last executing test programs:

15.182714647s ago: executing program 4 (id=197):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
r0 = syz_create_resource$binfmt(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
shmget(0x1, 0x2000, 0x200, &(0x7f0000ffc000/0x2000)=nil)
r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
write$binfmt_script(r2, &(0x7f0000000400)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', [{}, {0x20, '#! '}]}, 0x102)
close(r2)
execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0)

15.023554391s ago: executing program 4 (id=201):
socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
prctl$PR_SET_MM_MAP(0x3c, 0xe, 0x0, 0x0) (async, rerun: 32)
openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0) (async)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x0}, 0x68) (async)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002340)="d8000000180081054e81f782db4cb904021d0800fe007c05e8fe55a10a0015000900142603600e12080005007f370401a8001600200004000400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) (async)
pipe(0x0) (async)
r1 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff) (async)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x2)
fchdir(r2) (async)
open(&(0x7f0000000000)='.\x00', 0x0, 0x244) (async, rerun: 32)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0xfffffffe, 0x0, 0x0, 0x800000, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 32)
perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x7, 0x1, 0x0, 0x0, 0x0, 0x7, 0x897a2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x7fffffffffffffff, 0x8b2b}, 0x0, 0x1224, 0xffffffff, 0x3, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) (rerun: 64)
sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000010c0)={0x94, r5, 0x1, 0x0, 0x0, {0xa}, [@TIPC_NLA_LINK={0x80, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_NAME={0x6a, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x94}}, 0x0) (async)
r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x200, 0xa401)
r7 = fcntl$dupfd(r6, 0x406, r6) (async, rerun: 64)
setns(0xc9, 0x0) (rerun: 64)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000000200)=ANY=[@ANYRES16=r7, @ANYRES32=r6, @ANYRES16=r3, @ANYRESDEC=r8], &(0x7f00000002c0)=0xf5)
prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r9, 0x29, 0x41, &(0x7f0000000080)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000aa1f282e00000000000000000000000004000000d1a2d6e7"], &(0x7f0000000180)=0x2c) (async, rerun: 32)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (rerun: 32)
r10 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
connect$bt_l2cap(r10, 0x0, 0x0)
unshare(0x6000000)

14.687912352s ago: executing program 4 (id=209):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r0, 0x0, 0x0) (async)
ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='dvmrp1\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x7c}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48)

14.664916987s ago: executing program 4 (id=210):
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x4000, &(0x7f0000000000)={[{@errors_remount}, {@dioread_lock}, {@auto_da_alloc}, {@stripe={'stripe', 0x3d, 0xf0}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@bh}, {@noblock_validity}]}, 0x3, 0x453, &(0x7f0000000600)="$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")
setns(0xc9, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff)
syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r1)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="050b002200000000000024"], 0x14}}, 0x100000000000000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @c}})
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)

14.535986995s ago: executing program 4 (id=211):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0)
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001480)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x28}, 0x1, 0x300, 0x0, 0x4806}, 0x0)

14.342299776s ago: executing program 0 (id=212):
perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0xf1, 0x0, 0x90, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x8, 0x40}, 0x0, 0x4, 0xfffffffd, 0x1, 0x0, 0x40, 0x1, 0x0, 0x0, 0x0, 0x100}, 0x0, 0x1, 0xffffffffffffffff, 0x3)
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0)
dup3(r0, r1, 0x0)

14.305441264s ago: executing program 4 (id=214):
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, 0x0, 0x0)

14.233973028s ago: executing program 32 (id=214):
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, 0x0, 0x0)

14.206930395s ago: executing program 0 (id=216):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000c80)={[{@usrquota}, {@auto_da_alloc}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fd}}, {@resuid}, {@errors_remount}]}, 0x7, 0x605, &(0x7f00000001c0)="$eJzs3c9rHGUfAPDvzCZ5kzbvm/ZFxBbFgIcWpGlSi1Uv1nqwh4IFexDx0NAkNXT7gyYFWwum4EFBQcSrSC/+A96ld28iqDfPQhWpKKh0ZXZn281mN13T7E6b+XxgsvM8s7vP893Jk3memTw7AZTWZPYjjdgVcftkEjHRsm08Ghsn8+fd+vXqqWxJolZ77Zckkjyv+fwkf9yeJ0Yj4psjEf+vrC136fKVM7PVWsO7EfuXz17Yv3T5yr7Fs7On50/Pn5s58NzBQ9PPzxyc2ZQ4t+ePR4+9+vhH77317MK31X1JHI4Tw+/MRVscm2UyJuN2HmJr/lBEHMpWOnwuD5stEEKpVfLfx+GIeDQmolJPNUzE4oeFVg7oq1ologaUVKL9Q0k1+wHNsX1v4+ATfe6VDM7NlxoDoLXxDzXOjcRofWy07VbSMjJqnNvYsQnlZ2X8fXX3Z9kSq85D/HFn7wxtQjndrFyLiMc6xZ/U67ajHmkWf7qqHslKxHREjOT1e/k+6pC0rPfjPMx6Nhp/GhGH88cs/8gGy59sSw86fgDK6UbW/8kO5CtZ6u7xL+t7NPs/0aH/M97h2LURRR//uvf/msf70fo58rStH5b1WY53fsvh9owfPzj6SbfyW/t/2ZKV3+wLDsLNaxG72+J/Pws27/9k8Scd9n/2lJOHeyvjle9+PtptW9Hx165H7Ok4/rnbK83W1rk+uX9hsTo/3fjZsYyvvn7zi27lFx1/tv+3dYm/Zf+n7a/LPpMLPZbx5fHrZ7ttG+8Y/0rL6DT9aSRpjDdH8te8Pbu8fHEmYiQ51shIW/IPrF+X5nOa75HFv/epzu1/1e//tdXvM9b8k9mDC6+fudVt20b2f8vF5Nu1HuvQTRb/3L33/5r2n+V93GMZv79x6Ylu29aLf+x+AgMAAAAAAIASSuvXYJN06s56mk5NNebLPhLb0ur5peWnF85fOjcXsbf+/5DDafNK90QjnWTpmfz/YZvpA23pZyJiZ0R8Whmrp6dOna/OFR08AAAAAAAAAAAAAAAAAAAAPCC25/P/m/ep/q3SmP8PlEQ/bzAHPNi0fyivevtfc4snoAwc/6G8tH8oL+0fykv7h/LS/qG8tH8oL+0fykv7BwAAAIAtaeeTN35IImLlhbH6khnJt5kRBFvbcNEVAApTKboCQGHuXPrX2YfS6an//2f+5YD9rw5QgKRTZr1zUFu/8d/o+EoAAAAAAAAAAAAAoA/27Oo+/9/cYNjaTPuD8rqP+f++OgAecr76H8rLGB+41yz+0W4bzP8HAAAAAAAAAAAAgIEZry9JOpXPBR6PNJ2aivhvROyI4WRhsTo/HRH/i4jvK8P/ydIzRVcaAAAAAAAAAAAAAAAAAAAAtpily1fOzFar8xdbV/5ak7O1V5p3QR1AWS/Gv3xVJIP/WMYiovCd0reVoZacJGIl2/MPRMUuLkVLzlDBu6DgP0wAAAAAAAAAAAAAAAAAAFBCLXOPO9v9+YBrBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACDd/f+//1bKTpGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODh9E8AAAD//yTFRqU=")
quotactl_fd$Q_GETNEXTQUOTA(0xffffffffffffffff, 0xffffffff80000900, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000280)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0xf41dd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_bp={0x0}, 0x204, 0xf1fc, 0xa, 0x7, 0xa, 0x6, 0x2002, 0x0, 0x0, 0x0, 0x8000000000200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
msgsnd(0x0, &(0x7f00000002c0)={0x2}, 0x8, 0x800)
msgrcv(0x0, 0x0, 0x0, 0x2, 0x1800)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff}, 0x2}}, 0x20)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="500100001a000100000000000200000002001c1f0000c808ffff"], 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040080)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r1, 0x7}}, 0x48)
r3 = accept$unix(r2, &(0x7f0000000800), &(0x7f0000000880)=0x6e)
accept4$unix(r3, &(0x7f00000008c0), &(0x7f0000000940)=0x6e, 0x1800)

13.999895178s ago: executing program 0 (id=221):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x0, &(0x7f0000000c80)={[{@dioread_nolock}, {@resuid}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x4cf, &(0x7f0000001200)="$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")
ioctl$USBDEVFS_CLAIMINTERFACE(0xffffffffffffffff, 0x8004550f, &(0x7f0000000040)=0x7)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8804, 0xff, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$rtc(0xffffffffffffff9c, 0x0, 0x140, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x500}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004000)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, 0x0, 0x0)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0xb7, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, 0x0)
sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, 0x0, 0x20008000)
sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0)
sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x8, &(0x7f0000000600), 0x5, 0x51e, &(0x7f0000000640)="$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")
r2 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
write$P9_RREADLINK(r2, 0x0, 0x0)

13.464890952s ago: executing program 0 (id=225):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000009400000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000680)=0xffffffffffffffff, 0x4)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000006c0)={{0x1, 0x1, 0x18, <r2=>r1, {0x4}}, './sys\x00'})
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, r2}, 0x94)
r4 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r3}, 0x8)
close(r4)
llistxattr(&(0x7f00000000c0)='./proc\x00', &(0x7f0000000500)=""/251, 0xfb)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0)
ioctl$BTRFS_IOC_DEV_REPLACE(r5, 0xca289435, &(0x7f0000000e40)={0x1, 0xeee3, @status={[0x8000, 0xcd, 0x3, 0x6, 0x44, 0x9]}, [0x4, 0x0, 0x5d98, 0xd9, 0x8, 0x7fffffff, 0x5, 0x80, 0x0, 0xb, 0x0, 0x0, 0x3, 0x2, 0x2, 0x6, 0x4, 0x8, 0x5, 0x400, 0x9, 0xffffffffffffff80, 0x8, 0x7, 0x3, 0x4, 0x1, 0x3, 0x8, 0x2, 0x1, 0x5, 0x1000, 0x3, 0xcea8, 0x6de, 0x3, 0x9, 0x8, 0x2, 0x9, 0x3, 0x2, 0x2, 0x9, 0x5, 0x6, 0x2, 0x1, 0x9, 0x0, 0x5, 0x80, 0x3, 0x9, 0x8, 0x1, 0xc, 0x6, 0x1, 0x1, 0x100000000, 0x6, 0x400]})
mq_unlink(&(0x7f0000000040)='\x7f+\x04\x94NjN|\xe6\xa5\xe32\xde\xbb\x1a\xff\xa8\xdeJ\xd4gy\nZeW\x83\xf80\xfa\xb6\x83sP\xb7\xd7\x887\f\xb81\xa8\x92\ne\xfd\x89\x88J\x9b\xedpq\xf2\xb4\x84\xc8\x03\xf7\x14sawo\x8b\xb3J\xaa\x850.W\xd3\xe2\xf5\xf1\xf8\xc2~V\\\xe9\xa8[\x9f\x8d*\xe1\xa3\xe5*\xd1\xf2\xb8\'R\xaaW\x03V>-\x01\xc9\x1d75\xba\x03r\x99\x82\x13\v\xc9Z\xe3\xfaL\x05\xf8\x8b\x10\x06\xc8\v1DW\xc7n\x1f\xe1\xb4\xd0\x11\xf3\x14\xbe\xf5\xc0\b\x1f\xb8\v\xdc5d5\x95\x99N^\x8f\xd2\xf4b~c\x0f\xbe,\f\xa9\x06\x92R\xe1w\"\xd9\xa0^|\x90\v\xdfe\x03\xcf\n\xcb>\xd0\x04D-\x8d\x7fs\xdcq\xe5\xc7\xbeqR\x8e\xb2o\xf8\x15\xbd\xdcK\x8d\b\b}\x1c\x9e\x95f\xf1\xc1\xff\xe3\xac\xfe0\x1a\xcd\xfc\b}\x96p\xb8C\xa9\xda\xfc\xf9\x84\xff5\xdcB\b\xe5\x03<\xc4nc\xc9\xe6\xaa\r\x8b\xca\x1f\x82\xa0\xdd`t\xbe\x91\xea:\xec\xdd\xed[\x9d\xa1\xff\x8f\x85b\xa3\xbb\xa6\xc4\xbb\x92\xc0\xa3\xe1\xed@\xd6a\x05\xb9\x13O\x84\x0ea,j\xce\xaew\xcf\xa4E\xe4a\xf3w\xe7\xf5dG\x8d\x15I\xfc\xdak\xb0c!\x1a\t$\x8a\xbe\x14\x0eK\xa2\x94,:\xa6\xd6\xc017uZ\xba\x0f+\xc4X,~\x8fW\x84\xe0T\xfdF\x05Q\f\xf0\t\x9a\xa4\x1e`\x9d\bv\xc3T\xe8`\t\xa0\x93]J\xe0j2\x93I\xad\x1d\x00\xb1\xe5\x17\xb8\xc3%P\x89I=\x89d\x17\fM\xba\a\xea\x04\xe3hQS\xe0\xd0\xeb\xfa\xaa\x93z!\xf6\xd0y\xb2')
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000001, 0x3, @perf_bp={0x0, 0x2}, 0x100050, 0x4, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0)
mount$bpf(0x200000000000, &(0x7f00000002c0)='./proc\x00', 0x0, 0x989046, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000044)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
setxattr$incfs_size(&(0x7f0000000440)='./proc\x00', &(0x7f0000000480), &(0x7f0000000600), 0x8, 0x1)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r6, &(0x7f0000000000)='3', 0x4e)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
mlockall(0x7)

13.081402664s ago: executing program 0 (id=227):
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
syz_read_part_table(0x1071, &(0x7f0000001580)="$eJzsz7Eux3AUBeDT9l/Vpelq6rNIJAbWjiYD8QBW7EZPYbR6A2axe4puPyn1Chi+L7nJSc5Nbm74U33dHiYPWedkSDJ2/U/XZjd8pyl5fjnNUtbu7KKUUradg3Ge7ruv2CTZHTfd9Va9viWprs73Uq2Hjt5T3X5c1nfNU+ok+zdZ5sdffxgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/qHPAAAA///knhXU")
r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r1, 0x5, 0x0, 0x0, r0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x2)
fchdir(r2)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x79)
open(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
rmdir(&(0x7f0000000280)='./file0/file0\x00')
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40010)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40)
socket$netlink(0x10, 0x3, 0x0)
fchdir(0xffffffffffffffff)
openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./sys\x00', 0x8800, 0x85)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, 0xffffffffffffffff, 0x1000)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8040002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x4000, 0x0, 0x6, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0xd, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94)
setpgid(r3, r3)
stat(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000300))

12.638799317s ago: executing program 0 (id=229):
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x2, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$kcm(0x2, 0x200000000000001, 0x106)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
openat$cgroup_devices(r1, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0x7, 0x6, 0xc, 0x46, 0x0, 0x6, 0x8c020, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x318, 0x0, @perf_bp={&(0x7f00000001c0), 0x2}, 0x111022, 0x6, 0x9, 0x4, 0x9, 0x36, 0x0, 0x0, 0xff, 0x0, 0xfe1c}, 0x0, 0x7, r0, 0xa)
socket$kcm(0x2, 0x1, 0x84)
perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x4, 0x0, 0xf1, 0x0, 0x0, 0x9, 0x40655, 0x7, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xa5b6, 0x1, @perf_bp={0x0, 0x7}, 0x1004b0, 0x200, 0x4000006, 0x1, 0x6, 0x2, 0xfffd, 0x0, 0xffff}, 0x0, 0x3, r2, 0x3)
syz_clone(0x3100000, 0x0, 0x0, 0x0, 0x0, 0x0)
close(0xffffffffffffffff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_clone(0x80181080, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r3, 0x0, 0xb, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007100000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r5, 0x0, 0x0}, 0x10)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xf4ffffffffffffff, 0x20)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x3c}, 0x28)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x8, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x2, 0xfff2}, {0xc, 0x3}, {0x17, 0xffe0}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffe01}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7f}]}, 0x34}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000329bd7000fedbdf25140000ab39001000000000000800120004000000050019000000000000000827000000000500190001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x24000084)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2}}, 0x80, 0x0}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe33)

12.569356342s ago: executing program 33 (id=229):
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x2, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$kcm(0x2, 0x200000000000001, 0x106)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
openat$cgroup_devices(r1, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0x7, 0x6, 0xc, 0x46, 0x0, 0x6, 0x8c020, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x318, 0x0, @perf_bp={&(0x7f00000001c0), 0x2}, 0x111022, 0x6, 0x9, 0x4, 0x9, 0x36, 0x0, 0x0, 0xff, 0x0, 0xfe1c}, 0x0, 0x7, r0, 0xa)
socket$kcm(0x2, 0x1, 0x84)
perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x4, 0x0, 0xf1, 0x0, 0x0, 0x9, 0x40655, 0x7, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xa5b6, 0x1, @perf_bp={0x0, 0x7}, 0x1004b0, 0x200, 0x4000006, 0x1, 0x6, 0x2, 0xfffd, 0x0, 0xffff}, 0x0, 0x3, r2, 0x3)
syz_clone(0x3100000, 0x0, 0x0, 0x0, 0x0, 0x0)
close(0xffffffffffffffff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_clone(0x80181080, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r3, 0x0, 0xb, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007100000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r5, 0x0, 0x0}, 0x10)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xf4ffffffffffffff, 0x20)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x3c}, 0x28)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x8, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x2, 0xfff2}, {0xc, 0x3}, {0x17, 0xffe0}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffe01}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7f}]}, 0x34}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000329bd7000fedbdf25140000ab39001000000000000800120004000000050019000000000000000827000000000500190001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x24000084)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2}}, 0x80, 0x0}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe33)

5.619756267s ago: executing program 3 (id=297):
accept4$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000280)=0x10, 0x80800)
socket$netlink(0x10, 0x3, 0x0)
r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x5}, 0x0, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x2, 0x8, 0x0, 0x1}, 0x50)
socket$inet_tcp(0x2, 0x1, 0x0)
unshare(0x22020600)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={0x2adc0, 0x1c1, 0x6}, 0x18)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200))
r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0)
write$binfmt_register(r2, &(0x7f0000000100)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x46d0, 0x3a, '\xe2\xbf\xd9\xafk\xd3~a3\xd0\x94', 0x3a, 'u', 0x3a, './file0', 0x3a, [0x4f, 0x4f]}, 0x35)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r1}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x8000, r3, 0x0, 0xf2ffffffffffffff}, 0x38)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r0, 0x1, 0x0)
fchdir(r4)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00', r5}, 0x18)
socket$inet6(0xa, 0x3, 0x3c)
bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x3}, 0x1a)
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e20, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}}, 0x0, 0x0, 0x3f, 0x0, "fe46aed66e092545b147388da8c6a29eb4aca763325452f0c65b2e13310931c3af7903a42cb8203f21fa5db7f921211d106d81fb9de2b7dc438aa5f44c69b60b514269f877ffc4d9fb86729251a61b9e"}, 0xd8)
syz_mount_image$ext4(&(0x7f00000005c0)='ext3\x00', &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000080)={[{@min_batch_time={'min_batch_time', 0x3d, 0xff}}, {@jqfmt_vfsv0}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}, {@noload}, {@barrier_val={'barrier', 0x3d, 0x98}}, {@noblock_validity}, {@resgid}, {@inlinecrypt}, {@errors_continue}]}, 0xfa, 0x491, &(0x7f0000000f00)="$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")
r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r7, &(0x7f0000000380)='./bus\x00')

