last executing test programs:

2m59.448227038s ago: executing program 32 (id=1065):
set_mempolicy_home_node(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0)

2m43.519843681s ago: executing program 33 (id=1546):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./proc\x00', 0x180)
mount(0x0, &(0x7f0000000740)='./proc\x00', &(0x7f0000000780)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000800)='7', 0x1)
fspick(0xffffffffffffff9c, &(0x7f0000000840)='./proc\x00', 0x0)

2m43.243536557s ago: executing program 34 (id=1551):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./mnt\x00', 0x844, &(0x7f0000000100)={[{@init_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}]}, 0x1, 0x24e, &(0x7f0000000b40)="$eJzs3TFoFXccB/Df3XuvaZJHSdulUGgLpZQ2ENqt0CVdWgiUEEoptIWUUrq0JEJMcEucXBx0VsnkEsTN6JwluCiCU9QMcRE0OBgddHhyuUSieRr1knea+3zgeHfv3f9+/+Pe938Hj3sXQGX1RcRgRNQioj8iGhGRbF3hs3zq21ic7V4cjWi1frmbrK+XL+c22/VGxExEfBcRC2kS/9Ujpub/WHmw9NOXRycbX5ye/727ozu5YXVl+ee1U8NHzg19O3X56u3hJAaj+dR+7b6kzXv1JOKDvSj2hkjqZfeAlzFy6Oy1LPcfRsTn6/lvRBr5wTs28c5CI74++by2x+9c+biTfQV2X6vVyM6BMy2gctKIaEaSDkREPp+mAwP5Nfz1Wk/6//jEwf5/xyfH/il7pAJ2SzNi+ccLXed7n8n/rVqef2D/yvL/68jcjWx+rfaKjd/dmz4BnZHlv/+v6a/idfIPvNXkH6pL/qGy7tfkHyrrRef/tKQ+AZ3h+h+qS/5h39rxF3r5h+qSf6gu+Yfq2pp/AKBaWl1l34EMlKXs8QcAAAAAAAAAAAAAAAAAANhutntxdHPqVM2LJyJWf4iIerv6tY3nEOR/ZdpzL8lWeyLJmxXy56cFN1DQmZLvvn7vZrn1L31Sbv3psYiZwxHxTb2+/fuXFH4Oxvs7fN74u2CBgr7/rdz6j+bKrT+0lI0y2fFvN/6k8dH6a/vxp5kdv4L1DzwsuAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA65nEAAAD///4abSk=")
syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000540))
symlinkat(&(0x7f0000000580)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
openat(0xffffffffffffff9c, &(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x101341, 0xaf)
symlinkat(&(0x7f0000000880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

2m31.469905718s ago: executing program 7 (id=1997):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x5c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x30, 0x3, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x20, 0x7, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x7f}]}}}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

2m31.38828573s ago: executing program 7 (id=1998):
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4048000)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000015000504e1ff4319918e00352d"], 0x2c}}, 0x60040050)

2m31.353078591s ago: executing program 7 (id=2001):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10)
fcntl$dupfd(r0, 0x406, r0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230)
io_uring_setup(0xa86, &(0x7f0000000740)={0x0, 0xf12b, 0x10000, 0x40000, 0x800003d7})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f00000007c0)={0x2, 0x4e20, @loopback}, 0x10)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
accept$inet(r2, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0)
shutdown(r0, 0x1)

2m31.295655732s ago: executing program 7 (id=2003):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x101c088, &(0x7f0000000080)=ANY=[], 0x6, 0x2c3, &(0x7f0000000900)="$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")
mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x104000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x80001)
move_mount(r0, &(0x7f0000000280)='.\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000300)='.\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x145091, 0x0)
umount2(0x0, 0x2)

2m31.199702254s ago: executing program 7 (id=2005):
mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='dir0\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x103a42, 0x4)
readv(r0, &(0x7f0000000100)=[{0x0}], 0x1)
socket$nl_route(0x10, 0x3, 0x0)

2m31.068522737s ago: executing program 7 (id=2009):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/timer\x00', 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = syz_create_resource$futex(&(0x7f0000000000)=0x2)
r2 = syz_create_resource$futex(&(0x7f0000000100)=0x2)
futex(r1, 0xc, 0x1, 0x0, r2, 0x2)
fcntl$lock(r0, 0x26, &(0x7f0000000140)={0x1})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa9525000)

2m31.055043678s ago: executing program 35 (id=2009):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/timer\x00', 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = syz_create_resource$futex(&(0x7f0000000000)=0x2)
r2 = syz_create_resource$futex(&(0x7f0000000100)=0x2)
futex(r1, 0xc, 0x1, 0x0, r2, 0x2)
fcntl$lock(r0, 0x26, &(0x7f0000000140)={0x1})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa9525000)

1m56.01540946s ago: executing program 5 (id=2498):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r0, &(0x7f0000000340)='p:t_st/event1 ./file0:0x0', 0x19)

1m55.964293411s ago: executing program 5 (id=2501):
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20000, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x80000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6b, 0x2, @perf_config_ext={0x4, 0x8}, 0x11a260, 0x1, 0x0, 0x0, 0x8, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./bus\x00', 0x41, &(0x7f0000000040)={[{@max_batch_time={'max_batch_time', 0x3d, 0xacd3}}, {@nodiscard}, {@lazytime}, {@nolazytime}, {@grpjquota}, {@acl}, {@abort}, {@debug}, {@usrjquota}]}, 0x64, 0x50f, &(0x7f0000000f80)="$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")
getpid()
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
geteuid()
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_open_dev$evdev(&(0x7f0000000180), 0xfffffffffffffffc, 0x0)
r0 = syz_usb_connect$hid(0x5, 0x88, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x222, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x40, 0x50, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x3, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0xb, 0x1, {0x22, 0x630}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x5, 0x40, 0x8a}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
timer_create(0xfffffff9, 0x0, &(0x7f0000000380)=<r1=>0x0)
timer_settime(r1, 0x0, 0x0, 0x0)
timer_create(0x0, 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f00000003c0), 0x908a, 0x840)
syz_usb_disconnect(r2)
syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[], 0x0)
ioctl$EVIOCRMFF(r2, 0x550c, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000004c0)={{0x77359400}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000540)=0x19)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000580)=0xa)
openat$dir(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x4800, 0x2c)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000600)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r4, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_disconnect(0xffffffffffffffff)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)

1m54.983084206s ago: executing program 5 (id=2523):
socket(0x22, 0xa, 0x3a)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000018c0)={0x2, &(0x7f0000000380)=[{0x0, 0xe, 0x2, 0x2}, {0x7, 0x15, 0x6, 0x10}]})
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x8000000000000000}, 0x4000, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = add_key(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x19, 0x4, 0x4, 0x8002, 0x0, 0x1}, 0x48)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = add_key(&(0x7f00000004c0)='asymmetric\x00', 0x0, &(0x7f0000000680)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r1)
syz_mount_image$ext4(&(0x7f0000000cc0)='ext4\x00', &(0x7f0000000d00)='./file0\x00', 0x10e, &(0x7f0000000d40), 0x1, 0x464, &(0x7f0000000d80)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./file2\x00', 0x105042, 0x0)
write$binfmt_format(r3, &(0x7f0000001240)='1\x00', 0x2400)
r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$nfc_llcp(r4, &(0x7f0000001780)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60)
recvmmsg(r4, &(0x7f0000001800)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x2, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000001840)={0x6d, 0x10001, 0x9, "83e19c6a7d65e7f7927483b6f3e80ff53bfe140ab933603cd6a080450837ebb1ea2744de57c12277a74e3456ecc38d9cc59b963545a99630f70ea042be975b6f6bd420038b48cca464f207af15992a0888225440bd02eed7a3d98603af7b6349a5b32230a30c483a36f7dda424"})
keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000c00)={r2, 0x500, 0x300}, &(0x7f0000000c40)={'enc=', 'pkcs1', ' hash=', {'sha3-384\x00'}}, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/20, 0x13}, 0x3}], 0x1, 0x40000002, 0x0)
r5 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000001280)=@raw={'raw\x00', 0x3c1, 0x3, 0x488, 0x1b8, 0x12, 0x600, 0x1b8, 0x202, 0x3b8, 0x2e8, 0x2e8, 0x3b8, 0x2c0, 0x4, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x8}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xd8, 0x200, 0x0, {}, [@common=@ah={{0x30}, {[0x4d3, 0x4d3], 0xc9, 0x11, 0x3}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7ff, 'system_u:object_r:crond_initrc_exec_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8)
socket$nl_sock_diag(0x10, 0x3, 0x4)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xec, &(0x7f00000000c0)=0xe7, 0x4)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', &(0x7f0000001900), 0x1000)

1m54.804772439s ago: executing program 5 (id=2526):
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000001c0)='.\x02\x00', 0x4010, &(0x7f0000000200)=ANY=[@ANYBLOB="646973636172642c646f74732c646f74732c6e6f646f74732c636865636b3d7374726963742c646f74732c0080fcdc5c3dd34a5bee25f099008bade73ed878442a18112f260a6de8f9de23ca03128aff6e012a1d950f746fd8a192b6e048d4bcb62d5ee3a79d7ff9522014e3c0881f4cdda0cd5c0458cae665", @ANYRESOCT=0x0, @ANYBLOB="480739ec7f920fa6747a8d8b349973cf30a48915269c162dc20ae93cf8fbfa28624f375bdec0b1a8ea75b79c5d3d4d8ed5ac8a1508fb15b3ac020fccfcbbabba643c13fc7eac589762cbeb037eb9a48ae4fd4672bf3d1185e4693115a4b61ffece04ed4a690feb7ce885c8cec3623bb08fe74fd339982f378771670bc977462814b8835519212d0c4f23e8276671e88a5ac111f89af06d91333e6fe2cdf1e466adbd"], 0x1, 0x11fc, &(0x7f0000000440)="$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")
openat(0xffffffffffffff9c, &(0x7f0000001640)='./file1\x00', 0x103a42, 0x32)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48014}, 0x2008c010)
bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x19, 0x4, 0x0, 0x0, 0x5, 0xb8, &(0x7f00000017c0)=""/184, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x8, &(0x7f00000018c0), 0x8}, 0x94)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc082}, 0x20004080)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000000), 0x9}, 0x9696a46c4adce67c, 0x2, 0x791, 0x0, 0x4, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x8)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000002540)='./file1\x00', &(0x7f0000002140)=ANY=[], 0x0, 0x1200)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb905b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7ffff}, 0xb093, 0x800000, 0x2, 0x2, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1000003}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x3)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000001740)='./sys\x00', 0x40)
mount(0x0, &(0x7f0000001780)='./sys\x00', &(0x7f0000001900)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000019c0)='./sys/bus/pci/devices/0000:00:00.0/rescan\x00', 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000001a00), 0x0, 0x0)
read$msr(r1, &(0x7f0000002640)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f000001b640)=0x410000002)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
syz_open_dev$usbfs(0x0, 0xf, 0x240000)
perf_event_open(&(0x7f000001b680)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10221, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0xf}, 0x116414, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001b700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @perf_bp={0x0}, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9)
timer_create(0x0, &(0x7f000001b780)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f000001b7c0))
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f000001b800)={0xa, 0x4e20, 0x0, @local, 0xe}, 0x1c)

1m53.58737968s ago: executing program 5 (id=2541):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a000000030000000400000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4)
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'veth0_to_hsr\x00', <r4=>0x0})
sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x11, 0x8100, r4, 0x1, 0x86, 0x6, @broadcast}, 0x14)

1m53.252932598s ago: executing program 5 (id=2543):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', <r2=>0x0})
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1})
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x38, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x5, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_ACT={0x4}]}}]}, 0x38}}, 0x0)
write$tun(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="000060034503003000640000ac019078ffffffff0a0101020c"], 0x34)

1m53.252796278s ago: executing program 36 (id=2543):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', <r2=>0x0})
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1})
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x38, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x5, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_ACT={0x4}]}}]}, 0x38}}, 0x0)
write$tun(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="000060034503003000640000ac019078ffffffff0a0101020c"], 0x34)

55.729687825s ago: executing program 6 (id=3234):
perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x1, 0x0, 0x64c, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x52, 0x20020084, &(0x7f0000000340)={0x2, 0x4e20, @empty}, 0x10)

54.856591577s ago: executing program 6 (id=3246):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
fcntl$lock(r0, 0x410, 0x0)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000340)={0x7}, 0x8)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={0xffffffffffffffff, 0x0, 0x25, 0x0, @val=@tracing={0x0, 0x8}}, 0x20)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000001300))
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000013c0)={'ip_vti0\x00', &(0x7f0000001340)={'syztnl2\x00', 0x0, 0x80, 0x8, 0x5, 0x8, {{0x13, 0x4, 0x2, 0x1, 0x4c, 0x67, 0x0, 0x2, 0x0, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x38}, {[@timestamp={0x44, 0x14, 0x6f, 0x0, 0x5, [0x6, 0x800, 0x80000000, 0xffff]}, @timestamp_prespec={0x44, 0x24, 0x42, 0x3, 0xc, [{@loopback, 0x8cc6}, {@rand_addr=0x64010102, 0x4}, {@local, 0xffffffff}, {@multicast1, 0x5}]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001480)={'syztnl0\x00', &(0x7f0000001400)={'gretap0\x00', 0x0, 0x7, 0x10, 0x101, 0x7ff, {{0xa, 0x4, 0x1, 0x31, 0x28, 0x67, 0x0, 0xd, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0xf, 0x81, [@multicast2, @private=0xa010101, @empty]}, @ra={0x94, 0x4, 0x1}]}}}}})
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000014c0)={0x0, @rand_addr, @loopback}, &(0x7f0000001500)=0xc)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r2, 0x40106e8c, 0x0)

54.832699648s ago: executing program 6 (id=3248):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x7, 0x2, 0x4}, {0xdbd, 0x4, 0xc4, 0x5}, {0xf, 0x1, 0xb0, 0xa0a0}]})
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000000c0)=0x3, 0x4)
sendmmsg$inet(r0, &(0x7f0000000100)=[{{&(0x7f0000000140)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014)

54.585786254s ago: executing program 6 (id=3255):
r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x3}, 0x4100, 0x0, 0x0, 0x4, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
syz_emit_ethernet(0x52, &(0x7f0000000b80)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb00004403000000000190780a010102ac1414aa07140f03ac1e000100000000000000000000000008009078ac14140045000000000000000000000073c4bad02e4dd9984ab4a9b7048307d04e0bf9ee02125990629b702267e935918f89a4ff38305173c33b2f75395014d9b9f9f170b6cd0adbb85b28c893a232e951416479de882a18a3eedcc1cd15727acd57a2aff98fd5b89ab93f01219e4579eedca04c41fc841493cb1e014f50a2b42c78b2204177e238b05a512334c71816dfb582a3943b3d41ceb98587c413d5f3e2aa28ce3e151300"/235], 0x0)
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x800012, &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x2c2, &(0x7f0000000840)="$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")
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
r1 = inotify_init1(0x80800)
inotify_add_watch(r1, &(0x7f0000000b40)='.\x00', 0x50007a2)
bpf$BPF_LINK_CREATE(0x8, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x2b}, 0x14)
getdents(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000780)='./trace\x00', &(0x7f00000007c0)='tracefs\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r0}, './trace\x00'})
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, &(0x7f00000000c0)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
prlimit64(0x0, 0xe, &(0x7f0000000100)={0xd, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x8)
perf_event_open(&(0x7f0000000c80)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x9, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0xfff, 0xa3}, 0x10ecc8, 0x1222, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x143042, 0x80)

54.118726645s ago: executing program 6 (id=3256):
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet(0x2, 0x3, 0x2)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x9}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r3, &(0x7f0000000300)='p:__st/event1 ./file0:0x0 arg2=%bx', 0x22)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000900)='.\x00', &(0x7f0000000940), 0x0, &(0x7f0000000980)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r4}})
sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000140019"], 0x28}}, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='tasks\x00', 0x2, 0x0)
read$nci(r3, &(0x7f0000000340)=""/162, 0xa2)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000180), 0x10)
r5 = perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f0000000640)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x80)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00038014"], 0x104}, 0x1, 0x0, 0x0, 0x10004000}, 0x20004080)
setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000200)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[], 0x1c)

53.824532592s ago: executing program 6 (id=3261):
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil)
r1 = socket$kcm(0x29, 0x5, 0x0)
close(r1)
r2 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x30004040)
setsockopt$sock_attach_bpf(r1, 0x1, 0xd, &(0x7f0000000640), 0xfe11)
shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x4000)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {<r3=>0x0, 0xee01}}, './sys/class/ptp/ptp0/n_vclocks\x00'})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, <r4=>0x0}, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/kmsg\x00', 0x1, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000440)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000480)='./dev/kmsg\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}})
getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000540)={{{@in=@initdev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@dev}, 0x0, @in6=@remote}}, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000680)={<r8=>0x0, <r9=>0x0}, &(0x7f00000006c0)=0xc)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000780)='1', 0x1}], 0x1, &(0x7f00000007c0)=[@cred={{0x1c, 0x1, 0x2, {r8, r9}}}], 0x20, 0x40044}}], 0x1, 0x4)
mount$9p_rdma(&(0x7f0000000800), &(0x7f0000000840)='./dev/kmsg\x00', &(0x7f0000000880), 0x108000, &(0x7f0000000f00)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@common=@access_user}, {@common=@version_u}, {@rq={'rq', 0x3d, 0x7}}, {@timeout={'timeout', 0x3d, 0xce81}}, {@timeout={'timeout', 0x3d, 0x7fffffff}}, {@timeout={'timeout', 0x3d, 0x9}}], [{@uid_gt={'uid>', r7}}, {@euid_eq={'euid', 0x3d, r9}}]}})
newfstatat(0xffffffffffffff9c, &(0x7f0000001040)='./sys/class/ptp/ptp0/n_vclocks\x00', &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0}, 0x4000)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000001100)={'\x00', 0xe9, 0x0, 0x2765, 0xfffffffffffffffa, 0xd, <r11=>0xffffffffffffffff})
r12 = perf_event_open(&(0x7f00000008c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa0100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x80000001, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r12, 0x5452, &(0x7f0000000940)='\x02W\xc2\x03w\x00\x00T\xb0\xba \xe89\xaf\x00\x00\x00')
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001000)={0x0, 0x0, 0x2a}, 0x28)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000001180)={'\x00', 0x0, 0x7032, 0x9, 0x2, 0xf, <r13=>0x0})
shmctl$IPC_SET(r0, 0x1, &(0x7f0000001200)={{0x2, r3, r4, r9, r10, 0x108, 0x7}, 0xfffffffe, 0x6, 0x6, 0x3, r11, r13, 0x9})
r14 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/ptp/ptp0/n_vclocks\x00', 0x2, 0x0)
write(r14, &(0x7f0000000200)="d18eb18f6cfa17743c227b29ac331cbbcc26e4ad74ed8f2acff7a51ea6161cfc2401ca94930a1cdfab0b55a6fda7eca2527ec0c48f9700dc3d149730ceb68711e1b77743f2afd32ee6", 0x49)
write$cgroup_pid(r14, &(0x7f00000001c0), 0x12)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000))

53.817321923s ago: executing program 37 (id=3261):
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil)
r1 = socket$kcm(0x29, 0x5, 0x0)
close(r1)
r2 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x30004040)
setsockopt$sock_attach_bpf(r1, 0x1, 0xd, &(0x7f0000000640), 0xfe11)
shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x4000)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {<r3=>0x0, 0xee01}}, './sys/class/ptp/ptp0/n_vclocks\x00'})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, <r4=>0x0}, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/kmsg\x00', 0x1, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000440)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000480)='./dev/kmsg\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}})
getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000540)={{{@in=@initdev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@dev}, 0x0, @in6=@remote}}, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000680)={<r8=>0x0, <r9=>0x0}, &(0x7f00000006c0)=0xc)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000780)='1', 0x1}], 0x1, &(0x7f00000007c0)=[@cred={{0x1c, 0x1, 0x2, {r8, r9}}}], 0x20, 0x40044}}], 0x1, 0x4)
mount$9p_rdma(&(0x7f0000000800), &(0x7f0000000840)='./dev/kmsg\x00', &(0x7f0000000880), 0x108000, &(0x7f0000000f00)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@common=@access_user}, {@common=@version_u}, {@rq={'rq', 0x3d, 0x7}}, {@timeout={'timeout', 0x3d, 0xce81}}, {@timeout={'timeout', 0x3d, 0x7fffffff}}, {@timeout={'timeout', 0x3d, 0x9}}], [{@uid_gt={'uid>', r7}}, {@euid_eq={'euid', 0x3d, r9}}]}})
newfstatat(0xffffffffffffff9c, &(0x7f0000001040)='./sys/class/ptp/ptp0/n_vclocks\x00', &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0}, 0x4000)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000001100)={'\x00', 0xe9, 0x0, 0x2765, 0xfffffffffffffffa, 0xd, <r11=>0xffffffffffffffff})
r12 = perf_event_open(&(0x7f00000008c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa0100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x80000001, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r12, 0x5452, &(0x7f0000000940)='\x02W\xc2\x03w\x00\x00T\xb0\xba \xe89\xaf\x00\x00\x00')
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001000)={0x0, 0x0, 0x2a}, 0x28)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000001180)={'\x00', 0x0, 0x7032, 0x9, 0x2, 0xf, <r13=>0x0})
shmctl$IPC_SET(r0, 0x1, &(0x7f0000001200)={{0x2, r3, r4, r9, r10, 0x108, 0x7}, 0xfffffffe, 0x6, 0x6, 0x3, r11, r13, 0x9})
r14 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/ptp/ptp0/n_vclocks\x00', 0x2, 0x0)
write(r14, &(0x7f0000000200)="d18eb18f6cfa17743c227b29ac331cbbcc26e4ad74ed8f2acff7a51ea6161cfc2401ca94930a1cdfab0b55a6fda7eca2527ec0c48f9700dc3d149730ceb68711e1b77743f2afd32ee6", 0x49)
write$cgroup_pid(r14, &(0x7f00000001c0), 0x12)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000))

50.636469271s ago: executing program 3 (id=3287):
socket$inet_tcp(0x2, 0x1, 0x0)
syz_emit_ethernet(0x66, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8800, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_mount_image$ext4(&(0x7f00000001c0)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x21000e, &(0x7f0000000180), 0x1, 0x553, &(0x7f0000000500)="$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")
unshare(0x26020480)
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000440)={0xa}, 0x1c)

50.251224971s ago: executing program 3 (id=3288):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r1, 0x0, r3, 0x0, 0x1, 0x0)
write$rfkill(r3, &(0x7f0000000240)={0x2, 0x5, 0x3, 0x1, 0x1}, 0xffb1)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder-control\x00', 0x803, 0x0)
socket$kcm(0x1e, 0x1, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8040002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x4000, 0x0, 0x6, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x13, &(0x7f00000007c0)=ANY=[@ANYBLOB="18080000000010000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608ffff0000100018000000000000000000000000000a009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800fffdb50a000000000000850000000600000095000000"], &(0x7f0000000880)='syzkaller\x00', 0xa, 0xde, &(0x7f00000008c0)=""/222, 0x0, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ba1}, 0x94)
r7 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000580), 0x1, 0x0)
r8 = syz_open_dev$evdev(&(0x7f00000009c0), 0x2, 0x862b01)
ioctl$EVIOCSFF(r8, 0x40304580, &(0x7f0000000a00)={0x56, 0x10, 0xac, {0xffff, 0x1}, {0x4d, 0x2}, @cond=[{0x8, 0x5388, 0xc, 0x800, 0xf535, 0x7}, {0x0, 0xfffb, 0x1, 0x7, 0x60d8, 0x1}]})
r9 = openat$cgroup_freezer_state(r3, &(0x7f00000005c0), 0x2, 0x0)
io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000640)=[r6, r7, 0xffffffffffffffff, r3, r5, r9, 0xffffffffffffffff, r0, r2, r5], 0xa)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000440), &(0x7f0000000480)=r5}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r5, 0x702, 0xe, 0x0, &(0x7f0000000540)="eb00140000000010000000000000", 0x0, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d711860000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write(r0, 0x0, 0x0)

