last executing test programs:

1m20.17428421s ago: executing program 3 (id=421):
r0 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000934806544b839f8a000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000001040)={'lo\x00', {0x2, 0x4e1e, @broadcast}})
sendmsg$tipc(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x1, {{0x1, 0x3}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc084}, 0x4040082)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x25dfdbfc, {}, [{0x68, 0x1, [@m_vlan={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x128}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x63, 0xffffffffffffffff, 0xd103, 0x2}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8010}, 0xc0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x6}, 0x200, 0x2, 0x0, 0x4, 0x408, 0xd9a, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
readlink(&(0x7f0000000080)='./cgroup\x00', &(0x7f00000005c0)=""/15, 0xf)

1m20.114742444s ago: executing program 3 (id=423):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ip6tnl0\x00', <r1=>0x0})
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000006c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xeb0}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@noload}, {@noquota}]}, 0x3, 0x440, &(0x7f0000000280)="$eJzs28tvG8UfAPDv2kn66+uXUJVHH0CgIMoradJSeuACAokDSEhwKMeQpFWo26AmSLSKICBUjqgSJy6IIxJ/ASe4IOCExBXuqFKFcmnhZLT2bmI7thunTlzqz0dad2Z33Jmvd8ee2ckG0LdG05ckYk9E/B4Rw9VsfYHR6j83V5am/15Zmk6iXH7zr6RS7sbK0nReNH/f7jwzEFH4NIlDTepduHT53FSpNHsxy48vnn9vfOHS5Wfnzk+dnT07e2Hy1KkTxyeePzn5XFfiTOO6cfDD+cMHXn376uvTp6++8/O3SR5/QxxdMtru4OPlcper6629NelkoIcNoSPFajeNwUr/H45irJ284Xjlk542DthS5XK5fF/rw8tl4C6WRK9bAPRG/kOfzn/zbZuGHneE6y9WJ0Bp3DezrXpkIApZmcGG+W03jUbE6eV/vkq32Jr7EAAAdb5Pxz/PNBv/FaL2vtD/szWUkYi4JyL2RcTJiNgfEfdGVMreHxEPdFh/4yLJ+vFP4dqmAtugdPz3Qra2VT/+y0d/MVLMcnsr8Q8mZ+ZKs8eyz+RoDO5I8xNt6vjh5d8+b3WsdvyXbmn9+Vgwa8e1gR3175mZWpy6nZhrXf844uBAs/iT1ZWAJCIORMTBTdYx99Q3h1sdu3X8bXRhnan8dcQT1fO/HA3x55L265Pj/4vS7LHx/KpY75dfr7zRqv7bir8L0vO/q+n1vxr/SFK7XrvQyf/+5ZPp65U/Pms5p9ns9T+UvFW374OpxcWLExFDyWvVRtfun2woN7lWPo3/6JHm/X9frH0ShyIivYgfjIiHIuLhrO2PRMSjEXGkzafw00uPvbv5+LdWGv9MR+d/LTEUjXuaJ4rnfvyurtKRTuJPz/+JSupotmcj338baVenVzMAAAD8VxUiYk8khbHVdKEwNlb9G/79satQml9YfPrM/PsXZqrPCIzEYCG/0zVccz90IpvW5/nJhvzx7L7xF8WdlfzY9HxpptfBQ5/b3aL/p/4s9rp1wJbzvBb0L/0f+pf+D/1L/4f+1aT/7+xFO4Dt1+z3/6MetAPYfg3937If9BHzf+hfm+n/vjPg7tC2Lw9tXzuAbbWwM279kLyExLpEFO6IZkhsUaLX30wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADd8W8AAAD//58P56I=")
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x91)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000180)={0x80, 0x5, 0x6, 0x81, 0xf, 0xe6b})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc15}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_BROADCAST={0xa, 0x2, @remote}]}, 0x48}, 0x1, 0x0, 0x0, 0x28001}, 0x8000)
r3 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000d40)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x200000000380, 0x2000000008ac, 0x2000000008dc], 0x0, 0x0, 0x0}, 0x1d6)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
syz_emit_ethernet(0x56, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0xd, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@noop, @rr={0x7, 0x1f, 0x19, [@local, @broadcast, @local, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0)
r5 = socket$packet(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x2e}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}]}, 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000180)=r6, 0x4)
syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x1ff, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a09040000000000000000020000004c000480300001800e000100696d6d6564696174650000001c000280100002800c00"], 0xa0}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a14000000020aff"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000040)=0x9, 0x4)

1m19.881403157s ago: executing program 3 (id=426):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x0) (fail_nth: 4)

1m19.572597095s ago: executing program 3 (id=430):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xef, 0x3d27}, 0x400, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a0300000000000000007a30000000003c000000090a010400000000000000000700000008000a40004000000900020073797a32000000000900010073797a30000000000800054000000021140000001000010000000000000000000200000a00"/132], 0x84}}, 0x0)
r1 = socket$kcm(0x21, 0x2, 0x2)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r4=>0x0]}, &(0x7f0000000040)=0x45)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000380)={r4, @in6={{0xa, 0x4e23, 0x2, @empty, 0x5}}, 0x8f15, 0x0, 0xfff7ff7f, 0x0, 0x329, 0x2, 0x7}, 0x9c)
setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000400)={r4, 0x7, 0x6}, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r5, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x8c, 0x1, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x200}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9100}, @CTA_TIMEOUT_DATA={0x54, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x6559}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0xf}, @CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x1ff}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x7ff}, @CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0xffff}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf5}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000004)
sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000100)="87e118", 0x584}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = getpid()
r7 = syz_pidfd_open(r6, 0x0)
syz_mount_image$ext4(&(0x7f0000000a00)='ext4\x00', &(0x7f00000009c0)='./file1\x00', 0x1004410, &(0x7f0000000980), 0x1, 0x5c9, &(0x7f0000001000)="$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")
r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
ioctl$FS_IOC_FIEMAP(r8, 0xc020660b, &(0x7f0000000300)=ANY=[@ANYBLOB="0300ec75119a0000fdfbffad7096b1ade7ab7f2a683c03d8a2abff9e"])
setns(r7, 0x8020000)
syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)

1m19.310222961s ago: executing program 3 (id=435):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x621c2, 0x8)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x2, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x3e, 0x1, {0x0, 0x7, 0x1ff, 0x9, 0x3, 0x2, 0x97a, 0x7, 0x6f}}}}, @TCA_RATE={0x0, 0x5, {0x4, 0x2}}, @TCA_STAB={0x0, 0x8, 0x0, 0x1, [{{0x0, 0x1, {0x3b, 0x6c, 0x9, 0x3, 0x1, 0xffffff07, 0x8}}, {0x0, 0x2, [0xff, 0x4]}}, {{0x0, 0x1, {0x4, 0x7, 0x800, 0x6, 0x1, 0x7adadaaa, 0x6a}}, {0x0, 0x2, [0xc, 0x81, 0x6, 0x8]}}, {{0x0, 0x1, {0x8, 0x5, 0x4000, 0xffffffff, 0x2, 0x82, 0xc}}, {0x0, 0x2, [0x1, 0xc, 0x5, 0xbaf]}}, {{0x0, 0x1, {0xc6, 0xf, 0x2, 0xbc, 0x1, 0xffffffc0, 0x1}}, {0x0, 0x2, [0xaf, 0xb, 0x4, 0xae5a, 0xd185, 0xfa, 0x0, 0xdf, 0xb69]}}]}, @TCA_STAB={0x0, 0x8, 0x0, 0x1, [{{0x0, 0x1, {0x3, 0x8, 0xa0, 0x400, 0x1, 0x2, 0x1}}, {0x0, 0x2, [0x0, 0x3ff]}}, {{0x0, 0x1, {0x4, 0xf8, 0x4, 0x2, 0x2, 0x4, 0x9}}, {0x0, 0x2, [0x0, 0xfffd, 0x3]}}, {{0x0, 0x1, {0x3, 0x81, 0x8, 0x3, 0x2, 0x8e3, 0xffffff3c}}, {0x0, 0x2, [0x5, 0x6]}}, {{0x0, 0x1, {0x5, 0x0, 0x4, 0xe5c0, 0x0, 0x40, 0x3}}, {0x0, 0x2, [0x5, 0xa, 0x9158, 0x6]}}, {{0x0, 0x1, {0x3, 0x2, 0x8, 0x8, 0x0, 0x5, 0x3}}, {0x0, 0x2, [0x4]}}, {{0x0, 0x1, {0x9, 0x3, 0x8, 0x3, 0x0, 0x4, 0x5}}, {0x0, 0x2, [0x9f94, 0x9, 0x9, 0x6]}}, {{0x0, 0x1, {0xf0, 0x3, 0x8, 0x78, 0x2, 0x0, 0x400}}, {0x0, 0x2, [0xff, 0x0, 0x8, 0x200, 0x6]}}, {{0x0, 0x1, {0x3, 0x91, 0x200, 0x77, 0x1, 0x4, 0x2}}, {0x0, 0x2, [0x1000]}}, {{0x0, 0x1, {0x10, 0xff, 0x4, 0x400000, 0x0, 0x4, 0x6}}, {0x0, 0x2, [0x7, 0x7f]}}]}, @TCA_INGRESS_BLOCK={0x0, 0xd, 0x40000000}]}, 0x58}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x200000000000000)

1m17.2776742s ago: executing program 3 (id=462):
bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00')
r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000180)='rootcontext', &(0x7f0000000200)='\xf4\x9da`yv\xa9\x97-\x94\x1c|J+0l\xe88G[\xf8kT\x97\x83_\xc8\xd7|n\x9c\xc9U\xd35\nM9\x1f\b\x00\x00\x00\x00\x00\x00\x00\x89B\xbbF.\vy\xa1\xa1\xcd\r\xd9\x8e\x06Bqj\xd6\x10\xb1d\xde\x84\x91\n\xf6\xa6X\xa2B\x04\x0f\x12J\xdfB&\x8c\xfd\xcaU*\xfd\x80\xb4o\xc2T\v\a\xebFb\x122', 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="68000000020605000000000000000000000000070e0003006269746d61703a697000000005000400010000000900020073797a30000000002000078008000640000000020c0001800800014000000004080008400000005c05000500020000000500010006"], 0x68}}, 0x8000)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xc, 0x7, &(0x7f0000000240)=@raw=[@call={0x85, 0x0, 0x0, 0xc5}, @exit, @func, @map_idx={0x18, 0x6, 0x5, 0x0, 0xc}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x8}], &(0x7f00000000c0)='syzkaller\x00', 0x30e, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002280)={r2, 0x0, 0xe, 0x0, &(0x7f00000008c0)="e02742e8680d85ff9782762f86dd", 0x0, 0x57af, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m17.215634823s ago: executing program 32 (id=462):
bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00')
r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000180)='rootcontext', &(0x7f0000000200)='\xf4\x9da`yv\xa9\x97-\x94\x1c|J+0l\xe88G[\xf8kT\x97\x83_\xc8\xd7|n\x9c\xc9U\xd35\nM9\x1f\b\x00\x00\x00\x00\x00\x00\x00\x89B\xbbF.\vy\xa1\xa1\xcd\r\xd9\x8e\x06Bqj\xd6\x10\xb1d\xde\x84\x91\n\xf6\xa6X\xa2B\x04\x0f\x12J\xdfB&\x8c\xfd\xcaU*\xfd\x80\xb4o\xc2T\v\a\xebFb\x122', 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="68000000020605000000000000000000000000070e0003006269746d61703a697000000005000400010000000900020073797a30000000002000078008000640000000020c0001800800014000000004080008400000005c05000500020000000500010006"], 0x68}}, 0x8000)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xc, 0x7, &(0x7f0000000240)=@raw=[@call={0x85, 0x0, 0x0, 0xc5}, @exit, @func, @map_idx={0x18, 0x6, 0x5, 0x0, 0xc}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x8}], &(0x7f00000000c0)='syzkaller\x00', 0x30e, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002280)={r2, 0x0, 0xe, 0x0, &(0x7f00000008c0)="e02742e8680d85ff9782762f86dd", 0x0, 0x57af, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

51.35183893s ago: executing program 1 (id=792):
r0 = socket$kcm(0x29, 0x7, 0x0)
unshare(0x20000400)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f000001b000)=""/102384, 0x18ff0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x100, 0x2, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800000000000000}, {0x0, 0x1000000000}, 0x4, 0x0, 0x0, 0x0, 0x1}, {{@in=@remote, 0x404d3, 0x2b}, 0xa, @in=@multicast1, 0x0, 0x4, 0x0, 0x0, 0x8, 0x1}}, 0xe8)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@updpolicy={0xb8, 0x15, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4e21, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0xb}}}, 0xb8}}, 0x0)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r6, 0xffffffffffffffff, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x300)
recvmsg$kcm(r0, &(0x7f0000000380)={&(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r7=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000280)=""/140, 0x8c}, {&(0x7f0000000140)=""/61, 0x3d}, {&(0x7f00000004c0)=""/186, 0xba}], 0x3, &(0x7f0000000580)=""/229, 0xe5}, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000740)={@ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x3c})

50.83789081s ago: executing program 1 (id=796):
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001200192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100002000c0010000800034004000000", 0x58}], 0x1)

50.734353436s ago: executing program 1 (id=798):
r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382)
ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000300)={0x20, {}, 0x0, {}, 0x40000004, 0x1, 0xffffffff, 0x9, "28f5c9ea1f1ae4be411101000080ffffffffd7af40fd150b70aac11c2e16bd5bba7663c435aff94793ddd7aae07ef35f17bf01933bdb6fd7ecdd91b59ca8d541", "07a9000010fe8137800000000000000000db0000001100e6ff3f000600", [0x5, 0x9]})

50.658692421s ago: executing program 1 (id=799):
creat(&(0x7f00000004c0)='./bus\x00', 0x20)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x110)
preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4083, 0xffffffdf}], 0x1, 0x0, 0x0, 0x1)

50.548314087s ago: executing program 1 (id=800):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x1, 0x4)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000005)
timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x20, 0x0, 0x9, 0x2)

50.49070981s ago: executing program 1 (id=801):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9f04020218000000008100000002"], 0x0, 0x1a, 0x0, 0x1, 0x6}, 0x28)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000000000000000000000add500200000000000801aeaaec1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000070000400706362632874776f666973682900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040010000dc06216ef2c68e9f6da05d886dbc3273ef99796b36698e2bd5179c3eea5474fc78c9720bfc4f90a708001f0001000000cc0111"], 0x294}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000000)={[{@nogrpid}, {@nodiscard}, {@user_xattr}]}, 0xfe, 0x593, &(0x7f0000000e00)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x3d, &(0x7f0000000000)='cgroup\x00\x8d\f\xf3\xcd\xc6X$\x01n-Hg\x144-.\xe2\x053\xe2\xf4\xbf[\xe9\xdddU\x91\x9d,\t\x8d\xc3@\x86,\x7f\xe2Z\xe8L\x80\xdbe~c\xbc\x9b\xcf\x9b\x1cH\x95\xf3'}, 0x30)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005345c0f63cdc2e82818254950ee03568b8809a1f04c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab66c1aae9314d7381fcfeb970bea672010000000000000043144648a07a975bd89dc398712376610faa54f12495b4659be8673086f6f3543205d4bc4ce05b8b961103673dff7f158052e62bfbdcddde6985f3f1ac5d9a94cc53207899762a07282a1914452d11858e795a3ca30a101af5574f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5ed44039aab46419496362e54cfad05b4004ac71a003d7b85d07191bed4e5a8908263722d4146f7ed569985439baa355cf3d8731f5e7a237bc06d035a8d601f21746d880819f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c5b9f87d988c9fbd2b9d9b4e2d71753b1549fa734f0b2e5fcf9549804cddad721971637f9c9730a9cc384eed30345979db9c93e1c52f42cad0a4d4f9436d3f39b0ed09c395dc6e970366087a8e4daeeb1b017006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f710c490ecd085d2811a7555c53030000007f00000000bfa6478eb96b079c277e2910b7ccdc3d672ed34aa65278c549e2abb549ad954884289130bc71cee2b7de62bf48129ae1af052a2d46a6165eb0954dac7265f1f425735acf6377793946b3229e861d8ea49806b3b533345d36ecef9df700000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c000000aaae37f044bcadeb0f6846582b7653665aa336db9f0384d3c7ddf79c2e0000000000000000000000000000000000000000000000e154aa0d3e41986a668ee1e5ef93a8ceac75f44aae95e26742f895f287111f8ee86f7e3ffb63cfb0e345cf7fc63dd2b0d30977899c6f03640040af4db71f7452bfc79a05118d8bb42b63b195771e42f9942ec626bd4b5461b74324012164e8"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
close(r1)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x2}, 0x10)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32=r4, @ANYRES32=r1, @ANYBLOB="02"], 0x10)
renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0/file3\x00', 0x0)

35.385048956s ago: executing program 33 (id=801):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9f04020218000000008100000002"], 0x0, 0x1a, 0x0, 0x1, 0x6}, 0x28)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000000000000000000000add500200000000000801aeaaec1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000070000400706362632874776f666973682900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040010000dc06216ef2c68e9f6da05d886dbc3273ef99796b36698e2bd5179c3eea5474fc78c9720bfc4f90a708001f0001000000cc0111"], 0x294}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000000)={[{@nogrpid}, {@nodiscard}, {@user_xattr}]}, 0xfe, 0x593, &(0x7f0000000e00)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x3d, &(0x7f0000000000)='cgroup\x00\x8d\f\xf3\xcd\xc6X$\x01n-Hg\x144-.\xe2\x053\xe2\xf4\xbf[\xe9\xdddU\x91\x9d,\t\x8d\xc3@\x86,\x7f\xe2Z\xe8L\x80\xdbe~c\xbc\x9b\xcf\x9b\x1cH\x95\xf3'}, 0x30)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
close(r1)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x2}, 0x10)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32=r4, @ANYRES32=r1, @ANYBLOB="02"], 0x10)
renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0/file3\x00', 0x0)

27.703360646s ago: executing program 2 (id=1066):
r0 = socket(0x2, 0x80805, 0x0)
fcntl$getown(r0, 0x9)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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")
r1 = openat(0xffffffffffffffff, &(0x7f0000000740)='./bus\x00', 0x1c1840, 0x98)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x200, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000700)={{0x1, 0x1, 0x18, r1}, './bus\x00'})
write(r2, &(0x7f00000006c0)="cacbfbf4194de9702405d42d02df2c1d1bcf4d694ac11c7152565fc7d77b", 0x1e)
bind$l2tp6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x403ffd, @loopback, 0x7cfd1f0f}, 0x20)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r3, &(0x7f0000000100)={0xa, 0x7, 0x200000, @loopback, 0x8}, 0x20)

27.425852213s ago: executing program 2 (id=1073):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x2, 0xfffffffc}, 0x1c)
socket(0x10, 0x3, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r1, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4)
r2 = socket$netlink(0x10, 0x3, 0x4)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x200006}, 0x0, 0x8000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e22, 0x8, @mcast1, 0x79}}, 0x0, 0x0, 0x14, 0x0, "aa1cda12482ce936fe2707b31f549402157745ea281f88ea79321f8931e69fff9996d6cc77adb40b96e90df08b90b2a7f62e807928e17a869290e49ecf42b43e5dfc7650c208e65bbb7e7dd058ed1d57"}, 0xd8)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fchown(r4, 0x0, 0xee01)
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb)
openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x511001, 0x488)
write(r2, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)

26.79004452s ago: executing program 2 (id=1077):
r0 = semget$private(0x0, 0x6, 0x29b)
semop(r0, &(0x7f0000000180)=[{0x0, 0x203}, {}], 0x2)
semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x108}, 0x8, 0xffffffffffffffd8, 0x0, 0x0, 0x0, 0x0, 0xb})
semctl$GETNCNT(r0, 0x0, 0xe, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x0)
r1 = semget$private(0x0, 0x0, 0x2df)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000100)=[0x4])
semop(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x1000}], 0x1)

