last executing test programs:

2m3.453067946s ago: executing program 2 (id=144):
set_mempolicy(0x6005, &(0x7f00000001c0)=0x1003, 0x4)
r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
add_key(0x0, &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="00000102", 0x4, r0)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x0, 0x1170, 0x1398, 0x168, 0x1170, 0x288, 0x1398, 0x1398, 0x288, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @loopback, [0xffffff7f], [0xffffff00], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6, 0x0, 0x0, 0x53}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x21}}, @common=@frag={{0x30}, {[0x2, 0x3], 0x0, 0x12, 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'geneve1\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x2, 0x12}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0xb6, 0x5, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8)
r4 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0xffffff01, 0x4)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
r5 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x7, 0xfffffffd}]}, 0x10)
bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e20, 0x4000b, @empty}, 0x1c)
syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)

2m3.350200063s ago: executing program 2 (id=146):
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6b0bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x65bb1d1b44201a3, @perf_bp={0x0, 0x8}, 0x100d00, 0x32, 0x43a1bd76, 0x7, 0x2000000000006, 0xffffffff, 0x2, 0x0, 0x5, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000680)={[{@errors_continue}, {@delalloc}, {@data_err_ignore}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@data_err_ignore}, {@nojournal_checksum}]}, 0x1, 0x4ef, &(0x7f0000000180)="$eJzs3M9vFdUeAPDv3PbSAo9HH49HAg+1gMbGxBYKCgs3mJi40MSIC1k2bSGVCxjahZBGLonBNYl7w9K408StLo0r/wBcuDAxJETZAG68Zu6dub29P3p7S2nT3s8nGThn5sycc2bmzD0zpzMB9K3R9J8k4l8RcS8i9taiyxOM1v57/HBx+snDxekoVyrn/kiq6R6l8Uy+3u4sMlaIKHyWNG7wbh6Yv37j0lSpNHstytX4xMLljyfmr994de7y1MXZi7NXJs+cOXXyxOnXJ19rLvJw10olrbPSej069OnVwwffPn/n3enB5o011qOjfK0/y12TRr5vO3ipcXvbwJ6GcNJar5sbWhhWbTg7DYtp+18sHT1fm520a0PA9lKpVCpDnReXK81utcwBtqwkNrsEwObIf+jT+998qs0pbkT3Y9M9OFu7AXr0cLFyM2L6cb3+g1HI0hSb7m9TK/SZejIaER+W//oynWKl5xC/rlOGAEDf++Fs1g1Moqn/V4gDDen+nY2hjETEfyJiX0T8NyL2R8T/IpalXSaJqKyQ//7mGfX8v81GEQr311q31Uj7f29kY1v5lOWbJxkZyGJ7IvIO8+zxbJ+MRXHowlxp9kSH7e/okn9j/y+d0vzzvmBWjvuDTZ3NmamFqbXVttWDWxGHBpvrnwymBy4fxkki4mBEHOphuyMN4blXvjpcjzTdVnSvf1Wl7XDEOoyfVe5GvFw7/uVYdvyXckwaxycLLeOTE8NRmj0+kZ4Fx9vm8dPPt9/rlH/X+n/3W/Mqb53+/tzTVrsuPf67Gs7/yMdvl+o/kkQk9fHa+YjKQG953P7l8+p2R4+1Llvr+b8j+aAaztvXJ1MLC9dOROxI3mmdP7m0bh7P06f1HzvWvv3vy9ZJ98T/IyI9iZ+LiOcjBvKyH4mIoxHRpmp1P7754kedlq3y/H9m0vrPtL3+LTv+S+P1qwzkK6dzBi4dufekw8Ujq//elY//qWpoLOLv6Hj9S5ZdIlZb0qfegQAAALAFFKL6t/+F8Xq4UBgfrz0D2h+7CqWr8wsvRMSVmdo7AiNRLFyYK83mD+RGopjkzz9HGuKTTfGT2XPjLwZ2VuPj01dLM5tdeehzu6ttPmlp/6nfe3zOC2xB2+g9NKBH3dr/gTsbVBBgw/n9h/7V0P47fdmi7C9lYHvy+w/9q137vxlfr/jugmsGbH0VbRn62srtv/v3NoGtazDer4errz37+Cf0Df1/6Eu9vtffW6Ay1H7RcLT5YsDwsynGzjZ5bUog7Vmt4waLEbG6xDvXkkXeBez8hYdCbxscitZFA7HSWkn77zhERLnjWule6VqeiwfW/eTPv4my3qfNN0vttLjKw/20Aff7AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAtvJPAAAA//8tL8+m")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x82)
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1000002, 0x11, r0, 0x0)
read(r0, &(0x7f0000001400)=""/4096, 0x1000)
r1 = syz_io_uring_setup(0x49a9, &(0x7f00000007c0)={0x0, 0xad2a, 0x10000, 0x0, 0x33a}, &(0x7f0000000840), &(0x7f0000000880))
syz_io_uring_setup(0x62ea, &(0x7f00000008c0)={0x0, 0xa16b, 0x20, 0x3, 0x129, 0x0, r1}, &(0x7f0000000000), &(0x7f0000000980))
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x24008818, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8044)
socketpair(0x27, 0x1, 0xfffffffe, &(0x7f0000000000))
r2 = perf_event_open(&(0x7f0000000500)={0x2, 0xad, 0x29, 0x1, 0xfc, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x1, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mount_setattr(0xffffffffffffffff, 0x0, 0xa000, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x101001, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000540)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010004080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x24002040)

2m2.953705526s ago: executing program 2 (id=153):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = open(&(0x7f0000000000)='.\x00', 0x2882c2, 0x0)
bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000280)=@o_path={0x0, r0, 0x4000, r0}, 0x18)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'tunl0\x00'})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xf, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x4, 0x1000, &(0x7f00000009c0)=""/4096, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x11aa}, 0x94)

2m2.929098087s ago: executing program 3 (id=154):
r0 = socket$kcm(0x2, 0x1000000000000002, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000180)=@urb_type_bulk={0x3, {0x3}, 0xfffffffe, 0x20, &(0x7f0000000040)='D', 0x1, 0x7, 0x10001, 0x3, 0x1, 0x40, 0x0})
bind$inet(r2, 0x0, 0x0)
fcntl$dupfd(r2, 0x406, r2)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x4, 0xe4}]}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r5 = fcntl$dupfd(r2, 0x406, r2)
syz_genetlink_get_family_id$devlink(&(0x7f0000000440), r5)
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x55}, 0x0)
ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000100)={0x8, &(0x7f00000000c0)=[{0x7, 0x0, 0x7, 0x3}, {0x4, 0x3, 0x6, 0x7}, {0x7, 0x1, 0x4, 0x2}, {0x6, 0x1, 0x0, 0xffffffff}, {0x3, 0x3, 0x2, 0x6}, {0x7, 0x2, 0x0, 0x9}, {0x9, 0x0, 0x2, 0xb3}, {0x3, 0x3, 0x8, 0x2}]})
setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f00000002c0)=r1, 0x4)
sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000000)="813e785600", 0x5}], 0x1, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x40}, @dev={0xac, 0x14, 0x14, 0x3a}}}}], 0x20}, 0x4840)

2m2.845490782s ago: executing program 3 (id=157):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x9, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = gettid()
timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f00000000c0))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000240)={'\x00', 0x2, 0x101, 0xd0, 0x3ff, 0x1, r0})
r4 = fspick(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x1)
writev(r4, &(0x7f0000000740)=[{&(0x7f00000002c0)='v', 0x1}, {&(0x7f0000000300)="54c368dc6c3a3f5a2c905e0930e45337488cbed114f5d30b8a54de1828be52de58b125e05e09cea5f5709d4ba2524f262ad2d82560ef3bd65aca87d93ec94e5b7628913c6484ac03f90af40abf4c2e120815cfebb41ce460b4e4237484bb7386a5d754ce43670e746f9f3b5c89855fdeecb60c52f1cff5f30682b75c00b3f743105bd502ec1bfb56197a9d1a46", 0x8d}, {&(0x7f00000003c0)="c5ecff1e55df489a8e50d06ab923fb86a153b0a9a0f0230fd8efadb89a570ef42d27f74166661d52512cfc57f89ab3d7eb3aea120feabd984a09eb88815b9dc0dc06934c88590fb61073dda491980cd366e6eb4e19ec", 0x56}, {&(0x7f0000000480)="0948bc500ffcbf3f35a2c09e70cfa5a70963929d65a6b9d3343bac0020a2e5f3d4b698287acccf55f42dfa650acff892e2686c8ff6d90e78af40bc7b220f267131675c4b0c563bb1495f2f1430939de9ff31537768f5b5b1e91c24368c6ab16543fcd218dd971b68ad2c9bb733ac62a09754c939af620fdb8a70a7d9834869b3a9", 0x81}, {&(0x7f00000007c0)="85c0b331c3e16cbc8f39d7075b4462286de29e13409d9e98534b4775577e9959153c3f5086ff3c8c2d5d5ab06e115a8a916a43736ec02a0e70a1648c3f53d09421471d928575ee34bc92124defe604db1323fce0d259763ddc695bb71b8cee76e399bf7c5b0d6f834cfcad20a3d3519961ef21cf41e648d0f95e2bf4bfc3e3acfca6beaa60c91cb698646fbd89b17861fc1d7df769f121f4", 0x98}], 0x5)
splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0)
write$binfmt_misc(r3, &(0x7f0000000980), 0xfdef)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x200812, &(0x7f0000000900)={[{@dioread_nolock}, {@norecovery}, {@resgid={'resgid', 0x3d, 0xee00}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@grpid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@grpid}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@smackfsroot}, {@euid_eq}, {@dont_hash}, {@fowner_lt}]}, 0xfd, 0x5a7, &(0x7f0000001200)="$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")
r5 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
r6 = socket(0x2, 0x80805, 0x0)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x6a, @dev={0xfe, 0x80, '\x00', 0xf}, 0x8}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000001c0)=0x8)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9)
pwritev2(r5, &(0x7f0000000240)=[{0x0}], 0x1, 0x1200, 0x41001, 0x3)
clock_gettime(0x0, &(0x7f0000000140))

2m2.844824882s ago: executing program 2 (id=158):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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")
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'})
clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x9, 0xc, 0x2, 0x0, 0x0, 0x0, 0x9, 0x100, 0xffffffffffffffff, 0x0, 0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1000, 0x8, 0x100, 0x3, 0x0, 0x3})
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[], 0x28}}, 0x44001)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0)
r2 = open(&(0x7f0000000000)='./file1\x00', 0x20000, 0x238)
ftruncate(r2, 0x2007ffb)
sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x58}}}}, [@NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x40840)
sendfile(r2, r2, 0x0, 0x1000000201005)
ftruncate(r2, 0x6)

2m2.624994474s ago: executing program 2 (id=162):
r0 = gettid()
remap_file_pages(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x800003, 0x1df, 0x80000)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = socket$kcm(0x2, 0x1, 0x84)
r3 = socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
syz_clone(0x24100000, 0x0, 0x0, 0x0, 0x0, 0x0)
mbind(&(0x7f0000ff4000/0x9000)=nil, 0x9000, 0x3, &(0x7f0000000480)=0x3ff, 0x7, 0x6)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@getchain={0x24, 0x66, 0xfcd66a900070b359, 0x78bd27, 0xec, {0x0, 0x0, 0x0, r4, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000400000000000d00000000000000000000201004000000000000000000000903000000000000006100"], 0x0, 0x52}, 0x20)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc)
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@nojournal_checksum}]}, 0x1, 0x5bc, &(0x7f0000001440)="$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")
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000130001002bbd7000f8dbdf2504004f8008003300", @ANYBLOB="1e0025800c002e8008009200d40800000c0013"], 0x3c}], 0x1, 0x0, 0x0, 0x8000}, 0x8880)
getdents(0xffffffffffffffff, 0x0, 0x0)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400), 0x2b0402)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f0000000440)={0x20, @tick=0x3, 0x7, {0x8, 0x5}, 0xd, 0x1, 0x7d})
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r7, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3a0, 0xe8, 0x1d0, 0xe8, 0x2b8, 0x2b8, 0x2b8, 0x7fffffe, 0x0, {[{{@arp={@private=0xa010100, @empty, 0x0, 0x0, 0xa, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x8, 0x4b8, 0x1}}}, {{@arp={@remote, @empty, 0x0, 0x0, 0x0, 0x3, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'bridge_slave_0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f0)

2m1.567618936s ago: executing program 1 (id=168):
r0 = socket$kcm(0x2, 0x1000000000000002, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000180)=@urb_type_bulk={0x3, {0x3}, 0xfffffffe, 0x20, &(0x7f0000000040)='D', 0x1, 0x7, 0x10001, 0x3, 0x1, 0x40, 0x0})
bind$inet(r2, 0x0, 0x0)
fcntl$dupfd(r2, 0x406, r2)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x4, 0xe4}]}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r5 = fcntl$dupfd(r2, 0x406, r2)
syz_genetlink_get_family_id$devlink(&(0x7f0000000440), r5)
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x55}, 0x0)
ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000100)={0x8, &(0x7f00000000c0)=[{0x7, 0x0, 0x7, 0x3}, {0x4, 0x3, 0x6, 0x7}, {0x7, 0x1, 0x4, 0x2}, {0x6, 0x1, 0x0, 0xffffffff}, {0x3, 0x3, 0x2, 0x6}, {0x7, 0x2, 0x0, 0x9}, {0x9, 0x0, 0x2, 0xb3}, {0x3, 0x3, 0x8, 0x2}]})
setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f00000002c0)=r1, 0x4)
sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000000)="813e785600", 0x5}], 0x1, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x40}, @dev={0xac, 0x14, 0x14, 0x3a}}}}], 0x20}, 0x4840)

2m1.421480114s ago: executing program 1 (id=170):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf40000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f00000002c0)={0x4, {{0xa, 0x4e21, 0x7f, @empty, 0x1}}}, 0x88)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x2003, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x24, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x7c2d2952}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x1}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x4}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x3}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000080}, 0x4000010)

2m1.411718155s ago: executing program 1 (id=171):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket(0xa, 0x5, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x33, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5871, 0x1, @perf_config_ext={0x6, 0x400000008}, 0x4c58, 0x6, 0x0, 0x1, 0xe, 0x20005, 0x10, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000000))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0)
gettimeofday(0x0, &(0x7f0000000ac0))
syz_clone(0x20400, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$inet_sctp(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f0000000140)=[@init={0x18, 0x84, 0x0, {0x0, 0x4, 0x0, 0x7f}}], 0x18, 0x4855}, 0x24000052)
ioctl$SIOCPNDELRESOURCE(r1, 0x89ef, &(0x7f0000000000)=0xb7)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00', r0}, 0x18)

2m1.335283059s ago: executing program 1 (id=172):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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")
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'})
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[], 0x28}}, 0x44001)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0)
r2 = open(&(0x7f0000000000)='./file1\x00', 0x20000, 0x238)
ftruncate(r2, 0x2007ffb)
sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x58}}}}, [@NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x40840)
sendfile(r2, r2, 0x0, 0x1000000201005)
ftruncate(r2, 0x6)

2m1.221356836s ago: executing program 1 (id=173):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x6f5e, 0x14dc01)
ioctl$SG_IO(r1, 0x2285, 0x0)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0)
write$cgroup_int(r2, 0x0, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0xfb, 0x7fff0000}]})
sysinfo(&(0x7f00000000c0)=""/8)
sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56)
sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000003f80)=[{&(0x7f0000000c80)="0b0ec2a1", 0x4}], 0x1}}], 0x1, 0x48800)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000480)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0}, &(0x7f0000000300)=0x40)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
read$hiddev(r3, &(0x7f00000012c0)=""/4102, 0x1006)
getsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000100), &(0x7f0000000180)=0x4)

2m0.967515971s ago: executing program 2 (id=174):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
rt_sigsuspend(&(0x7f0000000080)={[0x6]}, 0x8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xa, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x9e}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94)
r0 = socket$tipc(0x1e, 0x2, 0x0)
r1 = syz_io_uring_setup(0xed0, &(0x7f0000000400)={0x0, 0x6e2, 0x10300, 0x2}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r1, 0xa3d, 0x0, 0x0, 0x0, 0xff39)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000540)=0xfffffff8, 0x4)
unshare(0x28000600)
io_uring_setup(0x76ad, &(0x7f0000000100)={0x0, 0xca0b, 0x2, 0x2, 0x3dd})

2m0.932722162s ago: executing program 32 (id=174):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
rt_sigsuspend(&(0x7f0000000080)={[0x6]}, 0x8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xa, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x9e}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94)
r0 = socket$tipc(0x1e, 0x2, 0x0)
r1 = syz_io_uring_setup(0xed0, &(0x7f0000000400)={0x0, 0x6e2, 0x10300, 0x2}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r1, 0xa3d, 0x0, 0x0, 0x0, 0xff39)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000540)=0xfffffff8, 0x4)
unshare(0x28000600)
io_uring_setup(0x76ad, &(0x7f0000000100)={0x0, 0xca0b, 0x2, 0x2, 0x3dd})

2m0.731040154s ago: executing program 1 (id=176):
socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)
unshare(0x400)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x88fe)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
recvmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f00000004c0)=""/4091, 0xffb}], 0x1}}], 0x1, 0x2, 0x0)
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90124fc60100c03400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@ipv6_newrule={0x24, 0x20, 0x2d2c6d60ea1da725, 0x70bd26, 0x25dfdbfd, {0xa, 0x0, 0x0, 0x80, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e23, 0x4e23}}]}, 0x24}}, 0x0)
r6 = socket(0x10, 0x2, 0x0)
sendto$inet6(r6, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020506050e0204094300080004000000040010000d0068d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f25232500000", 0x78, 0x0, 0x0, 0x0)

2m0.712244305s ago: executing program 33 (id=176):
socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)
unshare(0x400)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x88fe)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
recvmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f00000004c0)=""/4091, 0xffb}], 0x1}}], 0x1, 0x2, 0x0)
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90124fc60100c03400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@ipv6_newrule={0x24, 0x20, 0x2d2c6d60ea1da725, 0x70bd26, 0x25dfdbfd, {0xa, 0x0, 0x0, 0x80, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e23, 0x4e23}}]}, 0x24}}, 0x0)
r6 = socket(0x10, 0x2, 0x0)
sendto$inet6(r6, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020506050e0204094300080004000000040010000d0068d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f25232500000", 0x78, 0x0, 0x0, 0x0)

1m59.827334196s ago: executing program 3 (id=184):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf40000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f00000002c0)={0x4, {{0xa, 0x4e21, 0x7f, @empty, 0x1}}}, 0x88)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x2003, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x24, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x7c2d2952}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x1}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x4}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x3}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000080}, 0x4000010)

1m59.722127962s ago: executing program 3 (id=185):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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")
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket(0x1d, 0x2, 0x6)
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[], 0x28}}, 0x44001)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0)
r2 = open(&(0x7f0000000000)='./file1\x00', 0x20000, 0x238)
ftruncate(r2, 0x2007ffb)
sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x58}}}}, [@NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x40840)
sendfile(r2, r2, 0x0, 0x1000000201005)
ftruncate(r2, 0x6)

1m59.558777471s ago: executing program 3 (id=186):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0xc0, 0x2, 0xbffff010}, {0x6}]}, 0x10)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000080)={0x8, 'syz_tun\x00', {'pimreg1\x00'}, 0x7})
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x5)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0)
socket(0x0, 0x80000, 0x81)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8911, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0xffffff52, 0x1, 0x6, 0x1, 0x200, 0x3ff, 0x151}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
socket$packet(0x11, 0x3, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x4)
write(r2, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)

1m58.913618519s ago: executing program 3 (id=189):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001800), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}})
ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, &(0x7f0000000400))
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x40, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001300010300000000fcdbdf250c00000015634cc980633a9e578fbff6ac72884d920057a12dd50193c364c0bd3a1e43d7e52827bc57538d00e58270bdb476f52587e4fe2da6e1788fa1a78e751c2f1ecd321e58c6a9c2d64324f2d93a305e18675b35a1c0259e"], 0x14}}, 0x0)
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff00"/131], 0x119)
r2 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042)
close(0x3)
dup(r2)
syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00')
bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50)
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6tnl0\x00', <r4=>0x0, 0x29, 0x5, 0x20, 0x21b, 0x4, @mcast2, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x20, 0x21, 0x0, 0x1}})
sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000640)=ANY=[@ANYBLOB="4c000000120000082bbd7000fcdbdf250b0107604e204e210300000004000000000800000a00000000000000070000000000000006000000", @ANYRES32=r4, @ANYBLOB="ff01027dc467f32ea70e080007000000"], 0x4c}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
socket$inet_udp(0x2, 0x2, 0x0)

1m58.913276119s ago: executing program 34 (id=189):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001800), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}})
ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, &(0x7f0000000400))
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x40, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001300010300000000fcdbdf250c00000015634cc980633a9e578fbff6ac72884d920057a12dd50193c364c0bd3a1e43d7e52827bc57538d00e58270bdb476f52587e4fe2da6e1788fa1a78e751c2f1ecd321e58c6a9c2d64324f2d93a305e18675b35a1c0259e"], 0x14}}, 0x0)
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff00"/131], 0x119)
r2 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042)
close(0x3)
dup(r2)
syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00')
bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50)
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6tnl0\x00', <r4=>0x0, 0x29, 0x5, 0x20, 0x21b, 0x4, @mcast2, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x20, 0x21, 0x0, 0x1}})
sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000640)=ANY=[@ANYBLOB="4c000000120000082bbd7000fcdbdf250b0107604e204e210300000004000000000800000a00000000000000070000000000000006000000", @ANYRES32=r4, @ANYBLOB="ff01027dc467f32ea70e080007000000"], 0x4c}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
socket$inet_udp(0x2, 0x2, 0x0)