5.287194167s ago: executing program 3 (id=305):
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x0, '\x00', [{0xe0, 0x4, 0x9, 0x5, 0x8000000000000000, 0x9}, {0x10001, 0x400, 0x12, 0x2, 0xf, 0x100000000}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
r0 = socket$nl_audit(0x10, 0x3, 0x9)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x49762000)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f00000002c0)={0x0, 0x1, 0x8000})
ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x2eb}]}, 0x34}, 0x1, 0x0, 0x0, 0xc0}, 0x4800)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000440)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x70, r1, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xfffffff9, 0x20}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x21}, @NL80211_ATTR_PMKID={0x14, 0x55, "cb3790fc36cf5564f948f440ab65420d"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "b0de6fccbf9581f5fc729530a50b65e3"}]}, 0x70}, 0x1, 0x0, 0x0, 0x880}, 0x44)
sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x7c, r1, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x7}, @NL80211_ATTR_REG_RULES={0x5c, 0x22, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1d17}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x40}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x40}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}]}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000001}, 0x8080)
r3 = dup(r0)
ioctl$LOOP_SET_FD(r3, 0x4c00, r0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000780)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0)
r5 = perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0xb, 0xfe, 0x7, 0x2, 0x0, 0x6, 0x6140c, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0xfffffffffffffffc, 0xff}, 0x1810, 0x8, 0xfe, 0x8, 0x4, 0xba8d, 0xfff9, 0x0, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x0)
ioctl$XFS_IOC_INUMBERS(r0, 0x80405880, &(0x7f0000000840)={{0x1, 0x1, 0x9, 0x0, 0xec}, [{0x1, 0x4e49a536, 0x33, 0x40}, {0x101, 0x2, 0x2, 0x6}, {0x3fc0000000000000, 0x7, 0x1, 0x1}, {0x1, 0xfffffffffffffff8, 0x6, 0x1}]})
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000900)={<r6=>0x0, 0x1}, &(0x7f0000000940)=0x8)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0x1, 0x7989}, &(0x7f00000009c0)=0xc)
r7 = socket$kcm(0x29, 0x5, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000ac0)={'syztnl0\x00', &(0x7f0000000a40)={'syztnl2\x00', <r8=>0x0, 0x2f, 0xc, 0xf, 0x0, 0x3, @local, @mcast1, 0x40, 0x10, 0x3, 0x2}})
sendmsg$nl_route(r4, &(0x7f0000000c40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b00)=@bridge_setlink={0xfc, 0x13, 0x100, 0x70bd2c, 0x25dfdbfd, {0x7, 0x0, 0x0, r8, 0x4000, 0xc3}, [@IFLA_LINKMODE={0x5, 0x11, 0x1c}, @IFLA_NET_NS_FD={0x8}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x87}, @IFLA_AF_SPEC={0x50, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0x1b, 0x0, 0x0, 0xfffffff7}, {0x8, 0x1b, 0x0, 0x0, 0x100}]}}, @AF_MPLS={0x4}, @AF_BRIDGE={0x4}, @AF_BRIDGE={0x4}, @AF_BRIDGE={0x4}, @AF_INET={0x20, 0x2, 0x0, 0x1, {0x1c, 0x1, 0x0, 0x1, [{0x8, 0x6, 0x0, 0x0, 0x9}, {0x8, 0x19, 0x0, 0x0, 0x6}, {0x8, 0x21, 0x0, 0x0, 0x7f}]}}, @AF_BRIDGE={0x4}]}, @IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x34, 0x5, 0x0, 0x1, [@IFLA_BRPORT_COST={0x8, 0x3, 0xffff}, @IFLA_BRPORT_MCAST_TO_UCAST={0x5}, @IFLA_BRPORT_PROTECT={0x5, 0x6, 0x1}, @IFLA_BRPORT_MODE={0x5, 0x4, 0x1}, @IFLA_BRPORT_UNICAST_FLOOD={0x5, 0x9, 0x1}, @IFLA_BRPORT_NEIGH_SUPPRESS={0x5}]}}}, @IFLA_VF_PORTS={0x18, 0x18, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0xc5}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}]}]}, @IFLA_PHYS_SWITCH_ID={0xd, 0x24, "001c618c8423876497"}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4004004}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000c80)={'wlan1\x00'})
bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000cc0), 0x4)
getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000d00), &(0x7f0000000d40)=0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
bind$inet6(r3, &(0x7f0000000d80)={0xa, 0x4e21, 0x7, @remote, 0x7}, 0x1c)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_CQM(r9, &(0x7f0000000f80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e00)={0x13c, r1, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CQM={0x30, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x9, 0x5, 0xfd, 0x3, 0x1f7d, 0x400]}]}, @NL80211_ATTR_CQM={0x5c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x7c78efe9, 0xfffffff9, 0x1, 0xe, 0x38f0131f]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1e6}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x53}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x53}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x5}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x10}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x2c6}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5df}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xc}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x80000001}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x8]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x96c}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x6}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xf6b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x371}]}]}, 0x13c}}, 0x20004000)
r10 = getpid()
perf_event_open(&(0x7f0000000fc0)={0x5, 0x80, 0x4, 0x80, 0xa, 0x80, 0x0, 0x6d, 0x800, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x1, 0x10}, 0x2040, 0x9, 0x2, 0x7, 0x0, 0x7ae00306, 0x61, 0x0, 0x3, 0x0, 0x6}, r10, 0x7, r5, 0x8)

4.975953974s ago: executing program 3 (id=312):
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffd28, 0x0, 0x0, 0x0, 0x4}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002400)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048800}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b00)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xffff, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c0}, 0x44840)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r8)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0)

3.634588118s ago: executing program 1 (id=332):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)
ioctl(r0, 0x541b, 0x0)

3.634020978s ago: executing program 1 (id=333):
accept4$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000280)=0x10, 0x80800)
socket$netlink(0x10, 0x3, 0x0)
r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x5}, 0x0, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x2, 0x8, 0x0, 0x1}, 0x50)
socket$inet_tcp(0x2, 0x1, 0x0)
unshare(0x22020600)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={0x2adc0, 0x1c1, 0x6}, 0x18)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200))
r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0)
write$binfmt_register(r2, &(0x7f0000000100)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x46d0, 0x3a, '\xe2\xbf\xd9\xafk\xd3~a3\xd0\x94', 0x3a, 'u', 0x3a, './file0', 0x3a, [0x4f, 0x4f]}, 0x35)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r1}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x8000, r3, 0x0, 0xf2ffffffffffffff}, 0x38)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r0, 0x1, 0x0)
fchdir(r4)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00', r5}, 0x18)
socket$inet6(0xa, 0x3, 0x3c)
bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x3}, 0x1a)
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e20, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}}, 0x0, 0x0, 0x3f, 0x0, "fe46aed66e092545b147388da8c6a29eb4aca763325452f0c65b2e13310931c3af7903a42cb8203f21fa5db7f921211d106d81fb9de2b7dc438aa5f44c69b60b514269f877ffc4d9fb86729251a61b9e"}, 0xd8)
syz_mount_image$ext4(&(0x7f00000005c0)='ext3\x00', &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000080)={[{@min_batch_time={'min_batch_time', 0x3d, 0xff}}, {@jqfmt_vfsv0}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}, {@noload}, {@barrier_val={'barrier', 0x3d, 0x98}}, {@noblock_validity}, {@resgid}, {@inlinecrypt}, {@errors_continue}]}, 0xfa, 0x491, &(0x7f0000000f00)="$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")
r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r7, &(0x7f0000000380)='./bus\x00')

3.173332147s ago: executing program 2 (id=339):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000100001000000000200000a20000000000a010400000000000000000200000a0900010073797a300000000040000000030a01040000eeffffffffff0100000a0900010073797a30000000030073797a300000000014000480080001400000000308000240000000004c000000060a010400000000000000000200000a0900010073797a30000000000900020073797a300000000036bc24200004801c0001800a00010071756575650000000c0002800600014000060000140000171100010000001000000000000000000a0000000000"], 0xd4}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r1, 0x0, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000280)=0x1, 0x4)
sendto$inet(r2, &(0x7f0000000300)='\x00'/2000, 0x7d0, 0x4000000, &(0x7f0000000400)={0x2, 0x4d2, @remote}, 0x10)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r3, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x0, @local}, 0x2, 0x0, 0x1}}, 0x26)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES16=r4, @ANYBLOB="010027bd60000400000005000000080009000200000008000c00a80a000008000b00000000000600010007000000050012"], 0x4c}}, 0x0)
close(r4)

3.132811325s ago: executing program 1 (id=340):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffd28, 0x0, 0x0, 0x0, 0x4}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r2, 0x107, 0x8, &(0x7f0000000000), 0x4)
recvmsg(r2, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=""/51, 0x33}, 0x0)
r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1)
r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r5, @ANYBLOB, @ANYRES32], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x2, 0x80, 0xe, 0x79, 0x4, 0x6, 0x0, 0x2, 0x10, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x101, 0x2c1ea5b7}, 0x102061, 0xfffffffffffffffe, 0x3, 0x1, 0xd, 0x0, 0x701, 0x0, 0x4})
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r6)
sendmsg$kcm(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000680)="d6762df283a3837fc88f91030c8d0b5ecfc9fe4589e029d2c032a071266734d18dd6bddd150b275eaeae3a0a1f2de405b8abdd38ea28b4f76376bd38fcaf38d6516c835594cd988f01d35d8b4a3aec9e9f4b1dd078316a4627c706f31daea8687872f4113b3a27ffa2bcf1165f8e441b3e6a2c581ed203993c73972930ca992765fa24c769aede9039aff60124f2a9a02bbc827ea3591397f0ad5e839d65c8923e51c8d4a39bed10df45e3680c0adb1f1cb18c060f2469cd3cfc758e303def00d5bead120620b265c79c1b8b27b42898078c6505", 0xd4}, {&(0x7f0000000780)="52ca5ed8dd241a5376e1790a113a1679c99f380a864cb540876a9d11b559e85383099d20e95f94b4d924f0154cf68b1468a3d513665189f013127c0407520c2945605ac8d2f3c8e6001b81fff9d55e93148ef00c3b", 0x55}], 0x2}, 0x4000000)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x81, 0x0)
r8 = socket(0x28, 0x5, 0x0)
setsockopt$packet_tx_ring(r8, 0x107, 0x5, 0x0, 0x0)
pwritev(r7, &(0x7f00000004c0)=[{0x0}, {&(0x7f00000003c0)="70bf", 0x2}], 0x2, 0xff, 0x3)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x5)
openat$cgroup_type(r4, &(0x7f0000000180), 0x2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0)

3.070575798s ago: executing program 2 (id=341):
r0 = open(&(0x7f0000000180)='./file1\x00', 0x4a8800, 0x22)
r1 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ipvlan1\x00', <r2=>0x0})
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x4, @perf_config_ext={0x5, 0x4c}, 0x11c0ad, 0x20000, 0x0, 0x4, 0x6, 0x8001, 0x7ffe}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
r3 = syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0)
capset(&(0x7f00000002c0)={0x20080522, r3}, 0x0)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x24040050)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0xac, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x98, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0xf, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xac}}, 0x0)
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00')
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$lock(r6, 0x410, &(0x7f0000000200)={0x1, 0x3, 0x1000000000000001, 0x9b})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa00000000000079a008000000000018070000", @ANYRES32, @ANYBLOB="0000000000000000bf030000000000008500000047000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00', 0xe, 0x0, 0x0, 0x41000}, 0x94)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$inet6_icmp(0xa, 0x2, 0x3a)
getsockopt$inet6_buf(r8, 0x29, 0x3d, &(0x7f00000003c0), &(0x7f0000000400))
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="b37c0100231a0500280012800b0001006272696467650000180002800c002300010001000300000005002a00"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)
fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8, 0x2)
r9 = open(&(0x7f0000000280)='.\x00', 0x0, 0x100)
fallocate(r0, 0x2, 0xe291, 0xc4fd)
renameat(r9, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f00000002c0)='./file1\x00')

2.813382623s ago: executing program 5 (id=343):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
mbind(&(0x7f00005b4000/0x4000)=nil, 0x4000, 0x8000, 0x0, 0x9, 0x3) (fail_nth: 4)

2.694190738s ago: executing program 2 (id=344):
r0 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r1=>0x0, <r2=>0x0}, &(0x7f0000000200)=0xc)
keyctl$chown(0x4, 0x0, r1, r2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
setreuid(0xffffffffffffffff, 0xee01)
r3 = creat(0x0, 0xc7)
socket$inet6(0xa, 0x2, 0x8000000003c)
openat(r3, &(0x7f0000000180)='./file0\x00', 0x10000, 0x79)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000340)={&(0x7f000014b000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/171, 0xab, 0x0, &(0x7f0000000280)=""/147, 0x93}, &(0x7f0000000380)=0x40)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1011})
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/net/syzkaller0/gro_flush_timeout\x00', 0x1, 0x0)
write$tcp_congestion(r5, &(0x7f0000000140)='vegas\x00', 0x6)
close(r3)
socket$tipc(0x1e, 0x5, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x4440, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SET_MM(0x23, 0x9, &(0x7f00003fd000/0x2000)=nil)
mount(0x0, 0x0, 0x0, 0x4000, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x2)
futex(0x0, 0x6, 0x80, 0x0, 0x0, 0xffffffec)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
syz_clone(0x6988b500, 0x0, 0x0, 0x0, 0x0, 0x0)
mknod$loop(&(0x7f0000003600)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1000, 0x0)

2.559959567s ago: executing program 5 (id=345):
r0 = gettid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xffffffffffffffff)
fcntl$setsig(r1, 0xa, 0x12)
ppoll(&(0x7f0000000100)=[{r2}], 0x1, 0x0, 0x0, 0x0)
dup2(r1, r2)
fcntl$setown(r2, 0x8, r0)
tkill(r0, 0x13)

2.345265382s ago: executing program 5 (id=347):
perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket(0x400000000010, 0x3, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0x0, 0x11, 0x148, 0xf8, 0x0, 0x1d0, 0x2a8, 0x2a8, 0x1d0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x5, 0x9, 0x7fffffe, 0x6], 0x4}, {0xffffffffffffffff, [0xf00]}}}}, {{@ip={@multicast1, @private=0xa010102, 0xffffffff, 0xffffff00, 'veth1_to_batadv\x00', 'macsec0\x00', {0xff}, {}, 0x6, 0x2, 0x29}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2008042, &(0x7f0000000280)={[{@journal_dev}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@nomblk_io_submit}, {@noload}, {@user_xattr}, {@mblk_io_submit}, {@noinit_itable}, {@auto_da_alloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}, {@nobh}]}, 0xfa, 0x49e, &(0x7f0000001300)="$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")
syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140))
symlinkat(&(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x101341, 0xaf)
symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

2.109403572s ago: executing program 3 (id=349):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x6, 0x100, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10a4c8, 0x41224, 0x2, 0x9, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200000, &(0x7f0000000100)={[{@resgid}, {@errors_remount}, {@usrjquota}, {@sysvgroups}, {@usrquota}]}, 0x1, 0x50d, &(0x7f0000001bc0)="$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")
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socket$phonet_pipe(0x23, 0x5, 0x2)
syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000140)='./file2\x00', 0x1000000, &(0x7f00000000c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000300000040b804020240000102030109023b000101056003090400060107010204098c49362f288a76a0"], 0x0)
munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000)

1.912030174s ago: executing program 5 (id=350):
syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=<r0=>0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pidfd_send_signal(r0, 0x21, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r1, &(0x7f0000000000)='3', 0x4e)
syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0)
waitid$P_PIDFD(0x3, r0, 0x0, 0x40000004, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000f00)={0x18, r3, 0x301, 0x0, 0x25dfdbfe, {0x34}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x4, 0xa8, @random}]}, 0x18}}, 0x0)
ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000040))

1.910189384s ago: executing program 2 (id=360):
mkdirat(0xffffffffffffffff, 0x0, 0x181)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x100900, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11)
socket$inet6_udp(0xa, 0x2, 0x0)
shutdown(r0, 0x1)
r1 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006a0005062cbd7000fcdbdf2581ffffff00000000080005"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x880)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a0001ff80000000000000000a0080"], 0x38}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x200000, &(0x7f0000000200)={[{@block_validity}, {@orlov}, {@nombcache}, {@inode_readahead_blks}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@grpjquota}]}, 0x3, 0x57b, &(0x7f0000000800)="$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")

1.799212668s ago: executing program 6 (id=352):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x6, 0xffffffff, 0x0, 0x8, 0x7, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff}, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r1, 0x7}}, 0x48) (fail_nth: 6)

1.776774173s ago: executing program 5 (id=353):
accept4$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000280)=0x10, 0x80800)
socket$netlink(0x10, 0x3, 0x0)
r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x5}, 0x0, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x2, 0x8, 0x0, 0x1}, 0x50)
socket$inet_tcp(0x2, 0x1, 0x0)
unshare(0x22020600)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={0x2adc0, 0x1c1, 0x6}, 0x18)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200))
r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0)
write$binfmt_register(r2, &(0x7f0000000100)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x46d0, 0x3a, '\xe2\xbf\xd9\xafk\xd3~a3\xd0\x94', 0x3a, 'u', 0x3a, './file0', 0x3a, [0x4f, 0x4f]}, 0x35)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r1}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x8000, r3, 0x0, 0xf2ffffffffffffff}, 0x38)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r0, 0x1, 0x0)
fchdir(r4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
fcntl$notify(0xffffffffffffffff, 0x402, 0x4)
socket$inet6(0xa, 0x3, 0x3c)
bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x3}, 0x1a)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e20, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}}, 0x0, 0x0, 0x3f, 0x0, "fe46aed66e092545b147388da8c6a29eb4aca763325452f0c65b2e13310931c3af7903a42cb8203f21fa5db7f921211d106d81fb9de2b7dc438aa5f44c69b60b514269f877ffc4d9fb86729251a61b9e"}, 0xd8)
syz_mount_image$ext4(&(0x7f00000005c0)='ext3\x00', &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000080)={[{@min_batch_time={'min_batch_time', 0x3d, 0xff}}, {@jqfmt_vfsv0}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}, {@noload}, {@barrier_val={'barrier', 0x3d, 0x98}}, {@noblock_validity}, {@resgid}, {@inlinecrypt}, {@errors_continue}]}, 0xfa, 0x491, &(0x7f0000000f00)="$eJzs3M9vFFUcAPDvTLulgNiK+AMEqaKR+KOl5YccvGg04aCJiR4wnmpbSKVQQ2sihGj1gEdD4p149S8wnvRi1IsmXvVuSIjhAuJlzezM0NLutlu6ZQv7+SS7fW/mte99Z+btvJk33QA61kD2lkQ8EBF/RkRfnr29wED+48a1C2P/XrswlkS1+s4/Sa3c9WsXxsqi5e9tzTPVapHfVKfei+9HjE5NTZwt8kOzpz8amjl3/qXJ06MnJ05OnBk5evTQwT09R0YOtyTOLK7ruz6d3r3z2HuX3ho7fumDX5I08rhjURytMpBv3bqebXVlbbZtQTrpzt57i9ze3+bX1DsSaKeuiMh2V6XW//uiKzbfWtcXb3zR1sYB66parVaX+VSeqwL3sSTa3QKgPcoTfXb9W77u0tBjQ7j6an4BlMV9o3jla7ojzRN7K4uub1tpICKOz928nL1ine5DAAAs9EM2/nmx3vgvjUfzRE/29mAxh9IfEQ9FxPaIeDgidkTEIxG1so9FxOOrrH/xDMnS8U965Y6Da0I2/nulmNu6ffyXlkX6u4rctlr8leTE5NTEgWKb7I/KphOTycTwMnX8+PofXzVaVxv/lYPxuZuXs/rLsWDRjivdi27QjY/Ojq4l5oWufh6xq7te/EltXiCKeb2dEbHrDuuYfL674bqF49/jdeNfRuM/27TqNxHP5ft/LhbFX0oazk8Ov3xk5PBQb0xNHBgqj4qlfv394tuN6l9T/C2Q7f8tdY//W/H3J70RM+fOn6rN186svo6Lf33Z8Jpm5fhvO/6PbSuO/57k3dqCnmLFJ6Ozs2eHI3qSN5cuH5n/a2W+LJ/Fv39f/f6/Pea3xBMRsTsi9kTEk9lFYdH2pyLi6YjYt0z8P7/2zIerj7/+XfnKMvXciSz+8ZX2fyzc/6tPdJ366fuV4++NiEb7/1Attb9Y0sznX7MNXMu2AwAAgHtF/gx8kg7Op5PBwfwZ/h2xJZ2anpl94cT0x2fG82fl+6OSlne6+hbcDx0u7g2X+ZFF+YPFfeOvuzbX8oNj01Pj7Q4eOtzWJf0/TbP+n/m7q92tA9ZdC+bRgHuU/g+dS/+HzpSs2P9b/cgRsJE4/0Pnqtf/P2tYevC7dW0McFc5/0PnaqL/z+U/Go8KgHuT8z90Lv0fOlLD/41P1/Qv/y1N7Pk2b+tyZf4rvkJlo7T5/k9EuiGacf8nupv+MotGicrSvlzty/tUtmRT3d9q68cSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAy/wfAAD//3gk5XA=")
r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r6, &(0x7f0000000380)='./bus\x00')

1.657204138s ago: executing program 1 (id=354):
r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf10dd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xdea, 0x7}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000002b400000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x2000c0, 0x0)
r3 = add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b05003034313230300603553d030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657930820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, 0xffffffffffffffff)
keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000040)={r3}, &(0x7f0000000080)=ANY=[@ANYBLOB='enc=pkcs1'], 0x0, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000009, 0x110, r2, 0xde0be000)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
utimes(0x0, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x7, 0x0, 0x9, 0xff, 0x0, 0x0, 0x0, 0x3}})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x53, &(0x7f0000000000)={0x0, 0x0}, 0x10)
syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
r5 = gettid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f0000000180)=0xffffffffffffffff)
fcntl$setsig(r6, 0xa, 0x12)
ppoll(&(0x7f0000000100)=[{r7}], 0x1, 0x0, 0x0, 0x0)
dup2(r6, r7)
fcntl$setown(r7, 0x8, r5)
tkill(r5, 0x13)

1.570495407s ago: executing program 6 (id=355):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$perf(0x0, 0x2000, 0x3, 0x11, 0xffffffffffffffff, 0x0)
futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000200, &(0x7f0000000000)={[{@nodiscard}], [{@uid_eq={'uid', 0x3d, 0xee00}}]}, 0x7, 0x4ee, &(0x7f0000002080)="$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")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000001e80), 0xffffffffffffffff)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x7}, 0x12804, 0x0, 0x2, 0x6, 0x400, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3ffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x1810800, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0)
ioctl(r4, 0xc138fd0d, &(0x7f0000000480)="04000000000000000000010038010000380139f48a320ec44d7fd5a899")
sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002040)={&(0x7f0000001fc0)={0x34, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_FAMILY={0x5, 0xd, 0x26}, @GTPA_VERSION={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80)
sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x48000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x80, r2, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_MS_ADDR6={0x14, 0xc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_PEER_ADDR6={0x14, 0xb, @private0}, @GTPA_I_TEI={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}]}, 0x80}, 0x1, 0x0, 0x0, 0x41}, 0x4000091)
mount$tmpfs(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='size=P'])
bpf$PROG_LOAD(0x5, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000046, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff7}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x9, 0xfffffffd, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x10b501)
ioctl$USBDEVFS_ALLOW_SUSPEND(r6, 0x5522)
ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f00000001c0)={0x40, 0x15, 0x7f, 0x5, 0x0, 0x10000, 0x0})
r7 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10)

1.482447865s ago: executing program 1 (id=356):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
socket(0x2, 0x80805, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = fspick(0xffffffffffffff9c, &(0x7f0000000480)='./proc\x00', 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
pwritev(r1, &(0x7f0000000740)=[{&(0x7f0000000200)='3', 0x1}], 0x1, 0x800, 0x0)
fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f00000004c0)='redirect_dir=on', &(0x7f0000000500)='./file0\x00', r1)
io_uring_setup(0x6bd, &(0x7f00000000c0)={0x0, 0x78cf, 0x400, 0x1, 0x5e})
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x13f)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
getsockopt$llc_int(r2, 0x10c, 0x4, &(0x7f0000000500), &(0x7f0000000080)=0x4)
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3)
r3 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r3, 0x0, 0x27, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x7}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
preadv(r4, &(0x7f0000000240)=[{&(0x7f0000000d40)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x100000f, 0x401d031, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_usb_connect(0x4, 0x24, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'})
socket$netlink(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d32, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x5, 0x5}, 0x2129, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)

