last executing test programs:

13m58.496143447s ago: executing program 4 (id=78):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
getpid()
prlimit64(0x0, 0x4, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xffffffff, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000027c0)={0x20, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000e0000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b9af8fe00000000b509020040000000dbaaf8fff1000000bf8200000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f1ff760000e8be9800000000000056080000010000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x1}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c350000001800030a02000000000000000a80"], 0x1c}}, 0x8000)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
getrlimit(0x5, 0x0)
r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000024c0)=@newtaction={0x6c, 0x30, 0x58f, 0x0, 0x0, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x0, 0x0, 0x0, 0xfffffffd}, @local, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff})
recvmsg$unix(r6, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2082)
mmap(&(0x7f000015c000/0x4000)=nil, 0x4000, 0x1000002, 0x11012, r4, 0x3a0c0000)
syz_clone(0xc30e3400, 0x0, 0x0, 0x0, 0x0, 0x0)

13m56.224695052s ago: executing program 0 (id=88):
syz_usb_connect(0x1, 0x3b, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x14048, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000007800010402000000000000000700000064000000140001800800010064000000"], 0x2c}}, 0x0)

13m55.608770117s ago: executing program 4 (id=91):
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e00000004000280", @ANYRES16], 0x3c}, 0x1, 0x8000a0ffffffff, 0x0, 0x8086}, 0x0)

13m55.49846799s ago: executing program 0 (id=92):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x2200, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fefffffc}, 0x0, 0x0, 0x0, 0x3, 0xffb, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
listns(&(0x7f0000000080)={0x20, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff}, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
connect$netlink(0xffffffffffffffff, &(0x7f00000000c0)=@unspec, 0xc)
r3 = gettid()
setns(0xc9, 0x0)
syz_open_procfs(r3, &(0x7f0000000000)='net/tcp\x00')

13m55.194544037s ago: executing program 4 (id=93):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x2, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x5, 0x2, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
pipe(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = perf_event_open$cgroup(&(0x7f0000000080)={0x4, 0x80, 0x9, 0x17, 0x7f, 0x0, 0x0, 0x1, 0x600, 0x8, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x4, 0x6f5}, 0xa0, 0x3, 0x1, 0x3, 0xfffffffffffffffa, 0x0, 0x400, 0x0, 0xa0, 0x0, 0x8}, r1, 0xb, 0xffffffffffffffff, 0x8)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x10, 0x8}, 0x10ecc9, 0x1224, 0x0, 0x5, 0x8, 0x6d82, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040), 0x2, 0x3}}, 0x20)
r6 = syz_genetlink_get_family_id$team(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', <r7=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={0x60, r6, 0x1, 0x1, 0x25dfdc01, {}, [{{0x8, 0x1, r7}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x400000000000000}, 0x40810)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r12}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}]}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x4, 0x0, 0x7, 0x20, 0x0, @private0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000, 0x1, 0x3, 0x8000}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000480)={'syztnl1\x00', &(0x7f00000003c0)={'sit0\x00', 0x0, 0x7, 0x80, 0x7ff, 0x4, {{0x1f, 0x4, 0x1, 0x8, 0x7c, 0x65, 0x0, 0xa, 0x2f, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x34, 0x82, 0x1, 0x8, [{@dev={0xac, 0x14, 0x14, 0x34}, 0x7}, {@private=0xa010101, 0x1}, {@private=0xa010101, 0x8}, {@multicast2, 0x5}, {@multicast1, 0x12}, {@private=0xa010100, 0x9}]}, @timestamp_prespec={0x44, 0x1c, 0xe9, 0x3, 0x3, [{@remote, 0x1}, {@empty, 0x5}, {@multicast2, 0x75}]}, @end, @timestamp={0x44, 0xc, 0x3c, 0x0, 0x3, [0x1, 0x6]}, @rr={0x7, 0x7, 0x2c, [@local]}, @noop, @end]}}}}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', &(0x7f0000000580)={'syztnl2\x00', 0x0, 0x2f, 0x2a, 0xa8, 0x2, 0x0, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x20, 0x6, 0x4}})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000780)={'ip_vti0\x00', &(0x7f00000006c0)={'erspan0\x00', 0x0, 0x700, 0x80, 0x7, 0x1ff, {{0x19, 0x4, 0x3, 0x3b, 0x64, 0x25, 0x0, 0x9, 0x0, 0x0, @local, @empty, {[@ra={0x94, 0x4, 0x1}, @noop, @timestamp_prespec={0x44, 0x1c, 0x60, 0x3, 0xf, [{@multicast2, 0xffff}, {@private=0xa010100, 0x993b}, {@multicast1, 0x205}]}, @cipso={0x86, 0x2d, 0xfffffffffffffffe, [{0x1, 0x11, "27b4f1ac2d71a55fdbe4bd1d3ed8e2"}, {0x6, 0x2}, {0x0, 0x9, "9cf489297d184a"}, {0x2, 0xb, "9bbcf764c7addae8db"}]}, @noop]}}}}})
getsockname$packet(r3, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000800)=0x14)