1m49.747087778s ago: executing program 6 (id=238):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x1c, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x28}, {}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_query], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='GPL\x00', 0xfeffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94)
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200))
epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
syz_usbip_server_init(0x1)
syz_usbip_server_init(0x1)
syz_usbip_server_init(0x2)
syz_usbip_server_init(0x1)
syz_usbip_server_init(0x1)
syz_usbip_server_init(0x1)
syz_usbip_server_init(0x0)
syz_usbip_server_init(0x0)
syz_usbip_server_init(0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_io_uring_setup(0x7045, &(0x7f0000000100)={0x0, 0x2b13, 0x10100, 0x0, 0x25b, 0x0, r1}, &(0x7f0000000180)=<r3=>0x0, &(0x7f0000000300)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x11, 0x2007, @fd_index=0x3, 0x7, 0x0, 0x0, 0x1, 0x0, {0x1}})
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x49, 0x0, 0x0, 0x0, 0x12345})
io_uring_enter(r2, 0x7330, 0x0, 0x0, 0x0, 0x0)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002c68204aebdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/power/pm_async', 0x410500, 0x1)

1m48.707108568s ago: executing program 6 (id=248):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvtap0\x00', <r1=>0x0})
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x4, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0xffffffffffffffff, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x0, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
prctl$PR_MCE_KILL(0x29, 0x1, 0x2)
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001980)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="130000004f00010000000200ffdbdf2502000000"], 0x14}}, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$IP_VS_SO_GET_VERSION(r3, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000040)=0x40)

1m48.573823976s ago: executing program 6 (id=249):
r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
r1 = socket$phonet(0x23, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00'})
socket$packet(0x11, 0x3, 0x300)
timerfd_create(0x0, 0x800)
getdents64(0xffffffffffffffff, 0xffffffffffffffff, 0x43)

1m48.573123285s ago: executing program 6 (id=250):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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")
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket(0x1d, 0x2, 0x6)
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[], 0x28}}, 0x44001)
r1 = syz_genetlink_get_family_id$nl80211(0x0, r0)
r2 = open(&(0x7f0000000000)='./file1\x00', 0x20000, 0x238)
ftruncate(r2, 0x2007ffb)
sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x58}}}}, [@NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x40840)
sendfile(r2, r2, 0x0, 0x1000000201005)
ftruncate(r2, 0x6)

1m48.496501449s ago: executing program 6 (id=252):
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
pidfd_send_signal(0xffffffffffffffff, 0x4, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x110140, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x2})
r3 = socket$netlink(0x10, 0x3, 0x0)
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=""/17, 0x11}], 0x1, 0x2, 0x328)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})

1m47.637146519s ago: executing program 6 (id=259):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvtap0\x00', <r1=>0x0})
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x4, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0xffffffffffffffff, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x0, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
prctl$PR_MCE_KILL(0x29, 0x1, 0x2)
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001980)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$nl_generic(r2, 0x0, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$IP_VS_SO_GET_VERSION(r3, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000040)=0x40)

1m47.610425241s ago: executing program 35 (id=259):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvtap0\x00', <r1=>0x0})
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x4, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0xffffffffffffffff, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x0, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
prctl$PR_MCE_KILL(0x29, 0x1, 0x2)
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001980)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$nl_generic(r2, 0x0, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$IP_VS_SO_GET_VERSION(r3, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000040)=0x40)

3.262194331s ago: executing program 4 (id=1591):
r0 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x60, 0x80000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3, 0x14}, &(0x7f0000001fee)='R\t\xff\x7fst\xe3c*sgrVid:\x00e', 0x0)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0xc64}, 0x10014, 0x0, 0x800000, 0x0, 0x4, 0x2, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00'})
socket(0x1e, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000200)=0x8010, 0x4)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={0xffffffffffffffff, r4, 0x4, r2}, 0x10)
ftruncate(r1, 0x8800000)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x53)
close(r5)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
execveat(r1, 0x0, 0x0, 0x0, 0x400)
bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
setsockopt$inet_tcp_int(r6, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4)
connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x8001}]}, 0x10)
recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
sendfile(r5, r1, 0x0, 0x578410ed)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000100)=0x21a, 0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@typedef={0x3, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x5f, 0x0]}}, 0x0, 0x28, 0x0, 0x1}, 0x28)

3.057095053s ago: executing program 8 (id=1597):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe0e41b0000900ac00060411000000040012000a0005000248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db7259826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d00"/216, 0x1c}], 0x1}, 0x0)

2.981547408s ago: executing program 8 (id=1598):
accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x60, 0x80000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3, 0x14}, &(0x7f0000001fee)='R\t\xff\x7fst\xe3c*sgrVid:\x00e', 0x0)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0xc64}, 0x10014, 0x0, 0x800000, 0x0, 0x4, 0x2, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', <r3=>0x0})
r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r1, r3, 0x25, 0x2, @val=@perf_event={0x11}}, 0x18)
socket(0x1e, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000200)=0x8010, 0x4)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r4, r5, 0x4, r1}, 0x10)
ftruncate(r0, 0x8800000)
r6 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x53)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
execveat(r0, 0x0, 0x0, 0x0, 0x400)
bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4)
connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x8001}]}, 0x10)
recvfrom$inet(r7, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
sendfile(r6, r0, 0x0, 0x578410ed)

2.965996678s ago: executing program 7 (id=1599):
r0 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x60, 0x80000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3, 0x14}, &(0x7f0000001fee)='R\t\xff\x7fst\xe3c*sgrVid:\x00e', 0x0)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0xc64}, 0x10014, 0x0, 0x800000, 0x0, 0x4, 0x2, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00'})
socket(0x1e, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000200)=0x8010, 0x4)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={0xffffffffffffffff, r4, 0x4, r2}, 0x10)
ftruncate(r1, 0x8800000)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x53)
close(r5)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
execveat(r1, 0x0, 0x0, 0x0, 0x400)
bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
setsockopt$inet_tcp_int(r6, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4)
connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x8001}]}, 0x10)
recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
sendfile(r5, r1, 0x0, 0x578410ed)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000100)=0x21a, 0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@typedef={0x3, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x5f, 0x0]}}, 0x0, 0x28, 0x0, 0x1}, 0x28)

2.401308871s ago: executing program 4 (id=1600):
r0 = open(&(0x7f0000000280)='.\x00', 0x10000, 0x0)
fcntl$notify(r0, 0x402, 0x8)
r1 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f0000000080), 0x4)
sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x8, @mcast1, 0x7, 0xffffffff}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000780)="f4000900062b3b25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000140))
write$binfmt_elf64(r2, &(0x7f0000000040)=ANY=[@ANYRESOCT=r1], 0x78)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x13, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)

2.143201466s ago: executing program 0 (id=1601):
r0 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x60, 0x80000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3, 0x14}, &(0x7f0000001fee)='R\t\xff\x7fst\xe3c*sgrVid:\x00e', 0x0)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0xc64}, 0x10014, 0x0, 0x800000, 0x0, 0x4, 0x2, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', <r4=>0x0})
r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r2, r4, 0x25, 0x2, @val=@perf_event={0x11}}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000200)=0x8010, 0x4)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r5, r6, 0x4, r2}, 0x10)
ftruncate(r1, 0x8800000)
r7 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x53)
close(r7)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
execveat(r1, 0x0, 0x0, 0x0, 0x400)
bind$inet(r8, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
setsockopt$inet_tcp_int(r8, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4)
connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3)
setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x8001}]}, 0x10)
recvfrom$inet(r8, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
sendfile(r7, r1, 0x0, 0x578410ed)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000100)=0x21a, 0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@typedef={0x3, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x5f, 0x0]}}, 0x0, 0x28, 0x0, 0x1}, 0x28)

2.053396831s ago: executing program 8 (id=1602):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680))
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x7, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x89f9b000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r0 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110, 0xe}], 0x10}, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000680), 0x1, 0x482, &(0x7f0000001040)="$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")
open_by_handle_at(0xffffffffffffffff, 0x0, 0x103481)
membarrier(0x40, 0x0)
membarrier(0x20, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@cgroup, 0x15, 0x0, 0xfffffffc, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0], <r1=>0x0}, 0x40)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r2, <r3=>0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x4, &(0x7f0000002500)=""/4105, 0x0, 0x68}, 0x94)
r4 = creat(&(0x7f0000000200)='./file1\x00', 0x12e)
close(r4)
pselect6(0x65, &(0x7f0000000180)={0xfffffffffffffffd, 0x3}, 0x0, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x2208840, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r4}})
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@map=r3, 0xffffffffffffffff, 0x25, 0x0, 0x0, @void, @value=r4, @void, @void, r1}, 0x20)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x11681, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

1.760961948s ago: executing program 4 (id=1603):
socket$nl_sock_diag(0x10, 0x3, 0x4)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x3c673a39b90bcfd2, &(0x7f0000000040), 0x1, 0xbc8, &(0x7f0000001240)="$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")
shutdown(0xffffffffffffffff, 0x2)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x9}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x40}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8070}, 0x20004010)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x100000000000009, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x8312, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r2)
sendmsg$NFC_CMD_SE_IO(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x28, r3, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_SE_APDU={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0xa88, 0x8406, 0x9, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x1218088, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0x2a, 0x2c2, &(0x7f00000008c0)="$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")
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86)

1.708167381s ago: executing program 7 (id=1604):
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140))
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94)
r1 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x213a, 0x13580, 0x0, 0x387}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r1, 0x0, 0x0})
io_uring_enter(r1, 0x14, 0xb9c, 0x2b, 0x0, 0x18)
chdir(&(0x7f00000003c0)='./bus\x00')
unlinkat(r0, &(0x7f0000000040)='./bus\x00', 0x200)
unlink(&(0x7f0000000000)='./file1\x00')
r4 = socket$inet(0x2, 0x2, 0x1)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x522, &(0x7f00000006c0)="$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")
sendmsg(r4, &(0x7f00000002c0)={&(0x7f0000000340)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000500)="521c6c735b0cce908ca287c060ecb348494b285dbf407ae09e83ffdad9244be043cfea7fd3dfb7f5be0d585886bbeacc8e4efad8cae802d868d848dd368a1e9c2ae3452fb8597231", 0x48}, {&(0x7f0000000580)="7487e3e4c63dc5eb032c62a795637d8d7d80a1af561107c4d5fb2ccdfda7e560ba897e6f9ea658e6c0024b4920317c8e0fdbb558a666bd243febfb5c28c63744ef80b5ea88f229c6935cb8e0da8912d3011bf381e4132e1925a0ddf3560dcd8688787a27d01794", 0x67}], 0x2, &(0x7f0000000c00)=[{0x48, 0x11, 0x1, "5aff69c00793c07b6a46a4ccb412ed57af6eb90a3c1e0a439655511e82655e152f57cd7222630c3d1a7454724a47e7deb7ebc50d54"}], 0x48}, 0x24004980)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
eventfd(0x2)
pselect6(0x40, &(0x7f0000000740)={0x8, 0x100000000, 0x8, 0xb2b6, 0x7fff, 0x9, 0xf676, 0x5}, 0x0, 0x0, 0x0, 0x0)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="1709a70000000000000101000000080009003f00000014001f00000000000000000000100000000000011400200000000000000000000000ffff000000000500070000000000060002000100000008000a"], 0x5c}}, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x6, &(0x7f0000000000)=0x9, 0x8, 0x0)
get_mempolicy(0x0, 0x0, 0xffffffffffffffff, &(0x7f0000365000/0x3000)=nil, 0x2)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
chdir(&(0x7f0000000180)='./file1\x00')
fstat(r7, &(0x7f0000000640))
fchown(r7, 0x0, 0xee01)

1.643357424s ago: executing program 5 (id=1605):
r0 = socket(0x10, 0x3, 0x0)
socket(0x400000000010, 0x3, 0x0)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=<r4=>0x0)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
write$nci(r1, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r2], 0x5)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x5}, 0x10)
r5 = getpid()
syz_pidfd_open(r5, 0x0)
r6 = socket(0x10, 0x2, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r7=>0x0}, 0x4000)
setresuid(r7, r7, 0x0)
fchown(r6, r7, 0x0)
stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
statx(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x800, 0x40, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
fstat(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r10=>0x0})
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x8400, &(0x7f0000000e40)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',nodevmap,directio,dfltgid=', @ANYRESHEX, @ANYBLOB="2c6163636573733d636c69656e742c6f626a5f757365723dd12e292c657569643c", @ANYRESDEC=r7, @ANYBLOB=',fsname=%,euid<', @ANYRESDEC=r8, @ANYBLOB=',obj_type=V),uid>', @ANYRESDEC=r9, @ANYBLOB="2c6673636f6e746578743d73797361646d5f752c7569643d652e0b54da4a5d6ccf9e627e27039a79eed09f37e5ae46591d0bb2c1a8347e453ec24217eb13eb34484284f07b0dab6238a3bbfd08465691c869e4bfd4ba77de4b3a2d8cc4a7a0f6ef7e37057a6290e67247abe90ae90377b110c9494b738a52e51dbaf506f3cf8c8b2b7ca3fd57d8f8051a2d73b55243295b647e5d45994fd866c5d3f7ae63000000000000000000", @ANYRESDEC=r10, @ANYBLOB=',\x00'])

1.603596597s ago: executing program 7 (id=1606):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
getsockopt$inet6_tcp_buf(r0, 0x29, 0x3, 0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffd96) (fail_nth: 2)

1.5497661s ago: executing program 5 (id=1607):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x6, 0x8604, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, @perf_bp={0x0, 0x3}, 0x8000, 0xfffc, 0x0, 0x4, 0x6916, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4)

1.21174246s ago: executing program 7 (id=1608):
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]})
set_mempolicy(0x2002, &(0x7f0000000000)=0x9, 0x9)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2)
syncfs(r1)
pipe(&(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write$P9_RGETLOCK(r3, &(0x7f0000000b80)=ANY=[@ANYRESDEC=0x0, @ANYBLOB="405cf8d098f68efd9f85db1af1ec3626f6dcd5a18d0c7afdae5bd696611d416ace7d9a072780d8723e8ef367e28304387b988acb3406e634dcc7920d967a0279d25f8eb2ff415b7ebf4ac419637553fb9b77f915f9780e874bc2e5e8c25a48f7c0368f23a48a53cd972b6384734e229d8469e533dc64f7078d4375", @ANYRES64=r0, @ANYRES32=r2, @ANYRESHEX=r1, @ANYRES64=r0, @ANYRESDEC=r3, @ANYRESDEC, @ANYRESOCT=r0], 0x200002e6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008001}, 0x0)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0)
r5 = openat$cgroup_ro(r3, &(0x7f0000000180)='freezer.parent_freezing\x00', 0x26e1, 0x0)
syz_open_dev$hidraw(&(0x7f0000000140), 0x4c, 0x141003)
syz_read_part_table(0x5be, &(0x7f00000005c0)="$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")
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x10c, &(0x7f00000002c0)=0x8, 0x0, 0x4)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r5, 0x4)
sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x408c4)
ioctl$SIOCX25CALLACCPTAPPRV(r4, 0x89e8)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000400)="a5d0", 0x1b8a}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc)
r6 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc))
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r6, r2, 0x0, 0xd, &(0x7f0000000000)='/dev/hidraw#\x00'}, 0x30)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5000000072292a9923e06680294f0f08eec16e25b60eb86f7d5970248c55861121afd5f751df69e07bea63773e50", @ANYRES16=r7, @ANYBLOB="00032cbd7000fddbdf256a0000000a000600ffffffffffff00000500d200080000000a000600ffffffffffff00000a000600ffffffffffff00000500d200040000000500d20006000000"], 0x50}, 0x1, 0x0, 0x0, 0x40010}, 0x8000)
removexattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280)=@known='system.sockprotoname\x00')

1.19417027s ago: executing program 5 (id=1609):
renameat2(0xffffffffffffffff, &(0x7f00000010c0)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0x0, 0x7)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r0 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
ptrace(0x10, r0)
ptrace$peeksig(0x4209, r0, &(0x7f0000000140)={0x0, 0x0, 0x4e}, &(0x7f0000000fc0)) (async)
ptrace$peeksig(0x4209, r0, &(0x7f0000000140)={0x0, 0x0, 0x4e}, &(0x7f0000000fc0))
r1 = socket$inet6(0xa, 0x3, 0x88)
bind$inet6(r1, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x21, 0x1, 0x0, 0x0, 0x0, 0x400000007, 0x1f0519, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xa, 0x2}, 0xe005, 0x200, 0xb, 0x8, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x21, 0x1, 0x0, 0x0, 0x0, 0x400000007, 0x1f0519, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xa, 0x2}, 0xe005, 0x200, 0xb, 0x8, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r2, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x5, 0x6}, 0x120, 0x10000, 0x33f8, 0x1, 0x8, 0x20007, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r2, 0x2) (async)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x5, 0x6}, 0x120, 0x10000, 0x33f8, 0x1, 0x8, 0x20007, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r2, 0x2)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x40000000000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x40000000000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) (async)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0)
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000001d80)='bbr', 0x3)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r4, r3, 0x2) (async)
close_range(r4, r3, 0x2)
close_range(r7, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r8 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8)
add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f00000001c0)={'fscrypt:', @auto=[0x31, 0x35, 0x35, 0x61, 0x65, 0x31, 0x37, 0x64, 0x30, 0x38, 0x33, 0x30, 0x34, 0x62, 0x32, 0x31]}, &(0x7f0000000400)={0x0, "16fbdefaa3e4ff174f32d83ad36f477ac1a510209b33bcb92b5bd3e9b14dd4059d6344365acef3af13acacc9780fa6a13b5b532eeb145473ce3389a23530bacf", 0x23}, 0x48, r8)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4002, &(0x7f0000000080)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@bh}, {@grpquota}, {@mblk_io_submit}]}, 0x1, 0xbd2, &(0x7f0000000540)="$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")

1.03509983s ago: executing program 5 (id=1610):
r0 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x60, 0x80000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3, 0x14}, &(0x7f0000001fee)='R\t\xff\x7fst\xe3c*sgrVid:\x00e', 0x0)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0xc64}, 0x10014, 0x0, 0x800000, 0x0, 0x4, 0x2, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00'})
socket(0x1e, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000200)=0x8010, 0x4)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={0xffffffffffffffff, r4, 0x4, r2}, 0x10)
ftruncate(r1, 0x8800000)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x53)
close(r5)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
execveat(r1, 0x0, 0x0, 0x0, 0x400)
bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
setsockopt$inet_tcp_int(r6, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4)
connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x8001}]}, 0x10)
recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
sendfile(r5, r1, 0x0, 0x578410ed)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000100)=0x21a, 0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@typedef={0x3, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x5f, 0x0]}}, 0x0, 0x28, 0x0, 0x1}, 0x28)

951.877834ms ago: executing program 0 (id=1611):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x3}, 0x50)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x6004, 0x1)
r0 = epoll_create(0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r1)
sendmsg$NFC_CMD_LLC_SDREQ(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf2513000000080001"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x24004000)
r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f00000000c0)={0x6})
epoll_pwait(r0, &(0x7f0000000100)=[{}], 0x1, 0x9c28, 0x0, 0x0)
creat(&(0x7f00000000c0)='./file0\x00', 0xf4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)

891.646478ms ago: executing program 4 (id=1612):
accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x60, 0x80000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3, 0x14}, &(0x7f0000001fee)='R\t\xff\x7fst\xe3c*sgrVid:\x00e', 0x0)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0xc64}, 0x10014, 0x0, 0x800000, 0x0, 0x4, 0x2, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', <r3=>0x0})
r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r1, r3, 0x25, 0x2, @val=@perf_event={0x11}}, 0x18)
socket(0x1e, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000200)=0x8010, 0x4)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r4, r5, 0x4, r1}, 0x10)
ftruncate(r0, 0x8800000)
r6 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x53)
close(r6)
execveat(r0, 0x0, 0x0, 0x0, 0x400)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4)
connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x8001}]}, 0x10)
sendfile(r6, r0, 0x0, 0x578410ed)

816.977692ms ago: executing program 4 (id=1613):
accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x60, 0x80000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0)
request_key(0x0, &(0x7f0000001ffb)={'syz', 0x3, 0x14}, &(0x7f0000001fee)='R\t\xff\x7fst\xe3c*sgrVid:\x00e', 0x0)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0xc64}, 0x10014, 0x0, 0x800000, 0x0, 0x4, 0x2, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r1, 0x0, 0x25, 0x2, @val=@perf_event={0x11}}, 0x18)
socket(0x1e, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000200)=0x8010, 0x4)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r3, r4, 0x4, r1}, 0x10)

816.230062ms ago: executing program 0 (id=1614):
socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x1ff, 0x80000000}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=<r1=>0x0)
ptrace$ARCH_SHSTK_DISABLE(0x1e, r1, 0x0, 0x5002)
write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[], 0xfe33)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
sendmsg$tipc(r2, &(0x7f00000008c0)={&(0x7f0000000600)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80)
r3 = dup3(0xffffffffffffffff, r2, 0x0)
setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88)