1.340453905s ago: executing program 3 (id=357):
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
syz_read_part_table(0x1071, &(0x7f0000001580)="$eJzsz7Eux3AUBeDT9l/Vpelq6rNIJAbWjiYD8QBW7EZPYbR6A2axe4puPyn1Chi+L7nJSc5Nbm74U33dHiYPWedkSDJ2/U/XZjd8pyl5fjnNUtbu7KKUUradg3Ge7ruv2CTZHTfd9Va9viWprs73Uq2Hjt5T3X5c1nfNU+ok+zdZ5sdffxgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/qHPAAAA///knhXU")
r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x2)
fchdir(r2)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x79)
open(0x0, 0x0, 0x0)
rmdir(&(0x7f0000000280)='./file0/file0\x00')
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40010)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40)
socket$netlink(0x10, 0x3, 0x0)
fchdir(0xffffffffffffffff)
openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./sys\x00', 0x8800, 0x85)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, 0xffffffffffffffff, 0x1000)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8040002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x4000, 0x0, 0x6, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0xd, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94)
setpgid(r3, r3)
stat(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000300))

1.329837347s ago: executing program 5 (id=358):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = io_uring_setup(0x168, &(0x7f0000000180)={0x0, 0xd9eb, 0x40, 0x8d79, 0x400015f})
io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f0000000580), 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE2(r1, 0xe, 0x0, 0x0)
pipe(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
io_setup(0x3ff, &(0x7f0000000500)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}])
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r1, @ANYRES32=r2, @ANYRES32=r3, @ANYRES16, @ANYRES32=r3, @ANYRESHEX=r0], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x20000080)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'syz_tun\x00'})
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r6)
ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=<r8=>0x0)
sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x4008054)
write$nci(r5, &(0x7f00000004c0)=ANY=[@ANYBLOB="7103"], 0xb6)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x71e741d6314b4d29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r10, 0x0, 0x0, 0x0, 0x0}, 0x94)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r11, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000060a0b0400000000000000000200000064000480240001800b000100736f636b657400001400028008000240000000030800014000000002240001800b0001007470726f787900001400028008000140000000020800024000000003180001800d00010073796e70726f787900000000040002900900010073797a30000000000900020073797a32"], 0xb8}, 0x1, 0x0, 0x0, 0x991}, 0x40880)

1.295532865s ago: executing program 2 (id=359):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000c80)={[{@usrquota}, {@auto_da_alloc}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fd}}, {@resuid}, {@errors_remount}]}, 0x7, 0x605, &(0x7f00000001c0)="$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")
quotactl_fd$Q_GETNEXTQUOTA(0xffffffffffffffff, 0xffffffff80000900, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000280)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0xf41dd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_bp={0x0}, 0x204, 0xf1fc, 0xa, 0x7, 0xa, 0x6, 0x2002, 0x0, 0x0, 0x0, 0x8000000000200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
msgsnd(0x0, &(0x7f00000002c0)={0x2}, 0x8, 0x800)
msgrcv(0x0, &(0x7f0000000000)={0x0, ""/41}, 0x31, 0x2, 0x1800)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="500100001a000100000000000200000002001c1f0000c808ffff"], 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040080)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, 0xffffffffffffffff, 0x7}}, 0x48)
r2 = accept$unix(r1, &(0x7f0000000800), &(0x7f0000000880)=0x6e)
accept4$unix(r2, &(0x7f00000008c0), &(0x7f0000000940)=0x6e, 0x1800)

1.13193917s ago: executing program 6 (id=361):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x0, &(0x7f0000000100)})
openat(0xffffffffffffff9c, 0x0, 0x8042, 0x81)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7, 0x12000)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x3, 0x11}, 0xc108, 0x1, 0xc, 0x6, 0x4, 0x4, 0xfff9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_GET_NAME(0x10, &(0x7f0000000380)=""/226)
ioctl$USBDEVFS_CLAIMINTERFACE(r2, 0x8004550f, &(0x7f0000000040)=0x6e9)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)

966.448475ms ago: executing program 2 (id=362):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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")
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x575, &(0x7f0000000680)="$eJzs3V1rHNUbAPBnNkmbvvz/TaEU9UICvbBSu2kSXyoIrZeixYLe1yXZhpJNt2Q3pYmFthf2RgQpgogF8QN472XxC/gpBC0UKUEvvInMZrbdJrvdZLu6W+f3g2nPmZnkmbNzzskzM7tsALk1mf5TiHgxIr5MIg61bBuNbOPk5n7rD6/PpUsSGxsf/Z5Ekq1r7p9k/x/IKi9ExE+fRZwobI9bW11bLFUq5eWsPlVfujJVW107eWmptFBeKF+emZ09/cbszNtvvdm3tr56/s9vPrz33unPj61//cP9w3eSOBsHs22t7XgGN1srkzGZvSZjcXbLjtN9CDZMkm47tOkDDN5INs7HIp0DDsVINuqB/74bEbEB5FRi/ENONfOA5rV9n66DnxsP3t28AGpt/xeNmyCjm/dGYrxxbbR/PXniyii93p3oQ/w0xo+/3b2TLtHlPsSNPsQDaLp5KyJOjY5un/+TbP7r3akd3PXbGiNvf39gkO6l+c9r7fK/wqP8J9rkPwfajN1edB//hft9CNNRmv+90zb/fTR1TYxktf81cr6x5OKlSvlURPw/Io7H2N603uvznNb8L13S+M1cMDuO+6N7n/yZ+VK91GO4bR7cinjpcf6bxLb5f7yR6249/+nrcX6HMY6W777caVv39rfqfwa88X3EK23P/+MnWvue/nxyqtEfppq9Yrs/bh/9uVP83bW//9Lzv//p7Z9IWp/X1nYf47vxv8qdtvXa//ckHzfKe7J110r1+vJ0xJ7kg+3rZx7/bLPe3D9t//FjT5//2vX/tE98ssP23z7SOQ0ahvM/v6vzv/vCL+9/+m2n+Ds7/683SsezNTuZ/zaDj3c9wGd57QAAAAAAAGDYFCLiYCSF4qNyoVAsbr6/40jsL1SqtfqJi9WVy/PR+KzsRIwVmk+6D7W8H2I6ez9ssz6zpT4bEYcj4quRfY16ca5amR904wEAAAAAAAAAAAAAAAAAAGBIHOjw+f/UryODPjrgH+crvyG/uo7/fnzTEzCU/P2H/DL+Ib+Mf8gv4x/yy/iH/DL+Ib+Mf8gv4x8AAAAAAAAAAAAAAAAAAAAAAAAAAAD66vy5c+mysf7w+lxan7+6urJYvXpyvlxbLC6tzBXnqstXigvV6kKlXJyrLnX7fZVq9cr0TKxcm6qXa/Wp2urahaXqyuX6hUtLpYXyhfLYv9IqAAAAAAAAAAAAAAAAAAAAeL7UVtcWS5VKeVmhY+FMDMVh9FxIup3lM1ln6CnE6OAbuNPC3hiKw3g+CgOemAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgxd8BAAD//8HLLzk=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
pwrite64(r0, &(0x7f0000000500)='~', 0x1, 0x4fed0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x6042, 0x101)
sendfile(r1, r0, 0x0, 0xe3aa6ea)
r2 = socket(0x2, 0x80805, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100fe02000000000000200000000c000600010000000100000024002d"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r5 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', <r6=>0x0})
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bc2b, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x12, 0xd}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xffffffffffffffcd}}, @qdisc_kind_options=@q_red={{}, {0x0, 0x2, [@TCA_RED_PARMS={0x0, 0x1, {0x6, 0x8000, 0x9, 0xbf, 0x1c, 0x1a, 0x4}}]}}, @TCA_RATE={0x0, 0x5, {0x10}}]}, 0x34}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0)

877.578554ms ago: executing program 3 (id=363):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000100001000000000200000a20000000000a010400000000000000000200000a0900010073797a300000000040000000030a01040000eeffffffffff0100000a0900010073797a30000000030073797a300000000014000480080001400000000308000240000000004c000000060a010400000000000000000200000a0900010073797a30000000000900020073797a300000000036bc24200004801c0001800a00010071756575650000000c0002800600014000060000140000171100010000001000000000000000000a0000000000"], 0xd4}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r1, 0x0, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000280)=0x1, 0x4)
sendto$inet(r2, &(0x7f0000000300)='\x00'/2000, 0x7d0, 0x4000000, &(0x7f0000000400)={0x2, 0x4d2, @remote}, 0x10)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r3, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x0, @local}, 0x2, 0x0, 0x1}}, 0x26)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES16=r4, @ANYBLOB="010027bd60000400000005000000080009000200000008000c00a80a000008000b00000000000600010007000000050012"], 0x4c}}, 0x0)
close(r4)

243.083238ms ago: executing program 6 (id=364):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0)
close(r0)
r1 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0xfffffffd, @empty}, 0x80, 0x0}, 0x20000001)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1)
mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x105008, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="3e0000003a000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a000180dc861d3e000000000000006ccdfb0a8259104247f3d8", 0x3e}], 0x1, 0x0, 0x0, 0x39c}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0000000001006da2ee050001000000000100140003"], 0x18}}, 0x0)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002)
io_submit(0x0, 0x0, &(0x7f0000000180))
r3 = socket(0xa, 0x3, 0xff)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe800000000000000000000000000002080004", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c00010000020101"], 0x60}}, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x10000002, @ipv4={'\x00', '\xff\xff', @empty}, 0x800100}, 0x1c)
getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x963, 0x1c00000000000000}, 0x110002, 0x0, 0x0, 0x5, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)

232.829691ms ago: executing program 6 (id=365):
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
syz_read_part_table(0x1071, &(0x7f0000001580)="$eJzsz7Eux3AUBeDT9l/Vpelq6rNIJAbWjiYD8QBW7EZPYbR6A2axe4puPyn1Chi+L7nJSc5Nbm74U33dHiYPWedkSDJ2/U/XZjd8pyl5fjnNUtbu7KKUUradg3Ge7ruv2CTZHTfd9Va9viWprs73Uq2Hjt5T3X5c1nfNU+ok+zdZ5sdffxgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/qHPAAAA///knhXU")
r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x2)
fchdir(r2)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x79)
open(0x0, 0x0, 0x0)
rmdir(&(0x7f0000000280)='./file0/file0\x00')
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40010)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40)
socket$netlink(0x10, 0x3, 0x0)
fchdir(0xffffffffffffffff)
openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./sys\x00', 0x8800, 0x85)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, 0xffffffffffffffff, 0x1000)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8040002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x4000, 0x0, 0x6, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0xd, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94)
setpgid(r3, r3)
stat(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000300))

19.149676ms ago: executing program 6 (id=366):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10)
sendto$inet(r0, &(0x7f0000000000), 0x0, 0x1, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x20)
write(r1, &(0x7f0000000000)="1a61", 0x2)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000000)=0x3, 0x4)

0s ago: executing program 1 (id=367):
capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb})
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x1) (async)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000c) (async)
fremovexattr(r0, &(0x7f0000000000)=@known='system.posix_acl_default\x00') (async)
socket(0x3, 0xd, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'wg0\x00'}) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00')
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x5, 0x188}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid() (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4800}, 0x4048046) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c000000130000012abd7000ffdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="180200000410000108002c000004000008000d000000ebff08aa048d84a44ff2001b00ff"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) (async)
r4 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYRES32=0x0], 0xb0}, 0x1, 0x0, 0x0, 0x4004000}, 0x2000c084)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r5=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
ioctl$USBDEVFS_CLAIMINTERFACE(0xffffffffffffffff, 0x4004550c, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x28) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x0) (async)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

kernel console output (not intermixed with test programs):