49.708854074s ago: executing program 3 (id=3290):
connect$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x7ffffffe, 0x4}, 0x1147b1, 0x0, 0xfffffffe, 0x7, 0x0, 0xfffffff6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r1)
sendmsg$NFC_CMD_FW_DOWNLOAD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[@ANYRES16=r2, @ANYRES16=r2, @ANYBLOB="0304294456c260daa9a0f94f2100000000e1d7444504eb99d626867a131bd3749987fa4cce2f9b9a65e0c26b6e26a220997700", @ANYRES32=r0, @ANYBLOB="bfe0406918cc39f61ea34058647c6cc6b522be8a586a5c921342a4962c63f38e0e7e9a05000000584285584860e1829c02dfd4cb62db40088be40ffbbd45b815e24204dd3b1c18a13f4825ab7dec83b0843a9643b91551f90e70aa2554e1"], 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x2400c040)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs})
ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="10e2ffff03000000040000000c", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32], 0x50)
rt_sigprocmask(0x0, &(0x7f0000000140)={[0xfffffffffffffffd]}, 0x0, 0x8)
r3 = gettid()
timer_create(0x9, &(0x7f0000000180)={0x0, 0x23, 0x800000000004, @tid=r3}, &(0x7f00000001c0)=<r4=>0x0)
fstat(0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0xc)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000003c0))
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000400)={'\x00', 0x2})
ioctl$TUNSETDEBUG(r5, 0x400454c9, 0xffffffffffffffff)
ioctl$TUNSETLINK(r5, 0x400454cc, 0x308)
socket(0x10, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
move_mount(0xffffffffffffffff, &(0x7f0000000440)='.\x00', 0xffffffffffffff9c, 0x0, 0x0)
pivot_root(&(0x7f0000000500)='./file0\x00', 0x0)
timer_settime(r4, 0x0, &(0x7f0000000540)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0)
r6 = open(&(0x7f0000000580)='./bus\x00', 0x149cc2, 0x1c0)
fsetxattr(r6, &(0x7f00000005c0)=@known='security.selinux\x00', &(0x7f0000000600)='\xbc\x1aO\x06Pc\xd5\xc7\x99\xbb\x9e\xc5\xe8?\x89s\x81\xde\fU\xe2\xb2\xc9\b\xec^t\xfa\x16\x94\x14Q`w\xea\x18\x9d\x15&\f\xf2\x98m\n\xa4\xf9\xa1\f\xd7%\xd3Z\xca\xf3\xae\xc7@L\x14\x1a0\xf5N\xef\xb5r\x91\rL\xb21X\x8b\x0f)\xd9\x92i\x01\x86\x15j\xcf\x02\xc9\x92\x01%\xd8\x91\x10\xd9f\xcb\xed\xee\x7fYjw\xf5\xd4L\xdd\x8d\x98\xbb\xe38\xf4\xc7\xdd\x1b\xb1\xe1\vb\x16V:\xb1v\xd3i\x0f\xfd\t\x00\xd4K\x15J\x97GD)\xadF.\xb9\xfa\x84\xa2DI(\xcd\x8d\x12\xbe\\\xee\xdc\x96\x9c\x17\xd9\x10\x9f\xc4\x9aX\xcb\x00\x00', 0xa5, 0x0)
rt_sigtimedwait(&(0x7f00000006c0)={[0xfffffffffffffffd]}, 0x0, 0x0, 0x8)

49.553259928s ago: executing program 3 (id=3292):
r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x3}, 0x4100, 0x0, 0x0, 0x4, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
syz_emit_ethernet(0x52, &(0x7f0000000b80)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb00004403000000000190780a010102ac1414aa07140f03ac1e000100000000000000000000000008009078ac14140045000000000000000000000073c4bad02e4dd9984ab4a9b7048307d04e0bf9ee02125990629b702267e935918f89a4ff38305173c33b2f75395014d9b9f9f170b6cd0adbb85b28c893a232e951416479de882a18a3eedcc1cd15727acd57a2aff98fd5b89ab93f01219e4579eedca04c41fc841493cb1e014f50a2b42c78b2204177e238b05a512334c71816dfb582a3943b3d41ceb98587c413d5f3e2aa28ce3e151300"/235], 0x0)
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x800012, &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x2c2, &(0x7f0000000840)="$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")
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
r1 = inotify_init1(0x80800)
inotify_add_watch(r1, &(0x7f0000000b40)='.\x00', 0x50007a2)
bpf$BPF_LINK_CREATE(0x8, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x2b}, 0x14)
getdents(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000780)='./trace\x00', &(0x7f00000007c0)='tracefs\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r0}, './trace\x00'})
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, &(0x7f00000000c0)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
prlimit64(0x0, 0xe, &(0x7f0000000100)={0xd, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x8)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x143042, 0x80)

49.273468885s ago: executing program 3 (id=3294):
setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x3a, 0xcb, 0x0, 0x38)
r0 = syz_io_uring_setup(0x64c6, &(0x7f0000000640)={0x0, 0xb423, 0x1000, 0x0, 0x199}, 0x0, 0x0, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r1, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x37, '\x00', 0x0, @tracing=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000f80)={0x1, &(0x7f0000000fc0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f0000000240)=0x100000001, 0x4)
bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e21, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000340)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000380), 0x4)
sendto$inet(r3, 0x0, 0x0, 0xb, 0x0, 0x0)
recvfrom$inet(r3, &(0x7f0000000400)=""/8, 0xffffffffffffff43, 0xc9100120, 0x0, 0xfffffffffffffc7c)
close_range(r2, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000080)={{}, 0x1, &(0x7f0000000040)=[0x4], 0x80000000, 0x2})

47.908728809s ago: executing program 3 (id=3303):
r0 = perf_event_open(&(0x7f0000001180)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x21, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_bp={0x0, 0x8}, 0x204, 0x4, 0x43a1bd76, 0x0, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x10004000000000, 0xffffffffffffffff, 0x9)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000001900)={@mcast1, 0x0, 0x0, 0x2, 0x9, 0x0, 0xd}, 0x2f)

47.889101689s ago: executing program 38 (id=3303):
r0 = perf_event_open(&(0x7f0000001180)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x21, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_bp={0x0, 0x8}, 0x204, 0x4, 0x43a1bd76, 0x0, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x10004000000000, 0xffffffffffffffff, 0x9)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000001900)={@mcast1, 0x0, 0x0, 0x2, 0x9, 0x0, 0xd}, 0x2f)

20.560155193s ago: executing program 8 (id=3583):
r0 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, 0x0, 0x0)
setresgid(0xee00, 0xee01, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/1/root/var/run\x00', &(0x7f0000000100)={0x101000, 0x0, 0xa}, 0x18)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000040603000000000000000000020000040500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

20.500641245s ago: executing program 8 (id=3584):
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000004c0)={0x8})
shutdown(r1, 0x0)

20.500270725s ago: executing program 8 (id=3585):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0x1, 0x80000000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x2, 0x3}, {0x2, 0xffe0}, {0xfff1, 0x9}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x267b3278db4974ee}, 0x20004055)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001e0001000000000000000000020000000100000000000000080001000000000008000f"], 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x400c840)
r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x40042, 0x1)
close(r2) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) (async)
mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000540), 0x800, &(0x7f0000000640)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wFdno=', @ANYRESHEX=r2, @ANYBLOB=',\x00'])
r3 = dup2(r1, r1)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={<r4=>0x0, @initdev, @remote}, &(0x7f0000000040)=0xc) (async)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={r2, 0x20, &(0x7f0000000680)={&(0x7f0000000280)=""/218, 0xda, <r5=>0x0, &(0x7f0000000580)=""/147, 0x93}}, 0x10)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r3, r4, 0x25, 0x1f, @val=@tracing={r5, 0xe37}}, 0x20) (async)
syz_emit_ethernet(0x2f, &(0x7f0000000380)={@broadcast, @multicast, @val={@val={0x88a8, 0x1, 0x1}, {0x8100, 0x5}}, {@x25={0x805, {0x0, 0x28, 0x0, "567715d890f8dec643c3d16f0df983bf9fa453a57a6c"}}}}, &(0x7f00000006c0)={0x0, 0x4, [0x920, 0xcde, 0xef9, 0x26]})

20.499778025s ago: executing program 8 (id=3586):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x804b, 0x8}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x3)
move_pages(0x0, 0x2064, &(0x7f0000000080)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f00000000c0), &(0x7f0000000100), 0x0)
renameat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0xffffffffffffffff, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200))
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40801}, 0x4000042)
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x20080, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x8}, 0x4000, 0x0, 0x0, 0x1, 0xc68d, 0x92, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, &(0x7f0000000340)=0x3, 0x9a, 0x300)
syz_mount_image$ext4(&(0x7f0000000380)='ext2\x00', &(0x7f0000000a00)='./file1\x00', 0x0, &(0x7f0000000400), 0x1, 0x27e, &(0x7f0000000440)="$eJzs3T1oO2UcB/DfXZJ/34JWBRHFFxARLZS6CSLoolAQKSKCChURJ2mFanFrnFwcdFbp5FLEzeooLsVF6Fq1Q0UQsThYHHSIXC6RmCZaL82l/+TzgfTuubsnv0vJ97mH0lwCmFqLEfFYRFQiYikiahGRdB9wT/5YbDd35w7WI5rNZ35NWsfl7Vyn30JENCLi4YhqZ9/2/gsnvx89ef+7b9bu+3j/+bkSXlqld8PpyfFTZx89/c5nqw9tp+1t9fay+3Vcottv7LOxmkTcPIJiV0VSHfcZcBFrb336bRaSWyLi3lb+a5G2I/ve1rWvavHgh4P6vv/L4R1lnitw+ZrNWnYNbDSBqZO25sBJuhwR+XqaLi/nc/jvKvPpa5tbbyy9ulnZeKV71Chj+g6MSj3i+IkvZj5f6Mn/T5U8/8DkyvL/7Nre99n62bm/lAET6c58keV/6aWdB0L+YerIP0yG+QJ95B8mQr1gJ/mH613B7BbI/60/Hj5arBhwpVww/z+XeU5AOcz/YYLVOiuNvrvlH6bXhfPvX31h4nTy79IP06f7+g8ATJfmzLg/gQyMy7jHHwAAAAAAAAAAAAAAAAAA4LzduYP1ziMiKaXm1x9EnD4eEdXe+tH6YoO0tZxt/Zz/LckO+1uSd2u7Vqj+i3cPc/bD+2T0n76u9rRnuxs3/DDy+v/qm7tG87xv/7M58A6WOxsRjezglWr1/Psvab//irvpP/bXXh6ywP/Um+pHniuj6uDf4p97ZdQfbPUo4sts/FnpN/6kcVtr2X/8qXffYrmg1/8Y8gkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAozV8BAAD///BWbAI=")
r1 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x0, 0x25dfdbfc, {0x60, 0x0, 0x0, r3, {}, {0x1, 0x2}, {0x10}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x40004}, 0x40000)
socket$inet6_udp(0xa, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000900)='blkio.bfq.io_serviced_recursive\x00', 0x26e1, 0x0)
close(r4)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000980)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004091)
r5 = socket$l2tp(0x2, 0x2, 0x73)
bind$l2tp(r5, &(0x7f00000009c0), 0x10)
setsockopt$inet_int(r5, 0x0, 0x12, 0x0, 0x0)
perf_event_open(&(0x7f0000000b00)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x1, 0xfffc, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000d80)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
recvmsg$unix(r6, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000a80)={0x2, 0x80, 0xf9, 0x1, 0x0, 0x0, 0x0, 0x800000001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xc}, 0x9f50, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000b80))
stat(0x0, &(0x7f0000000bc0))

20.410980767s ago: executing program 8 (id=3587):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x82f41, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000440)={'syzkaller1\x00', @multicast})
write$tun(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="ffffffffffff00ff0000000081004e0086dd694f"], 0x72)

20.191846492s ago: executing program 8 (id=3588):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/ttyS0\x00', 0x2, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000180)={0x5, 0x80000005, 0xffffffe8, 0x241d, 0x5, "2d5157854e0a00ab035d8445e39c00"})
bind$can_raw(0xffffffffffffffff, 0x0, 0x0)
ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, &(0x7f0000000040)={0xa475, 0x1, [{0xc}]})

20.179309242s ago: executing program 39 (id=3588):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/ttyS0\x00', 0x2, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000180)={0x5, 0x80000005, 0xffffffe8, 0x241d, 0x5, "2d5157854e0a00ab035d8445e39c00"})
bind$can_raw(0xffffffffffffffff, 0x0, 0x0)
ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, &(0x7f0000000040)={0xa475, 0x1, [{0xc}]})

4.665211425s ago: executing program 4 (id=3775):
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x200)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fcntl$notify(r1, 0x402, 0x80000002)
r2 = inotify_init()
inotify_add_watch(r2, &(0x7f0000000080)='.\x00', 0x82000714)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0)
write$tun(r3, &(0x7f00000001c0)=ANY=[], 0x141)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4, <r6=>0xffffffffffffffff}, 0x0, &(0x7f0000000400)=r5}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r6}, &(0x7f0000000480)=0x20000, &(0x7f00000004c0)=r5}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000500)={r4, &(0x7f0000000540), 0x0}, 0x20)
r7 = socket$kcm(0xa, 0x1, 0x0)
setsockopt$sock_attach_bpf(r7, 0x29, 0x11, 0x0, 0x0)
r8 = gettid()
r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
wait4(r9, 0x0, 0x2, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f00000000c0))
timer_settime(0x0, 0x0, &(0x7f0000000600)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
set_mempolicy(0x8004, 0x0, 0x3)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
mkdir(&(0x7f0000000640)='proc_dir\x00', 0x0)
mount(0x0, &(0x7f0000000680)='proc_dir\x00', &(0x7f00000006c0)='proc\x00', 0x0, 0x0)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000700)='proc_dir/scsi/scsi\x00', 0x0, 0x1c1)
pread64(r11, &(0x7f0000000740)=""/222, 0xde, 0x2)
sendmsg$NFT_BATCH(r10, 0x0, 0x0)

4.44699162s ago: executing program 4 (id=3778):
socket$nl_generic(0x10, 0x3, 0x10)
openat$sndseq(0xffffff9c, 0x0, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x10030, 0x1000000, 0x0, 0x0, 0x0, 0x1fa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$pptp(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x34}}}, 0x1e)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0xbc}}, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x40000)
sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x58}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, 0x0, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000b00)={0x2, 0x4e23, @multicast1}, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000d80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x44)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000e40)={0x0, 0xa6, &(0x7f0000000e80)={&(0x7f0000000ec0)={0x2c, 0xd, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004001}, 0x8000)

1.584160601s ago: executing program 4 (id=3780):
r0 = socket$rxrpc(0x21, 0x2, 0x2)
fsopen(&(0x7f0000000140)='pipefs\x00', 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x3ffffc, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000007480), 0x1, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="242bba42d16a02149577c2be8a1994b07f0f943ec3661c60b0e0cb7b672865fb4dbb6cd6b40b640000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1, 0x1c, &(0x7f0000001280)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x1c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r3}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x42}}}, &(0x7f0000001380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x200012, &(0x7f00000009c0), 0x4, 0x5a4, &(0x7f00000013c0)="$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")
r5 = openat(0xffffffffffffff9c, &(0x7f0000001980)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r5, 0x8004587d, &(0x7f00000019c0)={@desc={0x1, 0x0, @desc3}})
renameat2(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000001a40)='./file0/file1\x00', 0x2)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1c917, &(0x7f0000000740)={[{@nodelalloc}, {@noblock_validity}, {@lazytime}, {@data_err_ignore}, {@debug}, {@auto_da_alloc_val}, {@noinit_itable}, {@jqfmt_vfsold}, {@journal_dev={'journal_dev', 0x3d, 0xafb}, 0x32}]}, 0x9a, 0x4ef, &(0x7f0000000a40)="$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")
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@empty, @in6=@mcast1, 0x0, 0x3, 0xfffc, 0xfffc, 0x2}, {0x7, 0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x4, 0x9}, 0x5ff7, 0x0, 0x0, 0x0, 0x6, 0x1}, {{@in6=@empty, 0x0, 0x6c}, 0xa, @in=@private=0xa010102, 0x0, 0x1, 0x3, 0x0, 0x0, 0x2, 0xffffffff}}, 0xfffffffffffffd62)
connect$inet6(r6, &(0x7f0000000040)={0xa, 0x80, 0x9e, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c)
r7 = syz_create_resource$binfmt(&(0x7f0000000100)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r7, 0x41, 0x1ff)
socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
syz_mount_image$vfat(&(0x7f0000000380), &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc80, &(0x7f0000000700)=ANY=[], 0x1, 0x29c, &(0x7f0000001a80)="$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")
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001200)='blkio.bfq.time_recursive\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r9, 0x40305828, &(0x7f0000001240)={0x0, 0x2, 0x8, 0x734e})
getsockopt(r0, 0x8001, 0x6, &(0x7f0000000180)=""/153, &(0x7f0000000340)=0x99)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000680)={'bridge0\x00'})

1.458190494s ago: executing program 0 (id=3781):
r0 = syz_usbip_server_init(0x1)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000d00000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000976000/0x4000)=nil, &(0x7f0000cf8000/0xd000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000d01000/0x4000)=nil, &(0x7f0000004000/0x2000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000d04000/0x1000)=nil, &(0x7f0000000000)="e70449c65fead1e266", 0x9, r0}, 0x68)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24044010)
socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x3, 0x300)
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x73cf, 0x2, @perf_config_ext={0x0, 0x800}, 0x204, 0x7, 0x43a1bd76, 0x9, 0x7, 0x6, 0x7, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x80004000000000, 0xffffffffffffffff, 0x8)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000002c0)={0x1, &(0x7f0000000300)=[{0x6, 0x5, 0x8, 0x7ffc0001}]})
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
r2 = request_key(0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x39, 0x0, 0x0)
add_key$user(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)="e6", 0x1, 0xfffffffffffffffd)
request_key(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x0}, 0x0, r2)
write$evdev(0xffffffffffffffff, &(0x7f0000000540), 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
file_setattr(r1, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x10820, 0x54, 0x5, 0x6, 0x5}, 0x18, 0x400)
fsmount(r1, 0x0, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
cachestat(r1, &(0x7f0000000140)={0x300}, &(0x7f0000000180), 0x0)
r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000d80))
madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16)
ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000dc0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, &(0x7f0000000e40)=[{0x3, 0xfffffffffffffffd, 0x1000}], 0x1, 0xbff, 0x1e, 0x0, 0xc, 0x6e})

1.451494964s ago: executing program 4 (id=3784):
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0), 0x7800)

1.363324786s ago: executing program 4 (id=3785):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setresgid(0xee00, 0x0, 0x0)
r1 = syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x10000000)
ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000000280)={'dummy0\x00', @broadcast})
r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="41925118000a000005300001802c00018014000300fe8000000000000000000100000000aa14000400fc00000000000000000000000000000100"/68], 0x44}, 0x1, 0x0, 0x0, 0x40010}, 0x8000)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRESDEC=r1, @ANYRES8=r2], 0x38}, 0x1, 0x300}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r4, 0x4008941a, &(0x7f0000000380)=0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x4000000007, 0x520, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={&(0x7f0000000240), 0x1}, 0x10ecc8, 0xffffffffffffcb87, 0x0, 0x5, 0x8, 0x20002, 0x3, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x8)
mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001d80)={0x0, @in6={{0xa, 0x4e23, 0x20006, @empty, 0x6}}, 0x7f, 0x2, 0x0, 0x5, 0x392, 0x94}, 0x9c)
openat2(0xffffffffffffffff, &(0x7f00000006c0)='./tracing\x00', &(0x7f0000000700)={0x820001, 0x12, 0x20}, 0x18)
shutdown(r6, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={<r7=>0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000140)={r7, @in={{0x2, 0x4e21, @empty}}, 0x7, 0xfe00, 0x2, 0x6, 0x54, 0x6, 0xf9}, &(0x7f0000000000)=0x9c)
accept4$inet(r0, 0x0, &(0x7f0000000340), 0x80000)
r8 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0)
pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xa00, 0x0, 0x22)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r9=>0x0}, &(0x7f0000000200)=0xc)
quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, &(0x7f0000000100)=@filename='./tracing/dynamic_events\x00', r9, &(0x7f00000002c0))
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000580)={0x0, 0x300, &(0x7f00000005c0)={&(0x7f0000000600)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x16079, 0x14}, [@IFLA_MTU={0x8, 0x4, 0x3}, @IFLA_IFNAME={0x14, 0x3, 'macsec0\x00'}]}, 0x3c}}, 0x0)
write(r8, &(0x7f0000000280)="65486d795fe26defdeed7dda726561645f74b9ff9be37786fe64e431202d", 0x1e)
fcntl$lock(r3, 0x5, &(0x7f0000000040)={0x0, 0x1, 0x5, 0x2})

1.063712444s ago: executing program 9 (id=3787):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='proc_dir/scsi/scsi\x00', 0x0, 0x0)
pread64(r0, &(0x7f00000003c0)=""/267, 0x10b, 0xb1)
open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='proc_dir/scsi/scsi\x00', 0x900)

1.063061164s ago: executing program 4 (id=3789):
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000500)="648a6282c6e91b973836904a4a88affa0c371dd1b9c133c5e594714579d6bb3addfd43e78272aef64427ce5467d6994320cf139092452c7944ddab49e459f7e0c73f890e9e2463bd3390e20b1e472bd2aedb47094547a767a098a94a402e6aba65c0ef07eaa87f8663c763d9bb491243eb129eec434e5603956c8333a6ecdf4d3a601b9c8d3d63e3a4a57b38033e2b004f6c3e45f1645c3b7ca0d5ba5eea059b5aa4f0f80ac66904076cc60e47e1afc7d81ad937dee5efc0580e38d96cf0f53808f37d5a8811b07165e8b9aabceac06e4fa7f7668b8832877783a727", 0xdc}], 0x1}}], 0x1, 0x4044805)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f0000"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840)
write$nci(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="610501"], 0x10e6)

1.044273774s ago: executing program 9 (id=3790):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./tracing\x00', 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/uprobe_events\x00', 0x401, 0x0)
perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x4000000007, 0x520, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x7fffffffffffffff, 0x1400000000000}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x3, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x8)
write(r0, 0x0, 0x0)