728.851738ms ago: executing program 4 (id=1615):
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]})
set_mempolicy(0x2002, &(0x7f0000000000)=0x9, 0x9)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2)
syncfs(r1)
pipe(&(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write$P9_RGETLOCK(r3, &(0x7f0000000b80)=ANY=[@ANYRESDEC=0x0, @ANYBLOB="405cf8d098f68efd9f85db1af1ec3626f6dcd5a18d0c7afdae5bd696611d416ace7d9a072780d8723e8ef367e28304387b988acb3406e634dcc7920d967a0279d25f8eb2ff415b7ebf4ac419637553fb9b77f915f9780e874bc2e5e8c25a48f7c0368f23a48a53cd972b6384734e229d8469e533dc64f7078d4375", @ANYRES64=r0, @ANYRES32=r2, @ANYRESHEX=r1, @ANYRES64=r0, @ANYRESDEC=r3, @ANYRESDEC, @ANYRESOCT=r0], 0x200002e6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008001}, 0x0)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0)
r5 = openat$cgroup_ro(r3, &(0x7f0000000180)='freezer.parent_freezing\x00', 0x26e1, 0x0)
syz_open_dev$hidraw(&(0x7f0000000140), 0x4c, 0x141003)
syz_read_part_table(0x5be, &(0x7f00000005c0)="$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")
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x10c, &(0x7f00000002c0)=0x8, 0x0, 0x4)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r5, 0x4)
sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x408c4)
ioctl$SIOCX25CALLACCPTAPPRV(r4, 0x89e8)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000400)="a5d0", 0x1b8a}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc)
r6 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc))
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r6, r2, 0x0, 0xd, &(0x7f0000000000)='/dev/hidraw#\x00'}, 0x30)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010029b57000fcdbdf251200000008000300", @ANYRES32, @ANYBLOB="0a000600082211000001000005001900010000000600120109"], 0x40}, 0x1, 0x0, 0x0, 0x4080}, 0x40800)
sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5000000072292a9923e06680294f0f08eec16e25b60eb86f7d5970248c55861121afd5f751df69e07bea63773e50", @ANYRES16=r7, @ANYBLOB="00032cbd7000fddbdf256a0000000a000600ffffffffffff00000500d200080000000a000600ffffffffffff00000a000600ffffffffffff00000500d200040000000500d20006000000"], 0x50}, 0x1, 0x0, 0x0, 0x40010}, 0x8000)
removexattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280)=@known='system.sockprotoname\x00')

728.074888ms ago: executing program 8 (id=1616):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x4e, &(0x7f0000000080)={@link_local, @link_local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x18, 0x11, 0x25b4e59c81b60c2e, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[], {0x4e20, 0xe22, 0x18, 0x0, @wg=@data={0x4, 0x9, 0x3}}}}}}}, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000b00), 0x1c87678a, 0x80400)
r3 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000040)=<r4=>0x0, &(0x7f00000000c0)=0x4)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@multicast2}, 0x0, @in=@multicast1}}, &(0x7f0000000240)=0xe8)
r6 = socket(0x28, 0x3, 0x3ff)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r7=>0x0}, &(0x7f0000cab000)=0xc)
setresgid(r7, 0xffffffffffffffff, 0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r8, 0x0, 0x48b, &(0x7f0000000280)={0x0, 'syz_tun\x00', 0x1}, 0x18)
fchown(r3, r5, r7)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x639, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, 0x41, 0xe208}, [@IFLA_TXQLEN={0x8, 0xd, 0x36dd3e8e}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000804}, 0x20000000)
ioctl$BLKSECTGET(r2, 0x1267, &(0x7f0000000b40))

711.004929ms ago: executing program 0 (id=1617):
r0 = inotify_init1(0x81000)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000500)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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")
inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x80000401)
r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000700), 0x18)
utimensat(r1, 0x0, &(0x7f0000000880)={{0x0, 0xea60}, {0x0, 0x3ffffffe}}, 0x0)
r2 = socket$tipc(0x1e, 0x2, 0x0)
unshare(0x26020480)
getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x3, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000180)='./file1\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x35d, &(0x7f0000000f00)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0)
pwrite64(r3, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x100004, 0x4, 0x4, 0x1, 0x1}, 0x50)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000001ec0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r5, 0x1, 0x70bd25, 0x0, {{}, {}, {0x5, 0x19, {0x1006, 0x4000001, 0x8, 0x5}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000)
r6 = socket$kcm(0x2, 0x3, 0x84)
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0xfffffffd, 0x6, 0x5, 0xa, 0x8001, 0x0, 0x0, 0x0, 0x4713}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
chown(&(0x7f0000001140)='./cgroup.cpu/cgroup.procs\x00', 0xffffffffffffffff, 0x0)
sendmsg$inet(r6, &(0x7f0000000700)={&(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="280000000000000000000000070000000717a87f000001ac141400e0000001ac1e0001ac1414bb011c000000000000000000000008000000", @ANYRES64=r6], 0x48}, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x541b, &(0x7f0000000640))
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$netlink(r7, &(0x7f0000002100)={0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="10ff03000000000000bd7000fddbdf254f568fe5592336049c03bf20154dbda45d"], 0x10}], 0x1, 0x0, 0x0, 0x4000}, 0x40000)
vmsplice(r2, &(0x7f0000000440)=[{&(0x7f0000000180)="18b13d0498ec16c9d403b83fd4cc13c0a50a44fab93c17a10e98ac521bf80f0c41ad8956cd83e63d030376e812ea213bef71c91de197a02f152559a130d893f8a7ddf00962c5ebafbd34509c63c0b40da2df0c954f2e980b8e23b9e45c3cb11e51de582ec7415fdc604ef30ef9d06c7edf4fa05feb45fee4a0205fe51a25e91643070f73c36116f04209cbef4fbd426aa9c06abfff6a267897ef77df22b89d8a204581713675bc4cc36ff5787595e768caee", 0xb2}, {&(0x7f0000000080)="27b5f5ee6ca69067c4eb7f3b9ceb6e26c1c0a9adffa3fe99b7949f8fc42a914da345970ce854b4970cc540ef160c3319f81cc9bd251b1256a3d44066fe5fb1982511760cee9b2c966c138377e4ed8635fa8410dd579639e07db3af11c4433d16c2c700659a8ca0c5d2942f619d30dc4f126d8107099a7ba3feb9e5a28c60", 0x7e}, {&(0x7f0000000240)="9542050934acb50d5e9246c3ae5cfe843ee931cae49813667cdc77405cc05d350cdb40cd9848855b87d38847f185f11ece4a5de6465c3c1a158b0e3af4ece2b029962e719092d8f49302b05e32f719555435241b49f6ca3d7eaed4cdaf9b57205f49298ac7fb23d22bfa93bf82db7d82a4aa12ccd972b607ef85fc9c2339158bb1993bea768f6c344684e05ee8cb6af991ad59a4a41d6deccc1f9f3d0973d7810b4aa437e7a4c21d54841b82d3c8b68fee5f031a4ab4305cb6a30d9284633447e1947bd13f22c2e94cc92766b79dbbf9666b7888f1dd54c8eb79a33e8973a1973a2477b362507361056e4b3214f43f77fa2af215cb84", 0xf6}, {&(0x7f0000000340)="4bedacad048adc266beaaa05183dd6e4a2fc4070acebfa95853df55a1306dfc7bf4d0040eb811dafd97c77883b2c6c19958db544f4ac73ffe1dff80c6c15991b2ddecc41aac109c0dde20a3862544b2757399891c170c8ed2d99a55aa37df9308373797b138fb984695a7dbc79cf5d35268bc5d6116143cf1c7d7a262bbbd8dfcddaa054d20a158d32cdcbb136ae6825406454caea7b756712e82ef97060d9b225d480bed31169de32cdb989be4256021026afb1ccd4ed714e53702636620587fe448641d232dc08854f7bf96c6ccee6d6e98f03bad8f093a4047149b5b7aa5216b88d2736c571ef54d71e1859", 0xed}, {&(0x7f0000001b40)="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", 0x1000}, {&(0x7f0000000580)="803a18facf7e0ecfb467fe834e06a1db99776b2c07ad2228ddd5cf4f5c0431f9c1e844097047d0614e27d429bf2e3a1bbb9077bff84cb27fa44b45f5b33c16489051b5ece27af697e0af98a7ff6e8edb666664e0295918d0264247068b5f640d84624e4272b9f11950677921fda63870e68e40cfa7bc3b831c543fc60f46ed61081b852c95590acc5e902391724a1b1a59aacb19547399abfd09713df949879e318aa61ecbace5b3f203759ce1336d4fb704180ebdb13ef02424ea8148a433301c4d0cf1ae5329b9a0bf742e4e8b213a624b2fd6478a864172d01e1f6a77f08fbbb7e5", 0xe3}], 0x6, 0x7)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r8, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10)
open_by_handle_at(r2, &(0x7f00000004c0)=@ceph_nfs_confh={0x10, 0x2, {0x81, 0x2}}, 0x4000)

507.54502ms ago: executing program 8 (id=1618):
r0 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0xa, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000001240)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)=""/85, 0x55}, {&(0x7f00000000c0)=""/31, 0x1f}], 0x2, &(0x7f0000000240)=""/46, 0x2e}, 0x40010160)

386.498077ms ago: executing program 8 (id=1619):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd70"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4040)
pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x75a109182a98b499}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000000906010100000000000000000a0000060900020073797a3000000000"], 0x20}, 0x1, 0x0, 0x0, 0x20000001}, 0xf040e80629df1661)
write$selinux_load(r1, &(0x7f0000000080)={0xf97cff8c, 0x8, 'SE Linux', "22eca2617f0e761707636b8eb153c24181fc11cd03d4861576cbf0b201ce273533f543b51dd5489d03467bef8fc4e8f34477d2b9268fa56f51408c58cef2488638cf93dc9682152a47b622cd4d42d4e23dfe240e2b0b050d9e73d6e8b645a80ca7f758b3c6ef976806b0659e68756ac10d6c34269ab20e84b8cc927a"}, 0x8c)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x7c0b9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x3, @perf_bp={0x0, 0x6}, 0x4, 0x9, 0xfff, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000000000)={0x3c, 0x0, 0x200, 0x70bd29, 0x25dfdbfa, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'caif0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x20048040)
getresgid(&(0x7f0000000380)=<r3=>0x0, &(0x7f00000003c0), &(0x7f0000000400))
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000418, &(0x7f0000000580)={[{@bsdgroups}, {@mblk_io_submit}, {@usrjquota}, {@noload}, {@resgid={'resgid', 0x3d, r3}}, {@inlinecrypt}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@nobarrier}]}, 0xc1, 0x7e9, &(0x7f00000017c0)="$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")
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b)

359.827029ms ago: executing program 7 (id=1620):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0xff, 0x4b4, &(0x7f0000000c80)="$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")
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x5, 0x93, &(0x7f00000005c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400000008"], 0x48)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=@newqdisc={0x50, 0x24, 0xf0b, 0x8070bd2a, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0xe8}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3}]}}]}, 0x50}}, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r5, 0x0, 0x0}, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r4)
sendmsg$TIPC_NL_NET_SET(r6, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000680)={0x8c, r7, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x43da}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4004010}, 0x80)
r8 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000280)=0x1, 0x4)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r8, 0x84, 0x71, 0x0, &(0x7f0000000300))
r9 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'hsr0\x00', <r10=>0x0})
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendto$packet(r9, &(0x7f0000000540)="86271bba8dc420f5807fb84e60d09b01", 0x10, 0x48800, &(0x7f0000000380)={0x11, 0xf5, r10, 0x1, 0x5, 0x6, @broadcast}, 0x14)
sendmsg$nl_route_sched(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0xc, 0xd}, {0x5, 0x8}, {0xb, 0x1}}}, 0x24}}, 0x20040000)

202.705368ms ago: executing program 0 (id=1621):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
creat(&(0x7f00000000c0)='./file0\x00', 0x81)
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x20, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x24}}, 0x0)

186.729579ms ago: executing program 5 (id=1622):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x40000, 0x20100000)

45.560747ms ago: executing program 5 (id=1623):
accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x60, 0x80000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3, 0x14}, &(0x7f0000001fee)='R\t\xff\x7fst\xe3c*sgrVid:\x00e', 0x0)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0xc64}, 0x10014, 0x0, 0x800000, 0x0, 0x4, 0x2, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', <r3=>0x0})
r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r1, r3, 0x25, 0x2, @val=@perf_event={0x11}}, 0x18)
socket(0x1e, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000200)=0x8010, 0x4)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r4, r5, 0x4, r1}, 0x10)
ftruncate(r0, 0x8800000)
r6 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x53)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
execveat(r0, 0x0, 0x0, 0x0, 0x400)
bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4)
connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3)
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x8001}]}, 0x10)
sendfile(r6, r0, 0x0, 0x578410ed)

37.868027ms ago: executing program 0 (id=1624):
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
unshare(0x22020600)
r4 = pidfd_getfd(r3, r3, 0x0)
fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000140)='sync\x00', 0x0, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4)
syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$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")
open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50)
statfs(&(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000780)=""/171)
quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f00000001c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000002780)={0x1ff, 0x7f, 0x0, 0x1})
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
ioctl$TUNSETTXFILTER(r6, 0x400454d1, &(0x7f0000000380)={0x0, 0x1, [@broadcast]})
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r7 = socket(0x2, 0x80805, 0x0)
setsockopt(r7, 0x84, 0x82, &(0x7f00000031c0)="1a00000002000000b1c30cdd883bf449ee661c9bdc8c10f32e2d67444b61cab2ca46973eabe01bdc09c896991684aa729712a6ca31e755daf253055a0f9063971057c172cacb9221cc65e6d83a6d7bef8d848906eda01e98988f8d6ab6981d9fd15b8a2226784f8374a19a1ff61b3ddb8a262d78c0b43aefdf6442e566aab1e8af5bacc6c7f80928df2b4af1eccc0fca851b64156b1cd933acc1b25fe78c439657883c57c620b9d3609442ddad2109c2fd8ad79403", 0xb5)
setsockopt$inet6_tcp_int(r7, 0x6, 0x3, &(0x7f0000000180)=0xfffffffd, 0x4)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x2, [{0x6, 0x3}, {0x7, 0xffffffff}, {0xa, 0x5}, {0x0, 0x3}]}]}}, &(0x7f0000000600)=""/4090, 0x46, 0xffa, 0xa, 0x1}, 0x28)
getsockopt$inet6_tcp_buf(r8, 0x29, 0x3, 0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffd96)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000340)={<r9=>0x0, @empty, @local}, &(0x7f0000000380)=0xc)
r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='syscall\x00')
pread64(r10, &(0x7f0000002180)=""/4105, 0x137, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001600)={0x6, 0x2, &(0x7f00000016c0)=ANY=[@ANYBLOB="00000000bbb37932e4f1bfbefa2a185d518424e73122e578cf95d30946be6e88b15e401353406cad8fa0516644ac58cab14723f6e97fc5131dfd0b28a82c441dd33b8544b9295d212e000000296a5d52200380f5514c1588e654aa4ddb63b3bc319f291c6e6faafae8984257c9b2a2dc129b9dff77264ac7399da20dea4d1cc5f964d2a4956cd8b61856359223c121300200000000000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000280)='syzkaller\x00', 0x1, 0xc1, &(0x7f0000000440)=""/193, 0x81e00, 0x21, '\x00', r9, 0x25, r4, 0x8, &(0x7f00000003c0)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0x3, 0x86c, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000580)=[r10], 0x0, 0x10, 0x2}, 0x94)
ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000000))
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000000c0), &(0x7f0000000100)=0x4)

0s ago: executing program 7 (id=1625):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
gettid()
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000000)={0x1})
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)

kernel console output (not intermixed with test programs):