rror, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003)
[   34.375095][ T3698] FAT-fs (loop2): Filesystem has been set read-only
[   34.375754][ T3704] loop1: p2 size 14011136 extends beyond EOD, truncated
[   34.379844][ T3704] loop1: p3 start 150994944 is beyond EOD, truncated
[   34.379990][ T3704] loop1: p4 size 4160782088 extends beyond EOD, truncated
[   34.417324][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.479034][ T3709] netlink: 8 bytes leftover after parsing attributes in process `syz.0.58'.
[   34.803728][ T3719] loop1: detected capacity change from 0 to 512
[   34.861886][ T3719] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   34.891766][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.910950][ T3727] Zero length message leads to an empty skb
[   34.954755][   T29] kauditd_printk_skb: 413 callbacks suppressed
[   34.954771][   T29] audit: type=1326 audit(1790874779.277:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3739 comm="syz.1.69" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1444de159 code=0x7ffc0000
[   34.955044][   T29] audit: type=1326 audit(1790874779.277:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3739 comm="syz.1.69" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1444de159 code=0x7ffc0000
[   34.955120][   T29] audit: type=1326 audit(1790874779.277:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3739 comm="syz.1.69" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1444de159 code=0x7ffc0000
[   34.956270][   T29] audit: type=1326 audit(1790874779.277:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3739 comm="syz.1.69" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fc1444de159 code=0x7ffc0000
[   34.956302][   T29] audit: type=1326 audit(1790874779.277:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3739 comm="syz.1.69" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1444de159 code=0x7ffc0000
[   34.956402][   T29] audit: type=1326 audit(1790874779.277:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3739 comm="syz.1.69" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1444de159 code=0x7ffc0000
[   34.956509][   T29] audit: type=1326 audit(1790874779.277:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3739 comm="syz.1.69" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1444de159 code=0x7ffc0000
[   34.957159][   T29] audit: type=1326 audit(1790874779.277:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3739 comm="syz.1.69" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1444de159 code=0x7ffc0000
[   34.957333][   T29] audit: type=1326 audit(1790874779.277:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3739 comm="syz.1.69" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1444de159 code=0x7ffc0000
[   34.957440][   T29] audit: type=1326 audit(1790874779.277:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3739 comm="syz.1.69" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1444de159 code=0x7ffc0000
[   34.970981][ T3738] loop2: detected capacity change from 0 to 512
[   35.022011][ T3738] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   35.022027][ T3738] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   35.024470][ T3738] EXT4-fs (loop2): orphan cleanup on readonly fs
[   35.024487][ T3738] EXT4-fs error (device loop2): ext4_orphan_get:1429: comm syz.2.67: bad orphan inode 131072
[   35.024550][ T3738] loop2: lost filesystem error report for type 5 error -117
[   35.025117][ T3738] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[   35.072722][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.137103][ T3745] loop3: detected capacity change from 0 to 8192
[   35.185280][ T3745]  loop3: p1[EZD] p2 p3 p4
[   35.199897][ T3745] loop3: p2 size 14011136 extends beyond EOD, truncated
[   35.225966][ T3745] loop3: p3 start 150994944 is beyond EOD, truncated
[   35.225988][ T3745] loop3: p4 size 4160782088 extends beyond EOD, truncated
[   35.349937][ T3747] loop2: detected capacity change from 0 to 1024
[   35.381707][ T3747] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   35.381954][ T3747] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   35.418879][ T3762] loop0: detected capacity change from 0 to 2048
[   35.448253][ T3762] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   35.452063][ T3768] loop3: detected capacity change from 0 to 1024
[   35.472687][ T3761] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[   35.473336][ T3761] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[   35.473363][ T3761] EXT4-fs (loop0): This should not happen!! Data will be lost
[   35.473363][ T3761] 
[   35.473376][ T3761] EXT4-fs (loop0): Total free blocks count 0
[   35.473390][ T3761] EXT4-fs (loop0): Free/Dirty block details
[   35.473402][ T3761] EXT4-fs (loop0): free_blocks=4096
[   35.473448][ T3761] EXT4-fs (loop0): dirty_blocks=64
[   35.473461][ T3761] EXT4-fs (loop0): Block reservation details
[   35.473472][ T3761] EXT4-fs (loop0): i_reserved_data_blocks=4
[   35.506738][ T3762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   35.507040][ T3762] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   35.524410][ T3768] EXT4-fs: Ignoring removed bh option
[   35.524811][ T3768] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   35.526282][ T3768] EXT4-fs error (device loop3): ext4_map_blocks:832: inode #3: block 1: comm syz.3.75: lblock 1 mapped to illegal pblock 1 (length 1)
[   35.526345][ T3768] fserror_report: 2 callbacks suppressed
[   35.526355][ T3768] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   35.526461][ T3768] EXT4-fs (loop3): Remounting filesystem read-only
[   35.526521][ T3768] EXT4-fs (loop3): 1 orphan inode deleted
[   35.527061][ T3768] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   35.576990][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.610064][ T3772] netlink: 8 bytes leftover after parsing attributes in process `syz.3.76'.
[   35.683870][ T3779] loop3: detected capacity change from 0 to 512
[   35.684671][ T3779] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   35.687159][ T3779] EXT4-fs (loop3): 1 truncate cleaned up
[   35.687590][ T3779] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   35.708691][ T3779] mmap: syz.3.79 (3779) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   35.733344][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.963639][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   35.999912][ T3789] loop2: detected capacity change from 0 to 512
[   36.119084][ T3789] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   36.119150][ T3789] ext4 filesystem being mounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   36.198307][ T3799] FAULT_INJECTION: forcing a failure.
[   36.198307][ T3799] name failslab, interval 1, probability 0, space 0, times 0
[   36.198370][ T3799] CPU: 1 UID: 0 PID: 3799 Comm: syz.1.83 Not tainted syzkaller #0 PREEMPT(lazy) 
[   36.198400][ T3799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   36.198419][ T3799] Call Trace:
[   36.198427][ T3799]  <TASK>
[   36.198436][ T3799]  __dump_stack+0x1d/0x30
[   36.198498][ T3799]  dump_stack_lvl+0x95/0xd0
[   36.198520][ T3799]  dump_stack+0x15/0x1b
[   36.198544][ T3799]  should_fail_ex+0x262/0x280
[   36.198590][ T3799]  ? __kernfs_new_node+0x70/0x440
[   36.198612][ T3799]  should_failslab+0x8c/0xb0
[   36.198649][ T3799]  kmem_cache_alloc_noprof+0x7c/0x3f0
[   36.198686][ T3799]  ? __kernfs_new_node+0x70/0x440
[   36.198786][ T3799]  __kernfs_new_node+0x70/0x440
[   36.198805][ T3799]  ? rb_insert_color+0x6e/0x2a0
[   36.198823][ T3799]  ? __rcu_read_unlock+0x4e/0x70
[   36.198859][ T3799]  ? __rcu_read_unlock+0x4e/0x70
[   36.198962][ T3799]  ? kernfs_activate_one+0x10c/0x140
[   36.198997][ T3799]  ? __rcu_read_unlock+0x4e/0x70
[   36.199069][ T3799]  ? up_write+0x19/0x60
[   36.199105][ T3799]  kernfs_new_node+0xcf/0xf0
[   36.199135][ T3799]  __kernfs_create_file+0x4b/0x180
[   36.199160][ T3799]  ? __pfx_dev_attr_show+0x10/0x10
[   36.199198][ T3799]  ? __pfx_dev_attr_store+0x10/0x10
[   36.199236][ T3799]  sysfs_add_file_mode_ns+0x132/0x1b0
[   36.199316][ T3799]  internal_create_group+0x43e/0x9e0
[   36.199369][ T3799]  ? kernfs_put+0x25e/0x2c0
[   36.199436][ T3799]  sysfs_create_groups+0x3f/0xf0
[   36.199468][ T3799]  device_add_attrs+0xf2/0x3f0
[   36.199505][ T3799]  device_add+0x37a/0x790
[   36.199558][ T3799]  wakeup_source_sysfs_add+0x15a/0x1d0
[   36.199588][ T3799]  wakeup_source_register+0xfd/0x240
[   36.199612][ T3799]  ep_insert+0x86c/0xd70
[   36.199679][ T3799]  do_epoll_ctl_file+0x645/0x700
[   36.199751][ T3799]  __se_sys_epoll_ctl+0xf1/0x190
[   36.199832][ T3799]  __x64_sys_epoll_ctl+0x55/0x70
[   36.199869][ T3799]  x64_sys_call+0x6a5/0x2550
[   36.199896][ T3799]  do_syscall_64+0x112/0x360
[   36.199922][ T3799]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   36.199982][ T3799] RIP: 0033:0x7fc1444de159
[   36.200001][ T3799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   36.200099][ T3799] RSP: 002b:00007fc142ef5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9
[   36.200122][ T3799] RAX: ffffffffffffffda RBX: 00007fc144766180 RCX: 00007fc1444de159
[   36.200135][ T3799] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000008
[   36.200147][ T3799] RBP: 00007fc142ef5090 R08: 0000000000000000 R09: 0000000000000000
[   36.200159][ T3799] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002
[   36.200171][ T3799] R13: 00007fc144766218 R14: 00007fc144766180 R15: 00007fff4eaeff48
[   36.200255][ T3799]  </TASK>
[   36.341104][ T3803] loop4: detected capacity change from 0 to 1024
[   36.420280][ T3803] EXT4-fs: Ignoring removed bh option
[   36.422139][ T3803] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   36.427820][ T3803] EXT4-fs error (device loop4): ext4_map_blocks:832: inode #3: block 1: comm syz.4.87: lblock 1 mapped to illegal pblock 1 (length 1)
[   36.427943][ T3803] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   36.428080][ T3803] EXT4-fs (loop4): Remounting filesystem read-only
[   36.428605][ T3803] EXT4-fs (loop4): 1 orphan inode deleted
[   36.430208][ T3803] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   36.656583][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.816119][ T3812] FAULT_INJECTION: forcing a failure.
[   36.816119][ T3812] name failslab, interval 1, probability 0, space 0, times 0
[   36.816151][ T3812] CPU: 1 UID: 0 PID: 3812 Comm: syz.4.88 Not tainted syzkaller #0 PREEMPT(lazy) 
[   36.816232][ T3812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   36.816245][ T3812] Call Trace:
[   36.816253][ T3812]  <TASK>
[   36.816260][ T3812]  __dump_stack+0x1d/0x30
[   36.816289][ T3812]  dump_stack_lvl+0x95/0xd0
[   36.816314][ T3812]  dump_stack+0x15/0x1b
[   36.816336][ T3812]  should_fail_ex+0x262/0x280
[   36.816432][ T3812]  ? register_netdevice+0x1a2/0x11a0
[   36.816520][ T3812]  should_failslab+0x8c/0xb0
[   36.816556][ T3812]  __kmalloc_cache_noprof+0x7a/0x400
[   36.816593][ T3812]  ? register_netdevice+0x1a2/0x11a0
[   36.816681][ T3812]  register_netdevice+0x1a2/0x11a0
[   36.816718][ T3812]  vti6_tnl_create2+0x85/0x250
[   36.816755][ T3812]  vti6_locate+0x39c/0x440
[   36.816866][ T3812]  vti6_siocdevprivate+0x7a5/0xb50
[   36.816964][ T3812]  dev_ifsioc+0x8f5/0xfc0
[   36.817000][ T3812]  dev_ioctl+0x78c/0x960
[   36.817030][ T3812]  sock_ioctl+0x58f/0x610
[   36.817062][ T3812]  ? __pfx_sock_ioctl+0x10/0x10
[   36.817178][ T3812]  __se_sys_ioctl+0xce/0x140
[   36.817216][ T3812]  __x64_sys_ioctl+0x43/0x50
[   36.817296][ T3812]  x64_sys_call+0x239d/0x2550
[   36.817324][ T3812]  do_syscall_64+0x112/0x360
[   36.817351][ T3812]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   36.817452][ T3812] RIP: 0033:0x7f101b69e159
[   36.817496][ T3812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   36.817516][ T3812] RSP: 002b:00007f101a0f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   36.817539][ T3812] RAX: ffffffffffffffda RBX: 00007f101b925fa0 RCX: 00007f101b69e159
[   36.817555][ T3812] RDX: 0000200000000480 RSI: 00000000000089f1 RDI: 0000000000000004
[   36.817570][ T3812] RBP: 00007f101b73506b R08: 0000000000000000 R09: 0000000000000000
[   36.817584][ T3812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   36.817598][ T3812] R13: 00007f101b926038 R14: 00007f101b925fa0 R15: 00007ffc7f113168
[   36.817692][ T3812]  </TASK>
[   36.897579][ T3812] EXT4-fs: Ignoring removed orlov option
[   36.897714][ T3812] EXT4-fs: inline encryption not supported
[   36.907272][ T3812] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[   36.907311][ T3812] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (52238!=20869)
[   36.907349][ T3812] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   36.908052][ T3812] EXT4-fs (loop4): invalid journal inode
[   36.908075][ T3812] EXT4-fs (loop4): can't get journal size
[   36.915738][ T3812] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   36.975969][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.090507][ T3821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.94'.
[   37.121152][ T3819] 9pnet_fd: Insufficient options for proto=fd
[   37.178331][ T3828] FAULT_INJECTION: forcing a failure.
[   37.178331][ T3828] name failslab, interval 1, probability 0, space 0, times 0
[   37.178359][ T3828] CPU: 1 UID: 0 PID: 3828 Comm: syz.4.96 Not tainted syzkaller #0 PREEMPT(lazy) 
[   37.178390][ T3828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   37.178403][ T3828] Call Trace:
[   37.178411][ T3828]  <TASK>
[   37.178419][ T3828]  __dump_stack+0x1d/0x30
[   37.178492][ T3828]  dump_stack_lvl+0x95/0xd0
[   37.178535][ T3828]  dump_stack+0x15/0x1b
[   37.178557][ T3828]  should_fail_ex+0x262/0x280
[   37.178585][ T3828]  ? getname_long+0x32/0x100
[   37.178612][ T3828]  should_failslab+0x8c/0xb0
[   37.178694][ T3828]  __kmalloc_cache_noprof+0x7a/0x400
[   37.178729][ T3828]  ? getname_long+0x32/0x100
[   37.178753][ T3828]  ? should_fail_usercopy+0x1a/0x20
[   37.178848][ T3828]  getname_long+0x32/0x100
[   37.178894][ T3828]  do_getname+0x12e/0x1c0
[   37.178914][ T3828]  __se_sys_mkdir+0x1e/0xf0
[   37.178960][ T3828]  __x64_sys_mkdir+0x31/0x40
[   37.179012][ T3828]  x64_sys_call+0x18da/0x2550
[   37.179065][ T3828]  do_syscall_64+0x112/0x360
[   37.179137][ T3828]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   37.179161][ T3828] RIP: 0033:0x7f101b69e159
[   37.179178][ T3828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   37.179197][ T3828] RSP: 002b:00007f101a0f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
[   37.179218][ T3828] RAX: ffffffffffffffda RBX: 00007f101b925fa0 RCX: 00007f101b69e159
[   37.179284][ T3828] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180
[   37.179371][ T3828] RBP: 00007f101a0f7090 R08: 0000000000000000 R09: 0000000000000000
[   37.179386][ T3828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   37.179398][ T3828] R13: 00007f101b926038 R14: 00007f101b925fa0 R15: 00007ffc7f113168
[   37.179419][ T3828]  </TASK>
[   37.265206][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.304949][ T3833] ip_tables: iptables: counters copy to user failed while replacing table
[   37.422198][ T3836] EXT4-fs: Ignoring removed bh option
[   37.439870][ T3836] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   37.449256][ T3836] EXT4-fs error (device loop3): ext4_map_blocks:832: inode #3: block 1: comm syz.3.99: lblock 1 mapped to illegal pblock 1 (length 1)
[   37.449293][ T3836] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   37.449447][ T3836] EXT4-fs (loop3): Remounting filesystem read-only
[   37.449540][ T3836] EXT4-fs (loop3): 1 orphan inode deleted
[   37.449897][ T3836] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   37.540796][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.708600][ T3853] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   37.724101][ T3849]  loop3: p1[EZD] p2 p3 p4
[   37.728330][ T3849] loop3: p2 size 14011136 extends beyond EOD, truncated
[   37.728930][ T3849] loop3: p3 start 150994944 is beyond EOD, truncated
[   37.728958][ T3849] loop3: p4 size 4160782088 extends beyond EOD, truncated
[   37.892636][ T3853] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1044)
[   37.892730][ T3853] FAT-fs (loop4): Filesystem has been set read-only
[   37.893151][ T3853] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1044)
[   37.893323][ T3853] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1044)
[   37.897350][ T3856] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1044)
[   37.978391][ T3866] EXT4-fs: dax option not supported
[   38.035923][ T3866] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   38.043979][ T3866] bond0 (unregistering): Released all slaves
[   38.071733][ T3871] netlink: 12 bytes leftover after parsing attributes in process `syz.2.111'.
[   38.132159][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.414487][ T3903]  loop1: p1[EZD] p2 p3 p4
[   38.431067][ T3903] loop1: p2 size 14011136 extends beyond EOD, truncated
[   38.441711][ T3903] loop1: p3 start 150994944 is beyond EOD, truncated
[   38.441828][ T3903] loop1: p4 size 4160782088 extends beyond EOD, truncated
[   38.478257][ T3762] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 28
[   38.502698][ T3304] EXT4-fs warning (device loop0): ext4_evict_inode:196: inode #15: comm syz-executor: data will be lost
[   38.559256][ T3921] netlink: 8 bytes leftover after parsing attributes in process `syz.4.119'.
[   38.762979][ T3929] syzkaller0: entered promiscuous mode
[   38.763001][ T3929] syzkaller0: entered allmulticast mode
[   38.825102][ T3940] ip_tables: iptables: counters copy to user failed while replacing table
[   38.944185][ T3957] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   38.944324][ T3957] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   38.976730][ T3962] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   39.042721][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.197318][ T3999] FAULT_INJECTION: forcing a failure.
[   39.197318][ T3999] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   39.197410][ T3999] CPU: 1 UID: 0 PID: 3999 Comm: syz.4.132 Not tainted syzkaller #0 PREEMPT(lazy) 
[   39.197438][ T3999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   39.197450][ T3999] Call Trace:
[   39.197456][ T3999]  <TASK>
[   39.197463][ T3999]  __dump_stack+0x1d/0x30
[   39.197488][ T3999]  dump_stack_lvl+0x95/0xd0
[   39.197554][ T3999]  dump_stack+0x15/0x1b
[   39.197578][ T3999]  should_fail_ex+0x262/0x280
[   39.197610][ T3999]  should_fail+0xb/0x20
[   39.197635][ T3999]  should_fail_usercopy+0x1a/0x20
[   39.197705][ T3999]  _copy_to_user+0x20/0xa0
[   39.197738][ T3999]  simple_read_from_buffer+0xb5/0x130
[   39.197824][ T3999]  proc_fail_nth_read+0x10e/0x150
[   39.197846][ T3999]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   39.197870][ T3999]  vfs_read+0x18e/0x7c0
[   39.197964][ T3999]  ? __rcu_read_unlock+0x4e/0x70
[   39.198002][ T3999]  ? __fget_files+0x184/0x1c0
[   39.198071][ T3999]  ? mutex_lock+0x57/0x90
[   39.198152][ T3999]  ksys_read+0xdc/0x1a0
[   39.198194][ T3999]  __x64_sys_read+0x40/0x50
[   39.198225][ T3999]  x64_sys_call+0x2135/0x2550
[   39.198266][ T3999]  do_syscall_64+0x112/0x360
[   39.198294][ T3999]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   39.198317][ T3999] RIP: 0033:0x7f101b65e98e
[   39.198340][ T3999] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   39.198358][ T3999] RSP: 002b:00007f101a0f6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   39.198381][ T3999] RAX: ffffffffffffffda RBX: 00007f101a0f76c0 RCX: 00007f101b65e98e
[   39.198399][ T3999] RDX: 000000000000000f RSI: 00007f101a0f70a0 RDI: 0000000000000004
[   39.198415][ T3999] RBP: 00007f101a0f7090 R08: 0000000000000000 R09: 0000000000000000
[   39.198431][ T3999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   39.198446][ T3999] R13: 00007f101b926038 R14: 00007f101b925fa0 R15: 00007ffc7f113168
[   39.198505][ T3999]  </TASK>
[   39.282799][ T4000] EXT4-fs: inline encryption not supported
[   39.284661][ T4000] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[   39.295361][ T4000] EXT4-fs error (device loop1): ext4_iget_extra_inode:5210: inode #15: comm syz.1.130: corrupted in-inode xattr: e_value size too large
[   39.295391][ T4000] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   39.295535][ T4000] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.130: couldn't read orphan inode 15 (err -117)
[   39.295586][ T4000] loop1: lost filesystem error report for type 5 error -117
[   39.296172][ T4000] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   39.296747][ T4000] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.369605][ T3963] syzkaller0: entered promiscuous mode
[   39.369691][ T3963] syzkaller0: entered allmulticast mode
[   39.586244][ T4019] set_capacity_and_notify: 11 callbacks suppressed
[   39.586263][ T4019] loop0: detected capacity change from 0 to 8192
[   39.616695][ T4024] loop2: detected capacity change from 0 to 512
[   39.630880][ T4019]  loop0: p1[EZD] p2 p3 p4
[   39.631504][ T4019] loop0: p2 size 14011136 extends beyond EOD, truncated
[   39.634696][ T4019] loop0: p3 start 150994944 is beyond EOD, truncated
[   39.634717][ T4019] loop0: p4 size 4160782088 extends beyond EOD, truncated
[   39.764131][ T4042] FAULT_INJECTION: forcing a failure.
[   39.764131][ T4042] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[   39.764162][ T4042] CPU: 0 UID: 0 PID: 4042 Comm: syz.1.141 Not tainted syzkaller #0 PREEMPT(lazy) 
[   39.764244][ T4042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   39.764300][ T4042] Call Trace:
[   39.764307][ T4042]  <TASK>
[   39.764315][ T4042]  __dump_stack+0x1d/0x30
[   39.764343][ T4042]  dump_stack_lvl+0x95/0xd0
[   39.764437][ T4042]  dump_stack+0x15/0x1b
[   39.764460][ T4042]  should_fail_ex+0x262/0x280
[   39.764487][ T4042]  should_fail_alloc_page+0xf2/0x100
[   39.764580][ T4042]  __alloc_frozen_pages_noprof+0x157/0x400
[   39.764603][ T4042]  alloc_pages_mpol+0xaf/0x1d0
[   39.764692][ T4042]  vma_alloc_folio_noprof+0x1b3/0x300
[   39.764719][ T4042]  handle_mm_fault+0x137d/0x3bb0
[   39.764753][ T4042]  do_user_addr_fault+0x636/0x1060
[   39.764827][ T4042]  ? ksys_mmap_pgoff+0xc1/0x310
[   39.764848][ T4042]  ? fpregs_assert_state_consistent+0xb3/0xe0
[   39.764877][ T4042]  ? arch_exit_to_user_mode_prepare+0x26/0x60
[   39.764902][ T4042]  ? trace_page_fault_user+0x1f/0xa0
[   39.765009][ T4042]  exc_page_fault+0x62/0xa0
[   39.765044][ T4042]  asm_exc_page_fault+0x26/0x30
[   39.765065][ T4042] RIP: 0033:0x7fc1443951a3
[   39.765087][ T4042] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c
[   39.765121][ T4042] RSP: 002b:00007fc142f36470 EFLAGS: 00010202
[   39.765140][ T4042] RAX: 0000000000014000 RBX: 00007fc142f36530 RCX: 00007fc13ab17000
[   39.765157][ T4042] RDX: 00007fc142f366d0 RSI: 000000000000000b RDI: 00007fc142f365d0
[   39.765173][ T4042] RBP: 00000000000000ae R08: 0000000000000007 R09: 0000000000000049
[   39.765188][ T4042] R10: 0000000000000052 R11: 00007fc142f36530 R12: 0000000000000001
[   39.765240][ T4042] R13: 00007fc144595100 R14: 0000000000000073 R15: 00007fc142f365d0
[   39.765261][ T4042]  </TASK>
[   39.767016][ T4042] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[   39.795400][ T4039] loop2: detected capacity change from 0 to 512