892.572818ms ago: executing program 9 (id=3793):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000700000000000000", @ANYRES32, @ANYBLOB='\a\x00\x00\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100"/28], 0x50) (async)
r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000280)={<r2=>0xffffffffffffffff}) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES16=r1], 0x50) (async)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r4, 0x0, 0x0, 0x71808848d8ea871c, 0x0, 0x0) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r3, &(0x7f00000003c0), &(0x7f0000000400)=@udp=r4}, 0x20)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000a80)='./file1\x00', 0x841e, &(0x7f0000000ac0)={[{@nojournal_checksum}, {@jqfmt_vfsold}, {@errors_remount}, {@usrquota}, {@usrquota}]}, 0x3, 0x42f, &(0x7f0000000e40)="$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") (async)
r5 = openat(0xffffffffffffff9c, &(0x7f0000001280)='./file1\x00', 0x101042, 0x15)
pwrite64(r5, &(0x7f00000012c0)='2', 0xfdef, 0xe7c)
ioctl(r5, 0x1, &(0x7f0000001300)) (async)
perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x1, 0x4c016, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7c, 0x4, @perf_bp={0x0, 0x1}, 0x10fec8, 0x1224, 0x7, 0x9, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x8)
r6 = syz_open_dev$loop(&(0x7f00000003c0), 0xb7c8, 0xa8182) (async)
r7 = memfd_create(&(0x7f0000000840)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\x00'/557, 0x1)
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) (async)
prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000720000/0x4000)=nil) (async)
prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) (async)
brk(0x200004ffc000) (async)
ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r7) (async)
r8 = socket$packet(0x11, 0x2, 0x300) (async)
setuid(0xee00) (async)
r9 = socket(0x2b, 0x1, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r9, 0x29, 0x40, 0x0, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f00000007c0)={'batadv0\x00', <r10=>0x0})
sendto$packet(r8, 0x0, 0x0, 0x50, &(0x7f0000000800)={0x11, 0x8100, r10, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x14) (async)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_sys\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000480)=r11, 0x4) (async)
r12 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@arena={0x21, 0x0, 0x0, 0x37, 0x20400, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x5}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xe, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe90, 0x0, 0x0, 0x0, 0x51c7}, [@call={0x85, 0x0, 0x0, 0x10001}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @map_val={0x18, 0x2, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x81}, @map_fd, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0x99, &(0x7f00000001c0)=""/153, 0x9c5bb517f8b9104b, 0x2a, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x4, 0xe, 0x8}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000540)=[r3, r11, r12], &(0x7f0000000580)=[{0x3, 0x3, 0xd, 0x6}, {0x3, 0x4, 0x1, 0x2}, {0x0, 0x1, 0x3, 0xb}, {0x4, 0x1, 0x2, 0x1}, {0x1, 0x2, 0xe, 0x8}, {0x0, 0x1, 0x1, 0x1}], 0x10, 0x5}, 0x94)

790.060041ms ago: executing program 2 (id=3794):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap$IORING_OFF_SQ_RING(0x0, 0x8400002, 0x1000004, 0x401d031, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000d5030000020000838500000072000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x60)

760.994241ms ago: executing program 9 (id=3795):
r0 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f0000000a00)={&(0x7f0000000240)=@nl=@kern={0x10, 0x0, 0x0, 0x10000}, 0x80, &(0x7f0000000400)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000780)=[{0x38, 0x114, 0x3, "71208591bd0f4c50a6ece71fdc509340499ed8c9d20ab3962106d3d46c0d3f6624e16f00d5b5"}, {0xa8, 0x109, 0x29, "6a6574ac4dde56fc8f990eeca8f7ed5a6715f392108e4de4f847ec3ab29c186e7c48ff9f6428dd924102ebca24c0a0e3f766b004535d1f24cf44dca1c13d1bddb4d46816105a5e7941973fddce912f8853589be43f339e0780d02885030dabbca8a77196145473a6059138224c7c98590d49440e5f695c278ea647808990cb6dfff5a13c361fe68a56ed6402aacf537ef9efe2222f34a8"}, {0xa0, 0x2, 0xab, "f10d40483de82b7fd788a0cdd8c204832aa2646783a491ede476d0dd6a59075cfb925ef02c08bf0b96d01f784415c563d6a27d9c795bb58d5f84975533d7cd62f27ba90bcd98ec24413482b4f5238463c37167c1e3f85d635a18318e4f0d6e0e0caa4030a87fe046c237e6aa259a857de5006011a446abdfb3099ee983b18da3ae618bbba864d734792dae"}, {0x50, 0x10b, 0x5, "8579acb5760cd0df7005b6d726a5ed8419abb9c5093504a424d1fcec5a063211db7306d5ef800356ef3637cd6a93272d3ffdcc13f1565ebd3b9b8fc2e5"}], 0x1d0}, 0x22004000)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x520, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x3, 0x5}, 0x0, 0x1224, 0x7fffffff, 0x0, 0x8, 0x20005, 0x2, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
ioctl$NILFS_IOCTL_SET_SUINFO(r1, 0x40186e8d, &(0x7f0000000200)={&(0x7f00000000c0)=[{0x8, 0x1, 0x0, {0x63, 0xd}}, {0x80000000000008, 0x2, 0x0, {0x8000, 0xcb54, 0x1}}, {0x4, 0x1, 0x0, {0x9, 0x0, 0x2}}, {0x1, 0x2, 0x0, {0xe7c, 0x9}}, {0x8a5, 0x0, 0x0, {0x2, 0x3, 0x1}}, {0xacc, 0x0, 0x0, {0x2, 0xbd74, 0x2}}, {0x4a, 0x2, 0x0, {0x659, 0x7, 0x2}}], 0x7, 0x20, 0x8, 0x46fd})
syz_open_dev$rtc(&(0x7f0000000000), 0x9, 0x1c00)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000440)={0x60000002})
mount(0x0, &(0x7f0000000480)='./trace\x00', &(0x7f00000004c0)='tracefs\x00', 0x8000, 0x0)
r2 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r2, &(0x7f0000000a80)={0x18, 0x0, {0x3, @empty, 'ip6gre0\x00'}}, 0x1e)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=@newtclass={0x24, 0x28, 0x4, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xf, 0x4}, {0xffe0, 0xb}, {0xb, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x80000)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000d00)={0x0, 0xde, &(0x7f0000000d40)={&(0x7f0000000680)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a310000000005000100070000002c0007800c00018008000140ac1414aa050007008400000006000440462000000c000280080001407f000001c67991d9cab079b031244d510600423eda3814195c7c7b72ac21d873397f1b78"], 0x54}, 0x1, 0x0, 0x0, 0x34040017}, 0x80)

735.296282ms ago: executing program 2 (id=3796):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000fc0), 0x7800)

734.599272ms ago: executing program 2 (id=3797):
perf_event_open(&(0x7f0000000d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4022, 0x8000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0xc, 0x7}, 0x10c02c, 0x200, 0x2000000, 0x9, 0x6, 0x9fff, 0x7fff, 0x0, 0x0, 0x0, 0x100000001}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x8)
socket$nl_route(0x10, 0x3, 0x0)
clock_getres(0xfffffffffffffff6, 0x0)
syz_mount_image$vfat(&(0x7f0000000e00), &(0x7f0000000e40)='./file0\x00', 0x22010, &(0x7f0000000e80)=ANY=[], 0x0, 0x11fa, &(0x7f0000000ec0)="$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")
fallocate(0xffffffffffffffff, 0x1, 0x7, 0x8010004)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file1\x00', 0x2a0471a, &(0x7f0000000080)={[{@errors_remount}]}, 0x82, 0x4a7, &(0x7f00000000c0)="$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")
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x7, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x6)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x80, 0x0, 0x7f, 0x0, 0xc1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x4008, 0x400000, 0x0, 0x7, 0x20000000000000, 0x800002, 0x400, 0x0, 0x0, 0x0, 0xdcc7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xe, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB], &(0x7f0000000680)='syzkaller\x00', 0x5, 0xc2, &(0x7f0000000880)=""/194, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26}, 0x94)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000980)={0x2, &(0x7f00000009c0)=[{0x2, 0x8, 0x3}, {0x1d, 0x0, 0x0, 0x1}]})
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000580)='./dev\x00', &(0x7f0000000a40)='affs\x00', 0x820000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000a80)='./mnt\x00', 0x13b)
mount(&(0x7f0000000840)=@sr0, &(0x7f0000000800)='./file2\x00', &(0x7f00000005c0)='pstore\x00', 0x410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
iopl(0x2)

660.847134ms ago: executing program 9 (id=3798):
setresgid(0xee00, 0x0, 0x0)
r0 = syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x10000000) (fail_nth: 4)

658.505384ms ago: executing program 9 (id=3799):
setresgid(0xee00, 0x0, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0)
r1 = socket$kcm(0x11, 0x3, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="a6", 0x1, 0x20000045, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./dev/kmsg\x00', 0x1, 0x0)
poll(&(0x7f00000005c0)=[{r2, 0x555}], 0x1, 0xfffffffe)
mkdirat(r2, &(0x7f0000000600)='./dev/kmsg\x00', 0xac)
setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000040)=r2, 0x4)
sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f00000000c0)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000180)="2703022b590200330000002f1eafbcf706e1050000008864000f1102ee16005782973d2bd4b82b4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000200)="63f805d76494962b72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f00000002c0)="6fe4dd9eeba3271dc700b581440284", 0xfeb9}, {&(0x7f0000000300)="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", 0x259}], 0x4}, 0x20004000)
r3 = syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = syz_pidfd_open(r3, 0x0)
setns(r4, 0x10000000)

432.115719ms ago: executing program 2 (id=3800):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='proc_dir/scsi/scsi\x00', 0x0, 0x0)
pread64(r0, &(0x7f00000003c0)=""/267, 0x10b, 0xb1)
open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='proc_dir/scsi/scsi\x00', 0x900)

421.80505ms ago: executing program 2 (id=3801):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r1, 0x0, r2, 0x0, 0x1, 0x0)
write$rfkill(r2, &(0x7f0000000240)={0x2, 0x5, 0x3, 0x1, 0x1}, 0xffb1)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder-control\x00', 0x803, 0x0)
socket$kcm(0x1e, 0x1, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8040002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x4000, 0x0, 0x6, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x13, &(0x7f00000007c0)=ANY=[@ANYBLOB="18080000000010000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608ffff0000100018000000000000000000000000000a009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800fffdb50a000000000000850000000600000095000000"], &(0x7f0000000880)='syzkaller\x00', 0xa, 0xde, &(0x7f00000008c0)=""/222, 0x0, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ba1}, 0x94)
openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000580), 0x1, 0x0)
r4 = syz_open_dev$evdev(&(0x7f00000009c0), 0x2, 0x862b01)
ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f0000000a00)={0x56, 0x10, 0xac, {0xffff, 0x1}, {0x4d, 0x2}, @cond=[{0x8, 0x5388, 0xc, 0x800, 0xf535, 0x7}, {0x0, 0xfffb, 0x1, 0x7, 0x60d8, 0x1}]})
write$char_usb(r4, &(0x7f0000000a40)="e2", 0x2250)
syz_pidfd_open(0xffffffffffffffff, 0x0)
openat$cgroup_freezer_state(r2, &(0x7f00000005c0), 0x2, 0x0)
ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d711860000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write(r0, 0x0, 0x0)

357.977901ms ago: executing program 0 (id=3802):
syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2)
io_setup(0x8, &(0x7f0000002440)=<r0=>0x0)
r1 = syz_open_procfs(0x0, 0x0)
io_submit(r0, 0x1, &(0x7f00000024c0)=[&(0x7f0000002500)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}])

289.917933ms ago: executing program 1 (id=3803):
socket$netlink(0x10, 0x3, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, &(0x7f0000000080), &(0x7f00000000c0)=r1}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000140)=0x2, 0x0}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f00000001c0)}, 0x20)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200)={<r2=>0x0}, 0x0)
sendmmsg$unix(r1, &(0x7f000001bb40), 0x0, 0x8001)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x6001, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r3 = syz_io_uring_setup(0x38, &(0x7f0000000380)={0x0, 0xb3da, 0x13f00, 0xffffffff}, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x21, 0x0, 0x1)
sched_setaffinity(r2, 0x8, &(0x7f000001bb00)=0x4)
r4 = syz_open_procfs(0x0, &(0x7f0000000500)='net/fib_trie\x00')
pread64(r4, &(0x7f0000001640)=""/102356, 0x18fd4, 0x1c)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f00000001c0)=0x4, 0x4)
bind$inet6(r5, &(0x7f000001a640)={0xa, 0x4e22}, 0x1c)
bpf$BPF_PROG_DETACH(0x9, &(0x7f000001a740)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1900"], 0x10)
listen(r5, 0x10040)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCDELRT(r6, 0x890c, &(0x7f000001bb40)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0xd, 0x81, 0x0, 0x200, 0x2, 0x3040050})
socket(0xa, 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f000001bbc0)='./file1\x00', 0x842, 0x1c1)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r7, &(0x7f000001bc00)={0xa, 0x0, &(0x7f000001bc40)={&(0x7f000001bc80)={0x2, 0x1, 0x0, 0x2, 0x12, 0x0, 0x70bd27, 0xfffffffe, [@sadb_address={0x3, 0x6, 0x32, 0x0, 0x0, @in={0x2, 0x4e22, @local}}, @sadb_x_filter={0x5, 0x1a, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@multicast2, 0x2b, 0x4, 0x14}, @sadb_address={0x3, 0x5, 0x32, 0x0, 0x0, @in={0x2, 0x4, @multicast1}}, @sadb_key={0x1, 0x9}, @sadb_lifetime={0x4, 0x3, 0x10007, 0x1, 0x9be, 0x3}]}, 0x90}, 0x1, 0x7}, 0x40010)
readv(0xffffffffffffffff, &(0x7f000001bd40)=[{&(0x7f000001bd80)=""/253, 0xfd}, {&(0x7f000001be80)=""/4096, 0x1000}], 0x2)
unshare(0x400)
syz_emit_ethernet(0x6e, &(0x7f000001ce80)=ANY=[@ANYRES8, @ANYRES16, @ANYRES32=0x0, @ANYBLOB="32531e987e8b3f6008e61a5ab29b4ce2453084e8ae24631aa8cd15e081b6ee8f9895c5d7f6ea2181c5f9265d440264e2428d107b19c93ae962a807756f13f66463f2f1b343d015b64441abfe0496b59462dcc311a3a5eff693a6f78172736fa7350c32d7036cb164960b7ed6471e31b447efd62cec28d0eb83a494fc8aff8667f37bafb94afdf5c3d92eb53f639de5eb2c7619208da92b561b6f878a6d8d19c5d0a7b7ebd7390e479d8dcab85dc3ef04c3227660858f18725812528f9389d4a189f9d6d9a83c350bb5b617b5c17125bca703a6a44b6a0206"], 0x0)
semget$private(0x0, 0x6, 0x0)

260.773724ms ago: executing program 0 (id=3804):
syz_emit_ethernet(0x66, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8800, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000480), &(0x7f00000004c0)='./bus\x00', 0x3000414, &(0x7f0000001040)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES8, @ANYBLOB="b58208b37a58446284048f26b79953e521b27c3a5dbc8e7fcd644e2caaa1acc91237f4447b548c7caab7ede0f978d175cd8108db49a660493d3511a7f6d67dba109d4f769a1cddfc97c554c8d7c38ecae48c95955fb02bcd2da02935ab9658f576b9d2526dd40f73035883f2f7d388f9cb004bcef6c90d011afc4849d7d7ee3abdf4dfa36378701a61a8f83187960881d90cf42cae6384fa916f5df9e11d2546c01011f28c9be1a2a5aa2139ef29be6d87c8d93fce5239580e58fe24d4304f196fa0d43d7aeb4dc3da644ba32b1e61734c4211811d81d78f283d637a78b107898d59c7048fa04ea6e0ebe491f42f2f32bd531eeb8e2659d2", @ANYRESDEC, @ANYRES32=0x0], 0x3, 0x2d2, &(0x7f00000011c0)="$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")
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001d80)='cgroup.stat\x00', 0x275a, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e21, @multicast1}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f80)={0xffffffffffffffff, 0xffff0000, 0xd, 0x0, &(0x7f0000001000)="2b206d074843b397737ea49da2", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50)
connect$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x4e21, @loopback}, 0x10)
unshare(0x26020480)
mkdir(&(0x7f0000000000)='./tracefs\x00', 0x1ff)
socket$rds(0x15, 0x5, 0x0)
write(0xffffffffffffffff, 0x0, 0x3f00)
perf_event_open(&(0x7f0000000200)={0x1, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)

260.178204ms ago: executing program 1 (id=3805):
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000001400000000000000000200000a20000000000a01080000000000000000020000000900010073797a300000000064000000090a010402000000000000000200000008000a40000000010900020073797a31000000000900010073797a300000000008000540000000080800034000000084200009801c0002800c00018008000140000000040c0001800800014000000004540000000c0a01010000000000000000020000000900020073797a31000000000900010073797a30000000002800038024000080100001800c000100fff500000000000010000a800c0001"], 0x100}}, 0x0)

205.315525ms ago: executing program 1 (id=3806):
socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000080)={0x2, 0xfffffe0f, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x73f4, 0x8001}, 0x2, 0x1, 0x10ffe, 0x7, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x3, 0x3, 0xf, 0x0, 0xe, 0x7fff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0)
sendmmsg$unix(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)="8c", 0x1}], 0x1, &(0x7f0000000300)=ANY=[], 0x18, 0x40050}}, {{0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}}], 0x2, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
ioctl$int_out(r0, 0x5460, &(0x7f00000014c0))
syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000740)='./file2\x00', 0xc0ed4040, &(0x7f0000000780)={[{@commit={'commit', 0x3d, 0x4}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@barrier}, {@quota}, {@grpid}, {@journal_dev={'journal_dev', 0x3d, 0x9b9}}, {@data_writeback}, {@jqfmt_vfsv1}]}, 0x0, 0x47a, &(0x7f0000000840)="$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")
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x19, 0x4, 0x4, 0x8002, 0x0, 0x1}, 0x50)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x30, 0xc, 0x0, 0x0, 0x0, 0x9, 0x520, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x4000000000000000, 0x2668}, 0x10eccc, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x200000102ffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000440)='./proc\x00', 0xa100c0, &(0x7f0000000480)={[{@min_batch_time={'min_batch_time', 0x3d, 0x7}}, {@noblock_validity}, {@noauto_da_alloc}, {@nolazytime}, {@errors_continue}, {@lazytime}, {@inlinecrypt}, {@nojournal_checksum}, {@bh}, {@nombcache}, {@resuid}]}, 0x1, 0x5bd, &(0x7f0000000cc0)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000001280)='./file1\x00', 0x143042, 0x18)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000540)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
io_uring_setup(0x1, &(0x7f0000000580)={0x0, 0x0, 0x800, 0x0, 0xbb})
r4 = syz_open_procfs(0x0, &(0x7f0000001300)='mountinfo\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000001340)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001380)='./dev\x00', &(0x7f00000013c0)='devtmpfs\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x400, &(0x7f0000001480)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r4}})
close_range(r3, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./bus\x00', 0x40, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./bus\x00', 0x1c1002, 0x12)
write(r6, &(0x7f00000006c0)="c7459f55", 0x4)
sendfile(r6, r5, 0x0, 0x3ffff)
copy_file_range(r2, 0x0, r2, &(0x7f00000012c0)=0xae8, 0x863, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000640)={r1, 0x0, 0x0}, 0x20)

203.983605ms ago: executing program 2 (id=3807):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
ioctl$SIOCX25SSUBSCRIP(r4, 0x89e1, &(0x7f0000000840)={'batadv0\x00', 0xffffffff80000001, 0x4}) (async)
ioctl$SIOCX25SSUBSCRIP(r4, 0x89e1, &(0x7f0000000840)={'batadv0\x00', 0xffffffff80000001, 0x4})
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) (async)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_NODES(r5, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0x1c, r6, 0x20, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async)
sendmsg$TIPC_CMD_GET_NODES(r5, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0x1c, r6, 0x20, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x25dfdbfb, {{{@in=@dev={0xac, 0x14, 0x14, 0xd}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0xfffe}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in=@broadcast, {0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x8}, {0xfffffffffffffffe}, {0x8}, 0x20000, 0x0, 0xa, 0x0, 0x2}}}, 0xf8}}, 0x0)
sendmsg$nl_xfrm(r7, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@mcast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @empty}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, {}, {0x0, 0xff}, 0x0, 0x0, 0xa}}}, 0xf8}}, 0x0)
recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000003c0)=""/182, 0xb6}], 0x1}, 0x40010000) (async)
recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000003c0)=""/182, 0xb6}], 0x1}, 0x40010000)
syz_mount_image$ext4(&(0x7f0000000c00)='ext4\x00', &(0x7f0000000c40)='./file1\x00', 0x815, &(0x7f0000000c80)={[{@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x1}}, {@resgid}, {@abort}, {@user_xattr}, {@discard}, {@stripe}]}, 0x9, 0x624, &(0x7f0000000d00)="$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")
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r8 = fsopen(&(0x7f0000001340)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0)
r9 = fsmount(r8, 0x0, 0x0)
fchdir(r9) (async)
fchdir(r9)
r10 = openat(0xffffffffffffff9c, &(0x7f0000001380)='./bus\x00', 0x1c1040, 0x0)
r11 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./bus\x00', 0x1c1002, 0x40)
write(r11, &(0x7f0000001400)='t', 0x1)
sendfile(r11, r10, 0x0, 0x7fffffff) (async)
sendfile(r11, r10, 0x0, 0x7fffffff)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4c, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) (async)
sendmsg$nl_route(r12, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0)
sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0)

198.669735ms ago: executing program 1 (id=3808):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000fc0), 0x7800)

197.897145ms ago: executing program 0 (id=3809):
socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x4}, 0x2, 0x1, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000740)='./file2\x00', 0xc0ed4040, &(0x7f0000000780)={[{@commit={'commit', 0x3d, 0x4}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@barrier}, {@quota}, {@grpid}, {@journal_dev={'journal_dev', 0x3d, 0x9b9}}, {@data_writeback}, {@jqfmt_vfsv1}]}, 0x0, 0x47a, &(0x7f0000000840)="$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")
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x19, 0x4, 0x4, 0x8002, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000640)={r0, 0x0, 0x0, 0x10000000000}, 0x20)

183.290185ms ago: executing program 1 (id=3810):
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet(0x2, 0x3, 0x2)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x9}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r3, &(0x7f0000000300)='p:__st/event1 ./file0:0x0 arg2=%bx', 0x22)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000900)='.\x00', &(0x7f0000000940), 0x0, &(0x7f0000000980)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r4}})
sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000140019"], 0x28}}, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='tasks\x00', 0x2, 0x0)
read$nci(r3, &(0x7f0000000340)=""/162, 0xa2)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000180), 0x10)
r5 = perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f0000000640)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000700)=@pptp={0x18, 0x2, {0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}, 0x80)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a3200"], 0x104}, 0x1, 0x0, 0x0, 0x10004000}, 0x20004080)
setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000200)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[], 0x1c)

144.225466ms ago: executing program 0 (id=3811):
perf_event_open(&(0x7f0000000d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4022, 0x8000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0xc, 0x7}, 0x10c02c, 0x200, 0x2000000, 0x9, 0x6, 0x9fff, 0x7fff, 0x0, 0x0, 0x0, 0x100000001}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x8)
socket$nl_route(0x10, 0x3, 0x0)
clock_getres(0xfffffffffffffff6, 0x0)
syz_mount_image$vfat(&(0x7f0000000e00), &(0x7f0000000e40)='./file0\x00', 0x22010, &(0x7f0000000e80)=ANY=[], 0x0, 0x11fa, &(0x7f0000000ec0)="$eJzs3M+LG2UYB/Cn29bWrftDrdUWpC960cvQ3YMXBVlkC9KA0naFVhCm7kRDxiRkwkJEjJ68+neIR2+CeNNLL/4N3vbisQdxxMTapsRDadkp4fO55CHv+w3PS0LgHeadw7e+/azbrrJ2PoqVY2/HyiAi3UmRYiXu+ipef/OXX1++duPmlZ1Wa/dqSpd3rm+9kVJav/jTh198/8rPozMf/LD+46m4vfnR4R/bv0/O3T5/+Nf1TztV6lSp1x+lPN3q90f5rbJI+52qm6X0flnkVZE6vaoYzo23y/5gME55b39tdTAsqirlvXHqFuM06qfRcJzyT/JOL2VZltZWg0ex992duq4j6vpkPBV1XddPx2qciWdiLdZjIzbj2Xguno+z8UKcixfjpTg/ndV03wAAAAAAAAAAAAAAAAAAALBcHun8/8WGmwcAAAAAAAAAAAAAAAAAAIAlce3GzSs7rdbu1ZROR5TfHOwd7M1eZ+M77ehEGUVcio34M6an/2dm9eV3W7uX0tRmfF1O/s1PDvaOz+e3po8TWJjfmuXTfP5UrN6f346NOLs4v70wfzpee/W+fBYb8dvH0Y8y9uOf7L38l1spvfNe64H8hek8AAAAWAZZ+s/C/XuW/d/4LP8Q1wce2F+fiAsnml07EdX4825elsWw8eJuR7N3JhHxhDS2xMXJJ6ONx1scn/shNd/PERfHIuJxfE5z/0kcnXtfetOdAAAAAAAAAAAA8DCO4rbEptcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA3O3AsAAAAACDM3zqNjg0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICvAgAA//8Dzctd")
fallocate(0xffffffffffffffff, 0x1, 0x7, 0x8010004)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file1\x00', 0x2a0471a, &(0x7f0000000080)={[{@errors_remount}]}, 0x82, 0x4a7, &(0x7f00000000c0)="$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")
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x7, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x6)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x80, 0x0, 0x7f, 0x0, 0xc1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x4008, 0x400000, 0x0, 0x7, 0x20000000000000, 0x800002, 0x400, 0x0, 0x0, 0x0, 0xdcc7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xe, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB], &(0x7f0000000680)='syzkaller\x00', 0x5, 0xc2, &(0x7f0000000880)=""/194, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26}, 0x94)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000980)={0x2, &(0x7f00000009c0)=[{0x2, 0x8, 0x3}, {0x1d, 0x0, 0x0, 0x1}]})
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000580)='./dev\x00', &(0x7f0000000a40)='affs\x00', 0x820000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000a80)='./mnt\x00', 0x13b)
mount(&(0x7f0000000840)=@sr0, &(0x7f0000000800)='./file2\x00', &(0x7f00000005c0)='pstore\x00', 0x410, 0x0)
iopl(0x2)