25.94004662s ago: executing program 2 (id=1089):
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
r1 = syz_io_uring_setup(0x112, &(0x7f00000002c0)={0x0, 0xf59b, 0x8, 0x10003, 0x5f, 0x0, r0}, &(0x7f0000000140), &(0x7f0000000280))
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x7})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xf177c000)
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000000)='./bus\x00', 0x2000844, &(0x7f0000000380)={[{@fat=@tz_utc}, {@fat=@check_normal}, {@dots}, {@dots}, {@fat=@sys_immutable}, {@nodots}, {@dots}, {@fat=@discard}, {@nodots}, {@fat=@fmask={'fmask', 0x3d, 0x201}}, {@dots}, {@dots}, {@dots}, {@dots}, {@nodots}, {@dots}]}, 0x21, 0x23d, &(0x7f0000000a40)="$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")
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x5, 0xa555, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x7fff, 0x2}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = dup(0xffffffffffffffff)
preadv2(r3, &(0x7f0000000540), 0x0, 0x0, 0x2766, 0x2)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sigaltstack(&(0x7f0000001000)={&(0x7f0000000000)=""/4088, 0x0, 0xff54}, 0x0)

25.58646357s ago: executing program 2 (id=1091):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0)
ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10)
sendmsg$kcm(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0)

25.282204478s ago: executing program 2 (id=1097):
socket$netlink(0x10, 0x3, 0x0)
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x18000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="120000000b0000"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000080), &(0x7f0000000200)}, 0x20)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073202940fc0000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000000)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e0"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000800)={[], [{@fowner_gt}]}, 0x1, 0xb95, &(0x7f0000002380)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xa42, 0x9)
pwrite64(r3, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
r4 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21)
pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYBLOB="30000000eb4b1e9991d601000000", @ANYRES32, @ANYRES32, @ANYRES64], 0x20)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0xffff, 0x4, 0x5, 0x1000, 0x1, 0xffff2d79, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x24, 0x2, 0x3}, 0x50)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000480)=ANY=[@ANYRES32=r5, @ANYRES32, @ANYBLOB="24e86066f51983b8f8968f", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@bloom_filter={0x1e, 0x4, 0xd305, 0xe, 0xa32, r4, 0x83, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x2, 0xe}, 0x50)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[@ANYRES32=r6, @ANYRES32, @ANYBLOB="33000500000000001a240000f625cb9b908252873251aa32e4c8a89637", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20)
r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x25, 0x1, @val=@tracing={0xffffffffffffffff}}, 0x20)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000600)={0x3f8}, 0x8)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000680)=ANY=[@ANYRES32=r1, @ANYRES32, @ANYBLOB="28f2ff02ff2040000000009f", @ANYRES32=r7, @ANYBLOB, @ANYRES64], 0x20)
r8 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)=@o_path={&(0x7f0000000300)='./file0\x00', 0x0, 0x0, r0}, 0x18)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
r10 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f0016000600060009000600200002400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x4)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r9, &(0x7f0000000540)={&(0x7f00000003c0), 0xc, &(0x7f0000000400)={&(0x7f0000000840)=ANY=[@ANYBLOB="a800000020080108000000000000000001000001050003008800000006000240080000000c00048008000140000000080600024022eb00002c000480080007400000003208000640ffffff430800024000000006080004400000000a08000140000002000c000480080001400000000106000240803500002400048008000240000000040800014000000002080001400000000b0800024000000b780c0004800800044000000004"], 0xa8}, 0x1, 0x0, 0x0, 0x1}, 0x40000)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1, <r11=>0xffffffffffffffff}, &(0x7f0000000380), &(0x7f0000000180)=r8}, 0xffffffffffffff51)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r11, &(0x7f00000001c0), 0x0}, 0x20)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xffffffff}, 0x1c, 0x0}}], 0x1, 0x20080098)
socket$can_bcm(0x1d, 0x2, 0x2)

25.271626278s ago: executing program 34 (id=1097):
socket$netlink(0x10, 0x3, 0x0)
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x18000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="120000000b0000"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000080), &(0x7f0000000200)}, 0x20)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073202940fc0000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000000)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e0"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000800)={[], [{@fowner_gt}]}, 0x1, 0xb95, &(0x7f0000002380)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xa42, 0x9)
pwrite64(r3, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
r4 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21)
pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYBLOB="30000000eb4b1e9991d601000000", @ANYRES32, @ANYRES32, @ANYRES64], 0x20)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0xffff, 0x4, 0x5, 0x1000, 0x1, 0xffff2d79, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x24, 0x2, 0x3}, 0x50)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000480)=ANY=[@ANYRES32=r5, @ANYRES32, @ANYBLOB="24e86066f51983b8f8968f", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@bloom_filter={0x1e, 0x4, 0xd305, 0xe, 0xa32, r4, 0x83, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x2, 0xe}, 0x50)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[@ANYRES32=r6, @ANYRES32, @ANYBLOB="33000500000000001a240000f625cb9b908252873251aa32e4c8a89637", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20)
r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x25, 0x1, @val=@tracing={0xffffffffffffffff}}, 0x20)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000600)={0x3f8}, 0x8)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000680)=ANY=[@ANYRES32=r1, @ANYRES32, @ANYBLOB="28f2ff02ff2040000000009f", @ANYRES32=r7, @ANYBLOB, @ANYRES64], 0x20)
r8 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)=@o_path={&(0x7f0000000300)='./file0\x00', 0x0, 0x0, r0}, 0x18)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
r10 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f0016000600060009000600200002400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x4)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r9, &(0x7f0000000540)={&(0x7f00000003c0), 0xc, &(0x7f0000000400)={&(0x7f0000000840)=ANY=[@ANYBLOB="a800000020080108000000000000000001000001050003008800000006000240080000000c00048008000140000000080600024022eb00002c000480080007400000003208000640ffffff430800024000000006080004400000000a08000140000002000c000480080001400000000106000240803500002400048008000240000000040800014000000002080001400000000b0800024000000b780c0004800800044000000004"], 0xa8}, 0x1, 0x0, 0x0, 0x1}, 0x40000)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1, <r11=>0xffffffffffffffff}, &(0x7f0000000380), &(0x7f0000000180)=r8}, 0xffffffffffffff51)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r11, &(0x7f00000001c0), 0x0}, 0x20)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xffffffff}, 0x1c, 0x0}}], 0x1, 0x20080098)
socket$can_bcm(0x1d, 0x2, 0x2)

4.08789778s ago: executing program 5 (id=1413):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0x50}, 0x4, 0x0, 0x10000, 0x0, 0x202, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
syz_mount_image$msdos(&(0x7f0000000200), &(0x7f00000000c0)='./file2\x00', 0x2010410, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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")
perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80)

4.009251925s ago: executing program 5 (id=1414):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48)
r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000000400)=0x1)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0xd, 0x1, 0x1c5, 0x4, 0x400, 0xa, 0xf}, 0x1c)
setxattr$trusted_overlay_origin(0x0, &(0x7f0000000340), 0x0, 0x0, 0x1)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'ip6_vti0\x00', <r4=>0x0})
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xd, &(0x7f0000000680)=ANY=[@ANYBLOB="1802000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000085000000a000000095"], &(0x7f0000000380)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendto$packet(r2, &(0x7f00000002c0)="1a040500d3fc03fc01004788031c09", 0x10025, 0x4000004, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x6, 0x6, @remote}, 0x14)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0, <r6=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000001c0)=r0}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4)
r7 = socket$packet(0x11, 0x3, 0x300)
getsockopt$IP_VS_SO_GET_VERSION(r7, 0x0, 0x480, &(0x7f0000000240), &(0x7f0000000280)=0x40)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="1802000017610000000000008000000085000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000004a17d3447cc769e5034776afe36d10930007010000f8ffffffb702000008000000b703000080000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x19}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x44, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000000)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYRES64=r0, @ANYRES64])
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000500)=@o_path={&(0x7f00000004c0)='./cgroup\x00', r5, 0x4000, r6}, 0x18)

3.956811469s ago: executing program 5 (id=1415):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x3}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x8e}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0)

3.904903961s ago: executing program 5 (id=1416):
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0xffffffffffffffff}, 0x102802, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
semctl$SEM_INFO(0x0, 0x3, 0x13, 0x0) (fail_nth: 1)

3.572271901s ago: executing program 5 (id=1421):
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r0 = inotify_init()
r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000200)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r4=>0x0]}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r4, 0x2}, &(0x7f0000000100)=0x8)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r1, 0x1, 0x80)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240))
ioprio_get$pid(0x3, 0x0)
fchdir(r5)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
open(&(0x7f0000000140)='./file1\x00', 0xa8040, 0x84)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1f1)
renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0)
r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x38, 0x1, 0x0, 0x81, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r8, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
dup2(r8, r9)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r8, 0x84, 0x17, &(0x7f00000002c0)=ANY=[], 0x9)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r9, 0x84, 0x19, &(0x7f0000000140)={0x0, 0x2}, 0x8)
inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x50000f20)
r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00')
preadv(r10, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/147, 0x93}], 0x1, 0x906, 0x81)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00')

2.694461823s ago: executing program 5 (id=1444):
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000003040)={0x7f, 0xd2, 0x0, 0xad, 0x9, 0x9})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x1, 0x7800, 0x8b8, 0x0, {{0x12, 0x4, 0x3, 0x1, 0x48, 0x68, 0x0, 0x3, 0x29, 0x0, @local, @loopback, {[@ra={0x94, 0x4, 0x1}, @end, @rr={0x7, 0x13, 0x5, [@dev={0xac, 0x14, 0x14, 0x1a}, @dev={0xac, 0x14, 0x14, 0x1a}, @private=0xa010101, @remote]}, @rr={0x7, 0x1b, 0x7e, [@multicast1, @empty, @loopback, @multicast1, @broadcast, @remote]}, @noop]}}}}})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x80, 0x7ffc1ffb}]})
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff})
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r2, 0x0, r3, 0x0, 0x7, 0x0)
r4 = syz_clone(0x5100c80, &(0x7f0000000380)="c832b2008149e322674b46450ffcd0b57972846160d50594add57a35435a947088dbbb504af949014a1e4d01d246e6930a4fed33b1597f900ae83019d802828aadd9f05ab363110220ab1bce720dafb34eb5582ab117c0a52959b6ada734bc1acb26479be2d98187fe3c0d6396103ff9fc3e7a8ebe2bfd6874f2415e3aa9eedcbe37246ab971b38572496c", 0x8b, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000f80)="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")
fcntl$setown(0xffffffffffffffff, 0x8, r4)
syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r3)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f00000000c0)={0x2, 0x4e0b, @empty}, 0x10, 0x0}}], 0x1, 0x4008804)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}})
r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000180)={{0x1, 0x1}})
ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0)
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB='iocharset=cp865,utf8=1,utf8=0,utf8=1,iocharset=utf8,sys_immutable,uni_xlate=0,uni_xlate=1,uni_xlate=1,gid=', @ANYRESDEC=0x0, @ANYRESDEC=0x0], 0xfd, 0x1b1, &(0x7f0000000d00)="$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")
inotify_init1(0x0)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0, 0x0)
getdents64(r6, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r5, 0x54a2)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2)
mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0)
mq_unlink(&(0x7f0000000000)='eth0\x00')
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', <r8=>0x0})
ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x6, 0x0, 0x100, 0x4, 0x0, r8})

2.357986162s ago: executing program 0 (id=1448):
socket$inet6(0xa, 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x183001, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
r0 = inotify_init()
socket(0xa, 0x2, 0x88)
socket$nl_sock_diag(0x10, 0x3, 0x4)
io_uring_setup(0x1554, &(0x7f0000000180)={0x0, 0x542d, 0x1000, 0x1, 0x20002f7})
socket$inet_sctp(0x2, 0x1, 0x84)
socket(0x2, 0x2, 0x0)
socket$inet6(0xa, 0x1, 0x84)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', <r4=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x58, r3, 0x405, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000401}, 0x2404c080)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$PTP_PIN_SETFUNC2(r1, 0x40603d10, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r6 = socket$unix(0x1, 0x2, 0x0)
inotify_add_watch(r0, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2)
ppoll(&(0x7f0000000300)=[{r6, 0x4236}], 0x1, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={<r7=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, r7, 0x8001}}, 0x48)
writev(r5, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

2.341336643s ago: executing program 0 (id=1449):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x30}}, 0x4000)

2.244616259s ago: executing program 6 (id=1450):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000580)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x3}}, {}, {@bh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@nouid32}, {@nobh}, {@user_xattr}, {@nouid32}, {@dioread_nolock}]}, 0x1, 0x55e, &(0x7f0000001bc0)="$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")
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000006000000850000008600000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x38, 0xe, 0x0, &(0x7f0000000000)="0000000000089592ae7531759713", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000001f40)=ANY=[@ANYBLOB="000000004c900200060000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000020000000000000ffffffffffd9ffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"])
socket$packet(0x11, 0x2, 0x300)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x2, 0x3b}, 0x1c)
socket(0x10, 0x3, 0x0)
syz_clone(0xb00b100, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000680)={0x28, r5, 0x421, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4098}, 0x840)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0xffffffffffffffdd, 0x400000, 0x0, 0xffffffffffffff1b, 0x3c}, 0x0, &(0x7f0000000040)={0x3fc, 0x0, 0x0, 0x1, 0x100, 0x0, 0x80000003}, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x0, 0x1}]}]}}, &(0x7f00000000c0)=""/16, 0x46, 0x10, 0x1}, 0x28)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_int(r6, 0x0, 0x18, 0x0, &(0x7f0000000040)=0xfffffffffffffff0)
r7 = fsopen(&(0x7f00000004c0)='mqueue\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000001d40)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YG\xf9\xc2\xf1\xa4\xdb$\xf6]\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x00\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^W\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B\xc5\x05\x9d\xd6\x02|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe6\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26I\xbb\xdeb\x95?\xc0\x81', &(0x7f0000000200)='Yockfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000040)='\x00', &(0x7f00000001c0)='dE\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000280)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1<e\a\xa5\x8f\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\xd3K\xfa\xc8\x8d#\xce)\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^\x97\b\x14\xc5\xad\t\f\xdeg\x8d\x16wW\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B4/#W\xc5\x05\x9d\xd6\x02\x8cU!a\xdc|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3\x93\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^', &(0x7f00000000c0)='dE\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000780)='\\$#[\\/\x00\xd5\xd4^\xa7\xe4\xd4\x1f.yh\x18\xb8s\xe6\f\xaf*4\xe1\xa1e\x04%f\x8f\xde\x91\x04\xbb\xc8\x17\x15\xa4\xf0\x00\x15w\x00\x00\xed\xdd}\x00\x18\xf3\xde\n\xbe\x91\xc4\xc5\xe6\xd3o\xaau\xf34\t\x9d\x80rg\xbc\xee\x96p\x18\x9e(h\xeb\xd9\xde\xa6\xfc\x8e\xe3,\xae\xa8\xf0\x82y\x91\x1c{\x85 \xc7P\xa3\x9c\x06\xc1\xd3\x92\xcd\xcc\x17\xb2}\x13:\xbbh\"%;\b\x7f\x91\x8a\xa5Z\x92~<\xfe3\x19\xdcVJ\f\xd1\x89d\xf9N\xbd\x92\x86\xa2\xa8\xc0:\x1f\n\xc9\x8eUO\x8e\xea\x99\xe1\xbe%Y\x9eH#\xa4\x9d5\xa88m6\x89kE\xce\xc3\aBW\xec_\xea_\x81\xbe\x86~\x84F\xa9\xcd\xba\xfb\xd8\x8f\x01\x81~\x9c#\r\x87\xcf\x19\xb9\xbd \xcb\xff\x88io\xb0\xb1\xa0B\x8cI\x82+\xc4\xcf\xf4!+\x16v\xb6\x8a\xb7k}\x1d\xf2\x1c\x00\x8f\xd7\x84R\x12\xed){SM[\xe6g6\xfeF\x1dJ\x83', &(0x7f0000000540)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1<e\a\xa5\x8f\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\xd3K\xfa\xc8\x8d#\xce)\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^\x97\b\x14\xc5\xad\t\f\xdeg\x8d\x16wW\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B4/#W\xc5\x05\x9d\xd6\x02\x8cU!a\xdc|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3\x93\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^', 0x0)
fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000140)='sockfs\x00', &(0x7f0000000180)='GPL\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000240)='\xc5\v!\xf8\xa7\x83\x00\x00\t\x00\x00\x00\x14', &(0x7f0000000340)='dU|\xcbM\xe6\x91q\b\xab\xdd\x1f\t\xe6$\xfd\'h\x00\x8e\xb1\xad^>8\x88\v\xf4F\xban\x1dq\x8abg\xd0\x80\\\xa6\\to\x84\xdb\x8cO\xbb\x1bF\xda.:\x99*\x1f\xcbR\xa0\xb8<\'7)\xee:\aYWKv\xf6\xf4\xb7\xc2\xc8\x01%\\r\xf7\xb4.\xbf\xc7\xb3k\xb4m\xa9BJ\x9e\x90N\xfdf\x12\xf3<\x89\x0fP\xa9\xaf\xcaS<\x18\f\x95\x92:\x00\x9e8\x93!\xde\xac\xf8M`\xcdy\xa5\xfc\x14\xea\xaa\x8f\x9c\xd8\x8f\xd1h\x178`\x7f\xab\xa3/\xf6\x1b\xe4fuhm\x80I\xf8\xfa^y\xd53p\f\xc6\xf6y\x18]\xc5B\xae\xa2\x9a\xff1\x1c\xbc\xf9\x1c\xd7\x9ej\xfa$L\xb0\xcb\x02\x96\xfc\xd8b\x0eW\xcd\xb2\x80|.\x10\xd4\rG\xd3\xa6_\x00'/218, 0x0)

2.243473969s ago: executing program 4 (id=1451):
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = syz_clone(0x2b00b100, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0)
ptrace(0x4206, r0)
wait4(r0, 0x0, 0x2, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000fea000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0xfffffffffffffc64)
r1 = getpgid(0x0)
r2 = syz_pidfd_open(r1, 0x0)
process_madvise(r2, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000240)='K', 0x1}], 0x2, 0xb, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES8, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000e0270300000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000650d000000000000e1"], 0x254}}, 0x44000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x200444d4)
r4 = io_uring_setup(0x4ff0, &(0x7f0000000040)={0x0, 0xc8dd, 0xc000, 0x2020000a, 0x20002f7})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4)
r5 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1)
r6 = dup(r5)
r7 = memfd_create(&(0x7f0000002600)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
ftruncate(r7, 0xdcb)
copy_file_range(r7, 0x0, r6, 0x0, 0x7, 0x0)
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r9 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00')
r10 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
socket$inet_mptcp(0x2, 0x1, 0x106)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r9}})