0'.
[  127.870942][ T7559] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.1009: iget: bad i_size value: 38620345925642
[  127.884123][ T7559] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1009: couldn't read orphan inode 15 (err -117)
[  127.898213][ T7559] Direct I/O collision with buffered writes! File: /file1 Comm: syz.4.1009
[  127.917356][ T7564] netlink: 14593 bytes leftover after parsing attributes in process `syz.8.1012'.
[  127.941110][ T7568] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=33921 sclass=netlink_xfrm_socket pid=7568 comm=syz.5.1014
[  127.973634][ T7570] loop7: detected capacity change from 0 to 512
[  128.013165][   T29] audit: type=1326 audit(1769830314.600:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7558 comm="syz.4.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4ad94aeb9 code=0x7ffc0000
[  128.019192][ T7570] EXT4-fs: inline encryption not supported
[  128.036927][   T29] audit: type=1326 audit(1769830314.600:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7558 comm="syz.4.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7fa4ad94aeb9 code=0x7ffc0000
[  128.066608][   T29] audit: type=1326 audit(1769830314.600:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7558 comm="syz.4.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4ad94aeb9 code=0x7ffc0000
[  128.090086][   T29] audit: type=1326 audit(1769830314.600:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7558 comm="syz.4.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7fa4ad94aeb9 code=0x7ffc0000
[  128.148129][ T3443] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm kworker/u8:7: bg 0: block 5: invalid block bitmap
[  128.187725][ T3443] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28
[  128.200136][ T3443] EXT4-fs (loop4): This should not happen!! Data will be lost
[  128.200136][ T3443] 
[  128.209917][ T3443] EXT4-fs (loop4): Total free blocks count 0
[  128.215992][ T3443] EXT4-fs (loop4): Free/Dirty block details
[  128.221949][ T3443] EXT4-fs (loop4): free_blocks=0
[  128.227151][ T3443] EXT4-fs (loop4): dirty_blocks=5
[  128.232253][ T3443] EXT4-fs (loop4): Block reservation details
[  128.238356][ T3443] EXT4-fs (loop4): i_reserved_data_blocks=5
[  128.250029][   T12] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 131587 with max blocks 1 with error 28
[  128.262801][   T12] EXT4-fs (loop4): This should not happen!! Data will be lost
[  128.262801][   T12] 
[  128.311166][ T7570] ext4 filesystem being mounted at /174/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  128.734779][ T7614] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1026'.
[  129.148778][ T7632] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1034'.
[  129.203926][ T7638] loop0: detected capacity change from 0 to 8192
[  129.246881][ T7643] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(14)
[  129.253588][ T7643] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  129.261185][ T7643] vhci_hcd vhci_hcd.0: Device attached
[  129.267375][ T3759]  loop0: p1 < > p4 < >
[  129.271972][ T7643] vhci_hcd vhci_hcd.0: pdev(8) rhport(1) sockfd(16)
[  129.278678][ T7643] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  129.286500][ T7643] vhci_hcd vhci_hcd.0: Device attached
[  129.294143][ T7638]  loop0: p1 < > p4 < >
[  129.299265][ T7643] vhci_hcd vhci_hcd.0: pdev(8) rhport(2) sockfd(18)
[  129.305964][ T7643] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  129.313639][ T7643] vhci_hcd vhci_hcd.0: Device attached
[  129.334745][ T7643] vhci_hcd vhci_hcd.0: pdev(8) rhport(3) sockfd(20)
[  129.338686][ T7653] 9p: Unknown access argument Å: -22
[  129.341430][ T7643] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  129.354403][ T7643] vhci_hcd vhci_hcd.0: Device attached
[  129.380684][ T7643] vhci_hcd vhci_hcd.0: pdev(8) rhport(4) sockfd(22)
[  129.387436][ T7643] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  129.395008][ T7643] vhci_hcd vhci_hcd.0: Device attached
[  129.403243][ T3759] udevd[3759]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[  129.408404][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[  129.425865][ T7643] vhci_hcd vhci_hcd.0: pdev(8) rhport(5) sockfd(24)
[  129.432570][ T7643] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  129.440299][ T7643] vhci_hcd vhci_hcd.0: Device attached
[  129.456156][ T7663] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  129.469929][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[  129.483017][ T3759] udevd[3759]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[  129.493306][ T7643] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  129.505820][   T10] usb 17-1: new low-speed USB device number 4 using vhci_hcd
[  129.526275][ T7643] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  129.562468][ T7643] siw: device registration error -23
[  129.572688][ T7655] vhci_hcd: connection closed
[  129.572743][ T7657] vhci_hcd: connection closed
[  129.577941][ T4193] vhci_hcd vhci_hcd.8: stop threads
[  129.587954][ T4193] vhci_hcd vhci_hcd.8: release socket
[  129.593382][ T4193] vhci_hcd vhci_hcd.8: disconnect device
[  129.597157][ T7646] vhci_hcd: connection closed
[  129.599353][ T7648] vhci_hcd: connection closed
[  129.604204][ T4193] vhci_hcd vhci_hcd.8: stop threads
[  129.604624][ T7650] vhci_hcd: connection closed
[  129.609036][ T4193] vhci_hcd vhci_hcd.8: release socket
[  129.624422][ T4193] vhci_hcd vhci_hcd.8: disconnect device
[  129.630852][ T7644] vhci_hcd: connection reset by peer
[  129.647335][ T4193] vhci_hcd vhci_hcd.8: stop threads
[  129.652769][ T4193] vhci_hcd vhci_hcd.8: release socket
[  129.658432][ T4193] vhci_hcd vhci_hcd.8: disconnect device
[  129.668099][ T4193] vhci_hcd vhci_hcd.8: stop threads
[  129.673476][ T4193] vhci_hcd vhci_hcd.8: release socket
[  129.678987][ T4193] vhci_hcd vhci_hcd.8: disconnect device
[  129.685576][ T4193] vhci_hcd vhci_hcd.8: stop threads
[  129.691040][ T4193] vhci_hcd vhci_hcd.8: release socket
[  129.696623][ T4193] vhci_hcd vhci_hcd.8: disconnect device
[  129.708021][ T4193] vhci_hcd vhci_hcd.8: stop threads
[  129.713363][ T4193] vhci_hcd vhci_hcd.8: release socket
[  129.718991][ T4193] vhci_hcd vhci_hcd.8: disconnect device
[  129.754197][ T7675] loop0: detected capacity change from 0 to 4096
[  129.777579][ T7681] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2566 sclass=netlink_xfrm_socket pid=7681 comm=syz.5.1048
[  129.890260][ T7686] netlink: 148 bytes leftover after parsing attributes in process `syz.7.1050'.
[  129.927382][ T7675] loop0: detected capacity change from 0 to 256
[  130.011297][ T7693] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1053'.
[  130.079490][ T7693] 
@0Ù: renamed from dummy0 (while UP)
[  130.263450][ T7721] FAULT_INJECTION: forcing a failure.
[  130.263450][ T7721] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  130.276784][ T7721] CPU: 1 UID: 0 PID: 7721 Comm: syz.8.1061 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  130.276814][ T7721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  130.276828][ T7721] Call Trace:
[  130.276843][ T7721]  <TASK>
[  130.276852][ T7721]  __dump_stack+0x1d/0x30
[  130.276910][ T7721]  dump_stack_lvl+0x95/0xd0
[  130.276936][ T7721]  dump_stack+0x15/0x1b
[  130.276956][ T7721]  should_fail_ex+0x263/0x280
[  130.276989][ T7721]  should_fail+0xb/0x20
[  130.277061][ T7721]  should_fail_usercopy+0x1a/0x20
[  130.277175][ T7721]  _copy_from_iter+0xcf/0xea0
[  130.277196][ T7721]  ? __alloc_skb+0x397/0x4b0
[  130.277232][ T7721]  ? __alloc_skb+0x219/0x4b0
[  130.277274][ T7721]  netlink_sendmsg+0x4ae/0x6f0
[  130.277340][ T7721]  ? __pfx_netlink_sendmsg+0x10/0x10
[  130.277361][ T7721]  ____sys_sendmsg+0x5af/0x600
[  130.277384][ T7721]  ___sys_sendmsg+0x195/0x1e0
[  130.277421][ T7721]  __x64_sys_sendmsg+0xd4/0x160
[  130.277487][ T7721]  x64_sys_call+0x17ba/0x3000
[  130.277514][ T7721]  do_syscall_64+0xc0/0x2a0
[  130.277612][ T7721]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.277639][ T7721] RIP: 0033:0x7fc83f7daeb9
[  130.277659][ T7721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  130.277748][ T7721] RSP: 002b:00007fc83e216028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  130.277771][ T7721] RAX: ffffffffffffffda RBX: 00007fc83fa56090 RCX: 00007fc83f7daeb9
[  130.277852][ T7721] RDX: 0000000000040000 RSI: 0000200000000000 RDI: 0000000000000004
[  130.277870][ T7721] RBP: 00007fc83e216090 R08: 0000000000000000 R09: 0000000000000000
[  130.277887][ T7721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  130.277900][ T7721] R13: 00007fc83fa56128 R14: 00007fc83fa56090 R15: 00007ffe78e534e8
[  130.277920][ T7721]  </TASK>
[  131.002788][ T7737] loop7: detected capacity change from 0 to 512
[  131.024333][ T7737] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  131.046095][ T7735] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1065'.
[  131.082942][ T7737] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  131.113254][ T7737] EXT4-fs (loop7): 1 truncate cleaned up
[  131.119626][ T7737] EXT4-fs mount: 30 callbacks suppressed
[  131.119645][ T7737] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  131.143202][ T7737] FAULT_INJECTION: forcing a failure.
[  131.143202][ T7737] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  131.156424][ T7737] CPU: 1 UID: 0 PID: 7737 Comm: syz.7.1068 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  131.156457][ T7737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  131.156472][ T7737] Call Trace:
[  131.156481][ T7737]  <TASK>
[  131.156493][ T7737]  __dump_stack+0x1d/0x30
[  131.156562][ T7737]  dump_stack_lvl+0x95/0xd0
[  131.156585][ T7737]  dump_stack+0x15/0x1b
[  131.156613][ T7737]  should_fail_ex+0x263/0x280
[  131.156682][ T7737]  should_fail+0xb/0x20
[  131.156781][ T7737]  should_fail_usercopy+0x1a/0x20
[  131.156816][ T7737]  strncpy_from_user+0x27/0x250
[  131.156844][ T7737]  getname_flags+0xad/0x3b0
[  131.156937][ T7737]  path_listxattrat+0x7e/0x2b0
[  131.157006][ T7737]  __x64_sys_listxattr+0x4a/0x60
[  131.157035][ T7737]  x64_sys_call+0x2a62/0x3000
[  131.157075][ T7737]  do_syscall_64+0xc0/0x2a0
[  131.157108][ T7737]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  131.157141][ T7737] RIP: 0033:0x7fa410dfaeb9
[  131.157157][ T7737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  131.157182][ T7737] RSP: 002b:00007fa40f857028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c2
[  131.157225][ T7737] RAX: ffffffffffffffda RBX: 00007fa411075fa0 RCX: 00007fa410dfaeb9
[  131.157243][ T7737] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000340
[  131.157256][ T7737] RBP: 00007fa40f857090 R08: 0000000000000000 R09: 0000000000000000
[  131.157327][ T7737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  131.157340][ T7737] R13: 00007fa411076038 R14: 00007fa411075fa0 R15: 00007ffc24e7a868
[  131.157409][ T7737]  </TASK>
[  131.157782][ T7745] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(14)
[  131.327855][ T7745] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  131.335560][ T7745] vhci_hcd vhci_hcd.0: Device attached
[  131.375888][ T7749] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(16)
[  131.382555][ T7749] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  131.390192][ T7749] vhci_hcd vhci_hcd.0: Device attached
[  131.420848][ T4100] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.458920][ T7745] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(19)
[  131.465601][ T7745] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  131.473392][ T7745] vhci_hcd vhci_hcd.0: Device attached
[  131.485050][ T7732] loop0: detected capacity change from 0 to 2048
[  131.493771][ T7749] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(18)
[  131.500459][ T7749] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  131.508091][ T7749] vhci_hcd vhci_hcd.0: Device attached
[  131.527020][ T7745] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(21)
[  131.533788][ T7745] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  131.541453][ T7745] vhci_hcd vhci_hcd.0: Device attached
[  131.547920][ T7745] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(24)
[  131.554633][ T7745] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  131.562263][ T7745] vhci_hcd vhci_hcd.0: Device attached
[  131.569244][ T7744] loop8: detected capacity change from 0 to 512
[  131.575847][ T1037] usb 9-1: new low-speed USB device number 6 using vhci_hcd
[  131.584215][ T7745] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  131.593238][ T7745] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  131.602517][ T7745] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  131.603280][ T7732] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  131.631669][ T7759] vhci_hcd: connection closed
[  131.631885][ T7753] vhci_hcd: connection closed
[  131.634717][ T7757] vhci_hcd: connection closed
[  131.637441][ T7751] vhci_hcd: connection closed
[  131.641665][ T7761] vhci_hcd: connection closed
[  131.651249][ T7746] vhci_hcd: connection reset by peer
[  131.662471][   T31] vhci_hcd vhci_hcd.4: stop threads
[  131.667800][   T31] vhci_hcd vhci_hcd.4: release socket
[  131.673298][   T31] vhci_hcd vhci_hcd.4: disconnect device
[  131.683120][ T7744] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  131.696817][ T7744] ext4 filesystem being mounted at /176/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  131.707613][   T31] vhci_hcd vhci_hcd.4: stop threads
[  131.712911][   T31] vhci_hcd vhci_hcd.4: release socket
[  131.718378][   T31] vhci_hcd vhci_hcd.4: disconnect device
[  131.736197][   T31] vhci_hcd vhci_hcd.4: stop threads
[  131.741520][   T31] vhci_hcd vhci_hcd.4: release socket
[  131.747142][   T31] vhci_hcd vhci_hcd.4: disconnect device
[  131.795871][   T31] vhci_hcd vhci_hcd.4: stop threads
[  131.801160][   T31] vhci_hcd vhci_hcd.4: release socket
[  131.806646][   T31] vhci_hcd vhci_hcd.4: disconnect device
[  131.833691][   T31] vhci_hcd vhci_hcd.4: stop threads
[  131.839044][   T31] vhci_hcd vhci_hcd.4: release socket
[  131.844534][   T31] vhci_hcd vhci_hcd.4: disconnect device
[  131.887659][   T31] vhci_hcd vhci_hcd.4: stop threads
[  131.893139][   T31] vhci_hcd vhci_hcd.4: release socket
[  131.898754][   T31] vhci_hcd vhci_hcd.4: disconnect device
[  131.920620][ T7744] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #12: comm syz.8.1071: corrupted xattr block 6: invalid header
[  131.934261][ T7744] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop8 ino=12
[  131.943742][ T7744] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #12: comm syz.8.1071: corrupted xattr block 6: invalid header
[  131.957376][ T7744] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop8 ino=12
[  131.966958][ T7744] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #12: comm syz.8.1071: corrupted xattr block 6: invalid header
[  131.983544][ T7744] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop8 ino=12
[  131.994036][ T4132] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.014431][ T7744] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #12: comm syz.8.1071: corrupted xattr block 6: invalid header
[  132.044065][ T7744] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop8 ino=12
[  132.064408][ T7744] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #12: comm syz.8.1071: corrupted xattr block 6: invalid header
[  132.085751][   T29] kauditd_printk_skb: 70 callbacks suppressed
[  132.085773][   T29] audit: type=1400 audit(1769830318.670:1650): avc:  denied  { add_name } for  pid=7743 comm="syz.8.1071" name="file3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  132.120864][ T7744] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop8 ino=12
[  132.142429][   T29] audit: type=1400 audit(1769830318.750:1651): avc:  denied  { create } for  pid=7743 comm="syz.8.1071" name="file3" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  132.170269][ T7744] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #12: comm syz.8.1071: corrupted xattr block 6: invalid header
[  132.510076][ T4656] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.588879][   T29] audit: type=1400 audit(1769830319.200:1652): avc:  denied  { sqpoll } for  pid=7779 comm="syz.7.1079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  132.680424][ T7791] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1083'.
[  132.726831][   T29] audit: type=1400 audit(1769830319.340:1653): avc:  denied  { read } for  pid=7790 comm="syz.4.1083" path="socket:[19786]" dev="sockfs" ino=19786 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  132.752421][ T7791] netlink: 'syz.4.1083': attribute type 11 has an invalid length.
[  132.791807][ T7798] loop0: detected capacity change from 0 to 512
[  132.802256][ T7797] netlink: 'syz.8.1080': attribute type 10 has an invalid length.
[  132.841448][ T7798] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.1074: iget: bad i_size value: 38620345925642
[  132.884443][ T7798] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.1074: couldn't read orphan inode 15 (err -117)
[  132.921670][ T7798] EXT4-fs (loop0): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback.
[  132.960954][ T7798] Direct I/O collision with buffered writes! File: /file1 Comm: syz.0.1074
[  133.056362][   T29] audit: type=1326 audit(1769830319.670:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7795 comm="syz.0.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f236887aeb9 code=0x7ffc0000
[  133.117946][   T29] audit: type=1326 audit(1769830319.690:1655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7795 comm="syz.0.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7f236887aeb9 code=0x7ffc0000
[  133.141623][   T29] audit: type=1326 audit(1769830319.690:1656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7795 comm="syz.0.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f236887aeb9 code=0x7ffc0000
[  133.165089][   T29] audit: type=1326 audit(1769830319.690:1657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7795 comm="syz.0.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f236887aeb9 code=0x7ffc0000
[  133.188613][   T29] audit: type=1326 audit(1769830319.690:1658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7795 comm="syz.0.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f236887aeb9 code=0x7ffc0000
[  133.212164][   T29] audit: type=1326 audit(1769830319.690:1659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7795 comm="syz.0.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f236887aeb9 code=0x7ffc0000
[  133.302408][ T3443] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm kworker/u8:7: bg 0: block 5: invalid block bitmap
[  133.315419][ T3443] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28
[  133.327866][ T3443] EXT4-fs (loop0): This should not happen!! Data will be lost
[  133.327866][ T3443] 
[  133.337659][ T3443] EXT4-fs (loop0): Total free blocks count 0
[  133.343677][ T3443] EXT4-fs (loop0): Free/Dirty block details
[  133.349784][ T3443] EXT4-fs (loop0): free_blocks=0
[  133.354835][ T3443] EXT4-fs (loop0): dirty_blocks=5
[  133.359924][ T3443] EXT4-fs (loop0): Block reservation details
[  133.365964][ T3443] EXT4-fs (loop0): i_reserved_data_blocks=5
[  133.372415][ T3443] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 131587 with max blocks 1 with error 28
[  133.431643][ T7808] lo speed is unknown, defaulting to 1000
[  133.514131][ T7816] SELinux:  Context system_u:object_r:initrc_exec_t:s0 is not valid (left unmapped).
[  133.688288][ T7842] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1098'.
[  133.750836][ T7852] loop7: detected capacity change from 0 to 512
[  133.789641][ T7852] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  133.837145][ T7852] ext4 filesystem being mounted at /193/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  133.979297][ T7842] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  133.988551][ T7842] netlink: 'syz.7.1098': attribute type 21 has an invalid length.
[  133.999298][ T7842] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  134.188816][ T7864] FAULT_INJECTION: forcing a failure.
[  134.188816][ T7864] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  134.202103][ T7864] CPU: 1 UID: 0 PID: 7864 Comm: syz.4.1105 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  134.202144][ T7864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  134.202157][ T7864] Call Trace:
[  134.202164][ T7864]  <TASK>
[  134.202172][ T7864]  __dump_stack+0x1d/0x30
[  134.202198][ T7864]  dump_stack_lvl+0x95/0xd0
[  134.202228][ T7864]  dump_stack+0x15/0x1b
[  134.202315][ T7864]  should_fail_ex+0x263/0x280
[  134.202368][ T7864]  should_fail+0xb/0x20
[  134.202471][ T7864]  should_fail_usercopy+0x1a/0x20
[  134.202513][ T7864]  _copy_from_user+0x1c/0xb0
[  134.202541][ T7864]  io_register_rsrc+0x60/0x220
[  134.202584][ T7864]  __se_sys_io_uring_register+0x428/0xf30
[  134.202644][ T7864]  ? fput+0x8f/0xc0
[  134.202673][ T7864]  ? ksys_write+0x194/0x1a0
[  134.202715][ T7864]  __x64_sys_io_uring_register+0x55/0x70
[  134.202761][ T7864]  x64_sys_call+0x27ad/0x3000
[  134.202795][ T7864]  do_syscall_64+0xc0/0x2a0
[  134.202870][ T7864]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.202893][ T7864] RIP: 0033:0x7fa4ad94aeb9
[  134.202924][ T7864] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  134.202950][ T7864] RSP: 002b:00007fa4ac085028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab
[  134.203008][ T7864] RAX: ffffffffffffffda RBX: 00007fa4adbc6090 RCX: 00007fa4ad94aeb9
[  134.203065][ T7864] RDX: 00002000000002c0 RSI: 000000000000000d RDI: 0000000000000004
[  134.203079][ T7864] RBP: 00007fa4ac085090 R08: 0000000000000000 R09: 0000000000000000
[  134.203092][ T7864] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001
[  134.203104][ T7864] R13: 00007fa4adbc6128 R14: 00007fa4adbc6090 R15: 00007ffce5fc5df8
[  134.203125][ T7864]  </TASK>
[  134.545804][   T10] usb 17-1: enqueue for inactive port 0
[  134.594164][   T10] usb 17-1: enqueue for inactive port 0
[  134.715810][   T10] vhci_hcd vhci_hcd.8: vhci_device speed not set
[  134.765278][ T4100] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.818028][ T7890] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1115'.
[  134.838905][ T7898] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(14)
[  134.845669][ T7898] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  134.853313][ T7898] vhci_hcd vhci_hcd.0: Device attached
[  134.863521][ T7898] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(16)
[  134.865900][ T7899] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(14)
[  134.870185][ T7898] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  134.876788][ T7899] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  134.884749][ T7898] vhci_hcd vhci_hcd.0: Device attached
[  134.892018][ T7899] vhci_hcd vhci_hcd.0: Device attached
[  134.919562][ T7907] vhci_hcd vhci_hcd.0: pdev(7) rhport(2) sockfd(19)
[  134.926288][ T7907] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  134.933926][ T7907] vhci_hcd vhci_hcd.0: Device attached
[  134.952265][ T7898] vhci_hcd vhci_hcd.0: pdev(7) rhport(3) sockfd(18)
[  134.958930][ T7898] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  134.966568][ T7898] vhci_hcd vhci_hcd.0: Device attached
[  134.989728][ T7899] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(16)
[  134.996612][ T7899] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  135.004228][ T7899] vhci_hcd vhci_hcd.0: Device attached
[  135.004291][ T7916] loop8: detected capacity change from 0 to 128
[  135.014379][ T7898] vhci_hcd vhci_hcd.0: pdev(7) rhport(4) sockfd(22)
[  135.022979][ T7898] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  135.030561][ T7898] vhci_hcd vhci_hcd.0: Device attached
[  135.046081][ T7899] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(18)