143.372966ms ago: executing program 1 (id=3812):
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x48)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000000), 0x4)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x20080, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x8}, 0x4000, 0x0, 0x0, 0x1, 0xc68d, 0x802, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = socket$rds(0x15, 0x5, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000640), r1)
sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={0x1c, r2, 0x1, 0x4000, 0x1000000, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc082}, 0x20004080)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10)
sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{0x3f}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1, 0x3f}}], 0x48}, 0x0)
r3 = getpgrp(0xffffffffffffffff)
gettid()
r4 = perf_event_open$cgroup(&(0x7f0000000300)={0x5, 0x80, 0xfc, 0x1, 0x3, 0x0, 0x0, 0x2, 0x8000, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f00000002c0), 0x4}, 0x30, 0xaa09, 0x8, 0x7, 0xb, 0x7, 0x5a, 0x0, 0x9, 0x0, 0x5}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x6)
perf_event_open(&(0x7f0000000240)={0x7, 0x80, 0x0, 0x8, 0x1, 0xb, 0x0, 0x1, 0xa8624, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7ff0000, 0x4, @perf_config_ext={0x3, 0x8}, 0x2, 0x800, 0x10001, 0x9, 0x8, 0x7, 0x5, 0x0, 0x3, 0x0, 0x3a}, r3, 0xa, r4, 0x2)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x119, 0x32, 0x0, 0x2a)
utimensat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={{0x77359400}}, 0x100)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5)
r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000140)={{0x1, 0x0, 0x0, 0x3}})
r7 = socket(0x5, 0x2, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r7, 0x10f, 0x81, &(0x7f0000000400), 0x4)
recvmmsg(r7, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000d80)=""/67, 0x43}, 0x1}], 0x1, 0x40002122, 0x0)
sendmsg$tipc(r7, &(0x7f0000000e00)={&(0x7f0000000e40)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1}}, 0x10, &(0x7f0000000e80)=[{&(0x7f0000000ec0)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x400d5}, 0x4800)
close_range(r6, 0xffffffffffffffff, 0x400000000000000)
syz_clone(0xc30e3400, 0x0, 0x0, 0x0, 0x0, 0x0)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000500)={0x1, &(0x7f0000000540)=[{0x6}]}, 0x10)
bind$bt_hci(r8, &(0x7f0000000580)={0x1f, 0xffff, 0x2}, 0x6)
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r9, &(0x7f0000000600)={0x1f, 0xffff, 0x3}, 0x6)

0s ago: executing program 0 (id=3813):
r0 = syz_usbip_server_init(0x1)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000d00000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000976000/0x4000)=nil, &(0x7f0000cf8000/0xd000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000d01000/0x4000)=nil, &(0x7f0000004000/0x2000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000d04000/0x1000)=nil, &(0x7f0000000000)="e70449c65fead1e266", 0x9, r0}, 0x68)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24044010)
socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x3, 0x300)
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x73cf, 0x2, @perf_config_ext={0x0, 0x800}, 0x204, 0x7, 0x43a1bd76, 0x9, 0x7, 0x6, 0x7, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x80004000000000, 0xffffffffffffffff, 0x8)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000002c0)={0x1, &(0x7f0000000300)=[{0x6, 0x5, 0x8, 0x7ffc0001}]})
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
r2 = request_key(0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x39, 0x0, 0x0)
request_key(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x0}, 0x0, r2)
mount(&(0x7f0000000480)=@filename='./dev/sda1\x00', &(0x7f00000004c0)='./mnt\x00', &(0x7f0000000500)='ext4\x00', 0x8410, 0x0)
write$evdev(0xffffffffffffffff, &(0x7f0000000540), 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
file_setattr(r1, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x10820, 0x54, 0x5, 0x6, 0x5}, 0x18, 0x400)
fsmount(r1, 0x0, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
cachestat(r1, &(0x7f0000000140)={0x300}, &(0x7f0000000180), 0x0)
r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000d80))
madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16)
ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000dc0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, &(0x7f0000000e40)=[{0x3, 0xfffffffffffffffd, 0x1000}], 0x1, 0xbff, 0x1e, 0x0, 0xc, 0x6e})

kernel console output (not intermixed with test programs):