2.242668079s ago: executing program 0 (id=1452):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x104b0d, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r0, 0x402, 0x5)
fcntl$notify(r0, 0x402, 0x8000003d)
r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x4, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x2a, 0xff, 0x0, 0x0, 0x0, 0x3, 0x194d99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x2025, 0x800000000004002, 0xb, 0x8, 0x5, 0x834f, 0x68, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0xc)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@dev, @in6=@private1}}, {{@in6=@private2}, 0x0, @in6}}, &(0x7f00000002c0)=0xe8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]})
getrusage(0x0, &(0x7f00000011c0))
r2 = getpgrp(0x0)
r3 = syz_pidfd_open(r2, 0x0)
r4 = socket(0x10, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'veth0_virt_wifi\x00', &(0x7f0000000100)=@ethtool_link_settings={0x37, 0x0, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
unshare(0x6020400)
socket$rxrpc(0x21, 0x2, 0xa)
fsetxattr$trusted_overlay_nlink(r1, &(0x7f00000018c0), 0x0, 0xfe70, 0x71e4101bb2a44d02)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCXONC(r5, 0x4b3a, 0x2)
fremovexattr(r3, &(0x7f00000001c0)=@known='trusted.overlay.origin\x00')
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x2000002, &(0x7f0000000080), 0x1, 0x53a, &(0x7f0000000a80)="$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")
mount(0x0, &(0x7f0000003c40)='.\x00', &(0x7f0000000180)='hugetlbfs\x00', 0x0, 0x0)
r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000d80)='\x00', 0x89901)
move_mount(r6, 0x0, 0xffffffffffffff9c, 0x0, 0x276)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000100)=ANY=[@ANYRES64=r3], 0xf9, 0x122e, &(0x7f0000001280)="$eJzs3E1rXFUYB/DHSdrExLyotVpBerAb3VySLNwoSJAUpANK2witINyaiQ65zoTcITAiRldu3fgB3IpLd4K4001c+BncZePShXqlM+lL7GjQau8Qfr/NPMy5f3jO3OHAGebcg5c+fW9rs8w28140Hno5GtsRk7+lSNGIWz6K51/87vtnrly7fmm12Vy7nNLF1avLL6SU5s9/8+YHXz77bW/2ja/mv56K/cW3Dn5e+Wn/7P65g9+vvtsuU7tMnW4v5elGt9vLbxSttNEut7KUXi9aedlK7U7Z2jkyvll0t7f7Ke9szM1s77TKMuWdftpq9VOvm3o7/ZS/k7c7KcuyNDcT3I/1L36pqiqiqk7F6aiqqno4ZqIRj8RczMdCLMaj8Vg8HmfiiTgbT8ZTcW5wVd19AwAAAAAAAAAAAAAAAAAAwMky6vz/7D3n/z+LGHX+/3zNzQMAAAAAAAAAAAAAAAAAAMAJceXa9Uurzeba5ZSmI4pPdtd314evw/HVzWhHEa1YioX4NQan/4eG9elori2lgcX4uNg7zO/trk8czS8PHidwT/7iq8215WE+Hc1Pxczd+ZVYiDOj8yt/yl8Y5KfjuQt35bNYiB/fjm4UsRE3s3fyHy6n9Mprzdv5H/aHc9+o8b4AAADAfylLt43cv2fZX40P88f9PnBzf710Z38eixGH+cl4erLeuRNR9t/fyouitVN7cauj4Tt7ETEmjf3rohERY9DG3xSnjr1mtobGPp+NuI/4xJEv0lh8zmNeTI8aOm7lmPhf1yUejMObPlV3HwAAAAAAAAAAAPwzD+IPhnXPEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/mAHjgUAAAAAhPlbp9GxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXwUAAP//3m/GvA==")
set_mempolicy(0x2, &(0x7f0000000000)=0x8, 0x1)

1.807485664s ago: executing program 4 (id=1453):
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000480), 0xc0041, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00')
preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/196, 0xc4}], 0x1, 0x8, 0xffffffff)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x1, 0x4d032, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)

1.379139029s ago: executing program 4 (id=1454):
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
r1 = socket(0x10, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x301}, [@IFLA_IFNAME={0x14, 0x3, 'dummy0\x00'}]}, 0x34}}, 0x800)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0)
write(r1, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042402000000ff02000300000000", 0x1e5)
write$vga_arbiter(r0, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc)
write$vga_arbiter(r0, &(0x7f0000000080)=@other={'decodes', ' ', 'none'}, 0xd)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000240)={'gre0\x00', &(0x7f00000002c0)={'ip_vti0\x00', 0x0, 0x8, 0x7800, 0x5, 0x9, {{0x5, 0x4, 0x3, 0x5, 0x14, 0x66, 0x0, 0x8, 0x29, 0x0, @remote, @loopback}}}})
socket$inet6_tcp(0xa, 0x1, 0x0)
close(0x3)

1.226533478s ago: executing program 4 (id=1455):
set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0)
syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 6)

1.226203828s ago: executing program 6 (id=1456):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$bt_hci(r0, 0x84, 0xd, &(0x7f0000003140)=""/4111, &(0x7f0000000000)=0x4)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x2c}}, './file0\x00'})
syz_emit_ethernet(0xf87, &(0x7f0000002140)=ANY=[@ANYBLOB="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"], 0x0)
socket$xdp(0x2c, 0x3, 0x0)
socket$xdp(0x2c, 0x3, 0x0)

1.179996981s ago: executing program 4 (id=1457):
syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@mb_optimize_scan}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x4}}]}, 0xff, 0x50f, &(0x7f0000000140)="$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")
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000a00)='./bus\x00', 0x0, &(0x7f0000000080)={[{@errors_remount}, {@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@noblock_validity}]}, 0x3, 0x488, &(0x7f0000001340)="$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")
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf2, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x6}, 0x23155778fd062d83, 0x3, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101a42, 0xa3)
pwritev2(r0, &(0x7f0000000cc0)=[{&(0x7f0000000240)=';', 0xffffffbc}], 0x1, 0xfff, 0xc, 0x4)

704.966849ms ago: executing program 6 (id=1460):
r0 = socket$igmp6(0xa, 0x3, 0x2)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x35, 0x0, 0x0) (async)
r2 = socket$rds(0x15, 0x5, 0x0) (async, rerun: 64)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, <r3=>0x0}) (rerun: 64)
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000640)={{r2}, r3, 0x8, @inherit={0x50, &(0x7f0000000000)={0x0, 0x1, 0x8, 0x9, {0xa, 0x25, 0x1, 0x8, 0x3114}, [0x2]}}, @subvolid=0x5}) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000240000626f6e640000000014000280050011000500000005001000040000000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x4048010}, 0x404c800)

675.351891ms ago: executing program 4 (id=1461):
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x3, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x34}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x90)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
pipe(0x0)
sched_setscheduler(0x0, 0x1, 0x0)
prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x0)
r0 = getpid()
get_robust_list(0x0, 0x0, 0x0)
setresuid(0xee00, 0xee00, 0x0)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0)
readv(r1, &(0x7f0000003cc0)=[{&(0x7f0000001bc0)=""/4096, 0x1000}], 0x1000000000000048)
r2 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
add_key$user(0x0, 0x0, 0x0, 0x0, r2)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
syz_io_uring_setup(0x263f, 0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, 0x0)
r5 = msgget$private(0x0, 0x0)
msgrcv(r5, 0x0, 0x0, 0x2, 0x0)

585.040946ms ago: executing program 6 (id=1463):
sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000003500)=[{&(0x7f0000000440)="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", 0x2b4}], 0x1}, 0x851) (async)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) (async)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000640)=ANY=[@ANYBLOB="c40000001900"], 0xc4}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x582, &(0x7f0000009ec0)="$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")

583.975786ms ago: executing program 7 (id=1464):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x12122, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x43, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x182, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x3000, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0xffffffffffffffff}, 0x102802, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
chdir(0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}}], 0x1, 0x4000000)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0300000004000000040000000a0000000000", @ANYRES32], 0x50)
ptrace$setregs(0xd, r2, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
ptrace$getregset(0x4205, r2, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78})
ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000740)={0x0})
sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x48}}, 0x8000)

272.531405ms ago: executing program 7 (id=1465):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10)
listen(r0, 0x1ff)
setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0x5, 0x5, 0xffff, 0xfc00}, 0x8)
sendto$inet(r0, &(0x7f0000000100)="ab", 0xffe0, 0xe61e2840a154b0c0, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10)

272.161965ms ago: executing program 7 (id=1466):
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x110, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0xedf2}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1)
unshare(0x10040400)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008805}, 0x20040080)
sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb000005000006140000001100", @ANYRES64], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc000)

262.912635ms ago: executing program 6 (id=1467):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310007000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a3c000000090a010200000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080205400000000d140000001100010000000000000000000101000a"], 0x64}, 0x1, 0x0, 0x0, 0x4044050}, 0x40)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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")
r1 = open(&(0x7f0000000040)='./file2\x00', 0x4000, 0x20)
preadv2(r1, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0)
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCGPTLCK(r4, 0x80045439, &(0x7f0000000480))
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r3, 0x20, &(0x7f0000000100)={0x0, 0x0, <r5=>0x0, 0x0}}, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r2)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x3, &(0x7f0000000780)=@framed, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
pread64(r2, &(0x7f00000007c0)=""/248, 0xf8, 0xfffffffffffeffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x12, 0x2, &(0x7f0000000200)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x164}], 0x0, 0xfffffff9, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5, r6, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r2)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0)
r10 = socket(0x11, 0xa, 0x0)
sendmsg$can_bcm(r10, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0}, 0x8}, 0x0)

49.896288ms ago: executing program 7 (id=1468):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'wg1\x00'})
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4840)

49.564898ms ago: executing program 7 (id=1469):
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4c8, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x0, 0xd}, 0x2000, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0x1, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x11, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xaf, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@map_fd={0x18, 0x5, 0x1, 0x0, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0xffffffff, 0x5b, &(0x7f00000003c0)=""/91, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x5, 0x2, 0x38, 0x3}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000480)=[0xffffffffffffffff], &(0x7f00000004c0)=[{0x0, 0x3, 0x5, 0x9}, {0x3, 0x1, 0x5, 0xc}, {0x3, 0x4, 0xd, 0xb}, {0x4, 0x2, 0x2, 0x6}, {0x0, 0x4, 0x6, 0x9}, {0x5, 0x2, 0xe, 0xa}], 0x10, 0x7}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000a80)='./file1\x00', 0x2800810, &(0x7f00000025c0)=ANY=[@ANYBLOB="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"], 0x3, 0x176, &(0x7f0000000240)="$eJzs27GL01AcB/BfbNRTl5vFIeDiVNTJUZET1ICidNBJ4XS5yoG3RKfgX+LqHyfITTcIT2q0tSVFrU0j189n6Q++7eP3hteXF5IXV94c7B8evT58fBw7WRb57SjiJIvdOBODaNQBAJwmJynFl5RSOl/HhY+RUuq7IwCga/Z/ANg+v93/b/XUGADQGed/ANg+T589f3inLPeeFMVOxOe6GlWj5rPJ790v964X3+3OfnVcVaPBNL/R5MV8fjYu/shvtubn4trVJp9kdx+VC/ml2J9v1WOIAAAAsKJhMdV6vh8Ol+VN9cv9gYXzex6X841NAwD4C0fv3h+8HI9fvV1Dkcd6xlG0FVH/wZcnF239t7qZIvtZfE0prTDOh0/NEhg/+C+ms94ii4h/G6fvfyaga7NF33cnAAAAAAAAAAAAAADAMt2+jTToe3oAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ6lsAAAD//1UCS4E=")
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0, 0x0)
ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, &(0x7f0000000440)=0x1)
ioctl$F2FS_IOC_SEC_TRIM_FILE(0xffffffffffffffff, 0x4018f514, 0x0)

48.423658ms ago: executing program 0 (id=1470):
r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1, 0x606}}, 0x10)
close(r0)

48.134328ms ago: executing program 6 (id=1471):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0x50}, 0x4, 0x0, 0x10000, 0x0, 0x202, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
syz_mount_image$msdos(&(0x7f0000000200), &(0x7f00000000c0)='./file2\x00', 0x2010410, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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")
perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10004893}, 0x80)

47.851788ms ago: executing program 0 (id=1472):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$unix(0x1, 0x2, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x7, 0x635f, 0x5, 0xffffffff, 0x9}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0x11}, {0xffe6, 0xb}, {0xfff2, 0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x2c, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x6}, @TCA_CAKE_FWMARK={0x8, 0x12, 0x1000}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0xfffffffc}, @TCA_CAKE_ATM={0x8, 0x4, 0x2}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2000c0e0}, 0x4000804)
close(r7)
socket$unix(0x1, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

673.8µs ago: executing program 7 (id=1473):
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x200f67f, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x0)
unshare(0x400)
copy_file_range(r2, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x2, 0x2}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x0, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000011006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000200030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="84010000", @ANYRESHEX=r1, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054010b800800090003"], 0x184}}, 0x40020)
fallocate(r0, 0x1, 0x2300000000000000, 0x0)

0s ago: executing program 0 (id=1474):
rt_sigprocmask(0x2, &(0x7f0000000200)={[0xfffffbfd]}, 0x0, 0x8)
r0 = gettid()
r1 = getpid()
rt_tgsigqueueinfo(r1, r0, 0x1b, &(0x7f0000000280)={0xc, 0x0, 0x4})
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000))
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x0, 0x3b9}, &(0x7f0000000000)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, &(0x7f00000000c0)=0x3, 0x4)
r6 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=<r7=>0x0, &(0x7f0000000440)=<r8=>0x0)
syz_io_uring_submit(r7, r8, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8}})
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)
io_uring_enter(r6, 0x2def, 0x818, 0x28, 0x0, 0x0)
syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x5e5, 0x10100}, &(0x7f0000000180)=<r9=>0x0, &(0x7f00000001c0))
syz_io_uring_submit(r9, r8, &(0x7f00000001c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x1, 0x1})
io_uring_enter(r6, 0x4866, 0x0, 0xb, 0x0, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x0)
r10 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r2, &(0x7f0000000040)={0x40000000})
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000006800e9"], 0x18}}, 0x0)

kernel console output (not intermixed with test programs):