[  135.052783][ T7899] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  135.060555][ T7899] vhci_hcd vhci_hcd.0: Device attached
[  135.073566][ T7899] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(20)
[  135.080262][ T7899] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  135.087916][ T7899] vhci_hcd vhci_hcd.0: Device attached
[  135.094106][ T7898] vhci_hcd vhci_hcd.0: pdev(7) rhport(5) sockfd(24)
[  135.101054][ T7898] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  135.108778][ T7898] vhci_hcd vhci_hcd.0: Device attached
[  135.115996][ T2965] usb 15-1: new low-speed USB device number 4 using vhci_hcd
[  135.123387][ T7898] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  135.142390][ T7898] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  135.151079][ T7932] FAULT_INJECTION: forcing a failure.
[  135.151079][ T7932] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  135.164297][ T7932] CPU: 1 UID: 0 PID: 7932 Comm: syz.8.1121 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  135.164333][ T7932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  135.164354][ T7932] Call Trace:
[  135.164363][ T7932]  <TASK>
[  135.164374][ T7932]  __dump_stack+0x1d/0x30
[  135.164447][ T7932]  dump_stack_lvl+0x95/0xd0
[  135.164469][ T7932]  dump_stack+0x15/0x1b
[  135.164494][ T7932]  should_fail_ex+0x263/0x280
[  135.164607][ T7932]  should_fail+0xb/0x20
[  135.164714][ T7932]  should_fail_usercopy+0x1a/0x20
[  135.164758][ T7932]  _copy_to_iter+0xd2/0xea0
[  135.164876][ T7932]  ? __skb_try_recv_from_queue+0x3d6/0x440
[  135.164917][ T7932]  ? __pfx_simple_copy_to_iter+0x10/0x10
[  135.164937][ T7932]  __skb_datagram_iter+0xc6/0x680
[  135.164961][ T7932]  ? __pfx_simple_copy_to_iter+0x10/0x10
[  135.165025][ T7932]  skb_copy_datagram_iter+0x3d/0x100
[  135.165054][ T7932]  netlink_recvmsg+0x1a8/0x550
[  135.165085][ T7932]  ? __pfx_netlink_recvmsg+0x10/0x10
[  135.165112][ T7932]  sock_recvmsg+0x139/0x160
[  135.165148][ T7932]  __sys_recvfrom+0x122/0x200
[  135.165237][ T7932]  __x64_sys_recvfrom+0x76/0x90
[  135.165280][ T7932]  x64_sys_call+0x2918/0x3000
[  135.165328][ T7932]  do_syscall_64+0xc0/0x2a0
[  135.165372][ T7932]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.165415][ T7932] RIP: 0033:0x7fc83f79b78e
[  135.165433][ T7932] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  135.165457][ T7932] RSP: 002b:00007fc83e235e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002d
[  135.165506][ T7932] RAX: ffffffffffffffda RBX: 00007fc83e2376c0 RCX: 00007fc83f79b78e
[  135.165523][ T7932] RDX: 0000000000001000 RSI: 00007fc83e236000 RDI: 0000000000000003
[  135.165536][ T7932] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  135.165565][ T7932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[  135.165581][ T7932] R13: 00007fc83e235f58 R14: 00007fc83e236000 R15: 0000000000000000
[  135.165608][ T7932]  </TASK>
[  135.368778][ T7898] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  135.382541][ T7935] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(22)
[  135.382668][ T7898] siw: device registration error -23
[  135.389202][ T7935] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  135.389324][ T7935] vhci_hcd vhci_hcd.0: Device attached
[  135.410791][ T7910] vhci_hcd: connection closed
[  135.411045][  T361] vhci_hcd vhci_hcd.7: stop threads
[  135.415827][ T7920] vhci_hcd: connection closed
[  135.421245][  T361] vhci_hcd vhci_hcd.7: release socket
[  135.425112][ T7935] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  135.426203][  T361] vhci_hcd vhci_hcd.7: disconnect device
[  135.433514][ T7935] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  135.440599][ T7929] vhci_hcd: connection closed
[  135.453656][ T7899] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(25)
[  135.465067][ T7899] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  135.472668][ T7899] vhci_hcd vhci_hcd.0: Device attached
[  135.478664][ T7900] vhci_hcd: connection reset by peer
[  135.484204][ T7903] vhci_hcd: connection closed
[  135.484316][ T7908] vhci_hcd: connection closed
[  135.508057][  T361] vhci_hcd vhci_hcd.7: stop threads
[  135.518057][  T361] vhci_hcd vhci_hcd.7: release socket
[  135.523474][  T361] vhci_hcd vhci_hcd.7: disconnect device
[  135.529618][ T7935] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  135.543373][ T7938] vhci_hcd: connection closed
[  135.543610][ T7936] vhci_hcd: connection closed
[  135.546208][  T361] vhci_hcd vhci_hcd.7: stop threads
[  135.549133][ T7923] vhci_hcd: connection closed
[  135.553048][  T361] vhci_hcd vhci_hcd.7: release socket
[  135.553101][  T361] vhci_hcd vhci_hcd.7: disconnect device
[  135.558524][ T7927] vhci_hcd: connection closed
[  135.574390][ T7918] vhci_hcd: connection closed
[  135.579435][ T7902] vhci_hcd: connection closed
[  135.584400][  T361] vhci_hcd vhci_hcd.7: stop threads
[  135.594538][  T361] vhci_hcd vhci_hcd.7: release socket
[  135.600062][  T361] vhci_hcd vhci_hcd.7: disconnect device
[  135.631028][  T361] vhci_hcd vhci_hcd.7: stop threads
[  135.636426][  T361] vhci_hcd vhci_hcd.7: release socket
[  135.641843][  T361] vhci_hcd vhci_hcd.7: disconnect device
[  135.648750][  T361] vhci_hcd vhci_hcd.7: stop threads
[  135.654000][  T361] vhci_hcd vhci_hcd.7: release socket
[  135.659554][  T361] vhci_hcd vhci_hcd.7: disconnect device
[  135.674210][  T361] vhci_hcd vhci_hcd.4: stop threads
[  135.679563][  T361] vhci_hcd vhci_hcd.4: release socket
[  135.684975][  T361] vhci_hcd vhci_hcd.4: disconnect device
[  135.695414][  T361] vhci_hcd vhci_hcd.4: stop threads
[  135.700779][  T361] vhci_hcd vhci_hcd.4: release socket
[  135.706282][  T361] vhci_hcd vhci_hcd.4: disconnect device
[  135.724943][  T361] vhci_hcd vhci_hcd.4: stop threads
[  135.730383][  T361] vhci_hcd vhci_hcd.4: release socket
[  135.735843][  T361] vhci_hcd vhci_hcd.4: disconnect device
[  135.766096][  T361] vhci_hcd vhci_hcd.4: stop threads
[  135.771381][  T361] vhci_hcd vhci_hcd.4: release socket
[  135.776902][  T361] vhci_hcd vhci_hcd.4: disconnect device
[  135.792996][  T361] vhci_hcd vhci_hcd.4: stop threads
[  135.798393][  T361] vhci_hcd vhci_hcd.4: release socket
[  135.803814][  T361] vhci_hcd vhci_hcd.4: disconnect device
[  135.821620][  T361] vhci_hcd vhci_hcd.4: stop threads
[  135.826955][  T361] vhci_hcd vhci_hcd.4: release socket
[  135.832464][  T361] vhci_hcd vhci_hcd.4: disconnect device
[  135.859651][ T7942] loop8: detected capacity change from 0 to 2048
[  135.886290][ T7942] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  135.992611][ T4656] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.055303][ T7967] netlink: 'syz.8.1132': attribute type 1 has an invalid length.
[  136.100508][ T7973] dummy0: entered promiscuous mode
[  136.105766][ T7973] dummy0: entered allmulticast mode
[  136.112618][ T7973] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1136'.
[  136.121947][ T7973] netlink: 'syz.5.1136': attribute type 15 has an invalid length.
[  136.130316][ T7973] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1136'.
[  136.310843][ T7973] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1136'.
[  136.312910][ T4193] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0
[  136.319846][ T7973] netlink: 'syz.5.1136': attribute type 15 has an invalid length.
[  136.341950][ T7973] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1136'.
[  136.347870][ T4193] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0
[  136.381634][ T4193] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0
[  136.413861][ T4193] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0
[  136.501304][ T7981] loop8: detected capacity change from 0 to 8192
[  136.555752][ T7990] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1141'.
[  136.576623][ T7981]  loop8: p1 p2 p4
[  136.580647][ T7981] loop8: p1 size 262144 extends beyond EOD, truncated
[  136.590855][ T7981] loop8: p2 start 4293394690 is beyond EOD, truncated
[  136.597810][ T7981] loop8: p4 size 100663296 extends beyond EOD, truncated
[  136.626123][ T1037] usb 9-1: enqueue for inactive port 0
[  136.631848][ T1037] usb 9-1: enqueue for inactive port 0
[  136.705899][ T1037] vhci_hcd vhci_hcd.4: vhci_device speed not set
[  136.717281][ T7993] xt_hashlimit: size too large, truncated to 1048576
[  136.724042][ T7993] xt_hashlimit: max too large, truncated to 1048576
[  137.026266][ T7996] netlink: 'syz.0.1143': attribute type 1 has an invalid length.
[  137.152776][ T8009] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1149'.
[  137.177335][ T8009] loop4: detected capacity change from 0 to 256
[  137.184324][ T8009] msdos: Bad value for 'errors'
[  137.200892][ T8009] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1149'.
[  137.214645][ T8012] loop0: detected capacity change from 0 to 1024
[  137.230130][ T8009] loop4: detected capacity change from 0 to 256
[  137.277260][ T8016] loop8: detected capacity change from 0 to 512
[  137.317585][ T8012] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  137.368492][ T8016] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  137.381503][ T8012] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  137.393431][ T8016] ext4 filesystem being mounted at /187/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  137.719586][   T29] kauditd_printk_skb: 25 callbacks suppressed
[  137.719636][   T29] audit: type=1400 audit(1769830324.330:1685): avc:  denied  { execute_no_trans } for  pid=8015 comm="syz.8.1152" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1222 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  137.782901][ T8028] __nla_validate_parse: 1 callbacks suppressed
[  137.782921][ T8028] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1152'.
[  137.798269][ T8028] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1152'.
[  137.831368][ T8037] FAULT_INJECTION: forcing a failure.
[  137.831368][ T8037] name failslab, interval 1, probability 0, space 0, times 0
[  137.844121][ T8037] CPU: 1 UID: 0 PID: 8037 Comm: syz.4.1155 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  137.844184][ T8037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  137.844198][ T8037] Call Trace:
[  137.844205][ T8037]  <TASK>
[  137.844213][ T8037]  __dump_stack+0x1d/0x30
[  137.844239][ T8037]  dump_stack_lvl+0x95/0xd0
[  137.844289][ T8037]  dump_stack+0x15/0x1b
[  137.844382][ T8037]  should_fail_ex+0x263/0x280
[  137.844425][ T8037]  should_failslab+0x8c/0xb0
[  137.844470][ T8037]  __kmalloc_node_track_caller_noprof+0xb8/0x590
[  137.844500][ T8037]  ? sidtab_sid2str_get+0xa0/0x130
[  137.844532][ T8037]  kmemdup_noprof+0x2b/0x70
[  137.844610][ T8037]  sidtab_sid2str_get+0xa0/0x130
[  137.844691][ T8037]  security_sid_to_context_core+0x1eb/0x2e0
[  137.844784][ T8037]  security_sid_to_context+0x27/0x40
[  137.844813][ T8037]  selinux_lsmprop_to_secctx+0x67/0xf0
[  137.844853][ T8037]  security_lsmprop_to_secctx+0x1a3/0x1c0
[  137.844965][ T8037]  audit_log_subj_ctx+0xa4/0x3e0
[  137.845001][ T8037]  ? skb_put+0xa9/0xf0
[  137.845037][ T8037]  audit_log_task_context+0x48/0x70
[  137.845170][ T8037]  audit_log_task+0xf3/0x250
[  137.845259][ T8037]  audit_seccomp+0x60/0x100
[  137.845291][ T8037]  ? __seccomp_filter+0x8db/0x1350
[  137.845314][ T8037]  __seccomp_filter+0x8ec/0x1350
[  137.845375][ T8037]  ? mas_find+0x222/0x700
[  137.845408][ T8037]  ? apply_vma_lock_flags+0x217/0x260
[  137.845441][ T8037]  __secure_computing+0x81/0x150
[  137.845479][ T8037]  syscall_trace_enter+0xce/0x1e0
[  137.845518][ T8037]  do_syscall_64+0x9a/0x2a0
[  137.845600][ T8037]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  137.845630][ T8037] RIP: 0033:0x7fa4ad90b78e
[  137.845673][ T8037] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  137.845697][ T8037] RSP: 002b:00007fa4ac3a6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  137.845721][ T8037] RAX: ffffffffffffffda RBX: 00007fa4ac3a76c0 RCX: 00007fa4ad90b78e
[  137.845740][ T8037] RDX: 000000000000000f RSI: 00007fa4ac3a70a0 RDI: 0000000000000004
[  137.845830][ T8037] RBP: 00007fa4ac3a7090 R08: 0000000000000000 R09: 0000000000000000
[  137.845847][ T8037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  137.845860][ T8037] R13: 00007fa4adbc6038 R14: 00007fa4adbc5fa0 R15: 00007ffce5fc5df8
[  137.845884][ T8037]  </TASK>
[  138.046738][ T8038] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1150: bg 0: block 112: padding at end of block bitmap is not set
[  138.052684][ T8037] audit: error in audit_log_subj_ctx
[  138.076008][   T29] audit: type=1326 audit(1769830324.440:1686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8036 comm="syz.4.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4ad94aeb9 code=0x7ffc0000
[  138.076114][   T29] audit: type=1326 audit(1769830324.440:1687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8036 comm="syz.4.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4ad94aeb9 code=0x7ffc0000
[  138.095466][ T8032] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(14)
[  138.098916][   T29] audit: type=1326 audit(1769830324.440:1688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8036 comm="syz.4.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa4ad90b78e code=0x7ffc0000
[  138.122275][ T8032] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  138.122585][ T8032] vhci_hcd vhci_hcd.0: Device attached
[  138.146076][   T29] audit: type=1326 audit(1769830324.440:1689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8036 comm="syz.4.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa4ad90b78e code=0x7ffc0000
[  138.212581][   T29] audit: type=1326 audit(1769830324.440:1690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8036 comm="syz.4.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7fa4ad94aeb9 code=0x7ffc0000
[  138.237074][ T8038] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 117
[  138.249634][ T8038] EXT4-fs (loop0): This should not happen!! Data will be lost
[  138.249634][ T8038] 
[  138.260817][   T29] audit: type=1326 audit(1769830324.440:1691): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=8036 comm="syz.4.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fa4ad90b78e code=0x7ffc0000
[  138.276410][ T8039] EXT4-fs error (device loop0): ext4_map_blocks:825: inode #15: comm syz.0.1150: lblock 0 mapped to illegal pblock 0 (length 1)
[  138.281949][   T29] audit: type=1326 audit(1769830324.760:1692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8036 comm="syz.4.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa4ad90b78e code=0x7ffc0000
[  138.318185][   T29] audit: type=1326 audit(1769830324.760:1693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8036 comm="syz.4.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa4ad90b78e code=0x7ffc0000
[  138.357157][ T8038] sock: sock_set_timeout: `syz.0.1150' (pid 8038) tries to set negative timeout
[  138.372001][ T8032] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(16)
[  138.378679][ T8032] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  138.386357][ T8032] vhci_hcd vhci_hcd.0: Device attached
[  138.418710][ T8043] vhci_hcd vhci_hcd.0: pdev(7) rhport(3) sockfd(22)
[  138.425463][ T8043] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  138.433149][ T8043] vhci_hcd vhci_hcd.0: Device attached
[  138.439715][ T8041] vhci_hcd vhci_hcd.0: pdev(7) rhport(2) sockfd(19)
[  138.446369][ T8041] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  138.454078][ T8041] vhci_hcd vhci_hcd.0: Device attached
[  138.487321][ T8052] loop4: detected capacity change from 0 to 512
[  138.493731][ T8053] vhci_hcd vhci_hcd.0: pdev(7) rhport(4) sockfd(18)
[  138.500398][ T8053] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  138.506100][ T8052] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  138.508192][ T8053] vhci_hcd vhci_hcd.0: Device attached
[  138.550293][ T8032] vhci_hcd vhci_hcd.0: pdev(7) rhport(5) sockfd(21)
[  138.556975][ T8032] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  138.564739][ T8032] vhci_hcd vhci_hcd.0: Device attached
[  138.583880][ T8052] EXT4-fs error (device loop4): __ext4_iget:5426: inode #2: block 1792: comm syz.4.1157: invalid block
[  138.590930][ T4132] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  138.595937][ T8032] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  138.633208][ T8052] EXT4-fs (loop4): get root inode failed
[  138.638962][ T8052] EXT4-fs (loop4): mount failed
[  138.643570][ T8041] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  138.687758][ T8032] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  138.731992][ T8066] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1161'.
[  138.746254][ T8041] siw: device registration error -23
[  138.756379][ T8040] vhci_hcd: connection closed
[  138.756652][ T8054] vhci_hcd: connection closed
[  138.756977][ T8044] vhci_hcd: connection closed
[  138.761499][  T361] vhci_hcd vhci_hcd.7: stop threads
[  138.766828][ T8046] vhci_hcd: connection closed
[  138.770818][  T361] vhci_hcd vhci_hcd.7: release socket
[  138.776770][ T8034] vhci_hcd: connection closed
[  138.780822][  T361] vhci_hcd vhci_hcd.7: disconnect device
[  138.798981][ T8056] vhci_hcd: connection closed
[  138.809747][  T361] vhci_hcd vhci_hcd.7: stop threads
[  138.819960][  T361] vhci_hcd vhci_hcd.7: release socket
[  138.825443][  T361] vhci_hcd vhci_hcd.7: disconnect device
[  138.833139][  T361] vhci_hcd vhci_hcd.7: stop threads
[  138.838516][  T361] vhci_hcd vhci_hcd.7: release socket
[  138.843927][  T361] vhci_hcd vhci_hcd.7: disconnect device
[  138.851761][  T361] vhci_hcd vhci_hcd.7: stop threads
[  138.857124][  T361] vhci_hcd vhci_hcd.7: release socket
[  138.862533][  T361] vhci_hcd vhci_hcd.7: disconnect device
[  138.872243][  T361] vhci_hcd vhci_hcd.7: stop threads
[  138.877551][  T361] vhci_hcd vhci_hcd.7: release socket
[  138.883123][  T361] vhci_hcd vhci_hcd.7: disconnect device
[  138.889558][  T361] vhci_hcd vhci_hcd.7: stop threads
[  138.894798][  T361] vhci_hcd vhci_hcd.7: release socket
[  138.900300][  T361] vhci_hcd vhci_hcd.7: disconnect device
[  138.952984][ T4656] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.977230][ T8077] loop0: detected capacity change from 0 to 512
[  138.984659][ T8077] EXT4-fs: Ignoring removed nobh option
[  139.006404][ T8081] loop8: detected capacity change from 0 to 512
[  139.013356][ T8077] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  139.042537][ T8081] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #15: comm syz.8.1166: iget: bad i_size value: 38620345925642
[  139.045034][ T8077] EXT4-fs (loop0): 1 truncate cleaned up
[  139.069182][ T8077] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  139.118063][ T8081] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.1166: couldn't read orphan inode 15 (err -117)
[  139.192271][ T8081] EXT4-fs (loop8): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback.
[  139.220923][ T8081] Direct I/O collision with buffered writes! File: /file1 Comm: syz.8.1166
[  139.349587][ T4193] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm kworker/u8:8: bg 0: block 5: invalid block bitmap
[  139.362900][ T4193] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28
[  139.375207][ T4193] EXT4-fs (loop8): This should not happen!! Data will be lost
[  139.375207][ T4193] 
[  139.384924][ T4193] EXT4-fs (loop8): Total free blocks count 0
[  139.390992][ T4193] EXT4-fs (loop8): Free/Dirty block details
[  139.397010][ T4193] EXT4-fs (loop8): free_blocks=0
[  139.402086][ T4193] EXT4-fs (loop8): dirty_blocks=5
[  139.407304][ T4193] EXT4-fs (loop8): Block reservation details
[  139.413367][ T4193] EXT4-fs (loop8): i_reserved_data_blocks=5
[  139.421429][ T7411] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 131587 with max blocks 1 with error 28
[  139.438488][ T4132] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.560619][ T8124] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1183'.
[  139.574756][ T8122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1181'.
[  139.583825][ T8122] netlink: 'syz.0.1181': attribute type 18 has an invalid length.
[  139.591745][ T8122] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1181'.
[  139.664723][ T8133] loop8: detected capacity change from 0 to 512
[  139.673324][ T8133] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #15: comm syz.8.1185: inode has both inline data and extents flags
[  139.687765][ T8133] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.1185: couldn't read orphan inode 15 (err -117)
[  139.701272][ T8133] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  139.743642][ T4656] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.807597][ T8144] loop8: detected capacity change from 0 to 512
[  139.828768][ T8144] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #15: comm syz.8.1188: iget: bad i_size value: 38620345925642
[  139.852851][ T8144] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.1188: couldn't read orphan inode 15 (err -117)
[  139.872371][ T8149] IPVS: set_ctl: invalid protocol: 128 100.1.1.0:20000
[  139.885853][ T3560] IPVS: starting estimator thread 0...
[  139.892267][ T8149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1189'.
[  139.909042][ T8144] EXT4-fs (loop8): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback.
[  139.923977][ T8144] Direct I/O collision with buffered writes! File: /file1 Comm: syz.8.1188
[  139.991016][ T8151] IPVS: using max 2208 ests per chain, 110400 per kthread
[  140.018867][   T31] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm kworker/u8:1: bg 0: block 5: invalid block bitmap
[  140.032795][   T31] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28
[  140.045152][   T31] EXT4-fs (loop8): This should not happen!! Data will be lost
[  140.045152][   T31] 
[  140.055126][   T31] EXT4-fs (loop8): Total free blocks count 0
[  140.061278][   T31] EXT4-fs (loop8): Free/Dirty block details
[  140.067303][   T31] EXT4-fs (loop8): free_blocks=0
[  140.072267][   T31] EXT4-fs (loop8): dirty_blocks=5
[  140.077379][   T31] EXT4-fs (loop8): Block reservation details
[  140.083389][   T31] EXT4-fs (loop8): i_reserved_data_blocks=5
[  140.092006][ T7411] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 131587 with max blocks 1 with error 28
[  140.136116][ T2965] usb 15-1: enqueue for inactive port 0
[  140.142420][ T2965] usb 15-1: enqueue for inactive port 0
[  140.215413][ T8163] tmpfs: Unknown parameter ''
[  140.223207][ T8163] x_tables: unsorted entry at hook 2
[  140.226695][ T2965] vhci_hcd vhci_hcd.7: vhci_device speed not set
[  140.252490][ T8165] lo speed is unknown, defaulting to 1000
[  140.727221][ T8198] vhci_hcd vhci_hcd.4: invalid port number 254
[  141.093845][ T8216] : renamed from veth0_to_bond
[  141.139437][ T8221] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(14)
[  141.146106][ T8221] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  141.153686][ T8221] vhci_hcd vhci_hcd.0: Device attached
[  141.161701][ T8221] vhci_hcd vhci_hcd.0: pdev(8) rhport(1) sockfd(16)
[  141.168407][ T8221] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  141.176005][ T8221] vhci_hcd vhci_hcd.0: Device attached
[  141.185199][ T8221] vhci_hcd vhci_hcd.0: pdev(8) rhport(2) sockfd(18)
[  141.191855][ T8221] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  141.199682][ T8221] vhci_hcd vhci_hcd.0: Device attached
[  141.206633][ T8221] vhci_hcd vhci_hcd.0: pdev(8) rhport(3) sockfd(20)
[  141.213320][ T8221] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  141.220932][ T8221] vhci_hcd vhci_hcd.0: Device attached
[  141.309708][ T8221] vhci_hcd vhci_hcd.0: pdev(8) rhport(4) sockfd(22)
[  141.316661][ T8221] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  141.324283][ T8221] vhci_hcd vhci_hcd.0: Device attached
[  141.347943][ T8234] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=514 sclass=netlink_route_socket pid=8234 comm=syz.4.1222
