unknown, defaulting to 1000
[  222.313998][ T7752] lo speed is unknown, defaulting to 1000
[  222.556619][ T7754] loop4: detected capacity change from 0 to 512
[  222.605039][ T7754] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  222.618810][ T7754] EXT4-fs (loop4): orphan file too big: 4294967295
[  222.619033][ T7757] netlink: 'syz.3.1098': attribute type 4 has an invalid length.
[  222.625529][ T7754] EXT4-fs (loop4): mount failed
[  222.654008][ T7747] FAT-fs (loop2): FAT read failed (blocknr 128)
[  222.692714][ T7756] ucma_write: process 726 (syz.2.1097) changed security contexts after opening file descriptor, this is not allowed.
[  222.706508][ T7757] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1098'.
[  222.719824][   T28] audit: type=1400 audit(1775076070.621:1374): avc:  denied  { read write } for  pid=7746 comm="syz.2.1097" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  222.788991][ T7757] .`: renamed from bond0
[  222.794318][   T28] audit: type=1400 audit(1775076070.621:1375): avc:  denied  { open } for  pid=7746 comm="syz.2.1097" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  222.926216][ T7766] loop0: detected capacity change from 0 to 256
[  222.939627][ T7766] vfat: Unknown parameter 'utfflush'
[  223.311254][ T7757] bridge_slave_0: left promiscuous mode
[  223.317783][   T28] audit: type=1400 audit(1775076071.241:1376): avc:  denied  { write } for  pid=7755 comm="syz.3.1098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  223.340738][ T7757] bridge0: port 1(bridge_slave_0) entered disabled state
[  223.352851][ T7764] hub 8-0:1.0: USB hub found
[  223.363315][ T7757] bridge_slave_1: left promiscuous mode
[  223.372260][ T7764] hub 8-0:1.0: 8 ports detected
[  223.382434][ T7757] bridge0: port 2(bridge_slave_1) entered disabled state
[  223.397841][ T7757] .`: (slave bond_slave_0): Releasing backup interface
[  223.406602][ T7757] .`: (slave bond_slave_1): Releasing backup interface
[  223.425296][ T7757] team0: Port device team_slave_0 removed
[  223.434753][ T7757] team0: Port device team_slave_1 removed
[  223.441434][ T7757] batman_adv: batadv0: Removing interface: batadv_slave_0
[  223.450158][ T7757] batman_adv: batadv0: Removing interface: batadv_slave_1
[  223.458089][ T7757] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  223.542140][ T7775] loop4: detected capacity change from 0 to 128
[  223.559514][ T7775] ext4 filesystem being mounted at /195/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  223.752666][ T7747] lo speed is unknown, defaulting to 1000
[  224.021744][ T7747] ip6_vti0 speed is unknown, defaulting to 1000
[  224.065811][ T7773] lo speed is unknown, defaulting to 1000
[  224.196923][ T7773] ip6_vti0 speed is unknown, defaulting to 1000
[  224.360170][ T7747] lo speed is unknown, defaulting to 1000
[  224.629872][ T7778] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1101'.
[  224.639183][ T7773] lo speed is unknown, defaulting to 1000
[  224.889161][ T7787] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1104'.
[  225.394197][ T3319] EXT4-fs unmount: 31 callbacks suppressed
[  225.394217][ T3319] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  225.435044][ T7791] netlink: 'syz.1.1106': attribute type 1 has an invalid length.
[  225.477484][ T7797] loop2: detected capacity change from 0 to 512
[  225.486260][ T7791] bond2: entered promiscuous mode
[  225.498743][ T7791] 8021q: adding VLAN 0 to HW filter on device bond2
[  225.518305][ T7797] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 18)!
[  225.533455][ T7797] EXT4-fs (loop2): group descriptors corrupted!
