last executing test programs:

4m39.820552831s ago: executing program 2 (id=724):
r0 = socket(0x1bc692daeee8aeb6, 0x6, 0x80000000)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x4, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @empty}}}, 0x108)
ioctl$XFS_IOC_READLINK_BY_HANDLE(r0, 0xc038586c, &(0x7f0000000380)={r0, &(0x7f0000000000)='{\x00', 0x98300, &(0x7f0000000040)={@align, {0x0, 0xfff, 0x800, 0x7dc}}, 0x6, &(0x7f00000003c0)={@_ha_fsid}, &(0x7f0000000340)=0x4})
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x5, {{0xa, 0x0, 0x800, @mcast2, 0x58}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0xfffffffffffffe4c)

4m39.675741418s ago: executing program 2 (id=725):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300)

4m39.334568165s ago: executing program 2 (id=728):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000003040)={@broadcast, @remote, @local}, 0x47)
getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000002f80), &(0x7f0000003000)=0x68)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x9, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x4e)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x108, 0x0, 0x0, 0x4)
recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5)
ioprio_set$pid(0x2, 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4521], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36}, 0x94)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000180)={@ifindex, r7, 0x2f, 0x2014}, 0x20)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x548)
socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r8, &(0x7f0000001340)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0xf, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000600)="92", 0x1}], 0x1}}, {{&(0x7f0000000200)={0xa, 0x4e20, 0x9, @local, 0x5}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000040)='g', 0x13}], 0x1}}], 0x400000000000126, 0x20000800)
r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00')
sendfile(r9, r9, 0x0, 0x2000007ff)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x48, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10004893}, 0x80)

4m37.119978045s ago: executing program 2 (id=739):
syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x898408, &(0x7f0000000280)={[{@errors_remount}, {@nodelalloc}, {@data_journal}, {@stripe={'stripe', 0x3d, 0x3}}, {@jqfmt_vfsv0}, {@grpid}]}, 0x7, 0x45c, &(0x7f0000000940)="$eJzs28tvG8UfAPDvbh799fVLKOXRBxAoiIhH0qQFeuAACCQOICFxKcfQpFVp2qAmSLRCtCBUjqgSd8QRib+AE1wQcELiCndUqUK9UHEyWu9u7GzspAmx3dafj7TxzO7aM1/Pjj2zEwfQt8ayP0nEroj4PSJG8uzKE8byh5s3apfynbXa238l9fP+vvHRifLU8nk7i8x4GpF+lsSBFuUuXrh4ZmZ+fu58kZ9cOvv+5OKFi8+ePjtzau7U3LnpY8eOHpl64fnp57Ykznuyuu7/eOHgvtffufrmieNX3/3526SMvxLHFhlb6+ATtdoWF9dbu5vSyeCqw9u6Whlu2UBEZM01VO//IzEQjcYbidc+7WnlgI6qFdocvlwD7mJJNOeGo3c1Abqr/KLP5r/l1r3RR+9dfzmfAGVx3yy2/MhgpJFPjLK5Uadm62MRcfzyP19lW3TmPgQAwArfZ+OfZ1qN/9K4v+m8/xdrQ6PFWsqeiLg3IvZGxH0R9XMfiIgHK6+frlN+dZFk9fgnvbbp4G5BNv57sb62VR3/Ldd8dKDI7a5nhpKTp+fnDhfvyXgMbcvyU2uU8cOrv33R7ljz+C/bsvLLsWBRj2uDldWT2Zmlmf8Sc7Prn0TsH2wVf7K8EpBExL6I2L/JMk4/9c3Bdseq8deStV7ppZXZ1etMG1b7OuLJvP0vRyX+UrL2+uTk/2J+7vBkeVWs9suvV95qV/767d9ZWfvvaHn9L8c/mjSv1y5uvIwrf3zedk4zsanrv7FjuHj8cGZp6fxUxHDyRl7p5v3TjeeW+fL8LP7xQ637/55ovBMHIiK7iB+KiIcj4pGi7R6NiMci4tAa8f/0yuPvtTt2O7T/bKX9R1eeUmn/RmI4qntaJwbO/PjdyldsJG/t8+9oPTVe7Fnv86+8Jtar1+auZgAAALjzpBGxK5J0YjmdphMT+f/w740d6fzC4tLTJxc+ODeb/0ZgNIbS8k5Xfj84vx86VUzry/x0JX+kuG/85cD2en7ixML8bK+Dhz63s03/z/w50OvaAR23BetowB1K/4f+pf9D/9L/oX+16P/b13nKUKfqAnRXq+//S41kbaSblQG6qtL/LftBHzH/h/6l/0P/au7/a/7+HribLG6P9X8kLyGxKhHpbVGNrUkkHe4Fu3od4MYTvf5kAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2Br/BgAA///JC+C9")
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, 0x0, 0x80)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b400000009060102000000000000000005000002700008800c000780060005404e2200000c000780080008005eb69725293027000ced068005000300070000000c00078008001c4000007e05100007800c0018400000000000000003100007800c0019404200000000000100000000000000064000000000000500010007000000080009400000dc9f09000200737957ea00000000080009400000000400"/168], 0xb4}}, 0x4080)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2b4, &(0x7f0000000280)="$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")
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000900)='devices.list\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000001400)={'#! ', '', [{0x20, '$,+I&'}, {0x20, 'errors=remount-ro'}, {}, {0x20, 'nodelalloc'}, {0x20, '/de\x85/\xaa\vsu\x00=\x84\xb9\xe6\x15N&\xc6\xfd\x13w:G m\xc5t\x14\xc3\xd6\xeb\xce\x18\xed\x1e\xcf\xaer\xb6\xc9\xa0(\xdf._\xff=58\xc7\x86\xd7W\x87_\x86`\x13C\xc3\x9c\xc2\x8e3@;\x19f\xb5L\x97\x80\x1a\x1c$@\xc1\xb8>;\xdfC\x176\x004\xb17\x9e\xcfA\xf7\xc0\x85=\x15t1\xe7\f0\xba(\x9a\x8e\x9e(\x1fKF\xbd\xa1\xd1Q}\xe4\xe6\x84H+*\x8f\x02\x14\x83\x0f\xcb\xc6\x86.z{t\x92Z\xda+\xa7n\xf1\xda=\x89\xd5\x89\x9a\xbf\xc1\x1e\xa2\xd6^\x87\xff\xe6\xd5\"\xc3\xa5\xab\xd3?\xf5&\xa4\xb8s\xff\b\t\xaeI\xc1\t\xc8\xd1i\xf2\xa8G\xca\xba\xce\xc4G\vD:\x11\x8f\xe3\x12\x00\xe6\xca\xf6]\x9c\x00\xf5\xb5\xff\xf41\x9e\x99\a\xf5\'z\x98m\xdf\x81\xb3*#\x99\xc9\x1d\xbb\x1aq6\xd4\xf0R\xcf\x1d\x8e\x16\b\xf6*y\xaf\xb9\xee\xa8\x18\xa6\xda\xa0\x0eO\x04R\xd20\x1fXH!u\x12\xc7\xd8]\xa9A\xfd[[Y\f\x1cV]\xfdA7\xd4\xc7n\xa4\xee\\\x8b\"\xacs^\xbc\xfc^\x03\xa4\x863\xc1\x1c%\vxNF\"K2\xa8\a\xc4\xe2\xdb\x9e\x16\xb1\x0ep\x03\xba\xd3M\xe1\xd1\xca\x86\xd9\x94nux\xaauP\xd9B*`\xe0C8\x01\xb3h\xdah\x16\x15]K\xb0\x03V4\xf2t\xb23\x82\xea\xf1H5\xce\bX\x12Kk-\x99\xbcn\xab\xdc\fJW\xe2\x1e;\xf0\xa6'}], 0xa, "671ded8689b53e0d8074eb993e4ecaa84e51298d585478cc3fa16e763257e854ff947681706054123db4d11d00200000000000000000"}, 0x1d5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x28011, r2, 0x0)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x8840, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x26008001)
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
r4 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000340)=0x14)
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000100)=@generic={0x25, "60ec350fb8f26f6d16e886ec0add87aab308778a170bdd4fad43113e96385288c5eed1241b6cd768b00e846e031728491affd178397906043f1f811dfb855b8f864b3eb9f099874d4740bb265269f6d11a8466d4ba17a1b00503a6d8c859228ef4b454cb020000000000006c24fc1b12c74b008e00"}, 0x80, &(0x7f0000000080)=[{&(0x7f00000007c0)="27ea48d2307f56379502e0da1f60d336c3c1bfb0f5c9a604a0cdf4a78d171cd4f26755af3d3d5baf3ba70de25af721ea8f7ff9b4746c81ca582ec7a8645a2bab92c3dba92ddd33a92e402ec00913466646856bcf57bd8bca4360c2a07fa1edb91690723482c8e785"}], 0xffffee3}, 0x20000004)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x810040, &(0x7f0000000780), 0x2, 0x451, &(0x7f0000000f80)="$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")
rename(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./bus\x00')
r5 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x2d}, 0x0, 0x0, 0x0, 0x0}, 0x58)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{}, &(0x7f0000000840), &(0x7f0000000880)}, 0x20)
mknod$loop(&(0x7f0000002180)='./file0\x00', 0x800, 0x0)
sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="2c0000000107010200000000000000000a0000080900010073797a31000000000c00073fe61a52ef80a6dde2"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004840)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1)
bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x62)
listen(r3, 0x3)
close(r3)
lseek(r1, 0x100000000000003, 0x3)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYRES32=r4, @ANYRES16=r5, @ANYBLOB="000481000000fbdbdf252100000008000300", @ANYRESHEX=r3, @ANYBLOB="0c009900670000000c0000000400ec0010002d800a0000000101010101010000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000895}, 0x40044)

4m36.933792964s ago: executing program 2 (id=745):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0xd0f, 0x0, 0x4, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x2}, @TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_FWMARK={0x8, 0x12, 0x8}]}}]}, 0x4c}}, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f00000001c0)={0x4, 0x6}, 0x2)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', <r3=>0x0})
sendto$packet(r2, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r3}, 0x14)

4m36.507583595s ago: executing program 2 (id=748):
unshare(0x2040400)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_pidfd_open(r0, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x100000001)
waitid$P_PIDFD(0x3, r1, 0x0, 0x8, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e0"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=<r5=>r4, 0x35, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0], <r6=>0x0}, 0x40)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1e000000ffff0005040000000500000000100000", @ANYBLOB="792dffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000024000000020000000300"/28], 0x50)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYBLOB='\x00 \x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYRES32, @ANYBLOB], 0x20)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="09000000fdffffff83000000440d000020000000", @ANYRES32, @ANYBLOB="0100000000000000004000"/20, @ANYRES32, @ANYBLOB="0000000003000000ff0100"/28], 0x50)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)=ANY=[@ANYRES32=r7, @ANYRES32, @ANYBLOB, @ANYRES32=r5, @ANYBLOB="c2a7a1e616cd5883492450a4709ccb5153081c17f821a962688b0f54249b41e4d4b1eac42ae036406969220a93516b6c78d7287452a8f04357e5122d19b22d35959ffed75edf", @ANYRES64=r6], 0x20)
r8 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000380)='./file0\x00', 0x0, 0x8}, 0x18)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000480)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1a0000000000000000000000f1f34c3d0074598cb795aa263a680afdcefb8bd528db022776fb79468088b51dbe5a8a4f2227df93f73a7476699631e6fe2077a0b78c8ce693340bff0300003f8ab365dea268ad1d8c97267e669ac3a51b4d78aff1497749c38aba20bb5846b370a1f4c77897e597ed2fb1df2c381e5f011edfb3ab869fe7f1a5c19578ba1da43d716511db68072aa6e82d9586a62cab6b5b58ba173ca97ecdefd2a0e82658b6c27e3361c59747c278b7389091c226dab59365b44c377460f7a964c1460e86", @ANYRES32=r8, @ANYBLOB, @ANYRES64=r6], 0x20)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001840)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='/\x00'/12, @ANYRES32=r3, @ANYBLOB="0fecb690b92aa6028a70085538d928be84a4105a8dfb221911da4e8cdb6afeae6d67c9cd814abb7a2613c18aa61488166bd4b67e0f1aa76df5b6"], 0x20)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="2f0000001400000004"], 0x20)
r9 = socket(0xa, 0x2400000001, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f0000000480)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x800003c0, 0x0, 0x0, 0x800003f0, 0x80000420], 0x0, 0x0, &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108)
recvmsg$unix(r9, &(0x7f0000001640)={&(0x7f0000000000), 0x6e, &(0x7f0000001500)=[{&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/84, 0x54}, {&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000002c0)=""/80, 0x50}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/81, 0x51}, {&(0x7f0000000240)=""/30, 0x1e}], 0x7, &(0x7f0000001680)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0xac}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff80}, 0x94)
r10 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0)
unshare(0x5040700)
r11 = socket(0x10, 0x803, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r12=>0x0})
sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x60, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1406}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @loopback}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x200}, @IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x9}]}}}, @IFLA_IFALIASn={0x4}, @IFLA_TXQLEN={0x8, 0xd, 0x6d3b}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x440b0)
lseek(r10, 0x9, 0x0)

4m36.453682858s ago: executing program 32 (id=748):
unshare(0x2040400)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_pidfd_open(r0, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x100000001)
waitid$P_PIDFD(0x3, r1, 0x0, 0x8, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e0"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=<r5=>r4, 0x35, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0], <r6=>0x0}, 0x40)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1e000000ffff0005040000000500000000100000", @ANYBLOB="792dffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000024000000020000000300"/28], 0x50)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYBLOB='\x00 \x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYRES32, @ANYBLOB], 0x20)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="09000000fdffffff83000000440d000020000000", @ANYRES32, @ANYBLOB="0100000000000000004000"/20, @ANYRES32, @ANYBLOB="0000000003000000ff0100"/28], 0x50)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)=ANY=[@ANYRES32=r7, @ANYRES32, @ANYBLOB, @ANYRES32=r5, @ANYBLOB="c2a7a1e616cd5883492450a4709ccb5153081c17f821a962688b0f54249b41e4d4b1eac42ae036406969220a93516b6c78d7287452a8f04357e5122d19b22d35959ffed75edf", @ANYRES64=r6], 0x20)
r8 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000380)='./file0\x00', 0x0, 0x8}, 0x18)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000480)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1a0000000000000000000000f1f34c3d0074598cb795aa263a680afdcefb8bd528db022776fb79468088b51dbe5a8a4f2227df93f73a7476699631e6fe2077a0b78c8ce693340bff0300003f8ab365dea268ad1d8c97267e669ac3a51b4d78aff1497749c38aba20bb5846b370a1f4c77897e597ed2fb1df2c381e5f011edfb3ab869fe7f1a5c19578ba1da43d716511db68072aa6e82d9586a62cab6b5b58ba173ca97ecdefd2a0e82658b6c27e3361c59747c278b7389091c226dab59365b44c377460f7a964c1460e86", @ANYRES32=r8, @ANYBLOB, @ANYRES64=r6], 0x20)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001840)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='/\x00'/12, @ANYRES32=r3, @ANYBLOB="0fecb690b92aa6028a70085538d928be84a4105a8dfb221911da4e8cdb6afeae6d67c9cd814abb7a2613c18aa61488166bd4b67e0f1aa76df5b6"], 0x20)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="2f0000001400000004"], 0x20)
r9 = socket(0xa, 0x2400000001, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f0000000480)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x800003c0, 0x0, 0x0, 0x800003f0, 0x80000420], 0x0, 0x0, &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108)
recvmsg$unix(r9, &(0x7f0000001640)={&(0x7f0000000000), 0x6e, &(0x7f0000001500)=[{&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/84, 0x54}, {&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000002c0)=""/80, 0x50}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/81, 0x51}, {&(0x7f0000000240)=""/30, 0x1e}], 0x7, &(0x7f0000001680)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0xac}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff80}, 0x94)
r10 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0)
unshare(0x5040700)
r11 = socket(0x10, 0x803, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r12=>0x0})
sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x60, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1406}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @loopback}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x200}, @IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x9}]}}}, @IFLA_IFALIASn={0x4}, @IFLA_TXQLEN={0x8, 0xd, 0x6d3b}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x440b0)
lseek(r10, 0x9, 0x0)

2m21.919565021s ago: executing program 5 (id=1640):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
readahead(0xffffffffffffffff, 0xffffffff, 0x7f)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b03000000d86e6c1d0010ffff0af32c6e586575f800250002000f00000017d34460bc24eab556a705251e6182949a369f3d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00', 0xff})
sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, 0x0, 0x800)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6a9, 0x15cb, &(0x7f0000000000))
syz_emit_ethernet(0x4e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018232500182c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa2c0202"], 0x0)

2m21.54809155s ago: executing program 5 (id=1642):
bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000400)={@map, 0x4, 0x2b, 0x0, 0x0, 0x5d, 0x0, 0x0, 0x0, 0x0}, 0x40)
r0 = syz_io_uring_setup(0x315b, &(0x7f0000000200)={0x0, 0x1dcf, 0x1040, 0x0, 0x1000001}, &(0x7f0000000100), &(0x7f0000000040))
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r1, 0xffffffffffffffff, 0x5, 0x2})
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1)
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
write$UHID_SET_REPORT_REPLY(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="0e00000007000000040423005f6ca93a59ccf5be6a3fcfbe86a6d43869432cccffbfbab918eea540373e32525d3914cc3d2941073afec46d5144b7ae2ec5835cd3b6d5dbf193a4db5e1a4ecccde694b69dc5e91adf006d1cdd33856e2b2ac5299c38164e114d0ab5da5ddc58c7bf7051ab54922ce9fed537645619c9d786e69759748b4bb431ea289a6f43e6cc5289a4d019aef05a160b2a61e2536f83f5818cd40353d1c5e7ed9c0e88dc316836b8f1d5f1f30c05b30e86758509157247de772f31e5e54ff6647440a678bdec21f87106a1b0007c"], 0x2f)
io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000140), 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000700)=[{0x0}], 0x1)

2m21.522884731s ago: executing program 5 (id=1643):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmmsg(r2, &(0x7f0000007a00)=[{{&(0x7f0000000580)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @multicast2}, 0x4, 0x2, 0x4, 0x4}}, 0x80, 0x0}}, {{&(0x7f0000000380)=@caif=@dgm={0x25, 0x3, 0x1}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000400)="fc3874d59491e2cbc4649366f1d62db237adb085de9b7d6f772f39ca8cf85c832a4d8b1cd3b569e454e82dc2c6421972bbcac7354db1dd", 0x37}, {&(0x7f0000000640)="20d3d1356530c3020c6e5cb07043eb243c9c87512ceb0b40a3effb33ac084b3f600815d5a5e523e082f25494e187d92245aaca954976ed328d4bd18e14264af309f87e0b3f3425ff909a8a8769766750e6e9fe6f4c61399dd0c0945cdbb5d872c981786bdf3a7467b6fe012d9bb2bfc877184d9f4ea44bac213236cb81a6b60eb40d48ccdd806057b35eb4ac7cfcfd396187a40560509e7591842b69c95549a1ae3501790b3ac35708cd696bc69397cad2adf4e7a4e60826f0599beea1171cda7c3f74ffd793889c3bc57b49de755f4f7c10b6014a", 0xd5}, {&(0x7f0000000480)="4b6f6e75862d9749029c398e2cf7a4f07ce162760168fc7b1798f5c42cafb21411e143f7", 0x24}], 0x3}}], 0x2, 0x0)

2m20.592505137s ago: executing program 5 (id=1648):
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x9, 0x0, 0x0, 0x2, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x5, 0x6}, 0x0, 0x10000, 0xff, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f0000000140)={0x0, 0xb, 0x303, 0xfffe, 0x0, 0x0, 0x0})
socket$nl_generic(0x10, 0x3, 0x10)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x101040, 0x0)
fcntl$setown(r2, 0x8, 0xffffffffffffffff)
fcntl$setlease(r2, 0x400, 0x1)
r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x5, 0x5}, 0x10b08, 0x0, 0x0, 0x9, 0x1000, 0x8001, 0x7fff, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000600)={'vxcan1\x00', 0x8002})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x29, 0xff, 0x4, 0xcbf, 0x4, @remote, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x0, 0x8, 0x0, 0x965}})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_SET(r6, 0x0, 0x4040140)
bpf$MAP_CREATE(0x0, 0x0, 0x11)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x200000, 0x1000}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r8=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'sit0\x00', <r9=>0x0})
setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x1c, r9}, 0x10)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32=r9, @ANYRES64=r8, @ANYBLOB="44bae78524c2fadcf5ab21a134840d24bb8d5a4a4bd062beda587eff43281d", @ANYRES32=r1, @ANYRESDEC=r2, @ANYRES16=r7, @ANYRESOCT=r2, @ANYRES64], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x9, 0x10, &(0x7f0000000080)=ANY=[@ANYRES64=r0, @ANYRES32=r4, @ANYRES64, @ANYBLOB="03049b599496a0c794047f571259be6c", @ANYRES32=r10], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x30}, 0x94)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x4, 0x5, 0x2, 0x4038a09, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2={0xff, 0x5}, 0x700, 0x40, 0xb3, 0x5}})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r11 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r11, 0x0, 0x0)
shutdown(r11, 0x0)

2m19.538924009s ago: executing program 5 (id=1658):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x4982, 0x701ca}, [@IFLA_LINKINFO={0x28, 0x37, 0x0, 0x1, @veth={{0x9}, {0x10, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x10000, 0x48124}}}}}}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0xc10}, 0x8000)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000))
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) (fail_nth: 5)

2m19.266511112s ago: executing program 5 (id=1660):
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0xe1045, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x800000, 0x3fff8000}, 0x844, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c001680080001", @ANYRES64=r0], 0x38}}, 0x10)