13m54.634091081s ago: executing program 4 (id=101):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffffffffffffffff, 0x63b5, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60740, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x4}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c40)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfb35, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r2 = openat(r0, &(0x7f0000000300)='./sys/bus/netdevsim/new_device\x00', 0x220000, 0x0)
write(r2, 0x0, 0x0)
unshare(0x24020400)
bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}, 0x8}, 0xd)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x1d3)
socket$nl_netfilter(0x10, 0x3, 0xc)
write(r3, &(0x7f0000000600)='120\n', 0x4)
close(r3)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)=ANY=[@ANYBLOB="340000001200010001000000000000000000000000000000000000000000000009000300657468310000000008"], 0x34}}, 0x0)
r4 = socket$kcm(0x2, 0x3, 0x2)
mmap$IORING_OFF_SQES(0x0, 0x2, 0x2000000, 0x110, r3, 0x10000000)
ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0)

13m54.549983633s ago: executing program 0 (id=102):
r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x250, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
syz_mount_image$iso9660(&(0x7f0000000100), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES16, @ANYRES32=r0, @ANYRES8=r0], 0xff, 0x692, &(0x7f00000011c0)="$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")
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x8, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x2, 0x8}, 0x10ecc8, 0x2c65, 0x0, 0x5, 0x5, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
keyctl$update(0x2, r1, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r3 = memfd_create(&(0x7f0000000780)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19\xe5\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKl\xcc\xa4:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xc3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6)
fallocate(r3, 0x0, 0x9, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000a, 0x12, r3, 0x0)
read(r3, &(0x7f0000000080)=""/221, 0xdd)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r2, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="5000000002060108000034e4000000000000000805000400000000000900020073797a3100000000050005000200000016000300686173683a6e65742c706f72742c6e65740000000500010007"], 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0))
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r6, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001880)=ANY=[@ANYBLOB="60000000090603000000000000000000050000000900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c000180080001400a0101010c00028008000140e00000020c00148008000140"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000080)=@ethtool_per_queue_op={0x4b, 0xf, [0x10010001, 0x4, 0x4, 0x4, 0x7, 0x9, 0x57e, 0x7fffffff, 0x2, 0x28e8, 0x7, 0x5, 0xfffffffe, 0x7ffc, 0x805, 0x6, 0x80000001, 0x7, 0x0, 0x800, 0xfffffffc, 0x2, 0x1, 0xffff8000, 0x91, 0xffffffff, 0x1, 0x400, 0x2, 0x100003, 0x8, 0x8, 0xa2, 0x3, 0x7, 0xfff, 0x4, 0xffffffff, 0x4e6, 0xb13, 0xff, 0x1a5a, 0x10, 0x0, 0x4, 0x4, 0x8b, 0xffffff00, 0x8, 0x224, 0xa, 0x6, 0x9, 0x98f, 0x3d, 0x80000001, 0xfffffff8, 0x2b6395a6, 0x5510, 0x4, 0x20009, 0x5, 0x7, 0x7f, 0x5, 0xaf97, 0x0, 0x1, 0x3ff, 0x5, 0x9dc, 0xfffffffe, 0x80b1, 0x80, 0x80000001, 0x9, 0x7, 0x3, 0x4, 0x9, 0x1, 0xd640, 0x7, 0x8, 0x3, 0x1, 0x11, 0x9, 0x401, 0x4, 0x9, 0x5, 0x1, 0xc9, 0x1ff, 0x7, 0x1, 0x4, 0x7fff, 0x8, 0x3, 0x7d8b, 0x3, 0x6, 0x2000009, 0xfffffffc, 0x5, 0x140000, 0x9, 0x2, 0xfffffff9, 0x0, 0x350d, 0x4, 0x7fff, 0x80, 0x103, 0x80000000, 0x7, 0x5, 0x2, 0x9, 0x5, 0x3ff, 0x3, 0x0, 0x3, 0x7]}})
sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000000706052000000000000002000000020500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810)
recvmsg(r7, &(0x7f000000c1c0)={0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000080)=""/29, 0x1d}, {&(0x7f00000001c0)=""/116, 0x74}, {&(0x7f0000000380)=""/86, 0x56}, {&(0x7f0000000500)=""/145, 0x91}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/10, 0xa}, {&(0x7f0000001780)=""/69, 0x45}], 0x7}, 0x20)

13m54.314271639s ago: executing program 4 (id=104):
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3c30, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r0 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x3000408, &(0x7f0000000440)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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")
mkdir(&(0x7f0000000140)='./file0\x00', 0x18b)
r1 = getpgrp(0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r1, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0)
r2 = socket$kcm(0x10, 0x400000002, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000020000000000000000", @ANYRES32, @ANYBLOB="da0f000000", @ANYRES32], 0x50)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r3, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x8, 0x8e}}]}, 0x4c}}, 0x0)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, r3, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x44090}, 0x80)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e0007"], 0xfe33)