a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   84.359514][ T6016] RAX: ffffffffffffffda RBX: 00007f12391c5fa0 RCX: 00007f1238f4aeb9
[   84.359530][ T6016] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004
[   84.359545][ T6016] RBP: 00007f12379a7090 R08: 0000000000000000 R09: 0000000000000000
[   84.359560][ T6016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   84.359574][ T6016] R13: 00007f12391c6038 R14: 00007f12391c5fa0 R15: 00007ffe7ff1cc68
[   84.359598][ T6016]  </TASK>
[   84.366643][ T6004] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.778: Failed to acquire dquot type 1
[   84.551911][ T6004] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.778: Failed to acquire dquot type 1
[   84.566771][ T6004] EXT4-fs (loop5): 1 orphan inode deleted
[   84.587682][ T6021] Cannot find del_set index 2 as target
[   84.607883][ T6004] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   84.644680][ T6027] loop1: detected capacity change from 0 to 4096
[   84.671958][ T6027] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   84.711849][ T4816] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.859298][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.368846][ T6052] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.721364][ T6052] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.848359][ T6066] loop1: detected capacity change from 0 to 1024
[   85.888582][ T6066] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   86.009277][ T6052] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.125377][ T6052] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.189311][ T3332] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.200848][ T3332] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.212197][ T3332] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.224793][ T3332] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.263275][ T6072] syzkaller0: entered promiscuous mode
[   86.268847][ T6072] syzkaller0: entered allmulticast mode
[   86.294545][ T6072] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   87.022171][ T6081] netlink: 8 bytes leftover after parsing attributes in process `syz.5.805'.
[   87.031829][ T6081] sctp: [Deprecated]: syz.5.805 (pid 6081) Use of int in maxseg socket option.
[   87.031829][ T6081] Use struct sctp_assoc_value instead
[   87.094500][ T6071] tipc: Resetting bearer <eth:syzkaller0>
[   87.111652][ T6071] tipc: Disabling bearer <eth:syzkaller0>
[   87.286049][   T29] kauditd_printk_skb: 311 callbacks suppressed
[   87.286065][   T29] audit: type=1400 audit(2000000029.880:3697): avc:  denied  { open } for  pid=6084 comm="syz.5.807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   87.286686][ T6078] loop2: detected capacity change from 0 to 512
[   87.292335][   T29] audit: type=1400 audit(2000000029.880:3698): avc:  denied  { kernel } for  pid=6084 comm="syz.5.807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   87.363834][ T6087] ip6t_REJECT: TCP_RESET illegal for non-tcp
[   87.386254][   T29] audit: type=1400 audit(2000000029.980:3699): avc:  denied  { tracepoint } for  pid=6088 comm="syz.5.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   87.436485][   T29] audit: type=1326 audit(2000000029.980:3700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6077 comm="syz.2.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f7aaa78b78e code=0x7ffc0000
[   87.444068][ T6078] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   87.459842][   T29] audit: type=1326 audit(2000000029.980:3701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6077 comm="syz.2.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f7aaa78b78e code=0x7ffc0000
[   87.459878][   T29] audit: type=1326 audit(2000000029.980:3702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6077 comm="syz.2.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f7aaa7c9d97 code=0x7ffc0000
[   87.459907][   T29] audit: type=1400 audit(2000000029.990:3703): avc:  denied  { create } for  pid=6088 comm="syz.5.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   87.459995][   T29] audit: type=1400 audit(2000000029.990:3704): avc:  denied  { bind } for  pid=6088 comm="syz.5.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   87.460024][   T29] audit: type=1400 audit(2000000029.990:3705): avc:  denied  { write } for  pid=6088 comm="syz.5.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   87.460116][   T29] audit: type=1326 audit(2000000030.000:3706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6077 comm="syz.2.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f7aaa7cc14a code=0x7ffc0000
[   87.461173][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   87.630534][ T6078] ext4 filesystem being mounted at /149/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   87.652918][ T6089] loop5: detected capacity change from 0 to 8192
[   87.722626][ T6089]  loop5: p1 < > p2 p3 < p5 p6 > p4
[   87.727887][ T6089] loop5: partition table partially beyond EOD, truncated
[   87.739640][ T6089] loop5: p1 start 100663296 is beyond EOD, truncated
[   87.746477][ T6089] loop5: p2 size 134217732 extends beyond EOD, truncated
[   87.754293][ T6078] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   87.759650][ T6089] loop5: p4 size 14876672 extends beyond EOD, truncated
[   87.792065][ T6089] loop5: p5 size 134217732 extends beyond EOD, truncated
[   87.800081][ T6089] loop5: p6 size 14876672 extends beyond EOD, truncated
[   87.824073][ T6104] loop2: detected capacity change from 0 to 512
[   87.839331][ T6104] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)!
[   87.849642][ T6104] EXT4-fs (loop2): group descriptors corrupted!
[   87.923633][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop5p6, 10) failed: No such file or directory
[   87.923653][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory
[   87.927401][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory
[   87.936895][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory
[   87.964513][ T4119] udevd[4119]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory
[   88.424079][ T6138] loop5: detected capacity change from 0 to 512
[   88.462902][ T6138] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[   88.482473][ T6138] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.829: casefold flag without casefold feature
[   88.531758][ T6138] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.829: couldn't read orphan inode 15 (err -117)
[   88.564534][ T6138] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   88.615187][ T6138] IPVS: set_ctl: invalid protocol: 33 127.0.0.1:20004
[   88.682802][ T6138] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #2: block 4: comm syz.5.829: lblock 0 mapped to illegal pblock 4 (length 1)
[   88.768810][ T4816] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.005317][ T6154] netlink: 'syz.5.834': attribute type 1 has an invalid length.
[   89.010486][ T6126] loop2: detected capacity change from 0 to 512
[   89.048678][ T6126] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   89.063398][ T6126] ext4 filesystem being mounted at /152/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   89.084270][ T6126] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.112302][ T6160] openvswitch: netlink: Key type 7942 is out of range max 32
[   89.216384][ T6166] program syz.2.838 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   89.333198][ T6171] xt_hashlimit: size too large, truncated to 1048576
[   89.427444][ T6173] loop5: detected capacity change from 0 to 512
[   89.567279][ T6173] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   89.579899][ T6173] ext4 filesystem being mounted at /58/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   89.590956][ T6173] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #2: comm syz.5.839: corrupted inode contents
[   89.605849][ T6173] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #2: comm syz.5.839: mark_inode_dirty error
[   89.617861][ T6173] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #2: comm syz.5.839: corrupted inode contents
[   89.632283][ T6173] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #2: comm syz.5.839: corrupted inode contents
[   89.646288][ T6173] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #2: comm syz.5.839: mark_inode_dirty error
[   89.658269][ T6173] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #2: comm syz.5.839: corrupted inode contents
[   89.670783][ T6173] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.839: mark_inode_dirty error
[   89.690892][ T6173] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #2: comm syz.5.839: corrupted inode contents
[   89.704580][ T6173] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #2: comm syz.5.839: mark_inode_dirty error
[   89.720253][ T6173] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #2: comm syz.5.839: corrupted inode contents
[   90.001704][ T6183] netlink: 'syz.0.841': attribute type 21 has an invalid length.
[   90.009516][ T6183] netlink: 128 bytes leftover after parsing attributes in process `syz.0.841'.
[   90.082213][ T6183] netlink: 3 bytes leftover after parsing attributes in process `syz.0.841'.
[   90.917402][ T4816] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   90.942237][ T6189] loop2: detected capacity change from 0 to 512
[   91.005522][ T6189] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.844: invalid indirect mapped block 256 (level 2)
[   91.024189][ T6189] EXT4-fs (loop2): 2 truncates cleaned up
[   91.047862][ T6196] tipc: Enabling of bearer <eth:syzkall> rejected, failed to enable media
[   91.104602][ T6189] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   91.155033][ T6208] sctp: [Deprecated]: syz.0.851 (pid 6208) Use of int in maxseg socket option.
[   91.155033][ T6208] Use struct sctp_assoc_value instead
[   91.189712][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   91.357482][ T6227] loop2: detected capacity change from 0 to 2048
[   91.385646][ T6229] loop5: detected capacity change from 0 to 512
[   91.394937][ T6229] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   91.410855][ T6227]  loop2: p1 < > p4 < >
[   91.415087][ T6227] loop2: partition table partially beyond EOD, truncated
[   91.423511][ T6227] loop2: p4 start 42180 is beyond EOD, truncated
[   91.434085][ T6229] EXT4-fs (loop5): 1 truncate cleaned up
[   91.445203][ T6229] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   91.459139][ T3000]  loop2: p1 < > p4 < >
[   91.463366][ T3000] loop2: partition table partially beyond EOD, truncated
[   91.471597][ T3000] loop2: p4 start 42180 is beyond EOD, truncated
[   91.494142][ T6229] netlink: 'syz.5.858': attribute type 5 has an invalid length.
[   91.705709][ T6233] syzkaller0: entered promiscuous mode
[   91.711228][ T6233] syzkaller0: entered allmulticast mode
[   91.719146][ T4816] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   91.730522][ T6233] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   91.740248][ T6233] tipc: Resetting bearer <eth:syzkaller0>
[   91.746136][ T6233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   91.754269][ T6233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   91.763680][ T6232] tipc: Resetting bearer <eth:syzkaller0>
[   91.788717][ T6232] tipc: Disabling bearer <eth:syzkaller0>
[   91.797751][ T6235] FAULT_INJECTION: forcing a failure.
[   91.797751][ T6235] name failslab, interval 1, probability 0, space 0, times 0
[   91.810463][ T6235] CPU: 0 UID: 0 PID: 6235 Comm: syz.5.860 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   91.810488][ T6235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[   91.810503][ T6235] Call Trace:
[   91.810509][ T6235]  <TASK>
[   91.810517][ T6235]  __dump_stack+0x1d/0x30
[   91.810541][ T6235]  dump_stack_lvl+0x95/0xd0
[   91.810617][ T6235]  dump_stack+0x15/0x1b
[   91.810684][ T6235]  should_fail_ex+0x263/0x280
[   91.810829][ T6235]  should_failslab+0x8c/0xb0
[   91.810855][ T6235]  kmem_cache_alloc_noprof+0x68/0x490
[   91.810879][ T6235]  ? security_inode_alloc+0x37/0x100
[   91.810909][ T6235]  security_inode_alloc+0x37/0x100
[   91.811030][ T6235]  inode_init_always_gfp+0x4b7/0x500
[   91.811050][ T6235]  ? __pfx_hugetlbfs_alloc_inode+0x10/0x10
[   91.811077][ T6235]  alloc_inode+0x58/0x170
[   91.811100][ T6235]  new_inode+0x1d/0xe0
[   91.811131][ T6235]  hugetlbfs_get_inode+0x7b/0x370
[   91.811172][ T6235]  ? mutex_unlock+0x4e/0x90
[   91.811201][ T6235]  hugetlb_file_setup+0x192/0x3d0
[   91.811231][ T6235]  ksys_mmap_pgoff+0x156/0x310
[   91.811258][ T6235]  x64_sys_call+0x16bb/0x3000
[   91.811342][ T6235]  do_syscall_64+0xc0/0x2a0
[   91.811417][ T6235]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   91.811441][ T6235] RIP: 0033:0x7ff9e26daeb9
[   91.811454][ T6235] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   91.811470][ T6235] RSP: 002b:00007ff9e1137028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[   91.811497][ T6235] RAX: ffffffffffffffda RBX: 00007ff9e2955fa0 RCX: 00007ff9e26daeb9
[   91.811511][ T6235] RDX: 0000000000000002 RSI: 0000000000ff5000 RDI: 0000200000000000
[   91.811536][ T6235] RBP: 00007ff9e1137090 R08: ffffffffffffffff R09: 0000000000000000
[   91.811551][ T6235] R10: 000000000004c831 R11: 0000000000000246 R12: 0000000000000001
[   91.811564][ T6235] R13: 00007ff9e2956038 R14: 00007ff9e2955fa0 R15: 00007ffcd948a468
[   91.811622][ T6235]  </TASK>
[   92.042924][ T6237] syzkaller0: entered promiscuous mode
[   92.048437][ T6237] syzkaller0: entered allmulticast mode
[   92.057768][ T6237] tipc: Enabling of bearer <eth:syzkaller> rejected, failed to enable media
[   92.112538][ T6239] netlink: 16 bytes leftover after parsing attributes in process `syz.0.862'.
[   92.294907][ T6258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.868'.
[   92.303937][ T6258] netlink: 20 bytes leftover after parsing attributes in process `syz.2.868'.
[   92.429298][   T29] kauditd_printk_skb: 429 callbacks suppressed
[   92.429314][   T29] audit: type=1400 audit(2000000035.020:4136): avc:  denied  { name_connect } for  pid=6266 comm="syz.4.873" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[   92.436090][ T6258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.868'.
[   92.464783][ T6258] netlink: 20 bytes leftover after parsing attributes in process `syz.2.868'.
[   92.523131][ T6269] loop4: detected capacity change from 0 to 512
[   92.609120][ T6269] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   92.617617][   T29] audit: type=1400 audit(2000000035.200:4137): avc:  denied  { write } for  pid=6263 comm="syz.0.872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   92.642245][ T6269] EXT4-fs error (device loop4): ext4_readdir:224: inode #12: comm syz.4.873: path /169/file0/file0: directory fails checksum at offset 0
[   92.834045][ T6272] loop2: detected capacity change from 0 to 128
[   92.842615][   T29] audit: type=1400 audit(2000000035.240:4138): avc:  denied  { watch } for  pid=6266 comm="syz.4.873" path="/169/file0" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   92.865035][   T29] audit: type=1400 audit(2000000035.260:4139): avc:  denied  { create } for  pid=6271 comm="syz.2.874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[   92.884682][   T29] audit: type=1400 audit(2000000035.290:4140): avc:  denied  { create } for  pid=6271 comm="syz.2.874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   92.904069][   T29] audit: type=1400 audit(2000000035.300:4141): avc:  denied  { write } for  pid=6271 comm="syz.2.874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   92.923487][   T29] audit: type=1400 audit(2000000035.300:4142): avc:  denied  { connect } for  pid=6271 comm="syz.2.874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   92.942941][   T29] audit: type=1400 audit(2000000035.300:4143): avc:  denied  { bind } for  pid=6271 comm="syz.2.874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   92.962194][   T29] audit: type=1400 audit(2000000035.350:4144): avc:  denied  { write } for  pid=6271 comm="syz.2.874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   92.981564][   T29] audit: type=1400 audit(2000000035.360:4145): avc:  denied  { create } for  pid=6263 comm="syz.0.872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   93.116438][ T6281] loop2: detected capacity change from 0 to 128
[   93.127542][ T6281] FAT-fs (loop2): Directory bread(block 162) failed
[   93.152303][ T6281] FAT-fs (loop2): Directory bread(block 163) failed
[   93.173202][ T6281] FAT-fs (loop2): Directory bread(block 164) failed
[   93.194400][ T6281] FAT-fs (loop2): Directory bread(block 165) failed
[   93.214914][ T6281] FAT-fs (loop2): Directory bread(block 166) failed
[   93.237046][ T6281] FAT-fs (loop2): Directory bread(block 167) failed
[   93.247590][ T6268] loop5: detected capacity change from 0 to 512
[   93.250687][ T6281] FAT-fs (loop2): Directory bread(block 168) failed
[   93.261536][ T6281] FAT-fs (loop2): Directory bread(block 169) failed
[   93.288292][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.292304][ T6268] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   93.316767][ T6281] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   93.363862][ T6281] FAT-fs (loop2): Directory bread(block 162) failed
[   93.376187][ T6281] FAT-fs (loop2): Directory bread(block 163) failed
[   93.402042][ T6281] syz.2.875: attempt to access beyond end of device
[   93.402042][ T6281] loop2: rw=8388611, sector=226, nr_sectors = 6 limit=128
[   93.442325][ T6281] syz.2.875: attempt to access beyond end of device
[   93.442325][ T6281] loop2: rw=8390659, sector=232, nr_sectors = 2 limit=128
[   93.567911][ T6284] syz.2.875: attempt to access beyond end of device
[   93.567911][ T6284] loop2: rw=8388611, sector=234, nr_sectors = 6 limit=128
[   93.588515][ T6284] syz.2.875: attempt to access beyond end of device
[   93.588515][ T6284] loop2: rw=8390659, sector=240, nr_sectors = 2 limit=128
[   93.612278][ T6284] syz.2.875: attempt to access beyond end of device
[   93.612278][ T6284] loop2: rw=8388611, sector=242, nr_sectors = 6 limit=128
[   93.641623][ T6284] syz.2.875: attempt to access beyond end of device
[   93.641623][ T6284] loop2: rw=8390659, sector=248, nr_sectors = 2 limit=128
[   94.021871][ T6295] loop2: detected capacity change from 0 to 128
[   94.389309][ T6300] loop4: detected capacity change from 0 to 4096
[   94.409085][ T6300] ext4: Unknown parameter 'fowner>00000000000000000000'
[   94.559924][ T6306] netlink: 'syz.4.880': attribute type 21 has an invalid length.
[   94.567738][ T6306] netlink: 128 bytes leftover after parsing attributes in process `syz.4.880'.
[   94.677711][ T6306] netlink: 3 bytes leftover after parsing attributes in process `syz.4.880'.
[   94.743410][ T6314] loop5: detected capacity change from 0 to 512
[   94.766943][ T6314] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   94.870403][ T6314] EXT4-fs (loop5): 1 truncate cleaned up
[   94.880708][ T6314] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   94.915957][ T6314] EXT4-fs warning (device loop5): ext4_group_add:1736: No reserved GDT blocks, can't resize
[   95.003847][ T6317] loop5: detected capacity change from 0 to 128
[   95.021171][ T6317] FAT-fs (loop5): Directory bread(block 32) failed
[   95.030183][ T6317] FAT-fs (loop5): Directory bread(block 33) failed
[   95.044921][ T6317] FAT-fs (loop5): Directory bread(block 34) failed
[   95.068721][ T6317] FAT-fs (loop5): Directory bread(block 35) failed
[   95.083016][ T6317] FAT-fs (loop5): Directory bread(block 36) failed
[   95.096121][ T6317] FAT-fs (loop5): Directory bread(block 37) failed
[   95.107927][ T6317] FAT-fs (loop5): Directory bread(block 38) failed
[   95.114676][ T6317] FAT-fs (loop5): Directory bread(block 39) failed
[   95.121297][ T6317] FAT-fs (loop5): Directory bread(block 40) failed
[   95.145419][ T6317] FAT-fs (loop5): Directory bread(block 41) failed
[   95.199336][ T6295] Set syz1 is full, maxelem 65536 reached
[   95.266624][ T6321] loop4: detected capacity change from 0 to 1024
[   95.311862][ T6321] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[   95.326105][ T6321] System zones: 0-1, 3-36
[   95.342894][ T6321] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.887: bad orphan inode 134217728
[   95.384726][ T6324] xt_hashlimit: size too large, truncated to 1048576
[   95.555433][ T6330] netlink: 24 bytes leftover after parsing attributes in process `syz.4.887'.
[   96.154470][ T6362] netlink: 'syz.4.898': attribute type 21 has an invalid length.
[   96.227624][ T6364] netlink: 60 bytes leftover after parsing attributes in process `syz.0.899'.
[   96.411884][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   96.502775][ T6377] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   96.547821][ T6377] batman_adv: batadv0: Removing interface: batadv_slave_0
[   96.857109][ T6385] netlink: 8 bytes leftover after parsing attributes in process `syz.5.907'.
[   97.293225][ T6399] can0 (unregistered): slcan off ttyS3.
[   97.316214][ T1740] Bluetooth: hci0: Frame reassembly failed (-84)
[   97.432902][   T29] kauditd_printk_skb: 197 callbacks suppressed
[   97.432919][   T29] audit: type=1400 audit(2000000040.030:4343): avc:  denied  { add_name } for  pid=6401 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   97.461777][   T29] audit: type=1400 audit(2000000040.030:4344): avc:  denied  { create } for  pid=6401 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   97.519668][ T6319] loop2: detected capacity change from 0 to 512
[   97.585767][   T29] audit: type=1400 audit(2000000040.030:4345): avc:  denied  { write } for  pid=6401 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.can0.link" dev="tmpfs" ino=5521 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   97.612509][   T29] audit: type=1400 audit(2000000040.030:4346): avc:  denied  { append } for  pid=6401 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" dev="tmpfs" ino=5521 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   97.636878][   T29] audit: type=1326 audit(2000000040.100:4347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6318 comm="syz.2.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7aaa78b78e code=0x7ffc0000
[   97.660659][   T29] audit: type=1326 audit(2000000040.110:4348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6318 comm="syz.2.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f7aaa7cace7 code=0x7ffc0000
[   97.684516][   T29] audit: type=1326 audit(2000000040.110:4349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6318 comm="syz.2.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7aaa78b78e code=0x7ffc0000
[   97.708494][   T29] audit: type=1326 audit(2000000040.110:4350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6318 comm="syz.2.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7aaa7cab4b code=0x7ffc0000