2m4.082752093s ago: executing program 33 (id=1660):
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0xe1045, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x800000, 0x3fff8000}, 0x844, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c001680080001", @ANYRES64=r0], 0x38}}, 0x10)

6.452577661s ago: executing program 1 (id=2511):
r0 = syz_open_procfs$userns(0x0, &(0x7f0000000540))
r1 = dup(r0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
write$binfmt_script(0xffffffffffffffff, &(0x7f00000001c0)={'#! ', './file0'}, 0xb)
sendmsg$IPVS_CMD_GET_DAEMON(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x40)
r5 = socket(0x10, 0x803, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000200)={[{@delalloc}, {@nodelalloc}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@inlinecrypt}, {@data_err_ignore}, {@nodiscard}, {@nomblk_io_submit}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x5, 0x557, &(0x7f0000000fc0)="$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")
fadvise64(0xffffffffffffffff, 0xb29, 0x2, 0x2)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockname$packet(r5, &(0x7f0000000500)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000370400000000ffdbdf2500000000", @ANYRES32=r6, @ANYBLOB="83450500000000002c0012800900010069706970000000001c00028006000f0002000000060011004e22000008000100"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmmsg$inet(r3, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @dev={0xac, 0x14, 0x14, 0x27}}}}], 0x20}}], 0x1, 0x80)
ioctl$sock_inet_SIOCADDRT(r1, 0x8008b705, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
r8 = fsopen(&(0x7f0000000300)='sysfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0)
fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\r\xcc:', 0x0)
sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000340)=@newsa={0x14c, 0x10, 0x1, 0x0, 0x2000000, {{@in=@multicast2, @in=@remote, 0x10, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80, 0x11}, {@in, 0x0, 0x32}, @in=@loopback, {0x0, 0xfffffffffffffffd}, {0xfffffffffffffffd, 0x0, 0x8000000, 0x200}, {0x6, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x2, 0x0, 0xcd}, [@algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x18, "6efa278295fc4f0d10e970a4a0e03249"}}]}, 0x14c}}, 0x0)

6.235210551s ago: executing program 4 (id=2512):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x0, 0x3a}, 0x28)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=")
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/crypto\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet_udp(0x2, 0x2, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @any, 0x3, 0x2}, 0xe)
r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001e80)=@raw={'raw\x00', 0x8, 0x3, 0x270, 0x0, 0x43, 0xa0, 0x90, 0x98, 0x1d8, 0x178, 0x178, 0x1d8, 0x178, 0x49, 0x0, {[{{@uncond, 0x12a, 0x70, 0x90, 0x0, {0x0, 0x7a010000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe0, 0x148, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x9}, {0x81}], 0x2, 0x1}}, @common=@unspec=@connbytes={{0x38}, {[{0x7bb}, {0x7}], 0x2, 0x2}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x14, 0x6, 0x80000001, 0x8363, 'netbios-ns\x00', 'syz1\x00', {0x7ff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'dvmrp1\x00'})
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4094, 0xffe}], 0x1, 0xf0, 0xd215)
modify_ldt$write(0x1, &(0x7f0000000040)={0x401, 0x1000, 0x4000, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1}, 0x10)
modify_ldt$write2(0x11, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10)
r2 = openat(r0, &(0x7f0000000080)='./file0\x00', 0x4000, 0x0)
r3 = socket(0x2b, 0x1, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000007c923ecd5f31b579"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
socket$rds(0x15, 0x5, 0x0)
connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000880)={0x0, 0x200}, 0x8)
read$qrtrtun(r2, &(0x7f00000000c0)=""/208, 0xd0)

6.027292612s ago: executing program 1 (id=2514):
r0 = socket$inet6(0xa, 0x802, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$P9_RGETLOCK(r0, &(0x7f0000000000)={0x28, 0x37, 0x1, {0x2, 0x5, 0x9, r1, 0xa, 'syzkaller\x00'}}, 0x28)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="120000000200000008000000ebd0000000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"], 0x50)
connect$inet6(r0, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r6 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x6000006, 0xfffffefc, 0x6}, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000000040000800400", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x4044}, 0x804)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80478b, &(0x7f0000000500)={[{@nodioread_nolock}, {@grpjquota}, {@minixdf}, {@discard}, {@prjquota}, {@lazytime}, {@init_itable_val={'init_itable', 0x3d, 0xffff}}]}, 0x0, 0x489, &(0x7f0000000c80)="$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")
sendmmsg$inet6(r0, &(0x7f0000002940), 0x40000000000017d, 0x888)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x25}]}, @NFT_MSG_NEWSETELEM={0x68, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x3c, 0x3, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x2c, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xec}}, 0x0)

5.307999038s ago: executing program 4 (id=2519):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000240)={0x2000, 0x7}, 0x4)
r2 = socket$netlink(0x10, 0x3, 0x4)
write(r2, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r4, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x20, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x0, 0x20004801)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f0000000280)=0x8)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
r8 = dup2(r4, r7)
sendto$inet6(r7, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfaba51c5d, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000080)=ANY=[@ANYRES32=r6, @ANYBLOB="0200"], 0x9)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r7, 0x84, 0x19, &(0x7f0000000140)={r6, 0x2}, 0x8)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@empty, 0x200, 0x0, 0x3, 0x1, 0x0, 0x1000}, 0x20)
r9 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_DAEMON(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e3000000000000000000000000800030000000000140006"], 0x58}}, 0x0)
ioctl$TIOCGISO7816(r8, 0x80285442, &(0x7f0000000200))
r11 = socket$inet6(0xa, 0x1, 0x8010000000000084)
r12 = getpgrp(0xffffffffffffffff)
prlimit64(r12, 0xe, 0x0, 0x0)
r13 = getpgid(r12)
tgkill(r12, r13, 0x14)
bind$inet6(r11, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c)
connect$inet6(r11, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x800, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396, 0x0, 0x4}, 0x9c)

4.939420256s ago: executing program 0 (id=2520):
unshare(0x2040400)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_pidfd_open(r0, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x100000001)
waitid$P_PIDFD(0x3, r1, 0x0, 0x8, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e0"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=<r5=>r4, 0x35, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0], <r6=>0x0}, 0x40)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1e000000ffff0005040000000500000000100000", @ANYBLOB="792dffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000024000000020000000300"/28], 0x50)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)=ANY=[], 0x20)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="09000000fdffffff83000000440d000020000000", @ANYRES32, @ANYBLOB="0100000000000000004000"/20, @ANYBLOB="0000000003000000ff0100"/28], 0x50)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)=ANY=[@ANYRES32=r7, @ANYRES32, @ANYBLOB="330000001000000000000000", @ANYRES32=r5, @ANYBLOB="c2a7a1e616cd5883492450a4709ccb5153081c17f821a962688b0f54249b41e4d4b1eac42ae036406969220a93516b6c78d7287452a8f04357e5122d19b22d35959ffed75edffd3c1d9f", @ANYRES64=r6], 0x20)
r8 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000380)='./file0\x00', 0x0, 0x8}, 0x18)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000480)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1a0000000000000000000000f1f34c3d0074598cb795aa263a680afdcefb8bd528db022776fb79468088b51dbe5a8a4f2227df93f73a7476699631e6fe2077a0b78c8ce693340bff0300003f8ab365dea268ad1d8c97267e669ac3a51b4d78aff1497749c38aba20bb5846b370a1f4c77897e597ed2fb1df2c381e5f011edfb3ab869fe7f1a5c19578ba1da43d716511db68072aa6e82d9586a62cab6b5b58ba173ca97ecdefd2a0e82658b6c27e3361c59747c278b7389091c226dab59365b44c377460f7a964c1460e86", @ANYRES32=r8, @ANYBLOB, @ANYRES64=r6], 0x20)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001840)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='/\x00'/12, @ANYRES32=r3, @ANYBLOB="0fecb690b92aa6028a70085538d928be84a4105a8dfb221911da4e8cdb6afeae6d67c9cd814abb7a2613c18aa61488166bd4b67e0f1aa76df5b6", @ANYRES64=r6], 0x20)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="2f0000001400000004"], 0x20)
r9 = socket(0xa, 0x2400000001, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f0000000480)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x800003c0, 0x0, 0x0, 0x800003f0, 0x80000420], 0x0, 0x0, &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108)
recvmsg$unix(r9, &(0x7f0000001640)={&(0x7f0000000000), 0x6e, &(0x7f0000001500)=[{&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/84, 0x54}, {&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000002c0)=""/80, 0x50}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/81, 0x51}, {&(0x7f0000000240)=""/30, 0x1e}], 0x7, &(0x7f0000001680)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0xac}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff80}, 0x94)
r10 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0)
unshare(0x5040700)
r11 = socket(0x10, 0x803, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r12=>0x0})
sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x60, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1406}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @loopback}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x200}, @IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x9}]}}}, @IFLA_IFALIASn={0x4}, @IFLA_TXQLEN={0x8, 0xd, 0x6d3b}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x440b0)
lseek(r10, 0x9, 0x0)

4.938968036s ago: executing program 1 (id=2521):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}], 0x1, 0x0)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0x1}], 0x1, &(0x7f0000000f80)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c0000000000ffffffff00"/44, @ANYRESDEC=r0], 0x30, 0x40000}], 0x1, 0x0)

4.889165098s ago: executing program 0 (id=2522):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000001180)=[{0x6, 0x5, 0x5, 0x7ffc0001}]})
clock_gettime(0xfffffffffffffff6, 0x0)
r0 = semget$private(0x0, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23)
r2 = socket(0x11, 0x6, 0x4)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000240)={0x4001, 0x5, 0x1000, 0x5}, 0x10)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYRES64=r2, @ANYRESHEX=0x0], 0x2c}, 0x1, 0x0, 0x0, 0x62008894}, 0x0)
r3 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x1, 0x434, &(0x7f0000000940)="$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")
r4 = openat(r3, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r4, &(0x7f0000000140)='2', 0x1, 0x8000c61)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x404ffa5, 0x20000000006, 0x0, 0xfffffffffffffffc})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101000, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
unshare(0x6a040000)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, 0x0, 0x0)
r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x6654d1ac89fc9ba, &(0x7f0000000340)=ANY=[@ANYRES8=r4, @ANYRES16=r7], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x80000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94)
connect$l2tp(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @broadcast, 0x4}, 0x10)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @loopback, 0x4a}, 0x1c)
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x2000018, &(0x7f00000005c0)=ANY=[], 0x1, 0x759, &(0x7f00000011c0)="$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")
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000)
r8 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0)
getdents64(r8, &(0x7f0000000fc0)=""/224, 0xe0)
semtimedop(r0, &(0x7f0000000340)=[{0x0, 0x2, 0x1800}], 0x1, 0x0)

4.228774921s ago: executing program 4 (id=2525):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
unshare(0x2060280)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x22, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x2}, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setresuid(0xee00, 0xee00, 0x0)
syz_io_uring_setup(0x4dc, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x400252}, &(0x7f0000000640)=<r3=>0x0, &(0x7f0000000340)=<r4=>0x0)
socket$rxrpc(0x21, 0x2, 0xa)
socket$unix(0x1, 0x1, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r5 = io_uring_setup(0x1ca1, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {}, {0x9, 0xffff}}}, 0x24}}, 0x0)
r6 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8)
sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845)
io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000500)=@IORING_OP_MKDIRAT={0x25, 0x17, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1f, 0x0, 0xf9b7a26b18f77d51})

3.553502424s ago: executing program 1 (id=2527):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffffffffffffffff, 0x4, &(0x7f0000000040))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581)
r3 = fcntl$dupfd(r2, 0x0, r2)
syz_io_uring_setup(0xcc8, &(0x7f0000000300)={0x0, 0x24c1, 0x10, 0x40003, 0x310}, 0x0, 0x0)
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
unshare(0x22020400)
r4 = socket(0x40000000015, 0x5, 0x0)
getsockopt(r4, 0x200000000114, 0x8, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5)
pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0)
r7 = syz_io_uring_setup(0x10d2, &(0x7f0000000240)={0x0, 0x7734, 0x80, 0x0, 0x353}, &(0x7f0000000040)=<r8=>0x0, &(0x7f0000000000)=<r9=>0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345})
io_uring_enter(r7, 0x47bc, 0x0, 0x0, 0x0, 0x0)
syz_usb_disconnect(r1)
umount2(&(0x7f0000000080)='./file0\x00', 0x8)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x24048011}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0)

3.347798974s ago: executing program 3 (id=2530):
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pselect6(0x0, 0x0, &(0x7f0000000000)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x0)

3.311283266s ago: executing program 6 (id=2531):
munmap(&(0x7f0000aaf000/0x1000)=nil, 0x1000)
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240), 0x800, r1}, 0x38)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180), 0x4)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="020500090e00000000000000ffdbdf25050006de6a7150f723203bc300000000000a004e220000000920010000000000000000000000000000178000000000000002000100000004d5000104010000000005000500320000000a004e200000000100000000000000000000ffffac1414bbb22d000000000000"], 0x70}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a40000000060a01040000000000000000090000000900010073797a31000000000900020073797a320000000014000480100001800c0001006269747769736500140000001100010000000000000000000100000a6db67dabfcb7ea90d4a42688cd8a4de9956118799ae5997dea15d868a51dbc1a29106af958ff68c35458ca5040e1991aefe64671d4e9ec243210a6e4d4616fdef7773f0a14ea3562ae8b2dd5a25593dbdcec389c59a6b949757f1ef838fcb709ab5c6652d161d0b13bd49ea880428804cb1dc7cb1b"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010)
openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0xe4)

3.277921478s ago: executing program 4 (id=2532):
r0 = socket$inet6(0xa, 0x802, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$P9_RGETLOCK(r0, &(0x7f0000000000)={0x28, 0x37, 0x1, {0x2, 0x5, 0x9, r1, 0xa, 'syzkaller\x00'}}, 0x28)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="120000000200000008000000ebd0000000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"], 0x50)
connect$inet6(r0, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r6 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x6000006, 0xfffffefc, 0x6}, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000000040000800400", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x4044}, 0x804)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80478b, &(0x7f0000000500)={[{@nodioread_nolock}, {@grpjquota}, {@minixdf}, {@discard}, {@prjquota}, {@lazytime}, {@init_itable_val={'init_itable', 0x3d, 0xffff}}]}, 0x0, 0x489, &(0x7f0000000c80)="$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")
sendmmsg$inet6(r0, &(0x7f0000002940), 0x40000000000017d, 0x888)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x25}]}, @NFT_MSG_NEWSETELEM={0x68, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x3c, 0x3, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x2c, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xec}}, 0x0)

3.049274319s ago: executing program 6 (id=2533):
unshare(0x2040400)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_pidfd_open(r0, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x100000001)
waitid$P_PIDFD(0x3, r1, 0x0, 0x8, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e05"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e0"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=<r5=>r4, 0x35, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0], <r6=>0x0}, 0x40)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1e000000ffff0005040000000500000000100000", @ANYBLOB="792dffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000024000000020000000300"/28], 0x50)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYBLOB='\x00 \x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYRES32], 0x20)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="09000000fdffffff83000000440d000020000000", @ANYRES32, @ANYBLOB="0100000000000000004000"/20, @ANYBLOB="0000000003000000ff0100"/28], 0x50)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)=ANY=[@ANYRES32=r7, @ANYRES32, @ANYBLOB="330000001000000000000000", @ANYRES32=r5, @ANYBLOB="c2a7a1e616cd5883492450a4709ccb5153081c17f821a962688b0f54249b41e4d4b1eac42ae036406969220a93516b6c78d7287452a8f04357e5122d19b22d35959ffed75edffd3c1d9f", @ANYRES64=r6], 0x20)
r8 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000380)='./file0\x00', 0x0, 0x8}, 0x18)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000480)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1a0000000000000000000000f1f34c3d0074598cb795aa263a680afdcefb8bd528db022776fb79468088b51dbe5a8a4f2227df93f73a7476699631e6fe2077a0b78c8ce693340bff0300003f8ab365dea268ad1d8c97267e669ac3a51b4d78aff1497749c38aba20bb5846b370a1f4c77897e597ed2fb1df2c381e5f011edfb3ab869fe7f1a5c19578ba1da43d716511db68072aa6e82d9586a62cab6b5b58ba173ca97ecdefd2a0e82658b6c27e3361c59747c278b7389091c226dab59365b44c377460f7a964c1460e86", @ANYRES32=r8, @ANYBLOB, @ANYRES64=r6], 0x20)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001840)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='/\x00'/12, @ANYRES32=r3, @ANYBLOB="0fecb690b92aa6028a70085538d928be84a4105a8dfb221911da4e8cdb6afeae6d67c9cd814abb7a2613c18aa61488166bd4b67e0f1aa76df5b6", @ANYRES64=r6], 0x20)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="2f0000001400000004"], 0x20)
r9 = socket(0xa, 0x2400000001, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f0000000480)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x800003c0, 0x0, 0x0, 0x800003f0, 0x80000420], 0x0, 0x0, &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108)
recvmsg$unix(r9, &(0x7f0000001640)={&(0x7f0000000000), 0x6e, &(0x7f0000001500)=[{&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/84, 0x54}, {&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000002c0)=""/80, 0x50}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/81, 0x51}, {&(0x7f0000000240)=""/30, 0x1e}], 0x7, &(0x7f0000001680)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0xac}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff80}, 0x94)
r10 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0)
unshare(0x5040700)
r11 = socket(0x10, 0x803, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r12=>0x0})
sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x60, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1406}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @loopback}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x200}, @IFLA_IPTUN_LINK={0x8, 0x1, r12}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x9}]}}}, @IFLA_IFALIASn={0x4}, @IFLA_TXQLEN={0x8, 0xd, 0x6d3b}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x440b0)
lseek(r10, 0x9, 0x0)

2.775770363s ago: executing program 6 (id=2534):
unshare(0x8040480)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', <r2=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000140)={0x0, 0xfffffffffffffeda, &(0x7f0000000040)={&(0x7f0000000940)={0x60, r1, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x3}, {0xad, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4044890)
r3 = socket$inet6(0xa, 0x80002, 0x0)
getsockopt$inet6_buf(r3, 0x29, 0x6, 0x0, &(0x7f000000b4c0))
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r4, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x97, 0x8, 0x0, 0x0}}, 0x10)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
r7 = socket$netlink(0x10, 0x3, 0x0)
fcntl$setstatus(r7, 0x4, 0x40000)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r7, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x4, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4044000}, 0x4000)
sendmmsg(r5, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0)

2.62689529s ago: executing program 6 (id=2535):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10000, &(0x7f0000000080)={[{@quota}, {@delalloc}, {@acl}, {@journal_dev={'journal_dev', 0x3d, 0x11}}, {@usrjquota}, {@bsdgroups}]}, 0x1, 0x50a, &(0x7f0000001f40)="$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")
ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f00000004c0)={0x0, {}, 0x0, {}, 0x8f, 0x5, 0x0, 0xd, "b3da395cc1eb051e99086eb412b24aa21ae636f31ecac2633f8aa6b4577493ab4f86a46336d4f8a13621d4684d13f27ec54f52f4abbd7f7a3a62f434b03903d2", "c5bc3e1492333a99dced1b33b04e933806647aa9c61c0b61c380f3a94047cf4d", [0x547]})
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24002de8)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x2, 0x6, 0x518, 0x0, 0xe0, 0x1b0, 0x378, 0x2a8, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe0, 0x0, {0x7a00000010000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x12, 0x1}, {0xffffffffffffffff, 0x5, 0xc}, {0xffffffffffffffff, 0x4}, 0x6, 0x7ff}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0xa}, [0x0, 0xffffffff, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff], 'macvlan0\x00', 'wg0\x00', {}, {}, 0x6, 0x7f, 0x4}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x2, 0x5}, {0x2, 0x4, 0x4}}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x48000000, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@empty, @private0, [0xff, 0x0, 0xffffff00, 0xffffffff], [0xffffff00, 0xffffff, 0xff, 0xffffffff], 'geneve0\x00', 'xfrm0\x00', {0xff}, {}, 0x3a, 0x5, 0x0, 0x8}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x1b}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @private0, [0xff, 0xffffffff, 0x7f7fff00, 0xffffffff], [0xff000000, 0xcf16d9bfdc28978c, 0x0, 0xffffffff], 'veth0\x00', 'dvmrp1\x00', {0xff}, {}, 0x2c, 0x0, 0x6, 0x8}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0xfd}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x578)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f00000017c0)='./file1\x00', 0x0, &(0x7f0000000140)={[{@nouid32}, {@user_xattr}, {@jqfmt_vfsold}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x40}}]}, 0x1, 0xb8b, &(0x7f0000002080)="$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")
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0xd, @remote}, {0x2, 0x4e22, @remote}, {0x2, 0x0, @loopback}, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x26})
ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}, {0x2, 0x0, @broadcast}, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1})
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r2)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
fsetxattr$system_posix_acl(r4, &(0x7f0000000b40)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYRES16=r4, @ANYRES32=0x0, @ANYRESOCT=r0, @ANYRES32=0x0, @ANYBLOB="02000500", @ANYBLOB="0400eed30000000008000200", @ANYRES32=0x0, @ANYBLOB="f4000404", @ANYRES32=0xee00, @ANYBLOB="10000000000000002000000000000000"], 0x4c, 0x1)
sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
io_submit(0x0, 0x0, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000900)=ANY=[@ANYBLOB="400100001a000100feffffff00010000ac1e0101000000000000000000000000ac1414bb000000000000000000000000000107174e2300050a0000203a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc02000000000000000000000000000108000000000000009201000000000010a39b000000000000ffff0000000000001c250800000000000520000000000000fcffffffffffffff0400000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffefffffffc030000000000007d00000005350000020001002000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001d00"], 0x140}}, 0x844)
r7 = socket$caif_stream(0x25, 0x1, 0x1)
r8 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x4885, 0x100, 0x3, 0x1d}, &(0x7f00000000c0)=<r9=>0x0, &(0x7f0000000600)=<r10=>0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(r8, 0x16, &(0x7f0000000040)={&(0x7f0000002000)={[{0x0, 0x0, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1)
r11 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r11, 0x6, 0xc, 0x0, &(0x7f0000000100))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r9, r10, &(0x7f0000000b00)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r7, 0x0, 0x0, 0x0, 0x40002202, 0x1, {0x1}})