[  225.562734][   T28] audit: type=1400 audit(1775076073.491:1377): avc:  denied  { write } for  pid=7790 comm="syz.1.1106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  225.583207][ T7791] rdma_rxe: rxe_newlink: failed to add lo
[  225.799234][ T7804] loop4: detected capacity change from 0 to 256
[  225.812722][ T7804] vfat: Unknown parameter 'utfflush'
[  226.644379][ T7814] loop2: detected capacity change from 0 to 512
[  226.664424][ T7814] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  226.678160][ T7814] EXT4-fs (loop2): orphan file too big: 4294967295
[  226.684855][ T7814] EXT4-fs (loop2): mount failed
[  226.878160][   T28] audit: type=1400 audit(1775076074.811:1378): avc:  denied  { shutdown } for  pid=7820 comm="syz.1.1116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  227.119012][ T7829] loop1: detected capacity change from 0 to 8192
[  227.167601][ T7829] vfat: Unknown parameter '00000000000000000000015'
[  227.314607][ T7836] loop4: detected capacity change from 0 to 512
[  227.321447][ T7836] vfat: Unknown parameter '01777777777777777777777'
[  227.371958][ T7836] Invalid option length (63573) for dns_resolver key
[  227.428040][ T7838] loop4: detected capacity change from 0 to 128
[  227.443881][ T7838] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  227.456416][ T7838] ext4 filesystem being mounted at /201/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  227.644153][ T7827] ==================================================================
[  227.652330][ T7827] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping
[  227.660191][ T7827] 
[  227.662538][ T7827] write to 0xffffea0004804d18 of 8 bytes by task 7829 on cpu 0:
[  227.670200][ T7827]  __filemap_remove_folio+0x201/0x310
[  227.675618][ T7827]  filemap_remove_folio+0x6d/0x1d0
[  227.680826][ T7827]  truncate_inode_folio+0x42/0x50
[  227.686009][ T7827]  shmem_undo_range+0x26d/0xb10
[  227.690901][ T7827]  shmem_fallocate+0x881/0x920
[  227.695703][ T7827]  vfs_fallocate+0x3b6/0x450
[  227.700325][ T7827]  __x64_sys_fallocate+0x7a/0xd0
[  227.705331][ T7827]  x64_sys_call+0x298e/0x3020
[  227.710049][ T7827]  do_syscall_64+0x12c/0x370
[  227.714756][ T7827]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  227.720681][ T7827] 
[  227.723027][ T7827] read to 0xffffea0004804d18 of 8 bytes by task 7827 on cpu 1:
[  227.730695][ T7827]  folio_mapping+0xa1/0xe0
[  227.735169][ T7827]  evict_folios+0x2b79/0x35c0
[  227.739862][ T7827]  try_to_shrink_lruvec+0x81b/0xbf0
[  227.745085][ T7827]  shrink_lruvec+0x255/0x1c60
[  227.749791][ T7827]  shrink_node+0x67a/0x2130
[  227.754320][ T7827]  do_try_to_free_pages+0x408/0xc80
[  227.759551][ T7827]  try_to_free_mem_cgroup_pages+0x1f5/0x470
[  227.765483][ T7827]  try_charge_memcg+0x37e/0xa10
[  227.770368][ T7827]  obj_cgroup_charge_pages+0x23/0xc0
[  227.775684][ T7827]  __memcg_kmem_charge_page+0x9e/0x170
[  227.781180][ T7827]  __alloc_frozen_pages_noprof+0x18a/0x360
[  227.787025][ T7827]  alloc_pages_mpol+0xb3/0x260
[  227.791867][ T7827]  alloc_pages_noprof+0x8f/0x140
[  227.796855][ T7827]  __vmalloc_node_range_noprof+0xa46/0x12b0
[  227.802969][ T7827]  __kvmalloc_node_noprof+0x3d4/0x650
[  227.808397][ T7827]  ip_set_alloc+0x24/0x30
[  227.812761][ T7827]  hash_netiface_create+0x282/0x740
[  227.817994][ T7827]  ip_set_create+0x3cf/0x970
[  227.822696][ T7827]  nfnetlink_rcv_msg+0x509/0x5d0
[  227.827669][ T7827]  netlink_rcv_skb+0x123/0x220