suppressed
[  224.225656][   T29] audit: type=1326 audit(2000000140.265:5605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13772 comm="syz.9.3341" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ddc79e1d9 code=0x7ffc0000
[  224.225686][   T29] audit: type=1326 audit(2000000140.265:5606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13772 comm="syz.9.3341" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ddc79e1d9 code=0x7ffc0000
[  224.225716][   T29] audit: type=1326 audit(2000000140.265:5607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13772 comm="syz.9.3341" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ddc79e1d9 code=0x7ffc0000
[  224.225856][   T29] audit: type=1326 audit(2000000140.265:5608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13772 comm="syz.9.3341" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f3ddc79e1d9 code=0x7ffc0000
[  224.225992][   T29] audit: type=1326 audit(2000000140.265:5609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13772 comm="syz.9.3341" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ddc79e1d9 code=0x7ffc0000
[  224.226146][   T29] audit: type=1326 audit(2000000140.265:5610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13772 comm="syz.9.3341" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ddc79e1d9 code=0x7ffc0000
[  224.226446][   T29] audit: type=1326 audit(2000000140.265:5611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13772 comm="syz.9.3341" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ddc79e1d9 code=0x7ffc0000
[  224.226476][   T29] audit: type=1326 audit(2000000140.265:5612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13772 comm="syz.9.3341" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ddc79e1d9 code=0x7ffc0000
[  224.228327][   T29] audit: type=1326 audit(2000000140.265:5613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13772 comm="syz.9.3341" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f3ddc79e1d9 code=0x7ffc0000
[  224.228359][   T29] audit: type=1326 audit(2000000140.265:5614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13772 comm="syz.9.3341" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ddc79e1d9 code=0x7ffc0000
[  224.402890][T13778] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13778 comm=syz.1.3342
[  224.445005][ T3398] usb 19-1: new low-speed USB device number 3 using vhci_hcd
[  224.606019][T13778] sd 0:0:1:0: PR command failed: 1026
[  224.606063][T13778] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[  224.606150][T13778] sd 0:0:1:0: Add. Sense: Invalid command operation code
[  224.606399][T13778] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.3342'.
[  224.722110][T13774] vhci_hcd: connection reset by peer
[  224.722751][   T31] vhci_hcd vhci_hcd.9: stop threads
[  224.722771][   T31] vhci_hcd vhci_hcd.9: release socket
[  224.722849][   T31] vhci_hcd vhci_hcd.9: disconnect device
[  224.740832][T13757] Set syz1 is full, maxelem 65536 reached
[  224.791947][T11688] IPVS: starting estimator thread 0...
[  224.881290][T13789] IPVS: using max 2544 ests per chain, 127200 per kthread
[  225.222360][T13770] loop4: detected capacity change from 0 to 8192
[  225.283836][T13804] Option '             äÇ©?oÈëƒÌ›ÔÏpø^ï8Æ	ÝõXKÒtÔ..+jXpsízÐÔû¸ÔÿgˆH{“é&·}–(Ú)“eÒÓH/rD$¹Ïk;REÁŠ¨ãÉ<' to dns_resolver key: bad/missing value
[  225.310211][ T8132] Bluetooth: hci0: command 0x1003 tx timeout
[  225.311952][ T3497] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  225.421041][T13815] loop4: detected capacity change from 0 to 1024
[  225.463052][T13813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  225.463739][T13813] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  225.500060][T13821] loop9: detected capacity change from 0 to 512
[  225.559132][T13824] loop4: detected capacity change from 0 to 512
[  225.563011][T13825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3357'.
[  225.563571][T13826] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3357'.
[  225.563912][T13826] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3357'.
[  225.567426][T13826] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3357'.
[  225.620989][T13821] loop9: detected capacity change from 0 to 256
[  225.640194][T13833] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3353'.
[  225.640232][T13833] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3353'.
[  225.679880][T13821] FAT-fs (loop9): Directory bread(block 1285) failed
[  225.680110][T13821] FAT-fs (loop9): Directory bread(block 1286) failed
[  225.680172][T13821] FAT-fs (loop9): Directory bread(block 1287) failed
[  225.680724][T13821] FAT-fs (loop9): Directory bread(block 1288) failed
[  225.854284][T13813] netdevsim netdevsim0: Direct firmware load for ÿ failed with error -2
[  225.971740][T13838] loop9: detected capacity change from 0 to 512
[  226.005675][T13838] loop9: detected capacity change from 0 to 256
[  226.020420][T13838] FAT-fs (loop9): Directory bread(block 1285) failed
[  226.020460][T13838] FAT-fs (loop9): Directory bread(block 1286) failed
[  226.020500][T13838] FAT-fs (loop9): Directory bread(block 1287) failed
[  226.020700][T13838] FAT-fs (loop9): Directory bread(block 1288) failed
[  227.099528][T13850] SELinux: DCCP has been removed, pid=13850 comm=syz.9.3360
[  227.196419][T13850] netlink: 'syz.9.3360': attribute type 10 has an invalid length.
[  227.443075][T13857] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3)
[  227.443105][T13857] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  227.443216][T13857] vhci_hcd vhci_hcd.0: Device attached
[  227.516155][T13855] loop8: detected capacity change from 0 to 512
[  227.544789][T13855] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended
[  227.544859][T13855] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem
[  227.555301][T13855] EXT4-fs (loop8): warning: checktime reached, running e2fsck is recommended
[  227.564559][T13855] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  227.564759][T13855] System zones: 0-2, 18-18, 34-34
[  227.566443][T13855] EXT4-fs error (device loop8): ext4_orphan_get:1429: comm syz.8.3363: bad orphan inode 15
[  227.566522][T13855] loop8: lost filesystem error report for type 5 error -117
[  227.566784][T13855] ext4_test_bit(bit=14, block=18) = 1
[  227.566846][T13855] is_bad_inode(inode)=0
[  227.566864][T13855] NEXT_ORPHAN(inode)=2264924160
[  227.566883][T13855] max_ino=32
[  227.566926][T13855] i_nlink=0
[  227.567927][T13855] EXT4-fs error (device loop8): ext4_do_update_inode:5801: inode #15: comm syz.8.3363: corrupted inode contents
[  227.568006][T13855] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  227.570190][T13855] EXT4-fs error (device loop8): ext4_dirty_inode:6736: inode #15: comm syz.8.3363: mark_inode_dirty error
[  227.570291][T13855] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  227.570722][T13855] EXT4-fs error (device loop8): ext4_do_update_inode:5801: inode #15: comm syz.8.3363: corrupted inode contents
[  227.570778][T13855] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  227.572400][T13855] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2962: inode #15: comm syz.8.3363: mark_inode_dirty error
[  227.572437][T13855] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  227.572911][T13855] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2965: inode #15: comm syz.8.3363: mark inode dirty (error -117)
[  227.572952][T13855] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  227.573349][T13855] EXT4-fs warning (device loop8): ext4_evict_inode:288: xattr delete (err -117)
[  227.583785][T13855] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  227.697633][ T3552] usb 3-1: new low-speed USB device number 4 using vhci_hcd
[  227.701970][T13855] EXT4-fs error (device loop8): ext4_validate_block_bitmap:445: comm syz.8.3363: bg 0: block 80: padding at end of block bitmap is not set
[  229.080507][T13850] 8021q: adding VLAN 0 to HW filter on device bond0
[  229.081952][T13850] team0: Port device bond0 added
[  229.085012][ T8981] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  229.122673][T13858] vhci_hcd: connection reset by peer
[  229.122877][   T31] vhci_hcd vhci_hcd.1: stop threads
[  229.122960][   T31] vhci_hcd vhci_hcd.1: release socket
[  229.122981][   T31] vhci_hcd vhci_hcd.1: disconnect device
[  229.216156][T13880] bond0: option arp_interval: invalid value ()
[  229.216212][T13880] bond0: option arp_interval: allowed values 0 - 2147483647
[  229.234073][   T29] kauditd_printk_skb: 273 callbacks suppressed
[  229.234087][   T29] audit: type=1326 audit(2000000145.255:5885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13871 comm="syz.4.3367" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510752e1d9 code=0x7ffc0000
[  229.234769][   T29] audit: type=1326 audit(2000000145.275:5889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13871 comm="syz.4.3367" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f510752e1d9 code=0x7ffc0000
[  229.236120][   T29] audit: type=1326 audit(2000000145.275:5890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13871 comm="syz.4.3367" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510752e1d9 code=0x7ffc0000
[  229.236269][   T29] audit: type=1326 audit(2000000145.275:5891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13871 comm="syz.4.3367" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510752e1d9 code=0x7ffc0000
[  229.236591][   T29] audit: type=1326 audit(2000000145.275:5892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13871 comm="syz.4.3367" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510752e1d9 code=0x7ffc0000
[  229.238596][   T29] audit: type=1326 audit(2000000145.275:5893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13871 comm="syz.4.3367" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f51074eea0e code=0x7ffc0000
[  229.290231][   T29] audit: type=1326 audit(2000000145.325:5894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13871 comm="syz.4.3367" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510752e1d9 code=0x7ffc0000
[  229.290276][   T29] audit: type=1326 audit(2000000145.325:5895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13871 comm="syz.4.3367" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510752e1d9 code=0x7ffc0000
[  229.290304][   T29] audit: type=1326 audit(2000000145.325:5896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13871 comm="syz.4.3367" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510752e1d9 code=0x7ffc0000
[  229.290331][   T29] audit: type=1326 audit(2000000145.325:5897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13871 comm="syz.4.3367" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510752e1d9 code=0x7ffc0000
[  229.325182][T13893] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(8)
[  229.325210][T13893] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  229.325250][T13893] vhci_hcd vhci_hcd.0: Device attached
[  229.327356][T13893] vhci_hcd vhci_hcd.0: pdev(9) rhport(1) sockfd(10)
[  229.327404][T13893] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  229.327435][T13893] vhci_hcd vhci_hcd.0: Device attached
[  229.665132][T13921] loop1: detected capacity change from 0 to 512
[  229.763799][T13921] loop1: detected capacity change from 0 to 256
[  229.780367][T13921] FAT-fs (loop1): Directory bread(block 1285) failed
[  229.780428][T13921] FAT-fs (loop1): Directory bread(block 1286) failed
[  229.780688][T13921] FAT-fs (loop1): Directory bread(block 1287) failed
[  229.781599][T13921] FAT-fs (loop1): Directory bread(block 1288) failed
[  229.984301][  T212] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x3b
[  230.042934][T13899] vhci_hcd: connection closed
[  230.043029][T13897] vhci_hcd: connection reset by peer
[  230.043350][   T31] vhci_hcd vhci_hcd.9: stop threads
[  230.043368][   T31] vhci_hcd vhci_hcd.9: release socket
[  230.043390][   T31] vhci_hcd vhci_hcd.9: disconnect device
[  230.043557][   T31] vhci_hcd vhci_hcd.9: stop threads
[  230.043572][   T31] vhci_hcd vhci_hcd.9: release socket
[  230.043597][   T31] vhci_hcd vhci_hcd.9: disconnect device
[  230.043635][ T3398] usb 19-1: enqueue for inactive port 0
[  230.043652][ T3398] usb 19-1: enqueue for inactive port 0
[  230.109910][ T3398] vhci_hcd vhci_hcd.9: vhci_device speed not set
[  230.190922][T13951] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3)
[  230.190984][T13951] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  230.191011][T13951] vhci_hcd vhci_hcd.0: Device attached
[  230.370450][T13952] vhci_hcd: connection closed
[  230.370615][   T31] vhci_hcd vhci_hcd.0: stop threads
[  230.370635][   T31] vhci_hcd vhci_hcd.0: release socket
[  230.370654][   T31] vhci_hcd vhci_hcd.0: disconnect device
[  230.429892][ T6116] usb 1-1: new low-speed USB device number 5 using vhci_hcd
[  230.429951][ T6116] usb 1-1: enqueue for inactive port 0
[  230.429963][ T6116] usb 1-1: enqueue for inactive port 0
[  230.429973][ T6116] usb 1-1: enqueue for inactive port 0
[  230.499943][ T6116] vhci_hcd vhci_hcd.0: vhci_device speed not set
[  230.560211][T13966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  230.560333][T13966] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  231.128552][T13978] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3392'.
[  231.184932][T13979] Invalid argument reading file caps for ./file0
[  231.985008][T14006] 9p: Bad value for 'rfdno'
[  232.328976][T14019] netlink: 'syz.8.3395': attribute type 29 has an invalid length.
[  232.329324][T14019] netlink: 'syz.8.3395': attribute type 29 has an invalid length.
[  232.444619][T14041] loop8: detected capacity change from 0 to 512
[  232.464014][T14041] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  232.464208][T14041] ext4 filesystem being mounted at /256/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  232.538815][ T8981] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  232.578491][T14051] loop8: detected capacity change from 0 to 512
[  232.605166][T14051] loop8: detected capacity change from 0 to 256
[  232.618345][T14051] FAT-fs (loop8): Directory bread(block 1285) failed
[  232.618691][T14051] FAT-fs (loop8): Directory bread(block 1286) failed
[  232.618784][T14051] FAT-fs (loop8): Directory bread(block 1287) failed
[  232.619594][T14051] FAT-fs (loop8): Directory bread(block 1288) failed
[  232.674127][T14053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  232.674218][T14053] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  232.749968][ T3552] usb 3-1: enqueue for inactive port 0
[  232.749989][ T3552] usb 3-1: enqueue for inactive port 0
[  232.819847][ T3552] vhci_hcd vhci_hcd.1: vhci_device speed not set
[  232.963858][T13935] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  233.017286][T14058] loop9: detected capacity change from 0 to 512
[  233.046238][T14058] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  233.046341][T14058] ext4 filesystem being mounted at /191/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  233.080469][T10765] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  233.185392][T14070] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  233.229216][T14071] loop9: detected capacity change from 0 to 164
[  233.239437][T14071] rock: corrupted directory entry. extent=41 out of volume (nzones=41)
[  233.276346][T14077] loop8: detected capacity change from 0 to 512
[  233.478955][T14105] loop1: detected capacity change from 0 to 512
[  233.495233][T14077] loop8: detected capacity change from 0 to 256
[  233.500027][T14077] FAT-fs (loop8): Directory bread(block 1285) failed
[  233.500078][T14077] FAT-fs (loop8): Directory bread(block 1286) failed
[  233.500097][T14077] FAT-fs (loop8): Directory bread(block 1287) failed
[  233.500182][T14077] FAT-fs (loop8): Directory bread(block 1288) failed
[  233.563077][T14090] loop4: detected capacity change from 0 to 512
[  233.625818][T14089] SELinux:  Context u:r:untrusted_app:s0:c512,c768 is not valid (left unmapped).
[  233.647479][T14105] loop1: detected capacity change from 0 to 256
[  233.667493][T14105] FAT-fs (loop1): Directory bread(block 1285) failed
[  233.667712][T14105] FAT-fs (loop1): Directory bread(block 1286) failed
[  233.667791][T14105] FAT-fs (loop1): Directory bread(block 1287) failed
[  233.668171][T14105] FAT-fs (loop1): Directory bread(block 1288) failed
[  233.728674][T14109] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  233.752559][T14109] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  233.766592][T14115] FAULT_INJECTION: forcing a failure.
[  233.766592][T14115] name failslab, interval 1, probability 0, space 0, times 0
[  233.766624][T14115] CPU: 1 UID: 0 PID: 14115 Comm: syz.9.3423 Not tainted syzkaller #0 PREEMPT(lazy) 
[  233.766672][T14115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  233.766686][T14115] Call Trace:
[  233.766692][T14115]  <TASK>
[  233.766702][T14115]  __dump_stack+0x1d/0x30
[  233.766742][T14115]  dump_stack_lvl+0x95/0xd0
[  233.766767][T14115]  dump_stack+0x15/0x1b
[  233.766790][T14115]  should_fail_ex+0x262/0x280
[  233.766855][T14115]  ? __se_sys_mincore+0xf1/0x4e0
[  233.766895][T14115]  should_failslab+0x8c/0xb0
[  233.766931][T14115]  __kmalloc_cache_noprof+0x7a/0x400
[  233.767029][T14115]  ? __se_sys_mincore+0xf1/0x4e0
[  233.767063][T14115]  __se_sys_mincore+0xf1/0x4e0
[  233.767095][T14115]  __x64_sys_mincore+0x43/0x50
[  233.767149][T14115]  x64_sys_call+0x1c8c/0x2550
[  233.767178][T14115]  do_syscall_64+0x112/0x360
[  233.767249][T14115]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.767274][T14115] RIP: 0033:0x7f3ddc79e1d9
[  233.767292][T14115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  233.767312][T14115] RSP: 002b:00007f3ddb1f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000001b
[  233.767382][T14115] RAX: ffffffffffffffda RBX: 00007f3ddca25fa0 RCX: 00007f3ddc79e1d9
[  233.767399][T14115] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000
[  233.767413][T14115] RBP: 00007f3ddc835888 R08: 0000000000000000 R09: 0000000000000000
[  233.767428][T14115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  233.767442][T14115] R13: 00007f3ddca26038 R14: 00007f3ddca25fa0 R15: 00007ffcad2304a8
[  233.767463][T14115]  </TASK>
[  233.768720][T14115] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3423'.
[  234.060745][T14129] FAULT_INJECTION: forcing a failure.
[  234.060745][T14129] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  234.060774][T14129] CPU: 1 UID: 0 PID: 14129 Comm: syz.8.3426 Not tainted syzkaller #0 PREEMPT(lazy) 
[  234.060797][T14129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  234.060839][T14129] Call Trace:
[  234.060847][T14129]  <TASK>
[  234.060856][T14129]  __dump_stack+0x1d/0x30
[  234.060881][T14129]  dump_stack_lvl+0x95/0xd0
[  234.060924][T14129]  dump_stack+0x15/0x1b
[  234.060944][T14129]  should_fail_ex+0x262/0x280
[  234.060977][T14129]  should_fail+0xb/0x20
[  234.061005][T14129]  should_fail_usercopy+0x1a/0x20
[  234.061121][T14129]  _copy_from_user+0x1c/0xb0
[  234.061152][T14129]  xsk_setsockopt+0x271/0x640
[  234.061177][T14129]  ? __pfx_xsk_setsockopt+0x10/0x10
[  234.061263][T14129]  __sys_setsockopt+0x184/0x200
[  234.061288][T14129]  __x64_sys_setsockopt+0x64/0x80
[  234.061385][T14129]  x64_sys_call+0x248f/0x2550
[  234.061413][T14129]  do_syscall_64+0x112/0x360
[  234.061442][T14129]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  234.061539][T14129] RIP: 0033:0x7f4398f3e1d9
[  234.061556][T14129] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  234.061577][T14129] RSP: 002b:00007f4397997028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  234.061664][T14129] RAX: ffffffffffffffda RBX: 00007f43991c5fa0 RCX: 00007f4398f3e1d9
[  234.061677][T14129] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000003
[  234.061689][T14129] RBP: 00007f4397997090 R08: 0000000000000004 R09: 0000000000000000
[  234.061701][T14129] R10: 0000200000000780 R11: 0000000000000246 R12: 0000000000000001
[  234.061738][T14129] R13: 00007f43991c6038 R14: 00007f43991c5fa0 R15: 00007ffd368d65a8
[  234.061758][T14129]  </TASK>
[  234.150987][T14136] netlink: 'syz.1.3427': attribute type 4 has an invalid length.
[  234.256918][T14137] netlink: 'syz.1.3427': attribute type 39 has an invalid length.
[  234.480315][T14143] FAT-fs (loop1): Directory bread(block 1285) failed
[  234.480629][T14143] FAT-fs (loop1): Directory bread(block 1286) failed
[  234.480770][T14143] FAT-fs (loop1): Directory bread(block 1287) failed
[  234.481099][T14143] FAT-fs (loop1): Directory bread(block 1288) failed
[  234.605678][T14147] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check.
[  234.608420][T14147] FAULT_INJECTION: forcing a failure.
[  234.608420][T14147] name fail_futex, interval 1, probability 0, space 0, times 0
[  234.608454][T14147] CPU: 0 UID: 0 PID: 14147 Comm: syz.1.3433 Not tainted syzkaller #0 PREEMPT(lazy) 
[  234.608533][T14147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  234.608548][T14147] Call Trace:
[  234.608555][T14147]  <TASK>
[  234.608564][T14147]  __dump_stack+0x1d/0x30
[  234.608597][T14147]  dump_stack_lvl+0x95/0xd0
[  234.608630][T14147]  dump_stack+0x15/0x1b
[  234.608642][T14147]  should_fail_ex+0x262/0x280
[  234.608660][T14147]  should_fail+0xb/0x20
[  234.608675][T14147]  get_futex_key+0x12d/0xb10
[  234.608750][T14147]  ? lapic_next_event+0x11/0x20
[  234.608766][T14147]  futex_wake+0x89/0x400
[  234.608778][T14147]  ? tick_program_event+0x79/0xc0
[  234.608811][T14147]  do_futex+0x3f8/0x460
[  234.608898][T14147]  ? irqentry_exit+0x58f/0x610
[  234.608972][T14147]  __se_sys_futex+0x2f6/0x370
[  234.608992][T14147]  __x64_sys_futex+0x78/0x90
[  234.609010][T14147]  x64_sys_call+0x22e2/0x2550
[  234.609026][T14147]  do_syscall_64+0x112/0x360
[  234.609108][T14147]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  234.609122][T14147] RIP: 0033:0x7efea96be1d9
[  234.609133][T14147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  234.609216][T14147] RSP: 002b:00007efea81170e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  234.609230][T14147] RAX: ffffffffffffffda RBX: 00007efea9945fa8 RCX: 00007efea96be1d9
[  234.609239][T14147] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007efea9945fac
[  234.609276][T14147] RBP: 00007efea9945fa0 R08: 3fffffffffffffff R09: 0000000000000000
[  234.609285][T14147] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  234.609293][T14147] R13: 00007efea9946038 R14: 00007fffed2ef8c0 R15: 00007fffed2ef9a8
[  234.609305][T14147]  </TASK>
[  234.679619][T14147] ip_tables: iptables: counters copy to user failed while replacing table
[  234.829299][T14152] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  234.849466][T14152] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  236.136319][T14172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  236.137361][T14172] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  236.153998][T14172] netdevsim netdevsim8: Direct firmware load for ÿ failed with error -2
[  236.384682][T14096] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  236.421047][T14176] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  236.456302][T14179] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3445'.
[  236.503890][T14179] 9p: Bad value for 'rfdno'
[  236.637748][T14196] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3)
[  236.637775][T14196] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  236.637855][T14196] vhci_hcd vhci_hcd.0: Device attached
[  236.659549][T10720] tipc: Subscription rejected, illegal request
[  236.695951][   T29] kauditd_printk_skb: 291 callbacks suppressed
[  236.695967][   T29] audit: type=1326 audit(2000000152.735:6189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14195 comm="syz.0.3452" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e34ae1d9 code=0x7ffc0000
[  236.696148][   T29] audit: type=1326 audit(2000000152.735:6190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14195 comm="syz.0.3452" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e34ae1d9 code=0x7ffc0000
[  236.696303][   T29] audit: type=1326 audit(2000000152.735:6191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14195 comm="syz.0.3452" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e34ae1d9 code=0x7ffc0000
[  236.696418][   T29] audit: type=1326 audit(2000000152.735:6192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14195 comm="syz.0.3452" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e34ae1d9 code=0x7ffc0000
[  236.696586][   T29] audit: type=1326 audit(2000000152.735:6193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14195 comm="syz.0.3452" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f55e34ae1d9 code=0x7ffc0000
[  236.696782][   T29] audit: type=1326 audit(2000000152.735:6194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14195 comm="syz.0.3452" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e34ae1d9 code=0x7ffc0000
[  236.697112][   T29] audit: type=1326 audit(2000000152.735:6195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14195 comm="syz.0.3452" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e34ae1d9 code=0x7ffc0000
[  236.697187][   T29] audit: type=1326 audit(2000000152.735:6196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14195 comm="syz.0.3452" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e34ae1d9 code=0x7ffc0000
[  236.697276][   T29] audit: type=1326 audit(2000000152.735:6197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14195 comm="syz.0.3452" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f55e34ae1d9 code=0x7ffc0000
[  236.697398][   T29] audit: type=1326 audit(2000000152.735:6198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14195 comm="syz.0.3452" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e34ae1d9 code=0x7ffc0000
[  236.920149][ T6116] usb 1-1: new low-speed USB device number 6 using vhci_hcd
[  237.051513][T14197] vhci_hcd: connection reset by peer
[  237.051753][  T212] vhci_hcd vhci_hcd.0: stop threads
[  237.051771][  T212] vhci_hcd vhci_hcd.0: release socket
[  237.051792][  T212] vhci_hcd vhci_hcd.0: disconnect device
[  237.053854][T14204] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  237.053870][T14204] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  237.055114][T14204] EXT4-fs (loop8): 1 truncate cleaned up
[  237.055473][T14204] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  237.302674][T14215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  237.302762][T14215] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  237.637291][T14244] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3469'.
[  237.725070][T14236] set_capacity_and_notify: 8 callbacks suppressed
[  237.725087][T14236] loop1: detected capacity change from 0 to 8192
[  237.762321][T14249] loop1: detected capacity change from 0 to 1024
[  237.764364][T14249] EXT4-fs: Ignoring removed mblk_io_submit option
[  237.784092][T14249] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  237.830346][T14254] loop9: detected capacity change from 0 to 512
[  237.843100][T14254] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  237.843252][T14254] ext4 filesystem being mounted at /204/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  237.845160][T14257] EXT4-fs error (device loop1): ext4_iget_extra_inode:5210: inode #15: comm syz.1.3471: corrupted in-inode xattr: bad e_name length
[  237.895801][T10765] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  237.940236][ T8981] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  237.992870][T14267] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3)
[  237.992965][T14267] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  237.992993][T14267] vhci_hcd vhci_hcd.0: Device attached
[  238.046089][T14271] loop9: detected capacity change from 0 to 512
[  238.062952][T14271] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  238.063092][T14271] ext4 filesystem being mounted at /208/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  238.097895][T10765] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  238.147112][T14278] loop9: detected capacity change from 0 to 1024
[  238.172169][T14278] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  238.217938][T14268] vhci_hcd: connection closed
[  238.219614][T10720] vhci_hcd vhci_hcd.8: stop threads
[  238.219635][T10720] vhci_hcd vhci_hcd.8: release socket
[  238.219658][T10720] vhci_hcd vhci_hcd.8: disconnect device
[  238.251261][    T9] usb 17-1: new low-speed USB device number 4 using vhci_hcd
[  238.251295][    T9] usb 17-1: enqueue for inactive port 0
[  238.251321][    T9] usb 17-1: enqueue for inactive port 0
[  238.251336][    T9] usb 17-1: enqueue for inactive port 0