[   97.732610][   T29] audit: type=1400 audit(2000000040.150:4351): avc:  denied  { remove_name } for  pid=6417 comm="rm" name="resolv.conf.can0.link" dev="tmpfs" ino=5521 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   97.756081][   T29] audit: type=1400 audit(2000000040.150:4352): avc:  denied  { unlink } for  pid=6417 comm="rm" name="resolv.conf.can0.link" dev="tmpfs" ino=5521 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   97.849929][ T6424] loop5: detected capacity change from 0 to 1024
[   97.862402][ T6424] EXT4-fs: Ignoring removed oldalloc option
[   97.868364][ T6424] EXT4-fs: Ignoring removed bh option
[   97.892414][ T6319] ext4 filesystem being mounted at /165/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   98.080756][ T6446] loop5: detected capacity change from 0 to 4096
[   98.120075][ T6446] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #15: comm syz.5.920: corrupted inode contents
[   98.185062][ T6446] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #15: comm syz.5.920: mark_inode_dirty error
[   98.268121][ T6446] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #15: comm syz.5.920: corrupted inode contents
[   98.307037][ T6446] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #15: comm syz.5.920: mark_inode_dirty error
[   98.368555][ T6446] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #15: comm syz.5.920: corrupted inode contents
[   98.411446][ T6446] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #15: comm syz.5.920: mark_inode_dirty error
[   98.447772][ T6446] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #15: comm syz.5.920: corrupted inode contents
[   98.492518][ T6446] EXT4-fs error (device loop5): ext4_truncate:4635: inode #15: comm syz.5.920: mark_inode_dirty error
[   98.521693][ T6446] EXT4-fs error (device loop5) in ext4_setattr:6035: Corrupt filesystem
[   98.540634][ T6453] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #15: comm syz.5.920: corrupted inode contents
[   98.701773][ T6479] netlink: 104 bytes leftover after parsing attributes in process `syz.5.922'.
[   98.778807][ T6481] loop5: detected capacity change from 0 to 1024
[   98.822314][ T6481] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[   98.851553][ T6481] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   98.885379][ T6481] jbd2_journal_init_inode: Cannot locate journal superblock
[   98.892745][ T6481] EXT4-fs (loop5): Could not load journal inode
[   99.303300][ T6491] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6491 comm=syz.2.927
[   99.371563][ T3690] Bluetooth: hci0: command 0x1003 tx timeout
[   99.381839][ T3646] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   99.388216][ T6406] Bluetooth: hci0: Opcode 0x0401 failed: -22
[   99.428308][ T6492] loop2: detected capacity change from 0 to 512
[   99.475586][ T6492] EXT4-fs (loop2): revision level too high, forcing read-only mode
[   99.485631][ T6492] EXT4-fs (loop2): orphan cleanup on readonly fs
[   99.503100][ T6492] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #16: comm syz.2.927: corrupted inode contents
[   99.531745][ T6492] EXT4-fs (loop2): Remounting filesystem read-only
[   99.542297][ T6492] EXT4-fs (loop2): 1 truncate cleaned up
[   99.548262][   T31] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   99.558838][   T31] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   99.581526][   T31] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started
[   99.794896][ T6502] loop5: detected capacity change from 0 to 4096
[   99.824197][ T6502] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities
[   99.989479][ T6517] loop4: detected capacity change from 0 to 4096
[   99.999667][ T6517] ext4: Unknown parameter 'fowner>00000000000000000000'
[  100.109547][ T6527] random: crng reseeded on system resumption
[  100.149984][ T6528] netlink: 'syz.4.935': attribute type 21 has an invalid length.
[  100.158492][ T6528] netlink: 128 bytes leftover after parsing attributes in process `syz.4.935'.
[  100.167889][ T6528] netlink: 3 bytes leftover after parsing attributes in process `syz.4.935'.
[  100.348788][ T6535] FAULT_INJECTION: forcing a failure.
[  100.348788][ T6535] name failslab, interval 1, probability 0, space 0, times 0
[  100.361568][ T6535] CPU: 1 UID: 0 PID: 6535 Comm: syz.2.941 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  100.361654][ T6535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  100.361669][ T6535] Call Trace:
[  100.361677][ T6535]  <TASK>
[  100.361686][ T6535]  __dump_stack+0x1d/0x30
[  100.361790][ T6535]  dump_stack_lvl+0x95/0xd0
[  100.361810][ T6535]  dump_stack+0x15/0x1b
[  100.361833][ T6535]  should_fail_ex+0x263/0x280
[  100.361870][ T6535]  should_failslab+0x8c/0xb0
[  100.361898][ T6535]  __kmalloc_node_track_caller_noprof+0xb8/0x590
[  100.361965][ T6535]  ? sidtab_sid2str_get+0xa0/0x130
[  100.361998][ T6535]  kmemdup_noprof+0x2b/0x70
[  100.362104][ T6535]  sidtab_sid2str_get+0xa0/0x130
[  100.362136][ T6535]  security_sid_to_context_core+0x1eb/0x2e0
[  100.362180][ T6535]  security_sid_to_context+0x27/0x40
[  100.362268][ T6535]  selinux_lsmprop_to_secctx+0x67/0xf0
[  100.362315][ T6535]  security_lsmprop_to_secctx+0x1a3/0x1c0
[  100.362355][ T6535]  audit_log_subj_ctx+0xa4/0x3e0
[  100.362452][ T6535]  ? skb_put+0xa9/0xf0
[  100.362489][ T6535]  audit_log_task_context+0x48/0x70
[  100.362527][ T6535]  audit_log_task+0xf3/0x250
[  100.362638][ T6535]  ? kstrtouint+0x76/0xc0
[  100.362672][ T6535]  audit_seccomp+0x60/0x100
[  100.362707][ T6535]  ? __seccomp_filter+0x8db/0x1350
[  100.362732][ T6535]  __seccomp_filter+0x8ec/0x1350
[  100.362762][ T6535]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  100.362857][ T6535]  ? vfs_write+0x86e/0x9f0
[  100.362880][ T6535]  ? __rcu_read_unlock+0x4e/0x70
[  100.362915][ T6535]  ? __fget_files+0x184/0x1c0
[  100.363026][ T6535]  __secure_computing+0x81/0x150
[  100.363048][ T6535]  syscall_trace_enter+0xce/0x1e0
[  100.363091][ T6535]  do_syscall_64+0x9a/0x2a0
[  100.363123][ T6535]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  100.363149][ T6535] RIP: 0033:0x7f7aaa7caeb9
[  100.363210][ T6535] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  100.363232][ T6535] RSP: 002b:00007f7aa921f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  100.363259][ T6535] RAX: ffffffffffffffda RBX: 00007f7aaaa45fa0 RCX: 00007f7aaa7caeb9
[  100.363272][ T6535] RDX: 0000000000000000 RSI: 0000000080045519 RDI: 0000000000000003
[  100.363284][ T6535] RBP: 00007f7aa921f090 R08: 0000000000000000 R09: 0000000000000000
[  100.363354][ T6535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  100.363365][ T6535] R13: 00007f7aaaa46038 R14: 00007f7aaaa45fa0 R15: 00007fff32fe93f8
[  100.363428][ T6535]  </TASK>
[  100.716785][ T6539] loop2: detected capacity change from 0 to 1024
[  100.754393][ T6539] EXT4-fs mount: 11 callbacks suppressed
[  100.754412][ T6539] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  100.784520][ T6539] ext4 filesystem being mounted at /175/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  100.814031][ T6539] EXT4-fs error (device loop2): ext4_map_blocks:825: inode #15: comm syz.2.943: lblock 0 mapped to illegal pblock 0 (length 6)
[  100.849621][ T6539] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117
[  100.862112][ T6539] EXT4-fs (loop2): This should not happen!! Data will be lost
[  100.862112][ T6539] 
[  100.952579][ T3332] EXT4-fs error (device loop2): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:6: lblock 8 mapped to illegal pblock 8 (length 8)
[  100.987238][ T3332] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  100.999608][ T3332] EXT4-fs (loop2): This should not happen!! Data will be lost
[  100.999608][ T3332] 
[  101.082579][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  101.131442][ T6565] syzkaller0: entered promiscuous mode
[  101.137648][ T6565] syzkaller0: entered allmulticast mode
[  101.150458][ T6568] loop2: detected capacity change from 0 to 128
[  101.171354][ T6565] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  101.196220][ T6565] tipc: Resetting bearer <eth:syzkaller0>
[  101.306176][ T6563] tipc: Resetting bearer <eth:syzkaller0>
[  101.320857][ T6563] tipc: Disabling bearer <eth:syzkaller0>
[  101.338026][   T57] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  101.346975][   T57] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  101.368273][ T6574] netlink: 'syz.2.952': attribute type 11 has an invalid length.
[  101.382180][ T6574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.952'.
[  101.393679][   T57] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  101.402640][   T57] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  101.424839][   T57] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  101.433846][   T57] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  101.523299][   T57] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  101.532680][   T57] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  101.582323][ T6584] tmpfs: Bad value for 'mpol'
[  101.587361][ T6551] chnl_net:caif_netlink_parms(): no params data found
[  101.604760][ T6584] netlink: 4 bytes leftover after parsing attributes in process `syz.4.955'.
[  101.625840][ T6587] netlink: 'syz.2.956': attribute type 20 has an invalid length.
[  101.640635][ T6584] tipc: Resetting bearer <eth:macvlan1>
[  101.649189][ T6584] tipc: Disabling bearer <eth:macvlan1>
[  101.670530][ T6551] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.677677][ T6551] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.684872][ T6551] bridge_slave_0: entered allmulticast mode
[  101.691374][ T6551] bridge_slave_0: entered promiscuous mode
[  101.699082][ T6551] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.706477][ T6551] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.713959][ T6551] bridge_slave_1: entered allmulticast mode
[  101.720551][ T6551] bridge_slave_1: entered promiscuous mode
[  101.744925][ T6551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  101.763117][ T6551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  101.813138][ T6551] team0: Port device team_slave_0 added
[  101.820077][ T6551] team0: Port device team_slave_1 added
[  101.852203][ T6551] batman_adv: batadv0: Adding interface: batadv_slave_0
[  101.859258][ T6551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  101.885308][ T6551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  101.942299][ T6551] batman_adv: batadv0: Adding interface: batadv_slave_1
[  101.949273][ T6551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  101.975315][ T6551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  102.032513][ T6602] xt_hashlimit: size too large, truncated to 1048576
[  102.138329][ T6551] hsr_slave_0: entered promiscuous mode
[  102.148220][ T6551] hsr_slave_1: entered promiscuous mode
[  102.161855][ T6551] debugfs: 'hsr0' already exists in 'hsr'
[  102.167598][ T6551] Cannot create hsr debugfs directory
[  102.213551][ T6608] xt_bpf: check failed: parse error
[  102.313568][ T6614] netlink: 152 bytes leftover after parsing attributes in process `syz.2.963'.
[  102.452623][   T29] kauditd_printk_skb: 332 callbacks suppressed
[  102.452637][   T29] audit: type=1400 audit(2000000045.050:4678): avc:  denied  { prog_run } for  pid=6619 comm="syz.5.965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  102.514879][   T29] audit: type=1400 audit(2000000045.080:4679): avc:  denied  { create } for  pid=6615 comm="syz.2.964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  102.517765][ T6551] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  102.534256][   T29] audit: type=1400 audit(2000000045.080:4680): avc:  denied  { bind } for  pid=6615 comm="syz.2.964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  102.534280][   T29] audit: type=1400 audit(2000000045.080:4681): avc:  denied  { write } for  pid=6615 comm="syz.2.964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  102.579987][   T29] audit: type=1400 audit(2000000045.080:4682): avc:  denied  { create } for  pid=6615 comm="syz.2.964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  102.599931][   T29] audit: type=1400 audit(2000000045.080:4683): avc:  denied  { listen } for  pid=6615 comm="syz.2.964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  102.619239][   T29] audit: type=1400 audit(2000000045.080:4684): avc:  denied  { setopt } for  pid=6615 comm="syz.2.964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  102.639201][   T29] audit: type=1400 audit(2000000045.080:4685): avc:  denied  { write } for  pid=6615 comm="syz.2.964" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  102.659333][   T29] audit: type=1400 audit(2000000045.080:4686): avc:  denied  { accept } for  pid=6615 comm="syz.2.964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  102.690342][ T6551] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  102.731885][   T29] audit: type=1400 audit(2000000045.180:4687): avc:  denied  { tracepoint } for  pid=6625 comm="syz.4.968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  102.767728][ T6551] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  102.808762][ T6551] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  102.941671][ T6551] 8021q: adding VLAN 0 to HW filter on device bond0
[  102.968421][ T6551] 8021q: adding VLAN 0 to HW filter on device team0
[  102.992220][ T1740] bridge0: port 1(bridge_slave_0) entered blocking state
[  102.999389][ T1740] bridge0: port 1(bridge_slave_0) entered forwarding state
[  103.037553][ T1740] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.044729][ T1740] bridge0: port 2(bridge_slave_1) entered forwarding state
[  103.072333][ T6653] netlink: 'syz.4.975': attribute type 1 has an invalid length.
[  103.096993][ T6653] bond3: entered promiscuous mode
[  103.111341][ T6653] 8021q: adding VLAN 0 to HW filter on device bond3
[  103.144723][ T6066] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.147339][ T6655] bond3: (slave bridge2): making interface the new active one
[  103.161183][ T6655] bridge2: entered promiscuous mode
[  103.168367][ T6655] bond3: (slave bridge2): Enslaving as an active interface with an up link
[  103.283645][ T6551] 8021q: adding VLAN 0 to HW filter on device batadv0
[  103.397802][ T3332] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.443196][ T6694] netlink: 52 bytes leftover after parsing attributes in process `syz.2.979'.
[  103.477829][ T3332] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.538590][ T3332] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.633023][ T3332] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.679341][ T6551] veth0_vlan: entered promiscuous mode
[  103.692003][ T6551] veth1_vlan: entered promiscuous mode
[  103.715959][ T6551] veth0_macvtap: entered promiscuous mode
[  103.734080][ T6551] veth1_macvtap: entered promiscuous mode
[  103.794585][ T6551] batman_adv: batadv0: Interface activated: batadv_slave_0
[  103.817994][ T3332] bridge_slave_1: left allmulticast mode
[  103.823836][ T3332] bridge_slave_1: left promiscuous mode
[  103.829525][ T3332] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.852210][ T3332] bridge_slave_0: left allmulticast mode
[  103.857893][ T3332] bridge_slave_0: left promiscuous mode
[  103.863723][ T3332] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.883591][ T6749] loop5: detected capacity change from 0 to 128
[  103.935459][ T6754] loop2: detected capacity change from 0 to 1024
[  103.973338][ T6754] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  103.982637][ T6754] System zones: 0-1, 3-36
[  103.992091][ T6754] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.990: bad orphan inode 134217728
[  104.003435][ T6754] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  104.028691][ T6762] loop4: detected capacity change from 0 to 2048
[  104.043356][ T6762] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=8842c128, mo2=0003]
[  104.052603][ T6762] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  104.066314][ T6762] netlink: 36 bytes leftover after parsing attributes in process `syz.4.992'.
[  104.075957][ T6762] netlink: 12 bytes leftover after parsing attributes in process `syz.4.992'.
[  104.084957][ T6762] netlink: 8 bytes leftover after parsing attributes in process `syz.4.992'.
[  104.093900][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  104.104609][ T3332] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  104.123842][ T3332] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  104.154343][ T6769] netlink: 24 bytes leftover after parsing attributes in process `syz.2.990'.
[  104.192827][ T3332] bond0 (unregistering): Released all slaves
[  104.200546][ T3332] bond1 (unregistering): Released all slaves
[  104.248637][ T3332] bond2 (unregistering): left allmulticast mode
[  104.255136][ T3332] bond2 (unregistering): left promiscuous mode
[  104.263533][ T3332] team0: Port device macvlan2 removed
[  104.272249][ T3332] bond2 (unregistering): Released all slaves
[  104.292887][ T6551] batman_adv: batadv0: Interface activated: batadv_slave_1
[  104.326629][   T57] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  104.366885][   T57] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  104.378412][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.391016][ T3332] hsr_slave_0: left promiscuous mode
[  104.396997][ T3332] hsr_slave_1: left promiscuous mode
[  104.403725][ T3332] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  104.411145][ T3332] batman_adv: batadv0: Removing interface: batadv_slave_0
[  104.452379][ T3332] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  104.459850][ T3332] batman_adv: batadv0: Removing interface: batadv_slave_1
[  104.477481][ T3332] veth1_macvtap: left promiscuous mode
[  104.483818][ T3332] veth0_macvtap: left promiscuous mode
[  104.489433][ T3332] veth1_vlan: left promiscuous mode
[  104.494836][ T3332] veth0_vlan: left promiscuous mode
[  104.517586][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.572977][ T6798] loop2: detected capacity change from 0 to 1024
[  104.605002][ T6798] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  104.665177][ T3332] team0 (unregistering): Port device team_slave_1 removed
[  104.675800][ T3332] team0 (unregistering): Port device team_slave_0 removed
[  104.732192][ T6776] syzkaller0: entered promiscuous mode
[  104.737753][ T6776] syzkaller0: entered allmulticast mode
[  104.748007][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.757886][   T57] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  104.816522][   T57] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  104.878868][ T6814] syzkaller0: entered promiscuous mode
[  104.885115][ T6814] syzkaller0: entered allmulticast mode
[  104.947855][ T6820] loop2: detected capacity change from 0 to 1024
[  104.959205][ T6820] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  104.969036][ T6820] System zones: 0-1, 3-36
[  104.989758][ T6820] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.1001: bad orphan inode 134217728
[  105.054089][ T6820] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  105.221244][ T6841] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1001'.
[  105.275772][ T6844] loop5: detected capacity change from 0 to 512
[  105.304108][ T6844] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  105.317480][ T6844] EXT4-fs (loop5): orphan cleanup on readonly fs
[  105.328616][ T6844] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #16: comm syz.5.1004: corrupted inode contents
[  105.342951][ T6844] EXT4-fs (loop5): Remounting filesystem read-only
[  105.356042][ T6844] EXT4-fs (loop5): 1 truncate cleaned up
[  105.366069][ T1740] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  105.376811][ T1740] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  105.388054][ T1740] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started
[  105.399505][ T6844] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  105.436902][ T4816] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.505745][ T6857] loop5: detected capacity change from 0 to 4096
[  105.519754][ T6857] ext4: Unknown parameter 'fowner>00000000000000000000'
[  105.624789][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.632346][ T6870] FAULT_INJECTION: forcing a failure.
[  105.632346][ T6870] name failslab, interval 1, probability 0, space 0, times 0
[  105.647018][ T6870] CPU: 1 UID: 0 PID: 6870 Comm: syz.4.1008 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  105.647077][ T6870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  105.647092][ T6870] Call Trace:
[  105.647098][ T6870]  <TASK>
[  105.647105][ T6870]  __dump_stack+0x1d/0x30
[  105.647142][ T6870]  dump_stack_lvl+0x95/0xd0
[  105.647202][ T6870]  dump_stack+0x15/0x1b
[  105.647220][ T6870]  should_fail_ex+0x263/0x280
[  105.647274][ T6870]  should_failslab+0x8c/0xb0
[  105.647296][ T6870]  kmem_cache_alloc_noprof+0x68/0x490
[  105.647378][ T6870]  ? prepare_creds+0x38/0x550
[  105.647416][ T6870]  prepare_creds+0x38/0x550
[  105.647451][ T6870]  lookup_user_key+0x136/0xd70
[  105.647492][ T6870]  ? __pfx_lookup_user_key_possessed+0x10/0x10
[  105.647528][ T6870]  __se_sys_add_key+0x272/0x360
[  105.647562][ T6870]  __x64_sys_add_key+0x67/0x80
[  105.647596][ T6870]  x64_sys_call+0x2ea3/0x3000
[  105.647623][ T6870]  do_syscall_64+0xc0/0x2a0
[  105.647660][ T6870]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  105.647770][ T6870] RIP: 0033:0x7fa77431aeb9
[  105.647789][ T6870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  105.647813][ T6870] RSP: 002b:00007fa772d77028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[  105.647838][ T6870] RAX: ffffffffffffffda RBX: 00007fa774595fa0 RCX: 00007fa77431aeb9
[  105.647857][ T6870] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 00002000000000c0
[  105.647874][ T6870] RBP: 00007fa772d77090 R08: ffffffffffffffff R09: 0000000000000000
[  105.647972][ T6870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  105.648005][ T6870] R13: 00007fa774596038 R14: 00007fa774595fa0 R15: 00007ffe23ff3e18
[  105.648029][ T6870]  </TASK>
[  105.658773][ T6875] netlink: 'syz.5.1005': attribute type 21 has an invalid length.
[  105.834515][ T6875] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1005'.
[  105.853869][ T6875] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1005'.
[  105.909882][ T6885] loop2: detected capacity change from 0 to 512
[  105.966902][ T6885] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  105.976113][ T6885] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities
[  106.103438][ T6910] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1014'.
[  106.113669][ T6912] loop6: detected capacity change from 0 to 128
[  106.139563][ T6910] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1014'.