[  227.832616][ T7827]  nfnetlink_rcv+0x167/0x1720
[  227.837329][ T7827]  netlink_unicast+0x5c0/0x690
[  227.842170][ T7827]  netlink_sendmsg+0x5c8/0x6f0
[  227.846961][ T7827]  ____sys_sendmsg+0x563/0x5b0
[  227.851845][ T7827]  ___sys_sendmsg+0x195/0x1e0
[  227.856547][ T7827]  __x64_sys_sendmsg+0xd4/0x160
[  227.861417][ T7827]  x64_sys_call+0x194c/0x3020
[  227.866128][ T7827]  do_syscall_64+0x12c/0x370
[  227.870751][ T7827]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  227.876670][ T7827] 
[  227.879006][ T7827] value changed: 0xffff88810492d648 -> 0x0000000000000000
[  227.886142][ T7827] 
[  227.888487][ T7827] Reported by Kernel Concurrency Sanitizer on:
[  227.894657][ T7827] CPU: 1 UID: 0 PID: 7827 Comm: syz.1.1116 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  227.905526][ T7827] Tainted: [W]=WARN
[  227.909342][ T7827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  227.919508][ T7827] ==================================================================
[  228.754732][ T7827] syz.1.1116 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000
[  228.769854][ T7827] CPU: 0 UID: 0 PID: 7827 Comm: syz.1.1116 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  228.769895][ T7827] Tainted: [W]=WARN
[  228.769905][ T7827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  228.769973][ T7827] Call Trace:
[  228.769980][ T7827]  <TASK>
[  228.769988][ T7827]  __dump_stack+0x1d/0x30
[  228.770015][ T7827]  dump_stack_lvl+0x95/0xd0
[  228.770086][ T7827]  dump_stack+0x15/0x1b
[  228.770157][ T7827]  dump_header+0x80/0x240
[  228.770180][ T7827]  oom_kill_process+0x295/0x350
[  228.770245][ T7827]  out_of_memory+0x97d/0xb80
[  228.770267][ T7827]  try_charge_memcg+0x62e/0xa10
[  228.770422][ T7827]  obj_cgroup_charge_pages+0x23/0xc0
[  228.770449][ T7827]  __memcg_kmem_charge_page+0x9e/0x170
[  228.770502][ T7827]  __alloc_frozen_pages_noprof+0x18a/0x360
[  228.770544][ T7827]  alloc_pages_mpol+0xb3/0x260
[  228.770597][ T7827]  alloc_pages_noprof+0x8f/0x140
[  228.770632][ T7827]  __vmalloc_node_range_noprof+0xa46/0x12b0
[  228.770738][ T7827]  __kvmalloc_node_noprof+0x3d4/0x650
[  228.770775][ T7827]  ? ip_set_alloc+0x24/0x30
[  228.770903][ T7827]  ? ip_set_alloc+0x24/0x30
[  228.770932][ T7827]  ? __kmalloc_cache_noprof+0x18a/0x410
[  228.771004][ T7827]  ip_set_alloc+0x24/0x30
[  228.771033][ T7827]  hash_netiface_create+0x282/0x740
[  228.771090][ T7827]  ? __pfx_hash_netiface_create+0x10/0x10
[  228.771121][ T7827]  ip_set_create+0x3cf/0x970
[  228.771148][ T7827]  ? __nla_parse+0x40/0x60
[  228.771245][ T7827]  nfnetlink_rcv_msg+0x509/0x5d0
[  228.771310][ T7827]  netlink_rcv_skb+0x123/0x220
[  228.771353][ T7827]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  228.771395][ T7827]  nfnetlink_rcv+0x167/0x1720
[  228.771463][ T7827]  ? __kfree_skb+0x109/0x150
[  228.771493][ T7827]  ? nlmon_xmit+0x4f/0x60
[  228.771520][ T7827]  ? consume_skb+0x4b/0x160
[  228.771551][ T7827]  ? nlmon_xmit+0x4f/0x60
[  228.771620][ T7827]  ? dev_hard_start_xmit+0x3b9/0x3f0
[  228.771666][ T7827]  ? __dev_queue_xmit+0x136c/0x1f20
[  228.771775][ T7827]  ? __dev_queue_xmit+0x148/0x1f20
[  228.771820][ T7827]  ? ref_tracker_free+0x37d/0x3e0
[  228.771860][ T7827]  ? __netlink_deliver_tap+0x4dc/0x500
[  228.771959][ T7827]  netlink_unicast+0x5c0/0x690
[  228.772065][ T7827]  netlink_sendmsg+0x5c8/0x6f0
[  228.772234][ T7827]  ? __pfx_netlink_sendmsg+0x10/0x10