[   39.799030][ T4039] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[   39.799049][ T4039] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities
[   39.840546][ T4042] loop1: detected capacity change from 0 to 1024
[   39.849384][ T4042] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled
[   39.881891][ T4042] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   39.995040][ T4057] netlink: 4 bytes leftover after parsing attributes in process `syz.4.143'.
[   39.995183][ T4057] netlink: 44 bytes leftover after parsing attributes in process `syz.4.143'.
[   39.995200][ T4057] netlink: 43 bytes leftover after parsing attributes in process `syz.4.143'.
[   39.995213][ T4057] netlink: 'syz.4.143': attribute type 5 has an invalid length.
[   39.995225][ T4057] netlink: 43 bytes leftover after parsing attributes in process `syz.4.143'.
[   40.024886][ T4055] FAULT_INJECTION: forcing a failure.
[   40.024886][ T4055] name failslab, interval 1, probability 0, space 0, times 0
[   40.024929][ T4055] CPU: 1 UID: 0 PID: 4055 Comm: syz.2.142 Not tainted syzkaller #0 PREEMPT(lazy) 
[   40.024956][ T4055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   40.024969][ T4055] Call Trace:
[   40.024976][ T4055]  <TASK>
[   40.024984][ T4055]  __dump_stack+0x1d/0x30
[   40.025011][ T4055]  dump_stack_lvl+0x95/0xd0
[   40.025068][ T4055]  dump_stack+0x15/0x1b
[   40.025087][ T4055]  should_fail_ex+0x262/0x280
[   40.025114][ T4055]  ? copy_fs_struct+0x31/0x110
[   40.025150][ T4055]  should_failslab+0x8c/0xb0
[   40.025193][ T4055]  kmem_cache_alloc_noprof+0x7c/0x3f0
[   40.025226][ T4055]  ? create_new_namespaces+0x38/0x420
[   40.025260][ T4055]  ? copy_fs_struct+0x31/0x110
[   40.025378][ T4055]  ? copy_time_ns+0x6e/0x320
[   40.025404][ T4055]  copy_fs_struct+0x31/0x110
[   40.025437][ T4055]  __se_sys_setns+0x360/0xff0
[   40.025470][ T4055]  ? fput+0x91/0xc0
[   40.025574][ T4055]  __x64_sys_setns+0x31/0x40
[   40.025607][ T4055]  x64_sys_call+0x1769/0x2550
[   40.025646][ T4055]  do_syscall_64+0x112/0x360
[   40.025671][ T4055]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   40.025695][ T4055] RIP: 0033:0x7efd188be159
[   40.025711][ T4055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   40.025731][ T4055] RSP: 002b:00007efd172f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000134
[   40.025754][ T4055] RAX: ffffffffffffffda RBX: 00007efd18b46090 RCX: 00007efd188be159
[   40.025769][ T4055] RDX: 0000000000000000 RSI: 0000000024020000 RDI: 0000000000000005
[   40.025783][ T4055] RBP: 00007efd172f6090 R08: 0000000000000000 R09: 0000000000000000
[   40.025797][ T4055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   40.025810][ T4055] R13: 00007efd18b46128 R14: 00007efd18b46090 R15: 00007ffd61a13cb8
[   40.025830][ T4055]  </TASK>
[   40.064129][   T29] kauditd_printk_skb: 1059 callbacks suppressed
[   40.064144][   T29] audit: type=1400 audit(1790874784.378:1715): avc:  denied  { write } for  pid=4062 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   40.353525][   T29] audit: type=1400 audit(1790874784.668:1716): avc:  denied  { sqpoll } for  pid=4068 comm="syz.4.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   40.420302][   T29] audit: type=1400 audit(1790874784.738:1717): avc:  denied  { connect } for  pid=4065 comm="syz.0.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   40.440301][   T29] audit: type=1400 audit(1790874784.758:1718): avc:  denied  { write } for  pid=4065 comm="syz.0.145" laddr=fe80::9499:5dff:fe17:fa13 lport=14037 faddr=ff02::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   40.490747][ T4077] batman_adv: batadv0: adding TT local entry ba:e1:05:00:07:00 to non-existent VLAN 6
[   40.511957][ T4066] loop3: detected capacity change from 0 to 8192
[   40.787669][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.816541][ T4066]  loop3: p2 p3 p4
[   40.816598][ T4066] loop3: p2 size 64053 extends beyond EOD, truncated
[   40.817433][ T4066] loop3: p3 start 65280 is beyond EOD, truncated
[   40.817449][ T4066] loop3: p4 size 50331904 extends beyond EOD, truncated
[   40.931556][ T4087] loop2: detected capacity change from 0 to 512
[   40.992026][ T4089] 8021q: adding VLAN 0 to HW filter on device bond1
[   41.004096][   T29] audit: type=1400 audit(1790874785.328:1719): avc:  denied  { write } for  pid=4070 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   41.053295][ T4095] loop0: detected capacity change from 0 to 512
[   41.053786][ T4095] EXT4-fs: inline encryption not supported
[   41.056891][ T4095] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[   41.064068][ T4095] EXT4-fs error (device loop0): ext4_iget_extra_inode:5210: inode #15: comm syz.0.148: corrupted in-inode xattr: e_value size too large
[   41.064115][ T4095] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   41.064235][ T4095] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.148: couldn't read orphan inode 15 (err -117)
[   41.064262][ T4095] loop0: lost filesystem error report for type 5 error -117
[   41.064867][ T4095] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   41.067617][ T4095] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.134913][   T29] audit: type=1400 audit(1790874785.448:1720): avc:  denied  { write } for  pid=4110 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   41.224890][ T4104] loop4: detected capacity change from 0 to 8051
[   41.276909][ T4117] FAULT_INJECTION: forcing a failure.
[   41.276909][ T4117] name failslab, interval 1, probability 0, space 0, times 0
[   41.277092][ T4117] CPU: 0 UID: 0 PID: 4117 Comm: syz.3.154 Not tainted syzkaller #0 PREEMPT(lazy) 
[   41.277117][ T4117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   41.277129][ T4117] Call Trace:
[   41.277212][ T4117]  <TASK>
[   41.277221][ T4117]  __dump_stack+0x1d/0x30
[   41.277247][ T4117]  dump_stack_lvl+0x95/0xd0
[   41.277271][ T4117]  dump_stack+0x15/0x1b
[   41.277296][ T4117]  should_fail_ex+0x262/0x280
[   41.277353][ T4117]  ? skb_clone+0x151/0x1f0
[   41.277375][ T4117]  should_failslab+0x8c/0xb0
[   41.277486][ T4117]  kmem_cache_alloc_noprof+0x7c/0x3f0
[   41.277516][ T4117]  ? skb_clone+0x151/0x1f0
[   41.277542][ T4117]  skb_clone+0x151/0x1f0
[   41.277569][ T4117]  __netlink_deliver_tap+0x2be/0x510
[   41.277636][ T4117]  netlink_unicast+0x656/0x680
[   41.277701][ T4117]  netlink_sendmsg+0x5be/0x6f0
[   41.277726][ T4117]  ? __pfx_netlink_sendmsg+0x10/0x10
[   41.277749][ T4117]  ____sys_sendmsg+0x532/0x580
[   41.277849][ T4117]  ___sys_sendmsg+0x195/0x1e0
[   41.277886][ T4117]  __x64_sys_sendmsg+0xd4/0x160
[   41.277927][ T4117]  x64_sys_call+0x22ab/0x2550
[   41.277957][ T4117]  do_syscall_64+0x112/0x360
[   41.278016][ T4117]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   41.278040][ T4117] RIP: 0033:0x7f63bb7ce159
[   41.278083][ T4117] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   41.278104][ T4117] RSP: 002b:00007f63ba227028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   41.278126][ T4117] RAX: ffffffffffffffda RBX: 00007f63bba55fa0 RCX: 00007f63bb7ce159
[   41.278157][ T4117] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003
[   41.278170][ T4117] RBP: 00007f63ba227090 R08: 0000000000000000 R09: 0000000000000000
[   41.278188][ T4117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   41.278238][ T4117] R13: 00007f63bba56038 R14: 00007f63bba55fa0 R15: 00007ffe912e29b8
[   41.278257][ T4117]  </TASK>
[   41.351734][ T4122] FAULT_INJECTION: forcing a failure.
[   41.351734][ T4122] name failslab, interval 1, probability 0, space 0, times 0
[   41.351788][ T4122] CPU: 0 UID: 60928 PID: 4122 Comm: syz.1.155 Not tainted syzkaller #0 PREEMPT(lazy) 
[   41.351844][ T4122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   41.351860][ T4122] Call Trace:
[   41.351868][ T4122]  <TASK>
[   41.351878][ T4122]  __dump_stack+0x1d/0x30
[   41.351910][ T4122]  dump_stack_lvl+0x95/0xd0
[   41.352018][ T4122]  dump_stack+0x15/0x1b
[   41.352045][ T4122]  should_fail_ex+0x262/0x280
[   41.352077][ T4122]  ? copy_cgroup_ns+0x156/0x400
[   41.352104][ T4122]  should_failslab+0x8c/0xb0
[   41.352162][ T4122]  __kmalloc_cache_noprof+0x7a/0x400
[   41.352200][ T4122]  ? copy_cgroup_ns+0x156/0x400
[   41.352239][ T4122]  copy_cgroup_ns+0x156/0x400
[   41.352316][ T4122]  create_new_namespaces+0x1af/0x420
[   41.352354][ T4122]  unshare_nsproxy_namespaces+0x115/0x150
[   41.352419][ T4122]  ksys_unshare+0x42b/0x710
[   41.352454][ T4122]  __x64_sys_unshare+0x1f/0x30
[   41.352487][ T4122]  x64_sys_call+0x1e33/0x2550
[   41.352594][ T4122]  do_syscall_64+0x112/0x360
[   41.352682][ T4122]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   41.352708][ T4122] RIP: 0033:0x7fc1444de159
[   41.352727][ T4122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   41.352748][ T4122] RSP: 002b:00007fc142f37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[   41.352803][ T4122] RAX: ffffffffffffffda RBX: 00007fc144765fa0 RCX: 00007fc1444de159
[   41.352820][ T4122] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000006000080
[   41.352905][ T4122] RBP: 00007fc14457506b R08: 0000000000000000 R09: 0000000000000000
[   41.352920][ T4122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   41.352936][ T4122] R13: 00007fc144766038 R14: 00007fc144765fa0 R15: 00007fff4eaeff48
[   41.352957][ T4122]  </TASK>
[   41.441462][ T4126] FAULT_INJECTION: forcing a failure.
[   41.441462][ T4126] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[   41.441555][ T4126] CPU: 0 UID: 60928 PID: 4126 Comm: syz.2.158 Not tainted syzkaller #0 PREEMPT(lazy) 
[   41.441583][ T4126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   41.441597][ T4126] Call Trace:
[   41.441604][ T4126]  <TASK>
[   41.441613][ T4126]  __dump_stack+0x1d/0x30
[   41.441641][ T4126]  dump_stack_lvl+0x95/0xd0
[   41.441726][ T4126]  dump_stack+0x15/0x1b
[   41.441808][ T4126]  should_fail_ex+0x262/0x280
[   41.441837][ T4126]  should_fail_alloc_page+0xf2/0x100
[   41.441899][ T4126]  __alloc_frozen_pages_noprof+0x157/0x400
[   41.441980][ T4126]  alloc_pages_mpol+0xaf/0x1d0
[   41.442009][ T4126]  alloc_pages_noprof+0x94/0x140
[   41.442036][ T4126]  timens_vdso_alloc_vvar_page+0x1e/0x50
[   41.442072][ T4126]  copy_time_ns+0xe9/0x320
[   41.442099][ T4126]  create_new_namespaces+0x23a/0x420
[   41.442171][ T4126]  unshare_nsproxy_namespaces+0x115/0x150
[   41.442273][ T4126]  ksys_unshare+0x42b/0x710
[   41.442304][ T4126]  __x64_sys_unshare+0x1f/0x30
[   41.442334][ T4126]  x64_sys_call+0x1e33/0x2550
[   41.442485][ T4126]  do_syscall_64+0x112/0x360
[   41.442555][ T4126]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   41.442643][ T4126] RIP: 0033:0x7efd188be159
[   41.442729][ T4126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   41.442749][ T4126] RSP: 002b:00007efd17317028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[   41.442821][ T4126] RAX: ffffffffffffffda RBX: 00007efd18b45fa0 RCX: 00007efd188be159
[   41.442837][ T4126] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000006000080
[   41.442851][ T4126] RBP: 00007efd1895506b R08: 0000000000000000 R09: 0000000000000000
[   41.442866][ T4126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   41.442880][ T4126] R13: 00007efd18b46038 R14: 00007efd18b45fa0 R15: 00007ffd61a13cb8
[   41.442901][ T4126]  </TASK>
[   41.489504][   T29] audit: type=1400 audit(1790874785.798:1721): avc:  denied  { ioctl } for  pid=4129 comm="syz.0.160" path="socket:[7174]" dev="sockfs" ino=7174 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   41.502615][   T29] audit: type=1400 audit(1790874785.818:1722): avc:  denied  { bind } for  pid=4129 comm="syz.0.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   41.711042][ T4125] loop3: detected capacity change from 0 to 8192
[   41.768031][ T4125]  loop3: p1[EZD] p2 p3 p4
[   41.772316][ T4125] loop3: p2 size 14011136 extends beyond EOD, truncated
[   41.781800][ T4125] loop3: p3 start 150994944 is beyond EOD, truncated
[   41.781822][ T4125] loop3: p4 size 4160782088 extends beyond EOD, truncated
[   41.951527][ T2985]  loop3: p1[EZD] p2 p3 p4
[   41.955999][ T4159] gretap0: entered promiscuous mode
[   41.958126][ T2985] loop3: p2 size 14011136 extends beyond EOD, truncated
[   41.965462][ T2985] loop3: p3 start 150994944 is beyond EOD, truncated
[   41.965482][ T2985] loop3: p4 size 4160782088 extends beyond EOD, truncated
[   42.020128][ T3879] udevd[3879]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[   42.021389][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[   42.029834][ T4165] FAULT_INJECTION: forcing a failure.
[   42.029834][ T4165] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   42.029971][ T4165] CPU: 0 UID: 0 PID: 4165 Comm: syz.1.167 Not tainted syzkaller #0 PREEMPT(lazy) 
[   42.029997][ T4165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   42.030010][ T4165] Call Trace:
[   42.030017][ T4165]  <TASK>
[   42.030025][ T4165]  __dump_stack+0x1d/0x30
[   42.030093][ T4165]  dump_stack_lvl+0x95/0xd0
[   42.030116][ T4165]  dump_stack+0x15/0x1b
[   42.030138][ T4165]  should_fail_ex+0x262/0x280
[   42.030167][ T4165]  should_fail+0xb/0x20
[   42.030241][ T4165]  should_fail_usercopy+0x1a/0x20
[   42.030271][ T4165]  _copy_from_user+0x1c/0xb0
[   42.030301][ T4165]  __sys_bind+0x106/0x290
[   42.030412][ T4165]  __x64_sys_bind+0x3f/0x50
[   42.030493][ T4165]  x64_sys_call+0x1ac7/0x2550
[   42.030521][ T4165]  do_syscall_64+0x112/0x360
[   42.030558][ T4165]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   42.030582][ T4165] RIP: 0033:0x7fc1444de159
[   42.030600][ T4165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   42.030681][ T4165] RSP: 002b:00007fc142f37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[   42.030703][ T4165] RAX: ffffffffffffffda RBX: 00007fc144765fa0 RCX: 00007fc1444de159
[   42.030718][ T4165] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000003
[   42.030733][ T4165] RBP: 00007fc142f37090 R08: 0000000000000000 R09: 0000000000000000
[   42.030746][ T4165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   42.030800][ T4165] R13: 00007fc144766038 R14: 00007fc144765fa0 R15: 00007fff4eaeff48
[   42.030820][ T4165]  </TASK>
[   42.031345][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[   42.077079][ T4164] loop4: detected capacity change from 0 to 1024
[   42.079218][ T4164] EXT4-fs: Ignoring removed bh option
[   42.084660][ T4164] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   42.091874][ T4164] EXT4-fs error (device loop4): ext4_map_blocks:832: inode #3: block 1: comm syz.4.168: lblock 1 mapped to illegal pblock 1 (length 1)
[   42.091908][ T4164] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   42.093739][ T4164] EXT4-fs (loop4): Remounting filesystem read-only
[   42.093755][ T4164] Quota error (device loop4): write_blk: dquota write failed
[   42.093837][ T4164] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[   42.093885][ T4164] EXT4-fs (loop4): 1 orphan inode deleted
[   42.094352][ T4164] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.165686][ T4175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.172'.
[   42.166287][ T4175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.172'.
[   42.315496][ T4173] Illegal XDP return value 9 on prog  (id 36) dev N/A, expect packet loss!
[   42.391664][ T4170] EXT4-fs: inline encryption not supported
[   42.398316][ T4170] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[   42.402615][ T4170] EXT4-fs error (device loop0): ext4_iget_extra_inode:5210: inode #15: comm syz.0.170: corrupted in-inode xattr: e_value size too large
[   42.402646][ T4170] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   42.402776][ T4170] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.170: couldn't read orphan inode 15 (err -117)
[   42.402805][ T4170] loop0: lost filesystem error report for type 5 error -117
[   42.403363][ T4170] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   42.405828][ T4170] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.477661][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.540320][ T4196] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.576579][ T4206] FAULT_INJECTION: forcing a failure.
[   42.576579][ T4206] name failslab, interval 1, probability 0, space 0, times 0
[   42.576613][ T4206] CPU: 1 UID: 0 PID: 4206 Comm: syz.3.178 Not tainted syzkaller #0 PREEMPT(lazy) 
[   42.576642][ T4206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   42.576656][ T4206] Call Trace:
[   42.576664][ T4206]  <TASK>
[   42.576673][ T4206]  __dump_stack+0x1d/0x30
[   42.576784][ T4206]  dump_stack_lvl+0x95/0xd0
[   42.576816][ T4206]  dump_stack+0x15/0x1b
[   42.576840][ T4206]  should_fail_ex+0x262/0x280
[   42.576872][ T4206]  should_failslab+0x8c/0xb0
[   42.576951][ T4206]  __kmalloc_node_track_caller_noprof+0xd6/0x500
[   42.576993][ T4206]  ? sidtab_sid2str_get+0xa0/0x130
[   42.577093][ T4206]  ? sidtab_sid2str_get+0xa0/0x130
[   42.577122][ T4206]  kmemdup_noprof+0x2b/0x70
[   42.577208][ T4206]  sidtab_sid2str_get+0xa0/0x130
[   42.577274][ T4206]  security_sid_to_context_core+0x179/0x2d0
[   42.577307][ T4206]  security_sid_to_context+0x27/0x40
[   42.577332][ T4206]  selinux_lsmprop_to_secctx+0x67/0xf0
[   42.577364][ T4206]  security_lsmprop_to_secctx+0x1a3/0x1c0
[   42.577465][ T4206]  audit_log_subj_ctx+0xa4/0x3e0
[   42.577496][ T4206]  audit_log_task_context+0x48/0x70
[   42.577591][ T4206]  audit_log_task+0xf3/0x240
[   42.577678][ T4206]  audit_seccomp+0x6a/0x110
[   42.577702][ T4206]  __seccomp_filter+0x909/0x1360
[   42.577783][ T4206]  ? __fget_files+0x184/0x1c0
[   42.577808][ T4206]  ? mutex_lock+0x57/0x90
[   42.577840][ T4206]  ? mutex_unlock+0x4e/0x90
[   42.577885][ T4206]  __seccomp_permit_syscall+0x7d/0x150
[   42.577919][ T4206]  do_syscall_64+0xca/0x360
[   42.577945][ T4206]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   42.577971][ T4206] RIP: 0033:0x7f63bb7ce159
[   42.578030][ T4206] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   42.578057][ T4206] RSP: 002b:00007f63ba206028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c6
[   42.578077][ T4206] RAX: ffffffffffffffda RBX: 00007f63bba56090 RCX: 00007f63bb7ce159
[   42.578161][ T4206] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   42.578176][ T4206] RBP: 00007f63ba206090 R08: 0000000000000000 R09: 0000000000000000
[   42.578191][ T4206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   42.578205][ T4206] R13: 00007f63bba56128 R14: 00007f63bba56090 R15: 00007ffe912e29b8
[   42.578227][ T4206]  </TASK>
[   42.697373][ T4205]  loop4: p1[EZD] p2 p3 p4
[   42.698219][ T4205] loop4: p2 size 14011136 extends beyond EOD, truncated
[   42.705894][ T4205] loop4: p3 start 150994944 is beyond EOD, truncated
[   42.705915][ T4205] loop4: p4 size 4160782088 extends beyond EOD, truncated
[   42.798329][ T4213] netlink: 12 bytes leftover after parsing attributes in process `syz.0.181'.
[   42.916591][ T4215] syz.0.181 uses obsolete (PF_INET,SOCK_PACKET)
[   42.928997][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.026086][ T4241] EXT4-fs: Ignoring removed bh option
[   43.030018][ T4241] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   43.048558][ T4241] EXT4-fs error (device loop1): ext4_map_blocks:832: inode #3: block 1: comm syz.1.187: lblock 1 mapped to illegal pblock 1 (length 1)
[   43.048594][ T4241] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   43.048677][ T4241] EXT4-fs (loop1): Remounting filesystem read-only
[   43.048786][ T4241] EXT4-fs (loop1): 1 orphan inode deleted
[   43.066850][ T4241] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   43.124484][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.154222][ T4258] ip6t_hbh: too many supported opts specified
[   43.154457][ T4255] ip6t_hbh: too many supported opts specified
[   43.162941][ T4246] EXT4-fs: inline encryption not supported
[   43.169480][ T4246] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[   43.171171][ T4246] EXT4-fs error (device loop0): ext4_iget_extra_inode:5210: inode #15: comm syz.0.190: corrupted in-inode xattr: e_value size too large
[   43.171201][ T4246] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   43.171402][ T4246] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.190: couldn't read orphan inode 15 (err -117)
[   43.171481][ T4246] loop0: lost filesystem error report for type 5 error -117
[   43.174614][ T4246] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   43.175297][ T4246] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.276403][ T4254]  loop4: p1[EZD] p2 p3 p4
[   43.280715][ T4254] loop4: p2 size 14011136 extends beyond EOD, truncated
[   43.281172][ T4254] loop4: p3 start 150994944 is beyond EOD, truncated
[   43.281190][ T4254] loop4: p4 size 4160782088 extends beyond EOD, truncated
[   43.719512][ T4285] netlink: 'syz.4.201': attribute type 21 has an invalid length.
[   43.749216][ T4292] EXT4-fs: Ignoring removed bh option
[   43.758321][ T4292] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   43.773922][ T4292] EXT4-fs error (device loop3): ext4_map_blocks:832: inode #3: block 1: comm syz.3.202: lblock 1 mapped to illegal pblock 1 (length 1)
[   43.773962][ T4292] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   43.774037][ T4292] EXT4-fs (loop3): Remounting filesystem read-only
[   43.774075][ T4292] EXT4-fs (loop3): 1 orphan inode deleted
[   43.774466][ T4292] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   43.893956][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.953543][ T4302] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled
[   43.965736][ T4302] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   44.019647][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.041533][ T4308] xt_hashlimit: size too large, truncated to 1048576
[   44.128546][ T4318] EXT4-fs: Ignoring removed bh option
[   44.132982][ T4318] EXT4-fs error (device loop4): ext4_orphan_get:1403: comm syz.4.210: inode #13: comm syz.4.210: iget: illegal inode #
[   44.133011][ T4318] loop4: lost filesystem error report for type 5 error -117
[   44.133135][ T4318] EXT4-fs (loop4): Remounting filesystem read-only
[   44.133505][ T4318] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   44.143790][ T4318] EXT4-fs (loop4): shut down requested (2)
[   44.150837][ T4318] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop4 ino=12
[   44.150904][ T4318] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop4 ino=12
[   44.178618][ T4306] EXT4-fs: inline encryption not supported
[   44.183796][ T4306] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[   44.190055][ T3306] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop4 ino=11
[   44.190098][ T3306] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop4 ino=11
[   44.190223][ T3306] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop4 ino=11
[   44.190243][ T3306] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop4 ino=11
[   44.190265][ T3306] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop4 ino=11
[   44.190299][ T3306] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop4 ino=11
[   44.195488][ T3306] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop4 ino=11
[   44.195654][ T3306] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop4 ino=11
[   44.200265][ T4306] EXT4-fs error (device loop1): ext4_iget_extra_inode:5210: inode #15: comm syz.1.206: corrupted in-inode xattr: e_value size too large