[  141.367048][ T8234] EXT4-fs: test_dummy_encryption option not supported
[  141.374106][ T8221] vhci_hcd vhci_hcd.0: pdev(8) rhport(5) sockfd(24)
[  141.380787][ T8221] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  141.388467][ T8221] vhci_hcd vhci_hcd.0: Device attached
[  141.396262][ T8221] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  141.405796][ T3400] usb 17-1: new low-speed USB device number 5 using vhci_hcd
[  141.414191][ T8234] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1222'.
[  141.445071][ T8221] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  141.472020][ T8221] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  141.485651][ T8221] siw: device registration error -23
[  141.492862][ T8240] vhci_hcd: connection closed
[  141.492876][ T8228] vhci_hcd: connection closed
[  141.493159][ T8236] vhci_hcd: connection closed
[  141.499220][ T8222] vhci_hcd: connection reset by peer
[  141.512573][  T361] vhci_hcd vhci_hcd.8: stop threads
[  141.515073][ T8246] netlink: 564 bytes leftover after parsing attributes in process `syz.4.1222'.
[  141.517850][  T361] vhci_hcd vhci_hcd.8: release socket
[  141.517878][  T361] vhci_hcd vhci_hcd.8: disconnect device
[  141.526945][ T8246] netlink: 564 bytes leftover after parsing attributes in process `syz.4.1222'.
[  141.547438][ T8226] vhci_hcd: connection closed
[  141.547630][ T8224] vhci_hcd: connection closed
[  141.554181][  T361] vhci_hcd vhci_hcd.8: stop threads
[  141.564232][  T361] vhci_hcd vhci_hcd.8: release socket
[  141.569708][  T361] vhci_hcd vhci_hcd.8: disconnect device
[  141.590767][  T361] vhci_hcd vhci_hcd.8: stop threads
[  141.596162][  T361] vhci_hcd vhci_hcd.8: release socket
[  141.602026][  T361] vhci_hcd vhci_hcd.8: disconnect device
[  141.618894][  T361] vhci_hcd vhci_hcd.8: stop threads
[  141.624193][  T361] vhci_hcd vhci_hcd.8: release socket
[  141.629651][  T361] vhci_hcd vhci_hcd.8: disconnect device
[  141.653020][ T8253] FAULT_INJECTION: forcing a failure.
[  141.653020][ T8253] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  141.659419][  T361] vhci_hcd vhci_hcd.8: stop threads
[  141.666293][ T8253] CPU: 0 UID: 0 PID: 8253 Comm: syz.7.1228 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  141.666471][ T8253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  141.666601][ T8253] Call Trace:
[  141.666625][ T8253]  <TASK>
[  141.666654][ T8253]  __dump_stack+0x1d/0x30
[  141.666730][ T8253]  dump_stack_lvl+0x95/0xd0
[  141.666805][ T8253]  dump_stack+0x15/0x1b
[  141.666875][ T8253]  should_fail_ex+0x263/0x280
[  141.667035][ T8253]  should_fail+0xb/0x20
[  141.667139][ T8253]  should_fail_usercopy+0x1a/0x20
[  141.667246][ T8253]  _copy_to_user+0x20/0xa0
[  141.667380][ T8253]  copy_to_sockptr+0x5e/0xa0
[  141.667479][ T8253]  do_tcp_getsockopt+0x176e/0x1ba0
[  141.667605][ T8253]  ? _parse_integer+0x27/0x40
[  141.667740][ T8253]  ? __rcu_read_unlock+0x4e/0x70
[  141.667868][ T8253]  ? avc_has_perm_noaudit+0xab/0x130
[  141.668161][ T8253]  ? avc_has_perm+0x101/0x190
[  141.668281][ T8253]  tcp_getsockopt+0x6e/0xe0
[  141.668387][ T8253]  sock_common_getsockopt+0x60/0x70
[  141.668522][ T8253]  ? __pfx_sock_common_getsockopt+0x10/0x10
[  141.668616][ T8253]  do_sock_getsockopt+0x1c4/0x210
[  141.668735][ T8253]  __x64_sys_getsockopt+0x11d/0x1a0
[  141.668878][ T8253]  x64_sys_call+0x2dc7/0x3000
[  141.668964][ T8253]  do_syscall_64+0xc0/0x2a0
[  141.669141][ T8253]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  141.669303][ T8253] RIP: 0033:0x7fa410dfaeb9
[  141.669356][ T8253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  141.669419][ T8253] RSP: 002b:00007fa40f857028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  141.669505][ T8253] RAX: ffffffffffffffda RBX: 00007fa411075fa0 RCX: 00007fa410dfaeb9
[  141.669556][ T8253] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000003
[  141.669598][ T8253] RBP: 00007fa40f857090 R08: 0000200000000300 R09: 0000000000000000
[  141.669643][ T8253] R10: 0000200000000480 R11: 0000000000000246 R12: 0000000000000001
[  141.669687][ T8253] R13: 00007fa411076038 R14: 00007fa411075fa0 R15: 00007ffc24e7a868
[  141.669770][ T8253]  </TASK>
[  141.876903][  T361] vhci_hcd vhci_hcd.8: release socket
[  141.882316][  T361] vhci_hcd vhci_hcd.8: disconnect device
[  141.895889][  T361] vhci_hcd vhci_hcd.8: stop threads
[  141.901218][  T361] vhci_hcd vhci_hcd.8: release socket
[  141.906847][  T361] vhci_hcd vhci_hcd.8: disconnect device
[  141.963767][ T8255] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=8255 comm=syz.7.1229
[  142.765458][   T29] kauditd_printk_skb: 69 callbacks suppressed
[  142.765540][   T29] audit: type=1400 audit(1769830329.370:1763): avc:  denied  { accept } for  pid=8293 comm="syz.4.1240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  142.792523][   T29] audit: type=1400 audit(1769830329.370:1764): avc:  denied  { write } for  pid=8293 comm="syz.4.1240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  142.967436][   T29] audit: type=1400 audit(1769830329.580:1765): avc:  granted  { setsecparam } for  pid=8312 comm="syz.4.1249" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[  143.312805][ T8330] __nla_validate_parse: 2 callbacks suppressed
[  143.312966][ T8330] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1252'.
[  143.566458][ T8338] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1255'.
[  143.589368][ T8338] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1255'.
[  143.749238][   T29] audit: type=1400 audit(1769830330.360:1766): avc:  denied  { create } for  pid=8340 comm="syz.8.1256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  143.825267][ T8345] set_capacity_and_notify: 1 callbacks suppressed
[  143.825289][ T8345] loop4: detected capacity change from 0 to 512
[  143.911092][   T29] audit: type=1326 audit(1769830330.510:1767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8342 comm="syz.5.1258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf23a6aeb9 code=0x7ffc0000
[  143.931445][ T8345] EXT4-fs: Ignoring removed nobh option
[  143.934676][   T29] audit: type=1326 audit(1769830330.510:1768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8342 comm="syz.5.1258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7faf23a6aeb9 code=0x7ffc0000
[  143.963597][   T29] audit: type=1326 audit(1769830330.510:1769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8342 comm="syz.5.1258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf23a6aeb9 code=0x7ffc0000
[  143.987228][   T29] audit: type=1326 audit(1769830330.510:1770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8342 comm="syz.5.1258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7faf23a6aeb9 code=0x7ffc0000
[  144.010973][   T29] audit: type=1326 audit(1769830330.510:1771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8342 comm="syz.5.1258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf23a6aeb9 code=0x7ffc0000
[  144.034448][   T29] audit: type=1326 audit(1769830330.520:1772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8342 comm="syz.5.1258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faf23a6aeb9 code=0x7ffc0000
[  144.101729][ T8345] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  144.122212][ T8347] loop8: detected capacity change from 0 to 512
[  144.166943][ T8347] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #15: comm syz.8.1259: iget: bad i_size value: 38620345925642
[  144.180114][ T8345] EXT4-fs (loop4): 1 truncate cleaned up
[  144.231106][ T8345] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  144.245941][ T8347] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.1259: couldn't read orphan inode 15 (err -117)
[  144.297850][ T8347] EXT4-fs (loop8): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback.
[  144.367552][ T8367] loop7: detected capacity change from 0 to 512
[  144.434612][ T8367] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1265: bg 0: block 393: padding at end of block bitmap is not set
[  144.460210][ T8347] Direct I/O collision with buffered writes! File: /file1 Comm: syz.8.1259
[  144.512005][ T8367] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6689: Corrupt filesystem
[  144.655877][   T31] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm kworker/u8:1: bg 0: block 5: invalid block bitmap
[  144.698137][   T31] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28
[  144.710403][   T31] EXT4-fs (loop8): This should not happen!! Data will be lost
[  144.710403][   T31] 
[  144.720105][   T31] EXT4-fs (loop8): Total free blocks count 0
[  144.726184][   T31] EXT4-fs (loop8): Free/Dirty block details
[  144.732112][   T31] EXT4-fs (loop8): free_blocks=0
[  144.737123][   T31] EXT4-fs (loop8): dirty_blocks=5
[  144.742190][   T31] EXT4-fs (loop8): Block reservation details
[  144.748244][   T31] EXT4-fs (loop8): i_reserved_data_blocks=5
[  144.760181][   T31] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 131587 with max blocks 1 with error 28
[  144.774691][ T8367] EXT4-fs (loop7): 2 truncates cleaned up
[  144.781200][ T8367] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  144.918725][ T8374] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  144.925214][ T8374] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  144.966551][ T8374] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1265'.
[  144.981332][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  144.998317][ T8376] loop0: detected capacity change from 0 to 512
[  145.010517][ T8376] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  145.011290][ T8374] hsr_slave_0: left promiscuous mode
[  145.025659][ T8376] EXT4-fs (loop0): orphan cleanup on readonly fs
[  145.034595][ T8376] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.1268: Allocating blocks 41-42 which overlap fs metadata
[  145.055890][ T8374] hsr_slave_1: left promiscuous mode
[  145.079519][ T8376] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.1268: Allocating blocks 41-42 which overlap fs metadata
[  145.113954][ T8376] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.1268: Failed to acquire dquot type 1
[  145.129735][ T8376] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  145.144514][ T8376] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.1268: corrupted inode contents
[  145.158449][ T8376] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #12: comm syz.0.1268: mark_inode_dirty error
[  145.170222][ T8376] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.1268: corrupted inode contents
[  145.182636][ T8376] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #12: comm syz.0.1268: mark_inode_dirty error
[  145.195995][ T8376] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.1268: corrupted inode contents
[  145.222196][ T8376] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem
[  145.231167][ T8376] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.1268: corrupted inode contents
[  145.243391][ T8376] EXT4-fs error (device loop0): ext4_truncate:4635: inode #12: comm syz.0.1268: mark_inode_dirty error
[  145.254790][ T8376] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem
[  145.264366][ T8376] EXT4-fs (loop0): 1 truncate cleaned up
[  145.270856][ T8376] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  145.283875][ T8376] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  145.328237][ T8387] loop4: detected capacity change from 0 to 512
[  145.337274][ T8387] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.1269: bad orphan inode 13
[  145.347970][ T8387] ext4_test_bit(bit=12, block=4) = 1
[  145.353378][ T8387] is_bad_inode(inode)=0
[  145.357735][ T8387] NEXT_ORPHAN(inode)=0
[  145.361838][ T8387] max_ino=32
[  145.365066][ T8387] i_nlink=1
[  145.368737][ T8387] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  145.423042][ T4100] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  145.502297][ T8382] lo speed is unknown, defaulting to 1000
[  145.502878][ T8393] loop0: detected capacity change from 0 to 2048
[  145.526176][ T8386] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1270'.
[  145.535876][ T8381] EXT4-fs warning (device loop4): dx_probe:801: inode #2: comm syz.4.1269: Unrecognised inode hash code 20
[  145.547456][ T8381] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.1269: Corrupt directory, running e2fsck is recommended
[  145.565842][ T3305]  loop0: p2 p3 < > p4 < p5 >
[  145.570749][ T3305] loop0: partition table partially beyond EOD, truncated
[  145.588595][ T8381] EXT4-fs warning (device loop4): dx_probe:801: inode #2: comm syz.4.1269: Unrecognised inode hash code 20
[  145.600082][ T8381] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.1269: Corrupt directory, running e2fsck is recommended
[  145.613251][ T3305] loop0: p3 start 4284289 is beyond EOD, truncated
[  145.635773][ T8381] EXT4-fs error (device loop4): ext4_find_dest_de:2050: inode #2: block 13: comm syz.4.1269: bad entry in directory: directory entry overrun - offset=108, inode=4294901777, rec_len=1024, size=1024 fake=0
[  145.667707][ T8393]  loop0: p2 p3 < > p4 < p5 >
[  145.672542][ T8393] loop0: partition table partially beyond EOD, truncated
[  145.689556][ T8393] loop0: p3 start 4284289 is beyond EOD, truncated
[  145.763688][ T8404] loop0: detected capacity change from 0 to 512
[  146.015515][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[  146.041606][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory
[  146.057911][ T3759] udevd[3759]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[  146.212744][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.262551][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory
[  146.278609][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[  146.294945][ T3759] udevd[3759]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[  146.381170][ T8416] loop0: detected capacity change from 0 to 4096
[  146.418376][ T8416] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  146.455832][ T3400] usb 17-1: enqueue for inactive port 0
[  146.461633][ T3400] usb 17-1: enqueue for inactive port 0
[  146.529725][ T4132] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.548685][ T3400] vhci_hcd vhci_hcd.8: vhci_device speed not set
[  146.612877][ T8427] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  146.619416][ T8427] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  146.632805][ T8433] loop8: detected capacity change from 0 to 512
[  146.642904][ T8427] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1282'.
[  146.652988][ T8433] EXT4-fs: Ignoring removed nobh option
[  146.659660][ T8427] hsr_slave_0: left promiscuous mode
[  146.665965][ T8433] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  146.677022][ T8427] hsr_slave_1: left promiscuous mode
[  146.701150][ T8433] EXT4-fs (loop8): 1 truncate cleaned up
[  146.707415][ T8433] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  146.926362][ T4656] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.018908][ T8454] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1290'.
[  147.065111][ T8455] loop0: detected capacity change from 0 to 4096
[  147.144488][ T8455] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  147.401974][ T4132] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.760173][ T8476] EXT4-fs: Ignoring removed nobh option
[  147.769777][ T8476] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  147.794801][ T8476] EXT4-fs (loop0): 1 truncate cleaned up
[  147.801365][ T8476] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  147.902642][ T8480] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1301'.
[  147.942824][   T29] kauditd_printk_skb: 129 callbacks suppressed
[  147.942843][   T29] audit: type=1400 audit(1769830334.550:1898): avc:  denied  { create } for  pid=8486 comm="syz.8.1304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  147.978606][ T8487] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1304'.
[  147.987697][ T8487] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1304'.
[  147.999892][ T8487] dummy0: entered promiscuous mode
[  148.005216][ T8487] dummy0: left promiscuous mode
[  148.140852][ T4132] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  148.186357][   T29] audit: type=1326 audit(1769830334.780:1899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8490 comm="syz.5.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf23a6aeb9 code=0x7ffc0000
[  148.209953][   T29] audit: type=1326 audit(1769830334.780:1900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8490 comm="syz.5.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7faf23a6aeb9 code=0x7ffc0000
[  148.233479][   T29] audit: type=1326 audit(1769830334.780:1901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8490 comm="syz.5.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf23a6aeb9 code=0x7ffc0000
[  148.256992][   T29] audit: type=1326 audit(1769830334.780:1902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8490 comm="syz.5.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7faf23a6aeb9 code=0x7ffc0000
[  148.280413][   T29] audit: type=1326 audit(1769830334.780:1903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8490 comm="syz.5.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf23a6aeb9 code=0x7ffc0000
[  148.303906][   T29] audit: type=1326 audit(1769830334.780:1904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8490 comm="syz.5.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faf23a6aeb9 code=0x7ffc0000
[  148.327277][   T29] audit: type=1326 audit(1769830334.780:1905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8490 comm="syz.5.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf23a6aeb9 code=0x7ffc0000
[  148.350747][   T29] audit: type=1326 audit(1769830334.780:1906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8490 comm="syz.5.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faf23a6aeb9 code=0x7ffc0000
[  148.374282][   T29] audit: type=1326 audit(1769830334.780:1907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8490 comm="syz.5.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf23a6aeb9 code=0x7ffc0000
[  148.390131][ T8501] __nla_validate_parse: 2 callbacks suppressed
[  148.390262][ T8501] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1310'.
[  148.465578][ T8508] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1314'.
[  148.562341][ T8521] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1318'.
[  148.571843][ T8521] hsr_slave_0: left promiscuous mode
[  148.578283][ T8521] hsr_slave_1: left promiscuous mode
[  148.896559][ T8531] set_capacity_and_notify: 1 callbacks suppressed
[  148.896576][ T8531] loop8: detected capacity change from 0 to 512
[  148.924448][ T8531] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #15: comm syz.8.1322: iget: bad i_size value: 38620345925642
[  148.938539][ T8531] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.1322: couldn't read orphan inode 15 (err -117)
[  148.961511][ T8531] EXT4-fs (loop8): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback.
[  148.977066][ T8531] Direct I/O collision with buffered writes! File: /file1 Comm: syz.8.1322
[  149.034319][ T7411] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm kworker/u8:9: bg 0: block 5: invalid block bitmap
[  149.048636][ T7411] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28
[  149.060938][ T7411] EXT4-fs (loop8): This should not happen!! Data will be lost
[  149.060938][ T7411] 
[  149.070730][ T7411] EXT4-fs (loop8): Total free blocks count 0
[  149.076795][ T7411] EXT4-fs (loop8): Free/Dirty block details
[  149.082716][ T7411] EXT4-fs (loop8): free_blocks=0
[  149.087770][ T7411] EXT4-fs (loop8): dirty_blocks=5
[  149.092816][ T7411] EXT4-fs (loop8): Block reservation details
[  149.098995][ T7411] EXT4-fs (loop8): i_reserved_data_blocks=5
[  149.107531][ T7411] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 131587 with max blocks 1 with error 28
[  150.442269][ T8589] loop7: detected capacity change from 0 to 4096
[  150.468304][ T8589] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  150.573236][ T8599] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1349'.
[  150.584574][ T4100] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.595049][ T8599] 8021q: adding VLAN 0 to HW filter on device bond1
[  150.638198][ T8604] netlink: 'syz.7.1350': attribute type 2 has an invalid length.
[  150.646160][ T8604] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1350'.
[  150.666138][ T8599] bond1: option ad_select: unable to set because the bond device is up
[  150.678086][ T8599] loop8: detected capacity change from 0 to 512
[  150.692271][ T8599] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  150.739399][ T8620] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(14)
[  150.746117][ T8620] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  150.753710][ T8620] vhci_hcd vhci_hcd.0: Device attached
[  150.760884][ T8599] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  150.801837][ T8628] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(16)
[  150.808596][ T8628] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  150.816263][ T8628] vhci_hcd vhci_hcd.0: Device attached
[  150.836588][ T8599] ext4 filesystem being mounted at /233/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  150.874597][ T8620] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(18)
[  150.881389][ T8620] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  150.889082][ T8620] vhci_hcd vhci_hcd.0: Device attached
[  150.895335][ T4656] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.916288][ T8620] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(20)
[  150.922998][ T8620] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  150.930632][ T8620] vhci_hcd vhci_hcd.0: Device attached
[  150.952915][ T8639] siw: device registration error -23
[  150.961878][ T8620] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(22)
[  150.967804][ T8639] netlink: 52 bytes leftover after parsing attributes in process `syz.8.1359'.
[  150.968560][ T8620] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  150.968923][ T8620] vhci_hcd vhci_hcd.0: Device attached
[  150.993523][ T8620] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(24)
[  151.000264][ T8620] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  151.007897][ T8620] vhci_hcd vhci_hcd.0: Device attached
[  151.014430][ T8620] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  151.023119][ T8620] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  151.032387][ T8620] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  151.042400][ T8648] netlink: 136 bytes leftover after parsing attributes in process `syz.8.1361'.
[  151.051567][ T8648] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  151.054727][ T8620] siw: device registration error -23
[  151.073749][ T8645] vhci_hcd: connection closed
[  151.073755][ T8642] vhci_hcd: connection closed
[  151.078694][ T8629] vhci_hcd: connection closed
[  151.083773][ T8621] vhci_hcd: connection closed
[  151.088804][ T8634] vhci_hcd: connection closed
[  151.093998][ T8636] vhci_hcd: connection closed
[  151.102302][  T361] vhci_hcd vhci_hcd.0: stop threads
[  151.112368][  T361] vhci_hcd vhci_hcd.0: release socket
[  151.117906][  T361] vhci_hcd vhci_hcd.0: disconnect device
[  151.124455][  T361] vhci_hcd vhci_hcd.0: stop threads
[  151.129800][  T361] vhci_hcd vhci_hcd.0: release socket
[  151.135244][  T361] vhci_hcd vhci_hcd.0: disconnect device
[  151.152951][  T361] vhci_hcd vhci_hcd.0: stop threads
[  151.158320][  T361] vhci_hcd vhci_hcd.0: release socket
[  151.163751][  T361] vhci_hcd vhci_hcd.0: disconnect device
[  151.169985][  T361] vhci_hcd vhci_hcd.0: stop threads
[  151.175212][  T361] vhci_hcd vhci_hcd.0: release socket
[  151.180697][  T361] vhci_hcd vhci_hcd.0: disconnect device
[  151.187469][  T361] vhci_hcd vhci_hcd.0: stop threads