2.41967183s ago: executing program 3 (id=2536):
r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a80)={0x1c, r0, 0x10ada85e65c25359, 0xfffffffd, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @void}}}, 0x1c}}, 0x20000000)

2.41786452s ago: executing program 6 (id=2537):
creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dc81)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000002c0)={[{@abort}, {@noblock_validity}, {@delalloc}, {@errors_remount}, {@auto_da_alloc}, {@inlinecrypt}]}, 0x6, 0x61b, &(0x7f0000000bc0)="$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")
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x1, 0x353, &(0x7f0000000840)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe1, 0x4, @perf_bp={0x0}, 0x0, 0x400004}, 0x0, 0xffffffffffffffff, r3, 0x1)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
prctl$PR_SET_MM(0x23, 0x6, &(0x7f000005b000/0x2000)=nil)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="58000000000201040004000000000000000000000a000b00512e3933310000f634a3b8802c00018014000300fe80000000000000000004003b14000400fc0200000000000000000000000000010600034000010000000000"], 0x58}, 0x1, 0x0, 0x0, 0x48804}, 0x4)
syz_genetlink_get_family_id$tipc(&(0x7f0000000ac0), r4)
sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x40010)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00000000c0)={0x0, 0xfffffffd, 0xffdffff8, 0xffffffff, 0xff, "ff0000bb719b98fb73e53a0000000600"})
ioctl$TIOCPKT(r6, 0x5420, &(0x7f0000000740)=0x1004af)
r7 = syz_open_pts(r6, 0x0)
ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)=0x13)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x5, 0x1, 0x40, 0x5, 0x41}, 0x50)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4)

2.385158392s ago: executing program 3 (id=2538):
r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='net/anycast6\x00')
ioctl$LOOP_CLR_FD(r0, 0x4c01)
r1 = openat$random(0xffffffffffffff9c, &(0x7f0000002140), 0x0, 0x0)
ppoll(&(0x7f00000028c0)=[{0xffffffffffffffff, 0x1001}, {r1, 0x2085}, {r1, 0x2}], 0x3, 0x0, 0x0, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x5, 0x6a024, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
close(0x3)
sendmsg$SOCK_DESTROY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x100, 0x15, 0x20, 0x70bd2d, 0x25dfdbfb, {0x2, 0x9}, [@INET_DIAG_REQ_BYTECODE={0x22, 0x1, "43b64c8b008a403263e0066a02929e0aabf3885fc10163498a00e96fe8b6"}, @INET_DIAG_REQ_BYTECODE={0xc6, 0x1, "7b9071b23981953dd3c6e67d79e07fd56e216159b99b58acf80ecf35fef51c764dc584fc46814410f98973172310c68e32a61720cb745a9d10cb25ee85ad2cc1ac156714bdbee75c8202bfe21a06f2ebba6193eeab5ff92b9bd3a11068f801e8058a1543f19dcf807da451011c3ab584fc0f46e8b1de8464475e175cd1179e98ec5525f1dd942827530929469a299110ad07ed53691d8d101e333906fc61b63633b3ba9f004e2d1cc421b4d019a87f4da2a18742fa332761572777ab3d8376397716"}]}, 0x100}, 0x1, 0x0, 0x0, 0x4000010}, 0x4800)
socket$phonet_pipe(0x23, 0x5, 0x2)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r2, 0x0, 0x0}, 0x10)
lseek(r0, 0x2004, 0x0)

2.359710533s ago: executing program 4 (id=2539):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ff, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x220, 0x0, 0x308, 0x220, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, 0x0, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000001200)=0x8a4, 0x4)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3)
recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, @tracing=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000700)={0x3, [0x0, 0x0, 0x0]})
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fe, 0x0, 0x32}, 0x9c)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x1, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x42040}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0xffff3ed6, 0x13c, 0x6}}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000740)=<r4=>0x0)
ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000ac0)={<r5=>0x0, 0xd1ac, 0x0, [0x100000001, 0x6, 0x1ff, 0x2, 0x7f], [0x9, 0x0, 0x9, 0x3, 0x10c, 0x0, 0x200, 0x100000001, 0xfff, 0x8, 0x2, 0x8a6f, 0x4, 0x8, 0x7000000000000, 0x800, 0x9, 0xfff, 0x4, 0x7f, 0x9, 0x2, 0x6, 0x1, 0x4, 0x3, 0x6, 0x9, 0x6, 0x3e7, 0x1ff, 0xe4, 0xa2e0, 0x9, 0xd13, 0x8, 0x10001, 0x9, 0x10001, 0x0, 0x5, 0x2, 0x48, 0xffffffffffffffff, 0x1, 0x1e, 0x4, 0x57, 0xffffffff, 0x0, 0x71, 0x0, 0x7, 0xfffffffffffffff7, 0x9, 0x648c5c86, 0x80000000, 0x2ff0, 0xbb, 0x2, 0x5, 0x3, 0x3, 0xfffffffffffffffa, 0xffffffffffffcc98, 0x1, 0x7, 0x3, 0x9, 0x8, 0x28000, 0xc, 0x4, 0x6, 0x8, 0x8, 0x8001, 0x5, 0x9, 0x6, 0x400, 0x9, 0x9, 0x40, 0x0, 0x5, 0x101, 0x9, 0x2ea, 0x5, 0x401, 0x9, 0x5949, 0x1ff, 0x5, 0xd, 0x0, 0x7, 0x5, 0x8, 0xffffffffffffcd5a, 0x0, 0x2, 0x9, 0x0, 0x2, 0x1, 0x9, 0x8306370, 0x4, 0x4, 0x4, 0x7, 0x1146, 0x300, 0x5, 0x3, 0x5, 0x5, 0x8000000000000001, 0x7]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f0000001bc0)={{r1}, r4, 0x2, @unused=[0x401, 0xff, 0x4f, 0x40], @devid=r5})
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x2, 0x800, 0x0, 0x0, 0x8a}, 0x9c)
bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x60938, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40081}, 0x4000000)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x916d, 0x300, 0x0, 0x54}, 0x9c)

2.297522826s ago: executing program 3 (id=2540):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0x1b0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffc, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x134, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in=@rand_addr=0x64010102, @in=@local, @in6=@remote, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@multicast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2b, 0x3, 0x0, 0x3504, 0xa, 0x2}, {@in=@private=0xa010102, @in6=@private0, @in6=@remote, @in=@broadcast, 0x6c, 0x1, 0x0, 0x0, 0xa, 0xa}, {@in=@local, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@local, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6c, 0x2, 0x0, 0x3507, 0x0, 0xa}]}, @user_kmaddress={0x2c, 0x13, {@in6=@private1, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x2}}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x800}, 0x0)

2.203456581s ago: executing program 3 (id=2541):
r0 = socket$inet6(0xa, 0x802, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$P9_RGETLOCK(r0, &(0x7f0000000000)={0x28, 0x37, 0x1, {0x2, 0x5, 0x9, r1, 0xa, 'syzkaller\x00'}}, 0x28)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="120000000200000008000000ebd00000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"], 0x50)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31)
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r6 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x6000006, 0xfffffefc, 0x6}, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000000040000800400", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x4044}, 0x804)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80478b, &(0x7f0000000500)={[{@nodioread_nolock}, {@grpjquota}, {@minixdf}, {@discard}, {@prjquota}, {@lazytime}, {@init_itable_val={'init_itable', 0x3d, 0xffff}}]}, 0x0, 0x489, &(0x7f0000000c80)="$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")
sendmmsg$inet6(r0, &(0x7f0000002940), 0x40000000000017d, 0x888)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x25}]}, @NFT_MSG_NEWSETELEM={0x68, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x3c, 0x3, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x2c, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xec}}, 0x0)

2.199993821s ago: executing program 0 (id=2542):
r0 = socket$igmp6(0xa, 0x3, 0x3a)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a80)={0x2c, r1, 0x10ada85e65c25359, 0xfffffffd, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0x7, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}]}]}]}]}, 0x2c}}, 0x20000000)
setsockopt$MRT6_ADD_MFC(r0, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x3, 0x101, @mcast1, 0xa}, {0xa, 0x0, 0x5, @remote, 0x4}, 0x0, {[0x20000e, 0x8, 0x0, 0xfffffef9, 0x0, 0x1, 0x67e9f719, 0x1]}}, 0x5c)
sendmsg$NL80211_CMD_PROBE_CLIENT(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x44, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x81, 0x7f}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x8055}, 0x8000)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x17, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800"/16, @ANYRES32, @ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014640000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000003800038034000080040001800c000540000000000000004914000b8010009eac4fd901006f626a72656600000c0004"], 0xd0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = fsopen(&(0x7f0000000140)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(r6, 0x0, 0x9)
fchdir(r7)
lseek(r6, 0xf01, 0x0)
lsetxattr$security_selinux(&(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000000), &(0x7f0000000080)='unconfined_u:system_r:insmod_t:s0-s0:c0.c1023\x00', 0x2e, 0x0)
rmdir(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00')

2.062820318s ago: executing program 1 (id=2543):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
socket$kcm(0x2, 0xa, 0x2)
syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f0000000400)=ANY=[], 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup(r0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x260, 0x128, 0x6affffff, 0x3403000b, 0x0, 0x7, 0x200, 0x230, 0x230, 0x200, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'bond_slave_1\x00', 'veth1_to_team\x00'}, 0x0, 0xa8, 0xf0, 0x0, {0x1000000}, [@common=@unspec=@time={{0x38}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x2, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2c0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18030000ff0000000000000000000000851000000600000018000000070000000000000005000000250000000000000018000000000000000000000000000000950000000000000095000000000000004ffc31c34a6208789d65e0c1c588bf2e567825dd4688"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
socket(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[], 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa2025, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x10100}, 0x0, 0xaffffffeffffffff, 0xffffffffffffffff, 0x8)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket$unix(0x1, 0x1, 0x0)
socket(0x11, 0x3, 0xfff)
pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0)
r2 = syz_io_uring_setup(0x10d2, &(0x7f0000000240)={0x0, 0x7734, 0x80, 0x0, 0x353}, &(0x7f00000003c0)=<r3=>0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345})
io_uring_enter(r2, 0x400047bc, 0x0, 0x0, 0x0, 0x0)

608.47772ms ago: executing program 0 (id=2544):
r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x6, 0x9c000)
mmap$usbfs(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000000, 0x30, r0, 0x7f)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r1)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0)
setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000000c0)=@req={0x0, 0x5, 0x6, 0x8}, 0x10)
r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0xfdd)
splice(r3, &(0x7f0000000100)=0x7, r1, &(0x7f0000000140)=0x746, 0xa1f, 0x8)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r1)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x60, r4, 0x220, 0x70bd2c, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x1)
mknodat(r2, &(0x7f0000000300)='./file0\x00', 0x10, 0xe6)
ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000440)={<r5=>r0, &(0x7f0000000340)='gtp\x00', 0x5c5240, &(0x7f0000000380)={@_ha_fsid={[0xc000, 0x2]}, {0x0, 0xa, 0x9, 0x8}}, 0xe6e4, &(0x7f00000003c0)={@_ha_fsid}, &(0x7f0000000400)=0x3acfed7c})
read(r5, &(0x7f0000000480)=""/149, 0x95)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r5, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000640)=[0x0, 0x0, 0x0], ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x4, 0xa, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r7=>0x0, 0xf0, &(0x7f0000000700)=[{}, {}], 0x10, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0x80, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000009c0)={{r2, <r8=>0xffffffffffffffff}, &(0x7f0000000940), &(0x7f0000000980)='%pI4   \x00'}, 0x20)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x14, 0x4, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x94}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f0000000580)='syzkaller\x00', 0x6, 0x0, 0x0, 0x1e00, 0x44, '\x00', 0x0, @fallback=0x29, r2, 0x8, &(0x7f00000005c0)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000600)={0x0, 0xf, 0x1, 0x8}, 0x10, r7, r2, 0x0, &(0x7f0000000a00)=[r8, r2, r2], 0x0, 0x10, 0x7ff}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0xd, &(0x7f0000000b00)=@raw=[@func, @ldst={0x0, 0x2, 0x1, 0x8, 0x8, 0xffffffffffffffff, 0xfffffffffffffffc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xb}], &(0x7f0000000b80)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', r6, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000bc0)={0x5, 0x8, 0x3, 0x19146e88}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94)
r10 = fcntl$getown(r1, 0x9)
r11 = getpgid(r10)
recvmmsg(r1, &(0x7f00000042c0)=[{{&(0x7f0000000cc0)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000002080)=[{&(0x7f0000000d40)=""/109, 0x6d}, {&(0x7f0000000dc0)=""/228, 0xe4}, {&(0x7f0000000ec0)=""/4096, 0x1000}, {&(0x7f0000001ec0)=""/129, 0x81}, {&(0x7f0000001f80)=""/216, 0xd8}], 0x5}, 0x4}, {{&(0x7f0000002100)=@pppol2tpv3={0x18, 0x1, {0x0, <r12=>0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f00000022c0)=[{&(0x7f0000002180)=""/236, 0xec}, {&(0x7f0000002280)=""/28, 0x1c}], 0x2, &(0x7f0000002300)=""/57, 0x39}, 0xc9}, {{&(0x7f0000002340)=@l2, 0x80, &(0x7f0000002800)=[{&(0x7f00000023c0)=""/142, 0x8e}, {&(0x7f0000002480)=""/145, 0x91}, {&(0x7f0000002540)=""/223, 0xdf}, {&(0x7f0000002640)}, {&(0x7f0000002680)=""/66, 0x42}, {&(0x7f0000002700)=""/205, 0xcd}], 0x6, &(0x7f0000002880)}, 0x9faf}, {{&(0x7f00000028c0)=@pppol2tp={0x18, 0x1, {0x0, <r13=>0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000002a80)=[{&(0x7f0000002940)=""/68, 0x44}, {&(0x7f00000029c0)=""/78, 0x4e}, {&(0x7f0000002a40)=""/35, 0x23}], 0x3, &(0x7f0000002ac0)=""/180, 0xb4}, 0x2}, {{&(0x7f0000002b80)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000002fc0)=[{&(0x7f0000002c00)=""/171, 0xab}, {&(0x7f0000002cc0)=""/199, 0xc7}, {&(0x7f0000002dc0)=""/58, 0x3a}, {&(0x7f0000002e00)=""/206, 0xce}, {&(0x7f0000002f00)=""/179, 0xb3}], 0x5, &(0x7f0000003040)=""/122, 0x7a}, 0x10000}, {{&(0x7f00000030c0)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000003280)=[{&(0x7f0000003140)=""/26, 0x1a}, {&(0x7f0000003180)=""/200, 0xc8}], 0x2, &(0x7f00000032c0)=""/4096, 0x1000}, 0x9}], 0x6, 0x121, &(0x7f0000004440))
sendmsg$inet(r1, &(0x7f0000004640)={&(0x7f0000004480)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f00000045c0)=[{&(0x7f00000044c0)="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", 0xfe}], 0x1, &(0x7f0000004600)=[@ip_retopts={{0x24, 0x0, 0x7, {[@noop, @timestamp={0x44, 0x10, 0x43, 0x0, 0x4, [0x7, 0xfffffffa, 0x6]}, @noop, @noop]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xc}}], 0x40}, 0x40000)
ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000004680)={<r14=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r14, &(0x7f0000004700)={0x2000})
sched_setscheduler(r11, 0x0, &(0x7f0000004740)=0x200)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r9)
fsopen(&(0x7f0000004780)='ufs\x00', 0x1)
preadv(r13, &(0x7f0000004d40)=[{&(0x7f00000047c0)=""/4, 0x4}, {&(0x7f0000004800)=""/178, 0xb2}, {&(0x7f00000048c0)}, {&(0x7f0000004900)=""/240, 0xf0}, {&(0x7f0000004a00)=""/207, 0xcf}, {&(0x7f0000004b00)=""/140, 0x8c}, {&(0x7f0000004bc0)=""/121, 0x79}, {&(0x7f0000004c40)=""/154, 0x9a}, {&(0x7f0000004d00)=""/23, 0x17}], 0x9, 0x2, 0xe4c7)
ioctl$int_in(r12, 0x5421, &(0x7f0000004e00)=0x4)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r13, &(0x7f0000004f00)={&(0x7f0000004e40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000004ec0)={&(0x7f0000004e80)={0x30, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x6c}}}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x400}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x80)
setsockopt$inet6_IPV6_RTHDR(r13, 0x29, 0x39, &(0x7f0000004f40)={0x16, 0x8, 0x0, 0xd, 0x0, [@local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, @mcast1]}, 0x48)

495.391535ms ago: executing program 4 (id=2545):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
syz_open_dev$loop(0x0, 0xf01b, 0x0)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xf2000e8f8e46b417, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
r2 = msgget$private(0x0, 0x480)
msgsnd(r2, &(0x7f0000000480)=ANY=[@ANYRESOCT], 0x401, 0x0)
msgrcv(r2, 0x0, 0x0, 0x0, 0x1400)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
syz_emit_ethernet(0x12, &(0x7f0000000640)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @remote, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@generic={0x88fb}}}, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
splice(r4, 0x0, r5, 0x0, 0x39000, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1f, 0xf, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7e3}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
msgctl$IPC_RMID(r2, 0x0)
msgrcv(r2, 0x0, 0x38, 0x0, 0x800)
msgctl$IPC_SET(0x0, 0x1, 0x0)
r7 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1, @private}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)
syz_usb_connect(0x5, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r8=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r9 = socket$igmp6(0xa, 0x3, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x4e21, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}, 0xe}, 0x1c)
connect$inet6(r9, &(0x7f0000000100)={0xa, 0x4e21, 0xfffbfff6, @mcast2, 0xfffff000}, 0x1c)
connect$inet6(r9, &(0x7f0000000080)={0xa, 0x4e20, 0xffffffff, @ipv4={'\x00', '\xff\xff', @loopback}, 0xffff}, 0x1c)
timer_settime(r8, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0)
recvmmsg(r7, &(0x7f0000002f80)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x12112, 0x0)

476.527827ms ago: executing program 3 (id=2546):
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pselect6(0x0, 0x0, &(0x7f0000000000)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x0)

443.071778ms ago: executing program 0 (id=2547):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0xfff)
syz_emit_ethernet(0x4a, &(0x7f0000000900)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fstat(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setuid(r2)
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r3, &(0x7f0000000040)=[{&(0x7f0000000080)="588900001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000014001080800418e00000004fcff", 0x58}], 0x1)