[   44.200359][ T4306] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   44.201714][    C0] EXT4-fs (loop1): error count since last fsck: 1
[   44.201733][    C0] EXT4-fs (loop1): initial error at time 1790874788: ext4_iget_extra_inode:5210: inode 15
[   44.201762][    C0] EXT4-fs (loop1): last error at time 1790874788: ext4_iget_extra_inode:5210: inode 15
[   44.202066][ T4306] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.206: couldn't read orphan inode 15 (err -117)
[   44.202093][ T4306] loop1: lost filesystem error report for type 5 error -117
[   44.207272][ T4306] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   44.243827][ T4313]  loop3: p1[EZD] p2 p3 p4
[   44.245036][ T4313] loop3: p2 size 14011136 extends beyond EOD, truncated
[   44.245580][ T4313] loop3: p3 start 150994944 is beyond EOD, truncated
[   44.245598][ T4313] loop3: p4 size 4160782088 extends beyond EOD, truncated
[   44.408000][ T4306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.419310][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.449800][   T50] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   44.527373][ T4329] EXT4-fs: Ignoring removed bh option
[   44.541417][ T4329] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   44.542998][ T4329] EXT4-fs error (device loop0): ext4_map_blocks:832: inode #3: block 1: comm syz.0.216: lblock 1 mapped to illegal pblock 1 (length 1)
[   44.543034][ T4329] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   44.543113][ T4329] EXT4-fs (loop0): Remounting filesystem read-only
[   44.543154][ T4329] EXT4-fs (loop0): 1 orphan inode deleted
[   44.543569][ T4329] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   44.567875][   T50] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   44.628877][   T50] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   44.655011][   T50] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   44.738917][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.775691][ T4345] set_capacity_and_notify: 13 callbacks suppressed
[   44.775706][ T4345] loop1: detected capacity change from 0 to 512
[   44.783815][ T4345] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   44.785347][ T4345] EXT4-fs (loop1): 1 truncate cleaned up
[   44.785858][ T4345] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   44.826266][ T4352] loop0: detected capacity change from 0 to 512
[   44.832273][ T4353] netlink: 14 bytes leftover after parsing attributes in process `syz.2.219'.
[   44.832331][ T4353] openvswitch: netlink: Message has 6 unknown bytes.
[   44.859180][   T50] bridge_slave_1: left allmulticast mode
[   44.859230][   T50] bridge_slave_1: left promiscuous mode
[   44.859382][   T50] bridge0: port 2(bridge_slave_1) entered disabled state
[   44.867047][   T50] bridge_slave_0: left allmulticast mode
[   44.867067][   T50] bridge_slave_0: left promiscuous mode
[   44.867260][   T50] bridge0: port 1(bridge_slave_0) entered disabled state
[   44.893635][ T4352] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   44.893702][ T4352] ext4 filesystem being mounted at /32/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   44.898774][ T4343] netlink: 40 bytes leftover after parsing attributes in process `syz.2.219'.
[   45.074373][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.109112][   T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   45.110874][   T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   45.112046][   T50] bond0 (unregistering): Released all slaves
[   45.123507][ T3024] 8021q: adding VLAN 0 to HW filter on device eth1
[   45.151661][   T29] kauditd_printk_skb: 677 callbacks suppressed
[   45.151678][   T29] audit: type=1400 audit(1790874789.469:2389): avc:  denied  { write } for  pid=4348 comm="syz.3.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   45.188034][   T29] audit: type=1400 audit(1790874789.489:2390): avc:  denied  { read append open } for  pid=4347 comm="syz.0.221" path="/32/bus/memory.events" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   45.252050][ T4376] FAULT_INJECTION: forcing a failure.
[   45.252050][ T4376] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   45.252080][ T4376] CPU: 0 UID: 0 PID: 4376 Comm: syz.1.223 Not tainted syzkaller #0 PREEMPT(lazy) 
[   45.252109][ T4376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   45.252124][ T4376] Call Trace:
[   45.252131][ T4376]  <TASK>
[   45.252139][ T4376]  __dump_stack+0x1d/0x30
[   45.252242][ T4376]  dump_stack_lvl+0x95/0xd0
[   45.252348][ T4376]  dump_stack+0x15/0x1b
[   45.252432][ T4376]  should_fail_ex+0x262/0x280
[   45.252463][ T4376]  should_fail+0xb/0x20
[   45.252499][ T4376]  should_fail_usercopy+0x1a/0x20
[   45.252532][ T4376]  _copy_to_user+0x20/0xa0
[   45.252602][ T4376]  bpf_test_finish+0x2f2/0x4c0
[   45.252712][ T4376]  ? ___migrate_enable+0x67/0x90
[   45.252736][ T4376]  bpf_prog_test_run_flow_dissector+0x2c9/0x360
[   45.252767][ T4376]  ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10
[   45.252797][ T4376]  bpf_prog_test_run+0x208/0x340
[   45.252830][ T4376]  __sys_bpf+0x8da/0xc30
[   45.252862][ T4376]  ? vfs_write+0x850/0x9a0
[   45.252936][ T4376]  __x64_sys_bpf+0x69/0x80
[   45.252964][ T4376]  x64_sys_call+0xf26/0x2550
[   45.252992][ T4376]  do_syscall_64+0x112/0x360
[   45.253030][ T4376]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   45.253051][ T4376] RIP: 0033:0x7fc1444de159
[   45.253070][ T4376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   45.253090][ T4376] RSP: 002b:00007fc142f37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   45.253114][ T4376] RAX: ffffffffffffffda RBX: 00007fc144765fa0 RCX: 00007fc1444de159
[   45.253191][ T4376] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a
[   45.253206][ T4376] RBP: 00007fc142f37090 R08: 0000000000000000 R09: 0000000000000000
[   45.253221][ T4376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   45.253296][ T4376] R13: 00007fc144766038 R14: 00007fc144765fa0 R15: 00007fff4eaeff48
[   45.253318][ T4376]  </TASK>
[   45.254376][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.325026][   T29] audit: type=1400 audit(1790874789.649:2391): avc:  denied  { mount } for  pid=4382 comm="syz.0.225" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[   45.366250][ T4383] loop2: detected capacity change from 0 to 512
[   45.366608][ T4383] EXT4-fs: inline encryption not supported
[   45.381624][ T4383] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[   45.407281][ T4383] EXT4-fs error (device loop2): ext4_iget_extra_inode:5210: inode #15: comm syz.2.224: corrupted in-inode xattr: e_value size too large
[   45.407313][ T4383] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   45.407453][ T4383] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.224: couldn't read orphan inode 15 (err -117)
[   45.407479][ T4383] loop2: lost filesystem error report for type 5 error -117
[   45.411564][    C0] EXT4-fs (loop2): error count since last fsck: 2
[   45.411581][    C0] EXT4-fs (loop2): initial error at time 1790874789: ext4_iget_extra_inode:5210: inode 15
[   45.411611][    C0] EXT4-fs (loop2): last error at time 1790874789: ext4_orphan_get:1408
[   45.436563][ T4386] random: crng reseeded on system resumption
[   45.437309][ T4386] FAULT_INJECTION: forcing a failure.
[   45.437309][ T4386] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[   45.437365][   T29] audit: type=1400 audit(1790874789.759:2392): avc:  denied  { write } for  pid=4382 comm="syz.0.225" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   45.437390][   T29] audit: type=1400 audit(1790874789.759:2393): avc:  denied  { open } for  pid=4382 comm="syz.0.225" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   45.437336][ T4386] CPU: 0 UID: 0 PID: 4386 Comm: syz.0.225 Not tainted syzkaller #0 PREEMPT(lazy) 
[   45.437421][ T4386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   45.437434][ T4386] Call Trace:
[   45.437441][ T4386]  <TASK>
[   45.437450][ T4386]  __dump_stack+0x1d/0x30
[   45.437479][ T4386]  dump_stack_lvl+0x95/0xd0
[   45.437538][ T4386]  dump_stack+0x15/0x1b
[   45.437577][ T4386]  should_fail_ex+0x262/0x280
[   45.437603][ T4386]  should_fail_alloc_page+0xf2/0x100
[   45.437773][ T4386]  __alloc_frozen_pages_noprof+0x157/0x400
[   45.437801][ T4386]  alloc_pages_mpol+0xaf/0x1d0
[   45.437828][ T4386]  alloc_pages_noprof+0x94/0x140
[   45.437879][ T4386]  get_zeroed_page_noprof+0x1a/0x40
[   45.437902][ T4386]  get_image_page+0x2b/0x420
[   45.437928][ T4386]  memory_bm_create+0x94f/0x1440
[   45.438012][ T4386]  create_basic_memory_bitmaps+0xa6/0x8e0
[   45.438111][ T4386]  snapshot_open+0x1b4/0x280
[   45.438172][ T4386]  ? __pfx_snapshot_open+0x10/0x10
[   45.438230][ T4386]  misc_open+0x1df/0x220
[   45.438262][ T4386]  chrdev_open+0x2eb/0x3a0
[   45.438346][ T4386]  do_dentry_open+0x49f/0xa60
[   45.438371][ T4386]  ? __pfx_chrdev_open+0x10/0x10
[   45.438398][ T4386]  vfs_open+0x37/0x1e0
[   45.438424][ T4386]  path_openat+0xc01/0x10d0
[   45.438470][ T4386]  do_file_open+0x16c/0x290
[   45.438583][ T4386]  do_sys_openat2+0xa0/0x130
[   45.438612][ T4386]  __x64_sys_openat+0xf2/0x120
[   45.438641][ T4386]  x64_sys_call+0x1f72/0x2550
[   45.438676][ T4386]  do_syscall_64+0x112/0x360
[   45.438722][ T4386]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   45.438765][ T4386] RIP: 0033:0x7f45a71ee159
[   45.438783][ T4386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   45.438803][ T4386] RSP: 002b:00007f45a5c47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[   45.438825][ T4386] RAX: ffffffffffffffda RBX: 00007f45a7475fa0 RCX: 00007f45a71ee159
[   45.438841][ T4386] RDX: 0000000000000001 RSI: 0000200000000080 RDI: ffffffffffffff9c
[   45.438856][ T4386] RBP: 00007f45a728506b R08: 0000000000000000 R09: 0000000000000000
[   45.438904][ T4386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   45.438919][ T4386] R13: 00007f45a7476038 R14: 00007f45a7475fa0 R15: 00007ffc409d20d8
[   45.438940][ T4386]  </TASK>
[   45.445724][   T50] hsr_slave_0: left promiscuous mode
[   45.453471][   T29] audit: type=1326 audit(1790874789.769:2394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4382 comm="syz.0.225" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45a71ee159 code=0x7ffc0000
[   45.453511][   T29] audit: type=1326 audit(1790874789.769:2395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4382 comm="syz.0.225" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45a71ee159 code=0x7ffc0000
[   45.453534][   T29] audit: type=1326 audit(1790874789.769:2396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4382 comm="syz.0.225" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45a71ee159 code=0x7ffc0000
[   45.453602][   T29] audit: type=1326 audit(1790874789.769:2397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4382 comm="syz.0.225" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7f45a71ee159 code=0x7ffc0000
[   45.453681][   T29] audit: type=1326 audit(1790874789.769:2398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4382 comm="syz.0.225" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45a71ee159 code=0x7ffc0000
[   45.454134][   T50] hsr_slave_1: left promiscuous mode
[   45.454532][   T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   45.454546][   T50] batman_adv: batadv0: Removing interface: batadv_slave_0
[   45.464166][ T4383] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   45.464827][ T4383] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.493586][   T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   45.493604][   T50] batman_adv: batadv0: Removing interface: batadv_slave_1
[   45.509591][ T4396] FAULT_INJECTION: forcing a failure.
[   45.509591][ T4396] name failslab, interval 1, probability 0, space 0, times 0
[   45.509622][ T4396] CPU: 0 UID: 0 PID: 4396 Comm: syz.1.226 Not tainted syzkaller #0 PREEMPT(lazy) 
[   45.509702][ T4396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   45.509715][ T4396] Call Trace:
[   45.509722][ T4396]  <TASK>
[   45.509730][ T4396]  __dump_stack+0x1d/0x30
[   45.509757][ T4396]  dump_stack_lvl+0x95/0xd0
[   45.509832][ T4396]  dump_stack+0x15/0x1b
[   45.509854][ T4396]  should_fail_ex+0x262/0x280
[   45.509949][ T4396]  ? do_getname+0x2e/0x1c0
[   45.509972][ T4396]  should_failslab+0x8c/0xb0
[   45.510084][ T4396]  kmem_cache_alloc_noprof+0x7c/0x3f0
[   45.510117][ T4396]  ? do_getname+0x2e/0x1c0
[   45.510159][ T4396]  do_getname+0x2e/0x1c0
[   45.510183][ T4396]  getname_flags+0x1d/0x30
[   45.510205][ T4396]  do_sys_openat2+0x6c/0x130
[   45.510233][ T4396]  __x64_sys_openat+0xf2/0x120
[   45.510303][ T4396]  x64_sys_call+0x1f72/0x2550
[   45.510330][ T4396]  do_syscall_64+0x112/0x360
[   45.510356][ T4396]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   45.510489][ T4396] RIP: 0033:0x7fc1444de159
[   45.510507][ T4396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   45.510525][ T4396] RSP: 002b:00007fc142f37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[   45.510547][ T4396] RAX: ffffffffffffffda RBX: 00007fc144765fa0 RCX: 00007fc1444de159
[   45.510563][ T4396] RDX: 0000000000002880 RSI: 0000200000000040 RDI: ffffffffffffff9c
[   45.510578][ T4396] RBP: 00007fc14457506b R08: 0000000000000000 R09: 0000000000000000
[   45.510612][ T4396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   45.510675][ T4396] R13: 00007fc144766038 R14: 00007fc144765fa0 R15: 00007fff4eaeff48
[   45.510696][ T4396]  </TASK>
[   45.515075][   T50] veth1_macvtap: left promiscuous mode
[   45.515149][   T50] veth0_macvtap: left promiscuous mode
[   45.515192][   T50] veth1_vlan: left promiscuous mode
[   45.515225][   T50] veth0_vlan: left promiscuous mode
[   45.521249][ T4396] FAULT_INJECTION: forcing a failure.
[   45.521249][ T4396] name fail_futex, interval 1, probability 0, space 0, times 1
[   45.521276][ T4396] CPU: 0 UID: 0 PID: 4396 Comm: syz.1.226 Not tainted syzkaller #0 PREEMPT(lazy) 
[   45.521303][ T4396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   45.521316][ T4396] Call Trace:
[   45.521323][ T4396]  <TASK>
[   45.521380][ T4396]  __dump_stack+0x1d/0x30
[   45.521406][ T4396]  dump_stack_lvl+0x95/0xd0
[   45.521429][ T4396]  dump_stack+0x15/0x1b
[   45.521451][ T4396]  should_fail_ex+0x262/0x280
[   45.521502][ T4396]  should_fail+0xb/0x20
[   45.521529][ T4396]  get_futex_key+0x12d/0xb10
[   45.521638][ T4396]  futex_wake+0x89/0x400
[   45.521658][ T4396]  do_futex+0x3f8/0x460
[   45.521690][ T4396]  __se_sys_futex+0x2f6/0x370
[   45.521725][ T4396]  __x64_sys_futex+0x78/0x90
[   45.521786][ T4396]  x64_sys_call+0x22e2/0x2550
[   45.521813][ T4396]  do_syscall_64+0x112/0x360
[   45.521871][ T4396]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   45.521895][ T4396] RIP: 0033:0x7fc1444de159
[   45.521912][ T4396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   45.521984][ T4396] RSP: 002b:00007fc142f370e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[   45.522005][ T4396] RAX: ffffffffffffffda RBX: 00007fc144765fa8 RCX: 00007fc1444de159
[   45.522021][ T4396] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc144765fac
[   45.522035][ T4396] RBP: 00007fc144765fa0 R08: 3fffffffffffffff R09: 0000000000000000
[   45.522050][ T4396] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[   45.522064][ T4396] R13: 00007fc144766038 R14: 00007fff4eaefe60 R15: 00007fff4eaeff48
[   45.522127][ T4396]  </TASK>
[   45.782830][   T50] team0 (unregistering): Port device team_slave_1 removed
[   45.789886][   T50] team0 (unregistering): Port device team_slave_0 removed
[   46.187601][ T3024] 8021q: adding VLAN 0 to HW filter on device eth2
[   46.276849][ T4332] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.276882][ T4332] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.276963][ T4332] bridge_slave_0: entered allmulticast mode
[   46.284668][ T4332] bridge_slave_0: entered promiscuous mode
[   46.285708][ T4332] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.294814][ T4332] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.294898][ T4332] bridge_slave_1: entered allmulticast mode
[   46.295424][ T4332] bridge_slave_1: entered promiscuous mode
[   46.357139][ T4332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.372075][ T4332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.384094][ T4421] loop1: detected capacity change from 0 to 1024
[   46.386386][ T4421] EXT4-fs: Ignoring removed bh option
[   46.401036][ T4421] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   46.402572][ T4421] EXT4-fs error (device loop1): ext4_map_blocks:832: inode #3: block 1: comm syz.1.231: lblock 1 mapped to illegal pblock 1 (length 1)
[   46.402606][ T4421] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   46.402696][ T4421] EXT4-fs (loop1): Remounting filesystem read-only
[   46.402739][ T4421] EXT4-fs (loop1): 1 orphan inode deleted
[   46.403316][ T4421] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   46.438048][ T4332] team0: Port device team_slave_0 added
[   46.440863][ T4332] team0: Port device team_slave_1 added
[   46.476033][ T4332] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.476048][ T4332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   46.476115][ T4332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.484159][ T4332] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.484172][ T4332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   46.484216][ T4332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.589017][ T4332] hsr_slave_0: entered promiscuous mode
[   46.589452][ T4332] hsr_slave_1: entered promiscuous mode
[   46.589687][ T4332] debugfs: 'hsr0' already exists in 'hsr'
[   46.589700][ T4332] Cannot create hsr debugfs directory
[   46.757891][   T50] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   46.801959][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.837611][   T50] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   46.842056][ T3024] 8021q: adding VLAN 0 to HW filter on device eth3
[   46.851820][ T4459] capability: warning: `syz.1.234' uses 32-bit capabilities (legacy support in use)
[   46.925910][   T50] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   47.029873][   T50] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   47.081990][ T4332] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   47.087679][ T4332] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   47.088098][ T4420] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.088131][ T4420] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.088193][ T4420] bridge_slave_0: entered allmulticast mode
[   47.088670][ T4420] bridge_slave_0: entered promiscuous mode
[   47.097537][ T4420] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.097569][ T4420] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.097701][ T4420] bridge_slave_1: entered allmulticast mode
[   47.098057][ T4420] bridge_slave_1: entered promiscuous mode
[   47.109507][ T4332] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   47.115709][ T4332] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   47.116286][ T4332] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   47.120127][ T4332] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   47.139675][ T4420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.140208][ T4332] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   47.148437][ T4332] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   47.158478][ T4420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.203907][   T50] bridge_slave_1: left allmulticast mode
[   47.203929][   T50] bridge_slave_1: left promiscuous mode
[   47.204040][   T50] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.210499][   T50] bridge_slave_0: left allmulticast mode
[   47.210521][   T50] bridge_slave_0: left promiscuous mode
[   47.210607][   T50] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.228607][ T4494] loop1: detected capacity change from 0 to 512
[   47.242641][ T4494] EXT4-fs: inline encryption not supported
[   47.265213][ T4494] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[   47.272270][ T4494] EXT4-fs error (device loop1): ext4_iget_extra_inode:5210: inode #15: comm syz.1.237: corrupted in-inode xattr: e_value size too large
[   47.272351][ T4494] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   47.272483][ T4494] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.237: couldn't read orphan inode 15 (err -117)
[   47.272510][ T4494] loop1: lost filesystem error report for type 5 error -117
[   47.273079][ T4494] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   47.362475][ T4498] loop2: detected capacity change from 0 to 8192
[   47.393891][   T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   47.395903][ T4498]  loop2: p1[EZD] p2 p3 p4
[   47.396431][ T4498] loop2: p2 size 14011136 extends beyond EOD, truncated
[   47.396928][ T4498] loop2: p3 start 150994944 is beyond EOD, truncated
[   47.396946][ T4498] loop2: p4 size 4160782088 extends beyond EOD, truncated
[   47.447372][   T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   47.448542][   T50] bond0 (unregistering): Released all slaves
[   47.468699][ T4420] team0: Port device team_slave_0 added
[   47.496542][ T3024] 8021q: adding VLAN 0 to HW filter on device eth4
[   47.500843][ T4420] team0: Port device team_slave_1 added
[   47.527730][   T50] hsr_slave_0: left promiscuous mode
[   47.529465][   T50] hsr_slave_1: left promiscuous mode
[   47.530030][   T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   47.530096][   T50] batman_adv: batadv0: Removing interface: batadv_slave_0
[   47.531047][   T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   47.531106][   T50] batman_adv: batadv0: Removing interface: batadv_slave_1
[   47.543119][   T50] veth1_macvtap: left promiscuous mode
[   47.543150][   T50] veth0_macvtap: left promiscuous mode
[   47.543245][   T50] veth1_vlan: left promiscuous mode
[   47.543332][   T50] veth0_vlan: left promiscuous mode
[   47.558081][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.768855][   T50] team0 (unregistering): Port device team_slave_1 removed
[   47.779021][   T50] team0 (unregistering): Port device team_slave_0 removed
[   47.829395][ T4420] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.829409][ T4420] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   47.829434][ T4420] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.887924][ T4420] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.887941][ T4420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   47.887972][ T4420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.996204][ T4332] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.999149][ T4420] hsr_slave_0: entered promiscuous mode
[   47.999611][ T4420] hsr_slave_1: entered promiscuous mode
[   48.014016][ T4332] 8021q: adding VLAN 0 to HW filter on device team0
[   48.031105][  T241] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.031138][  T241] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.041000][   T42] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.041032][   T42] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.093315][ T4525] loop2: detected capacity change from 0 to 512
[   48.096140][ T3024] 8021q: adding VLAN 0 to HW filter on device eth5