[  151.192936][  T361] vhci_hcd vhci_hcd.0: release socket
[  151.198512][  T361] vhci_hcd vhci_hcd.0: disconnect device
[  151.219613][  T361] vhci_hcd vhci_hcd.0: stop threads
[  151.225003][  T361] vhci_hcd vhci_hcd.0: release socket
[  151.230526][  T361] vhci_hcd vhci_hcd.0: disconnect device
[  151.285353][ T8660] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1367'.
[  151.357021][ T8660] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1367'.
[  151.432434][ T8676] netlink: 'syz.8.1373': attribute type 39 has an invalid length.
[  151.674056][ T8693] FAULT_INJECTION: forcing a failure.
[  151.674056][ T8693] name failslab, interval 1, probability 0, space 0, times 0
[  151.686817][ T8693] CPU: 1 UID: 0 PID: 8693 Comm: syz.7.1381 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  151.686908][ T8693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  151.686925][ T8693] Call Trace:
[  151.686934][ T8693]  <TASK>
[  151.686949][ T8693]  __dump_stack+0x1d/0x30
[  151.687038][ T8693]  dump_stack_lvl+0x95/0xd0
[  151.687063][ T8693]  dump_stack+0x15/0x1b
[  151.687091][ T8693]  should_fail_ex+0x263/0x280
[  151.687130][ T8693]  should_failslab+0x8c/0xb0
[  151.687196][ T8693]  kmem_cache_alloc_noprof+0x68/0x490
[  151.687230][ T8693]  ? __anon_vma_prepare+0x70/0x2f0
[  151.687344][ T8693]  ? _raw_spin_lock+0x52/0xa0
[  151.687405][ T8693]  __anon_vma_prepare+0x70/0x2f0
[  151.687594][ T8693]  handle_mm_fault+0x2163/0x3030
[  151.687633][ T8693]  ? mt_find+0x291/0x3b0
[  151.687681][ T8693]  do_user_addr_fault+0x3fd/0x1050
[  151.687719][ T8693]  exc_page_fault+0x62/0xa0
[  151.687752][ T8693]  asm_exc_page_fault+0x26/0x30
[  151.687846][ T8693] RIP: 0010:rep_movs_alternative+0x4a/0x90
[  151.687890][ T8693] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 <f3> a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48
[  151.687911][ T8693] RSP: 0018:ffffc900135cfdf0 EFLAGS: 00050206
[  151.687928][ T8693] RAX: ffff888109d35d10 RBX: 0000000000000068 RCX: 0000000000000068
[  151.687948][ T8693] RDX: 0000000000000000 RSI: ffffc900135cfe28 RDI: 0000200000000080
[  151.687966][ T8693] RBP: 0000000000000000 R08: 00000000000000eb R09: 0000000000000000
[  151.687983][ T8693] R10: 0001c900135cfe28 R11: 0001c900135cfe8f R12: 00002000000000e8
[  151.688054][ T8693] R13: 00007ffffffff000 R14: 0000200000000080 R15: ffffc900135cfe28
[  151.688076][ T8693]  _copy_to_user+0x7c/0xa0
[  151.688098][ T8693]  __se_sys_semctl+0x1c0/0x2d0
[  151.688204][ T8693]  __x64_sys_semctl+0x55/0x70
[  151.688244][ T8693]  x64_sys_call+0x2089/0x3000
[  151.688291][ T8693]  do_syscall_64+0xc0/0x2a0
[  151.688372][ T8693]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  151.688400][ T8693] RIP: 0033:0x7fa410dfaeb9
[  151.688417][ T8693] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  151.688435][ T8693] RSP: 002b:00007fa40f857028 EFLAGS: 00000246 ORIG_RAX: 0000000000000042
[  151.688456][ T8693] RAX: ffffffffffffffda RBX: 00007fa411075fa0 RCX: 00007fa410dfaeb9
[  151.688474][ T8693] RDX: 0000000000000012 RSI: 0000000000000002 RDI: 0000000000000000
[  151.688504][ T8693] RBP: 00007fa40f857090 R08: 0000000000000000 R09: 0000000000000000
[  151.688521][ T8693] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001
[  151.688538][ T8693] R13: 00007fa411076038 R14: 00007fa411075fa0 R15: 00007ffc24e7a868
[  151.688565][ T8693]  </TASK>
[  151.692003][ T8691] loop0: detected capacity change from 0 to 128
[  151.917438][ T8695] loop8: detected capacity change from 0 to 512
[  151.981037][ T8691] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  152.012573][ T8691] ext4 filesystem being mounted at /203/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  152.023067][ T8695] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #15: comm syz.8.1382: iget: bad i_size value: 38620345925642
[  152.065305][ T4132] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  152.092223][ T8695] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.1382: couldn't read orphan inode 15 (err -117)
[  152.176606][ T8695] EXT4-fs (loop8): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback.
[  152.234592][ T8695] Direct I/O collision with buffered writes! File: /file1 Comm: syz.8.1382
[  152.325273][   T31] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm kworker/u8:1: bg 0: block 5: invalid block bitmap
[  152.350370][   T31] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28
[  152.362765][   T31] EXT4-fs (loop8): This should not happen!! Data will be lost
[  152.362765][   T31] 
[  152.372581][   T31] EXT4-fs (loop8): Total free blocks count 0
[  152.378837][   T31] EXT4-fs (loop8): Free/Dirty block details
[  152.384864][   T31] EXT4-fs (loop8): free_blocks=0
[  152.389877][   T31] EXT4-fs (loop8): dirty_blocks=5
[  152.394956][   T31] EXT4-fs (loop8): Block reservation details
[  152.401080][   T31] EXT4-fs (loop8): i_reserved_data_blocks=5
[  152.422768][ T4193] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 131587 with max blocks 1 with error 28
[  152.491765][ T8722] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(14)
[  152.498507][ T8722] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  152.506121][ T8722] vhci_hcd vhci_hcd.0: Device attached
[  152.517217][ T8722] vhci_hcd vhci_hcd.0: pdev(8) rhport(1) sockfd(16)
[  152.523890][ T8722] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  152.531648][ T8722] vhci_hcd vhci_hcd.0: Device attached
[  152.543853][ T8722] vhci_hcd vhci_hcd.0: pdev(8) rhport(2) sockfd(18)
[  152.550532][ T8722] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  152.558298][ T8722] vhci_hcd vhci_hcd.0: Device attached
[  152.575945][ T8722] vhci_hcd vhci_hcd.0: pdev(8) rhport(3) sockfd(20)
[  152.582620][ T8722] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  152.590184][ T8722] vhci_hcd vhci_hcd.0: Device attached
[  152.598098][ T8722] vhci_hcd vhci_hcd.0: pdev(8) rhport(4) sockfd(22)
[  152.604835][ T8722] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  152.612578][ T8722] vhci_hcd vhci_hcd.0: Device attached
[  152.619606][ T8722] vhci_hcd vhci_hcd.0: pdev(8) rhport(5) sockfd(24)
[  152.626262][ T8722] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  152.633879][ T8722] vhci_hcd vhci_hcd.0: Device attached
[  152.640189][ T8722] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  152.650138][ T8722] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  152.677295][ T8722] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  152.746979][   T23] usb 17-1: new low-speed USB device number 6 using vhci_hcd
[  152.765115][ T8730] vhci_hcd: connection closed
[  152.765318][ T7411] vhci_hcd vhci_hcd.8: stop threads
[  152.765498][ T8728] vhci_hcd: connection closed
[  152.770204][ T7411] vhci_hcd vhci_hcd.8: release socket
[  152.785746][ T8732] vhci_hcd: connection closed
[  152.791203][ T7411] vhci_hcd vhci_hcd.8: disconnect device
[  152.791545][ T8734] vhci_hcd: connection closed
[  152.845504][ T8726] vhci_hcd: connection closed
[  152.871948][ T8724] vhci_hcd: connection reset by peer
[  152.901315][ T7411] vhci_hcd vhci_hcd.8: stop threads
[  152.906634][ T7411] vhci_hcd vhci_hcd.8: release socket
[  152.912049][ T7411] vhci_hcd vhci_hcd.8: disconnect device
[  152.918021][ T7411] vhci_hcd vhci_hcd.8: stop threads
[  152.923333][ T7411] vhci_hcd vhci_hcd.8: release socket
[  152.928895][ T7411] vhci_hcd vhci_hcd.8: disconnect device
[  152.945966][ T7411] vhci_hcd vhci_hcd.8: stop threads
[  152.951522][ T7411] vhci_hcd vhci_hcd.8: release socket
[  152.957028][ T7411] vhci_hcd vhci_hcd.8: disconnect device
[  152.962839][ T7411] vhci_hcd vhci_hcd.8: stop threads
[  152.968173][ T7411] vhci_hcd vhci_hcd.8: release socket
[  152.973654][ T7411] vhci_hcd vhci_hcd.8: disconnect device
[  152.998285][ T7411] vhci_hcd vhci_hcd.8: stop threads
[  153.003673][ T7411] vhci_hcd vhci_hcd.8: release socket
[  153.009186][ T7411] vhci_hcd vhci_hcd.8: disconnect device
[  153.393814][ T8753] ucma_write: process 591 (syz.0.1398) changed security contexts after opening file descriptor, this is not allowed.
[  153.700358][ T8763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1402'.
[  153.716479][ T8763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1402'.
[  153.804616][ T8770] loop7: detected capacity change from 0 to 512
[  153.813849][ T8770] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1405: bg 0: block 393: padding at end of block bitmap is not set
[  153.829190][ T8770] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6689: Corrupt filesystem
[  153.838252][ T8770] EXT4-fs (loop7): 2 truncates cleaned up
[  153.844950][ T8770] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  153.971319][ T4100] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  154.423675][ T8803] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1414'.
[  154.722446][ T8819] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1422'.
[  154.767944][ T8825] Dead loop on virtual device ip6_vti0, fix it urgently!
[  154.929076][ T8838] usb usb1: usbfs: process 8838 (syz.0.1440) did not claim interface 0 before use
[  154.950271][ T8842] loop4: detected capacity change from 0 to 512
[  154.970029][ T8840] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1430'.
[  154.980240][ T8840] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1430'.
[  154.998135][ T8842] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1431: bg 0: block 393: padding at end of block bitmap is not set
[  155.016095][ T8842] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6689: Corrupt filesystem
[  155.036324][ T8842] EXT4-fs (loop4): 2 truncates cleaned up
[  155.046367][ T8842] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  155.064122][ T8847] loop0: detected capacity change from 0 to 512
[  155.100034][ T8847] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.1432: iget: bad i_size value: 38620345925642
[  155.147543][ T8842] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  155.154207][ T8842] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  155.172497][ T8847] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.1432: couldn't read orphan inode 15 (err -117)
[  155.200768][ T8847] EXT4-fs (loop0): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback.
[  155.214054][ T8852] loop7: detected capacity change from 0 to 512
[  155.226296][ T8852] EXT4-fs: Ignoring removed nobh option
[  155.242544][ T8852] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  155.243176][ T8847] Direct I/O collision with buffered writes! File: /file1 Comm: syz.0.1432
[  155.277741][ T8852] EXT4-fs (loop7): 1 truncate cleaned up
[  155.283927][ T8852] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  155.358723][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  155.504071][   T12] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm kworker/u8:0: bg 0: block 5: invalid block bitmap
[  155.519266][   T12] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28
[  155.532019][   T12] EXT4-fs (loop0): This should not happen!! Data will be lost
[  155.532019][   T12] 
[  155.541743][   T12] EXT4-fs (loop0): Total free blocks count 0
[  155.547822][   T12] EXT4-fs (loop0): Free/Dirty block details
[  155.553779][   T12] EXT4-fs (loop0): free_blocks=0
[  155.558798][   T12] EXT4-fs (loop0): dirty_blocks=5
[  155.563857][   T12] EXT4-fs (loop0): Block reservation details
[  155.569930][   T12] EXT4-fs (loop0): i_reserved_data_blocks=5
[  155.590240][   T12] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 131587 with max blocks 1 with error 28
[  155.689640][ T4100] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  155.743177][ T8872] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1444'.
[  155.753152][ T8870] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(14)
[  155.759817][ T8870] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  155.767551][ T8870] vhci_hcd vhci_hcd.0: Device attached
[  155.785055][ T8870] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(16)
[  155.791727][ T8870] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  155.799357][ T8870] vhci_hcd vhci_hcd.0: Device attached
[  155.847787][ T8870] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(18)
[  155.854461][ T8870] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  155.862182][ T8870] vhci_hcd vhci_hcd.0: Device attached
[  155.870200][ T8883] loop4: detected capacity change from 0 to 512
[  155.876717][ T8870] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(20)
[  155.883464][ T8870] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  155.891062][ T8870] vhci_hcd vhci_hcd.0: Device attached
[  155.898786][ T8883] EXT4-fs: Ignoring removed nobh option
[  155.907643][ T8870] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(22)
[  155.907779][ T8883] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  155.914403][ T8870] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  155.914554][ T8870] vhci_hcd vhci_hcd.0: Device attached
[  155.940972][ T8883] EXT4-fs (loop4): 1 truncate cleaned up
[  155.947271][ T8883] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  155.973166][ T8896] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(24)
[  155.979958][ T8896] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  155.987954][ T8896] vhci_hcd vhci_hcd.0: Device attached
[  155.999930][ T8870] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  156.012526][ T8870] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  156.038724][ T8870] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  156.066346][ T8897] vhci_hcd: connection closed
[  156.066700][  T361] vhci_hcd vhci_hcd.0: stop threads
[  156.076895][  T361] vhci_hcd vhci_hcd.0: release socket
[  156.082322][  T361] vhci_hcd vhci_hcd.0: disconnect device
[  156.089052][ T8874] vhci_hcd: connection closed
[  156.089218][ T8889] vhci_hcd: connection closed
[  156.120296][ T8886] vhci_hcd: connection closed
[  156.125896][ T8884] vhci_hcd: connection closed
[  156.131796][ T8877] vhci_hcd: connection closed
[  156.141257][  T361] vhci_hcd vhci_hcd.0: stop threads
[  156.151284][  T361] vhci_hcd vhci_hcd.0: release socket
[  156.156706][  T361] vhci_hcd vhci_hcd.0: disconnect device
[  156.163657][  T361] vhci_hcd vhci_hcd.0: stop threads
[  156.168953][  T361] vhci_hcd vhci_hcd.0: release socket
[  156.174398][  T361] vhci_hcd vhci_hcd.0: disconnect device
[  156.182770][  T361] vhci_hcd vhci_hcd.0: stop threads
[  156.188096][  T361] vhci_hcd vhci_hcd.0: release socket
[  156.193580][  T361] vhci_hcd vhci_hcd.0: disconnect device
[  156.201066][  T361] vhci_hcd vhci_hcd.0: stop threads
[  156.206462][  T361] vhci_hcd vhci_hcd.0: release socket
[  156.211999][  T361] vhci_hcd vhci_hcd.0: disconnect device
[  156.218718][  T361] vhci_hcd vhci_hcd.0: stop threads
[  156.224042][  T361] vhci_hcd vhci_hcd.0: release socket
[  156.229567][  T361] vhci_hcd vhci_hcd.0: disconnect device
[  156.301092][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  156.346377][ T8909] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1450'.
[  156.625619][ T8923] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1456'.
[  156.662765][ T8925] lo speed is unknown, defaulting to 1000
[  156.692116][ T8927] loop8: detected capacity change from 0 to 2048
[  156.721252][ T8925] loop7: detected capacity change from 0 to 256
[  156.746228][ T8927]  loop8: p3 < > p4 < >
[  156.750473][ T8927] loop8: partition table partially beyond EOD, truncated
[  156.773361][ T8927] loop8: p3 start 4284289 is beyond EOD, truncated
[  156.827491][ T8934] loop7: detected capacity change from 0 to 512
[  156.850708][ T8934] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1461: bg 0: block 393: padding at end of block bitmap is not set
[  156.873281][ T8934] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6689: Corrupt filesystem
[  156.886424][ T8934] EXT4-fs (loop7): 2 truncates cleaned up
[  156.898289][ T8934] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  156.943239][ T3759] udevd[3759]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory
[  156.990371][ T8934] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1461'.
[  157.029954][ T4100] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  157.100972][ T8952] loop8: detected capacity change from 0 to 512
[  157.128418][ T8952] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #15: comm syz.8.1469: iget: bad i_size value: 38620345925642
[  157.157668][ T8952] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.1469: couldn't read orphan inode 15 (err -117)
[  157.172245][ T8952] Direct I/O collision with buffered writes! File: /file1 Comm: syz.8.1469
[  157.196156][   T29] kauditd_printk_skb: 132 callbacks suppressed
[  157.196174][   T29] audit: type=1326 audit(1769830343.800:2040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8951 comm="syz.8.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc83f7daeb9 code=0x7ffc0000
[  157.226047][   T29] audit: type=1326 audit(1769830343.800:2041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8951 comm="syz.8.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7fc83f7daeb9 code=0x7ffc0000
[  157.249667][   T29] audit: type=1326 audit(1769830343.800:2042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8951 comm="syz.8.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc83f7daeb9 code=0x7ffc0000
[  157.273518][   T29] audit: type=1326 audit(1769830343.800:2043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8951 comm="syz.8.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7fc83f7daeb9 code=0x7ffc0000
[  157.297257][   T29] audit: type=1326 audit(1769830343.800:2044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8951 comm="syz.8.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc83f7daeb9 code=0x7ffc0000
[  157.320812][   T29] audit: type=1326 audit(1769830343.800:2045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8951 comm="syz.8.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc83f7daeb9 code=0x7ffc0000
[  157.344289][   T29] audit: type=1326 audit(1769830343.800:2046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8951 comm="syz.8.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc83f7daeb9 code=0x7ffc0000
[  157.367931][   T29] audit: type=1326 audit(1769830343.800:2047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8951 comm="syz.8.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc83f7daeb9 code=0x7ffc0000
[  157.391368][   T29] audit: type=1326 audit(1769830343.800:2048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8951 comm="syz.8.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc83f7daeb9 code=0x7ffc0000
[  157.414913][   T29] audit: type=1326 audit(1769830343.800:2049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8951 comm="syz.8.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc83f7daeb9 code=0x7ffc0000
[  157.657664][   T52] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm kworker/u8:3: bg 0: block 5: invalid block bitmap
[  157.670650][   T52] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28
[  157.683103][   T52] EXT4-fs (loop8): This should not happen!! Data will be lost
[  157.683103][   T52] 
[  157.692852][   T52] EXT4-fs (loop8): Total free blocks count 0
[  157.698997][   T52] EXT4-fs (loop8): Free/Dirty block details
[  157.704956][   T52] EXT4-fs (loop8): free_blocks=0
[  157.710004][   T52] EXT4-fs (loop8): dirty_blocks=5
[  157.715052][   T52] EXT4-fs (loop8): Block reservation details
[  157.721133][   T52] EXT4-fs (loop8): i_reserved_data_blocks=5
[  157.766252][   T52] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 131587 with max blocks 1 with error 28
[  157.778986][   T52] EXT4-fs (loop8): This should not happen!! Data will be lost
[  157.778986][   T52] 
[  157.815862][   T23] usb 17-1: enqueue for inactive port 0
[  157.822788][   T23] usb 17-1: enqueue for inactive port 0
[  157.896308][   T23] vhci_hcd vhci_hcd.8: vhci_device speed not set
[  157.946899][ T8980] loop0: detected capacity change from 0 to 128
[  157.975503][ T8980] FAULT_INJECTION: forcing a failure.
[  157.975503][ T8980] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  157.989011][ T8980] CPU: 0 UID: 0 PID: 8980 Comm: syz.0.1477 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  157.989039][ T8980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  157.989055][ T8980] Call Trace:
[  157.989064][ T8980]  <TASK>
[  157.989075][ T8980]  __dump_stack+0x1d/0x30
[  157.989142][ T8980]  dump_stack_lvl+0x95/0xd0
[  157.989164][ T8980]  dump_stack+0x15/0x1b
[  157.989190][ T8980]  should_fail_ex+0x263/0x280
[  157.989294][ T8980]  should_fail+0xb/0x20
[  157.989330][ T8980]  should_fail_usercopy+0x1a/0x20
[  157.989373][ T8980]  copy_folio_from_iter_atomic+0x269/0x1170
[  157.989458][ T8980]  ? fat_write_begin+0x4f/0xe0
[  157.989485][ T8980]  ? __pfx_fat_get_block+0x10/0x10
[  157.989515][ T8980]  generic_perform_write+0x2c1/0x490
[  157.989562][ T8980]  __generic_file_write_iter+0x9e/0x120
[  157.989660][ T8980]  ? __pfx_generic_file_write_iter+0x10/0x10
[  157.989699][ T8980]  generic_file_write_iter+0x8d/0x310
[  157.989739][ T8980]  ? _parse_integer_limit+0x170/0x190
[  157.989831][ T8980]  ? _parse_integer+0x27/0x40
[  157.989858][ T8980]  ? kstrtoull+0x111/0x140
[  157.989933][ T8980]  ? kstrtouint+0x76/0xc0
[  157.990062][ T8980]  ? avc_policy_seqno+0x15/0x30
[  157.990102][ T8980]  ? selinux_file_permission+0x1f2/0x690
[  157.990188][ T8980]  ? __pfx_generic_file_write_iter+0x10/0x10
[  157.990230][ T8980]  vfs_write+0x5a6/0x9f0
[  157.990263][ T8980]  ksys_write+0xdc/0x1a0
[  157.990371][ T8980]  __x64_sys_write+0x40/0x50
[  157.990396][ T8980]  x64_sys_call+0x2847/0x3000
[  157.990428][ T8980]  do_syscall_64+0xc0/0x2a0
[  157.990479][ T8980]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  157.990538][ T8980] RIP: 0033:0x7f236887aeb9
[  157.990554][ T8980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  157.990575][ T8980] RSP: 002b:00007f23672d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  157.990625][ T8980] RAX: ffffffffffffffda RBX: 00007f2368af5fa0 RCX: 00007f236887aeb9
[  157.990644][ T8980] RDX: 00000000002a979d RSI: 0000200000000000 RDI: 0000000000000005
[  157.990659][ T8980] RBP: 00007f23672d7090 R08: 0000000000000000 R09: 0000000000000000
[  157.990672][ T8980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  157.990690][ T8980] R13: 00007f2368af6038 R14: 00007f2368af5fa0 R15: 00007ffe5b0c0c78
[  157.990774][ T8980]  </TASK>
[  158.313982][ T8995] loop4: detected capacity change from 0 to 2048
[  158.376329][ T9003] netlink: 'syz.5.1486': attribute type 2 has an invalid length.
[  158.406516][ T3305] GPT:first_usable_lbas don't match.
[  158.411886][ T3305] GPT:34 != 290
[  158.415473][ T3305] GPT: Use GNU Parted to correct GPT errors.
[  158.421878][ T3305]  loop4: p1 p2 p3
[  158.599836][   T31] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 20001 - 0
[  158.629450][   T31] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 20001 - 0
[  158.675338][   T31] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 20001 - 0
[  158.708188][   T31] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 20001 - 0
[  158.788301][ T9018] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #15: comm syz.8.1491: iget: bad i_size value: 38620345925642
[  158.851930][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  158.875476][ T9023] x_tables: duplicate underflow at hook 1
[  158.876646][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  158.892334][ T3759] udevd[3759]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  158.906753][ T9018] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.1491: couldn't read orphan inode 15 (err -117)
[  158.922114][ T9017] Direct I/O collision with buffered writes! File: /file1 Comm: syz.8.1491
[  159.054125][ T7411] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm kworker/u8:9: bg 0: block 5: invalid block bitmap