299.339145ms ago: executing program 0 (id=2548):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10000, &(0x7f0000000080)={[{@quota}, {@delalloc}, {@acl}, {@journal_dev={'journal_dev', 0x3d, 0x11}}, {@usrjquota}, {@bsdgroups}]}, 0x1, 0x50a, &(0x7f0000001f40)="$eJzs3M9vVNUeAPDvnXZoC49HH49HQh/vvQLP2JjYQkFh4QYTExeaGHEhy6YdSGUAQ7sQ0siQGFyTuDcujTtN3OrSuPIPwIULE0NClA1gYjLmztw7nc6PzrTW1rafTzJwzp17z7nfuefMnHtP7w1g1xpP/0ki/hYR9yPiQD27coXx+n9PHi3NPn20NBuVavXCz0ltvcdpPpNvty/LTBQiCh8kLQXWLdy8dWWmXC7diEotP7V49d2phZu3np+/OnO5dLl0bfrcuTOnT519cfqFFWVHxHDPoDrUl8b1eOz960ePvHrx3uuzg62FNcfRVb7VL5Weq0b+2XbxTHN5O8D+pnTSHtftTd0Z+jacNcNi2v+XyscvbvUOAZumWq1Wh7q/Xam2utO2BNi2ktjqPQC2Rv5Dn57/5q/6kuJmDD+23MPz9ROgx4+WqrdjcPZJI/7BKGTrFFvOb1OrjJnWZDwi3q78+nH6itWuQ/ywQRUCALve1+ezYWASLeO/QhxuWu/v2RzKaET8IyIORsQ/I+JQRPwrYsW6KyQR1VXqP9S6oFH/F9ksQuHBemPrRzr+eymb28pfWb35KqMDWW5/RD5gLp3MPpOJKA5dmi+XTnUpf0+P+pvHf+krrT8fC2b78WCwZbA5N7M4s75o2z28EzE22Bp/MpgeuHwaJ4mIIxExtoZyR5vS8899erSRaTmt6B1/TbXDlN6GzJ9VP4l4tn78K9GIf2TFJGLSPD9ZaJufnBqOcunkVNoKTnbcyW+/u/tGt/p7xv/lj62bvHL2qwt/PPBMevz3NrX/yOdvl+MfTSKSxnztQkR1YG113P3+w1q54yfa31tv+9+TvFVL5/3rvZnFxRunIvYkr7Uvn17eNs/n66fxT5zo3P8PZtukn8S/IyJtxP+JiP9GDOT7fiwijkdEh9Aavnn5/+90e6/P9v+nSeOf6/j9l2TtoHb8l+fr+0zk5adLBq4cu/90rPPEfRb/gdWP/5laaiJb0vn7L1nxFdHvnm7ARwgAAAB/eYWo/e1/YbKRLhQmJ+vXgA7F3kL5+sLi/yLi2lz9HoHRKBYuzZdL+QW50Sgm+fXP0ab8dEv+dHbd+KOBkVp+cvZ6eW6rg4ddbl+tzydt/T/10xqv8wLb0A66Dw1Yo179//C9TdoRYNP5/Yfdq6n/d3uyRcVfysDO5Pcfdq9O/f92fLbqvQu+M2D7q+rLsKut3v97P28T2L4G481Gunbbc8e7bYGdqPvvvzMD2MF63yQ/tOZ7/5cT1aHObw1HhycGDK+rip6JkQ51bUkiHVltYIHFiOhv5ZH1VJEPAbs/4aGwtgKHov2tgVhtq6TzcxwiotJ1q/RT6bk/lw/32/hLN5Kn9Qdl9ggwfybKRjebz5f7abHPw90l8Vu/zc/5PgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsKP8HgAA//87jdA6")
ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f00000004c0)={0x0, {}, 0x0, {}, 0x8f, 0x5, 0x0, 0xd, "b3da395cc1eb051e99086eb412b24aa21ae636f31ecac2633f8aa6b4577493ab4f86a46336d4f8a13621d4684d13f27ec54f52f4abbd7f7a3a62f434b03903d2", "c5bc3e1492333a99dced1b33b04e933806647aa9c61c0b61c380f3a94047cf4d", [0x547]})
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24002de8)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x2, 0x6, 0x518, 0x0, 0xe0, 0x1b0, 0x378, 0x2a8, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe0, 0x0, {0x7a00000010000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x12, 0x1}, {0xffffffffffffffff, 0x5, 0xc}, {0xffffffffffffffff, 0x4}, 0x6, 0x7ff}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0xa}, [0x0, 0xffffffff, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff], 'macvlan0\x00', 'wg0\x00', {}, {}, 0x6, 0x7f, 0x4}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x2, 0x5}, {0x2, 0x4, 0x4}}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x48000000, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@empty, @private0, [0xff, 0x0, 0xffffff00, 0xffffffff], [0xffffff00, 0xffffff, 0xff, 0xffffffff], 'geneve0\x00', 'xfrm0\x00', {0xff}, {}, 0x3a, 0x5, 0x0, 0x8}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x1b}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @private0, [0xff, 0xffffffff, 0x7f7fff00, 0xffffffff], [0xff000000, 0xcf16d9bfdc28978c, 0x0, 0xffffffff], 'veth0\x00', 'dvmrp1\x00', {0xff}, {}, 0x2c, 0x0, 0x6, 0x8}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0xfd}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x578)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f00000017c0)='./file1\x00', 0x0, &(0x7f0000000140)={[{@nouid32}, {@user_xattr}, {@jqfmt_vfsold}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x40}}]}, 0x1, 0xb8b, &(0x7f0000002080)="$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")
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0xd, @remote}, {0x2, 0x4e22, @remote}, {0x2, 0x0, @loopback}, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x26})
ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}, {0x2, 0x0, @broadcast}, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1})
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r2)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
fsetxattr$system_posix_acl(r4, &(0x7f0000000b40)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYRES16=r4, @ANYRES32=0x0, @ANYRESOCT=r0, @ANYRES32=0x0, @ANYBLOB="02000500", @ANYBLOB="0400eed30000000008000200", @ANYRES32=0x0, @ANYBLOB="f4000404", @ANYRES32=0xee00, @ANYBLOB="10000000000000002000000000000000"], 0x4c, 0x1)
sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
io_submit(0x0, 0x0, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000900)=ANY=[@ANYBLOB="400100001a000100feffffff00010000ac1e0101000000000000000000000000ac1414bb000000000000000000000000000107174e2300050a0000203a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc02000000000000000000000000000108000000000000009201000000000010a39b000000000000ffff0000000000001c250800000000000520000000000000fcffffffffffffff0400000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffefffffffc030000000000007d00000005350000020001002000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001d00"], 0x140}}, 0x844)
r7 = socket$caif_stream(0x25, 0x1, 0x1)
r8 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x4885, 0x100, 0x3, 0x1d}, &(0x7f00000000c0)=<r9=>0x0, &(0x7f0000000600)=<r10=>0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(r8, 0x16, &(0x7f0000000040)={&(0x7f0000002000)={[{0x0, 0x0, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1)
r11 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r11, 0x6, 0xc, 0x0, &(0x7f0000000100))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r9, r10, &(0x7f0000000b00)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r7, 0x0, 0x0, 0x0, 0x40002202, 0x1, {0x1}})

25.350679ms ago: executing program 6 (id=2549):
r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a80)={0x1c, r0, 0x10ada85e65c25359, 0xfffffffd, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @void}}}, 0x1c}}, 0x20000000)

0s ago: executing program 1 (id=2550):
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0)

kernel console output (not intermixed with test programs):

 Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  342.078914][T10601] Call Trace:
[  342.078919][T10601]  <TASK>
[  342.078926][T10601]  __dump_stack+0x1d/0x30
[  342.079000][T10601]  dump_stack_lvl+0x95/0xd0
[  342.079019][T10601]  dump_stack+0x15/0x1b
[  342.079036][T10601]  should_fail_ex+0x263/0x280
[  342.079057][T10601]  should_fail+0xb/0x20
[  342.079140][T10601]  should_fail_usercopy+0x1a/0x20
[  342.079164][T10601]  _copy_from_user+0x1c/0xb0
[  342.079203][T10601]  do_sys_poll+0x137/0xc10
[  342.079220][T10601]  ? avc_has_perm+0x101/0x190
[  342.079242][T10601]  ? selinux_file_open+0x2e6/0x330
[  342.079295][T10601]  ? timespec64_add_safe+0x106/0x150
[  342.079313][T10601]  __x64_sys_poll+0x12c/0x230
[  342.079344][T10601]  x64_sys_call+0x2891/0x3020
[  342.079390][T10601]  do_syscall_64+0x12c/0x370
[  342.079409][T10601]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  342.079427][T10601] RIP: 0033:0x7fb6fccec799
[  342.079440][T10601] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  342.079456][T10601] RSP: 002b:00007fb6fb71e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000007
[  342.079544][T10601] RAX: ffffffffffffffda RBX: 00007fb6fcf66090 RCX: 00007fb6fccec799
[  342.079558][T10601] RDX: 00000000000035aa RSI: 0000000000000002 RDI: 0000200000000080
[  342.079572][T10601] RBP: 00007fb6fb71e090 R08: 0000000000000000 R09: 0000000000000000
[  342.079619][T10601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  342.079629][T10601] R13: 00007fb6fcf66128 R14: 00007fb6fcf66090 R15: 00007ffe5f976678
[  342.079682][T10601]  </TASK>
[  342.282428][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  342.307920][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  342.366111][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  342.606290][T10611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  342.644071][T10611] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  342.863530][T10617] loop1: detected capacity change from 0 to 128
[  342.998580][   T50] kworker/u8:3: attempt to access beyond end of device
[  342.998580][   T50] loop1: rw=1, sector=145, nr_sectors = 896 limit=128
[  343.131632][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  343.226631][   T28] audit: type=1400 audit(1774401899.510:1774): avc:  denied  { wake_alarm } for  pid=10609 comm="syz.0.2178" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  343.294621][T10632] loop6: detected capacity change from 0 to 512
[  343.301427][T10632] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  343.339550][T10632] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 548)
[  343.354734][T10632] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 548)
[  343.363947][T10632] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 548)
[  343.420418][T10636] loop3: detected capacity change from 0 to 512
[  343.428467][T10636] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  343.439130][T10636] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.2189: iget: bad i_size value: 38620345925642
[  343.453142][T10636] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  343.454651][T10636] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.2189: couldn't read orphan inode 15 (err -117)
[  343.464004][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  343.464023][    C1] EXT4-fs (loop3): initial error at time 1774401899: ext4_orphan_get:1391: inode 15
[  343.464066][    C1] EXT4-fs (loop3): last error at time 1774401899: ext4_orphan_get:1391: inode 15
[  343.503484][T10636] loop3: lost filesystem error report for type 5 error -117
[  343.517289][T10636] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  343.542476][T10636] SET target dimension over the limit!
[  343.650231][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  343.731261][   T28] audit: type=1400 audit(1774401900.030:1775): avc:  denied  { read } for  pid=10639 comm="syz.3.2190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  343.780460][T10644] loop3: detected capacity change from 0 to 512
[  343.819265][T10644] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  343.847629][T10647] lo speed is unknown, defaulting to 1000
[  343.854378][T10647] dummy0 speed is unknown, defaulting to 1000
[  343.987682][T10644] EXT4-fs (loop3): orphan cleanup on readonly fs
[  344.022200][T10644] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #16: comm syz.3.2191: corrupted inode contents
[  344.065156][T10644] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  344.067586][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  344.083348][    C0] EXT4-fs (loop3): initial error at time 1774401900: ext4_do_update_inode:5569: inode 16
[  344.093469][    C0] EXT4-fs (loop3): last error at time 1774401900: ext4_do_update_inode:5569: inode 16
[  344.105227][T10644] EXT4-fs (loop3): Remounting filesystem read-only
[  344.113214][T10644] EXT4-fs (loop3): 1 truncate cleaned up
[  344.130584][   T50] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  344.154531][   T50] Quota error (device loop3): write_blk: dquota write failed
[  344.168208][   T50] Quota error (device loop3): remove_free_dqentry: Can't write block (5) with free entries
[  344.190028][   T50] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  344.214621][   T50] Quota error (device loop3): write_blk: dquota write failed
[  344.234000][   T50] Quota error (device loop3): free_dqentry: Can't move quota data block (5) to free list
[  344.254926][   T50] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started
[  344.268966][   T50] Quota error (device loop3): v2_write_file_info: Can't write info structure
[  344.280518][   T50] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  344.292736][T10644] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  344.319078][T10660] __nla_validate_parse: 5 callbacks suppressed
[  344.319094][T10660] netlink: 131740 bytes leftover after parsing attributes in process `syz.6.2194'.
[  344.335950][T10660] netlink: zone id is out of range
[  344.342711][T10660] netlink: zone id is out of range
[  344.347930][T10660] netlink: zone id is out of range
[  344.353220][T10660] netlink: zone id is out of range
[  344.358836][T10660] netlink: del zone limit has 8 unknown bytes
[  344.368348][T10660] loop6: detected capacity change from 0 to 512
[  344.382682][T10660] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #12: comm syz.6.2194: missing EA_INODE flag
[  344.396519][T10660] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  344.396746][T10660] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.2194: error while reading EA inode 12 err=-117
[  344.418354][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  344.418373][    C0] EXT4-fs (loop6): initial error at time 1774401900: ext4_xattr_inode_iget:441: inode 12
[  344.418397][    C0] EXT4-fs (loop6): last error at time 1774401900: ext4_xattr_inode_iget:441: inode 12
[  344.451271][T10660] loop6: lost filesystem error report for type 5 error -117
[  344.451515][T10660] EXT4-fs (loop6): 1 orphan inode deleted
[  344.466795][T10660] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  344.570557][T10666] netlink: 131740 bytes leftover after parsing attributes in process `syz.4.2196'.
[  344.580879][T10666] netlink: zone id is out of range
[  344.586305][T10666] netlink: zone id is out of range
[  344.591721][T10666] netlink: zone id is out of range
[  344.597123][T10666] netlink: zone id is out of range
[  344.602365][T10666] netlink: del zone limit has 8 unknown bytes
[  344.617157][T10666] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #12: comm syz.4.2196: missing EA_INODE flag
[  344.629303][T10666] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  344.629530][T10666] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.2196: error while reading EA inode 12 err=-117
[  344.639010][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  344.639027][    C1] EXT4-fs (loop4): initial error at time 1774401900: ext4_xattr_inode_iget:441: inode 12
[  344.639053][    C1] EXT4-fs (loop4): last error at time 1774401900: ext4_xattr_inode_iget:441: inode 12
[  344.678987][T10666] loop4: lost filesystem error report for type 5 error -117
[  344.679355][T10666] EXT4-fs (loop4): 1 orphan inode deleted
[  344.693010][T10666] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  344.956846][T10671] netlink: 'syz.0.2197': attribute type 10 has an invalid length.
[  345.079669][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  345.353450][T10671] EXT4-fs (loop0): orphan cleanup on readonly fs
[  345.360545][T10671] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.2197: ea_inode with extended attributes
[  345.374502][T10671] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  345.376363][    C1] EXT4-fs (loop0): error count since last fsck: 1
[  345.392434][    C1] EXT4-fs (loop0): initial error at time 1774401901: ext4_xattr_inode_iget:441: inode 11
[  345.402874][    C1] EXT4-fs (loop0): last error at time 1774401901: ext4_xattr_inode_iget:441: inode 11
[  345.413663][T10671] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.2197: error while reading EA inode 11 err=-117
[  345.426333][T10671] loop0: lost filesystem error report for type 5 error -117
[  345.428255][T10671] EXT4-fs (loop0): 1 orphan inode deleted
[  345.443700][T10671] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  345.464055][ T9105] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  345.475309][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  345.541306][T10676] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2200'.
[  345.560896][T10678] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2198'.
[  345.603374][T10678] netlink: 312 bytes leftover after parsing attributes in process `syz.3.2198'.
[  345.624199][T10678] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2198'.
[  345.866151][T10686] lo speed is unknown, defaulting to 1000
[  345.885301][T10686] dummy0 speed is unknown, defaulting to 1000
[  346.192900][T10695] xt_time: unknown flags 0xc
[  346.200822][T10695] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2205'.
[  346.212056][T10695] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2205'.
[  346.232891][T10695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  346.243839][T10695] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  346.624309][T10714] set_capacity_and_notify: 3 callbacks suppressed
[  346.624324][T10714] loop6: detected capacity change from 0 to 128
[  346.698243][T10717] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.2211'.
[  346.883235][T10719] loop3: detected capacity change from 0 to 512
[  346.926427][T10719] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  346.935554][T10719] EXT4-fs (loop3): orphan cleanup on readonly fs
[  346.945753][T10719] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #16: comm syz.3.2212: corrupted inode contents
[  346.988417][T10719] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  346.989581][T10719] EXT4-fs (loop3): Remounting filesystem read-only
[  346.999535][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  346.999559][    C1] EXT4-fs (loop3): initial error at time 1774401903: ext4_do_update_inode:5569: inode 16
[  346.999589][    C1] EXT4-fs (loop3): last error at time 1774401903: ext4_do_update_inode:5569: inode 16
[  347.042375][T10723] FAULT_INJECTION: forcing a failure.
[  347.042375][T10723] name failslab, interval 1, probability 0, space 0, times 0
[  347.061506][T10723] CPU: 1 UID: 0 PID: 10723 Comm: syz.0.2213 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  347.061538][T10723] Tainted: [W]=WARN
[  347.061545][T10723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  347.061604][T10723] Call Trace:
[  347.061610][T10723]  <TASK>
[  347.061619][T10723]  __dump_stack+0x1d/0x30
[  347.061646][T10723]  dump_stack_lvl+0x95/0xd0
[  347.061667][T10723]  dump_stack+0x15/0x1b
[  347.061706][T10723]  should_fail_ex+0x263/0x280
[  347.061731][T10723]  ? br_vlan_add+0x1bf/0x760
[  347.061794][T10723]  should_failslab+0x8c/0xb0
[  347.061810][T10723]  __kmalloc_cache_noprof+0x5f/0x410
[  347.061861][T10723]  br_vlan_add+0x1bf/0x760
[  347.061953][T10723]  ? vlan_vid_add+0x36c/0x490
[  347.061972][T10723]  __vlan_add+0x995/0x13c0
[  347.061994][T10723]  ? nbp_vlan_add+0x1e5/0x3e0
[  347.062039][T10723]  ? should_failslab+0x8c/0xb0
[  347.062054][T10723]  ? __kmalloc_cache_noprof+0x18a/0x410
[  347.062073][T10723]  nbp_vlan_add+0x21a/0x3e0
[  347.062095][T10723]  ? irqentry_exit+0x91/0x520
[  347.062123][T10723]  ? __perf_event_task_sched_out+0x192/0x710
[  347.062244][T10723]  br_vlan_info+0x96/0x230
[  347.062264][T10723]  br_process_vlan_info+0x222/0x510
[  347.062286][T10723]  br_afspec+0x2b9/0x420
[  347.062338][T10723]  br_setlink+0x15d/0x470
[  347.062452][T10723]  ? mutex_is_locked+0x12/0x30
[  347.062470][T10723]  rtnl_bridge_setlink+0x33a/0x470
[  347.062635][T10723]  ? __pfx_rtnl_bridge_setlink+0x10/0x10
[  347.062655][T10723]  rtnetlink_rcv_msg+0x6a7/0x720
[  347.062675][T10723]  ? avc_has_perm_noaudit+0xab/0x130
[  347.062703][T10723]  netlink_rcv_skb+0x123/0x220
[  347.062744][T10723]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  347.062768][T10723]  rtnetlink_rcv+0x1c/0x30
[  347.062877][T10723]  netlink_unicast+0x5c0/0x690
[  347.062903][T10723]  netlink_sendmsg+0x5c8/0x6f0
[  347.062960][T10723]  ? __pfx_netlink_sendmsg+0x10/0x10
[  347.062988][T10723]  ____sys_sendmsg+0x563/0x5b0
[  347.063064][T10723]  ___sys_sendmsg+0x195/0x1e0
[  347.063093][T10723]  __x64_sys_sendmsg+0xd4/0x160
[  347.063179][T10723]  x64_sys_call+0x194c/0x3020
[  347.063203][T10723]  do_syscall_64+0x12c/0x370
[  347.063225][T10723]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  347.063317][T10723] RIP: 0033:0x7ff94a1dc799
[  347.063333][T10723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  347.063349][T10723] RSP: 002b:00007ff948c2f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  347.063433][T10723] RAX: ffffffffffffffda RBX: 00007ff94a455fa0 RCX: 00007ff94a1dc799
[  347.063444][T10723] RDX: 000000002408c080 RSI: 0000200000000040 RDI: 0000000000000003
[  347.063455][T10723] RBP: 00007ff948c2f090 R08: 0000000000000000 R09: 0000000000000000
[  347.063467][T10723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  347.063546][T10723] R13: 00007ff94a456038 R14: 00007ff94a455fa0 R15: 00007ffda2a088b8
[  347.063561][T10723]  </TASK>
[  347.415774][   T28] audit: type=1326 audit(1774401903.710:1776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10724 comm="syz.4.2214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897d29c799 code=0x7ffc0000
[  347.443113][   T28] audit: type=1326 audit(1774401903.710:1777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10724 comm="syz.4.2214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897d29c799 code=0x7ffc0000
[  347.498106][T10719] EXT4-fs (loop3): 1 truncate cleaned up
[  347.520858][  T176] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  347.534178][T10727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2215'.
[  347.641754][T10725] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10725 comm=syz.4.2214
[  347.655750][  T176] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  347.670188][  T176] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started
[  347.882757][T10741] loop4: detected capacity change from 0 to 512
[  347.920672][T10741] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  347.939663][T10741] EXT4-fs (loop4): orphan cleanup on readonly fs
[  347.962802][T10741] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #16: comm syz.4.2219: corrupted inode contents
[  347.997412][T10741] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  347.997954][T10741] EXT4-fs (loop4): Remounting filesystem read-only
[  348.008023][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  348.008047][    C1] EXT4-fs (loop4): initial error at time 1774401904: ext4_do_update_inode:5569: inode 16
[  348.008074][    C1] EXT4-fs (loop4): last error at time 1774401904: ext4_do_update_inode:5569: inode 16
[  348.075041][T10741] EXT4-fs (loop4): 1 truncate cleaned up
[  348.108449][   T30] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  348.138244][   T30] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  348.150283][   T30] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started
[  348.303611][T10745] batadv_slave_0: entered promiscuous mode
[  348.310910][T10744] batadv_slave_0: left promiscuous mode
[  348.384978][T10753] loop6: detected capacity change from 0 to 256
[  348.501498][T10753] FAT-fs (loop6): Directory bread(block 64) failed
[  348.508396][T10753] FAT-fs (loop6): Directory bread(block 65) failed
[  348.515185][T10753] FAT-fs (loop6): Directory bread(block 66) failed
[  348.522438][T10753] FAT-fs (loop6): Directory bread(block 67) failed
[  348.529398][T10753] FAT-fs (loop6): Directory bread(block 68) failed
[  348.536299][T10753] FAT-fs (loop6): Directory bread(block 69) failed
[  348.543014][T10753] FAT-fs (loop6): Directory bread(block 70) failed
[  348.550291][T10753] FAT-fs (loop6): Directory bread(block 71) failed
[  348.557060][T10753] FAT-fs (loop6): Directory bread(block 72) failed
[  348.563694][T10753] FAT-fs (loop6): Directory bread(block 73) failed
[  349.386049][T10760] loop3: detected capacity change from 0 to 512
[  349.404376][T10760] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  349.440510][T10761] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=144 sclass=netlink_route_socket pid=10761 comm=syz.4.2225
[  349.464920][T10760] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.2224: iget: bad i_size value: 38620345925642
[  349.492915][T10760] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  349.493110][T10760] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.2224: couldn't read orphan inode 15 (err -117)
[  349.502461][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  349.502484][    C1] EXT4-fs (loop3): initial error at time 1774401905: ext4_orphan_get:1391: inode 15
[  349.502526][    C1] EXT4-fs (loop3): last error at time 1774401905: ext4_orphan_get:1391: inode 15
[  349.591790][T10760] loop3: lost filesystem error report for type 5 error -117
[  349.600946][T10760] SET target dimension over the limit!
[  350.025164][T10765] FAULT_INJECTION: forcing a failure.
[  350.025164][T10765] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  350.055013][T10768] xt_time: unknown flags 0xc
[  350.067363][T10765] CPU: 1 UID: 0 PID: 10765 Comm: syz.3.2226 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  350.067393][T10765] Tainted: [W]=WARN
[  350.067400][T10765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  350.067474][T10765] Call Trace:
[  350.067481][T10765]  <TASK>
[  350.067490][T10765]  __dump_stack+0x1d/0x30
[  350.067515][T10765]  dump_stack_lvl+0x95/0xd0
[  350.067533][T10765]  dump_stack+0x15/0x1b
[  350.067553][T10765]  should_fail_ex+0x263/0x280
[  350.067623][T10765]  should_fail+0xb/0x20
[  350.067640][T10765]  should_fail_usercopy+0x1a/0x20
[  350.067720][T10765]  _copy_to_user+0x20/0xa0
[  350.067744][T10765]  simple_read_from_buffer+0xb5/0x130
[  350.067767][T10765]  proc_fail_nth_read+0x10e/0x150
[  350.067818][T10765]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  350.067842][T10765]  vfs_read+0x1ab/0x7f0
[  350.067871][T10765]  ? __rcu_read_unlock+0x4e/0x70
[  350.067940][T10765]  ? __fget_files+0x184/0x1c0
[  350.067963][T10765]  ? mutex_lock+0x57/0x90
[  350.067990][T10765]  ksys_read+0xdc/0x1a0
[  350.068004][T10765]  __x64_sys_read+0x40/0x50
[  350.068017][T10765]  x64_sys_call+0x2886/0x3020
[  350.068088][T10765]  do_syscall_64+0x12c/0x370
[  350.068109][T10765]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  350.068130][T10765] RIP: 0033:0x7fb6fccacfce
[  350.068161][T10765] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  350.068176][T10765] RSP: 002b:00007fb6fb73efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  350.068194][T10765] RAX: ffffffffffffffda RBX: 00007fb6fb73f6c0 RCX: 00007fb6fccacfce
[  350.068207][T10765] RDX: 000000000000000f RSI: 00007fb6fb73f0a0 RDI: 0000000000000004
[  350.068219][T10765] RBP: 00007fb6fb73f090 R08: 0000000000000000 R09: 0000000000000000
[  350.068233][T10765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  350.068258][T10765] R13: 00007fb6fcf66038 R14: 00007fb6fcf65fa0 R15: 00007ffe5f976678
[  350.068320][T10765]  </TASK>
[  350.289356][T10770] __nla_validate_parse: 3 callbacks suppressed
[  350.289373][T10770] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2227'.
[  350.325858][T10770] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2227'.
[  350.334557][T10774] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2230'.
[  350.348881][T10768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  350.358388][T10768] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  350.416730][T10779] lo speed is unknown, defaulting to 1000
[  350.423617][T10779] dummy0 speed is unknown, defaulting to 1000
[  350.485416][T10782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2232'.
[  350.498491][T10782] netlink: 312 bytes leftover after parsing attributes in process `syz.4.2232'.
[  350.508704][T10782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2232'.
[  350.580398][T10783] loop6: detected capacity change from 0 to 128
[  350.655330][T10787] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.2231'.
[  351.268919][    T9] kernel write not supported for file /snd/seq (pid: 9 comm: kworker/0:0)
[  351.287941][T10796] dummy0 speed is unknown, defaulting to 1000
[  351.294904][T10796] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2236'.
[  351.440822][T10800] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2238'.
[  351.462258][T10800] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2238'.
[  351.516100][   T28] kauditd_printk_skb: 151 callbacks suppressed
[  351.516113][   T28] audit: type=1400 audit(1774401907.810:1917): avc:  denied  { create } for  pid=10801 comm="syz.4.2239" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  351.662902][   T28] audit: type=1400 audit(1774401907.810:1918): avc:  denied  { mounton } for  pid=10801 comm="syz.4.2239" path="/456/file0" dev="tmpfs" ino=2436 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  351.788321][   T28] audit: type=1400 audit(1774401907.990:1919): avc:  denied  { create } for  pid=10803 comm="syz.4.2240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1
[  351.858930][T10815] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10815 comm=syz.0.2244
[  351.959406][   T28] audit: type=1326 audit(1774401908.260:1920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10816 comm="syz.3.2245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6fccec799 code=0x7ffc0000
[  352.047132][   T28] audit: type=1326 audit(1774401908.260:1921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10816 comm="syz.3.2245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb6fccec799 code=0x7ffc0000
[  352.071039][   T28] audit: type=1326 audit(1774401908.260:1922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10816 comm="syz.3.2245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6fccec799 code=0x7ffc0000
[  352.099077][   T28] audit: type=1326 audit(1774401908.260:1923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10816 comm="syz.3.2245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb6fccec799 code=0x7ffc0000
[  352.125512][   T28] audit: type=1326 audit(1774401908.260:1924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10816 comm="syz.3.2245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6fccec799 code=0x7ffc0000
[  352.157144][   T28] audit: type=1326 audit(1774401908.260:1925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10816 comm="syz.3.2245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fb6fccec799 code=0x7ffc0000
[  352.190921][T10821] bond0: (slave dummy0): Releasing backup interface
[  352.201863][T10826] loop6: detected capacity change from 0 to 512
[  352.210453][   T28] audit: type=1326 audit(1774401908.260:1926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10816 comm="syz.3.2245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6fccec799 code=0x7ffc0000
[  352.235353][T10826] EXT4-fs: Ignoring removed nobh option
[  352.251777][T10821] batman_adv: batadv0: Adding interface: dummy0
[  352.260585][T10826] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  352.289193][T10821] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  352.316702][T10826] EXT4-fs (loop6): 1 truncate cleaned up
[  352.316980][T10826] EXT4-fs mount: 7 callbacks suppressed
[  352.317067][T10826] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  352.317321][T10821] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  352.323625][ T3479] dummy0 speed is unknown, defaulting to 1000
[  352.323727][   T23] dummy0 speed is unknown, defaulting to 1000
[  352.493682][ T9105] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  352.569529][T10849] loop6: detected capacity change from 0 to 512
[  352.594105][T10849] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.2254: Failed to acquire dquot type 1
[  352.594188][T10849] loop6: lost filesystem error report for type 5 error -117
[  352.594428][T10849] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.2254: Failed to acquire dquot type 1
[  352.594450][T10849] loop6: lost filesystem error report for type 5 error -117
[  352.594636][T10849] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2254: bg 0: block 248: padding at end of block bitmap is not set
[  352.594712][T10849] loop6: lost filesystem error report for type 5 error -117
[  352.594779][T10849] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6685: Corrupt filesystem
[  352.594840][T10849] loop6: lost filesystem error report for type 5 error -117
[  352.595083][T10849] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.2254: Failed to acquire dquot type 1
[  352.595177][T10849] loop6: lost filesystem error report for type 5 error -117
[  352.595320][T10849] EXT4-fs (loop6): 1 orphan inode deleted
[  352.616660][T10849] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  352.616717][T10849] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  352.935320][T10869] loop3: detected capacity change from 0 to 512
[  352.936613][T10869] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  352.976169][T10869] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.2262: iget: bad i_size value: 38620345925642
[  353.101660][ T9105] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  353.111419][T10869] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  353.111554][T10869] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.2262: couldn't read orphan inode 15 (err -117)
[  353.120782][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  353.120801][    C1] EXT4-fs (loop3): initial error at time 1774401909: ext4_orphan_get:1391: inode 15
[  353.120838][    C1] EXT4-fs (loop3): last error at time 1774401909: ext4_orphan_get:1391: inode 15
[  353.161561][T10869] loop3: lost filesystem error report for type 5 error -117
[  353.162221][T10869] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  353.197880][T10869] SET target dimension over the limit!
[  353.354208][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  353.466251][T10892] siw: device registration error -23
[  353.478115][T10895] tmpfs: Bad value for 'mpol'
[  353.494920][T10885] lo speed is unknown, defaulting to 1000
[  353.538362][T10885] dummy0 speed is unknown, defaulting to 1000
[  353.550267][T10903] FAULT_INJECTION: forcing a failure.
[  353.550267][T10903] name failslab, interval 1, probability 0, space 0, times 0
[  353.605281][T10905] FAULT_INJECTION: forcing a failure.
[  353.605281][T10905] name failslab, interval 1, probability 0, space 0, times 0
[  353.610014][T10903] CPU: 0 UID: 0 PID: 10903 Comm: syz.1.2274 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  353.610050][T10903] Tainted: [W]=WARN
[  353.610056][T10903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  353.610068][T10903] Call Trace:
[  353.610074][T10903]  <TASK>
[  353.610082][T10903]  __dump_stack+0x1d/0x30
[  353.610163][T10903]  dump_stack_lvl+0x95/0xd0
[  353.610184][T10903]  dump_stack+0x15/0x1b
[  353.610218][T10903]  should_fail_ex+0x263/0x280
[  353.610241][T10903]  should_failslab+0x8c/0xb0
[  353.610260][T10903]  __kmalloc_noprof+0xb8/0x4e0
[  353.610279][T10903]  ? memcg_list_lru_alloc+0x308/0x4f0
[  353.610312][T10903]  memcg_list_lru_alloc+0x308/0x4f0
[  353.610339][T10903]  __memcg_slab_post_alloc_hook+0x1a6/0x540
[  353.610366][T10903]  ? mqueue_fill_super+0x161/0x1d0
[  353.610392][T10903]  kmem_cache_alloc_lru_noprof+0x1eb/0x410
[  353.610605][T10903]  ? mqueue_alloc_inode+0x34/0x50
[  353.610630][T10903]  ? __pfx_mqueue_fill_super+0x10/0x10