[  106.237869][ T6913] loop4: detected capacity change from 0 to 128
[  106.370734][ T6933] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1018'.
[  106.393895][ T6937] syzkaller0: entered promiscuous mode
[  106.399570][ T6937] syzkaller0: entered allmulticast mode
[  106.654795][ T6981] syzkaller0: entered promiscuous mode
[  106.655564][ T6982] loop2: detected capacity change from 0 to 256
[  106.660473][ T6981] syzkaller0: entered allmulticast mode
[  106.779847][ T6991] loop4: detected capacity change from 0 to 1024
[  106.796270][ T6991] EXT4-fs: Ignoring removed mblk_io_submit option
[  106.811398][ T6982] syz.2.1029: attempt to access beyond end of device
[  106.811398][ T6982] loop2: rw=8388608, sector=256, nr_sectors = 4 limit=256
[  106.855958][ T6991] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities
[  107.017929][ T7000] loop5: detected capacity change from 0 to 4096
[  107.032936][ T7000] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  107.113800][ T1740] Bluetooth: hci0: Frame reassembly failed (-84)
[  107.168062][ T4816] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.266119][ T7043] FAULT_INJECTION: forcing a failure.
[  107.266119][ T7043] name failslab, interval 1, probability 0, space 0, times 0
[  107.278955][ T7043] CPU: 0 UID: 0 PID: 7043 Comm: syz.5.1050 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  107.278986][ T7043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  107.279000][ T7043] Call Trace:
[  107.279007][ T7043]  <TASK>
[  107.279016][ T7043]  __dump_stack+0x1d/0x30
[  107.279092][ T7043]  dump_stack_lvl+0x95/0xd0
[  107.279117][ T7043]  dump_stack+0x15/0x1b
[  107.279140][ T7043]  should_fail_ex+0x263/0x280
[  107.279176][ T7043]  should_failslab+0x8c/0xb0
[  107.279252][ T7043]  kmem_cache_alloc_noprof+0x68/0x490
[  107.279278][ T7043]  ? audit_log_start+0x34c/0x730
[  107.279389][ T7043]  audit_log_start+0x34c/0x730
[  107.279422][ T7043]  ? kstrtouint+0x76/0xc0
[  107.279451][ T7043]  audit_seccomp+0x47/0x100
[  107.279543][ T7043]  ? __seccomp_filter+0x8db/0x1350
[  107.279567][ T7043]  __seccomp_filter+0x8ec/0x1350
[  107.279630][ T7043]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  107.279657][ T7043]  ? vfs_write+0x86e/0x9f0
[  107.279676][ T7043]  ? __rcu_read_unlock+0x4e/0x70
[  107.279765][ T7043]  ? __fget_files+0x184/0x1c0
[  107.279789][ T7043]  __secure_computing+0x81/0x150
[  107.279806][ T7043]  syscall_trace_enter+0xce/0x1e0
[  107.279908][ T7043]  do_syscall_64+0x9a/0x2a0
[  107.279940][ T7043]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  107.280003][ T7043] RIP: 0033:0x7ff9e26daeb9
[  107.280018][ T7043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  107.280036][ T7043] RSP: 002b:00007ff9e1137028 EFLAGS: 00000246 ORIG_RAX: 0000000000000084
[  107.280119][ T7043] RAX: ffffffffffffffda RBX: 00007ff9e2955fa0 RCX: 00007ff9e26daeb9
[  107.280132][ T7043] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000000c0
[  107.280144][ T7043] RBP: 00007ff9e1137090 R08: 0000000000000000 R09: 0000000000000000
[  107.280156][ T7043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  107.280168][ T7043] R13: 00007ff9e2956038 R14: 00007ff9e2955fa0 R15: 00007ffcd948a468
[  107.280187][ T7043]  </TASK>
[  107.493319][   T29] kauditd_printk_skb: 433 callbacks suppressed
[  107.493335][   T29] audit: type=1326 audit(2000000050.090:5113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7044 comm="syz.0.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff23bc9aeb9 code=0x7ffc0000
[  107.524051][   T29] audit: type=1326 audit(2000000050.090:5114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7044 comm="syz.0.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7ff23bc9aeb9 code=0x7ffc0000
[  107.547483][   T29] audit: type=1326 audit(2000000050.090:5115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7044 comm="syz.0.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff23bc9aeb9 code=0x7ffc0000
[  107.571598][   T29] audit: type=1326 audit(2000000050.090:5116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7044 comm="syz.0.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7ff23bc9aeb9 code=0x7ffc0000
[  107.595055][   T29] audit: type=1326 audit(2000000050.090:5117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7044 comm="syz.0.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff23bc9aeb9 code=0x7ffc0000
[  107.619009][   T29] audit: type=1326 audit(2000000050.120:5118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7044 comm="syz.0.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff23bc9aeb9 code=0x7ffc0000
[  107.676352][ T7053] EXT4-fs: Ignoring removed oldalloc option
[  107.682376][ T7053] EXT4-fs: Ignoring removed bh option
[  107.704674][ T7053] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  107.732752][ T4816] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.743441][ T7058] can0: slcan on ttyS3.
[  107.783445][ T7058] can0 (unregistered): slcan off ttyS3.
[  107.794883][ T7060] ext4: Unknown parameter 'uid<18446744073709551615'
[  107.799638][   T29] audit: type=1400 audit(2000000050.390:5119): avc:  denied  { create } for  pid=7057 comm="syz.2.1055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  107.826911][ T7058] can0: slcan on ttyS3.
[  107.886755][ T7066] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  107.910762][ T7066] EXT4-fs (loop4): 1 truncate cleaned up
[  107.917607][ T7066] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  107.931446][ T7066] EXT4-fs error (device loop4): ext4_generic_delete_entry:2666: inode #2: block 13: comm syz.4.1060: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  107.952604][   T29] audit: type=1400 audit(2000000050.530:5120): avc:  denied  { create } for  pid=7065 comm="syz.4.1060" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  107.955708][ T7066] EXT4-fs (loop4): Remounting filesystem read-only
[  107.974392][   T29] audit: type=1400 audit(2000000050.530:5121): avc:  denied  { rename } for  pid=7065 comm="syz.4.1060" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  107.979229][ T7066] EXT4-fs warning (device loop4): ext4_rename_delete:3729: inode #2: comm syz.4.1060: Deleting old file: nlink 5, error=-117
[  108.001398][   T29] audit: type=1400 audit(2000000050.530:5122): avc:  denied  { rmdir } for  pid=7065 comm="syz.4.1060" name="bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  108.057090][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.073451][ T7078] netlink: 'syz.5.1061': attribute type 4 has an invalid length.
[  108.156715][ T7090] ext4: Unknown parameter 'fowner>00000000000000000000'
[  108.352410][ T7096] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  108.389479][ T7099] netlink: 'syz.5.1064': attribute type 21 has an invalid length.
[  108.569940][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.722551][ T7115] EXT4-fs: Ignoring removed oldalloc option
[  108.728620][ T7115] EXT4-fs: Ignoring removed bh option
[  108.751088][ T7124] ..0ªî{X¹¦: renamed from gretap0 (while UP)
[  108.765237][ T7115] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  108.787214][ T7124] ..0ªî{X¹¦: entered allmulticast mode
[  108.808019][ T7124] A link change request failed with some changes committed already. Interface ..0ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  108.836817][ T7131] ..0ªî{X¹¦: renamed from gretap0 (while UP)
[  108.852251][ T7131] ..0ªî{X¹¦: entered allmulticast mode
[  108.858567][ T7131] A link change request failed with some changes committed already. Interface ..0ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  108.878653][ T7136] netlink: 'syz.4.1072': attribute type 13 has an invalid length.
[  108.890777][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.923543][ T7140] syz.2.1073: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0
[  108.938206][ T7140] CPU: 0 UID: 0 PID: 7140 Comm: syz.2.1073 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  108.938242][ T7140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  108.938256][ T7140] Call Trace:
[  108.938265][ T7140]  <TASK>
[  108.938274][ T7140]  __dump_stack+0x1d/0x30
[  108.938298][ T7140]  dump_stack_lvl+0x95/0xd0
[  108.938326][ T7140]  dump_stack+0x15/0x1b
[  108.938344][ T7140]  warn_alloc+0x145/0x1c0
[  108.938374][ T7140]  ? kmem_cache_free+0xdf/0x380
[  108.938405][ T7140]  __vmalloc_node_range_noprof+0xa0/0x12b0
[  108.938478][ T7140]  ? __perf_event_task_sched_in+0xa65/0xad0
[  108.938512][ T7140]  ? perf_trace_run_bpf_submit+0xe5/0x110
[  108.938542][ T7140]  ? xskq_create+0x36/0xe0
[  108.938591][ T7140]  ? perf_trace_kmalloc+0xe4/0x110
[  108.938617][ T7140]  vmalloc_user_noprof+0x7d/0xb0
[  108.938676][ T7140]  ? xskq_create+0x80/0xe0
[  108.938757][ T7140]  xskq_create+0x80/0xe0
[  108.938785][ T7140]  xsk_init_queue+0x91/0xe0
[  108.938815][ T7140]  xsk_setsockopt+0x3f5/0x640
[  108.938851][ T7140]  ? __pfx_xsk_setsockopt+0x10/0x10
[  108.938912][ T7140]  __sys_setsockopt+0x184/0x200
[  108.939020][ T7140]  __x64_sys_setsockopt+0x64/0x80
[  108.939060][ T7140]  x64_sys_call+0x21d5/0x3000
[  108.939210][ T7140]  do_syscall_64+0xc0/0x2a0
[  108.939292][ T7140]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  108.939344][ T7140] RIP: 0033:0x7f7aaa7caeb9
[  108.939362][ T7140] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  108.939380][ T7140] RSP: 002b:00007f7aa921f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  108.939397][ T7140] RAX: ffffffffffffffda RBX: 00007f7aaaa45fa0 RCX: 00007f7aaa7caeb9
[  108.939410][ T7140] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005
[  108.939425][ T7140] RBP: 00007f7aaa838c1f R08: 0000000000000004 R09: 0000000000000000
[  108.939509][ T7140] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  108.939523][ T7140] R13: 00007f7aaaa46038 R14: 00007f7aaaa45fa0 R15: 00007fff32fe93f8
[  108.939565][ T7140]  </TASK>
[  108.939573][ T7140] Mem-Info:
[  109.145830][ T3646] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  109.147701][ T7140] active_anon:12360 inactive_anon:0 isolated_anon:0
[  109.147701][ T7140]  active_file:27321 inactive_file:2568 isolated_file:0
[  109.147701][ T7140]  unevictable:0 dirty:353 writeback:0
[  109.147701][ T7140]  slab_reclaimable:3508 slab_unreclaimable:18367
[  109.147701][ T7140]  mapped:31031 shmem:3856 pagetables:1620
[  109.147701][ T7140]  sec_pagetables:0 bounce:0
[  109.147701][ T7140]  kernel_misc_reclaimable:0
[  109.147701][ T7140]  free:1861095 free_pcp:14928 free_cma:0
[  109.198895][ T7140] Node 0 active_anon:49440kB inactive_anon:0kB active_file:109284kB inactive_file:10272kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:124124kB dirty:1412kB writeback:0kB shmem:15424kB kernel_stack:3936kB pagetables:6596kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  109.223389][ T7146] __nla_validate_parse: 8 callbacks suppressed
[  109.223448][ T7146] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1075'.
[  109.226424][ T7140] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  109.271339][ T7140] lowmem_reserve[]: 0 2879 7858 7858
[  109.276742][ T7140] Node 0 DMA32 free:2944844kB boost:0kB min:4128kB low:7056kB high:9984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948372kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB
[  109.308164][ T7140] lowmem_reserve[]: 0 0 4978 4978
[  109.313331][ T7140] Node 0 Normal free:4484176kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:50020kB inactive_anon:0kB active_file:109284kB inactive_file:10272kB unevictable:0kB writepending:1412kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:55512kB local_pcp:20492kB free_cma:0kB
[  109.346627][ T7140] lowmem_reserve[]: 0 0 0 0
[  109.351182][ T7140] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  109.363977][ T7140] Node 0 DMA32: 3*4kB (M) 4*8kB (M) 4*16kB (M) 3*32kB (M) 4*64kB (M) 3*128kB (M) 4*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944844kB
[  109.380177][ T7140] Node 0 Normal: 1535*4kB (UME) 1562*8kB (UM) 767*16kB (UME) 650*32kB (UM) 492*64kB (UME) 263*128kB (UME) 146*256kB (UME) 77*512kB (UM) 52*1024kB (UME) 49*2048kB (UM) 1010*4096kB (UM) = 4484220kB
[  109.381145][ T7147] EXT4-fs: Ignoring removed bh option
[  109.399802][ T7140] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[  109.399825][ T7140] 33828 total pagecache pages
[  109.399852][ T7140] 6 pages in swap cache
[  109.399859][ T7140] Free swap  = 124544kB
[  109.399867][ T7140] Total swap = 124996kB
[  109.399876][ T7140] 2097051 pages RAM
[  109.399894][ T7140] 0 pages HighMem/MovableOnly
[  109.399901][ T7140] 81558 pages reserved
[  109.450715][ T7147] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  109.476160][ T7147] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  109.525714][ T7152] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1076'.
[  109.538892][ T7152] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1076'.
[  109.567591][ T7159] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  109.567591][ T7159] The task syz.2.1077 (7159) triggered the difference, watch for misbehavior.
[  109.658563][ T7164] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=26 sclass=netlink_tcpdiag_socket pid=7164 comm=syz.4.1079
[  109.682931][ T4816] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.933748][ T7183] syzkaller0: entered promiscuous mode
[  109.939291][ T7183] syzkaller0: entered allmulticast mode
[  110.190663][ T7187] bond1: option resend_igmp: invalid value (1024)
[  110.197892][ T7187] bond1: option resend_igmp: allowed values 0 - 255
[  110.205881][ T7187] bond1 (unregistering): Released all slaves
[  110.425054][ T7190] set_capacity_and_notify: 7 callbacks suppressed
[  110.425074][ T7190] loop2: detected capacity change from 0 to 512
[  110.453034][ T7190] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  110.689250][ T3321] FAT-fs (loop2): error, corrupted directory (invalid entries)
[  110.696898][ T3321] FAT-fs (loop2): Filesystem has been set read-only
[  110.710785][ T7193] loop4: detected capacity change from 0 to 128
[  110.751889][ T3321] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  110.852951][ T5215] can0 (unregistered): slcan off ttyS3.
[  111.050470][ T7222] loop6: detected capacity change from 0 to 512
[  111.095189][ T7222] FAT-fs (loop6): bogus number of FAT sectors
[  111.101337][ T7222] FAT-fs (loop6): Can't find a valid FAT filesystem
[  111.150728][ T7222] 9p: Bad value for 'rfdno'
[  111.508120][ T7265] loop4: detected capacity change from 0 to 128
[  111.613835][   T52] bond0 (unregistering): Released all slaves
[  111.679562][   T52] tipc: Left network mode
[  111.704132][   T52] hsr_slave_0: left promiscuous mode
[  111.724508][   T52] hsr_slave_1: left promiscuous mode
[  111.846420][ T7284] loop4: detected capacity change from 0 to 1024
[  111.876491][ T7284] EXT4-fs: Ignoring removed oldalloc option
[  111.883169][ T7284] EXT4-fs: Ignoring removed bh option
[  111.952131][ T7284] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  111.978817][ T7227] chnl_net:caif_netlink_parms(): no params data found
[  112.000885][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.132388][ T7227] bridge0: port 1(bridge_slave_0) entered blocking state
[  112.139499][ T7227] bridge0: port 1(bridge_slave_0) entered disabled state
[  112.146972][ T7227] bridge_slave_0: entered allmulticast mode
[  112.154204][ T7227] bridge_slave_0: entered promiscuous mode
[  112.161243][ T7227] bridge0: port 2(bridge_slave_1) entered blocking state
[  112.168342][ T7227] bridge0: port 2(bridge_slave_1) entered disabled state
[  112.175907][ T7227] bridge_slave_1: entered allmulticast mode
[  112.183137][ T7227] bridge_slave_1: entered promiscuous mode
[  112.223917][ T7227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  112.238676][ T7227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  112.265541][ T7227] team0: Port device team_slave_0 added
[  112.272519][ T7227] team0: Port device team_slave_1 added
[  112.291313][ T7227] batman_adv: batadv0: Adding interface: batadv_slave_0
[  112.298365][ T7227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  112.325059][ T7227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  112.336464][ T7227] batman_adv: batadv0: Adding interface: batadv_slave_1
[  112.343498][ T7227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  112.369475][ T7227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  112.425654][ T7227] hsr_slave_0: entered promiscuous mode
[  112.438961][ T7227] hsr_slave_1: entered promiscuous mode
[  112.446750][ T7227] debugfs: 'hsr0' already exists in 'hsr'
[  112.452526][ T7227] Cannot create hsr debugfs directory
[  112.618580][ T7227] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  112.650634][ T7227] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  112.669915][ T7227] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  112.701880][ T7227] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  112.759810][ T7331] netlink: 'syz.4.1111': attribute type 1 has an invalid length.
[  112.764844][   T29] kauditd_printk_skb: 378 callbacks suppressed
[  112.764881][   T29] audit: type=1326 audit(2000000055.360:5501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7174 comm="syz.0.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ff23bc9ace7 code=0x7ffc0000
[  112.823198][ T7227] 8021q: adding VLAN 0 to HW filter on device bond0
[  112.841687][   T29] audit: type=1400 audit(2000000055.430:5502): avc:  denied  { write } for  pid=7342 comm="syz.5.1113" path="socket:[18245]" dev="sockfs" ino=18245 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  112.869029][ T7227] 8021q: adding VLAN 0 to HW filter on device team0
[  112.884823][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  112.891944][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  112.929716][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[  112.936906][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[  112.950142][   T29] audit: type=1400 audit(2000000055.540:5503): avc:  denied  { name_bind } for  pid=7348 comm="syz.0.1115" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  112.965259][ T7227] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  112.973318][   T29] audit: type=1400 audit(2000000055.540:5504): avc:  denied  { node_bind } for  pid=7348 comm="syz.0.1115" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[  112.982386][ T7227] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  113.037654][ T7349] syzkaller0: entered promiscuous mode
[  113.043923][ T7349] syzkaller0: entered allmulticast mode
[  113.070222][ T7349] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  113.092544][   T29] audit: type=1326 audit(2000000055.680:5505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7361 comm="syz.4.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77431aeb9 code=0x7ffc0000
[  113.116146][   T29] audit: type=1326 audit(2000000055.680:5506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7361 comm="syz.4.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7fa77431aeb9 code=0x7ffc0000
[  113.139763][   T29] audit: type=1326 audit(2000000055.680:5507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7361 comm="syz.4.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77431aeb9 code=0x7ffc0000
[  113.163377][   T29] audit: type=1326 audit(2000000055.680:5508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7361 comm="syz.4.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7fa77431aeb9 code=0x7ffc0000
[  113.186817][   T29] audit: type=1326 audit(2000000055.680:5509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7361 comm="syz.4.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77431aeb9 code=0x7ffc0000
[  113.210243][   T29] audit: type=1326 audit(2000000055.680:5510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7361 comm="syz.4.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fa77431aeb9 code=0x7ffc0000
[  113.234477][ T7347] tipc: Resetting bearer <eth:syzkaller0>
[  113.248008][ T7347] tipc: Disabling bearer <eth:syzkaller0>
[  113.281594][ T7227] 8021q: adding VLAN 0 to HW filter on device batadv0
[  113.367005][ T7378] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1118'.
[  113.438358][ T7392] loop4: detected capacity change from 0 to 256
[  113.452297][ T3646] Bluetooth: hci0: command 0x1003 tx timeout
[  113.458439][ T3690] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  113.526310][ T7227] veth0_vlan: entered promiscuous mode
[  113.534432][ T7227] veth1_vlan: entered promiscuous mode
[  113.560510][ T7227] veth0_macvtap: entered promiscuous mode
[  113.574049][ T7227] veth1_macvtap: entered promiscuous mode
[  113.585576][ T7227] batman_adv: batadv0: Interface activated: batadv_slave_0
[  113.597653][ T7227] batman_adv: batadv0: Interface activated: batadv_slave_1
[  113.611203][   T57] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  113.624103][   T57] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  113.642911][   T57] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  113.652610][   T57] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  113.778289][ T7418] netlink: 'syz.7.1125': attribute type 13 has an invalid length.
[  113.857678][ T7418] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.865043][ T7418] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.912785][ T7418] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  113.926123][ T7418] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  113.976210][ T7426] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  113.985348][   T57] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  114.001587][   T57] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  114.020737][   T57] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  114.030660][   T57] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  114.066431][ T7430] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1128'.
[  114.097809][ T7434] FAULT_INJECTION: forcing a failure.
[  114.097809][ T7434] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  114.111819][ T7434] CPU: 1 UID: 0 PID: 7434 Comm: syz.7.1130 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  114.111850][ T7434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  114.111866][ T7434] Call Trace:
[  114.111874][ T7434]  <TASK>
[  114.111883][ T7434]  __dump_stack+0x1d/0x30
[  114.111960][ T7434]  dump_stack_lvl+0x95/0xd0
[  114.112042][ T7434]  dump_stack+0x15/0x1b
[  114.112071][ T7434]  should_fail_ex+0x263/0x280
[  114.112153][ T7434]  should_fail+0xb/0x20
[  114.112216][ T7434]  should_fail_usercopy+0x1a/0x20
[  114.112260][ T7434]  strncpy_from_user+0x27/0x250
[  114.112309][ T7434]  path_setxattrat+0xeb/0x310
[  114.112440][ T7434]  __x64_sys_fsetxattr+0x6b/0x80
[  114.112474][ T7434]  x64_sys_call+0x23c4/0x3000
[  114.112508][ T7434]  do_syscall_64+0xc0/0x2a0