[  159.076473][ T7411] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28
[  159.088785][ T7411] EXT4-fs (loop8): This should not happen!! Data will be lost
[  159.088785][ T7411] 
[  159.098549][ T7411] EXT4-fs (loop8): Total free blocks count 0
[  159.104589][ T7411] EXT4-fs (loop8): Free/Dirty block details
[  159.110589][ T7411] EXT4-fs (loop8): free_blocks=0
[  159.115655][ T7411] EXT4-fs (loop8): dirty_blocks=5
[  159.120775][ T7411] EXT4-fs (loop8): Block reservation details
[  159.126924][ T7411] EXT4-fs (loop8): i_reserved_data_blocks=5
[  159.141922][   T31] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 131587 with max blocks 1 with error 28
[  159.155258][   T31] EXT4-fs (loop8): This should not happen!! Data will be lost
[  159.155258][   T31] 
[  159.300616][ T9054] bridge0: port 3(macsec1) entered blocking state
[  159.307311][ T9054] bridge0: port 3(macsec1) entered disabled state
[  159.327145][ T9054] macsec1: entered allmulticast mode
[  159.332607][ T9054] bridge0: entered allmulticast mode
[  159.339933][ T9054] macsec1: left allmulticast mode
[  159.345022][ T9054] bridge0: left allmulticast mode
[  159.363479][ T9066] __nla_validate_parse: 5 callbacks suppressed
[  159.363542][ T9066] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1513'.
[  159.426895][ T3759] GPT:first_usable_lbas don't match.
[  159.432262][ T3759] GPT:34 != 290
[  159.435815][ T3759] GPT: Use GNU Parted to correct GPT errors.
[  159.441989][ T3759]  loop4: p1 p2 p3
[  159.453595][ T9064] GPT:first_usable_lbas don't match.
[  159.459052][ T9064] GPT:34 != 290
[  159.462629][ T9064] GPT: Use GNU Parted to correct GPT errors.
[  159.468935][ T9064]  loop4: p1 p2 p3
[  159.493972][ T9064] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1508'.
[  159.647542][ T9081] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1519'.
[  159.657821][ T3759] GPT:first_usable_lbas don't match.
[  159.663145][ T3759] GPT:34 != 290
[  159.666661][ T3759] GPT: Use GNU Parted to correct GPT errors.
[  159.672922][ T3759]  loop8: p1 p2 p3
[  159.688791][ T9078] GPT:first_usable_lbas don't match.
[  159.694169][ T9078] GPT:34 != 290
[  159.697719][ T9078] GPT: Use GNU Parted to correct GPT errors.
[  159.704039][ T9078]  loop8: p1 p2 p3
[  159.725615][ T3002] GPT:first_usable_lbas don't match.
[  159.731039][ T3002] GPT:34 != 290
[  159.734548][ T3002] GPT: Use GNU Parted to correct GPT errors.
[  159.740678][ T3002]  loop8: p1 p2 p3
[  159.803004][ T9090] netlink: 'syz.5.1520': attribute type 8 has an invalid length.
[  159.983185][ T9113] set_capacity_and_notify: 3 callbacks suppressed
[  159.983265][ T9113] loop0: detected capacity change from 0 to 8192
[  160.001065][ T9113] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  160.092955][ T9120] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1531'.
[  160.152734][ T9127] loop4: detected capacity change from 0 to 512
[  160.159576][ T9127] EXT4-fs: Ignoring removed nobh option
[  160.166672][ T9127] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  160.189260][ T9127] EXT4-fs (loop4): 1 truncate cleaned up
[  160.546736][ T9141] loop7: detected capacity change from 0 to 512
[  160.560033][ T9141] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #15: comm syz.7.1538: iget: bad i_size value: 38620345925642
[  160.573214][ T9141] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.1538: couldn't read orphan inode 15 (err -117)
[  160.616701][ T9141] Direct I/O collision with buffered writes! File: /file1 Comm: syz.7.1538
[  160.652630][ T9142] loop4: detected capacity change from 0 to 8192
[  160.666930][ T9142] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  160.685338][   T31] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm kworker/u8:1: bg 0: block 5: invalid block bitmap
[  160.706521][   T31] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28
[  160.718829][   T31] EXT4-fs (loop7): This should not happen!! Data will be lost
[  160.718829][   T31] 
[  160.728516][   T31] EXT4-fs (loop7): Total free blocks count 0
[  160.734517][   T31] EXT4-fs (loop7): Free/Dirty block details
[  160.740471][   T31] EXT4-fs (loop7): free_blocks=0
[  160.745435][   T31] EXT4-fs (loop7): dirty_blocks=5
[  160.750673][   T31] EXT4-fs (loop7): Block reservation details
[  160.756914][   T31] EXT4-fs (loop7): i_reserved_data_blocks=5
[  160.766764][   T12] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 131587 with max blocks 1 with error 28
[  160.779609][   T12] EXT4-fs (loop7): This should not happen!! Data will be lost
[  160.779609][   T12] 
[  160.818704][ T9150] FAULT_INJECTION: forcing a failure.
[  160.818704][ T9150] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  160.831911][ T9150] CPU: 0 UID: 0 PID: 9150 Comm: syz.4.1537 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  160.831949][ T9150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  160.831989][ T9150] Call Trace:
[  160.831996][ T9150]  <TASK>
[  160.832005][ T9150]  __dump_stack+0x1d/0x30
[  160.832041][ T9150]  dump_stack_lvl+0x95/0xd0
[  160.832064][ T9150]  dump_stack+0x15/0x1b
[  160.832084][ T9150]  should_fail_ex+0x263/0x280
[  160.832123][ T9150]  should_fail+0xb/0x20
[  160.832238][ T9150]  should_fail_usercopy+0x1a/0x20
[  160.832281][ T9150]  _copy_from_user+0x1c/0xb0
[  160.832371][ T9150]  ucma_write+0xd8/0x260
[  160.832428][ T9150]  ? __pfx_ucma_write+0x10/0x10
[  160.832459][ T9150]  vfs_write+0x269/0x9f0
[  160.832478][ T9150]  ? __rcu_read_unlock+0x4e/0x70
[  160.832586][ T9150]  ? __fget_files+0x184/0x1c0
[  160.832620][ T9150]  ksys_write+0xdc/0x1a0
[  160.832648][ T9150]  __x64_sys_write+0x40/0x50
[  160.832729][ T9150]  x64_sys_call+0x2847/0x3000
[  160.832754][ T9150]  do_syscall_64+0xc0/0x2a0
[  160.832794][ T9150]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  160.832862][ T9150] RIP: 0033:0x7fa4ad94aeb9
[  160.832879][ T9150] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  160.832898][ T9150] RSP: 002b:00007fa4ac321028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  160.832923][ T9150] RAX: ffffffffffffffda RBX: 00007fa4adbc6090 RCX: 00007fa4ad94aeb9
[  160.832943][ T9150] RDX: 0000000000000118 RSI: 0000200000000280 RDI: 0000000000000008
[  160.832961][ T9150] RBP: 00007fa4ac321090 R08: 0000000000000000 R09: 0000000000000000
[  160.832979][ T9150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  160.833016][ T9150] R13: 00007fa4adbc6128 R14: 00007fa4adbc6090 R15: 00007ffce5fc5df8
[  160.833040][ T9150]  </TASK>
[  161.581683][ T9175] loop8: detected capacity change from 0 to 2048
[  161.637966][ T9175] GPT:first_usable_lbas don't match.
[  161.643349][ T9175] GPT:34 != 290
[  161.646926][ T9175] GPT: Use GNU Parted to correct GPT errors.
[  161.653047][ T9175]  loop8: p1 p2 p3
[  161.683914][ T9179] usb usb1: usbfs: process 9179 (syz.4.1552) did not claim interface 0 before use
[  161.695035][ T9175] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1550'.
[  162.050497][ T9197] loop7: detected capacity change from 0 to 4096
[  162.270863][ T9203] loop0: detected capacity change from 0 to 2048
[  162.289881][ T9203] EXT4-fs: Ignoring removed mblk_io_submit option
[  162.306516][ T9203] EXT4-fs: inline encryption not supported
[  162.340125][ T9203] EXT4-fs mount: 8 callbacks suppressed
[  162.340146][ T9203] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  162.352390][ T9197] loop7: detected capacity change from 0 to 256
[  162.531272][ T9209] netlink: 'syz.8.1564': attribute type 2 has an invalid length.
[  162.539186][ T9209] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1564'.
[  162.852081][   T29] kauditd_printk_skb: 35 callbacks suppressed
[  162.852100][   T29] audit: type=1326 audit(1769830349.460:2085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9211 comm="syz.4.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4ad94aeb9 code=0x7ffc0000
[  162.856160][ T9218] netlink: 'syz.4.1565': attribute type 1 has an invalid length.
[  162.858393][   T29] audit: type=1326 audit(1769830349.460:2086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9211 comm="syz.4.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4ad94aeb9 code=0x7ffc0000
[  162.881967][ T9218] netlink: 'syz.4.1565': attribute type 2 has an invalid length.
[  162.889685][   T29] audit: type=1326 audit(1769830349.460:2087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9211 comm="syz.4.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4ad94aeb9 code=0x7ffc0000
[  162.889730][   T29] audit: type=1326 audit(1769830349.460:2088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9211 comm="syz.4.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa4ad94aeb9 code=0x7ffc0000
[  162.967869][   T29] audit: type=1326 audit(1769830349.460:2089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9211 comm="syz.4.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4ad94aeb9 code=0x7ffc0000
[  162.991422][   T29] audit: type=1326 audit(1769830349.460:2090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9211 comm="syz.4.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4ad94aeb9 code=0x7ffc0000
[  163.015042][   T29] audit: type=1326 audit(1769830349.460:2091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9211 comm="syz.4.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4ad94aeb9 code=0x7ffc0000
[  163.038604][   T29] audit: type=1326 audit(1769830349.460:2092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9211 comm="syz.4.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fa4ad94aeb9 code=0x7ffc0000
[  163.062134][   T29] audit: type=1326 audit(1769830349.460:2093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9211 comm="syz.4.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4ad94aeb9 code=0x7ffc0000
[  163.085718][   T29] audit: type=1326 audit(1769830349.460:2094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9211 comm="syz.4.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4ad94aeb9 code=0x7ffc0000
[  163.111380][ T9227] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1571'.
[  163.127527][ T9227] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=771 sclass=netlink_route_socket pid=9227 comm=syz.8.1571
[  163.207652][ T9228] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1572'.
[  163.230345][ T9230] loop8: detected capacity change from 0 to 512
[  163.246219][ T9230] EXT4-fs: Ignoring removed nobh option
[  163.269920][ T9230] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  163.297310][ T9230] EXT4-fs (loop8): 1 truncate cleaned up
[  163.303311][ T9230] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  163.325257][ T9203] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  163.340864][ T9203] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  163.353494][ T9203] EXT4-fs (loop0): This should not happen!! Data will be lost
[  163.353494][ T9203] 
[  163.363281][ T9203] EXT4-fs (loop0): Total free blocks count 0
[  163.369396][ T9203] EXT4-fs (loop0): Free/Dirty block details
[  163.375350][ T9203] EXT4-fs (loop0): free_blocks=2415919104
[  163.381152][ T9203] EXT4-fs (loop0): dirty_blocks=5264
[  163.386515][ T9203] EXT4-fs (loop0): Block reservation details
[  163.392531][ T9203] EXT4-fs (loop0): i_reserved_data_blocks=329
[  163.492863][ T4193] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28
[  163.516125][ T9238] loop4: detected capacity change from 0 to 2048
[  163.524318][ T9238] EXT4-fs: Ignoring removed mblk_io_submit option
[  163.550606][ T9238] EXT4-fs: inline encryption not supported
[  163.662998][ T9238] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  163.698547][ T4656] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.839626][ T9261] EXT4-fs: inline encryption not supported
[  163.846800][ T9261] EXT4-fs: Ignoring removed mblk_io_submit option
[  163.856767][ T9261] EXT4-fs error (device loop8): ext4_orphan_get:1391: comm syz.8.1584: inode #13: comm syz.8.1584: iget: illegal inode #
[  163.885904][ T9261] EXT4-fs (loop8): Remounting filesystem read-only
[  163.893061][ T9261] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  163.926894][ T3305] GPT:first_usable_lbas don't match.
[  163.932273][ T3305] GPT:34 != 290
[  163.935910][ T3305] GPT: Use GNU Parted to correct GPT errors.
[  163.942048][ T3305]  loop0: p1 p2 p3
[  163.946630][ T4656] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.971911][ T9263] GPT:first_usable_lbas don't match.
[  163.977432][ T9263] GPT:34 != 290
[  163.980913][ T9263] GPT: Use GNU Parted to correct GPT errors.
[  163.987346][ T9263]  loop0: p1 p2 p3
[  164.118404][ T9238] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  164.133956][ T9238] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  164.146594][ T9238] EXT4-fs (loop4): This should not happen!! Data will be lost
[  164.146594][ T9238] 
[  164.156368][ T9238] EXT4-fs (loop4): Total free blocks count 0
[  164.162394][ T9238] EXT4-fs (loop4): Free/Dirty block details
[  164.168366][ T9238] EXT4-fs (loop4): free_blocks=2415919104
[  164.174115][ T9238] EXT4-fs (loop4): dirty_blocks=8208
[  164.179548][ T9238] EXT4-fs (loop4): Block reservation details
[  164.185566][ T9238] EXT4-fs (loop4): i_reserved_data_blocks=513
[  164.259301][ T4193] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28
[  164.400764][ T9277] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #15: comm syz.8.1590: iget: bad i_size value: 38620345925642
[  164.439547][ T9277] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.1590: couldn't read orphan inode 15 (err -117)
[  164.474466][ T9277] EXT4-fs (loop8): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback.
[  164.497022][ T9277] Direct I/O collision with buffered writes! File: /file1 Comm: syz.8.1590
[  164.532926][   T52] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm kworker/u8:3: bg 0: block 5: invalid block bitmap
[  164.546759][   T52] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28
[  164.559201][   T52] EXT4-fs (loop8): This should not happen!! Data will be lost
[  164.559201][   T52] 
[  164.568959][   T52] EXT4-fs (loop8): Total free blocks count 0
[  164.574987][   T52] EXT4-fs (loop8): Free/Dirty block details
[  164.580954][   T52] EXT4-fs (loop8): free_blocks=0
[  164.585961][   T52] EXT4-fs (loop8): dirty_blocks=5
[  164.591111][   T52] EXT4-fs (loop8): Block reservation details
[  164.597191][   T52] EXT4-fs (loop8): i_reserved_data_blocks=5
[  164.616587][   T52] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 131587 with max blocks 1 with error 28
[  164.758272][ T9295] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1595'.
[  165.422505][ T9311] Dead loop on virtual device ip6_vti0, fix it urgently!
[  166.058672][ T9317] set_capacity_and_notify: 3 callbacks suppressed
[  166.058691][ T9317] loop4: detected capacity change from 0 to 4096
[  166.107470][ T9319] loop7: detected capacity change from 0 to 512
[  166.339345][ T9327] FAULT_INJECTION: forcing a failure.
[  166.339345][ T9327] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  166.352513][ T9327] CPU: 0 UID: 0 PID: 9327 Comm: syz.7.1606 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  166.352665][ T9327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  166.352678][ T9327] Call Trace:
[  166.352686][ T9327]  <TASK>
[  166.352702][ T9327]  __dump_stack+0x1d/0x30
[  166.352786][ T9327]  dump_stack_lvl+0x95/0xd0
[  166.352814][ T9327]  dump_stack+0x15/0x1b
[  166.352884][ T9327]  should_fail_ex+0x263/0x280
[  166.353011][ T9327]  should_fail+0xb/0x20
[  166.353042][ T9327]  should_fail_usercopy+0x1a/0x20
[  166.353145][ T9327]  _copy_to_user+0x20/0xa0
[  166.353175][ T9327]  simple_read_from_buffer+0xb5/0x130
[  166.353249][ T9327]  proc_fail_nth_read+0x10e/0x150
[  166.353285][ T9327]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  166.353322][ T9327]  vfs_read+0x1ab/0x7f0
[  166.353349][ T9327]  ? sock_common_getsockopt+0x60/0x70
[  166.353421][ T9327]  ? __pfx_sock_common_getsockopt+0x10/0x10
[  166.353458][ T9327]  ? do_sock_getsockopt+0x1c4/0x210
[  166.353506][ T9327]  ksys_read+0xdc/0x1a0
[  166.353552][ T9327]  __x64_sys_read+0x40/0x50
[  166.353579][ T9327]  x64_sys_call+0x2889/0x3000
[  166.353670][ T9327]  do_syscall_64+0xc0/0x2a0
[  166.353730][ T9327]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  166.353754][ T9327] RIP: 0033:0x7fa410dbb78e
[  166.353836][ T9327] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  166.353861][ T9327] RSP: 002b:00007fa40f856fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  166.353888][ T9327] RAX: ffffffffffffffda RBX: 00007fa40f8576c0 RCX: 00007fa410dbb78e
[  166.353908][ T9327] RDX: 000000000000000f RSI: 00007fa40f8570a0 RDI: 0000000000000004
[  166.353926][ T9327] RBP: 00007fa40f857090 R08: 0000000000000000 R09: 0000000000000000
[  166.353943][ T9327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  166.353987][ T9327] R13: 00007fa411076038 R14: 00007fa411075fa0 R15: 00007ffc24e7a868
[  166.354024][ T9327]  </TASK>
[  166.555046][ T9317] loop4: detected capacity change from 0 to 256
[  166.673758][ T9321] loop8: detected capacity change from 0 to 512
[  166.699964][ T9339] loop7: detected capacity change from 0 to 2048
[  166.734432][ T9321] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #15: comm syz.8.1602: corrupted inode contents
[  166.755608][ T9321] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem
[  166.777071][ T3305] GPT:first_usable_lbas don't match.
[  166.782420][ T3305] GPT:34 != 290
[  166.785980][ T3305] GPT: Use GNU Parted to correct GPT errors.
[  166.792157][ T3305]  loop7: p1 p2 p3
[  166.799285][ T9321] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #15: comm syz.8.1602: corrupted inode contents
[  166.815443][ T9321] EXT4-fs error (device loop8): ext4_evict_inode:301: inode #15: comm syz.8.1602: mark_inode_dirty error
[  166.838409][ T9321] EXT4-fs (loop8): 1 orphan inode deleted
[  166.844731][ T9321] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  166.854466][ T9339] GPT:first_usable_lbas don't match.
[  166.862139][ T9339] GPT:34 != 290
[  166.865625][ T9339] GPT: Use GNU Parted to correct GPT errors.
[  166.867298][ T9347] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1611'.
[  166.872238][ T9339]  loop7: p1 p2 p3
[  166.886616][ T9321] EXT4-fs error (device loop8): ext4_find_dest_de:2050: inode #2: block 13: comm syz.8.1602: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0
[  167.022513][ T4656] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.035647][ T9353] netlink: 'syz.0.1614': attribute type 2 has an invalid length.
[  167.043522][ T9353] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1614'.
[  167.071091][ T9358] xt_hashlimit: size too large, truncated to 1048576
[  167.186755][ T9361] loop0: detected capacity change from 0 to 1024
[  167.193998][ T9361] EXT4-fs: Ignoring removed orlov option
[  167.244285][ T9359] loop4: detected capacity change from 0 to 2048
[  167.259699][ T9361] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  167.321993][ T3759] GPT:first_usable_lbas don't match.
[  167.327495][ T3759] GPT:34 != 290
[  167.331004][ T3759] GPT: Use GNU Parted to correct GPT errors.
[  167.337218][ T3759]  loop4: p1 p2 p3
[  167.374955][ T9359] GPT:first_usable_lbas don't match.
[  167.380374][ T9359] GPT:34 != 290
[  167.383881][ T9359] GPT: Use GNU Parted to correct GPT errors.
[  167.390285][ T9359]  loop4: p1 p2 p3
[  167.440863][ T9373] loop7: detected capacity change from 0 to 512
[  167.451621][ T9373] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1620: bg 0: block 393: padding at end of block bitmap is not set
[  167.477774][ T9373] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6689: Corrupt filesystem
[  167.505942][ T9371] loop8: detected capacity change from 0 to 2048
[  167.515417][ T9371] EXT4-fs: Ignoring removed mblk_io_submit option
[  167.523852][ T9373] EXT4-fs (loop7): 2 truncates cleaned up
[  167.541106][ T9371] EXT4-fs: inline encryption not supported
[  167.557498][ T9373] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  167.595289][ T4132] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.619922][ T9371] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  167.723590][ T9386] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1620'.
[  167.781778][ T4100] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.794765][ T4100] ==================================================================
[  167.802923][ T4100] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru
[  167.810622][ T4100] 
[  167.812967][ T4100] read-write to 0xffff888237d26468 of 1 bytes by task 9387 on cpu 1:
[  167.821048][ T4100]  folio_add_lru+0xa4/0x1e0
[  167.825593][ T4100]  shmem_get_folio_gfp+0x7b0/0xd60
[  167.830777][ T4100]  shmem_write_begin+0xfc/0x1f0
[  167.835696][ T4100]  generic_perform_write+0x183/0x490
[  167.841023][ T4100]  shmem_file_write_iter+0xc5/0xf0
[  167.846173][ T4100]  iter_file_splice_write+0x6bc/0xa80
[  167.851574][ T4100]  direct_splice_actor+0x156/0x2a0
[  167.856708][ T4100]  splice_direct_to_actor+0x311/0x670
[  167.862113][ T4100]  do_splice_direct+0x119/0x1a0
[  167.866986][ T4100]  do_sendfile+0x382/0x650
[  167.871432][ T4100]  __x64_sys_sendfile64+0x105/0x150
[  167.876674][ T4100]  x64_sys_call+0x2db1/0x3000
[  167.881409][ T4100]  do_syscall_64+0xc0/0x2a0
[  167.885943][ T4100]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.891864][ T4100] 
[  167.894212][ T4100] read to 0xffff888237d26468 of 1 bytes by task 4100 on cpu 0:
[  167.901777][ T4100]  __lru_add_drain_all+0x17e/0x450
[  167.906929][ T4100]  lru_add_drain_all+0x10/0x20
[  167.911728][ T4100]  invalidate_bdev+0x47/0x70
[  167.916353][ T4100]  ext4_put_super+0x624/0x7d0
[  167.921053][ T4100]  generic_shutdown_super+0xe6/0x210
[  167.926371][ T4100]  kill_block_super+0x2a/0x70
[  167.931068][ T4100]  ext4_kill_sb+0x42/0x80
[  167.935429][ T4100]  deactivate_locked_super+0x75/0x1c0
[  167.940842][ T4100]  deactivate_super+0x97/0xa0
[  167.945609][ T4100]  cleanup_mnt+0x2bb/0x330
[  167.950080][ T4100]  __cleanup_mnt+0x19/0x20
[  167.954524][ T4100]  task_work_run+0x130/0x1a0
[  167.959197][ T4100]  exit_to_user_mode_loop+0x1f7/0x6f0
[  167.964608][ T4100]  do_syscall_64+0x1d3/0x2a0
[  167.969228][ T4100]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.975150][ T4100] 
[  167.977489][ T4100] value changed: 0x18 -> 0x1f
[  167.982182][ T4100] 
[  167.984531][ T4100] Reported by Kernel Concurrency Sanitizer on:
[  167.990701][ T4100] CPU: 0 UID: 0 PID: 4100 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) 
[  168.000701][ T4100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  168.010779][ T4100] ==================================================================
[  168.035998][ T9389] loop0: detected capacity change from 0 to 4096
[  168.071517][ T9389] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  168.151384][   T29] kauditd_printk_skb: 143 callbacks suppressed
[  168.151403][   T29] audit: type=1400 audit(1769830354.760:2238): avc:  denied  { mount } for  pid=9388 comm="syz.0.1624" name="/" dev="autofs" ino=24447 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  168.252712][ T9371] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  168.287751][ T9389] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.317924][ T9371] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  168.330484][ T9371] EXT4-fs (loop8): This should not happen!! Data will be lost
[  168.330484][ T9371] 
[  168.340218][ T9371] EXT4-fs (loop8): Total free blocks count 0
[  168.346323][ T9371] EXT4-fs (loop8): Free/Dirty block details
[  168.352425][ T9371] EXT4-fs (loop8): free_blocks=2415919104
[  168.358254][ T9371] EXT4-fs (loop8): dirty_blocks=4064
[  168.363577][ T9371] EXT4-fs (loop8): Block reservation details
[  168.369774][ T9371] EXT4-fs (loop8): i_reserved_data_blocks=254
[  168.429524][ T7411] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2008 with error 28