[  353.610705][T10903]  ? __pfx_mqueue_alloc_inode+0x10/0x10
[  353.610729][T10903]  mqueue_alloc_inode+0x34/0x50
[  353.610753][T10903]  alloc_inode+0x40/0x170
[  353.610781][T10903]  new_inode+0x1d/0xe0
[  353.610800][T10903]  ? __pfx_mqueue_fill_super+0x10/0x10
[  353.610825][T10903]  mqueue_fill_super+0x89/0x1d0
[  353.610848][T10903]  ? __pfx_mqueue_fill_super+0x10/0x10
[  353.610904][T10903]  get_tree_nodev+0x83/0x100
[  353.610952][T10903]  mqueue_get_tree+0x63/0x90
[  353.610974][T10903]  vfs_get_tree+0x57/0x1d0
[  353.610991][T10903]  fc_mount_longterm+0x18/0xb0
[  353.611017][T10903]  mq_init_ns+0x2db/0x370
[  353.611099][T10903]  copy_ipcs+0x26e/0x460
[  353.611124][T10903]  create_new_namespaces+0x12a/0x440
[  353.611152][T10903]  unshare_nsproxy_namespaces+0xe6/0x120
[  353.611178][T10903]  ksys_unshare+0x3f2/0x6f0
[  353.611271][T10903]  __x64_sys_unshare+0x1f/0x30
[  353.611294][T10903]  x64_sys_call+0x1cef/0x3020
[  353.611319][T10903]  do_syscall_64+0x12c/0x370
[  353.611344][T10903]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  353.611389][T10903] RIP: 0033:0x7f7bdb3fc799
[  353.611467][T10903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  353.611483][T10903] RSP: 002b:00007f7bd9e57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  353.611502][T10903] RAX: ffffffffffffffda RBX: 00007f7bdb675fa0 RCX: 00007f7bdb3fc799
[  353.611515][T10903] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000
[  353.611527][T10903] RBP: 00007f7bd9e57090 R08: 0000000000000000 R09: 0000000000000000
[  353.611540][T10903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  353.611556][T10903] R13: 00007f7bdb676038 R14: 00007f7bdb675fa0 R15: 00007fffd98f5e98
[  353.611574][T10903]  </TASK>
[  353.928834][T10905] CPU: 1 UID: 0 PID: 10905 Comm: syz.4.2275 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  353.928861][T10905] Tainted: [W]=WARN
[  353.928866][T10905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  353.928875][T10905] Call Trace:
[  353.928881][T10905]  <TASK>
[  353.928915][T10905]  __dump_stack+0x1d/0x30
[  353.928940][T10905]  dump_stack_lvl+0x95/0xd0
[  353.928962][T10905]  dump_stack+0x15/0x1b
[  353.928980][T10905]  should_fail_ex+0x263/0x280
[  353.929042][T10905]  should_failslab+0x8c/0xb0
[  353.929089][T10905]  kmem_cache_alloc_noprof+0x66/0x400
[  353.929106][T10905]  ? __anon_vma_prepare+0x70/0x2f0
[  353.929132][T10905]  __anon_vma_prepare+0x70/0x2f0
[  353.929157][T10905]  do_wp_page+0x196b/0x2590
[  353.929190][T10905]  ? css_rstat_updated+0xbb/0x280
[  353.929207][T10905]  ? __rcu_read_lock+0x36/0x50
[  353.929286][T10905]  handle_mm_fault+0x8cb/0x3020
[  353.929344][T10905]  ? vma_start_read+0x1c7/0x2c0
[  353.929407][T10905]  do_user_addr_fault+0x62f/0x1050
[  353.929431][T10905]  ? ksys_mmap_pgoff+0xc1/0x310
[  353.929451][T10905]  ? fpregs_assert_state_consistent+0xb3/0xe0
[  353.929536][T10905]  ? arch_exit_to_user_mode_prepare+0x26/0x80
[  353.929557][T10905]  ? trace_page_fault_user+0x1f/0xe0
[  353.929584][T10905]  exc_page_fault+0x62/0xa0
[  353.929626][T10905]  asm_exc_page_fault+0x26/0x30
[  353.929642][T10905] RIP: 0033:0x7f897d153a63
[  353.929663][T10905] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c
[  353.929702][T10905] RSP: 002b:00007f897bcee470 EFLAGS: 00010202
[  353.929716][T10905] RAX: 0000000000000400 RBX: 00007f897bcee530 RCX: 00007f89738cf000
[  353.929728][T10905] RDX: 00007f897bcee6d0 RSI: 0000000000000009 RDI: 00007f897bcee5d0
[  353.929739][T10905] RBP: 00000000000000f9 R08: 0000000000000008 R09: 000000000000009e
[  353.929796][T10905] R10: 00000000000000ba R11: 00007f897bcee530 R12: 0000000000000001
[  353.929809][T10905] R13: 00007f897d352620 R14: 0000000000000020 R15: 00007f897bcee5d0
[  353.929824][T10905]  </TASK>
[  353.929921][T10905] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  354.152035][T10913] loop6: detected capacity change from 0 to 128
[  354.169654][T10905] loop4: detected capacity change from 0 to 512
[  354.210300][T10905] EXT4-fs (loop4): 1 orphan inode deleted
[  354.226290][T10905] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  354.278517][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  354.358326][T10926] FAULT_INJECTION: forcing a failure.
[  354.358326][T10926] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  354.374852][T10926] CPU: 1 UID: 0 PID: 10926 Comm: syz.1.2280 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  354.374891][T10926] Tainted: [W]=WARN
[  354.374898][T10926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  354.374908][T10926] Call Trace:
[  354.374914][T10926]  <TASK>
[  354.374920][T10926]  __dump_stack+0x1d/0x30
[  354.374942][T10926]  dump_stack_lvl+0x95/0xd0
[  354.375026][T10926]  dump_stack+0x15/0x1b
[  354.375048][T10926]  should_fail_ex+0x263/0x280
[  354.375068][T10926]  should_fail+0xb/0x20
[  354.375164][T10926]  should_fail_usercopy+0x1a/0x20
[  354.375189][T10926]  _copy_from_user+0x1c/0xb0
[  354.375239][T10926]  kstrtouint_from_user+0x69/0xf0
[  354.375260][T10926]  proc_fail_nth_write+0x50/0x160
[  354.375311][T10926]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  354.375429][T10926]  vfs_write+0x269/0x9f0
[  354.375456][T10926]  ? __rcu_read_unlock+0x4e/0x70
[  354.375522][T10926]  ? __fget_files+0x184/0x1c0
[  354.375540][T10926]  ? mutex_lock+0x57/0x90
[  354.375605][T10926]  ksys_write+0xdc/0x1a0
[  354.375623][T10926]  __x64_sys_write+0x40/0x50
[  354.375642][T10926]  x64_sys_call+0x27e1/0x3020
[  354.375665][T10926]  do_syscall_64+0x12c/0x370
[  354.375713][T10926]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  354.375731][T10926] RIP: 0033:0x7f7bdb3bcfce
[  354.375744][T10926] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  354.375758][T10926] RSP: 002b:00007f7bd9e56fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  354.375868][T10926] RAX: ffffffffffffffda RBX: 00007f7bd9e576c0 RCX: 00007f7bdb3bcfce
[  354.375883][T10926] RDX: 0000000000000001 RSI: 00007f7bd9e570a0 RDI: 0000000000000006
[  354.375896][T10926] RBP: 00007f7bd9e57090 R08: 0000000000000000 R09: 0000000000000000
[  354.375909][T10926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  354.375934][T10926] R13: 00007f7bdb676038 R14: 00007f7bdb675fa0 R15: 00007fffd98f5e98
[  354.375949][T10926]  </TASK>
[  354.659387][T10934] loop1: detected capacity change from 0 to 1024
[  354.669039][T10934] EXT4-fs: Ignoring removed nomblk_io_submit option
[  354.690810][T10936] tmpfs: Bad value for 'mpol'
[  354.706302][T10934] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  354.884845][   T12] kworker/u8:0: attempt to access beyond end of device
[  354.884845][   T12] loop6: rw=1, sector=145, nr_sectors = 896 limit=128
[  354.919449][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  354.919919][T10954] loop6: detected capacity change from 0 to 512
[  354.938538][T10954] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  354.957436][T10954] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.2288: iget: bad i_size value: 38620345925642
[  354.971529][T10954] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  354.973386][T10954] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.2288: couldn't read orphan inode 15 (err -117)
[  354.987641][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  354.996587][T10954] loop6: lost filesystem error report for type 5 error -117
[  355.002132][    C0] EXT4-fs (loop6): initial error at time 1774401911: ext4_orphan_get:1391
[  355.002711][T10954] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  355.009708][    C0] : inode 15
[  355.009726][    C0] EXT4-fs (loop6): last error at time 1774401911: ext4_orphan_get:1396
[  355.058521][T10954] SET target dimension over the limit!
[  355.075970][T10959] FAULT_INJECTION: forcing a failure.
[  355.075970][T10959] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  355.090594][T10959] CPU: 1 UID: 0 PID: 10959 Comm: syz.1.2290 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  355.090669][T10959] Tainted: [W]=WARN
[  355.090675][T10959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  355.090688][T10959] Call Trace:
[  355.090695][T10959]  <TASK>
[  355.090702][T10959]  __dump_stack+0x1d/0x30
[  355.090723][T10959]  dump_stack_lvl+0x95/0xd0
[  355.090822][T10959]  dump_stack+0x15/0x1b
[  355.090888][T10959]  should_fail_ex+0x263/0x280
[  355.090912][T10959]  should_fail+0xb/0x20
[  355.090933][T10959]  should_fail_usercopy+0x1a/0x20
[  355.090990][T10959]  _copy_from_user+0x1c/0xb0
[  355.091015][T10959]  ___sys_sendmsg+0xc1/0x1e0
[  355.091040][T10959]  ? path_openat+0x1b01/0x2050
[  355.091101][T10959]  __sys_sendmmsg+0x185/0x320
[  355.091162][T10959]  __x64_sys_sendmmsg+0x57/0x70
[  355.091189][T10959]  x64_sys_call+0x27aa/0x3020
[  355.091248][T10959]  do_syscall_64+0x12c/0x370
[  355.091268][T10959]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  355.091285][T10959] RIP: 0033:0x7f7bdb3fc799
[  355.091298][T10959] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  355.091356][T10959] RSP: 002b:00007f7bd9e57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  355.091375][T10959] RAX: ffffffffffffffda RBX: 00007f7bdb675fa0 RCX: 00007f7bdb3fc799
[  355.091387][T10959] RDX: 0000000000000002 RSI: 0000200000007a00 RDI: 0000000000000004
[  355.091398][T10959] RBP: 00007f7bd9e57090 R08: 0000000000000000 R09: 0000000000000000
[  355.091408][T10959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  355.091418][T10959] R13: 00007f7bdb676038 R14: 00007f7bdb675fa0 R15: 00007fffd98f5e98
[  355.091450][T10959]  </TASK>
[  355.306772][T10961] loop1: detected capacity change from 0 to 512
[  355.325656][T10961] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #12: comm syz.1.2291: missing EA_INODE flag
[  355.339080][T10961] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  355.339506][T10961] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.2291: error while reading EA inode 12 err=-117
[  355.348963][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  355.368247][    C1] EXT4-fs (loop1): initial error at time 1774401911: ext4_xattr_inode_iget:441: inode 12
[  355.378473][    C1] EXT4-fs (loop1): last error at time 1774401911: ext4_xattr_inode_iget:441: inode 12
[  355.389323][T10961] loop1: lost filesystem error report for type 5 error -117
[  355.389484][T10961] EXT4-fs (loop1): 1 orphan inode deleted
[  355.403535][T10961] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  355.417875][ T9105] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  355.439158][T10964] __nla_validate_parse: 14 callbacks suppressed
[  355.439172][T10964] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2292'.
[  355.489435][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  355.551181][T10969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  355.568586][T10969] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  355.581396][T10972] siw: device registration error -23
[  355.620957][T10975] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2297'.
[  355.634013][T10975] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2297'.
[  355.653738][T10978] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2298'.
[  355.670112][T10978] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2298'.
[  355.714096][T10976] lo speed is unknown, defaulting to 1000
[  355.721226][T10976] dummy0 speed is unknown, defaulting to 1000
[  355.770663][T10987] xt_time: unknown flags 0xc
[  355.772691][T10989] loop0: detected capacity change from 0 to 512
[  355.805251][T10987] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2302'.
[  355.826333][T10987] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2302'.
[  355.878149][T10987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  355.906231][T10987] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  356.009034][T11000] loop3: detected capacity change from 0 to 764
[  356.019520][T11000] Symlink component flag not implemented
[  356.032301][T11000] Symlink component flag not implemented
[  356.169039][T11004] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #12: comm syz.6.2307: missing EA_INODE flag
[  356.194444][T11004] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  356.194559][T11004] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.2307: error while reading EA inode 12 err=-117
[  356.205294][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  356.205327][    C0] EXT4-fs (loop6): initial error at time 1774401912: ext4_xattr_inode_iget:441: inode 12
[  356.205358][    C0] EXT4-fs (loop6): last error at time 1774401912: ext4_xattr_inode_iget:441: inode 12
[  356.249822][T11004] loop6: lost filesystem error report for type 5 error -117
[  356.260740][T11004] EXT4-fs (loop6): 1 orphan inode deleted
[  356.320516][T11004] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  356.380962][ T9105] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  356.416424][T11010] FAULT_INJECTION: forcing a failure.
[  356.416424][T11010] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  356.430315][T11010] CPU: 1 UID: 0 PID: 11010 Comm: syz.6.2309 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  356.430363][T11010] Tainted: [W]=WARN
[  356.430367][T11010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  356.430374][T11010] Call Trace:
[  356.430378][T11010]  <TASK>
[  356.430384][T11010]  __dump_stack+0x1d/0x30
[  356.430455][T11010]  dump_stack_lvl+0x95/0xd0
[  356.430467][T11010]  dump_stack+0x15/0x1b
[  356.430531][T11010]  should_fail_ex+0x263/0x280
[  356.430545][T11010]  should_fail+0xb/0x20
[  356.430557][T11010]  should_fail_usercopy+0x1a/0x20
[  356.430621][T11010]  _copy_from_iter+0xcf/0xea0
[  356.430669][T11010]  ? __alloc_skb+0x4f6/0x690
[  356.430738][T11010]  ? __alloc_skb+0x200/0x690
[  356.430752][T11010]  netlink_sendmsg+0x4ae/0x6f0
[  356.430773][T11010]  ? __pfx_netlink_sendmsg+0x10/0x10
[  356.430932][T11010]  ____sys_sendmsg+0x563/0x5b0
[  356.430950][T11010]  ___sys_sendmsg+0x195/0x1e0
[  356.431042][T11010]  __x64_sys_sendmsg+0xd4/0x160
[  356.431059][T11010]  x64_sys_call+0x194c/0x3020
[  356.431073][T11010]  do_syscall_64+0x12c/0x370
[  356.431139][T11010]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  356.431169][T11010] RIP: 0033:0x7f530a3fc799
[  356.431180][T11010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  356.431270][T11010] RSP: 002b:00007f5308e4f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  356.431282][T11010] RAX: ffffffffffffffda RBX: 00007f530a675fa0 RCX: 00007f530a3fc799
[  356.431289][T11010] RDX: 00000000000008d0 RSI: 0000200000005840 RDI: 0000000000000004
[  356.431297][T11010] RBP: 00007f5308e4f090 R08: 0000000000000000 R09: 0000000000000000
[  356.431304][T11010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  356.431311][T11010] R13: 00007f530a676038 R14: 00007f530a675fa0 R15: 00007ffcd37423a8
[  356.431383][T11010]  </TASK>
[  356.751627][T11014] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2308'.
[  356.995933][T11020] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2312'.
[  357.312729][T11032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  357.323134][   T28] kauditd_printk_skb: 30 callbacks suppressed
[  357.323202][   T28] audit: type=1326 audit(1774401913.590:1951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11021 comm="syz.6.2313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f530a3fc799 code=0x7ffc0000
[  357.347405][T11032] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  357.389676][T11033] set_capacity_and_notify: 2 callbacks suppressed
[  357.389768][T11033] loop4: detected capacity change from 0 to 256
[  358.192269][   T28] audit: type=1326 audit(1774401913.590:1952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11021 comm="syz.6.2313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f530a3fc799 code=0x7ffc0000
[  358.381045][   T28] audit: type=1326 audit(1774401913.590:1953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11021 comm="syz.6.2313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f530a3fc799 code=0x7ffc0000
[  359.030252][   T30] kworker/u8:1: attempt to access beyond end of device
[  359.030252][   T30] loop3: rw=1, sector=145, nr_sectors = 896 limit=128
[  359.085420][T11033] FAT-fs (loop4): Directory bread(block 64) failed
[  359.085431][   T28] audit: type=1326 audit(1774401913.590:1954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11021 comm="syz.6.2313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f530a3fc799 code=0x7ffc0000
[  359.094095][T11033] FAT-fs (loop4): Directory bread(block 65) failed
[  359.117300][   T28] audit: type=1326 audit(1774401913.590:1955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11021 comm="syz.6.2313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f530a3fc799 code=0x7ffc0000
[  359.117325][   T28] audit: type=1326 audit(1774401913.590:1956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11021 comm="syz.6.2313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f530a3fc799 code=0x7ffc0000
[  359.117409][   T28] audit: type=1326 audit(1774401913.590:1957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11021 comm="syz.6.2313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f530a3fc799 code=0x7ffc0000
[  359.117429][   T28] audit: type=1326 audit(1774401913.590:1958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11021 comm="syz.6.2313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f530a3fc799 code=0x7ffc0000
[  359.117464][   T28] audit: type=1326 audit(1774401913.590:1959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11021 comm="syz.6.2313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f530a3fc799 code=0x7ffc0000
[  359.117560][   T28] audit: type=1326 audit(1774401913.590:1960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11021 comm="syz.6.2313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f530a3fc799 code=0x7ffc0000
[  359.283855][T11033] FAT-fs (loop4): Directory bread(block 66) failed
[  359.292718][T11033] FAT-fs (loop4): Directory bread(block 67) failed
[  359.300837][T11033] FAT-fs (loop4): Directory bread(block 68) failed
[  359.308859][T11033] FAT-fs (loop4): Directory bread(block 69) failed
[  359.315541][T11033] FAT-fs (loop4): Directory bread(block 70) failed
[  359.324037][T11033] FAT-fs (loop4): Directory bread(block 71) failed
[  359.332273][T11033] FAT-fs (loop4): Directory bread(block 72) failed
[  359.340443][T11033] FAT-fs (loop4): Directory bread(block 73) failed
[  359.348200][T11047] loop6: detected capacity change from 0 to 128
[  359.392247][T11047] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  359.393988][T11052] loop0: detected capacity change from 0 to 512
[  359.407125][T11047] ext4 filesystem being mounted at /112/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  359.707386][T11072] lo speed is unknown, defaulting to 1000
[  359.714025][T11072] dummy0 speed is unknown, defaulting to 1000
[  360.009858][T11072] loop4: detected capacity change from 0 to 1024
[  360.018016][T11078] loop1: detected capacity change from 0 to 512
[  360.034620][T11078] EXT4-fs: Ignoring removed mblk_io_submit option
[  360.044341][T11078] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  360.059439][T11072] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  360.082352][T11078] EXT4-fs (loop1): 1 orphan inode deleted
[  360.091796][T11078] EXT4-fs (loop1): 1 truncate cleaned up
[  360.099750][T11078] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  360.152524][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  360.184875][ T9105] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  360.195860][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  360.248099][T11086] loop6: detected capacity change from 0 to 512
[  360.254894][T11086] EXT4-fs: test_dummy_encryption option not supported
[  360.637537][T11109] loop0: detected capacity change from 0 to 256
[  360.665234][T11109] FAT-fs (loop0): Directory bread(block 64) failed
[  360.671981][T11109] FAT-fs (loop0): Directory bread(block 65) failed
[  360.679489][T11109] FAT-fs (loop0): Directory bread(block 66) failed
[  360.686147][T11109] FAT-fs (loop0): Directory bread(block 67) failed
[  360.693315][T11109] FAT-fs (loop0): Directory bread(block 68) failed
[  360.700448][T11109] FAT-fs (loop0): Directory bread(block 69) failed
[  360.707905][T11109] FAT-fs (loop0): Directory bread(block 70) failed
[  360.714659][T11109] FAT-fs (loop0): Directory bread(block 71) failed
[  360.721731][T11109] FAT-fs (loop0): Directory bread(block 72) failed
[  360.728499][T11109] FAT-fs (loop0): Directory bread(block 73) failed
[  361.677436][T11115] loop6: detected capacity change from 0 to 512
[  362.368073][T11121] loop6: detected capacity change from 0 to 512
[  362.374600][T11121] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  362.457977][T11125] isofs_fill_super: bread failed, dev=loop1, iso_blknum=16, block=32
[  362.470160][T11123] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2341'.
[  362.587966][T11123] netlink: 312 bytes leftover after parsing attributes in process `syz.4.2341'.
[  362.599275][T11118] 9pnet_fd: p9_fd_create_tcp (11118): problem connecting socket to 127.0.0.1
[  362.655920][T11123] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2341'.
[  362.689977][T11127] loop6: detected capacity change from 0 to 128
[  362.744784][T11127] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  362.846684][T11127] ext4 filesystem being mounted at /117/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  363.418680][T11141] netlink: 131740 bytes leftover after parsing attributes in process `syz.0.2345'.
[  363.428389][T11141] netlink: zone id is out of range
[  363.433709][T11141] netlink: zone id is out of range
[  363.439470][T11141] netlink: zone id is out of range
[  363.445290][T11141] netlink: del zone limit has 8 unknown bytes
[  363.454542][T11141] loop0: detected capacity change from 0 to 512
[  363.467199][T11141] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #12: comm syz.0.2345: missing EA_INODE flag
[  363.479290][T11141] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  363.479596][T11141] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.2345: error while reading EA inode 12 err=-117
[  363.488828][    C1] EXT4-fs (loop0): error count since last fsck: 1
[  363.488845][    C1] EXT4-fs (loop0): initial error at time 1774401919: ext4_xattr_inode_iget:441: inode 12
[  363.488869][    C1] EXT4-fs (loop0): last error at time 1774401919: ext4_xattr_inode_iget:441: inode 12
[  363.528915][T11141] loop0: lost filesystem error report for type 5 error -117
[  363.530048][T11141] EXT4-fs (loop0): 1 orphan inode deleted
[  363.543853][T11141] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  363.691000][ T9105] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  365.473666][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  365.562131][T11162] loop0: detected capacity change from 0 to 1024
[  365.696199][T11162] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  365.744470][T11173] loop6: detected capacity change from 0 to 512
[  365.773616][T11178] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2357'.
[  365.834096][T11173] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  365.886123][T11173] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.2356: iget: bad i_size value: 38620345925642
[  365.899656][T11173] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  365.899887][T11173] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.2356: couldn't read orphan inode 15 (err -117)
[  365.909140][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  365.909170][    C0] EXT4-fs (loop6): initial error at time 1774401922: ext4_orphan_get:1391: inode 15
[  365.909201][    C0] EXT4-fs (loop6): last error at time 1774401922: ext4_orphan_get:1391: inode 15
[  365.955660][T11173] loop6: lost filesystem error report for type 5 error -117
[  365.956428][T11173] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  366.009301][T11173] SET target dimension over the limit!
[  366.070646][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  366.099189][T11188] loop0: detected capacity change from 0 to 512
[  366.106161][   T28] kauditd_printk_skb: 14 callbacks suppressed
[  366.106257][   T28] audit: type=1400 audit(1774401922.400:1975): avc:  denied  { execute } for  pid=11180 comm="syz.3.2358" path="/blkio.bfq.idle_time" dev="ramfs" ino=32779 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1
[  366.195039][T11190] loop4: detected capacity change from 0 to 256
[  366.217094][T11188] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  366.264543][T11190] FAT-fs (loop4): Directory bread(block 64) failed
[  366.271286][T11190] FAT-fs (loop4): Directory bread(block 65) failed
[  366.278426][T11190] FAT-fs (loop4): Directory bread(block 66) failed
[  366.285348][T11190] FAT-fs (loop4): Directory bread(block 67) failed
[  366.292913][T11190] FAT-fs (loop4): Directory bread(block 68) failed
[  366.299717][T11190] FAT-fs (loop4): Directory bread(block 69) failed
[  366.306518][T11190] FAT-fs (loop4): Directory bread(block 70) failed
[  366.313666][T11190] FAT-fs (loop4): Directory bread(block 71) failed
[  366.321762][T11190] FAT-fs (loop4): Directory bread(block 72) failed
[  366.328570][T11190] FAT-fs (loop4): Directory bread(block 73) failed
[  366.388648][ T9105] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  366.441886][T11188] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.2359: iget: bad i_size value: 38620345925642
[  366.495717][   T28] audit: type=1400 audit(1774401922.760:1976): avc:  denied  { mount } for  pid=11180 comm="syz.3.2358" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[  366.617411][T11188] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  366.617705][T11188] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.2359: couldn't read orphan inode 15 (err -117)
[  366.627063][    C1] EXT4-fs (loop0): error count since last fsck: 1
[  366.627082][    C1] EXT4-fs (loop0): initial error at time 1774401922: ext4_orphan_get:1391: inode 15
[  366.627116][    C1] EXT4-fs (loop0): last error at time 1774401922: ext4_orphan_get:1391: inode 15
[  367.177419][T11188] loop0: lost filesystem error report for type 5 error -117
[  367.178851][T11188] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  367.202269][T11202] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2360'.
[  367.250630][T11188] SET target dimension over the limit!
[  368.096171][T11169] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  368.112038][   T28] audit: type=1400 audit(1774401924.230:1977): avc:  denied  { listen } for  pid=11203 comm="syz.1.2364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[  368.134042][T11202] netlink: 312 bytes leftover after parsing attributes in process `syz.6.2360'.
[  368.364851][T11202] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2360'.
[  368.448362][T11214] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2368'.
[  368.478508][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  368.491896][T11216] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2371'.
[  368.502074][T11216] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2371'.
[  368.540786][   T28] audit: type=1326 audit(1774401924.840:1978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11219 comm="syz.0.2369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94a1dc799 code=0x7ffc0000
[  368.576155][   T28] audit: type=1326 audit(1774401924.840:1979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11219 comm="syz.0.2369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff94a1dc799 code=0x7ffc0000
[  368.661324][T11227] loop4: detected capacity change from 0 to 2048
[  368.681800][   T28] audit: type=1326 audit(1774401924.840:1980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11219 comm="syz.0.2369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94a1dc799 code=0x7ffc0000
[  368.708028][   T28] audit: type=1326 audit(1774401924.870:1981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11219 comm="syz.0.2369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff94a1dc799 code=0x7ffc0000
[  368.732943][   T28] audit: type=1326 audit(1774401924.870:1982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11219 comm="syz.0.2369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94a1dc799 code=0x7ffc0000
[  368.762398][T11234] loop3: detected capacity change from 0 to 128
[  368.826085][   T28] audit: type=1326 audit(1774401924.870:1983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11219 comm="syz.0.2369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff94a1dc799 code=0x7ffc0000
[  368.855402][T11238] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2372'.
[  368.898576][T11240] loop1: detected capacity change from 0 to 512