[  114.112569][ T7434]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.112599][ T7434] RIP: 0033:0x7f3a0cf1aeb9
[  114.112619][ T7434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  114.112708][ T7434] RSP: 002b:00007f3a0b96f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000be
[  114.112731][ T7434] RAX: ffffffffffffffda RBX: 00007f3a0d195fa0 RCX: 00007f3a0cf1aeb9
[  114.112751][ T7434] RDX: 0000200000001440 RSI: 0000200000001400 RDI: 0000000000000003
[  114.112769][ T7434] RBP: 00007f3a0b96f090 R08: 0000000000000002 R09: 0000000000000000
[  114.112802][ T7434] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000001
[  114.112818][ T7434] R13: 00007f3a0d196038 R14: 00007f3a0d195fa0 R15: 00007ffe7440ff28
[  114.112844][ T7434]  </TASK>
[  114.440060][ T7453] loop5: detected capacity change from 0 to 256
[  114.527610][ T7458] loop5: detected capacity change from 0 to 736
[  114.568854][ T7458] rock: directory entry would overflow storage
[  114.575086][ T7458] rock: sig=0x3b10, size=4, remaining=3
[  114.638723][ T7468] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  114.830344][ T7483] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.837673][ T7483] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.969628][ T7483] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  114.980644][ T7483] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  115.030080][ T7498] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check.
[  115.046529][   T12] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  115.059558][   T12] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  115.074842][   T12] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  115.084068][   T12] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  115.188100][ T7509] loop5: detected capacity change from 0 to 128
[  115.196144][ T7508] program syz.6.1148 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  115.210486][ T7508] program syz.6.1148 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  115.313959][ T7514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1152'.
[  115.464966][ T7523] loop6: detected capacity change from 0 to 164
[  115.508092][ T7523] isofs_fill_super: root inode is not a directory. Corrupted media?
[  115.659913][ T7531] netlink: 'syz.5.1157': attribute type 24 has an invalid length.
[  115.668840][ T7533] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  115.835702][ T7542] syzkaller0: entered promiscuous mode
[  115.841232][ T7542] syzkaller0: entered allmulticast mode
[  115.879911][ T7545] loop6: detected capacity change from 0 to 128
[  115.933141][ T7547] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  115.943293][ T7542] tipc: Resetting bearer <eth:syzkaller0>
[  115.959842][ T7541] tipc: Resetting bearer <eth:syzkaller0>
[  115.973989][ T7541] tipc: Disabling bearer <eth:syzkaller0>
[  115.988794][ T7442] loop7: detected capacity change from 0 to 512
[  116.011819][ T7546] netlink: 2028 bytes leftover after parsing attributes in process `syz.5.1163'.
[  116.020974][ T7546] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1163'.
[  116.121298][ T7442] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  116.142830][ T7442] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  116.172400][ T7555] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1163'.
[  116.262692][ T7561] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65050 sclass=netlink_route_socket pid=7561 comm=syz.6.1167
[  116.757674][ T3332] Bluetooth: hci0: Frame reassembly failed (-84)
[  117.203104][ T7581] loop4: detected capacity change from 0 to 128
[  117.349130][ T7602] loop4: detected capacity change from 0 to 512
[  117.357756][ T7603] loop6: detected capacity change from 0 to 128
[  117.384586][ T7442] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.401714][ T7602] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  117.461154][ T7602] EXT4-fs error (device loop4): xattr_find_entry:337: inode #15: comm syz.4.1177: corrupted xattr entries
[  117.495709][ T7602] EXT4-fs (loop4): Remounting filesystem read-only
[  117.502381][ T7602] EXT4-fs (loop4): 1 truncate cleaned up
[  117.510351][ T7611] program syz.7.1181 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  117.512853][ T7602] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  117.534776][ T7602] xt_TPROXY: Can be used only with -p tcp or -p udp
[  117.547558][ T7615] loop6: detected capacity change from 0 to 512
[  117.556480][ T7611] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1181'.
[  117.562399][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.595645][ T7615] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  117.633472][ T7621] loop4: detected capacity change from 0 to 256
[  117.640824][ T7615] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  117.695016][ T7624] loop7: detected capacity change from 0 to 8192
[  117.744400][ T7615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  117.758245][ T7615] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  117.794824][   T29] kauditd_printk_skb: 411 callbacks suppressed
[  117.794840][   T29] audit: type=1400 audit(2000000060.390:5922): avc:  denied  { append } for  pid=7614 comm="syz.6.1183" path="/27/file0/memory.events" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  117.858475][ T7643] loop7: detected capacity change from 0 to 1024
[  117.869922][   T29] audit: type=1326 audit(2000000060.460:5923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7636 comm="syz.4.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77431aeb9 code=0x7ffc0000
[  117.894352][   T29] audit: type=1326 audit(2000000060.460:5924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7636 comm="syz.4.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77431aeb9 code=0x7ffc0000
[  117.917919][   T29] audit: type=1326 audit(2000000060.460:5925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7636 comm="syz.4.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7fa77431aeb9 code=0x7ffc0000
[  117.941751][   T29] audit: type=1326 audit(2000000060.460:5926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7636 comm="syz.4.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77431aeb9 code=0x7ffc0000
[  117.945714][ T7643] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  117.965387][   T29] audit: type=1326 audit(2000000060.460:5927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7636 comm="syz.4.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77431aeb9 code=0x7ffc0000
[  118.000634][   T29] audit: type=1326 audit(2000000060.460:5928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7636 comm="syz.4.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa77431aeb9 code=0x7ffc0000
[  118.024099][   T29] audit: type=1326 audit(2000000060.460:5929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7636 comm="syz.4.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa77431ac22 code=0x7ffc0000
[  118.047385][   T29] audit: type=1326 audit(2000000060.460:5930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7636 comm="syz.4.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa7742db78e code=0x7ffc0000
[  118.057966][ T7647] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1189'.
[  118.070695][   T29] audit: type=1326 audit(2000000060.460:5931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7636 comm="syz.4.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fa77431ace7 code=0x7ffc0000
[  118.114703][ T7227] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.137227][ T7650] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1190'.
[  118.399679][ T7668] bond1: option resend_igmp: invalid value (1024)
[  118.406266][ T7668] bond1: option resend_igmp: allowed values 0 - 255
[  118.414348][ T7668] bond1 (unregistering): Released all slaves
[  118.631839][ T6551] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.684899][ T7695] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1196'.
[  118.819117][ T3646] Bluetooth: hci0: command 0x1003 tx timeout
[  118.822447][ T3690] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  119.195525][ T7732] bond1: option resend_igmp: invalid value (1024)
[  119.202795][ T7732] bond1: option resend_igmp: allowed values 0 - 255
[  119.211056][ T7732] bond1 (unregistering): Released all slaves
[  119.266951][ T7744] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1207'.
[  119.313819][ T7744] 8021q: adding VLAN 0 to HW filter on device bond0
[  119.330458][ T7654] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  119.355649][ T7744] 8021q: adding VLAN 0 to HW filter on device team0
[  119.381270][ T7654] ext4 filesystem being mounted at /242/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  119.391899][ T7744] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  119.654788][ T7757] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  119.669642][ T7757] EXT4-fs warning (device loop6): read_mmp_block:111: Error -74 while reading MMP block 17
[  119.743274][   T57] Bluetooth: hci0: Frame reassembly failed (-84)
[  119.753189][ T7775] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1219'.
[  119.917230][ T7792] 9p: Bad value for 'rfdno'
[  120.062331][ T7804] netlink: 'syz.0.1229': attribute type 12 has an invalid length.
[  120.113252][ T7808] VFS: Mount too revealing
[  120.413884][ T7815] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  120.686272][ T7831] 9p: Bad value for 'rfdno'
[  120.895285][ T7838] __nla_validate_parse: 2 callbacks suppressed
[  120.895305][ T7838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1238'.
[  121.171075][ T7654] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.229674][ T7846] FAULT_INJECTION: forcing a failure.
[  121.229674][ T7846] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  121.243573][ T7846] CPU: 1 UID: 0 PID: 7846 Comm: syz.4.1241 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  121.243674][ T7846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  121.243699][ T7846] Call Trace:
[  121.243710][ T7846]  <TASK>
[  121.243720][ T7846]  __dump_stack+0x1d/0x30
[  121.243757][ T7846]  dump_stack_lvl+0x95/0xd0
[  121.243784][ T7846]  dump_stack+0x15/0x1b
[  121.243849][ T7846]  should_fail_ex+0x263/0x280
[  121.243882][ T7846]  should_fail+0xb/0x20
[  121.243907][ T7846]  should_fail_usercopy+0x1a/0x20
[  121.243940][ T7846]  _copy_to_user+0x20/0xa0
[  121.244016][ T7846]  simple_read_from_buffer+0xb5/0x130
[  121.244138][ T7846]  proc_fail_nth_read+0x10e/0x150
[  121.244171][ T7846]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  121.244202][ T7846]  vfs_read+0x1ab/0x7f0
[  121.244262][ T7846]  ? __rcu_read_unlock+0x4e/0x70
[  121.244373][ T7846]  ? __fget_files+0x184/0x1c0
[  121.244400][ T7846]  ? mutex_lock+0x57/0x90
[  121.244462][ T7846]  ksys_read+0xdc/0x1a0
[  121.244481][ T7846]  __x64_sys_read+0x40/0x50
[  121.244499][ T7846]  x64_sys_call+0x2889/0x3000
[  121.244529][ T7846]  do_syscall_64+0xc0/0x2a0
[  121.244564][ T7846]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  121.244590][ T7846] RIP: 0033:0x7fa7742db78e
[  121.244621][ T7846] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  121.244643][ T7846] RSP: 002b:00007fa772d76fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  121.244666][ T7846] RAX: ffffffffffffffda RBX: 00007fa772d776c0 RCX: 00007fa7742db78e
[  121.244688][ T7846] RDX: 000000000000000f RSI: 00007fa772d770a0 RDI: 0000000000000004
[  121.244703][ T7846] RBP: 00007fa772d77090 R08: 0000000000000000 R09: 0000000000000000
[  121.244777][ T7846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  121.244793][ T7846] R13: 00007fa774596038 R14: 00007fa774595fa0 R15: 00007ffe23ff3e18
[  121.244817][ T7846]  </TASK>
[  121.452172][ T7848] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1242'.
[  121.479087][ T7849] set_capacity_and_notify: 6 callbacks suppressed
[  121.479100][ T7849] loop6: detected capacity change from 0 to 512
[  121.501456][ T7851] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1243'.
[  121.523756][ T7849] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  121.537156][ T7849] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  121.582766][ T6551] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.726927][ T7863] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1246'.
[  121.735958][ T7863] netlink: 'syz.6.1246': attribute type 30 has an invalid length.
[  121.747419][ T3332] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  121.756310][ T3332] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  121.765405][ T3332] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  121.776599][ T3690] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  121.783457][ T7783] Bluetooth: hci0: command 0x1003 tx timeout
[  121.790015][ T3332] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  121.851530][ T3646] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  121.912876][ T7865] bond1: option resend_igmp: invalid value (1024)
[  121.919370][ T7865] bond1: option resend_igmp: allowed values 0 - 255
[  121.926756][ T7865] bond1 (unregistering): Released all slaves
[  122.659443][ T7894] program syz.4.1257 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  122.844267][ T7901] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1259'.
[  123.343216][ T7892] dummy0 (unregistering): left allmulticast mode
[  123.481367][   T29] kauditd_printk_skb: 191 callbacks suppressed
[  123.481382][   T29] audit: type=1326 audit(2000000322.070:6123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7885 comm="syz.7.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a0cf1aeb9 code=0x7ffc0000
[  123.569297][   T29] audit: type=1326 audit(2000000322.080:6124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7885 comm="syz.7.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f3a0cf1aeb9 code=0x7ffc0000
[  123.593386][   T29] audit: type=1326 audit(2000000322.080:6125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7885 comm="syz.7.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a0cf1aeb9 code=0x7ffc0000
[  123.616859][   T29] audit: type=1326 audit(2000000322.090:6126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7885 comm="syz.7.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f3a0cf1aeb9 code=0x7ffc0000
[  123.640330][   T29] audit: type=1326 audit(2000000322.090:6127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7885 comm="syz.7.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a0cf1aeb9 code=0x7ffc0000
[  123.640449][   T29] audit: type=1326 audit(2000000322.110:6128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7885 comm="syz.7.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f3a0cf1aeb9 code=0x7ffc0000
[  123.640555][   T29] audit: type=1400 audit(2000000322.110:6129): avc:  denied  { shutdown } for  pid=7912 comm="syz.5.1264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  123.640620][   T29] audit: type=1326 audit(2000000322.110:6130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7885 comm="syz.7.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a0cf1aeb9 code=0x7ffc0000
[  123.640651][   T29] audit: type=1326 audit(2000000322.130:6131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7885 comm="syz.7.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3a0cf1aeb9 code=0x7ffc0000
[  123.640681][   T29] audit: type=1326 audit(2000000322.140:6132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7885 comm="syz.7.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a0cf1aeb9 code=0x7ffc0000
[  123.733984][ T7938] netlink: 7 bytes leftover after parsing attributes in process `syz.5.1270'.
[  123.771724][ T7938] netlink: 7 bytes leftover after parsing attributes in process `syz.5.1270'.
[  123.774453][ T7942] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  123.855463][ T7949] loop4: detected capacity change from 0 to 1024
[  123.855852][ T7949] EXT4-fs: Ignoring removed bh option
[  123.898428][ T7949] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  124.188119][ T7982] loop7: detected capacity change from 0 to 512
[  124.230863][ T7982] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  124.252908][ T7982] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  124.367706][ T7990] loop5: detected capacity change from 0 to 128
[  124.380939][ T7227] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.392559][ T7990] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  124.428425][ T7990] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  124.562186][   T57] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  124.769291][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  125.037394][ T8052] loop6: detected capacity change from 0 to 1024
[  125.056792][ T8052] EXT4-fs: Ignoring removed nobh option
[  125.063098][ T8052] EXT4-fs: inline encryption not supported
[  125.132036][ T8052] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  125.174150][ T8052] EXT4-fs error (device loop6): mb_free_blocks:2037: group 0, inode 15: block 129:freeing already freed block (bit 8); block bitmap corrupt.
[  125.249426][ T8064] FAULT_INJECTION: forcing a failure.
[  125.249426][ T8064] name failslab, interval 1, probability 0, space 0, times 0
[  125.262136][ T8064] CPU: 0 UID: 0 PID: 8064 Comm: syz.4.1294 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  125.262225][ T8064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  125.262292][ T8064] Call Trace:
[  125.262298][ T8064]  <TASK>
[  125.262316][ T8064]  __dump_stack+0x1d/0x30
[  125.262338][ T8064]  dump_stack_lvl+0x95/0xd0
[  125.262438][ T8064]  dump_stack+0x15/0x1b
[  125.262462][ T8064]  should_fail_ex+0x263/0x280
[  125.262502][ T8064]  should_failslab+0x8c/0xb0
[  125.262527][ T8064]  kmem_cache_alloc_noprof+0x68/0x490
[  125.262589][ T8064]  ? skb_clone+0x151/0x1f0
[  125.262646][ T8064]  skb_clone+0x151/0x1f0
[  125.262666][ T8064]  __netlink_deliver_tap+0x2c9/0x500
[  125.262711][ T8064]  netlink_unicast+0x66b/0x690
[  125.262750][ T8064]  netlink_sendmsg+0x5c8/0x6f0
[  125.262848][ T8064]  ? __pfx_netlink_sendmsg+0x10/0x10
[  125.262865][ T8064]  ____sys_sendmsg+0x5af/0x600
[  125.262952][ T8064]  ___sys_sendmsg+0x195/0x1e0
[  125.262980][ T8064]  __x64_sys_sendmsg+0xd4/0x160
[  125.263077][ T8064]  x64_sys_call+0x17ba/0x3000
[  125.263101][ T8064]  do_syscall_64+0xc0/0x2a0
[  125.263217][ T8064]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.263312][ T8064] RIP: 0033:0x7fa77431aeb9
[  125.263328][ T8064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  125.263346][ T8064] RSP: 002b:00007fa772d77028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  125.263369][ T8064] RAX: ffffffffffffffda RBX: 00007fa774595fa0 RCX: 00007fa77431aeb9
[  125.263387][ T8064] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000003
[  125.263403][ T8064] RBP: 00007fa772d77090 R08: 0000000000000000 R09: 0000000000000000
[  125.263419][ T8064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  125.263474][ T8064] R13: 00007fa774596038 R14: 00007fa774595fa0 R15: 00007ffe23ff3e18
[  125.263492][ T8064]  </TASK>
[  125.492747][ T6551] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  125.518587][ T8066] loop5: detected capacity change from 0 to 128
[  125.574037][ T8066] VFS: Mount too revealing
[  125.596937][ T8066] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1296'.
[  125.673356][ T8070] bridge0: port 3(bond0) entered disabled state
[  125.680034][ T8070] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.687248][ T8070] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.700490][ T8073] loop6: detected capacity change from 0 to 128
[  125.782689][ T8096] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1302'.
[  125.831232][ T8070] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  125.843895][ T8096] loop6: detected capacity change from 0 to 1024
[  125.850878][ T8096] EXT4-fs: Ignoring removed bh option
[  125.884976][ T8096] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  125.925705][ T8096] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  125.946092][ T8070] bond2: left allmulticast mode
[  125.951018][ T8070] bond2: left promiscuous mode
[  125.970487][ T8094] tipc: Enabled bearer <udp:s>, priority 10
[  125.980393][ T1740] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  126.022456][ T1740] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  126.109049][ T8114] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1305'.
[  126.118271][ T8114] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  126.151587][ T1740] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  126.161259][ T1740] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  126.198542][ T8119] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1304'.
[  126.227213][ T6551] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  126.280036][ T8124] bridge0: entered promiscuous mode
[  126.294175][ T8117] netlink: 'syz.0.1307': attribute type 1 has an invalid length.
[  126.315195][ T8117] 8021q: adding VLAN 0 to HW filter on device bond2
[  126.477820][ T8138] netlink: 'syz.4.1315': attribute type 1 has an invalid length.
[  126.529500][ T8138] bond4: entered promiscuous mode
[  126.565415][ T8138] 8021q: adding VLAN 0 to HW filter on device bond4
[  126.634240][ T8144] bond4: (slave bridge3): making interface the new active one
[  126.641835][ T8144] bridge3: entered promiscuous mode
[  126.669311][ T8144] bond4: (slave bridge3): Enslaving as an active interface with an up link
[  126.739176][ T8152] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1319'.
[  126.753747][ T8152] loop6: detected capacity change from 0 to 1024
[  126.760468][ T8152] EXT4-fs: Ignoring removed bh option
[  126.766687][ T8152] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  126.800563][ T8152] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  126.953520][ T6551] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.010524][ T8166] SELinux: ebitmap: map size 16779008 does not match my size 64 (high bit was 7627520)
[  127.023071][ T8166] SELinux: failed to load policy
[  127.032403][ T8169] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1324'.
[  127.052965][ T8048] loop7: detected capacity change from 0 to 512
[  127.081588][    T9] tipc: Node number set to 1334125877
[  127.095128][ T8172] loop6: detected capacity change from 0 to 256
[  127.126936][ T8048] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  127.162027][ T8048] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  127.226999][ T8179] loop4: detected capacity change from 0 to 128
[  127.295808][ T8048] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.341020][ T8188] syzkaller0: entered promiscuous mode
[  127.346580][ T8188] syzkaller0: entered allmulticast mode
[  127.366009][ T8188] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  127.376523][ T8188] tipc: Resetting bearer <eth:syzkaller0>