[  238.319825][    T9] vhci_hcd vhci_hcd.8: vhci_device speed not set
[  238.691609][T11656] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  238.709370][T14287] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3483'.
[  238.777543][T14287] loop1: detected capacity change from 0 to 512
[  238.787736][T14287] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  238.798909][T14287] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  238.799176][T14287] ext4 filesystem being mounted at /144/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  238.818167][T14287] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3483'.
[  238.888878][T11656] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  238.907755][T14297] loop1: detected capacity change from 0 to 128
[  238.920543][T14297] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  238.920919][T14297] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  239.014530][T10765] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  239.032186][T14300] loop9: detected capacity change from 0 to 128
[  239.048426][T14300] netlink: 96 bytes leftover after parsing attributes in process `syz.9.3486'.
[  239.301270][T14305] xt_nat: multiple ranges no longer supported
[  239.350972][T14315] loop8: detected capacity change from 0 to 512
[  239.374798][T14315] loop8: detected capacity change from 0 to 256
[  239.391657][T14315] FAT-fs (loop8): Directory bread(block 1285) failed
[  239.391714][T14315] FAT-fs (loop8): Directory bread(block 1286) failed
[  239.391747][T14315] FAT-fs (loop8): Directory bread(block 1287) failed
[  239.391846][T14315] FAT-fs (loop8): Directory bread(block 1288) failed
[  239.438732][T11656] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  239.723826][T14336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  239.724027][T14336] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  239.853548][T14345] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  239.855959][T14345] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  240.028855][T14358] bonding: no command found in bonding_masters - use +ifname or -ifname
[  240.092726][T14360] FAULT_INJECTION: forcing a failure.
[  240.092726][T14360] name failslab, interval 1, probability 0, space 0, times 0
[  240.092755][T14360] CPU: 1 UID: 0 PID: 14360 Comm: syz.9.3505 Not tainted syzkaller #0 PREEMPT(lazy) 
[  240.092862][T14360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  240.092877][T14360] Call Trace:
[  240.092884][T14360]  <TASK>
[  240.092893][T14360]  __dump_stack+0x1d/0x30
[  240.092998][T14360]  dump_stack_lvl+0x95/0xd0
[  240.093024][T14360]  dump_stack+0x15/0x1b
[  240.093126][T14360]  should_fail_ex+0x262/0x280
[  240.093174][T14360]  should_failslab+0x8c/0xb0
[  240.093279][T14360]  __kmalloc_node_track_caller_noprof+0xd6/0x500
[  240.093387][T14360]  ? proc_register+0x41d/0x4b0
[  240.093416][T14360]  ? nf_log_net_init+0x6e/0x850
[  240.093492][T14360]  ? nf_log_net_init+0x6e/0x850
[  240.093525][T14360]  kmemdup_noprof+0x2b/0x70
[  240.093551][T14360]  nf_log_net_init+0x6e/0x850
[  240.093670][T14360]  ops_init+0x22a/0x2e0
[  240.093692][T14360]  setup_net+0x9f/0x230
[  240.093727][T14360]  copy_net_ns+0x333/0x490
[  240.093764][T14360]  create_new_namespaces+0x1f6/0x420
[  240.093887][T14360]  unshare_nsproxy_namespaces+0x115/0x150
[  240.093927][T14360]  ksys_unshare+0x3fd/0x6f0
[  240.093959][T14360]  __x64_sys_unshare+0x1f/0x30
[  240.094030][T14360]  x64_sys_call+0x1e33/0x2550
[  240.094058][T14360]  do_syscall_64+0x112/0x360
[  240.094091][T14360]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  240.094150][T14360] RIP: 0033:0x7f3ddc79e1d9
[  240.094173][T14360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  240.094193][T14360] RSP: 002b:00007f3ddb1f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  240.094216][T14360] RAX: ffffffffffffffda RBX: 00007f3ddca25fa0 RCX: 00007f3ddc79e1d9
[  240.094233][T14360] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[  240.094324][T14360] RBP: 00007f3ddc835888 R08: 0000000000000000 R09: 0000000000000000
[  240.094338][T14360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  240.094402][T14360] R13: 00007f3ddca26038 R14: 00007f3ddca25fa0 R15: 00007ffcad2304a8
[  240.094424][T14360]  </TASK>
[  240.265049][T14366] netlink: 'syz.9.3507': attribute type 1 has an invalid length.
[  240.265080][T14366] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3507'.
[  240.423662][T14372] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  240.423680][T14372] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  240.429025][T14372] EXT4-fs (loop4): 1 truncate cleaned up
[  240.429354][T14372] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  240.432846][T14370] netlink: 'syz.9.3509': attribute type 8 has an invalid length.
[  240.607131][T13391] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  240.621406][T14376] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  240.638921][T14376] EXT4-fs (loop1): 1 truncate cleaned up
[  240.639301][T14376] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  240.739145][T14384] EXT4-fs: Ignoring removed nobh option
[  240.745929][T14384] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  240.765214][T14384] EXT4-fs error (device loop9): ext4_do_update_inode:5801: inode #3: comm syz.9.3514: corrupted inode contents
[  240.765241][T14384] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  240.769693][T14384] EXT4-fs (loop9): Remounting filesystem read-only
[  240.769780][    C1] EXT4-fs (loop9): error count since last fsck: 1
[  240.769795][    C1] EXT4-fs (loop9): initial error at time 2000000156: ext4_do_update_inode:5801: inode 3
[  240.769847][    C1] EXT4-fs (loop9): last error at time 2000000156: ext4_do_update_inode:5801: inode 3
[  240.777890][T14384] EXT4-fs (loop9): 1 truncate cleaned up
[  240.778527][T14384] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  240.778661][T14384] ext4 filesystem being mounted at /file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  240.791655][T14384] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  240.892543][T11656] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  240.962696][T14398] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  240.978739][T14398] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  241.005769][T14402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  241.006256][T14402] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  241.146567][T14407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  241.146696][T14407] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  241.536967][T14412] SELinux:  policydb version 304599178 does not match my version range 15-35
[  241.536990][T14412] SELinux: failed to load policy
[  241.571801][T14416] FAULT_INJECTION: forcing a failure.
[  241.571801][T14416] name failslab, interval 1, probability 0, space 0, times 0
[  241.571835][T14416] CPU: 1 UID: 0 PID: 14416 Comm: syz.0.3522 Not tainted syzkaller #0 PREEMPT(lazy) 
[  241.571914][T14416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  241.571925][T14416] Call Trace:
[  241.571931][T14416]  <TASK>
[  241.571937][T14416]  __dump_stack+0x1d/0x30
[  241.572031][T14416]  dump_stack_lvl+0x95/0xd0
[  241.572059][T14416]  dump_stack+0x15/0x1b
[  241.572145][T14416]  should_fail_ex+0x262/0x280
[  241.572219][T14416]  ? skb_clone+0x151/0x1f0
[  241.572307][T14416]  should_failslab+0x8c/0xb0
[  241.572345][T14416]  kmem_cache_alloc_noprof+0x7c/0x3f0
[  241.572378][T14416]  ? skb_clone+0x151/0x1f0
[  241.572494][T14416]  skb_clone+0x151/0x1f0
[  241.572517][T14416]  __netlink_deliver_tap+0x2be/0x510
[  241.572618][T14416]  netlink_unicast+0x656/0x680
[  241.572658][T14416]  netlink_sendmsg+0x5be/0x6f0
[  241.572686][T14416]  ? __pfx_netlink_sendmsg+0x10/0x10
[  241.572708][T14416]  sock_write_iter+0x2c5/0x2f0
[  241.572792][T14416]  ? __pfx_sock_write_iter+0x10/0x10
[  241.572908][T14416]  vfs_write+0x57f/0x9a0
[  241.572943][T14416]  ksys_write+0xdc/0x1a0
[  241.572978][T14416]  __x64_sys_write+0x40/0x50
[  241.573087][T14416]  x64_sys_call+0x154e/0x2550
[  241.573111][T14416]  do_syscall_64+0x112/0x360
[  241.573139][T14416]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  241.573165][T14416] RIP: 0033:0x7f55e34ae1d9
[  241.573196][T14416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  241.573216][T14416] RSP: 002b:00007f55e1f07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  241.573312][T14416] RAX: ffffffffffffffda RBX: 00007f55e3735fa0 RCX: 00007f55e34ae1d9
[  241.573401][T14416] RDX: 0000000000000024 RSI: 0000200000000240 RDI: 0000000000000004
[  241.573417][T14416] RBP: 00007f55e1f07090 R08: 0000000000000000 R09: 0000000000000000
[  241.573432][T14416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  241.573447][T14416] R13: 00007f55e3736038 R14: 00007f55e3735fa0 R15: 00007ffe3fca6918
[  241.573473][T14416]  </TASK>
[  241.621622][T14418] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3523'.
[  241.646483][T14418] syz.0.3523: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0
[  241.646629][T14418] CPU: 1 UID: 0 PID: 14418 Comm: syz.0.3523 Not tainted syzkaller #0 PREEMPT(lazy) 
[  241.646656][T14418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  241.646670][T14418] Call Trace:
[  241.646750][T14418]  <TASK>
[  241.646826][T14418]  __dump_stack+0x1d/0x30
[  241.646852][T14418]  dump_stack_lvl+0x95/0xd0
[  241.646877][T14418]  dump_stack+0x15/0x1b
[  241.646900][T14418]  warn_alloc+0x146/0x1c0
[  241.646924][T14418]  ? __rcu_read_unlock+0x4e/0x70
[  241.646962][T14418]  ? __futex_wait+0x1fd/0x260
[  241.646986][T14418]  __vmalloc_node_range_noprof+0xa3/0x1000
[  241.647041][T14418]  ? __pfx_futex_wake_mark+0x10/0x10
[  241.647062][T14418]  ? __rcu_read_unlock+0x4e/0x70
[  241.647091][T14418]  ? should_fail_ex+0x31/0x280
[  241.647200][T14418]  ? xskq_create+0x38/0x160
[  241.647316][T14418]  ? should_failslab+0x8c/0xb0
[  241.647351][T14418]  ? __kmalloc_cache_noprof+0x19b/0x400
[  241.647392][T14418]  xskq_create+0xea/0x160
[  241.647494][T14418]  ? xsk_init_queue+0x70/0xb0
[  241.647523][T14418]  xsk_init_queue+0x70/0xb0
[  241.647552][T14418]  xsk_setsockopt+0x3ef/0x640
[  241.647634][T14418]  ? __pfx_xsk_setsockopt+0x10/0x10
[  241.647662][T14418]  __sys_setsockopt+0x184/0x200
[  241.647710][T14418]  __x64_sys_setsockopt+0x64/0x80
[  241.647803][T14418]  x64_sys_call+0x248f/0x2550
[  241.647926][T14418]  do_syscall_64+0x112/0x360
[  241.647955][T14418]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  241.647979][T14418] RIP: 0033:0x7f55e34ae1d9
[  241.648026][T14418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  241.648046][T14418] RSP: 002b:00007f55e1f07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  241.648067][T14418] RAX: ffffffffffffffda RBX: 00007f55e3735fa0 RCX: 00007f55e34ae1d9
[  241.648109][T14418] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005
[  241.648123][T14418] RBP: 00007f55e3545888 R08: 0000000000000004 R09: 0000000000000000
[  241.648138][T14418] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000000
[  241.648151][T14418] R13: 00007f55e3736038 R14: 00007f55e3735fa0 R15: 00007ffe3fca6918
[  241.648182][T14418]  </TASK>
[  241.654779][T14418] Mem-Info:
[  241.654790][T14418] active_anon:61180 inactive_anon:8592 isolated_anon:0
[  241.654790][T14418]  active_file:13293 inactive_file:15895 isolated_file:0
[  241.654790][T14418]  unevictable:17 dirty:598 writeback:0
[  241.654790][T14418]  slab_reclaimable:3212 slab_unreclaimable:26114
[  241.654790][T14418]  mapped:34163 shmem:60946 pagetables:3814
[  241.654790][T14418]  sec_pagetables:0 bounce:0
[  241.654790][T14418]  kernel_misc_reclaimable:0
[  241.654790][T14418]  free:1792112 free_pcp:8637 free_cma:0
[  241.654862][T14418] Node 0 active_anon:244720kB inactive_anon:34368kB active_file:53172kB inactive_file:63580kB unevictable:68kB isolated(anon):0kB isolated(file):0kB mapped:136652kB dirty:2392kB writeback:0kB shmem:243784kB kernel_stack:5360kB pagetables:15256kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  241.654924][T14418] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  241.655079][T14418] lowmem_reserve[]: 0 2878 7856 7856
[  241.655109][T14418] Node 0 DMA32 free:2943616kB boost:0kB min:4124kB low:7048kB high:9972kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2947140kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:3524kB free_cma:0kB
[  241.655249][T14418] lowmem_reserve[]: 0 0 4978 4978
[  241.655277][T14418] Node 0 Normal free:4209472kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0kB free_highatomic:0kB active_anon:244720kB inactive_anon:34368kB active_file:53172kB inactive_file:63580kB unevictable:68kB writepending:2392kB zspages:0kB present:5242880kB managed:5098228kB mlocked:64kB bounce:0kB free_pcp:31024kB local_pcp:5616kB free_cma:0kB
[  241.655484][T14418] lowmem_reserve[]: 0 0 0 0
[  241.655512][T14418] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  241.655662][T14418] Node 0 DMA32: 2*4kB (M) 3*8kB (M) 2*16kB (M) 4*32kB (M) 3*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 2*1024kB (M) 1*2048kB (M) 717*4096kB (M) = 2943616kB
[  241.655933][T14418] Node 0 Normal: 5674*4kB (UME) 297*8kB (UME) 229*16kB (UME) 308*32kB (ME) 284*64kB (UME) 237*128kB (UME) 127*256kB (UM) 60*512kB (UME) 18*1024kB (UME) 21*2048kB (UME) 976*4096kB (UM) = 4209472kB
[  241.658974][T14418] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[  241.658993][T14418] 90209 total pagecache pages
[  241.659000][T14418] 75 pages in swap cache
[  241.659008][T14418] Free swap  = 27200kB
[  241.659015][T14418] Total swap = 124996kB
[  241.659023][T14418] 2097051 pages RAM
[  241.659030][T14418] 0 pages HighMem/MovableOnly
[  241.659100][T14418] 81869 pages reserved
[  241.952112][ T6116] usb 1-1: enqueue for inactive port 0
[  241.952139][ T6116] usb 1-1: enqueue for inactive port 0
[  242.022291][ T6116] vhci_hcd vhci_hcd.0: vhci_device speed not set
[  242.245340][T14430] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  242.246044][T14430] ext4 filesystem being mounted at /287/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  242.399528][   T29] kauditd_printk_skb: 1303 callbacks suppressed
[  242.399544][   T29] audit: type=1400 audit(2000000158.435:7500): avc:  denied  { create } for  pid=14429 comm="syz.9.3527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  242.403974][   T29] audit: type=1400 audit(2000000158.445:7501): avc:  denied  { bind } for  pid=14429 comm="syz.9.3527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  242.416383][   T29] audit: type=1400 audit(2000000158.455:7502): avc:  denied  { write } for  pid=14429 comm="syz.9.3527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  242.579579][T14414] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities
[  242.624228][T14441] 9pnet_fd: p9_fd_create_tcp (14441): problem connecting socket to 127.0.0.1
[  242.658413][T14445] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(3)
[  242.658442][T14445] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  242.658473][T14445] vhci_hcd vhci_hcd.0: Device attached
[  242.702066][T14451] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3532'.
[  242.761510][ T8981] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  242.784573][   T29] audit: type=1326 audit(2000000158.825:7503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14444 comm="syz.9.3530" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ddc79e1d9 code=0x7ffc0000
[  242.784656][   T29] audit: type=1326 audit(2000000158.825:7504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14444 comm="syz.9.3530" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ddc79e1d9 code=0x7ffc0000
[  242.784729][   T29] audit: type=1326 audit(2000000158.825:7505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14444 comm="syz.9.3530" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ddc79e1d9 code=0x7ffc0000
[  242.799482][T14456] FAULT_INJECTION: forcing a failure.
[  242.799482][T14456] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  242.799514][T14456] CPU: 1 UID: 0 PID: 14456 Comm: syz.8.3533 Not tainted syzkaller #0 PREEMPT(lazy) 
[  242.799582][T14456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  242.799595][T14456] Call Trace:
[  242.799602][T14456]  <TASK>
[  242.799611][T14456]  __dump_stack+0x1d/0x30
[  242.799637][T14456]  dump_stack_lvl+0x95/0xd0
[  242.799661][T14456]  dump_stack+0x15/0x1b
[  242.799731][T14456]  should_fail_ex+0x262/0x280
[  242.799763][T14456]  should_fail+0xb/0x20
[  242.799786][T14456]  should_fail_usercopy+0x1a/0x20
[  242.799887][T14456]  strncpy_from_user+0x27/0x250
[  242.799925][T14456]  strncpy_from_bpfptr+0x43/0x50
[  242.799959][T14456]  bpf_prog_load+0x8e3/0x1060
[  242.799988][T14456]  ? avc_has_perm_noaudit+0xac/0x160
[  242.800026][T14456]  ? vfs_write+0x7b0/0x9a0
[  242.800163][T14456]  __sys_bpf+0xbae/0xc30
[  242.800191][T14456]  ? vfs_write+0x7b0/0x9a0
[  242.800223][T14456]  ? vfs_write+0x7b0/0x9a0
[  242.800305][T14456]  __x64_sys_bpf+0x69/0x80
[  242.800383][T14456]  x64_sys_call+0xf26/0x2550
[  242.800483][T14456]  do_syscall_64+0x112/0x360
[  242.800528][T14456]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  242.800552][T14456] RIP: 0033:0x7f4398f3e1d9
[  242.800570][T14456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  242.800595][T14456] RSP: 002b:00007f4397997028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  242.800616][T14456] RAX: ffffffffffffffda RBX: 00007f43991c5fa0 RCX: 00007f4398f3e1d9
[  242.800632][T14456] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005
[  242.800721][T14456] RBP: 00007f4397997090 R08: 0000000000000000 R09: 0000000000000000
[  242.800736][T14456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  242.800815][T14456] R13: 00007f43991c6038 R14: 00007f43991c5fa0 R15: 00007ffd368d65a8
[  242.800840][T14456]  </TASK>
[  242.800966][   T29] audit: type=1326 audit(2000000158.835:7506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14444 comm="syz.9.3530" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f3ddc79e1d9 code=0x7ffc0000
[  242.801072][   T29] audit: type=1326 audit(2000000158.835:7507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14444 comm="syz.9.3530" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ddc79e1d9 code=0x7ffc0000
[  242.801100][   T29] audit: type=1326 audit(2000000158.835:7508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14444 comm="syz.9.3530" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ddc79e1d9 code=0x7ffc0000
[  242.801129][   T29] audit: type=1326 audit(2000000158.835:7509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14444 comm="syz.9.3530" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ddc79e1d9 code=0x7ffc0000
[  242.903184][ T6113] usb 19-1: new low-speed USB device number 4 using vhci_hcd
[  243.166431][T14476] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3541'.
[  243.190851][T14446] vhci_hcd: connection reset by peer
[  243.192835][  T212] vhci_hcd vhci_hcd.9: stop threads
[  243.192863][  T212] vhci_hcd vhci_hcd.9: release socket
[  243.192887][  T212] vhci_hcd vhci_hcd.9: disconnect device
[  243.467665][T14486] process '/newroot/124/file0' started with executable stack
[  243.480227][T14489] FAULT_INJECTION: forcing a failure.
[  243.480227][T14489] name failslab, interval 1, probability 0, space 0, times 0
[  243.480247][T14489] CPU: 1 UID: 0 PID: 14489 Comm: syz.0.3546 Not tainted syzkaller #0 PREEMPT(lazy) 
[  243.480263][T14489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  243.480271][T14489] Call Trace:
[  243.480275][T14489]  <TASK>
[  243.480280][T14489]  __dump_stack+0x1d/0x30
[  243.480423][T14489]  dump_stack_lvl+0x95/0xd0
[  243.480448][T14489]  dump_stack+0x15/0x1b
[  243.480469][T14489]  should_fail_ex+0x262/0x280
[  243.480603][T14489]  ? __alloc_skb+0x2e0/0x6f0
[  243.480616][T14489]  should_failslab+0x8c/0xb0
[  243.480704][T14489]  kmem_cache_alloc_node_noprof+0x82/0x400
[  243.480724][T14489]  ? netlink_insert+0x684/0x900
[  243.480735][T14489]  ? __alloc_skb+0x2e0/0x6f0
[  243.480790][T14489]  __alloc_skb+0x2e0/0x6f0
[  243.480802][T14489]  ? __alloc_skb+0x209/0x6f0
[  243.480814][T14489]  netlink_alloc_large_skb+0xbf/0xf0
[  243.480835][T14489]  netlink_sendmsg+0x40c/0x6f0
[  243.480930][T14489]  ? __pfx_netlink_sendmsg+0x10/0x10
[  243.480943][T14489]  ____sys_sendmsg+0x532/0x580
[  243.480961][T14489]  ___sys_sendmsg+0x195/0x1e0
[  243.481053][T14489]  __x64_sys_sendmsg+0xd4/0x160
[  243.481114][T14489]  x64_sys_call+0x22ab/0x2550
[  243.481131][T14489]  do_syscall_64+0x112/0x360
[  243.481148][T14489]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  243.481162][T14489] RIP: 0033:0x7f55e34ae1d9
[  243.481173][T14489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  243.481257][T14489] RSP: 002b:00007f55e1f07028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  243.481284][T14489] RAX: ffffffffffffffda RBX: 00007f55e3735fa0 RCX: 00007f55e34ae1d9
[  243.481293][T14489] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000005
[  243.481301][T14489] RBP: 00007f55e1f07090 R08: 0000000000000000 R09: 0000000000000000
[  243.481309][T14489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  243.481317][T14489] R13: 00007f55e3736038 R14: 00007f55e3735fa0 R15: 00007ffe3fca6918
[  243.481329][T14489]  </TASK>
[  243.662690][T14493] set_capacity_and_notify: 26 callbacks suppressed
[  243.662736][T14493] loop1: detected capacity change from 0 to 512
[  243.704506][T14493] FAT-fs (loop1): error, clusters badly computed (1 != 0)
[  243.704548][T14493] FAT-fs (loop1): Filesystem has been set read-only
[  243.823635][T14508] loop1: detected capacity change from 0 to 512
[  243.907273][T14508] loop1: detected capacity change from 0 to 256
[  244.397225][T14508] FAT-fs (loop1): Directory bread(block 1285) failed
[  244.397356][T14508] FAT-fs (loop1): Directory bread(block 1286) failed
[  244.397436][T14508] FAT-fs (loop1): Directory bread(block 1287) failed
[  244.943961][T14523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  244.944053][T14523] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  244.982027][T14508] FAT-fs (loop1): Directory bread(block 1288) failed
[  245.053488][T14527] loop4: detected capacity change from 0 to 512
[  245.101394][T14529] loop9: detected capacity change from 0 to 512
[  245.119856][T14529] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  245.186071][T14527] loop4: detected capacity change from 0 to 256
[  245.197315][T14527] FAT-fs (loop4): Directory bread(block 1285) failed
[  245.199064][T14527] FAT-fs (loop4): Directory bread(block 1286) failed
[  245.199223][T14527] FAT-fs (loop4): Directory bread(block 1287) failed
[  245.199706][T14527] FAT-fs (loop4): Directory bread(block 1288) failed
[  245.335843][   T12] Bluetooth: hci0: Frame reassembly failed (-84)
[  245.381463][T14543] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3567'.
[  245.414329][T14535] FAULT_INJECTION: forcing a failure.
[  245.414329][T14535] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  245.414398][T14535] CPU: 1 UID: 0 PID: 14535 Comm: syz.1.3563 Not tainted syzkaller #0 PREEMPT(lazy) 
[  245.414428][T14535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  245.414444][T14535] Call Trace:
[  245.414453][T14535]  <TASK>
[  245.414461][T14535]  __dump_stack+0x1d/0x30
[  245.414490][T14535]  dump_stack_lvl+0x95/0xd0
[  245.414513][T14535]  dump_stack+0x15/0x1b
[  245.414536][T14535]  should_fail_ex+0x262/0x280
[  245.414570][T14535]  should_fail+0xb/0x20
[  245.414600][T14535]  should_fail_usercopy+0x1a/0x20
[  245.414663][T14535]  _copy_from_user+0x1c/0xb0
[  245.414701][T14535]  restore_altstack+0x4b/0x300
[  245.414734][T14535]  ? __set_current_blocked+0x284/0x2e0
[  245.414758][T14535]  __ia32_sys_rt_sigreturn+0xdb/0x350
[  245.414832][T14535]  ? arch_do_signal_or_restart+0x2f3/0x480
[  245.414872][T14535]  ? exit_to_user_mode_loop+0x5a/0x8c0
[  245.414910][T14535]  ? __se_sys_clock_nanosleep+0x223/0x260
[  245.414946][T14535]  x64_sys_call+0x1532/0x2550
[  245.415030][T14535]  do_syscall_64+0x112/0x360
[  245.415097][T14535]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  245.415118][T14535] RIP: 0033:0x7efea965f559
[  245.415206][T14535] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25
[  245.415227][T14535] RSP: 002b:00007efea8116a80 EFLAGS: 00000246 ORIG_RAX: 000000000000000f
[  245.415247][T14535] RAX: ffffffffffffffda RBX: 00007efea9945fa0 RCX: 00007efea965f559
[  245.415296][T14535] RDX: 00007efea8116a80 RSI: 00007efea8116bb0 RDI: 0000000000000011
[  245.415310][T14535] RBP: 00007efea9755888 R08: 0000000000000000 R09: 0000000000000000
[  245.415326][T14535] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[  245.415341][T14535] R13: 00007efea9946038 R14: 00007efea9945fa0 R15: 00007fffed2ef9a8
[  245.415426][T14535]  </TASK>
[  245.491839][T14546] 9p: Bad value for 'rfdno'
[  245.624891][T10765] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  245.669210][T14551] loop8: detected capacity change from 0 to 164
[  245.783631][T14571] rdma_rxe: rxe_newlink: failed to add lo
[  245.816603][T14578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  245.816777][T14578] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  245.916881][T14580] loop8: detected capacity change from 0 to 8192
[  245.982346][T14589] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3585'.
[  245.982435][T14589] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3585'.
[  245.982768][T14589] 9pnet_fd: Insufficient options for proto=fd
[  246.019389][T14592] loop8: detected capacity change from 0 to 128
[  246.031925][T14592] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem
[  246.034452][T14592] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  246.034836][T14592] ext2 filesystem being mounted at /308/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  246.152247][T14306] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  246.385747][   T12] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.403965][T14602] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3590'.
[  246.433119][   T12] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.442686][T14596] lo speed is unknown, defaulting to 1000
[  246.477389][   T12] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.525359][   T12] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.544259][T14608] loop9: detected capacity change from 0 to 512
[  246.549265][T14608] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended
[  246.581824][T14608] EXT4-fs warning (device loop9): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  246.595292][T14608] EXT4-fs error (device loop9): ext4_validate_block_bitmap:445: comm syz.9.3591: bg 0: block 248: padding at end of block bitmap is not set
[  246.595422][T14608] loop9: lost filesystem error report for type 5 error -117
[  246.604597][T14608] EXT4-fs error (device loop9): ext4_acquire_dquot:7070: comm syz.9.3591: Failed to acquire dquot type 1
[  246.609789][    C0] EXT4-fs (loop9): error count since last fsck: 1
[  246.609809][    C0] EXT4-fs (loop9): last error at time 2000000162: ext4_validate_block_bitmap:445
[  246.610232][T14608] loop9: lost filesystem error report for type 5 error -28
[  246.626458][T14608] EXT4-fs (loop9): 1 truncate cleaned up
[  246.646147][T14608] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  246.683390][   T12] bridge_slave_1: left allmulticast mode
[  246.683413][   T12] bridge_slave_1: left promiscuous mode
[  246.683589][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  246.686853][   T12] bridge_slave_0: left allmulticast mode
[  246.686874][   T12] bridge_slave_0: left promiscuous mode
[  246.686969][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  246.815264][T14621] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3593'.
[  246.821492][T10765] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  246.842235][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  246.845043][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  246.845898][   T12] bond0 (unregistering): Released all slaves
[  246.853673][   T12] bond1 (unregistering): Released all slaves
[  246.860065][   T12] bond2 (unregistering): Released all slaves
[  246.866570][   T12] bond3 (unregistering): Released all slaves
[  246.874104][   T12] bond4 (unregistering): Released all slaves
[  246.881023][   T12] bond5 (unregistering): Released all slaves
[  246.968434][   T12] tipc: Left network mode
[  247.055814][   T12] hsr_slave_0: left promiscuous mode
[  247.068543][   T12] hsr_slave_1: left promiscuous mode