[   48.097431][ T4525] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   48.123685][ T4525] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   48.123771][ T4525] ext4 filesystem being mounted at /46/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   48.158067][ T4532] loop1: detected capacity change from 0 to 1024
[   48.158461][ T4532] EXT4-fs: Ignoring removed bh option
[   48.158831][ T4532] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   48.168384][ T4532] EXT4-fs error (device loop1): ext4_map_blocks:832: inode #3: block 1: comm syz.1.243: lblock 1 mapped to illegal pblock 1 (length 1)
[   48.168417][ T4532] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   48.173881][    C1] EXT4-fs (loop1): error count since last fsck: 1
[   48.173898][    C1] EXT4-fs (loop1): initial error at time 1790874792: ext4_map_blocks:832: inode 3: block 1
[   48.173959][    C1] EXT4-fs (loop1): last error at time 1790874792: ext4_map_blocks:832: inode 3: block 1
[   48.182865][ T4532] EXT4-fs (loop1): Remounting filesystem read-only
[   48.182957][ T4532] EXT4-fs (loop1): 1 orphan inode deleted
[   48.184626][ T4525] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm syz.2.242: bg 0: block 217: padding at end of block bitmap is not set
[   48.185861][ T4525] EXT4-fs (loop2): Remounting filesystem read-only
[   48.189103][ T4532] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   48.195565][ T4525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   48.195771][ T4525] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   48.343494][ T4420] netdevsim netdevsim6 netdevsim0: renamed from eth0
[   48.347740][ T4420] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   48.348424][ T4420] netdevsim netdevsim6 netdevsim1: renamed from eth1
[   48.362579][ T4420] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   48.363822][ T4420] netdevsim netdevsim6 netdevsim2: renamed from eth2
[   48.368804][ T4420] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   48.369859][ T4420] netdevsim netdevsim6 netdevsim3: renamed from eth3
[   48.376146][ T4420] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   48.404453][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.454363][ T4332] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.480052][ T4420] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.497250][ T4420] 8021q: adding VLAN 0 to HW filter on device team0
[   48.501061][ T3024] 8021q: adding VLAN 0 to HW filter on device eth6
[   48.505543][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.505631][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.512421][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.512457][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.617326][ T4572] loop3: detected capacity change from 0 to 512
[   48.619564][ T4572] EXT4-fs: inline encryption not supported
[   48.634172][ T4572] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[   48.644556][ T4572] EXT4-fs error (device loop3): ext4_iget_extra_inode:5210: inode #15: comm syz.3.246: corrupted in-inode xattr: e_value size too large
[   48.644589][ T4572] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   48.644787][ T4572] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.246: couldn't read orphan inode 15 (err -117)
[   48.644814][ T4572] loop3: lost filesystem error report for type 5 error -117
[   48.648249][ T4572] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   48.724363][ T4572] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.767792][ T4601] loop3: detected capacity change from 0 to 4096
[   48.785769][ T4601] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   48.844427][ T4332] veth0_vlan: entered promiscuous mode
[   48.859019][ T4332] veth1_vlan: entered promiscuous mode
[   48.860755][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.895524][ T4332] veth0_macvtap: entered promiscuous mode
[   48.904758][ T4420] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.909626][ T4332] veth1_macvtap: entered promiscuous mode
[   48.933577][ T4332] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.945467][ T4332] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.962251][   T42] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.962412][   T42] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.962447][   T42] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.962522][   T42] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.963871][ T4604] EXT4-fs: inline encryption not supported
[   48.986853][ T3024] 8021q: adding VLAN 0 to HW filter on device eth7
[   49.012435][ T4604] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[   49.015939][ T4604] EXT4-fs error (device loop1): ext4_iget_extra_inode:5210: inode #15: comm syz.1.248: corrupted in-inode xattr: e_value size too large
[   49.015970][ T4604] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   49.016226][ T4604] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.248: couldn't read orphan inode 15 (err -117)
[   49.016254][ T4604] loop1: lost filesystem error report for type 5 error -117
[   49.016857][ T4604] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   49.123480][ T4604] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.246983][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.323780][ T3024] 8021q: adding VLAN 0 to HW filter on device eth8
[   49.347666][ T4679] FAULT_INJECTION: forcing a failure.
[   49.347666][ T4679] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   49.347694][ T4679] CPU: 0 UID: 0 PID: 4679 Comm: syz.2.254 Not tainted syzkaller #0 PREEMPT(lazy) 
[   49.347764][ T4679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   49.347776][ T4679] Call Trace:
[   49.347782][ T4679]  <TASK>
[   49.347869][ T4679]  __dump_stack+0x1d/0x30
[   49.347897][ T4679]  dump_stack_lvl+0x95/0xd0
[   49.347918][ T4679]  dump_stack+0x15/0x1b
[   49.347937][ T4679]  should_fail_ex+0x262/0x280
[   49.347967][ T4679]  should_fail+0xb/0x20
[   49.347995][ T4679]  should_fail_usercopy+0x1a/0x20
[   49.348028][ T4679]  _copy_from_iter+0xcc/0xe70
[   49.348103][ T4679]  ? __rcu_read_unlock+0x4e/0x70
[   49.348183][ T4679]  packet_sendmsg+0x209f/0x32e0
[   49.348241][ T4679]  ? __rcu_read_unlock+0x4e/0x70
[   49.348271][ T4679]  ? avc_has_perm_noaudit+0xac/0x160
[   49.348378][ T4679]  ? avc_has_perm+0x101/0x190
[   49.348403][ T4679]  ? selinux_socket_sendmsg+0x101/0x410
[   49.348438][ T4679]  ? __pfx_packet_sendmsg+0x10/0x10
[   49.348531][ T4679]  __sys_sendto+0x411/0x470
[   49.348572][ T4679]  __x64_sys_sendto+0x76/0x90
[   49.348592][ T4679]  x64_sys_call+0x200c/0x2550
[   49.348622][ T4679]  do_syscall_64+0x112/0x360
[   49.348648][ T4679]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   49.348678][ T4679] RIP: 0033:0x7efd188be159
[   49.348736][ T4679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   49.348757][ T4679] RSP: 002b:00007efd17317028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[   49.348781][ T4679] RAX: ffffffffffffffda RBX: 00007efd18b45fa0 RCX: 00007efd188be159
[   49.348798][ T4679] RDX: 000000000000fce0 RSI: 00002000000002c0 RDI: 0000000000000003
[   49.348843][ T4679] RBP: 00007efd17317090 R08: 0000200000000140 R09: 0000000000000014
[   49.348886][ T4679] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001
[   49.348949][ T4679] R13: 00007efd18b46038 R14: 00007efd18b45fa0 R15: 00007ffd61a13cb8
[   49.348979][ T4679]  </TASK>
[   49.421926][ T4675] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   49.442138][ T4420] veth0_vlan: entered promiscuous mode
[   49.459036][ T4420] veth1_vlan: entered promiscuous mode
[   49.489133][ T4420] veth0_macvtap: entered promiscuous mode
[   49.494933][ T4420] veth1_macvtap: entered promiscuous mode
[   49.515663][ T4420] batman_adv: batadv0: Interface activated: batadv_slave_0
[   49.524276][ T4420] batman_adv: batadv0: Interface activated: batadv_slave_1
[   49.593132][   T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.593817][   T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.594289][   T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.598633][   T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.723483][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.830520][ T4705] set_capacity_and_notify: 2 callbacks suppressed
[   49.830532][ T4705] loop6: detected capacity change from 0 to 512
[   49.834287][ T4705] EXT4-fs: inline encryption not supported
[   49.844748][ T4705] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[   49.846299][ T4705] EXT4-fs error (device loop6): ext4_iget_extra_inode:5210: inode #15: comm syz.6.256: corrupted in-inode xattr: e_value size too large
[   49.846329][ T4705] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   49.846504][ T4705] EXT4-fs error (device loop6): ext4_orphan_get:1408: comm syz.6.256: couldn't read orphan inode 15 (err -117)
[   49.846539][ T4705] loop6: lost filesystem error report for type 5 error -117
[   49.847076][ T4705] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   49.847665][ T4705] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.956155][ T4711] syzkaller1: entered promiscuous mode
[   49.956286][ T4711] syzkaller1: entered allmulticast mode
[   50.001921][ T4716] loop6: detected capacity change from 0 to 8192
[   50.031497][ T4716]  loop6: p1[EZD] p2 p3 p4
[   50.032749][ T4716] loop6: p2 size 14011136 extends beyond EOD, truncated
[   50.033344][ T4716] loop6: p3 start 150994944 is beyond EOD, truncated
[   50.033373][ T4716] loop6: p4 size 4160782088 extends beyond EOD, truncated
[   50.155683][ T4719] loop6: detected capacity change from 0 to 512
[   50.156401][ T4719] EXT4-fs: inline encryption not supported
[   50.156842][ T4719] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[   50.165243][ T4719] EXT4-fs error (device loop6): ext4_iget_extra_inode:5210: inode #15: comm syz.6.260: corrupted in-inode xattr: e_value size too large
[   50.165276][ T4719] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   50.171053][ T4719] EXT4-fs error (device loop6): ext4_orphan_get:1408: comm syz.6.260: couldn't read orphan inode 15 (err -117)
[   50.171082][ T4719] loop6: lost filesystem error report for type 5 error -117
[   50.171242][    C1] EXT4-fs (loop6): error count since last fsck: 2
[   50.171258][    C1] EXT4-fs (loop6): initial error at time 1790874794: ext4_iget_extra_inode:5210: inode 15
[   50.171285][    C1] EXT4-fs (loop6): last error at time 1790874794: ext4_orphan_get:1408
[   50.173854][ T4719] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   50.174657][ T4719] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.299674][ T4727] sock: sock_set_timeout: `syz.6.263' (pid 4727) tries to set negative timeout
[   50.310011][   T29] kauditd_printk_skb: 279 callbacks suppressed
[   50.310027][   T29] audit: type=1400 audit(1790874794.619:2670): avc:  denied  { write } for  pid=4726 comm="syz.6.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   50.310090][   T29] audit: type=1400 audit(1790874794.619:2671): avc:  denied  { ioctl } for  pid=4726 comm="syz.6.263" path="socket:[9653]" dev="sockfs" ino=9653 ioctlcmd=0x5869 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   50.416025][ T4733] loop6: detected capacity change from 0 to 8192
[   50.441575][ T4733]  loop6: p1[EZD] p2 p3 p4
[   50.442425][ T4733] loop6: p2 size 14011136 extends beyond EOD, truncated
[   50.442928][ T4733] loop6: p3 start 150994944 is beyond EOD, truncated
[   50.442944][ T4733] loop6: p4 size 4160782088 extends beyond EOD, truncated
[   50.483365][ T4739] loop5: detected capacity change from 0 to 8192
[   50.521862][ T4739]  loop5: p1[EZD] p2 p3 p4
[   50.522919][ T4739] loop5: p2 size 14011136 extends beyond EOD, truncated
[   50.523345][ T4739] loop5: p3 start 150994944 is beyond EOD, truncated
[   50.523365][ T4739] loop5: p4 size 4160782088 extends beyond EOD, truncated
[   50.574807][   T29] audit: type=1400 audit(1790874794.889:2672): avc:  denied  { create } for  pid=4741 comm="syz.6.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   50.577794][   T29] audit: type=1400 audit(1790874794.889:2673): avc:  denied  { write } for  pid=4741 comm="syz.6.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   50.667913][   T29] audit: type=1400 audit(1790874794.979:2674): avc:  denied  { read write } for  pid=4745 comm="syz.5.270" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   50.667985][   T29] audit: type=1400 audit(1790874794.979:2675): avc:  denied  { open } for  pid=4745 comm="syz.5.270" path="/dev/input/event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   50.701087][   T29] audit: type=1326 audit(1790874795.009:2676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4741 comm="syz.6.269" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafbea4e159 code=0x7ffc0000
[   50.701229][   T29] audit: type=1326 audit(1790874795.009:2677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4741 comm="syz.6.269" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafbea4e159 code=0x7ffc0000
[   50.701256][   T29] audit: type=1326 audit(1790874795.009:2678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4741 comm="syz.6.269" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fafbea4e159 code=0x7ffc0000
[   50.738269][   T29] audit: type=1326 audit(1790874795.049:2679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4741 comm="syz.6.269" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafbea4e159 code=0x7ffc0000
[   50.897326][ T4750] loop6: detected capacity change from 0 to 512
[   50.916568][ T4750] EXT4-fs: inline encryption not supported
[   50.916947][ T4750] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[   50.918154][ T4750] EXT4-fs error (device loop6): ext4_iget_extra_inode:5210: inode #15: comm syz.6.271: corrupted in-inode xattr: e_value size too large
[   50.918185][ T4750] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   50.918369][ T4750] EXT4-fs error (device loop6): ext4_orphan_get:1408: comm syz.6.271: couldn't read orphan inode 15 (err -117)
[   50.918467][ T4750] loop6: lost filesystem error report for type 5 error -117
[   51.128967][ T4767] FAULT_INJECTION: forcing a failure.
[   51.128967][ T4767] name failslab, interval 1, probability 0, space 0, times 0
[   51.128999][ T4767] CPU: 0 UID: 0 PID: 4767 Comm: syz.6.276 Not tainted syzkaller #0 PREEMPT(lazy) 
[   51.129026][ T4767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   51.129039][ T4767] Call Trace:
[   51.129045][ T4767]  <TASK>
[   51.129052][ T4767]  __dump_stack+0x1d/0x30
[   51.129079][ T4767]  dump_stack_lvl+0x95/0xd0
[   51.129102][ T4767]  dump_stack+0x15/0x1b
[   51.129121][ T4767]  should_fail_ex+0x262/0x280
[   51.129149][ T4767]  ? vm_area_dup+0x33/0x300
[   51.129180][ T4767]  should_failslab+0x8c/0xb0
[   51.129213][ T4767]  kmem_cache_alloc_noprof+0x7c/0x3f0
[   51.129248][ T4767]  ? vm_area_dup+0x33/0x300
[   51.129278][ T4767]  vm_area_dup+0x33/0x300
[   51.129309][ T4767]  dup_mmap+0x4dc/0x10c0
[   51.129336][ T4767]  ? _raw_spin_lock_irqsave+0x58/0xb0
[   51.129365][ T4767]  ? __list_add_valid_or_report+0x38/0xe0
[   51.129406][ T4767]  copy_mm+0xf5/0x350
[   51.129432][ T4767]  copy_process+0x108a/0x2360
[   51.129464][ T4767]  kernel_clone+0x1c0/0x5f0
[   51.129492][ T4767]  __x64_sys_clone+0x143/0x180
[   51.129525][ T4767]  x64_sys_call+0x2479/0x2550
[   51.129551][ T4767]  do_syscall_64+0x112/0x360
[   51.129575][ T4767]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   51.129598][ T4767] RIP: 0033:0x7fafbea4e159
[   51.129615][ T4767] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   51.129635][ T4767] RSP: 002b:00007fafbd4a6fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[   51.129656][ T4767] RAX: ffffffffffffffda RBX: 00007fafbecd5fa0 RCX: 00007fafbea4e159
[   51.129671][ T4767] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020100000
[   51.129686][ T4767] RBP: 00007fafbd4a7090 R08: 0000000000000000 R09: 0000000000000000
[   51.129700][ T4767] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002
[   51.129714][ T4767] R13: 00007fafbecd6038 R14: 00007fafbecd5fa0 R15: 00007ffeef444158
[   51.129732][ T4767]  </TASK>
[   51.674744][ T4781] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[   52.150539][ T4651] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   52.248968][ T4794] loop3: detected capacity change from 0 to 512
[   52.262764][ T4794] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   52.318878][ T4792] loop1: detected capacity change from 0 to 512
[   52.323652][ T4792] EXT4-fs: inline encryption not supported
[   52.328724][ T4799] loop2: detected capacity change from 0 to 1024
[   52.335452][ T4792] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[   52.336813][ T4799] EXT4-fs: Ignoring removed bh option
[   52.338868][ T4792] EXT4-fs error (device loop1): ext4_iget_extra_inode:5210: inode #15: comm syz.1.284: corrupted in-inode xattr: e_value size too large
[   52.338897][ T4792] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   52.339917][ T4799] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   52.340200][ T4792] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.284: couldn't read orphan inode 15 (err -117)
[   52.340362][ T4792] loop1: lost filesystem error report for type 5 error -117
[   52.340715][    C0] EXT4-fs (loop1): error count since last fsck: 2
[   52.340734][    C0] EXT4-fs (loop1): initial error at time 1790874796: ext4_iget_extra_inode:5210: inode 15
[   52.340765][    C0] EXT4-fs (loop1): last error at time 1790874796: ext4_orphan_get:1408
[   52.355122][ T4799] EXT4-fs error (device loop2): ext4_map_blocks:832: inode #3: block 1: comm syz.2.285: lblock 1 mapped to illegal pblock 1 (length 1)
[   52.355165][ T4799] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   52.355251][ T4799] EXT4-fs (loop2): Remounting filesystem read-only
[   52.355344][ T4799] EXT4-fs (loop2): 1 orphan inode deleted
[   52.507301][ T4807] loop6: detected capacity change from 0 to 512
[   52.521816][ T4807] EXT4-fs error (device loop6): ext4_orphan_get:1403: inode #15: comm syz.6.287: inode has both inline data and extents flags
[   52.521846][ T4807] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   52.521922][ T4807] EXT4-fs error (device loop6): ext4_orphan_get:1408: comm syz.6.287: couldn't read orphan inode 15 (err -117)
[   52.521953][ T4807] loop6: lost filesystem error report for type 5 error -117
[   52.595389][ T4813] program syz.2.289 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   52.595414][ T4813] FAULT_INJECTION: forcing a failure.
[   52.595414][ T4813] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[   52.595441][ T4813] CPU: 0 UID: 0 PID: 4813 Comm: syz.2.289 Not tainted syzkaller #0 PREEMPT(lazy) 
[   52.595481][ T4813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   52.595494][ T4813] Call Trace:
[   52.595501][ T4813]  <TASK>
[   52.595575][ T4813]  __dump_stack+0x1d/0x30
[   52.595598][ T4813]  dump_stack_lvl+0x95/0xd0
[   52.595676][ T4813]  dump_stack+0x15/0x1b
[   52.595695][ T4813]  should_fail_ex+0x262/0x280
[   52.595720][ T4813]  should_fail_alloc_page+0xf2/0x100
[   52.595755][ T4813]  __alloc_frozen_pages_noprof+0x157/0x400
[   52.595818][ T4813]  alloc_pages_mpol+0xaf/0x1d0
[   52.595869][ T4813]  alloc_pages_noprof+0x94/0x140
[   52.595914][ T4813]  blk_rq_map_kern+0x232/0x510
[   52.595935][ T4813]  ? capable+0x81/0xb0
[   52.596004][ T4813]  scsi_ioctl+0x1575/0x1790
[   52.596052][ T4813]  ? avc_has_perm+0x101/0x190
[   52.596112][ T4813]  ? __file_has_perm+0x3d9/0x430
[   52.596171][ T4813]  ? do_vfs_ioctl+0x848/0xe50
[   52.596281][ T4813]  sg_ioctl+0xeae/0x1330
[   52.596320][ T4813]  ? __pfx_sg_ioctl+0x10/0x10
[   52.596385][ T4813]  __se_sys_ioctl+0xce/0x140
[   52.596438][ T4813]  __x64_sys_ioctl+0x43/0x50
[   52.596467][ T4813]  x64_sys_call+0x239d/0x2550
[   52.596494][ T4813]  do_syscall_64+0x112/0x360
[   52.596555][ T4813]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   52.596580][ T4813] RIP: 0033:0x7efd188be159
[   52.596596][ T4813] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   52.596614][ T4813] RSP: 002b:00007efd17317028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   52.596633][ T4813] RAX: ffffffffffffffda RBX: 00007efd18b45fa0 RCX: 00007efd188be159
[   52.596803][ T4813] RDX: 0000200000000040 RSI: 0000000000000001 RDI: 0000000000000003
[   52.596852][ T4813] RBP: 00007efd17317090 R08: 0000000000000000 R09: 0000000000000000
[   52.596868][ T4813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   52.596883][ T4813] R13: 00007efd18b46038 R14: 00007efd18b45fa0 R15: 00007ffd61a13cb8
[   52.596899][ T4813]  </TASK>
[   52.682936][ T4817] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   52.701931][ T4817] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   52.710110][ T4817] EXT4-fs error (device loop5): ext4_validate_block_bitmap:445: comm syz.5.290: bg 0: block 217: padding at end of block bitmap is not set
[   52.710239][ T4817] EXT4-fs (loop5): Remounting filesystem read-only
[   52.712050][ T4817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   52.712183][ T4817] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   53.186081][ T4828]  loop1: p1[EZD] p2 p3 p4
[   53.188055][ T4828] loop1: p2 size 14011136 extends beyond EOD, truncated
[   53.188445][ T4828] loop1: p3 start 150994944 is beyond EOD, truncated
[   53.188465][ T4828] loop1: p4 size 4160782088 extends beyond EOD, truncated
[   53.221437][ T4836] EXT4-fs: Ignoring removed bh option
[   53.247747][ T4836] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   53.253600][ T4836] EXT4-fs error (device loop2): ext4_map_blocks:832: inode #3: block 1: comm syz.2.299: lblock 1 mapped to illegal pblock 1 (length 1)
[   53.253641][ T4836] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   53.254012][ T4836] EXT4-fs (loop2): Remounting filesystem read-only
[   53.254058][ T4836] EXT4-fs (loop2): 1 orphan inode deleted
[   53.280143][ T4832] EXT4-fs: inline encryption not supported
[   53.291758][ T4832] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[   53.301082][ T4832] EXT4-fs error (device loop3): ext4_iget_extra_inode:5210: inode #15: comm syz.3.297: corrupted in-inode xattr: e_value size too large
[   53.301189][ T4832] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   53.302013][ T4832] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.297: couldn't read orphan inode 15 (err -117)
[   53.302040][ T4832] loop3: lost filesystem error report for type 5 error -117
[   53.452791][ T4846] netlink: 14 bytes leftover after parsing attributes in process `syz.6.300'.
[   53.452817][ T4846] openvswitch: netlink: Message has 6 unknown bytes.
[   53.458031][ T4846] netlink: 40 bytes leftover after parsing attributes in process `syz.6.300'.
[   53.499093][ T4854] FAULT_INJECTION: forcing a failure.
[   53.499093][ T4854] name failslab, interval 1, probability 0, space 0, times 0
[   53.499120][ T4854] CPU: 1 UID: 0 PID: 4854 Comm: syz.2.302 Not tainted syzkaller #0 PREEMPT(lazy) 
[   53.499177][ T4854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   53.499190][ T4854] Call Trace:
[   53.499196][ T4854]  <TASK>
[   53.499230][ T4854]  __dump_stack+0x1d/0x30
[   53.499258][ T4854]  dump_stack_lvl+0x95/0xd0
[   53.499284][ T4854]  dump_stack+0x15/0x1b
[   53.499319][ T4854]  should_fail_ex+0x262/0x280
[   53.499350][ T4854]  ? dup_task_struct+0x5a/0x750
[   53.499373][ T4854]  should_failslab+0x8c/0xb0
[   53.499404][ T4854]  kmem_cache_alloc_node_noprof+0x82/0x400