[  127.383154][ T8187] tipc: Resetting bearer <eth:syzkaller0>
[  127.392717][ T8187] tipc: Disabling bearer <eth:syzkaller0>
[  127.441624][ T8194] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1334'.
[  127.472663][ T8194] loop7: detected capacity change from 0 to 1024
[  127.479552][ T8194] EXT4-fs: Ignoring removed bh option
[  127.509850][ T8194] EXT4-fs (loop7): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  127.534107][ T8194] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  127.758771][ T7227] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.789814][ T8213] loop7: detected capacity change from 0 to 512
[  127.798931][ T8213] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[  127.816969][ T8213] EXT4-fs (loop7): orphan cleanup on readonly fs
[  127.823641][ T8213] EXT4-fs error (device loop7): __ext4_iget:5426: inode #11: block 8: comm syz.7.1339: invalid block
[  127.835244][ T8213] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.1339: couldn't read orphan inode 11 (err -117)
[  127.850620][ T8213] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  127.954711][ T8222] loop5: detected capacity change from 0 to 128
[  128.029720][ T8226] netlink: 292 bytes leftover after parsing attributes in process `syz.5.1343'.
[  128.191155][ T7227] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.233504][ T8233] loop4: detected capacity change from 0 to 1024
[  128.284517][ T8237] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1347'.
[  128.295843][ T8233] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  128.365450][ T8243] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1349'.
[  128.388357][ T8243] loop7: detected capacity change from 0 to 1024
[  128.403006][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.422579][ T8243] EXT4-fs: Ignoring removed bh option
[  128.461650][ T8243] EXT4-fs (loop7): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  128.470282][ T3332] Bluetooth: hci0: Frame reassembly failed (-84)
[  128.489989][ T3332] Bluetooth: hci1: Frame reassembly failed (-84)
[  128.506190][ T8243] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  128.644091][ T8257] netlink: 'syz.0.1352': attribute type 27 has an invalid length.
[  128.665179][ T8257] bridge0: port 2(bridge_slave_1) entered blocking state
[  128.672294][ T8257] bridge0: port 2(bridge_slave_1) entered forwarding state
[  128.679648][ T8257] bridge0: port 1(bridge_slave_0) entered blocking state
[  128.686791][ T8257] bridge0: port 1(bridge_slave_0) entered forwarding state
[  128.710789][ T7227] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.722194][   T29] kauditd_printk_skb: 169 callbacks suppressed
[  128.722216][   T29] audit: type=1326 audit(2000000327.320:6302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8229 comm="syz.6.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f688e81aeb9 code=0x7ffc0000
[  128.762548][   T29] audit: type=1326 audit(2000000327.320:6303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8229 comm="syz.6.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f688e81aeb9 code=0x7ffc0000
[  128.796442][ T8257] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  128.815195][   T29] audit: type=1326 audit(2000000327.410:6304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8229 comm="syz.6.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f688e81aeb9 code=0x7ffc0000
[  128.838713][   T29] audit: type=1326 audit(2000000327.410:6305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8229 comm="syz.6.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f688e81aeb9 code=0x7ffc0000
[  128.867641][   T29] audit: type=1326 audit(2000000327.410:6306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8229 comm="syz.6.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f688e81aeb9 code=0x7ffc0000
[  128.892097][   T29] audit: type=1326 audit(2000000327.410:6307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8229 comm="syz.6.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f688e81aeb9 code=0x7ffc0000
[  128.915599][   T29] audit: type=1326 audit(2000000327.410:6308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8229 comm="syz.6.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f688e81aeb9 code=0x7ffc0000
[  128.939697][   T29] audit: type=1326 audit(2000000327.410:6309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8229 comm="syz.6.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f688e81aeb9 code=0x7ffc0000
[  128.963713][   T29] audit: type=1326 audit(2000000327.410:6310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8229 comm="syz.6.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f688e81aeb9 code=0x7ffc0000
[  128.987167][   T29] audit: type=1326 audit(2000000327.410:6311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8229 comm="syz.6.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f688e81aeb9 code=0x7ffc0000
[  128.995586][ T8230] loop6: detected capacity change from 0 to 512
[  129.051424][ T8230] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  129.069143][ T8230] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  129.089956][ T8272] syzkaller0: entered promiscuous mode
[  129.096331][ T8272] syzkaller0: entered allmulticast mode
[  129.103771][ T8272] tipc: Started in network mode
[  129.108700][ T8272] tipc: Node identity 4ad922006a12, cluster identity 4711
[  129.115913][ T8272] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  129.127117][ T8272] tipc: Resetting bearer <eth:syzkaller0>
[  129.133872][ T8271] tipc: Resetting bearer <eth:syzkaller0>
[  129.143203][ T8271] tipc: Disabling bearer <eth:syzkaller0>
[  129.182948][ T8230] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.230972][ T8274] VFS: Mount too revealing
[  129.245628][ T8274] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1356'.
[  129.357118][ T8290] mmap: syz.7.1362 (8290): VmData 29192192 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[  129.482765][ T8305] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1367'.
[  129.634877][ T8316] 9p: Bad value for 'rfdno'
[  129.754328][ T8320] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  130.258508][ T8341] Unknown options in mask 7bf2
[  130.458995][ T8307] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  130.473538][ T8307] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  130.500004][ T7783] Bluetooth: hci1: command 0x1003 tx timeout
[  130.506197][ T7783] Bluetooth: hci0: command 0x1003 tx timeout
[  130.512304][ T3646] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  130.518451][ T3690] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  130.897994][ T8380] VFS: Mount too revealing
[  131.065756][ T8395] netlink: 'syz.4.1401': attribute type 21 has an invalid length.
[  131.097245][ T8400] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  131.295296][ T3305]  loop5: p1 p2 < > p3 p4 < p5 >
[  131.300384][ T3305] loop5: partition table partially beyond EOD, truncated
[  131.317822][ T3305] loop5: p1 start 8388607 is beyond EOD, truncated
[  131.324435][ T3305] loop5: p2 start 4294902784 is beyond EOD, truncated
[  131.331357][ T3305] loop5: p3 start 3724543488 is beyond EOD, truncated
[  131.359828][ T3305] loop5: p5 start 8388607 is beyond EOD, truncated
[  131.379563][ T8404]  loop5: p1 p2 < > p3 p4 < p5 >
[  131.384561][ T8404] loop5: partition table partially beyond EOD, truncated
[  131.392071][ T8404] loop5: p1 start 8388607 is beyond EOD, truncated
[  131.398594][ T8404] loop5: p2 start 4294902784 is beyond EOD, truncated
[  131.405540][ T8404] loop5: p3 start 3724543488 is beyond EOD, truncated
[  131.428097][ T8409] sctp: [Deprecated]: syz.0.1403 (pid 8409) Use of int in maxseg socket option.
[  131.428097][ T8409] Use struct sctp_assoc_value instead
[  131.486936][ T8404] loop5: p5 start 8388607 is beyond EOD, truncated
[  131.533124][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory
[  131.585198][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory
[  131.671125][ T8414] xt_hashlimit: size too large, truncated to 1048576
[  131.829220][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory
[  132.082431][ T8427] set_capacity_and_notify: 5 callbacks suppressed
[  132.082452][ T8427] loop4: detected capacity change from 0 to 512
[  132.105820][   T23] IPVS: starting estimator thread 0...
[  132.118836][ T8427] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  132.141718][ T8427] ext4 filesystem being mounted at /270/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  132.176744][ T8427] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  132.191566][ T8428] IPVS: using max 1968 ests per chain, 98400 per kthread
[  132.207151][ T8433] loop5: detected capacity change from 0 to 128
[  132.258881][ T8422] loop7: detected capacity change from 0 to 512
[  132.305104][ T8436] tmpfs: Unknown parameter '0xffffffffffffffff0xffffffffffffffff'
[  132.337139][ T8422] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  132.397361][ T8422] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  132.420315][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.437519][ T8443] FAULT_INJECTION: forcing a failure.
[  132.437519][ T8443] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  132.457211][ T8443] CPU: 1 UID: 0 PID: 8443 Comm: syz.5.1416 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  132.457275][ T8443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  132.457288][ T8443] Call Trace:
[  132.457295][ T8443]  <TASK>
[  132.457302][ T8443]  __dump_stack+0x1d/0x30
[  132.457327][ T8443]  dump_stack_lvl+0x95/0xd0
[  132.457352][ T8443]  dump_stack+0x15/0x1b
[  132.457382][ T8443]  should_fail_ex+0x263/0x280
[  132.457420][ T8443]  should_fail+0xb/0x20
[  132.457452][ T8443]  should_fail_usercopy+0x1a/0x20
[  132.457531][ T8443]  _copy_to_user+0x20/0xa0
[  132.457556][ T8443]  semctl_info+0x20e/0x270
[  132.457594][ T8443]  __se_sys_semctl+0x217/0x2d0
[  132.457647][ T8443]  __x64_sys_semctl+0x55/0x70
[  132.457684][ T8443]  x64_sys_call+0x2089/0x3000
[  132.457712][ T8443]  do_syscall_64+0xc0/0x2a0
[  132.457767][ T8443]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.457788][ T8443] RIP: 0033:0x7ff9e26daeb9
[  132.457803][ T8443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  132.457854][ T8443] RSP: 002b:00007ff9e1137028 EFLAGS: 00000246 ORIG_RAX: 0000000000000042
[  132.457878][ T8443] RAX: ffffffffffffffda RBX: 00007ff9e2955fa0 RCX: 00007ff9e26daeb9
[  132.457895][ T8443] RDX: 0000000000000013 RSI: 0000000000000003 RDI: 0000000000000000
[  132.457911][ T8443] RBP: 00007ff9e1137090 R08: 0000000000000000 R09: 0000000000000000
[  132.457932][ T8443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  132.457997][ T8443] R13: 00007ff9e2956038 R14: 00007ff9e2955fa0 R15: 00007ffcd948a468
[  132.458019][ T8443]  </TASK>
[  132.695217][ T8447] loop4: detected capacity change from 0 to 128
[  132.764060][ T8422] EXT4-fs error (device loop7): ext4_search_dir:1474: inode #2: block 3: comm syz.7.1409: bad entry in directory: directory entry overrun - offset=16444, inode=113, rec_len=2048, size=2048 fake=0
[  132.783635][ T8457] sctp: [Deprecated]: syz.5.1421 (pid 8457) Use of struct sctp_assoc_value in delayed_ack socket option.
[  132.783635][ T8457] Use struct sctp_sack_info instead
[  132.835383][ T8307] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.848430][ T8422] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.924824][ T8470] syzkaller0: entered promiscuous mode
[  132.930423][ T8470] syzkaller0: entered allmulticast mode
[  132.945817][ T8470] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  132.990963][ T8475] __nla_validate_parse: 6 callbacks suppressed
[  132.990982][ T8475] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1430'.
[  133.008382][ T8479] tipc: Resetting bearer <eth:syzkaller0>
[  133.014300][ T8474] loop4: detected capacity change from 0 to 128
[  133.024168][ T8469] tipc: Resetting bearer <eth:syzkaller0>
[  133.043221][ T8469] tipc: Disabling bearer <eth:syzkaller0>
[  133.192689][ T3420] IPVS: starting estimator thread 0...
[  133.281865][ T8494] IPVS: using max 2592 ests per chain, 129600 per kthread
[  133.514536][ T8507] loop6: detected capacity change from 0 to 128
[  133.537884][ T8510] loop7: detected capacity change from 0 to 512
[  133.572525][ T8510] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  133.629274][ T8510] ext4 filesystem being mounted at /62/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  133.644743][ T8510] netlink: 'syz.7.1443': attribute type 4 has an invalid length.
[  133.653203][ T8516] loop6: detected capacity change from 0 to 128
[  133.656639][ T8510] netlink: 'syz.7.1443': attribute type 4 has an invalid length.
[  133.692306][ T8516] VFS: Mount too revealing
[  133.699072][ T8518] loop5: detected capacity change from 0 to 128
[  133.705768][ T8518] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  133.811820][ T8520] loop6: detected capacity change from 0 to 128
[  133.902877][ T8520] VFS: Mount too revealing
[  134.042398][ T8535] netlink: 300 bytes leftover after parsing attributes in process `syz.4.1451'.
[  134.069257][ T8538] EXT4-fs: Ignoring removed bh option
[  134.094539][ T8538] EXT4-fs: Ignoring removed nobh option
[  134.104378][   T29] kauditd_printk_skb: 203 callbacks suppressed
[  134.104391][   T29] audit: type=1326 audit(2000000332.700:6515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8531 comm="syz.0.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff23bc9aeb9 code=0x7ffc0000
[  134.162220][   T29] audit: type=1326 audit(2000000332.730:6516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8531 comm="syz.0.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7ff23bc9aeb9 code=0x7ffc0000
[  134.185813][   T29] audit: type=1326 audit(2000000332.730:6517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8531 comm="syz.0.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff23bc9aeb9 code=0x7ffc0000
[  134.209251][   T29] audit: type=1326 audit(2000000332.730:6518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8531 comm="syz.0.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7ff23bc9aeb9 code=0x7ffc0000
[  134.232727][   T29] audit: type=1326 audit(2000000332.730:6519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8531 comm="syz.0.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff23bc9aeb9 code=0x7ffc0000
[  134.256262][   T29] audit: type=1326 audit(2000000332.730:6520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8531 comm="syz.0.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7ff23bc9aeb9 code=0x7ffc0000
[  134.279831][   T29] audit: type=1326 audit(2000000332.730:6521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8531 comm="syz.0.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff23bc9aeb9 code=0x7ffc0000
[  134.303404][   T29] audit: type=1326 audit(2000000332.730:6522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8531 comm="syz.0.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff23bc9aeb9 code=0x7ffc0000
[  134.326803][   T29] audit: type=1326 audit(2000000332.730:6523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8531 comm="syz.0.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff23bc9aeb9 code=0x7ffc0000
[  134.350274][   T29] audit: type=1326 audit(2000000332.730:6524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8531 comm="syz.0.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff23bc9aeb9 code=0x7ffc0000
[  134.356175][ T8538] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  134.405419][ T8535] 9p: Bad value for 'rfdno'
[  134.953845][ T8548] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem
[  135.020016][ T8550] FAULT_INJECTION: forcing a failure.
[  135.020016][ T8550] name failslab, interval 1, probability 0, space 0, times 0
[  135.032747][ T8550] CPU: 0 UID: 0 PID: 8550 Comm: syz.4.1455 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  135.032811][ T8550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  135.032824][ T8550] Call Trace:
[  135.032833][ T8550]  <TASK>
[  135.032874][ T8550]  __dump_stack+0x1d/0x30
[  135.032903][ T8550]  dump_stack_lvl+0x95/0xd0
[  135.032930][ T8550]  dump_stack+0x15/0x1b
[  135.032950][ T8550]  should_fail_ex+0x263/0x280
[  135.033055][ T8550]  should_failslab+0x8c/0xb0
[  135.033122][ T8550]  kmem_cache_alloc_noprof+0x68/0x490
[  135.033155][ T8550]  ? prepare_creds+0x38/0x550
[  135.033195][ T8550]  ? get_random_u64+0x13f/0x1f0
[  135.033237][ T8550]  prepare_creds+0x38/0x550
[  135.033273][ T8550]  copy_creds+0x8f/0x340
[  135.033318][ T8550]  ? dup_task_struct+0x60b/0x940
[  135.033362][ T8550]  copy_process+0x639/0x1f10
[  135.033474][ T8550]  kernel_clone+0x16b/0x5b0
[  135.033496][ T8550]  ? vfs_write+0x86e/0x9f0
[  135.033517][ T8550]  __x64_sys_clone+0x143/0x180
[  135.033544][ T8550]  x64_sys_call+0x12d0/0x3000
[  135.033595][ T8550]  do_syscall_64+0xc0/0x2a0
[  135.033635][ T8550]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.033659][ T8550] RIP: 0033:0x7fa77431aeb9
[  135.033691][ T8550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  135.033774][ T8550] RSP: 002b:00007fa772d76fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  135.033800][ T8550] RAX: ffffffffffffffda RBX: 00007fa774595fa0 RCX: 00007fa77431aeb9
[  135.033814][ T8550] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[  135.033829][ T8550] RBP: 00007fa772d77090 R08: 0000000000000000 R09: 0000000000000000
[  135.033922][ T8550] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001
[  135.033935][ T8550] R13: 00007fa774596038 R14: 00007fa774595fa0 R15: 00007ffe23ff3e18
[  135.033981][ T8550]  </TASK>
[  135.035462][ T6551] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  135.253233][ T7227] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  135.263904][ T8552] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  135.286757][ T8552] ext4 filesystem being mounted at /283/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  135.335917][ T8556] EXT4-fs: Ignoring removed oldalloc option
[  135.389083][ T8556] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055e01c, mo2=0002]
[  135.405913][ T8556] System zones: 0-1, 3-36
[  135.422230][ T8556] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  135.468802][ T8556] EXT4-fs error (device loop7): ext4_iget_extra_inode:5073: inode #15: comm syz.7.1458: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[  135.488067][ T8559] sctp: [Deprecated]: syz.6.1456 (pid 8559) Use of int in maxseg socket option.
[  135.488067][ T8559] Use struct sctp_assoc_value instead
[  135.552581][ T7227] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  135.618665][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  135.709849][ T8574] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1463'.
[  135.856574][ T8574] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.1463: Failed to acquire dquot type 0
[  135.912098][ T8574] EXT4-fs (loop6): 1 truncate cleaned up
[  135.939992][ T8574] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  136.025934][ T6551] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.063283][ T8589] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1467'.
[  136.088381][ T8589] EXT4-fs: Ignoring removed bh option
[  136.113880][ T8589] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  136.142928][ T8589] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  136.187924][ T6551] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.242743][ T8603] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  136.331549][    C1] ==================================================================
[  136.339777][    C1] BUG: KCSAN: data-race in wq_worker_tick / wq_worker_tick
[  136.347001][    C1] 
[  136.349326][    C1] read-write to 0xffff888100838cb8 of 8 bytes by interrupt on cpu 0:
[  136.357386][    C1]  wq_worker_tick+0x60/0x230
[  136.362019][    C1]  sched_tick+0xd7/0x210
[  136.366261][    C1]  update_process_times+0x15e/0x190
[  136.371469][    C1]  tick_nohz_handler+0x275/0x3d0
[  136.376419][    C1]  __hrtimer_run_queues+0x20f/0x590
[  136.381629][    C1]  hrtimer_interrupt+0x269/0x810
[  136.386599][    C1]  __sysvec_apic_timer_interrupt+0x5f/0x1d0
[  136.392515][    C1]  sysvec_apic_timer_interrupt+0x6f/0x80
[  136.398158][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  136.404136][    C1]  __tsan_read4+0x12/0x190
[  136.408567][    C1]  __account_obj_stock+0x1f6/0x350
[  136.413703][    C1]  refill_obj_stock+0x1fd/0x400
[  136.418586][    C1]  __memcg_slab_free_hook+0x1b3/0x230
[  136.423976][    C1]  kmem_cache_free+0x27c/0x380
[  136.428740][    C1]  __io_req_caches_free+0xfe/0x210
[  136.433855][    C1]  io_req_caches_free+0x1f/0x60
[  136.438717][    C1]  io_ring_exit_work+0x1f4/0x530
[  136.443676][    C1]  process_scheduled_works+0x4cd/0x9d0
[  136.449134][    C1]  worker_thread+0x6bc/0x8b0
[  136.453727][    C1]  kthread+0x488/0x510
[  136.457794][    C1]  ret_from_fork+0x148/0x280
[  136.462386][    C1]  ret_from_fork_asm+0x1a/0x30
[  136.467175][    C1] 
[  136.469488][    C1] read-write to 0xffff888100838cb8 of 8 bytes by interrupt on cpu 1:
[  136.477547][    C1]  wq_worker_tick+0x60/0x230
[  136.482142][    C1]  sched_tick+0xd7/0x210
[  136.486398][    C1]  update_process_times+0x15e/0x190
[  136.491616][    C1]  tick_nohz_handler+0x275/0x3d0
[  136.496572][    C1]  __hrtimer_run_queues+0x20f/0x590
[  136.501793][    C1]  hrtimer_interrupt+0x269/0x810
[  136.506746][    C1]  __sysvec_apic_timer_interrupt+0x5f/0x1d0
[  136.512703][    C1]  sysvec_apic_timer_interrupt+0x6f/0x80
[  136.518352][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  136.524364][    C1]  kcsan_setup_watchpoint+0x404/0x410
[  136.529739][    C1]  __account_obj_stock+0x2c/0x350
[  136.534789][    C1]  refill_obj_stock+0x1fd/0x400
[  136.539657][    C1]  __memcg_slab_free_hook+0x1b3/0x230
[  136.545042][    C1]  kmem_cache_free+0x27c/0x380
[  136.549825][    C1]  __io_req_caches_free+0xfe/0x210
[  136.554960][    C1]  io_req_caches_free+0x1f/0x60
[  136.559835][    C1]  io_ring_exit_work+0x1f4/0x530
[  136.564790][    C1]  process_scheduled_works+0x4cd/0x9d0
[  136.570256][    C1]  worker_thread+0x6bc/0x8b0
[  136.574875][    C1]  kthread+0x488/0x510
[  136.578965][    C1]  ret_from_fork+0x148/0x280
[  136.583585][    C1]  ret_from_fork_asm+0x1a/0x30
[  136.588389][    C1] 
[  136.590715][    C1] value changed: 0x000000000002e630 -> 0x0000000000030d40
[  136.597864][    C1] 
[  136.600197][    C1] Reported by Kernel Concurrency Sanitizer on:
[  136.606344][    C1] CPU: 1 UID: 0 PID: 1740 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  136.616236][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  136.626293][    C1] Workqueue: iou_exit io_ring_exit_work
[  136.631856][    C1] ==================================================================
[  136.731584][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!