[  247.069026][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  247.069113][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  247.076251][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  247.076282][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  247.100460][   T12] veth1_macvtap: left promiscuous mode
[  247.100547][   T12] veth0_macvtap: left promiscuous mode
[  247.100656][   T12] veth1_vlan: left promiscuous mode
[  247.100690][   T12] veth0_vlan: left promiscuous mode
[  247.203211][T14658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  247.203288][T14658] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  247.226239][   T12] team0 (unregistering): Port device team_slave_1 removed
[  247.228881][   T12] team0 (unregistering): Port device team_slave_0 removed
[  247.269374][T14596] bridge0: port 1(bridge_slave_0) entered blocking state
[  247.269412][T14596] bridge0: port 1(bridge_slave_0) entered disabled state
[  247.269505][T14596] bridge_slave_0: entered allmulticast mode
[  247.291821][T14596] bridge_slave_0: entered promiscuous mode
[  247.295342][ T3022] 8021q: adding VLAN 0 to HW filter on device eth5
[  247.307552][T14596] bridge0: port 2(bridge_slave_1) entered blocking state
[  247.307596][T14596] bridge0: port 2(bridge_slave_1) entered disabled state
[  247.307735][T14596] bridge_slave_1: entered allmulticast mode
[  247.308146][T14596] bridge_slave_1: entered promiscuous mode
[  247.346466][T14596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  247.347569][T14596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  247.375981][T14596] team0: Port device team_slave_0 added
[  247.376987][T14596] team0: Port device team_slave_1 added
[  247.391240][ T8132] Bluetooth: hci0: command 0x1003 tx timeout
[  247.391264][ T3497] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  247.436976][T14596] batman_adv: batadv0: Adding interface: batadv_slave_0
[  247.436992][T14596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  247.437082][T14596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  247.439677][T14596] batman_adv: batadv0: Adding interface: batadv_slave_1
[  247.439691][T14596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  247.439723][T14596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  247.465663][T14669] 9p: Bad value for 'rfdno'
[  247.514058][T14596] hsr_slave_0: entered promiscuous mode
[  247.517731][T14596] hsr_slave_1: entered promiscuous mode
[  247.518052][T14596] debugfs: 'hsr0' already exists in 'hsr'
[  247.518065][T14596] Cannot create hsr debugfs directory
[  247.522296][T14674] program syz.1.3601 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  247.543868][   T29] kauditd_printk_skb: 240 callbacks suppressed
[  247.543926][   T29] audit: type=1400 audit(2000000163.585:7748): avc:  denied  { write } for  pid=14661 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  247.598557][T14680] netlink: 392 bytes leftover after parsing attributes in process `syz.1.3603'.
[  247.613372][T14682] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3)
[  247.613399][T14682] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  247.613463][T14682] vhci_hcd vhci_hcd.0: Device attached
[  247.626367][   T29] audit: type=1400 audit(2000000163.665:7749): avc:  denied  { write } for  pid=14679 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  247.663229][ T3022] 8021q: adding VLAN 0 to HW filter on device eth6
[  247.696095][   T29] audit: type=1326 audit(2000000163.735:7750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14681 comm="syz.0.3602" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e34ae1d9 code=0x7ffc0000
[  247.696129][   T29] audit: type=1326 audit(2000000163.735:7751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14681 comm="syz.0.3602" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e34ae1d9 code=0x7ffc0000
[  247.696197][   T29] audit: type=1326 audit(2000000163.735:7752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14681 comm="syz.0.3602" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e34ae1d9 code=0x7ffc0000
[  247.696239][   T29] audit: type=1326 audit(2000000163.735:7753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14681 comm="syz.0.3602" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f55e34ae1d9 code=0x7ffc0000
[  247.696264][   T29] audit: type=1326 audit(2000000163.735:7754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14681 comm="syz.0.3602" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e34ae1d9 code=0x7ffc0000
[  247.696349][   T29] audit: type=1326 audit(2000000163.735:7755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14681 comm="syz.0.3602" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e34ae1d9 code=0x7ffc0000
[  247.696393][   T29] audit: type=1326 audit(2000000163.735:7756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14681 comm="syz.0.3602" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e34ae1d9 code=0x7ffc0000
[  247.696422][   T29] audit: type=1326 audit(2000000163.735:7757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14681 comm="syz.0.3602" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e34ae1d9 code=0x7ffc0000
[  247.881568][ T3398] usb 1-1: new low-speed USB device number 7 using vhci_hcd
[  247.949959][ T6113] usb 19-1: enqueue for inactive port 0
[  247.950037][ T6113] usb 19-1: enqueue for inactive port 0
[  248.019797][ T6113] vhci_hcd vhci_hcd.9: vhci_device speed not set
[  248.023137][ T3022] 8021q: adding VLAN 0 to HW filter on device eth7
[  248.047485][T14683] vhci_hcd: connection reset by peer
[  248.047694][   T42] vhci_hcd vhci_hcd.0: stop threads
[  248.047712][   T42] vhci_hcd vhci_hcd.0: release socket
[  248.047734][   T42] vhci_hcd vhci_hcd.0: disconnect device
[  248.149943][T14596] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  248.153953][T14596] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  248.157504][T14596] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  248.159679][T14596] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  248.164649][T14596] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  248.171565][T14596] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  248.173888][T14596] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  248.182391][T14596] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  248.252005][T14596] 8021q: adding VLAN 0 to HW filter on device bond0
[  248.274608][T14728] netlink: 'syz.9.3610': attribute type 4 has an invalid length.
[  248.274630][T14728] netlink: 152 bytes leftover after parsing attributes in process `syz.9.3610'.
[  248.274800][T14708] FAT-fs (loop4): Directory bread(block 1285) failed
[  248.275022][T14708] FAT-fs (loop4): Directory bread(block 1286) failed
[  248.275202][T14708] FAT-fs (loop4): Directory bread(block 1287) failed
[  248.277102][T14708] FAT-fs (loop4): Directory bread(block 1288) failed
[  248.289914][T14596] 8021q: adding VLAN 0 to HW filter on device team0
[  248.298436][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  248.298470][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  248.353084][  T212] bridge0: port 2(bridge_slave_1) entered blocking state
[  248.353120][  T212] bridge0: port 2(bridge_slave_1) entered forwarding state
[  248.428233][T14741] 9p: Bad value for 'rfdno'
[  248.445880][T14728] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  248.451597][ T3022] 8021q: adding VLAN 0 to HW filter on device eth8
[  248.496513][T14728] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  248.496538][T14728] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  248.548005][T14759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  248.548154][T14759] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  248.671965][T14596] 8021q: adding VLAN 0 to HW filter on device batadv0
[  248.744117][T14783] set_capacity_and_notify: 4 callbacks suppressed
[  248.744137][T14783] loop4: detected capacity change from 0 to 128
[  248.774579][T14783] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  248.779150][T14783] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  248.828170][T14783] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3618'.
[  248.850670][T14783] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14783 comm=syz.4.3618
[  248.900670][T14596] veth0_vlan: entered promiscuous mode
[  248.903292][T14596] veth1_vlan: entered promiscuous mode
[  248.945119][T14596] veth0_macvtap: entered promiscuous mode
[  248.951441][T14596] veth1_macvtap: entered promiscuous mode
[  248.969378][T14596] batman_adv: batadv0: Interface activated: batadv_slave_0
[  248.975550][T14596] batman_adv: batadv0: Interface activated: batadv_slave_1
[  248.990207][ T3426] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  248.990551][ T3426] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  248.990772][ T3426] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  248.990806][ T3426] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  249.131811][T14827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  249.132699][T14827] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  249.385001][T14854] 9p: Bad value for 'rfdno'
[  249.468776][T14861] loop9: detected capacity change from 0 to 512
[  249.575265][T14872] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3625'.
[  249.595092][T14879] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  249.599147][T14879] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3626'.
[  249.667357][T14883] loop1: detected capacity change from 0 to 512
[  249.764168][T14861] loop9: detected capacity change from 0 to 256
[  249.819684][T14861] FAT-fs (loop9): Directory bread(block 1285) failed
[  249.829023][T14861] FAT-fs (loop9): Directory bread(block 1286) failed
[  249.829381][T14861] FAT-fs (loop9): Directory bread(block 1287) failed
[  249.829732][T14861] FAT-fs (loop9): Directory bread(block 1288) failed
[  250.067322][T14895] FAULT_INJECTION: forcing a failure.
[  250.067322][T14895] name failslab, interval 1, probability 0, space 0, times 0
[  250.067377][T14895] CPU: 1 UID: 0 PID: 14895 Comm: syz.0.3630 Not tainted syzkaller #0 PREEMPT(lazy) 
[  250.067448][T14895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  250.067460][T14895] Call Trace:
[  250.067467][T14895]  <TASK>
[  250.067474][T14895]  __dump_stack+0x1d/0x30
[  250.067568][T14895]  dump_stack_lvl+0x95/0xd0
[  250.067648][T14895]  dump_stack+0x15/0x1b
[  250.067669][T14895]  should_fail_ex+0x262/0x280
[  250.067699][T14895]  should_failslab+0x8c/0xb0
[  250.067749][T14895]  __kvmalloc_node_noprof+0x168/0x5c0
[  250.067839][T14895]  ? proc_sys_call_handler+0x247/0x4a0
[  250.067869][T14895]  ? proc_sys_call_handler+0x247/0x4a0
[  250.067907][T14895]  proc_sys_call_handler+0x247/0x4a0
[  250.067949][T14895]  ? __pfx_proc_sys_write+0x10/0x10
[  250.067976][T14895]  proc_sys_write+0x22/0x30
[  250.068005][T14895]  vfs_write+0x57f/0x9a0
[  250.068050][T14895]  ksys_write+0xdc/0x1a0
[  250.068114][T14895]  __x64_sys_write+0x40/0x50
[  250.068149][T14895]  x64_sys_call+0x154e/0x2550
[  250.068193][T14895]  do_syscall_64+0x112/0x360
[  250.068218][T14895]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  250.068240][T14895] RIP: 0033:0x7f55e34ae1d9
[  250.068333][T14895] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  250.068351][T14895] RSP: 002b:00007f55e1f07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  250.068369][T14895] RAX: ffffffffffffffda RBX: 00007f55e3735fa0 RCX: 00007f55e34ae1d9
[  250.068447][T14895] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005
[  250.068460][T14895] RBP: 00007f55e1f07090 R08: 0000000000000000 R09: 0000000000000000
[  250.068475][T14895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  250.068489][T14895] R13: 00007f55e3736038 R14: 00007f55e3735fa0 R15: 00007ffe3fca6918
[  250.068517][T14895]  </TASK>
[  250.284418][T14909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  250.284546][T14909] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  250.396499][T14922] kernel profiling enabled (shift: 7)
[  250.615457][T14945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  250.618932][T14945] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  250.649536][T14949] FAULT_INJECTION: forcing a failure.
[  250.649536][T14949] name failslab, interval 1, probability 0, space 0, times 0
[  250.649594][T14949] CPU: 1 UID: 0 PID: 14949 Comm: syz.4.3638 Not tainted syzkaller #0 PREEMPT(lazy) 
[  250.649620][T14949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  250.649709][T14949] Call Trace:
[  250.649715][T14949]  <TASK>
[  250.649723][T14949]  __dump_stack+0x1d/0x30
[  250.649767][T14949]  dump_stack_lvl+0x95/0xd0
[  250.649794][T14949]  dump_stack+0x15/0x1b
[  250.649815][T14949]  should_fail_ex+0x262/0x280
[  250.649848][T14949]  should_failslab+0x8c/0xb0
[  250.649892][T14949]  ? alloc_slab_obj_exts+0x9c/0x110
[  250.649923][T14949]  __kmalloc_flags_noprof+0x105/0x500
[  250.649963][T14949]  ? alloc_slab_obj_exts+0x9c/0x110
[  250.650041][T14949]  alloc_slab_obj_exts+0x9c/0x110
[  250.650124][T14949]  __memcg_slab_post_alloc_hook+0x462/0x8d0
[  250.650237][T14949]  __kvmalloc_node_noprof+0x40e/0x5c0
[  250.650258][T14949]  ? traverse+0x9c/0x3b0
[  250.650339][T14949]  ? traverse+0x9c/0x3b0
[  250.650380][T14949]  traverse+0x9c/0x3b0
[  250.650415][T14949]  seq_read_iter+0x7dc/0x8f0
[  250.650451][T14949]  seq_read+0x279/0x2c0
[  250.650502][T14949]  ? __pfx_seq_read+0x10/0x10
[  250.650534][T14949]  proc_reg_read+0x128/0x1c0
[  250.650589][T14949]  ? __pfx_proc_reg_read+0x10/0x10
[  250.650623][T14949]  vfs_readv+0x417/0x6d0
[  250.650657][T14949]  __x64_sys_preadv+0xfd/0x1c0
[  250.650725][T14949]  x64_sys_call+0x20e8/0x2550
[  250.650788][T14949]  do_syscall_64+0x112/0x360
[  250.650942][T14949]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  250.650971][T14949] RIP: 0033:0x7f510752e1d9
[  250.650991][T14949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  250.651012][T14949] RSP: 002b:00007f5105f87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  250.651038][T14949] RAX: ffffffffffffffda RBX: 00007f51077b5fa0 RCX: 00007f510752e1d9
[  250.651056][T14949] RDX: 0000000000000001 RSI: 0000200000000700 RDI: 0000000000000005
[  250.651125][T14949] RBP: 00007f5105f87090 R08: 0000000000000003 R09: 0000000000000000
[  250.651140][T14949] R10: 0000000000000073 R11: 0000000000000246 R12: 0000000000000001
[  250.651153][T14949] R13: 00007f51077b6038 R14: 00007f51077b5fa0 R15: 00007ffe324491c8
[  250.651172][T14949]  </TASK>
[  250.694162][T14952] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  250.696739][T14952] loop1: detected capacity change from 0 to 512
[  250.723553][T14952] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  250.824378][T14959] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3640'.
[  250.940059][T14963] 9p: Bad value for 'rfdno'
[  251.237499][T14973] loop4: detected capacity change from 0 to 1024
[  251.260502][T14952] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  251.286199][T14973] EXT4-fs: Ignoring removed nobh option
[  251.328194][T14973] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #3: comm syz.4.3642: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  251.328315][T14973] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  251.338550][T14973] EXT4-fs error (device loop4): ext4_quota_enable:7264: comm syz.4.3642: Bad quota inode: 3, type: 0
[  251.338631][T14973] loop4: lost filesystem error report for type 5 error -117
[  251.351228][    C0] EXT4-fs (loop4): error count since last fsck: 2
[  251.351249][    C0] EXT4-fs (loop4): initial error at time 2000000167: ext4_ext_check_inode:521: inode 3
[  251.351284][    C0] EXT4-fs (loop4): last error at time 2000000167: ext4_quota_enable:7264
[  251.355726][T14973] EXT4-fs warning (device loop4): ext4_enable_quotas:7305: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  251.356726][T14973] EXT4-fs (loop4): mount failed
[  251.702924][T14992] loop2: detected capacity change from 0 to 1024
[  251.724023][T14992] EXT4-fs: Ignoring removed orlov option
[  251.775969][T14992] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  251.893577][T15045] 9p: Bad value for 'rfdno'
[  251.910168][T14596] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  251.984060][T15050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  251.984916][T15050] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  252.114266][T15065] FAULT_INJECTION: forcing a failure.
[  252.114266][T15065] name failslab, interval 1, probability 0, space 0, times 0
[  252.114342][T15065] CPU: 0 UID: 0 PID: 15065 Comm: syz.0.3656 Not tainted syzkaller #0 PREEMPT(lazy) 
[  252.114413][T15065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  252.114424][T15065] Call Trace:
[  252.114430][T15065]  <TASK>
[  252.114437][T15065]  __dump_stack+0x1d/0x30
[  252.114460][T15065]  dump_stack_lvl+0x95/0xd0
[  252.114483][T15065]  dump_stack+0x15/0x1b
[  252.114530][T15065]  should_fail_ex+0x262/0x280
[  252.114607][T15065]  ? sctp_add_bind_addr+0x71/0x1e0
[  252.114636][T15065]  should_failslab+0x8c/0xb0
[  252.114666][T15065]  __kmalloc_cache_noprof+0x7a/0x400
[  252.114769][T15065]  ? sctp_add_bind_addr+0x71/0x1e0
[  252.114798][T15065]  sctp_add_bind_addr+0x71/0x1e0
[  252.114872][T15065]  sctp_copy_local_addr_list+0x1b4/0x250
[  252.114904][T15065]  sctp_copy_one_addr+0x7f/0x280
[  252.114936][T15065]  sctp_bind_addr_copy+0x79/0x290
[  252.114965][T15065]  sctp_assoc_set_bind_addr_from_ep+0xce/0xe0
[  252.114992][T15065]  sctp_connect_new_asoc+0x1c3/0x3a0
[  252.115089][T15065]  sctp_sendmsg+0x105f/0x1d00
[  252.115110][T15065]  ? __pfx_sctp_sendmsg+0x10/0x10
[  252.115130][T15065]  ? inet_sendmsg+0xb3/0xd0
[  252.115189][T15065]  ? __pfx_sctp_sendmsg+0x10/0x10
[  252.115208][T15065]  inet_sendmsg+0xc5/0xd0
[  252.115234][T15065]  ? __pfx_inet_sendmsg+0x10/0x10
[  252.115261][T15065]  ____sys_sendmsg+0x4e8/0x580
[  252.115416][T15065]  ___sys_sendmsg+0x195/0x1e0
[  252.115448][T15065]  __x64_sys_sendmsg+0xd4/0x160
[  252.115507][T15065]  x64_sys_call+0x22ab/0x2550
[  252.115538][T15065]  do_syscall_64+0x112/0x360
[  252.115562][T15065]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  252.115583][T15065] RIP: 0033:0x7f55e34ae1d9
[  252.115597][T15065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  252.115614][T15065] RSP: 002b:00007f55e1ec5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  252.115680][T15065] RAX: ffffffffffffffda RBX: 00007f55e3736180 RCX: 00007f55e34ae1d9
[  252.115693][T15065] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 000000000000000a
[  252.115705][T15065] RBP: 00007f55e1ec5090 R08: 0000000000000000 R09: 0000000000000000
[  252.115720][T15065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  252.115731][T15065] R13: 00007f55e3736218 R14: 00007f55e3736180 R15: 00007ffe3fca6918
[  252.115749][T15065]  </TASK>
[  252.444142][T15069] loop2: detected capacity change from 0 to 512
[  252.448118][T15069] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  252.448231][T15069] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  252.461310][T15069] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  252.461594][T15069] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm syz.2.3660: bg 0: block 248: padding at end of block bitmap is not set
[  252.461622][T15069] loop2: lost filesystem error report for type 5 error -117
[  252.462210][T15069] EXT4-fs error (device loop2): ext4_acquire_dquot:7070: comm syz.2.3660: Failed to acquire dquot type 1
[  252.462235][T15069] loop2: lost filesystem error report for type 5 error -28
[  252.464422][T15069] EXT4-fs (loop2): 1 truncate cleaned up
[  252.464787][T15069] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  252.467353][T15069] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  252.590912][T15077] FAULT_INJECTION: forcing a failure.
[  252.590912][T15077] name failslab, interval 1, probability 0, space 0, times 0
[  252.590942][T15077] CPU: 1 UID: 0 PID: 15077 Comm: syz.2.3663 Not tainted syzkaller #0 PREEMPT(lazy) 
[  252.590970][T15077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  252.590981][T15077] Call Trace:
[  252.590987][T15077]  <TASK>
[  252.590993][T15077]  __dump_stack+0x1d/0x30
[  252.591016][T15077]  dump_stack_lvl+0x95/0xd0
[  252.591040][T15077]  dump_stack+0x15/0x1b
[  252.591062][T15077]  should_fail_ex+0x262/0x280
[  252.591093][T15077]  should_failslab+0x8c/0xb0
[  252.591133][T15077]  kmem_cache_alloc_lru_noprof+0x7f/0x3f0
[  252.591168][T15077]  ? shmem_alloc_inode+0x34/0x50
[  252.591188][T15077]  ? shmem_alloc_inode+0x34/0x50
[  252.591209][T15077]  ? __pfx_shmem_alloc_inode+0x10/0x10
[  252.591227][T15077]  shmem_alloc_inode+0x34/0x50
[  252.591246][T15077]  alloc_inode+0x40/0x170
[  252.591269][T15077]  new_inode+0x1d/0xe0
[  252.591296][T15077]  shmem_get_inode+0x250/0x7b0
[  252.591320][T15077]  __shmem_file_setup+0x14f/0x260
[  252.591356][T15077]  shmem_zero_setup+0x66/0xe0
[  252.591390][T15077]  mmap_region+0x1ad6/0x2310
[  252.591443][T15077]  do_mmap+0xa20/0xc70
[  252.591467][T15077]  vm_mmap_pgoff+0x183/0x2d0
[  252.591501][T15077]  ksys_mmap_pgoff+0xc1/0x310
[  252.591522][T15077]  ? __x64_sys_mmap+0x49/0x70
[  252.591552][T15077]  x64_sys_call+0x23b3/0x2550
[  252.591580][T15077]  do_syscall_64+0x112/0x360
[  252.591610][T15077]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  252.591634][T15077] RIP: 0033:0x7ff9c238e1d9
[  252.591652][T15077] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  252.591669][T15077] RSP: 002b:00007ff9c0de7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  252.591688][T15077] RAX: ffffffffffffffda RBX: 00007ff9c2615fa0 RCX: 00007ff9c238e1d9
[  252.591703][T15077] RDX: 0000000000000001 RSI: 0000000008000002 RDI: 000000110c230000
[  252.591718][T15077] RBP: 00007ff9c0de7090 R08: ffffffffffffffff R09: 0000000000000000
[  252.591733][T15077] R10: 000000000401d031 R11: 0000000000000246 R12: 0000000000000001
[  252.591748][T15077] R13: 00007ff9c2616038 R14: 00007ff9c2615fa0 R15: 00007ffd9cf41198
[  252.591769][T15077]  </TASK>
[  252.654125][T15079] loop2: detected capacity change from 0 to 164
[  252.851115][T15093] SELinux: syz.2.3667 (15093) wrote to user. This is no longer supported.
[  252.852156][T15093] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3667'.
[  252.909894][ T3398] usb 1-1: enqueue for inactive port 0
[  252.909980][ T3398] usb 1-1: enqueue for inactive port 0
[  252.981270][ T3398] vhci_hcd vhci_hcd.0: vhci_device speed not set
[  253.249840][   T29] kauditd_printk_skb: 129 callbacks suppressed
[  253.249881][   T29] audit: type=1400 audit(2000000169.275:7885): avc:  denied  { ioctl } for  pid=15109 comm="syz.2.3676" path="socket:[43204]" dev="sockfs" ino=43204 ioctlcmd=0x7459 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  253.308167][T15113] batadv0: entered promiscuous mode
[  253.309632][T15113] macvlan2: entered promiscuous mode
[  253.323205][T15113] macvlan2: entered allmulticast mode
[  253.323619][T15113] batadv0: entered allmulticast mode
[  253.342094][T15113] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  253.356045][T15113] batadv0: left allmulticast mode
[  253.356388][T15113] batadv0: left promiscuous mode
[  253.496688][T15116] loop2: detected capacity change from 0 to 128
[  253.514585][T15119] sit0: entered promiscuous mode
[  253.531005][T15119] netlink: 'syz.0.3679': attribute type 1 has an invalid length.
[  253.531069][T15119] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3679'.
[  253.538368][T15116] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  253.581702][T15116] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  253.583345][T15116] ext2 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  253.642829][   T29] audit: type=1400 audit(2000000169.685:7886): avc:  denied  { write } for  pid=15115 comm="syz.2.3678" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  253.728555][T14596] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  253.841431][T15156] loop4: detected capacity change from 0 to 4096
[  253.863443][T15156] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  253.915220][   T29] audit: type=1400 audit(2000000169.955:7887): avc:  denied  { recv } for  pid=13391 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.0.28 dest=54402 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  253.915606][   T29] audit: type=1400 audit(2000000169.955:7888): avc:  denied  { unmount } for  pid=13391 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  253.922359][T15146] loop2: detected capacity change from 0 to 8192
[  253.945723][   T29] audit: type=1400 audit(2000000169.965:7889): avc:  denied  { read write } for  pid=15145 comm="syz.2.3688" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  253.945758][   T29] audit: type=1400 audit(2000000169.965:7890): avc:  denied  { open } for  pid=15145 comm="syz.2.3688" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  253.945802][   T29] audit: type=1400 audit(2000000169.965:7891): avc:  denied  { ioctl } for  pid=15145 comm="syz.2.3688" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  253.945870][   T29] audit: type=1400 audit(2000000169.965:7892): avc:  denied  { mounton } for  pid=15145 comm="syz.2.3688" path="/19/file0" dev="tmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  253.971614][T15146] loop2: detected capacity change from 0 to 512
[  253.980073][   T29] audit: type=1400 audit(2000000170.025:7893): avc:  denied  { bpf } for  pid=15141 comm="syz.1.3686" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  253.980103][   T29] audit: type=1400 audit(2000000170.025:7894): avc:  denied  { perfmon } for  pid=15141 comm="syz.1.3686" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  253.982281][T15146] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities
[  253.984588][T13391] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  254.132091][T15169] loop2: detected capacity change from 0 to 512
[  254.203290][T15169] loop2: detected capacity change from 0 to 256
[  254.232988][T15169] FAT-fs (loop2): Directory bread(block 1285) failed
[  254.233408][T15167] loop4: detected capacity change from 0 to 512
[  254.251740][T15169] FAT-fs (loop2): Directory bread(block 1286) failed
[  254.251843][T15169] FAT-fs (loop2): Directory bread(block 1287) failed
[  254.252172][T15169] FAT-fs (loop2): Directory bread(block 1288) failed
[  254.301753][T15167] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  254.302796][T15167] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  254.442663][T15167] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3690'.
[  254.528466][T15194] loop9: detected capacity change from 0 to 128
[  254.529743][T15194] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem
[  254.532000][T15194] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  254.532314][T15194] ext2 filesystem being mounted at /245/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  255.146475][T13391] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  255.201973][T15220] ip_tables: iptables: counters copy to user failed while replacing table
[  255.202513][T15220] IPVS: set_ctl: invalid protocol: 108 224.0.0.2:20002
[  255.265168][T10765] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  255.286951][T15225] loop2: detected capacity change from 0 to 512
[  255.289029][T15225] EXT4-fs: Invalid want_extra_isize 2
[  255.410868][T15236] netlink: 44 bytes leftover after parsing attributes in process `syz.9.3710'.
[  256.009960][T15262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  256.010053][T15262] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  256.148170][T15264] loop4: detected capacity change from 0 to 512
[  256.149451][T15264] msdos: Unknown parameter 'ÿÿÿÿ'
[  256.837250][T15291] loop2: detected capacity change from 0 to 128
[  256.853612][T15291] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  256.873758][T15291] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  256.878084][T15291] ext2 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  256.946177][T14596] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  256.950835][T15306] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3)
[  256.950860][T15306] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  256.950940][T15306] vhci_hcd vhci_hcd.0: Device attached
[  257.042613][T15310] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  257.046479][T15310] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  257.180263][T15307] vhci_hcd: connection closed
[  257.180523][   T51] vhci_hcd vhci_hcd.0: stop threads
[  257.180537][   T51] vhci_hcd vhci_hcd.0: release socket
[  257.180630][   T51] vhci_hcd vhci_hcd.0: disconnect device
[  257.189831][ T6113] usb 1-1: new low-speed USB device number 8 using vhci_hcd