[  368.930176][   T28] audit: type=1326 audit(1774401924.870:1984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11219 comm="syz.0.2369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94a1dc799 code=0x7ffc0000
[  369.018152][T11240] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.2375: inode has both inline data and extents flags
[  369.061307][T11243] lo speed is unknown, defaulting to 1000
[  369.084445][T11243] dummy0 speed is unknown, defaulting to 1000
[  369.092346][T11240] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  369.092860][T11240] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.2375: couldn't read orphan inode 15 (err -117)
[  369.103473][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  369.103494][    C1] EXT4-fs (loop1): initial error at time 1774401925: ext4_orphan_get:1391: inode 15
[  369.103547][    C1] EXT4-fs (loop1): last error at time 1774401925: ext4_orphan_get:1391: inode 15
[  369.198809][T11240] loop1: lost filesystem error report for type 5 error -117
[  369.200117][T11240] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  369.345459][T11247] loop0: detected capacity change from 0 to 512
[  369.416143][T11233] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters
[  369.435561][T11247] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  369.480794][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  369.712480][T11252] tmpfs: Bad value for 'mpol'
[  369.737385][T11253] loop1: detected capacity change from 0 to 512
[  369.757943][ T2999]  loop4: unable to read partition table
[  369.783903][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  369.795301][ T2999] loop4: partition table beyond EOD, truncated
[  369.825239][T11255] xt_limit: Overflow, try lower: 0/0
[  369.845919][T11257] loop4: detected capacity change from 0 to 512
[  369.918729][T11257] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  370.068830][T11266] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2383'.
[  370.080646][T11257] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.2379: iget: bad i_size value: 38620345925642
[  370.109228][T11266] netlink: 312 bytes leftover after parsing attributes in process `syz.6.2383'.
[  370.130099][T11266] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2383'.
[  370.147182][T11257] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  370.148205][T11257] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.2379: couldn't read orphan inode 15 (err -117)
[  370.160582][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  370.160605][    C1] EXT4-fs (loop4): initial error at time 1774401926: ext4_orphan_get:1391: inode 15
[  370.160637][    C1] EXT4-fs (loop4): last error at time 1774401926: ext4_orphan_get:1391: inode 15
[  370.244273][T11257] loop4: lost filesystem error report for type 5 error -117
[  370.245260][T11257] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  370.311410][T11257] SET target dimension over the limit!
[  370.409349][T11274] loop6: detected capacity change from 0 to 512
[  370.419240][T11274] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  370.430339][T11274] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.2385: iget: bad i_size value: 38620345925642
[  370.444387][T11274] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  370.444569][T11274] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.2385: couldn't read orphan inode 15 (err -117)
[  370.454318][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  370.454334][    C1] EXT4-fs (loop6): initial error at time 1774401926: ext4_orphan_get:1391: inode 15
[  370.454365][    C1] EXT4-fs (loop6): last error at time 1774401926: ext4_orphan_get:1391: inode 15
[  370.502676][T11274] loop6: lost filesystem error report for type 5 error -117
[  370.503279][T11274] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  370.572351][T11274] SET target dimension over the limit!
[  370.584583][T11284] loop1: detected capacity change from 0 to 512
[  370.612303][T11284] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  370.675077][T11285] loop3: detected capacity change from 0 to 128
[  370.749803][T11284] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.2388: iget: bad i_size value: 38620345925642
[  370.774342][T11289] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2386'.
[  370.858447][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  370.972314][T11284] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  370.978223][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  370.994440][    C0] EXT4-fs (loop1): initial error at time 1774401927: ext4_orphan_get:1391: inode 15
[  371.004214][    C0] EXT4-fs (loop1): last error at time 1774401927: ext4_orphan_get:1391: inode 15
[  371.024831][T11290] netlink: zone id is out of range
[  371.102431][T11290] netlink: zone id is out of range
[  371.108080][T11290] netlink: zone id is out of range
[  371.122896][T11290] netlink: zone id is out of range
[  371.132018][T11292] loop0: detected capacity change from 0 to 512
[  371.312363][T11284] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.2388: couldn't read orphan inode 15 (err -117)
[  371.471119][T11284] loop1: lost filesystem error report for type 5 error -117
[  371.480963][T11290] netlink: del zone limit has 8 unknown bytes
[  371.926812][T11244] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  371.964035][T11284] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  371.979595][T11292] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #12: comm syz.0.2387: missing EA_INODE flag
[  372.009201][ T9105] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  372.023671][T11292] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  372.026387][    C1] EXT4-fs (loop0): error count since last fsck: 1
[  372.043190][    C1] EXT4-fs (loop0): initial error at time 1774401928: ext4_xattr_inode_iget:441: inode 12
[  372.053671][    C1] EXT4-fs (loop0): last error at time 1774401928: ext4_xattr_inode_iget:441: inode 12
[  372.092963][T11292] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.2387: error while reading EA inode 12 err=-117
[  372.123447][T11292] loop0: lost filesystem error report for type 5 error -117
[  372.124648][T11292] EXT4-fs (loop0): 1 orphan inode deleted
[  372.138839][T11292] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  372.247600][T11284] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.2388: bg 0: block 5: invalid block bitmap
[  372.370626][T11244] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  372.405732][T11284] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 852 with error 28
[  372.576834][T11284] EXT4-fs (loop1): This should not happen!! Data will be lost
[  372.576834][T11284] 
[  372.588515][T11284] EXT4-fs (loop1): Total free blocks count 0
[  372.595164][T11284] EXT4-fs (loop1): Free/Dirty block details
[  372.607905][ T1877] kworker/u8:7: attempt to access beyond end of device
[  372.607905][ T1877] loop3: rw=1, sector=145, nr_sectors = 896 limit=128
[  372.657816][T11284] EXT4-fs (loop1): free_blocks=0
[  372.713350][T11284] EXT4-fs (loop1): dirty_blocks=856
[  372.793121][T11284] EXT4-fs (loop1): Block reservation details
[  372.839424][T11284] EXT4-fs (loop1): i_reserved_data_blocks=856
[  373.079118][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  373.179420][T11317] __nla_validate_parse: 7 callbacks suppressed
[  373.179443][T11317] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2397'.
[  373.229781][T11319] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2396'.
[  373.249275][T11317] netlink: 312 bytes leftover after parsing attributes in process `syz.6.2397'.
[  373.266500][T11319] netlink: 312 bytes leftover after parsing attributes in process `syz.1.2396'.
[  373.286503][T11317] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2397'.
[  373.303122][T11319] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2396'.
[  373.510126][   T28] kauditd_printk_skb: 26 callbacks suppressed
[  373.510140][   T28] audit: type=1326 audit(1774401929.810:2011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11322 comm="syz.6.2398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f530a3fc799 code=0x7ffc0000
[  373.618033][   T28] audit: type=1326 audit(1774401929.840:2012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11322 comm="syz.6.2398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f530a3fc799 code=0x7ffc0000
[  373.972797][T11334] set_capacity_and_notify: 1 callbacks suppressed
[  373.972813][T11334] loop6: detected capacity change from 0 to 256
[  374.522936][   T28] audit: type=1326 audit(1774401929.840:2013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11322 comm="syz.6.2398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f530a3fc799 code=0x7ffc0000
[  374.548326][   T28] audit: type=1326 audit(1774401929.840:2014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11322 comm="syz.6.2398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f530a3fc799 code=0x7ffc0000
[  375.081825][   T30] kworker/u8:1: attempt to access beyond end of device
[  375.081825][   T30] loop4: rw=1, sector=145, nr_sectors = 896 limit=128
[  375.161798][T11334] FAT-fs (loop6): Directory bread(block 64) failed
[  375.169039][T11334] FAT-fs (loop6): Directory bread(block 65) failed
[  375.176783][T11334] FAT-fs (loop6): Directory bread(block 66) failed
[  375.183715][T11334] FAT-fs (loop6): Directory bread(block 67) failed
[  375.191255][T11334] FAT-fs (loop6): Directory bread(block 68) failed
[  375.198145][T11334] FAT-fs (loop6): Directory bread(block 69) failed
[  375.205057][T11334] FAT-fs (loop6): Directory bread(block 70) failed
[  375.211937][T11334] FAT-fs (loop6): Directory bread(block 71) failed
[  375.219923][T11334] FAT-fs (loop6): Directory bread(block 72) failed
[  375.227084][T11334] FAT-fs (loop6): Directory bread(block 73) failed
[  375.879241][T11345] xt_time: unknown flags 0xc
[  376.238933][   T28] audit: type=1326 audit(1774401929.840:2015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11322 comm="syz.6.2398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f530a3fc799 code=0x7ffc0000
[  376.270783][T11345] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2403'.
[  376.354275][   T28] audit: type=1326 audit(1774401929.840:2016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11322 comm="syz.6.2398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f530a3fc799 code=0x7ffc0000
[  376.469350][T11345] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2403'.
[  376.592353][   T28] audit: type=1326 audit(1774401929.840:2017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11322 comm="syz.6.2398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f530a3fc799 code=0x7ffc0000
[  376.637689][T11347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  376.696026][T11347] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  376.828980][   T28] audit: type=1326 audit(1774401929.840:2018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11322 comm="syz.6.2398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f530a3fc799 code=0x7ffc0000
[  377.008644][T11352] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2404'.
[  377.035496][   T28] audit: type=1326 audit(1774401929.870:2019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11322 comm="syz.6.2398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f530a3fc799 code=0x7ffc0000
[  377.064312][T11346] loop3: detected capacity change from 0 to 8192
[  377.091517][   T28] audit: type=1326 audit(1774401929.870:2020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11322 comm="syz.6.2398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f530a3fc799 code=0x7ffc0000
[  377.127816][ T3304]  loop3: p1 < > p2 p4 < p5 >
[  377.132686][ T3304] loop3: partition table partially beyond EOD, truncated
[  377.158782][ T3304] loop3: p1 start 134217728 is beyond EOD, truncated
[  377.165594][ T3304] loop3: p2 size 591360 extends beyond EOD, truncated
[  377.186577][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  377.189188][ T3304] loop3: p5 size 591360 extends beyond EOD, truncated
[  377.226847][T11346]  loop3: p1 < > p2 p4 < p5 >
[  377.235714][T11346] loop3: partition table partially beyond EOD, truncated
[  377.244399][T11346] loop3: p1 start 134217728 is beyond EOD, truncated
[  377.298267][T11346] loop3: p2 size 591360 extends beyond EOD, truncated
[  377.313352][T11358] loop0: detected capacity change from 0 to 512
[  377.322558][T11346] loop3: p5 size 591360 extends beyond EOD, truncated
[  377.387632][T11358] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  377.417186][T11358] EXT4-fs (loop0): orphan cleanup on readonly fs
[  377.425235][T11358] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #16: comm syz.0.2406: corrupted inode contents
[  377.438003][T11358] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  377.438229][T11358] EXT4-fs (loop0): Remounting filesystem read-only
[  377.448383][    C1] EXT4-fs (loop0): error count since last fsck: 1
[  377.448402][    C1] EXT4-fs (loop0): initial error at time 1774401933: ext4_do_update_inode:5569: inode 16
[  377.448432][    C1] EXT4-fs (loop0): last error at time 1774401933: ext4_do_update_inode:5569: inode 16
[  377.484432][T11358] EXT4-fs (loop0): 1 truncate cleaned up
[  377.491072][ T5245] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  377.537454][ T5245] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  377.587682][ T5245] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started
[  377.613364][T11365] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2409'.
[  377.638181][T11358] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  378.023243][T11383] FAULT_INJECTION: forcing a failure.
[  378.023243][T11383] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  378.071260][T11383] CPU: 0 UID: 0 PID: 11383 Comm: syz.3.2415 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  378.071293][T11383] Tainted: [W]=WARN
[  378.071300][T11383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  378.071313][T11383] Call Trace:
[  378.071319][T11383]  <TASK>
[  378.071326][T11383]  __dump_stack+0x1d/0x30
[  378.071403][T11383]  dump_stack_lvl+0x95/0xd0
[  378.071424][T11383]  dump_stack+0x15/0x1b
[  378.071443][T11383]  should_fail_ex+0x263/0x280
[  378.071473][T11383]  should_fail+0xb/0x20
[  378.071520][T11383]  should_fail_usercopy+0x1a/0x20
[  378.071609][T11383]  _copy_to_user+0x20/0xa0
[  378.071640][T11383]  simple_read_from_buffer+0xb5/0x130
[  378.071706][T11383]  proc_fail_nth_read+0x10e/0x150
[  378.071769][T11383]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  378.071865][T11383]  vfs_read+0x1ab/0x7f0
[  378.071892][T11383]  ? __rcu_read_unlock+0x4e/0x70
[  378.071927][T11383]  ? __fget_files+0x184/0x1c0
[  378.071950][T11383]  ? mutex_lock+0x57/0x90
[  378.071978][T11383]  ksys_read+0xdc/0x1a0
[  378.071996][T11383]  __x64_sys_read+0x40/0x50
[  378.072032][T11383]  x64_sys_call+0x2886/0x3020
[  378.072053][T11383]  do_syscall_64+0x12c/0x370
[  378.072136][T11383]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  378.072158][T11383] RIP: 0033:0x7fb6fccacfce
[  378.072172][T11383] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  378.072185][T11383] RSP: 002b:00007fb6fb73efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  378.072220][T11383] RAX: ffffffffffffffda RBX: 00007fb6fb73f6c0 RCX: 00007fb6fccacfce
[  378.072234][T11383] RDX: 000000000000000f RSI: 00007fb6fb73f0a0 RDI: 0000000000000004
[  378.072247][T11383] RBP: 00007fb6fb73f090 R08: 0000000000000000 R09: 0000000000000000
[  378.072260][T11383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  378.072273][T11383] R13: 00007fb6fcf66038 R14: 00007fb6fcf65fa0 R15: 00007ffe5f976678
[  378.072315][T11383]  </TASK>
[  378.308194][T11385] __nla_validate_parse: 1 callbacks suppressed
[  378.308210][T11385] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2416'.
[  378.338137][T11381] IPv6: sit2: Disabled Multicast RS
[  378.419039][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  378.463711][T11392] siw: device registration error -23
[  378.511926][T11395] xt_time: unknown flags 0xc
[  378.523126][T11395] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2421'.
[  378.533901][T11395] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2421'.
[  378.562199][T11395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  378.574070][T11397] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2420'.
[  378.574272][T11390] loop1: detected capacity change from 0 to 512
[  378.584791][T11397] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2420'.
[  378.585642][T11395] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  378.670169][T11390] EXT4-fs: Invalid want_extra_isize 19
[  378.709690][T11401] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2423'.
[  378.739605][T11401] netlink: 312 bytes leftover after parsing attributes in process `syz.4.2423'.
[  378.755640][T11401] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2423'.
[  378.781850][T11413] loop0: detected capacity change from 0 to 1764
[  378.789422][T11413] iso9660: Unknown parameter 'iso9660'
[  378.827182][T11415] loop0: detected capacity change from 0 to 512
[  378.859608][T11415] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  378.922588][T11419] loop6: detected capacity change from 0 to 512
[  378.972862][T11415] EXT4-fs (loop0): orphan cleanup on readonly fs
[  379.068712][T11419] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  379.122442][T11419] ext4 filesystem being mounted at /139/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  379.297640][   T28] kauditd_printk_skb: 14 callbacks suppressed
[  379.297657][   T28] audit: type=1400 audit(1774401935.560:2029): avc:  denied  { append } for  pid=11409 comm="syz.6.2426" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  379.337886][T11421] syz.4.2429: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0
[  379.375856][T11415] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #16: comm syz.0.2428: corrupted inode contents
[  379.394978][T11421] CPU: 0 UID: 0 PID: 11421 Comm: syz.4.2429 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  379.395007][T11421] Tainted: [W]=WARN
[  379.395013][T11421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  379.395062][T11421] Call Trace:
[  379.395069][T11421]  <TASK>
[  379.395119][T11421]  __dump_stack+0x1d/0x30
[  379.395143][T11421]  dump_stack_lvl+0x95/0xd0
[  379.395162][T11421]  dump_stack+0x15/0x1b
[  379.395208][T11421]  warn_alloc+0x145/0x1c0
[  379.395246][T11421]  ? __schedule+0x93c/0xd40
[  379.395272][T11421]  ? update_load_avg+0x5d/0x680
[  379.395303][T11421]  __vmalloc_node_range_noprof+0xa0/0x12b0
[  379.395329][T11421]  ? preempt_schedule_common+0x11/0x30
[  379.395398][T11421]  ? __rcu_read_unlock+0x4e/0x70
[  379.395417][T11421]  ? avc_has_perm_noaudit+0xab/0x130
[  379.395441][T11421]  ? should_fail_ex+0x30/0x280
[  379.395510][T11421]  ? xskq_create+0x36/0xe0
[  379.395536][T11421]  vmalloc_user_noprof+0x7d/0xb0
[  379.395558][T11421]  ? xskq_create+0x80/0xe0
[  379.395579][T11421]  xskq_create+0x80/0xe0
[  379.395684][T11421]  xsk_init_queue+0x70/0xb0
[  379.395761][T11421]  xsk_setsockopt+0x3f5/0x640
[  379.395782][T11421]  ? __pfx_xsk_setsockopt+0x10/0x10
[  379.395803][T11421]  __sys_setsockopt+0x184/0x200
[  379.395907][T11421]  __x64_sys_setsockopt+0x64/0x80
[  379.396084][T11421]  x64_sys_call+0x2327/0x3020
[  379.396114][T11421]  do_syscall_64+0x12c/0x370
[  379.396139][T11421]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  379.396192][T11421] RIP: 0033:0x7f897d29c799
[  379.396209][T11421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  379.396283][T11421] RSP: 002b:00007f897bcef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  379.396301][T11421] RAX: ffffffffffffffda RBX: 00007f897d515fa0 RCX: 00007f897d29c799
[  379.396314][T11421] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007
[  379.396339][T11421] RBP: 00007f897d332c99 R08: 0000000000000004 R09: 0000000000000000
[  379.396351][T11421] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  379.396362][T11421] R13: 00007f897d516038 R14: 00007f897d515fa0 R15: 00007fff166a5628
[  379.396389][T11421]  </TASK>
[  379.639461][T11415] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  379.639662][T11415] EXT4-fs (loop0): Remounting filesystem read-only
[  379.649742][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  379.649764][    C0] EXT4-fs (loop0): initial error at time 1774401935: ext4_do_update_inode:5569: inode 16
[  379.649803][    C0] EXT4-fs (loop0): last error at time 1774401935: ext4_do_update_inode:5569: inode 16
[  379.657233][T11421] Mem-Info:
[  379.692125][T11415] EXT4-fs (loop0): 1 truncate cleaned up
[  379.700861][   T50] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  379.714905][   T50] Quota error (device loop0): write_blk: dquota write failed
[  379.724615][   T50] Quota error (device loop0): remove_free_dqentry: Can't write block (5) with free entries
[  379.739017][   T50] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  379.751648][   T50] Quota error (device loop0): write_blk: dquota write failed
[  379.759832][   T50] Quota error (device loop0): free_dqentry: Can't move quota data block (5) to free list
[  379.782805][T11421] active_anon:12604 inactive_anon:106 isolated_anon:0
[  379.782805][T11421]  active_file:22916 inactive_file:2573 isolated_file:0
[  379.782805][T11421]  unevictable:0 dirty:177 writeback:0
[  379.782805][T11421]  slab_reclaimable:3641 slab_unreclaimable:36452
[  379.782805][T11421]  mapped:33760 shmem:3183 pagetables:3637
[  379.782805][T11421]  sec_pagetables:0 bounce:0
[  379.782805][T11421]  kernel_misc_reclaimable:0
[  379.782805][T11421]  free:1833967 free_pcp:8467 free_cma:0
[  379.838494][   T50] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started
[  379.838682][T11421] Node 0 active_anon:50300kB inactive_anon:424kB active_file:91664kB inactive_file:10292kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:135040kB dirty:708kB writeback:0kB shmem:12732kB kernel_stack:3840kB pagetables:14548kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  379.850831][   T50] Quota error (device loop0): v2_write_file_info: Can't write info structure
[  379.877055][T11421] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  379.877172][T11421] lowmem_reserve[]: 0 2879 7857 7857
[  379.877238][T11421] Node 0 DMA32 free:2944636kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948160kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:0kB free_cma:0kB
[  379.877410][T11421] lowmem_reserve[]: 0 0 4978 4978
[  379.877439][T11421] Node 0 Normal free:4375872kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:50300kB inactive_anon:424kB active_file:91664kB inactive_file:10292kB unevictable:0kB writepending:708kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:30404kB local_pcp:3972kB free_cma:0kB
[  379.877619][T11421] lowmem_reserve[]: 0 0 0 0
[  379.877659][T11421] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  379.877831][T11421] Node 0 DMA32: 5*4kB (M) 1*8kB (M) 4*16kB (M) 5*32kB (M) 4*64kB (M) 1*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944636kB
[  379.878062][T11421] Node 0 Normal: 1149*4kB (UM) 1405*8kB (UME) 748*16kB (UME) 619*32kB (UME) 437*64kB (UM) 305*128kB (UME) 215*256kB (UM) 159*512kB (UME) 110*1024kB (UM) 89*2048kB (UM) 935*4096kB 
[  379.891289][   T50] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  379.920558][T11421] (UM) 
[  380.069868][T11434] loop1: detected capacity change from 0 to 128
[  380.092718][T11421] = 4375740kB
[  380.096142][T11421] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB
[  380.163301][T11434] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2431'.
[  380.215024][T11421] 28743 total pagecache pages
[  380.222251][T11421] 10 pages in swap cache
[  380.228723][T11421] Free swap  = 124956kB
[  380.233672][T11421] Total swap = 124996kB
[  380.238964][T11421] 2097051 pages RAM
[  380.243573][T11421] 0 pages HighMem/MovableOnly
[  380.309971][T11421] 81611 pages reserved
[  380.364177][T11415] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  380.484609][ T9105] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  380.833632][T11447] x_tables: duplicate underflow at hook 1
[  380.922832][T11453] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2439'.
[  381.153604][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  381.404047][   T50] kworker/u8:3: attempt to access beyond end of device
[  381.404047][   T50] loop1: rw=1, sector=145, nr_sectors = 896 limit=128
[  381.434757][T11456] loop0: detected capacity change from 0 to 512
[  381.452391][T11456] EXT4-fs (loop0): 1 orphan inode deleted
[  381.468591][T11456] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  381.489747][T11456] program syz.0.2440 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  381.666019][T11468] 8021q: adding VLAN 0 to HW filter on device bond1
[  381.694280][T11468] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  382.152777][T11474] loop3: detected capacity change from 0 to 512
[  382.167804][T11475] loop4: detected capacity change from 0 to 256
[  382.303819][   T30] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  382.327360][T11475] FAT-fs (loop4): Directory bread(block 64) failed
[  382.334262][T11475] FAT-fs (loop4): Directory bread(block 65) failed
[  382.341300][T11475] FAT-fs (loop4): Directory bread(block 66) failed
[  382.348305][T11475] FAT-fs (loop4): Directory bread(block 67) failed
[  382.355195][T11475] FAT-fs (loop4): Directory bread(block 68) failed
[  382.363031][T11475] FAT-fs (loop4): Directory bread(block 69) failed
[  382.369878][T11475] FAT-fs (loop4): Directory bread(block 70) failed
[  382.376794][T11475] FAT-fs (loop4): Directory bread(block 71) failed
[  382.384066][T11475] FAT-fs (loop4): Directory bread(block 72) failed
[  382.392620][T11475] FAT-fs (loop4): Directory bread(block 73) failed
[  382.478061][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  382.489638][T11474] EXT4-fs (loop3): 1 truncate cleaned up
[  382.496108][T11474] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  382.934045][T11474] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.2442: invalid indirect mapped block 4294901760 (level 0)
[  382.952312][T11474] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.2442: invalid indirect mapped block 4294967295 (level 1)
[  382.990802][   T30] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  383.024624][   T30] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  383.197718][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  383.225032][   T30] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  383.391911][T11487] loop6: detected capacity change from 0 to 512
[  383.400120][T11488] __nla_validate_parse: 1 callbacks suppressed
[  383.400152][T11488] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2451'.
[  383.427158][T11487] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  383.436151][T11487] EXT4-fs (loop6): orphan cleanup on readonly fs
[  383.447141][T11488] No such timeout policy "syz0"
[  383.462731][T11487] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #16: comm syz.6.2450: corrupted inode contents
[  383.495088][T11487] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  383.495216][T11487] EXT4-fs (loop6): Remounting filesystem read-only
[  383.504647][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  383.504668][    C1] EXT4-fs (loop6): initial error at time 1774401939: ext4_do_update_inode:5569: inode 16
[  383.504693][    C1] EXT4-fs (loop6): last error at time 1774401939: ext4_do_update_inode:5569: inode 16
[  383.638498][T11487] EXT4-fs (loop6): 1 truncate cleaned up
[  383.644708][   T28] audit: type=1400 audit(1774401939.000:2030): avc:  denied  { rename } for  pid=11462 comm="syz.3.2442" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  383.669552][   T30] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  383.681674][   T30] Quota error (device loop6): write_blk: dquota write failed
[  383.702001][   T30] Quota error (device loop6): remove_free_dqentry: Can't write block (5) with free entries
[  383.737537][T11494] loop0: detected capacity change from 0 to 512
[  383.745117][T11500] loop1: detected capacity change from 0 to 128
[  383.782019][   T30] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  383.815106][T11504] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2452'.
[  383.892254][T11494] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  383.939375][   T30] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started
[  383.952599][T11494] EXT4-fs (loop0): orphan cleanup on readonly fs
[  383.980800][T11494] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #16: comm syz.0.2445: corrupted inode contents