[   53.499460][ T4854]  ? dup_task_struct+0x5a/0x750
[   53.499484][ T4854]  dup_task_struct+0x5a/0x750
[   53.499550][ T4854]  copy_process+0x5a3/0x2360
[   53.499579][ T4854]  ? futex_wait+0x18f/0x1c0
[   53.499606][ T4854]  kernel_clone+0x1c0/0x5f0
[   53.499642][ T4854]  ? do_futex+0x391/0x460
[   53.499732][ T4854]  __x64_sys_clone+0x143/0x180
[   53.499785][ T4854]  x64_sys_call+0x2479/0x2550
[   53.499882][ T4854]  do_syscall_64+0x112/0x360
[   53.499955][ T4854]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   53.500025][ T4854] RIP: 0033:0x7efd188be159
[   53.500040][ T4854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   53.500058][ T4854] RSP: 002b:00007efd17316fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[   53.500077][ T4854] RAX: ffffffffffffffda RBX: 00007efd18b45fa0 RCX: 00007efd188be159
[   53.500094][ T4854] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000200000
[   53.500183][ T4854] RBP: 00007efd1895506b R08: 0000000000000000 R09: 0000000000000000
[   53.500196][ T4854] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[   53.500210][ T4854] R13: 00007efd18b46038 R14: 00007efd18b45fa0 R15: 00007ffd61a13cb8
[   53.500232][ T4854]  </TASK>
[   53.702989][ T4887] netlink: 8 bytes leftover after parsing attributes in process `syz.6.309'.
[   53.805787][ T4900] FAULT_INJECTION: forcing a failure.
[   53.805787][ T4900] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   53.805816][ T4900] CPU: 1 UID: 0 PID: 4900 Comm: syz.6.313 Not tainted syzkaller #0 PREEMPT(lazy) 
[   53.805844][ T4900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   53.805875][ T4900] Call Trace:
[   53.805882][ T4900]  <TASK>
[   53.805890][ T4900]  __dump_stack+0x1d/0x30
[   53.805965][ T4900]  dump_stack_lvl+0x95/0xd0
[   53.805991][ T4900]  dump_stack+0x15/0x1b
[   53.806015][ T4900]  should_fail_ex+0x262/0x280
[   53.806105][ T4900]  should_fail+0xb/0x20
[   53.806131][ T4900]  should_fail_usercopy+0x1a/0x20
[   53.806162][ T4900]  _copy_from_iter+0xcc/0xe70
[   53.806258][ T4900]  ? __alloc_skb+0x516/0x6f0
[   53.806336][ T4900]  ? __alloc_skb+0x209/0x6f0
[   53.806358][ T4900]  netlink_sendmsg+0x4a4/0x6f0
[   53.806443][ T4900]  ? __pfx_netlink_sendmsg+0x10/0x10
[   53.806466][ T4900]  ____sys_sendmsg+0x532/0x580
[   53.806513][ T4900]  ___sys_sendmsg+0x195/0x1e0
[   53.806545][ T4900]  __x64_sys_sendmsg+0xd4/0x160
[   53.806569][ T4900]  x64_sys_call+0x22ab/0x2550
[   53.806593][ T4900]  do_syscall_64+0x112/0x360
[   53.806651][ T4900]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   53.806675][ T4900] RIP: 0033:0x7fafbea4e159
[   53.806694][ T4900] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   53.806714][ T4900] RSP: 002b:00007fafbd4a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   53.806737][ T4900] RAX: ffffffffffffffda RBX: 00007fafbecd5fa0 RCX: 00007fafbea4e159
[   53.806816][ T4900] RDX: 0000000000040880 RSI: 0000200000000180 RDI: 0000000000000003
[   53.806829][ T4900] RBP: 00007fafbd4a7090 R08: 0000000000000000 R09: 0000000000000000
[   53.806843][ T4900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   53.806902][ T4900] R13: 00007fafbecd6038 R14: 00007fafbecd5fa0 R15: 00007ffeef444158
[   53.806920][ T4900]  </TASK>
[   54.036314][ T4923] syzkaller0: entered promiscuous mode
[   54.036409][ T4923] syzkaller0: entered allmulticast mode
[   54.147817][ T4929] EXT4-fs: inline encryption not supported
[   54.170186][ T4927] netlink: 14 bytes leftover after parsing attributes in process `syz.2.318'.
[   54.170218][ T4927] openvswitch: netlink: Message has 6 unknown bytes.
[   54.196640][ T4929] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[   54.209698][ T4929] EXT4-fs error (device loop1): ext4_iget_extra_inode:5210: inode #15: comm syz.1.316: corrupted in-inode xattr: e_value size too large
[   54.209816][ T4929] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   54.210578][    C1] EXT4-fs (loop1): error count since last fsck: 1
[   54.210827][    C1] EXT4-fs (loop1): initial error at time 1790874798: ext4_iget_extra_inode:5210: inode 15
[   54.210948][    C1] EXT4-fs (loop1): last error at time 1790874798: ext4_iget_extra_inode:5210: inode 15
[   54.212812][ T4929] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.316: couldn't read orphan inode 15 (err -117)
[   54.212841][ T4929] loop1: lost filesystem error report for type 5 error -117
[   54.223090][ T4927] netlink: 40 bytes leftover after parsing attributes in process `syz.2.318'.
[   54.261346][ T4939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   54.263060][ T4939] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   54.468942][ T4944] EXT4-fs: Ignoring removed orlov option
[   54.469019][ T4944] EXT4-fs: Ignoring removed orlov option
[   54.567153][  T241] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x75
[   54.595757][ T4948] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   54.737285][ T4958]  loop1: p1[EZD] p2 p3 p4
[   54.738045][ T4958] loop1: p2 size 14011136 extends beyond EOD, truncated
[   54.738625][ T4958] loop1: p3 start 150994944 is beyond EOD, truncated
[   54.738643][ T4958] loop1: p4 size 4160782088 extends beyond EOD, truncated
[   54.741853][ T2985]  loop1: p1[EZD] p2 p3 p4
[   54.743037][ T2985] loop1: p2 size 14011136 extends beyond EOD, truncated
[   54.751838][ T2985] loop1: p3 start 150994944 is beyond EOD, truncated
[   54.751858][ T2985] loop1: p4 size 4160782088 extends beyond EOD, truncated
[   54.797325][ T4961] EXT4-fs (loop2): 1 truncate cleaned up
[   55.046776][ T4981] netlink: 8 bytes leftover after parsing attributes in process `syz.5.330'.
[   55.046793][ T4981] netlink: 36 bytes leftover after parsing attributes in process `syz.5.330'.
[   55.049820][ T4983] netlink: 60 bytes leftover after parsing attributes in process `syz.1.331'.
[   55.145506][ T4991] netlink: 14 bytes leftover after parsing attributes in process `syz.2.334'.
[   55.145531][ T4991] openvswitch: netlink: Message has 6 unknown bytes.
[   55.201602][ T4991] netlink: 40 bytes leftover after parsing attributes in process `syz.2.334'.
[   55.295021][ T5000] set_capacity_and_notify: 8 callbacks suppressed
[   55.295037][ T5000] loop6: detected capacity change from 0 to 512
[   55.315204][ T4998] loop1: detected capacity change from 0 to 512
[   55.316013][ T4998] EXT4-fs: inline encryption not supported
[   55.318339][ T5000] EXT4-fs: inline encryption not supported
[   55.318686][ T5000] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[   55.320805][ T5000] EXT4-fs error (device loop6): ext4_iget_extra_inode:5210: inode #15: comm syz.6.335: corrupted in-inode xattr: e_value size too large
[   55.320841][ T5000] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   55.320979][ T5000] EXT4-fs error (device loop6): ext4_orphan_get:1408: comm syz.6.335: couldn't read orphan inode 15 (err -117)
[   55.321076][ T5000] loop6: lost filesystem error report for type 5 error -117
[   55.335629][ T4998] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[   55.338359][ T4998] EXT4-fs error (device loop1): ext4_iget_extra_inode:5210: inode #15: comm syz.1.333: corrupted in-inode xattr: e_value size too large
[   55.338436][ T4998] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   55.338541][ T4998] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.333: couldn't read orphan inode 15 (err -117)
[   55.338622][ T4998] loop1: lost filesystem error report for type 5 error -117
[   55.362617][   T29] kauditd_printk_skb: 235 callbacks suppressed
[   55.362633][   T29] audit: type=1400 audit(1790874799.680:2907): avc:  denied  { relabelfrom } for  pid=5003 comm="syz.2.337" name="NETLINK" dev="sockfs" ino=10512 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   55.362701][   T29] audit: type=1400 audit(1790874799.680:2908): avc:  denied  { relabelto } for  pid=5003 comm="syz.2.337" name="NETLINK" dev="sockfs" ino=10512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1
[   55.366994][   T29] audit: type=1400 audit(1790874799.680:2909): avc:  denied  { ioctl } for  pid=5003 comm="syz.2.337" path="socket:[10512]" dev="sockfs" ino=10512 ioctlcmd=0xae6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=sock_file permissive=1
[   55.529165][ T5009] loop5: detected capacity change from 0 to 512
[   55.548262][ T5009] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   55.557007][ T5009] EXT4-fs (loop5): 1 truncate cleaned up
[   55.631997][   T29] audit: type=1400 audit(1790874799.950:2910): avc:  denied  { read } for  pid=5014 comm="syz.1.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   55.661638][   T29] audit: type=1400 audit(1790874799.980:2911): avc:  denied  { write } for  pid=5008 comm="syz.5.338" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   55.665154][   T29] audit: type=1400 audit(1790874799.980:2912): avc:  denied  { write } for  pid=5008 comm="syz.5.338" path="/17/bus/bus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   55.665746][   T29] audit: type=1400 audit(1790874799.980:2913): avc:  denied  { ioctl } for  pid=5008 comm="syz.5.338" path="/dev/uhid" dev="devtmpfs" ino=250 ioctlcmd=0x5875 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   55.701920][   T29] audit: type=1400 audit(1790874800.000:2914): avc:  denied  { write } for  pid=5008 comm="syz.5.338" name="usbmon9" dev="devtmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   55.800779][   T29] audit: type=1400 audit(1790874800.110:2915): avc:  denied  { mount } for  pid=5014 comm="syz.1.340" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[   55.815343][   T29] audit: type=1400 audit(1790874800.120:2916): avc:  denied  { write } for  pid=5014 comm="syz.1.340" name="kmsg" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1
[   55.822224][ T5020] p¿
[   55.862885][ T5023] loop6: detected capacity change from 0 to 8192
[   55.901623][ T5023]  loop6: p1[EZD] p2 p3 p4
[   55.902228][ T5023] loop6: p2 size 14011136 extends beyond EOD, truncated
[   55.903026][ T5023] loop6: p3 start 150994944 is beyond EOD, truncated
[   55.903082][ T5023] loop6: p4 size 4160782088 extends beyond EOD, truncated
[   55.998808][ T5018] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[   56.102055][ T5028] FAULT_INJECTION: forcing a failure.
[   56.102055][ T5028] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[   56.102085][ T5028] CPU: 0 UID: 0 PID: 5028 Comm: syz.5.343 Not tainted syzkaller #0 PREEMPT(lazy) 
[   56.102162][ T5028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   56.102174][ T5028] Call Trace:
[   56.102181][ T5028]  <TASK>
[   56.102189][ T5028]  __dump_stack+0x1d/0x30
[   56.102218][ T5028]  dump_stack_lvl+0x95/0xd0
[   56.102244][ T5028]  dump_stack+0x15/0x1b
[   56.102346][ T5028]  should_fail_ex+0x262/0x280
[   56.102384][ T5028]  should_fail_alloc_page+0xf2/0x100
[   56.102477][ T5028]  __alloc_frozen_pages_noprof+0x157/0x400
[   56.102510][ T5028]  alloc_pages_mpol+0xaf/0x1d0
[   56.102537][ T5028]  alloc_migration_target_by_mpol+0x11b/0x2a0
[   56.102581][ T5028]  migrate_pages_batch+0x371/0x1c20
[   56.102606][ T5028]  ? __pfx_alloc_migration_target_by_mpol+0x10/0x10
[   56.102643][ T5028]  ? __walk_page_range+0x323/0x340
[   56.102734][ T5028]  ? __pfx_queue_pages_test_walk+0x10/0x10
[   56.102934][ T5028]  ? find_vma+0x6c/0xa0
[   56.103035][ T5028]  migrate_pages+0x1073/0x1890
[   56.103056][ T5028]  ? __pfx_alloc_migration_target_by_mpol+0x10/0x10
[   56.103084][ T5028]  ? mas_next_slot+0x833/0x880
[   56.103187][ T5028]  ? mbind_range+0x169/0x430
[   56.103219][ T5028]  __se_sys_mbind+0xc9c/0xdd0
[   56.103249][ T5028]  __x64_sys_mbind+0x78/0x90
[   56.103273][ T5028]  x64_sys_call+0x1d78/0x2550
[   56.103364][ T5028]  do_syscall_64+0x112/0x360
[   56.103394][ T5028]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   56.103420][ T5028] RIP: 0033:0x7f239a26e159
[   56.103438][ T5028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   56.103483][ T5028] RSP: 002b:00007f2398cc7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed
[   56.103506][ T5028] RAX: ffffffffffffffda RBX: 00007f239a4f5fa0 RCX: 00007f239a26e159
[   56.103529][ T5028] RDX: 0000000000008000 RSI: 0000000000004000 RDI: 00002000005b4000
[   56.103545][ T5028] RBP: 00007f2398cc7090 R08: 0000000000000009 R09: 0000000000000003
[   56.103559][ T5028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   56.103574][ T5028] R13: 00007f239a4f6038 R14: 00007f239a4f5fa0 R15: 00007ffc06b607c8
[   56.103595][ T5028]  </TASK>
[   56.401436][ T5044] No such timeout policy "syz1"
[   56.451420][ T5047] loop6: detected capacity change from 0 to 1024
[   56.456484][ T5047] EXT4-fs: Ignoring removed bh option
[   56.462343][ T5047] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   56.467531][ T5047] EXT4-fs error (device loop6): ext4_map_blocks:832: inode #3: block 1: comm syz.6.346: lblock 1 mapped to illegal pblock 1 (length 1)
[   56.467567][ T5047] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   56.467639][ T5047] EXT4-fs (loop6): Remounting filesystem read-only
[   56.467680][ T5047] EXT4-fs (loop6): 1 orphan inode deleted
[   56.584809][ T5044] loop5: detected capacity change from 0 to 512
[   56.622753][ T5044] EXT4-fs: Ignoring removed nomblk_io_submit option
[   56.622982][ T5044] EXT4-fs: Ignoring removed mblk_io_submit option
[   56.623643][ T5044] EXT4-fs: Ignoring removed nobh option
[   56.652961][ T5044] EXT4-fs error (device loop5): ext4_iget_extra_inode:5210: inode #15: comm syz.5.347: corrupted in-inode xattr: e_value size too large
[   56.653082][ T5044] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   56.653580][ T5044] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.347: couldn't read orphan inode 15 (err -117)
[   56.653621][ T5044] loop5: lost filesystem error report for type 5 error -117
[   56.712288][ T5052] loop3: detected capacity change from 0 to 512
[   56.714485][ T5052] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   56.738791][ T5054] openvswitch: netlink: Message has 6 unknown bytes.
[   56.742986][ T5052] ext4 filesystem being mounted at /57/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   56.757580][ T5052] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm syz.3.349: bg 0: block 217: padding at end of block bitmap is not set
[   56.757750][ T5052] EXT4-fs (loop3): Remounting filesystem read-only
[   56.758692][ T5044] EXT4-fs error (device loop5): ext4_check_dx_root:2203: inode #2: comm syz.5.347: Corrupt dir, invalid name for '.', running e2fsck is recommended
[   56.771210][ T5052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   56.771297][ T5052] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   56.894330][ T5060] FAULT_INJECTION: forcing a failure.
[   56.894330][ T5060] name failslab, interval 1, probability 0, space 0, times 0
[   56.894357][ T5060] CPU: 1 UID: 0 PID: 5060 Comm: syz.5.350 Not tainted syzkaller #0 PREEMPT(lazy) 
[   56.894394][ T5060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   56.894405][ T5060] Call Trace:
[   56.894411][ T5060]  <TASK>
[   56.894418][ T5060]  __dump_stack+0x1d/0x30
[   56.894449][ T5060]  dump_stack_lvl+0x95/0xd0
[   56.894474][ T5060]  dump_stack+0x15/0x1b
[   56.894531][ T5060]  should_fail_ex+0x262/0x280
[   56.894562][ T5060]  ? dup_task_struct+0x5a/0x750
[   56.894673][ T5060]  should_failslab+0x8c/0xb0
[   56.894711][ T5060]  kmem_cache_alloc_node_noprof+0x82/0x400
[   56.894748][ T5060]  ? dup_task_struct+0x5a/0x750
[   56.894841][ T5060]  dup_task_struct+0x5a/0x750
[   56.894864][ T5060]  copy_process+0x5a3/0x2360
[   56.894887][ T5060]  ? futex_wait+0x18f/0x1c0
[   56.894915][ T5060]  kernel_clone+0x1c0/0x5f0
[   56.894968][ T5060]  ? do_futex+0x391/0x460
[   56.895002][ T5060]  __x64_sys_clone+0x143/0x180
[   56.895136][ T5060]  x64_sys_call+0x2479/0x2550
[   56.895164][ T5060]  do_syscall_64+0x112/0x360
[   56.895187][ T5060]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   56.895270][ T5060] RIP: 0033:0x7f239a26e159
[   56.895284][ T5060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   56.895367][ T5060] RSP: 002b:00007f2398cc6fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[   56.895387][ T5060] RAX: ffffffffffffffda RBX: 00007f239a4f5fa0 RCX: 00007f239a26e159
[   56.895400][ T5060] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000200000
[   56.895412][ T5060] RBP: 00007f239a30506b R08: 0000000000000000 R09: 0000000000000000
[   56.895428][ T5060] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[   56.895482][ T5060] R13: 00007f239a4f6038 R14: 00007f239a4f5fa0 R15: 00007ffc06b607c8
[   56.895499][ T5060]  </TASK>
[   57.055670][ T5071] loop2: detected capacity change from 0 to 1024
[   57.056024][ T5071] EXT4-fs: Ignoring removed orlov option
[   57.056075][ T5071] EXT4-fs: Ignoring removed orlov option
[   57.197672][ T5070] loop5: detected capacity change from 0 to 512
[   57.203066][ T5070] EXT4-fs: inline encryption not supported
[   57.217488][ T5070] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[   57.227885][ T5070] EXT4-fs error (device loop5): ext4_iget_extra_inode:5210: inode #15: comm syz.5.353: corrupted in-inode xattr: e_value size too large
[   57.228683][ T5070] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.353: couldn't read orphan inode 15 (err -117)
[   57.230533][ T5070] loop5: lost filesystem error report for type 5 error -117
[   57.309835][ T5080] loop6: detected capacity change from 0 to 512
[   57.339582][ T5080] ext4: Unknown parameter 'uid'
[   57.469483][ T5080] tmpfs: Bad value for 'size'
[   57.519411][ T5092] EXT4-fs: Ignoring removed bh option
[   57.530842][ T5092] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   57.531629][  T241] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x75
[   57.564734][ T5092] EXT4-fs error (device loop2): ext4_map_blocks:832: inode #3: block 1: comm syz.2.359: lblock 1 mapped to illegal pblock 1 (length 1)
[   57.564887][ T5092] fserror_report: 1 callbacks suppressed
[   57.564897][ T5092] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   57.565276][ T5092] EXT4-fs (loop2): Remounting filesystem read-only
[   57.565326][ T5092] EXT4-fs (loop2): 1 orphan inode deleted
[   57.801949][ T5087]  loop3: p1[EZD] p2 p3 p4
[   57.802406][ T5087] loop3: p2 size 14011136 extends beyond EOD, truncated
[   57.803125][ T5087] loop3: p3 start 150994944 is beyond EOD, truncated
[   57.803143][ T5087] loop3: p4 size 4160782088 extends beyond EOD, truncated
[   57.809736][ T5104] ext4 filesystem being mounted at /76/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   57.907257][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[   57.909364][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[   57.909663][ T3879] udevd[3879]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[   58.468603][ T5114] __nla_validate_parse: 3 callbacks suppressed
[   58.468642][ T5114] netlink: 14 bytes leftover after parsing attributes in process `syz.6.364'.
[   58.468677][ T5114] openvswitch: netlink: Message has 6 unknown bytes.
[   58.479165][ T5114] netlink: 40 bytes leftover after parsing attributes in process `syz.6.364'.
[   58.571734][ T5116]  loop6: p1[EZD] p2 p3 p4
[   58.572803][ T5116] loop6: p2 size 14011136 extends beyond EOD, truncated
[   58.573460][ T5116] loop6: p3 start 150994944 is beyond EOD, truncated
[   58.573476][ T5116] loop6: p4 size 4160782088 extends beyond EOD, truncated
[   59.480435][ T5122] ==================================================================
[   59.480465][ T5122] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping
[   59.480494][ T5122] 
[   59.480500][ T5122] write to 0xffffea0004b62c18 of 8 bytes by task 4955 on cpu 1:
[   59.480518][ T5122]  __filemap_remove_folio+0x201/0x2e0
[   59.480536][ T5122]  filemap_remove_folio+0x6d/0x1d0
[   59.480552][ T5122]  truncate_inode_folio+0x42/0x50
[   59.480583][ T5122]  shmem_undo_range+0x27f/0xb60
[   59.480614][ T5122]  shmem_evict_inode+0x12d/0x580
[   59.480632][ T5122]  evict+0x2a5/0x510
[   59.480661][ T5122]  iput+0x430/0x5a0
[   59.480682][ T5122]  dentry_unlink_inode+0x24a/0x260
[   59.480711][ T5122]  dentry_kill+0x184/0x500
[   59.480740][ T5122]  finish_dput+0x16/0x1d0
[   59.480761][ T5122]  dput+0x48/0x50
[   59.480781][ T5122]  __fput+0x43e/0x630
[   59.480802][ T5122]  ____fput+0x1c/0x30
[   59.480823][ T5122]  task_work_run+0x130/0x1a0
[   59.480846][ T5122]  do_exit+0x4a4/0x1510
[   59.480873][ T5122]  do_group_exit+0xfe/0x140
[   59.480902][ T5122]  get_signal+0xe07/0xf10
[   59.480933][ T5122]  arch_do_signal_or_restart+0x96/0x480
[   59.480961][ T5122]  irqentry_exit+0x14d/0x610
[   59.480991][ T5122]  asm_exc_page_fault+0x26/0x30
[   59.481010][ T5122] 
[   59.481015][ T5122] read to 0xffffea0004b62c18 of 8 bytes by task 5122 on cpu 0:
[   59.481030][ T5122]  folio_mapping+0xa1/0xe0
[   59.481054][ T5122]  evict_folios+0xd80/0x2830
[   59.481077][ T5122]  try_to_shrink_lruvec+0x8fd/0xb30
[   59.481101][ T5122]  shrink_lruvec+0x252/0x1d40
[   59.481131][ T5122]  shrink_node+0x67c/0x2000
[   59.481154][ T5122]  do_try_to_free_pages+0x408/0xca0
[   59.481184][ T5122]  try_to_free_mem_cgroup_pages+0x201/0x420
[   59.481219][ T5122]  mem_cgroup_force_empty_write+0x77/0x100
[   59.481248][ T5122]  cgroup_file_write+0x197/0x350
[   59.481277][ T5122]  kernfs_fop_write_iter+0x1d2/0x2e0
[   59.481300][ T5122]  vfs_write+0x57f/0x9a0
[   59.481327][ T5122]  ksys_write+0xdc/0x1a0
[   59.481360][ T5122]  __x64_sys_write+0x40/0x50
[   59.481389][ T5122]  x64_sys_call+0x154e/0x2550
[   59.481415][ T5122]  do_syscall_64+0x112/0x360
[   59.481434][ T5122]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   59.481454][ T5122] 
[   59.481458][ T5122] value changed: 0xffff88811a9944a0 -> 0x0000000000000000
[   59.481469][ T5122] 
[   59.481472][ T5122] Reported by Kernel Concurrency Sanitizer on:
[   59.481485][ T5122] CPU: 0 UID: 0 PID: 5122 Comm: syz.6.366 Not tainted syzkaller #0 PREEMPT(lazy) 
[   59.481508][ T5122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   59.481524][ T5122] ==================================================================
[   60.412184][ T5085] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   60.459392][   T29] kauditd_printk_skb: 215 callbacks suppressed
[   60.459409][   T29] audit: type=1400 audit(1790874804.771:3124): avc:  denied  { write } for  pid=5185 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   60.494526][   T29] audit: type=1400 audit(1790874804.811:3125): avc:  denied  { write } for  pid=5196 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   60.813777][   T29] audit: type=1400 audit(1790874805.131:3126): avc:  denied  { write } for  pid=5199 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   60.848300][   T29] audit: type=1400 audit(1790874805.161:3127): avc:  denied  { write } for  pid=5210 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   61.157426][   T29] audit: type=1400 audit(1790874805.471:3128): avc:  denied  { write } for  pid=5213 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   61.191647][   T29] audit: type=1400 audit(1790874805.511:3129): avc:  denied  { write } for  pid=5224 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   61.252930][   T29] audit: type=1400 audit(1790874805.571:3130): avc:  denied  { write } for  pid=5227 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   61.288851][   T29] audit: type=1400 audit(1790874805.611:3131): avc:  denied  { write } for  pid=5238 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1