[  257.189862][ T6113] usb 1-1: enqueue for inactive port 0
[  257.189882][ T6113] usb 1-1: enqueue for inactive port 0
[  257.189982][ T6113] usb 1-1: enqueue for inactive port 0
[  257.259864][ T6113] vhci_hcd vhci_hcd.0: vhci_device speed not set
[  257.402626][T15327] FAULT_INJECTION: forcing a failure.
[  257.402626][T15327] name failslab, interval 1, probability 0, space 0, times 0
[  257.402659][T15327] CPU: 1 UID: 0 PID: 15327 Comm: syz.9.3733 Not tainted syzkaller #0 PREEMPT(lazy) 
[  257.402686][T15327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  257.402699][T15327] Call Trace:
[  257.402706][T15327]  <TASK>
[  257.402714][T15327]  __dump_stack+0x1d/0x30
[  257.402813][T15327]  dump_stack_lvl+0x95/0xd0
[  257.402839][T15327]  dump_stack+0x15/0x1b
[  257.402864][T15327]  should_fail_ex+0x262/0x280
[  257.402908][T15327]  ? radix_tree_node_alloc+0xa0/0x200
[  257.402967][T15327]  should_failslab+0x8c/0xb0
[  257.403073][T15327]  kmem_cache_alloc_noprof+0x7c/0x3f0
[  257.403132][T15327]  ? __rcu_read_unlock+0x4e/0x70
[  257.403165][T15327]  ? radix_tree_node_alloc+0xa0/0x200
[  257.403189][T15327]  ? __memcg_slab_post_alloc_hook+0x367/0x8d0
[  257.403289][T15327]  radix_tree_node_alloc+0xa0/0x200
[  257.403312][T15327]  idr_get_free+0x1fc/0x560
[  257.403336][T15327]  idr_alloc_u32+0xe9/0x1a0
[  257.403371][T15327]  cls_bpf_change+0x266/0x7f0
[  257.403472][T15327]  tc_new_tfilter+0x104d/0x1240
[  257.403507][T15327]  ? __rcu_read_unlock+0x4e/0x70
[  257.403570][T15327]  ? __pfx_tc_new_tfilter+0x10/0x10
[  257.403700][T15327]  rtnetlink_rcv_msg+0x64b/0x720
[  257.403825][T15327]  netlink_rcv_skb+0x11e/0x220
[  257.403849][T15327]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  257.403930][T15327]  rtnetlink_rcv+0x1c/0x30
[  257.403958][T15327]  netlink_unicast+0x5a9/0x680
[  257.404014][T15327]  netlink_sendmsg+0x5be/0x6f0
[  257.404043][T15327]  ? __pfx_netlink_sendmsg+0x10/0x10
[  257.404069][T15327]  ____sys_sendmsg+0x532/0x580
[  257.404143][T15327]  ___sys_sendmsg+0x195/0x1e0
[  257.404184][T15327]  __x64_sys_sendmsg+0xd4/0x160
[  257.404274][T15327]  x64_sys_call+0x22ab/0x2550
[  257.404300][T15327]  do_syscall_64+0x112/0x360
[  257.404337][T15327]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  257.404364][T15327] RIP: 0033:0x7f3ddc79e1d9
[  257.404381][T15327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  257.404404][T15327] RSP: 002b:00007f3ddb1f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  257.404454][T15327] RAX: ffffffffffffffda RBX: 00007f3ddca25fa0 RCX: 00007f3ddc79e1d9
[  257.404469][T15327] RDX: 00000000240040d0 RSI: 0000200000000180 RDI: 0000000000000004
[  257.404481][T15327] RBP: 00007f3ddb1f7090 R08: 0000000000000000 R09: 0000000000000000
[  257.404494][T15327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  257.404506][T15327] R13: 00007f3ddca26038 R14: 00007f3ddca25fa0 R15: 00007ffcad2304a8
[  257.404524][T15327]  </TASK>
[  257.497119][T15332] EXT4-fs: quotafile must be on filesystem root
[  257.722180][   T42] IPVS: starting estimator thread 0...
[  257.809820][T15335] IPVS: using max 2496 ests per chain, 124800 per kthread
[  258.062003][T15342] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  258.062107][T15342] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  258.231933][T15349] EXT4-fs error (device loop2): ext4_free_blocks:6719: comm syz.2.3739: Freeing blocks not in datazone - block = 0, count = 16
[  258.238996][T15342] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm syz.2.3739: bg 0: block 112: padding at end of block bitmap is not set
[  258.320632][   T42] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28
[  258.320663][   T42] EXT4-fs (loop2): This should not happen!! Data will be lost
[  258.320663][   T42] 
[  258.320676][   T42] EXT4-fs (loop2): Total free blocks count 0
[  258.320690][   T42] EXT4-fs (loop2): Free/Dirty block details
[  258.320770][   T42] EXT4-fs (loop2): free_blocks=16
[  258.320783][   T42] EXT4-fs (loop2): dirty_blocks=80
[  258.320797][   T42] EXT4-fs (loop2): Block reservation details
[  258.320810][   T42] EXT4-fs (loop2): i_reserved_data_blocks=5
[  258.321154][   T42] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1408 with max blocks 64 with error 28
[  258.321471][T14596] EXT4-fs warning (device loop2): ext4_evict_inode:196: inode #15: comm syz-executor: data will be lost
[  258.447694][T15359] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  258.562520][   T29] kauditd_printk_skb: 190 callbacks suppressed
[  258.562539][   T29] audit: type=1400 audit(2000000174.595:8085): avc:  denied  { create } for  pid=15351 comm="syz.4.3741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  258.562566][   T29] audit: type=1400 audit(2000000174.595:8086): avc:  denied  { write } for  pid=15351 comm="syz.4.3741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  258.756392][   T29] audit: type=1400 audit(2000000174.795:8087): avc:  denied  { create } for  pid=15372 comm="syz.2.3749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  258.779388][   T29] audit: type=1400 audit(2000000174.795:8088): avc:  denied  { write } for  pid=15372 comm="syz.2.3749" path="socket:[44661]" dev="sockfs" ino=44661 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  259.081314][T15383] set_capacity_and_notify: 4 callbacks suppressed
[  259.081331][T15383] loop4: detected capacity change from 0 to 512
[  259.081639][T15383] msdos: Unknown parameter '0x0000000000000007'
[  259.415785][T15393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3755'.
[  259.518660][   T29] audit: type=1400 audit(2000000175.555:8089): avc:  denied  { search } for  pid=15397 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  259.518710][   T29] audit: type=1400 audit(2000000175.555:8090): avc:  denied  { search } for  pid=15397 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  259.518736][   T29] audit: type=1400 audit(2000000175.555:8091): avc:  denied  { search } for  pid=15397 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  259.518762][   T29] audit: type=1400 audit(2000000175.555:8092): avc:  denied  { search } for  pid=15397 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  259.589373][   T29] audit: type=1400 audit(2000000175.615:8093): avc:  denied  { read } for  pid=15398 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  259.589419][   T29] audit: type=1400 audit(2000000175.615:8094): avc:  denied  { read open } for  pid=15398 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  259.618910][T15396] loop9: detected capacity change from 0 to 8192
[  259.863696][T15413] loop4: detected capacity change from 0 to 512
[  259.886956][T15413] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  259.887027][T15413] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  259.952166][T15420] loop9: detected capacity change from 0 to 512
[  260.183932][T15420] loop9: detected capacity change from 0 to 256
[  260.241164][T15420] FAT-fs (loop9): Directory bread(block 1285) failed
[  260.241553][T15420] FAT-fs (loop9): Directory bread(block 1286) failed
[  260.241654][T15420] FAT-fs (loop9): Directory bread(block 1287) failed
[  260.241956][T15420] FAT-fs (loop9): Directory bread(block 1288) failed
[  260.874434][T13391] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  261.301412][T15452] dummy0: mtu less than device minimum
[  261.317935][T15452] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3771'.
[  261.413747][T15456] FAULT_INJECTION: forcing a failure.
[  261.413747][T15456] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  261.413865][T15456] CPU: 0 UID: 0 PID: 15456 Comm: syz.0.3771 Not tainted syzkaller #0 PREEMPT(lazy) 
[  261.413964][T15456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  261.413980][T15456] Call Trace:
[  261.413987][T15456]  <TASK>
[  261.413997][T15456]  __dump_stack+0x1d/0x30
[  261.414021][T15456]  dump_stack_lvl+0x95/0xd0
[  261.414043][T15456]  dump_stack+0x15/0x1b
[  261.414065][T15456]  should_fail_ex+0x262/0x280
[  261.414156][T15456]  should_fail+0xb/0x20
[  261.414184][T15456]  should_fail_usercopy+0x1a/0x20
[  261.414214][T15456]  _copy_from_iter+0xcc/0xe70
[  261.414276][T15456]  ? __alloc_skb+0x516/0x6f0
[  261.414297][T15456]  ? __alloc_skb+0x209/0x6f0
[  261.414395][T15456]  netlink_sendmsg+0x4a4/0x6f0
[  261.414420][T15456]  ? __pfx_netlink_sendmsg+0x10/0x10
[  261.414443][T15456]  ____sys_sendmsg+0x532/0x580
[  261.414485][T15456]  ___sys_sendmsg+0x195/0x1e0
[  261.414521][T15456]  __x64_sys_sendmsg+0xd4/0x160
[  261.414608][T15456]  x64_sys_call+0x22ab/0x2550
[  261.414673][T15456]  do_syscall_64+0x112/0x360
[  261.414706][T15456]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  261.414730][T15456] RIP: 0033:0x7f55e34ae1d9
[  261.414746][T15456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  261.414764][T15456] RSP: 002b:00007f55e1ee6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  261.414818][T15456] RAX: ffffffffffffffda RBX: 00007f55e3736090 RCX: 00007f55e34ae1d9
[  261.414880][T15456] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000000c
[  261.414892][T15456] RBP: 00007f55e1ee6090 R08: 0000000000000000 R09: 0000000000000000
[  261.414905][T15456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  261.414922][T15456] R13: 00007f55e3736128 R14: 00007f55e3736090 R15: 00007ffe3fca6918
[  261.414990][T15456]  </TASK>
[  261.675982][T15373] loop2: detected capacity change from 0 to 128
[  261.703147][T15373] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  261.732837][T15373] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  261.735091][T15373] ext2 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  261.877902][T15477] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  261.990744][T15487] ieee802154 phy0 wpan0: encryption failed: -22
[  262.082706][T15503] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  263.755784][T15401] syz.1.3755 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0
[  263.755815][T15401] CPU: 0 UID: 0 PID: 15401 Comm: syz.1.3755 Not tainted syzkaller #0 PREEMPT(lazy) 
[  263.755918][T15401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  263.755933][T15401] Call Trace:
[  263.755941][T15401]  <TASK>
[  263.755950][T15401]  __dump_stack+0x1d/0x30
[  263.756047][T15401]  dump_stack_lvl+0x95/0xd0
[  263.756068][T15401]  dump_stack+0x15/0x1b
[  263.756109][T15401]  dump_header+0x80/0x240
[  263.756131][T15401]  oom_kill_process+0x294/0x420
[  263.756156][T15401]  out_of_memory+0x981/0xbc0
[  263.756180][T15401]  try_charge_memcg+0x6ba/0xae0
[  263.756297][T15401]  charge_memcg+0x16f/0x220
[  263.756333][T15401]  __mem_cgroup_charge+0x28/0xb0
[  263.756432][T15401]  shmem_get_folio_gfp+0x49f/0xd90
[  263.756477][T15401]  shmem_write_begin+0xfc/0x1f0
[  263.756518][T15401]  generic_perform_write+0x186/0x490
[  263.756602][T15401]  shmem_file_write_iter+0xc5/0xf0
[  263.756706][T15401]  __kernel_write_iter+0x30f/0x590
[  263.756743][T15401]  ? __pfx_shmem_file_write_iter+0x10/0x10
[  263.756773][T15401]  dump_user_range+0xa73/0xd00
[  263.756807][T15401]  elf_core_dump+0x21c0/0x2340
[  263.756898][T15401]  ? 0xffffffffff600000
[  263.756927][T15401]  coredump_write+0xafb/0xdd0
[  263.757009][T15401]  vfs_coredump+0x2762/0x3270
[  263.757047][T15401]  ? _raw_spin_lock_irqsave+0x58/0xb0
[  263.757203][T15401]  ? proc_coredump_connector+0x160/0x2c0
[  263.757235][T15401]  ? kmem_cache_free+0x106/0x3b0
[  263.757263][T15401]  get_signal+0xd33/0xf10
[  263.757328][T15401]  arch_do_signal_or_restart+0x96/0x480
[  263.757369][T15401]  irqentry_exit+0x14d/0x610
[  263.757396][T15401]  asm_exc_page_fault+0x26/0x30
[  263.757438][T15401] RIP: 0033:0x7efea96be1e1
[  263.757472][T15401] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 <c3> 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f
[  263.757493][T15401] RSP: 002b:0000000000000010 EFLAGS: 00010217
[  263.757511][T15401] RAX: 0000000000000000 RBX: 00007efea9945fa0 RCX: 00007efea96be1d9
[  263.757541][T15401] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000000000000000
[  263.757556][T15401] RBP: 00007efea9755888 R08: 0000000000000000 R09: 0000000000000000
[  263.757573][T15401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  263.757589][T15401] R13: 00007efea9946038 R14: 00007efea9945fa0 R15: 00007fffed2ef9a8
[  263.757610][T15401]  </TASK>
[  263.757726][T15401] memory: usage 307200kB, limit 307200kB, failcnt 17718
[  263.757742][T15401] memory+swap: usage 334380kB, limit 9007199254740988kB, failcnt 0
[  263.757759][T15401] kmem: usage 3056kB, limit 9007199254740988kB, failcnt 0
[  263.757774][T15401] Memory cgroup stats for /syz1:
[  263.758001][T15401] cache 310968320
[  263.758011][T15401] rss 385024
[  263.758020][T15401] shmem 310968320
[  263.758029][T15401] mapped_file 129863680
[  263.758043][T15401] dirty 0
[  263.758051][T15401] writeback 0
[  263.758060][T15401] workingset_refault_anon 98
[  263.758070][T15401] workingset_refault_file 886
[  263.758080][T15401] swap 27832320
[  263.758089][T15401] swapcached 45862912
[  263.758098][T15401] pgpgin 307501
[  263.758107][T15401] pgpgout 231465
[  263.758115][T15401] pgfault 293834
[  263.758124][T15401] pgmajfault 56
[  263.758131][T15401] inactive_anon 165642240
[  263.758138][T15401] active_anon 145801216
[  263.758148][T15401] inactive_file 0
[  263.758155][T15401] active_file 0
[  263.758161][T15401] unevictable 0
[  263.758169][T15401] hierarchical_memory_limit 314572800
[  263.758177][T15401] hierarchical_memsw_limit 9223372036854771712
[  263.758187][T15401] total_cache 310968320
[  263.758195][T15401] total_rss 385024
[  263.758202][T15401] total_shmem 310968320
[  263.758293][T15401] total_mapped_file 129863680
[  263.758301][T15401] total_dirty 0
[  263.758308][T15401] total_writeback 0
[  263.758315][T15401] total_workingset_refault_anon 98
[  263.758340][T15401] total_workingset_refault_file 886
[  263.758351][T15401] total_swap 27832320
[  263.758360][T15401] total_swapcached 45862912
[  263.758382][T15401] total_pgpgin 307501
[  263.758391][T15401] total_pgpgout 231465
[  263.758400][T15401] total_pgfault 293834
[  263.758410][T15401] total_pgmajfault 56
[  263.758476][T15401] total_inactive_anon 165642240
[  263.758485][T15401] total_active_anon 145801216
[  263.758492][T15401] total_inactive_file 0
[  263.758501][T15401] total_active_file 0
[  263.758509][T15401] total_unevictable 0
[  263.758589][T15401] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.3755,pid=15401,uid=0
[  263.758675][T15401] Memory cgroup out of memory: Killed process 15401 (syz.1.3755) total-vm:194420kB, anon-rss:1428kB, file-rss:20548kB, shmem-rss:126820kB, UID:0 pgtables:360kB oom_score_adj:0
[  263.923189][T11656] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  263.923269][T11656] CPU: 1 UID: 0 PID: 11656 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(lazy) 
[  263.923365][T11656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  263.923378][T11656] Call Trace:
[  263.923387][T11656]  <TASK>
[  263.923396][T11656]  __dump_stack+0x1d/0x30
[  263.923422][T11656]  dump_stack_lvl+0x95/0xd0
[  263.923446][T11656]  dump_stack+0x15/0x1b
[  263.923496][T11656]  dump_header+0x80/0x240
[  263.923554][T11656]  oom_kill_process+0x294/0x420
[  263.923583][T11656]  out_of_memory+0x981/0xbc0
[  263.923607][T11656]  try_charge_memcg+0x6ba/0xae0
[  263.923717][T11656]  charge_memcg+0x16f/0x220
[  263.923748][T11656]  __mem_cgroup_charge+0x28/0xb0
[  263.923786][T11656]  filemap_add_folio+0x109/0x380
[  263.923826][T11656]  __filemap_get_folio_mpol+0x32e/0x840
[  263.923857][T11656]  filemap_fault+0x458/0xb60
[  263.923907][T11656]  handle_mm_fault+0x2310/0x3bb0
[  263.923943][T11656]  do_user_addr_fault+0x636/0x1060
[  263.924036][T11656]  ? trace_page_fault_user+0x1f/0xa0
[  263.924070][T11656]  exc_page_fault+0x62/0xa0
[  263.924124][T11656]  asm_exc_page_fault+0x26/0x30
[  263.924147][T11656] RIP: 0033:0x7efea958c091
[  263.924202][T11656] Code: 85 65 0a 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 23 97 ee 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d 1c 96 ee 00 48 01 d1
[  263.924236][T11656] RSP: 002b:00007fffed2efd10 EFLAGS: 00010202
[  263.924254][T11656] RAX: 0000001b2d324000 RBX: 000000000000021b RCX: 0000000000040358
[  263.924269][T11656] RDX: 000000000b89eac9 RSI: 00007fffed2efda0 RDI: 0000000000000001
[  263.924284][T11656] RBP: 00007fffed2efd4c R08: 000000002c044cb3 R09: 3fffffffffffffff
[  263.924300][T11656] R10: 4000000000000000 R11: 0000000000000202 R12: 0000000000001388
[  263.924315][T11656] R13: 00000000000927c0 R14: 000000000004027c R15: 00007fffed2efda0
[  263.924401][T11656]  </TASK>
[  263.926212][T11656] memory: usage 307200kB, limit 307200kB, failcnt 17910
[  263.926226][T11656] memory+swap: usage 334380kB, limit 9007199254740988kB, failcnt 0
[  263.926239][T11656] kmem: usage 3056kB, limit 9007199254740988kB, failcnt 0
[  263.926251][T11656] Memory cgroup stats for /syz1:
[  263.926576][T11656] cache 310968320
[  263.926586][T11656] rss 385024
[  263.926593][T11656] shmem 310968320
[  263.926601][T11656] mapped_file 117293056
[  263.926609][T11656] dirty 0
[  263.926616][T11656] writeback 0
[  263.926624][T11656] workingset_refault_anon 98
[  263.926633][T11656] workingset_refault_file 886
[  263.926642][T11656] swap 27832320
[  263.926692][T11656] swapcached 45862912
[  263.926701][T11656] pgpgin 307501
[  263.926708][T11656] pgpgout 231465
[  263.926716][T11656] pgfault 293834
[  263.926728][T11656] pgmajfault 57
[  263.926736][T11656] inactive_anon 165642240
[  263.926745][T11656] active_anon 145801216
[  263.926754][T11656] inactive_file 0
[  263.926762][T11656] active_file 0
[  263.926777][T11656] unevictable 0
[  263.926785][T11656] hierarchical_memory_limit 314572800
[  263.926812][T11656] hierarchical_memsw_limit 9223372036854771712
[  263.926823][T11656] total_cache 310968320
[  263.926831][T11656] total_rss 385024
[  263.926840][T11656] total_shmem 310968320
[  263.926848][T11656] total_mapped_file 117293056
[  263.926857][T11656] total_dirty 0
[  263.926864][T11656] total_writeback 0
[  263.926872][T11656] total_workingset_refault_anon 98
[  263.926882][T11656] total_workingset_refault_file 886
[  263.926930][T11656] total_swap 27832320
[  263.926938][T11656] total_swapcached 45862912
[  263.926976][T11656] total_pgpgin 307501
[  263.926984][T11656] total_pgpgout 231465
[  263.926992][T11656] total_pgfault 293834
[  263.927000][T11656] total_pgmajfault 57
[  263.927008][T11656] total_inactive_anon 165642240
[  263.927018][T11656] total_active_anon 145801216
[  263.927026][T11656] total_inactive_file 0
[  263.927035][T11656] total_active_file 0
[  263.927046][T11656] total_unevictable 0
[  263.927054][T11656] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.3776,pid=15484,uid=0
[  263.927204][T11656] Memory cgroup out of memory: Killed process 15484 (syz.1.3776) total-vm:94328kB, anon-rss:1448kB, file-rss:22408kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0
[  264.398305][   T29] kauditd_printk_skb: 38 callbacks suppressed
[  264.398324][   T29] audit: type=1400 audit(2000000180.435:8133): avc:  denied  { write } for  pid=15526 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  264.517661][   T29] audit: type=1400 audit(2000000180.555:8134): avc:  denied  { write } for  pid=15537 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  264.814669][   T29] audit: type=1400 audit(2000000180.855:8135): avc:  denied  { write } for  pid=15540 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  264.817773][T14596] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  264.888483][   T29] audit: type=1400 audit(2000000180.925:8136): avc:  denied  { write } for  pid=15553 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  264.994658][T15558] loop4: detected capacity change from 0 to 1024
[  265.004067][T15558] Quota error (device loop4): do_check_range: Getting block 64 out of range 1-5
[  265.004095][T15558] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0
[  265.004113][T15558] EXT4-fs error (device loop4): ext4_acquire_dquot:7070: comm syz.4.3780: Failed to acquire dquot type 0
[  265.004137][T15558] loop4: lost filesystem error report for type 5 error -117
[  265.004487][T15558] EXT4-fs error (device loop4): mb_free_blocks:2049: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt.
[  265.004795][T15558] EXT4-fs (loop4): 1 truncate cleaned up
[  265.005371][T15558] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  265.007864][T15558] EXT4-fs (loop4): shut down requested (1)
[  265.008082][T15558] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop4 ino=12
[  265.008172][T15558] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop4 ino=12
[  265.008263][T15558] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop4 ino=15
[  265.008366][T15558] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop4 ino=14
[  265.008508][T15558] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop4 ino=12
[  265.008561][T15558] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop4 ino=12
[  265.008638][T15558] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop4 ino=14
[  265.008932][T15558] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop4 ino=15
[  265.009155][T15558] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop4 ino=15
[  265.009174][T15558] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop4 ino=12
[  265.009336][T15558] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop4 ino=14
[  265.013567][   T29] audit: type=1400 audit(2000000181.045:8137): avc:  denied  { write } for  pid=15557 comm="syz.4.3780" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  265.013660][   T29] audit: type=1400 audit(2000000181.045:8138): avc:  denied  { write } for  pid=15557 comm="syz.4.3780" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  265.013694][   T29] audit: type=1400 audit(2000000181.045:8139): avc:  denied  { remove_name } for  pid=15557 comm="syz.4.3780" name="file1" dev="loop4" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  265.013799][   T29] audit: type=1400 audit(2000000181.045:8140): avc:  denied  { rename } for  pid=15557 comm="syz.4.3780" name="file1" dev="loop4" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1
[  265.059402][T13391] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  265.097451][T15570] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3783'.
[  265.104004][T15573] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3)
[  265.104103][T15573] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  265.104200][T15573] vhci_hcd vhci_hcd.0: Device attached
[  265.225919][T15583] dummy0: mtu less than device minimum
[  265.247334][T15583] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3785'.
[  265.340017][ T6113] usb 1-1: new low-speed USB device number 9 using vhci_hcd
[  265.484018][T15615] loop2: detected capacity change from 0 to 512
[  265.515371][T15615] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  265.515502][T15615] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  265.579929][T14596] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  265.616084][T15628] loop9: detected capacity change from 0 to 512
[  265.633827][T15628] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  265.633884][T15628] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  265.638408][T15576] vhci_hcd: connection reset by peer
[  265.638676][   T42] vhci_hcd vhci_hcd.0: stop threads
[  265.638694][   T42] vhci_hcd vhci_hcd.0: release socket
[  265.638716][   T42] vhci_hcd vhci_hcd.0: disconnect device
[  265.639450][T15628] EXT4-fs (loop9): 1 truncate cleaned up
[  265.644756][T15628] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  265.645749][T15628] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  265.822219][T15649] FAULT_INJECTION: forcing a failure.
[  265.822219][T15649] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  265.822260][T15649] CPU: 1 UID: 0 PID: 15649 Comm: syz.9.3798 Not tainted syzkaller #0 PREEMPT(lazy) 
[  265.822289][T15649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  265.822304][T15649] Call Trace:
[  265.822313][T15649]  <TASK>
[  265.822322][T15649]  __dump_stack+0x1d/0x30
[  265.822351][T15649]  dump_stack_lvl+0x95/0xd0
[  265.822412][T15649]  dump_stack+0x15/0x1b
[  265.822436][T15649]  should_fail_ex+0x262/0x280
[  265.822494][T15649]  should_fail+0xb/0x20
[  265.822523][T15649]  should_fail_usercopy+0x1a/0x20
[  265.822588][T15649]  _copy_to_user+0x20/0xa0
[  265.822624][T15649]  simple_read_from_buffer+0xb5/0x130
[  265.822721][T15649]  proc_fail_nth_read+0x10e/0x150
[  265.822810][T15649]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  265.822833][T15649]  vfs_read+0x18e/0x7c0
[  265.822910][T15649]  ? __rcu_read_unlock+0x4e/0x70
[  265.822984][T15649]  ? __fget_files+0x184/0x1c0
[  265.823007][T15649]  ? mutex_lock+0x57/0x90
[  265.823053][T15649]  ksys_read+0xdc/0x1a0
[  265.823082][T15649]  __x64_sys_read+0x40/0x50
[  265.823118][T15649]  x64_sys_call+0x2135/0x2550
[  265.823214][T15649]  do_syscall_64+0x112/0x360
[  265.823246][T15649]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  265.823272][T15649] RIP: 0033:0x7f3ddc75ea0e
[  265.823290][T15649] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  265.823367][T15649] RSP: 002b:00007f3ddb1f6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  265.823391][T15649] RAX: ffffffffffffffda RBX: 00007f3ddb1f76c0 RCX: 00007f3ddc75ea0e
[  265.823408][T15649] RDX: 000000000000000f RSI: 00007f3ddb1f70a0 RDI: 0000000000000004
[  265.823423][T15649] RBP: 00007f3ddb1f7090 R08: 0000000000000000 R09: 0000000000000000
[  265.823439][T15649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  265.823454][T15649] R13: 00007f3ddca26038 R14: 00007f3ddca25fa0 R15: 00007ffcad2304a8
[  265.823492][T15649]  </TASK>
[  265.999843][T15647] loop2: detected capacity change from 0 to 8192
[  266.047900][T15647] loop2: detected capacity change from 0 to 512
[  266.049323][T15647] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities
[  266.337761][T15681] 9p: Bad value for 'rfdno'
[  266.349400][T15681] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3810'.
[  266.440994][T15689] loop2: detected capacity change from 0 to 1024
[  266.516296][T15691] ==================================================================
[  266.516330][T15691] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read
[  266.516367][T15691] 
[  266.516374][T15691] write to 0xffff88811bcf2520 of 8 bytes by task 15689 on cpu 1:
[  266.516394][T15691]  filemap_splice_read+0x52a/0x790
[  266.516424][T15691]  splice_direct_to_actor+0x261/0x680
[  266.516445][T15691]  do_splice_direct+0x119/0x1a0
[  266.516464][T15691]  do_sendfile+0x37d/0x640
[  266.516484][T15691]  __x64_sys_sendfile64+0x105/0x150
[  266.516504][T15691]  x64_sys_call+0x1015/0x2550
[  266.516528][T15691]  do_syscall_64+0x112/0x360
[  266.516550][T15691]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  266.516571][T15691] 
[  266.516576][T15691] write to 0xffff88811bcf2520 of 8 bytes by task 15691 on cpu 0:
[  266.516591][T15691]  filemap_splice_read+0x52a/0x790
[  266.516615][T15691]  splice_direct_to_actor+0x261/0x680
[  266.516640][T15691]  do_splice_direct+0x119/0x1a0
[  266.516664][T15691]  do_sendfile+0x37d/0x640
[  266.516689][T15691]  __x64_sys_sendfile64+0x105/0x150
[  266.516711][T15691]  x64_sys_call+0x1015/0x2550
[  266.516733][T15691]  do_syscall_64+0x112/0x360
[  266.516755][T15691]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  266.516777][T15691] 
[  266.516781][T15691] value changed: 0x00000000000006b6 -> 0x00000000000006b9
[  266.516792][T15691] 
[  266.516797][T15691] Reported by Kernel Concurrency Sanitizer on:
[  266.516807][T15691] CPU: 0 UID: 0 PID: 15691 Comm: syz.2.3807 Not tainted syzkaller #0 PREEMPT(lazy) 
[  266.516831][T15691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  266.516843][T15691] ==================================================================
[  266.521700][T15696] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3)
[  266.521759][T15696] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  266.521791][T15696] vhci_hcd vhci_hcd.0: Device attached
[  266.544170][T15688] lo speed is unknown, defaulting to 1000
[  266.726413][T15697] vhci_hcd: connection closed
[  266.726576][   T42] vhci_hcd vhci_hcd.0: stop threads
[  266.726634][   T42] vhci_hcd vhci_hcd.0: release socket
[  266.726687][   T42] vhci_hcd vhci_hcd.0: disconnect device
[  268.485412][T15616] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  270.349903][ T6113] usb 1-1: enqueue for inactive port 0
[  270.349931][ T6113] usb 1-1: enqueue for inactive port 0
[  270.419838][ T6113] vhci_hcd vhci_hcd.0: vhci_device speed not set