[  383.998215][T11487] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  384.031681][T11494] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  384.032243][T11494] EXT4-fs (loop0): Remounting filesystem read-only
[  384.041860][    C1] EXT4-fs (loop0): error count since last fsck: 1
[  384.041876][    C1] EXT4-fs (loop0): initial error at time 1774401940: ext4_do_update_inode:5569: inode 16
[  384.041933][    C1] EXT4-fs (loop0): last error at time 1774401940: ext4_do_update_inode:5569: inode 16
[  384.091660][T11507] netlink: 7 bytes leftover after parsing attributes in process `syz.4.2454'.
[  384.120508][T11494] EXT4-fs (loop0): 1 truncate cleaned up
[  384.148659][T11507] netlink: 7 bytes leftover after parsing attributes in process `syz.4.2454'.
[  384.233996][T11513] xt_time: unknown flags 0xc
[  384.247924][T11513] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2455'.
[  384.259196][T11513] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2455'.
[  384.286260][T11513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  384.298424][T11513] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  384.679200][ T9105] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  384.692705][   T12] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  384.705281][   T12] __quota_error: 5 callbacks suppressed
[  384.705292][   T12] Quota error (device loop0): write_blk: dquota write failed
[  384.732839][   T28] audit: type=1400 audit(1774401941.030:2032): avc:  denied  { write } for  pid=11516 comm="syz.6.2457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  384.764725][   T12] Quota error (device loop0): remove_free_dqentry: Can't write block (5) with free entries
[  384.785096][   T12] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  384.829383][   T12] Quota error (device loop0): write_blk: dquota write failed
[  384.860599][   T12] Quota error (device loop0): free_dqentry: Can't move quota data block (5) to free list
[  384.873145][   T28] audit: type=1326 audit(1774401941.180:2033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11519 comm="syz.4.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897d29c799 code=0x7ffc0000
[  384.901382][T11520] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2459'.
[  384.910708][   T12] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started
[  384.925719][   T12] Quota error (device loop0): v2_write_file_info: Can't write info structure
[  384.938295][   T28] audit: type=1326 audit(1774401941.180:2034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11519 comm="syz.4.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897d29c799 code=0x7ffc0000
[  384.981410][   T12] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  385.107710][T11494] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  385.126511][   T28] audit: type=1326 audit(1774401941.180:2035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11519 comm="syz.4.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897d29c799 code=0x7ffc0000
[  385.194695][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  385.213815][  T176] kworker/u8:5: attempt to access beyond end of device
[  385.213815][  T176] loop1: rw=1, sector=145, nr_sectors = 896 limit=128
[  385.439406][T11538] loop3: detected capacity change from 0 to 512
[  385.480307][T11540] loop4: detected capacity change from 0 to 128
[  385.492182][T11541] loop1: detected capacity change from 0 to 256
[  385.573558][T11541] FAT-fs (loop1): Directory bread(block 64) failed
[  385.580440][T11541] FAT-fs (loop1): Directory bread(block 65) failed
[  385.587139][T11541] FAT-fs (loop1): Directory bread(block 66) failed
[  385.594008][T11541] FAT-fs (loop1): Directory bread(block 67) failed
[  385.601302][T11541] FAT-fs (loop1): Directory bread(block 68) failed
[  385.607964][T11541] FAT-fs (loop1): Directory bread(block 69) failed
[  385.615335][T11541] FAT-fs (loop1): Directory bread(block 70) failed
[  385.622448][T11541] FAT-fs (loop1): Directory bread(block 71) failed
[  385.630145][T11541] FAT-fs (loop1): Directory bread(block 72) failed
[  385.637249][T11541] FAT-fs (loop1): Directory bread(block 73) failed
[  385.651001][T11540] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2463'.
[  385.810066][T11546] netlink: 131740 bytes leftover after parsing attributes in process `syz.0.2465'.
[  385.870354][T11546] netlink: zone id is out of range
[  385.918417][T11546] netlink: zone id is out of range
[  385.919016][T11547] loop0: detected capacity change from 0 to 512
[  385.979764][T11546] netlink: zone id is out of range
[  386.018596][T11546] netlink: zone id is out of range
[  386.097700][T11546] netlink: del zone limit has 8 unknown bytes
[  386.561556][T11547] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #12: comm syz.0.2465: missing EA_INODE flag
[  386.663523][T11558] netlink: 'syz.6.2469': attribute type 29 has an invalid length.
[  386.675429][T11547] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  386.677261][T11547] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.2465: error while reading EA inode 12 err=-117
[  386.686871][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  386.686895][    C0] EXT4-fs (loop0): initial error at time 1774401942: ext4_xattr_inode_iget:441: inode 12
[  386.686918][    C0] EXT4-fs (loop0): last error at time 1774401942: ext4_xattr_inode_iget:441: inode 12
[  386.736444][T11559] netlink: 'syz.6.2469': attribute type 29 has an invalid length.
[  386.749344][ T1266] kworker/u8:6: attempt to access beyond end of device
[  386.749344][ T1266] loop4: rw=1, sector=145, nr_sectors = 896 limit=128
[  386.781674][T11561] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2470'.
[  387.320242][T11569] loop6: detected capacity change from 0 to 128
[  387.377927][T11547] loop0: lost filesystem error report for type 5 error -117
[  387.430460][T11547] EXT4-fs (loop0): 1 orphan inode deleted
[  387.503173][T11576] loop1: detected capacity change from 0 to 512
[  387.511755][T11547] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  387.530360][T11576] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  387.575677][T11576] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  387.619699][T11576] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  387.648685][T11576] System zones: 0-2, 18-18, 34-34
[  387.657856][T11576] EXT4-fs error (device loop1): ext4_orphan_get:1391: comm syz.1.2475: inode #15: comm syz.1.2475: iget: illegal inode #
[  387.763225][T11576] loop1: lost filesystem error report for type 5 error -117
[  387.763469][T11576] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.2475: couldn't read orphan inode 15 (err -117)
[  387.771051][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  387.771075][    C0] EXT4-fs (loop1): initial error at time 1774401944: ext4_orphan_get:1391
[  387.771103][    C0] EXT4-fs (loop1): last error at time 1774401944: ext4_orphan_get:1391
[  388.094110][T11576] loop1: lost filesystem error report for type 5 error -117
[  388.094743][T11576] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  388.173143][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  388.316052][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  388.460647][T11587] netlink: 'syz.3.2482': attribute type 29 has an invalid length.
[  388.479937][T11589] __nla_validate_parse: 3 callbacks suppressed
[  388.479952][T11589] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2481'.
[  388.499851][T11587] netlink: 'syz.3.2482': attribute type 29 has an invalid length.
[  388.519607][T11589] netlink: 312 bytes leftover after parsing attributes in process `syz.4.2481'.
[  388.557973][T11589] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2481'.
[  388.790677][ T5245] kworker/u8:8: attempt to access beyond end of device
[  388.790677][ T5245] loop6: rw=1, sector=145, nr_sectors = 896 limit=128
[  388.929888][T11602] loop4: detected capacity change from 0 to 256
[  388.949720][T11599] loop1: detected capacity change from 0 to 128
[  389.700358][T11599] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  389.726298][T11599] ext4 filesystem being mounted at /488/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  390.729544][   T28] kauditd_printk_skb: 92 callbacks suppressed
[  390.729564][   T28] audit: type=1400 audit(1774401947.030:2128): avc:  denied  { setopt } for  pid=11598 comm="syz.1.2477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  392.154050][T11605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  392.171990][T11605] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  392.266303][ T3311] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  392.283210][T11602] FAT-fs (loop4): Directory bread(block 64) failed
[  392.291567][T11602] FAT-fs (loop4): Directory bread(block 65) failed
[  392.300081][T11602] FAT-fs (loop4): Directory bread(block 66) failed
[  392.308669][T11602] FAT-fs (loop4): Directory bread(block 67) failed
[  392.315671][T11602] FAT-fs (loop4): Directory bread(block 68) failed
[  392.324750][T11602] FAT-fs (loop4): Directory bread(block 69) failed
[  392.333207][T11602] FAT-fs (loop4): Directory bread(block 70) failed
[  392.342091][T11602] FAT-fs (loop4): Directory bread(block 71) failed
[  392.350280][T11602] FAT-fs (loop4): Directory bread(block 72) failed
[  392.358600][T11602] FAT-fs (loop4): Directory bread(block 73) failed
[  393.239949][T11623] loop3: detected capacity change from 0 to 128
[  393.329485][T11628] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2488'.
[  393.379153][T11629] xt_time: unknown flags 0xc
[  393.442701][T11629] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2487'.
[  393.575064][T11629] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2487'.
[  393.587997][T11633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  393.600682][T11633] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  393.772800][T11638] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2492'.
[  393.784187][T11638] netlink: 312 bytes leftover after parsing attributes in process `syz.6.2492'.
[  393.858604][T11638] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2492'.
[  393.911073][T11641] loop0: detected capacity change from 0 to 512
[  394.424825][T11645] loop1: detected capacity change from 0 to 512
[  394.433292][T11645] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  394.449155][T11645] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.2494: iget: bad i_size value: 38620345925642
[  394.463305][T11645] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  394.463516][T11645] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.2494: couldn't read orphan inode 15 (err -117)
[  394.473021][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  394.473049][    C1] EXT4-fs (loop1): initial error at time 1774401950: ext4_orphan_get:1391: inode 15
[  394.473092][    C1] EXT4-fs (loop1): last error at time 1774401950: ext4_orphan_get:1391: inode 15
[  394.513065][T11645] loop1: lost filesystem error report for type 5 error -117
[  394.513499][T11645] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  394.540444][T11644] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.2494: bg 0: block 5: invalid block bitmap
[  394.564413][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  394.595781][T11651] loop6: detected capacity change from 0 to 512
[  394.628338][T11651] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  394.643620][ T5245] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  394.664490][ T5245] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  394.679843][ T5245] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  394.691958][ T5245] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  394.721132][T11651] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.2497: iget: bad i_size value: 38620345925642
[  394.742343][T11651] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  394.742609][T11651] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.2497: couldn't read orphan inode 15 (err -117)
[  394.752485][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  394.752524][    C1] EXT4-fs (loop6): initial error at time 1774401951: ext4_orphan_get:1391: inode 15
[  394.752551][    C1] EXT4-fs (loop6): last error at time 1774401951: ext4_orphan_get:1391: inode 15
[  395.005546][T11660] netlink: 'syz.3.2496': attribute type 10 has an invalid length.
[  395.018944][T11660] loop3: detected capacity change from 0 to 512
[  395.113799][T11660] EXT4-fs (loop3): orphan cleanup on readonly fs
[  395.121046][T11660] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.2496: ea_inode with extended attributes
[  395.134708][T11660] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  395.135920][T11660] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.2496: error while reading EA inode 11 err=-117
[  395.146299][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  395.146324][    C1] EXT4-fs (loop3): initial error at time 1774401951: ext4_xattr_inode_iget:441: inode 11
[  395.146393][    C1] EXT4-fs (loop3): last error at time 1774401951: ext4_xattr_inode_iget:441: inode 11
[  395.187678][T11660] loop3: lost filesystem error report for type 5 error -117
[  395.318792][T11663] loop1: detected capacity change from 0 to 128
[  395.344868][T11660] EXT4-fs (loop3): 1 orphan inode deleted
[  395.353251][T11660] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  395.368647][T11651] loop6: lost filesystem error report for type 5 error -117
[  395.398429][T11665] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2499'.
[  395.473345][T11651] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  395.539159][T11651] SET target dimension over the limit!
[  396.685384][ T5245] kworker/u8:8: attempt to access beyond end of device
[  396.685384][ T5245] loop1: rw=1, sector=145, nr_sectors = 896 limit=128
[  396.728904][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  396.743923][ T9105] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  396.936312][T11681] loop1: detected capacity change from 0 to 128
[  398.066947][T11683] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2503'.
[  398.557711][T11689] loop3: detected capacity change from 0 to 256
[  401.123310][T11697] netlink: 'syz.4.2509': attribute type 21 has an invalid length.
[  401.169682][T11697] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2509'.
[  401.277770][T11696] netlink: 'syz.4.2509': attribute type 21 has an invalid length.
[  401.294997][  T176] kworker/u8:5: attempt to access beyond end of device
[  401.294997][  T176] loop1: rw=1, sector=145, nr_sectors = 896 limit=128
[  401.308785][T11697] netlink: 'syz.4.2509': attribute type 5 has an invalid length.
[  401.317770][T11696] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2509'.
[  401.328438][T11697] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2509'.
[  401.354727][T11702] loop1: detected capacity change from 0 to 1024
[  401.364631][T11696] netlink: 'syz.4.2509': attribute type 5 has an invalid length.
[  401.380051][T11702] EXT4-fs: inline encryption not supported
[  401.389922][T11702] EXT4-fs: Ignoring removed nomblk_io_submit option
[  401.397067][T11696] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2509'.
[  401.401017][T11702] EXT4-fs: Ignoring removed nobh option
[  401.422426][T11698] loop0: detected capacity change from 0 to 128
[  401.432234][T11689] FAT-fs (loop3): Directory bread(block 64) failed
[  401.441727][T11689] FAT-fs (loop3): Directory bread(block 65) failed
[  401.441964][T11703] loop6: detected capacity change from 0 to 128
[  401.450159][T11689] FAT-fs (loop3): Directory bread(block 66) failed
[  401.464252][T11689] FAT-fs (loop3): Directory bread(block 67) failed
[  401.466887][T11702] EXT4-fs: Ignoring removed bh option
[  401.473552][T11689] FAT-fs (loop3): Directory bread(block 68) failed
[  401.485651][T11689] FAT-fs (loop3): Directory bread(block 69) failed
[  401.492990][T11689] FAT-fs (loop3): Directory bread(block 70) failed
[  401.501134][T11689] FAT-fs (loop3): Directory bread(block 71) failed
[  401.508818][T11703] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.2510'.
[  401.520236][T11689] FAT-fs (loop3): Directory bread(block 72) failed
[  401.527987][T11698] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2507'.
[  401.540075][T11689] FAT-fs (loop3): Directory bread(block 73) failed
[  401.570419][T11708] loop4: detected capacity change from 0 to 128
[  401.586809][T11702] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  401.615222][T11708] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  401.622178][T11702] ipip1: entered promiscuous mode
[  401.650806][T11708] ext4 filesystem being mounted at /516/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  401.651466][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  401.682790][T11711] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2513'.
[  401.700195][T11711] bond1: Invalid ad_actor_system MAC address.
[  401.708386][T11711] bond1: option ad_actor_system: invalid value (4294967295)
[  401.718121][T11711] bond1 (unregistering): Released all slaves
[  401.765950][ T5248] kworker/u8:9: attempt to access beyond end of device
[  401.765950][ T5248] loop0: rw=1, sector=145, nr_sectors = 896 limit=128
[  401.940208][T11723] netlink: 'syz.1.2514': attribute type 10 has an invalid length.
[  401.956708][T11723] loop1: detected capacity change from 0 to 512
[  402.012144][T11723] EXT4-fs (loop1): orphan cleanup on readonly fs
[  402.020701][T11723] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.2514: ea_inode with extended attributes
[  402.034849][T11723] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  402.035441][T11723] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.2514: error while reading EA inode 11 err=-117
[  402.045309][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  402.045330][    C1] EXT4-fs (loop1): initial error at time 1774401958: ext4_xattr_inode_iget:441: inode 11
[  402.045389][    C1] EXT4-fs (loop1): last error at time 1774401958: ext4_xattr_inode_iget:441: inode 11
[  402.086220][T11723] loop1: lost filesystem error report for type 5 error -117
[  402.087800][T11723] EXT4-fs (loop1): 1 orphan inode deleted
[  402.102594][T11723] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  402.235894][ T5248] kworker/u8:9: attempt to access beyond end of device
[  402.235894][ T5248] loop6: rw=1, sector=145, nr_sectors = 896 limit=128
[  402.338752][T11727] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11727 comm=syz.6.2517
[  402.414937][ T3318] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  402.498342][T11732] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2519'.
[  402.701810][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  402.790458][T11736] siw: device registration error -23
[  402.900641][   T28] audit: type=1326 audit(1774401959.200:2129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11738 comm="syz.0.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94a1dc799 code=0x7ffc0000
[  402.995283][T11739] loop0: detected capacity change from 0 to 512
[  403.069320][T11739] EXT4-fs: Ignoring removed oldalloc option
[  403.091600][   T28] audit: type=1326 audit(1774401959.230:2130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11738 comm="syz.0.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94a1dc799 code=0x7ffc0000
[  403.138544][T11739] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  403.372461][T11739] EXT4-fs (loop0): 1 truncate cleaned up
[  403.383118][T11744] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2524'.
[  403.397906][T11739] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  403.414154][   T28] audit: type=1326 audit(1774401959.230:2131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11738 comm="syz.0.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94a1dc799 code=0x7ffc0000
[  403.450036][T11746] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=257 sclass=netlink_route_socket pid=11746 comm=syz.3.2524
[  403.543832][   T28] audit: type=1326 audit(1774401959.230:2132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11738 comm="syz.0.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94a1dc799 code=0x7ffc0000
[  404.273663][   T28] audit: type=1326 audit(1774401959.230:2133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11738 comm="syz.0.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ff94a1dc799 code=0x7ffc0000
[  404.416530][   T28] audit: type=1326 audit(1774401959.230:2134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11738 comm="syz.0.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94a1dc799 code=0x7ffc0000
[  404.451757][   T28] audit: type=1326 audit(1774401959.240:2135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11738 comm="syz.0.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94a1dc799 code=0x7ffc0000
[  404.558664][   T28] audit: type=1326 audit(1774401959.240:2136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11738 comm="syz.0.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94a1dc799 code=0x7ffc0000
[  404.584839][   T28] audit: type=1326 audit(1774401959.240:2138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11738 comm="syz.0.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7ff94a1dc799 code=0x7ffc0000
[  404.647124][   T28] audit: type=1326 audit(1774401959.240:2137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11738 comm="syz.0.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94a1dc799 code=0x7ffc0000
[  404.677434][T11775] netlink: 'syz.4.2532': attribute type 10 has an invalid length.
[  404.692346][T11775] loop4: detected capacity change from 0 to 512
[  404.742728][T11776] siw: device registration error -23
[  404.778712][T11775] EXT4-fs (loop4): orphan cleanup on readonly fs
[  404.787862][T11775] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.2532: ea_inode with extended attributes
[  404.802819][T11775] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  404.803463][T11775] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.2532: error while reading EA inode 11 err=-117
[  404.814075][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  404.814097][    C1] EXT4-fs (loop4): initial error at time 1774401961: ext4_xattr_inode_iget:441: inode 11
[  404.814121][    C1] EXT4-fs (loop4): last error at time 1774401961: ext4_xattr_inode_iget:441: inode 11
[  404.858052][T11775] loop4: lost filesystem error report for type 5 error -117
[  404.859677][T11775] EXT4-fs (loop4): 1 orphan inode deleted
[  404.874089][T11775] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  405.002161][T11781] lo speed is unknown, defaulting to 1000
[  405.010934][T11783] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2534'.
[  405.022982][T11781] dummy0 speed is unknown, defaulting to 1000
[  405.034186][T11783] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=260 sclass=netlink_route_socket pid=11783 comm=syz.6.2534
[  405.104065][T11787] loop6: detected capacity change from 0 to 512
[  405.113654][T11787] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  405.129756][T11787] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.2535: iget: bad i_size value: 38620345925642
[  405.155846][T11787] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  405.156068][T11787] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.2535: couldn't read orphan inode 15 (err -117)
[  405.166237][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  405.166260][    C1] EXT4-fs (loop6): initial error at time 1774401961: ext4_orphan_get:1391: inode 15
[  405.166295][    C1] EXT4-fs (loop6): last error at time 1774401961: ext4_orphan_get:1391: inode 15
[  405.205207][T11787] loop6: lost filesystem error report for type 5 error -117
[  405.205822][T11787] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  405.233855][T11787] SET target dimension over the limit!
[  405.304693][ T9105] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  405.374047][T11793] loop6: detected capacity change from 0 to 1024
[  405.382353][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  405.394695][T11793] EXT4-fs: inline encryption not supported
[  405.440534][T11793] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (32669!=35945)
[  405.481762][T11793] EXT4-fs (loop6): group descriptors corrupted!
[  405.500294][T11793] loop6: detected capacity change from 0 to 128
[  405.638782][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  406.528870][T11810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  406.529541][T11803] netlink: 'syz.3.2541': attribute type 10 has an invalid length.
[  406.539082][T11805] __nla_validate_parse: 1 callbacks suppressed
[  406.539096][T11805] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2542'.
[  406.570654][T11803] loop3: detected capacity change from 0 to 512
[  406.583954][T11808] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2537'.
[  406.679049][T11810] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  406.709925][T11805] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2542'.
[  406.722976][T11803] EXT4-fs (loop3): orphan cleanup on readonly fs
[  406.732886][T11803] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.2541: ea_inode with extended attributes
[  406.748037][T11803] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  406.748460][T11803] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.2541: error while reading EA inode 11 err=-117
[  406.758154][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  406.758179][    C0] EXT4-fs (loop3): initial error at time 1774401963: ext4_xattr_inode_iget:441: inode 11
[  406.758203][    C0] EXT4-fs (loop3): last error at time 1774401963: ext4_xattr_inode_iget:441: inode 11
[  406.805238][T11803] loop3: lost filesystem error report for type 5 error -117
[  406.983461][T11803] EXT4-fs (loop3): 1 orphan inode deleted
[  407.002073][T11803] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  407.244675][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  407.390228][T11825] loop0: detected capacity change from 0 to 512
[  407.402606][T11825] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  407.428912][T11825] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.2548: iget: bad i_size value: 38620345925642
[  407.443066][T11825] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  407.443241][T11825] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.2548: couldn't read orphan inode 15 (err -117)
[  407.452807][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  407.452824][    C0] EXT4-fs (loop0): initial error at time 1774401963: ext4_orphan_get:1391: inode 15
[  407.452852][    C0] EXT4-fs (loop0): last error at time 1774401963: ext4_orphan_get:1391: inode 15
[  407.520802][T11825] loop0: lost filesystem error report for type 5 error -117
[  407.521357][T11825] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  407.549809][T11825] SET target dimension over the limit!
[  407.729874][ T2999] ==================================================================
[  407.739690][ T2999] BUG: KCSAN: data-race in dont_mount / lookup_fast
[  407.746733][ T2999] 
[  407.749520][ T2999] read-write to 0xffff8881080f2cc0 of 4 bytes by task 3304 on cpu 0:
[  407.758281][ T2999]  dont_mount+0x2a/0x40
[  407.762800][ T2999]  vfs_unlink+0x206/0x490
[  407.767456][ T2999]  filename_unlinkat+0x1e2/0x410
[  407.772831][ T2999]  __se_sys_unlink+0x2b/0xe0
[  407.777783][ T2999]  __x64_sys_unlink+0x1f/0x30
[  407.777805][ T2999]  x64_sys_call+0x2eb6/0x3020
[  407.777825][ T2999]  do_syscall_64+0x12c/0x370
[  407.777845][ T2999]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  407.777864][ T2999] 
[  407.777871][ T2999] read to 0xffff8881080f2cc0 of 4 bytes by task 2999 on cpu 1:
[  407.777886][ T2999]  lookup_fast+0xf0/0x320
[  407.777906][ T2999]  path_lookupat+0x15c/0x500
[  407.777927][ T2999]  filename_lookup+0x190/0x390
[  407.777954][ T2999]  do_readlinkat+0x74/0x2f0
[  407.777978][ T2999]  __x64_sys_readlink+0x47/0x60
[  407.777997][ T2999]  x64_sys_call+0x2b51/0x3020
[  407.778021][ T2999]  do_syscall_64+0x12c/0x370
[  407.778040][ T2999]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  407.778058][ T2999] 
[  407.778062][ T2999] value changed: 0x00300080 -> 0x00004080
[  407.778071][ T2999] 
[  407.778075][ T2999] Reported by Kernel Concurrency Sanitizer on:
[  407.778088][ T2999] CPU: 1 UID: 0 PID: 2999 Comm: udevd Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  407.778116][ T2999] Tainted: [W]=WARN
[  407.778123][ T2999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  407.778134][ T2999] ==================================================================
[  407.979578][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.