[  228.772256][ T7827]  ____sys_sendmsg+0x563/0x5b0
[  228.772306][ T7827]  ___sys_sendmsg+0x195/0x1e0
[  228.772371][ T7827]  __x64_sys_sendmsg+0xd4/0x160
[  228.772400][ T7827]  x64_sys_call+0x194c/0x3020
[  228.772435][ T7827]  do_syscall_64+0x12c/0x370
[  228.772599][ T7827]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  228.772628][ T7827] RIP: 0033:0x7f287c2ac819
[  228.772649][ T7827] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  228.772673][ T7827] RSP: 002b:00007f287ace6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  228.772693][ T7827] RAX: ffffffffffffffda RBX: 00007f287c526090 RCX: 00007f287c2ac819
[  228.772778][ T7827] RDX: 0000000000000880 RSI: 0000200000000040 RDI: 000000000000000c
[  228.772795][ T7827] RBP: 00007f287c342c91 R08: 0000000000000000 R09: 0000000000000000
[  228.772812][ T7827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  228.772826][ T7827] R13: 00007f287c526128 R14: 00007f287c526090 R15: 00007ffe1a6181e8
[  228.772845][ T7827]  </TASK>
[  228.772883][ T7827] memory: usage 307200kB, limit 307200kB, failcnt 1027
[  229.111109][ T7827] memory+swap: usage 310336kB, limit 9007199254740988kB, failcnt 0
[  229.119278][ T7827] kmem: usage 307028kB, limit 9007199254740988kB, failcnt 0
[  229.126782][ T7827] Memory cgroup stats for /syz1:
[  229.127287][ T7827] cache 0
[  229.135521][ T7827] rss 53248
[  229.138777][ T7827] shmem 0
[  229.141852][ T7827] mapped_file 0
[  229.145371][ T7827] dirty 0
[  229.148560][ T7827] writeback 0
[  229.152132][ T7827] workingset_refault_anon 29
[  229.156933][ T7827] workingset_refault_file 0
[  229.161872][ T7827] swap 3280896
[  229.165326][ T7827] swapcached 3457024
[  229.169624][ T7827] pgpgin 227424
[  229.173165][ T7827] pgpgout 227398
[  229.176778][ T7827] pgfault 237025
[  229.180768][ T7827] pgmajfault 13
[  229.184289][ T7827] inactive_anon 40960
[  229.188515][ T7827] active_anon 16384
[  229.192393][ T7827] inactive_file 0
[  229.196078][ T7827] active_file 0
[  229.199897][ T7827] unevictable 0
[  229.203432][ T7827] hierarchical_memory_limit 314572800
[  229.209890][ T7827] hierarchical_memsw_limit 9223372036854771712
[  229.216124][ T7827] total_cache 0
[  229.219762][ T7827] total_rss 53248
[  229.223532][ T7827] total_shmem 0
[  229.227197][ T7827] total_mapped_file 0
[  229.231445][ T7827] total_dirty 0
[  229.234960][ T7827] total_writeback 0
[  229.238990][ T7827] total_workingset_refault_anon 29
[  229.244181][ T7827] total_workingset_refault_file 0
[  229.249641][ T7827] total_swap 3280896
[  229.253593][ T7827] total_swapcached 3457024
[  229.258274][ T7827] total_pgpgin 227424
[  229.262330][ T7827] total_pgpgout 227398
[  229.266449][ T7827] total_pgfault 237025
[  229.270894][ T7827] total_pgmajfault 13
[  229.275114][ T7827] total_inactive_anon 40960
[  229.279819][ T7827] total_active_anon 16384
[  229.284253][ T7827] total_inactive_file 0
[  229.288911][ T7827] total_active_file 0
[  229.292983][ T7827] total_unevictable 0
[  229.297249][ T7827] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1116,pid=7820,uid=0
[  229.312345][ T7827] Memory cgroup out of memory: Killed process 7820 (syz.1.1116) total-vm:94296kB, anon-rss:1280kB, file-rss:22276kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000
[  229.375002][ T7827] syz.1.1116 (7827) used greatest stack depth: 6384 bytes left
[  229.754940][ T3319] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.