13m53.809592741s ago: executing program 4 (id=106):
r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
write$tcp_mem(r0, &(0x7f0000000200)={0x9}, 0x48)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000000)=<r2=>0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r3, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60)
getsockopt$inet_buf(r3, 0x118, 0x0, 0x0, 0x0)
waitid(0x4, r2, &(0x7f0000000040), 0x80000000, &(0x7f00000001c0))
unshare(0x22020400)
pselect6(0x40, &(0x7f0000000100), &(0x7f0000000180)={0x1f, 0x4, 0xffffffff, 0x7, 0x0, 0x7, 0x1}, 0x0, 0x0, 0x0)

13m52.907484693s ago: executing program 0 (id=110):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1, 0x2bc, &(0x7f00000015c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x15)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x1000000)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58)
truncate(&(0x7f0000000900)='./file1\x00', 0x9)

13m52.779352146s ago: executing program 0 (id=111):
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e000000040002800800", @ANYRES16], 0x3c}, 0x1, 0x8000a0ffffffff, 0x0, 0x8086}, 0x0)

13m52.463838014s ago: executing program 0 (id=113):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x2200, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fefffffc}, 0x0, 0x0, 0x0, 0x3, 0xffb, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
listns(&(0x7f0000000080)={0x20, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff}, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
connect$netlink(0xffffffffffffffff, &(0x7f00000000c0)=@unspec, 0xc)
r3 = gettid()
setns(0xc9, 0x0)
syz_open_procfs(r3, &(0x7f0000000000)='net/tcp\x00')

13m52.404349665s ago: executing program 32 (id=113):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x2200, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fefffffc}, 0x0, 0x0, 0x0, 0x3, 0xffb, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
listns(&(0x7f0000000080)={0x20, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff}, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
connect$netlink(0xffffffffffffffff, &(0x7f00000000c0)=@unspec, 0xc)
r3 = gettid()
setns(0xc9, 0x0)
syz_open_procfs(r3, &(0x7f0000000000)='net/tcp\x00')

13m38.501822345s ago: executing program 33 (id=106):
r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
write$tcp_mem(r0, &(0x7f0000000200)={0x9}, 0x48)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000000)=<r2=>0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r3, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60)
getsockopt$inet_buf(r3, 0x118, 0x0, 0x0, 0x0)
waitid(0x4, r2, &(0x7f0000000040), 0x80000000, &(0x7f00000001c0))
unshare(0x22020400)
pselect6(0x40, &(0x7f0000000100), &(0x7f0000000180)={0x1f, 0x4, 0xffffffff, 0x7, 0x0, 0x7, 0x1}, 0x0, 0x0, 0x0)

13m20.201106092s ago: executing program 3 (id=194):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0)
syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = gettid()
setns(0xc9, 0x0)
syz_open_procfs(r3, &(0x7f0000000000)='net/tcp\x00')

13m17.650730064s ago: executing program 3 (id=198):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0xffffffff, 0x6, 0x2000000, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
add_key$user(&(0x7f00000001c0), 0x0, &(0x7f0000000100)="d8", 0x1, r0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', 0x0)
r1 = request_key(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, 0x0, r0)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={<r2=>0x0, 0x4, 0x4}, &(0x7f0000000080)=0x8)
r3 = add_key$user(&(0x7f00000001c0), &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000480)="fe", 0x1, 0xfffffffffffffffe)
keyctl$search(0xa, r3, &(0x7f0000000000)='trusted\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0)
keyctl$unlink(0x9, r3, r1)
setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000340)={r2, @in6={{0xa, 0x4e20, 0x6a, @private1={0xfc, 0x1, '\x00', 0x1}, 0x401}}}, 0x84)
mkdir(&(0x7f0000000000)='./mytrace\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./mytrace\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0)
add_key(&(0x7f0000000500)='ceph\x00', 0x0, &(0x7f0000000580)="94567499399ec8e91b371c1235d861e21ce6c907a93a3342cbf0160c4251c9d00a3e4be1cf7283732f1b6069157d7fad8ee46de6d90462d64c5f60c61b255d89294a27be2d3dd73ed64a21d16e2e5bdcc72aba927be0f7f7e9bfd8c77d9f4ec4b70b4c9301352a4d8627f62b7bb84b285af1a1d5fd71c7", 0x77, 0xffffffffffffffff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mytrace/events/xhci-hcd/xhci_address_ctrl_ctx/inject\x00', 0x2, 0x0)
write(r4, 0x0, 0x20)

13m17.485709199s ago: executing program 3 (id=199):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x280080, 0x0)
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{0xc0, 0x10, 0x3, 0xfffffffa}, {0x0, 0x0, 0x7, 0x100}, {0x4, 0xf, 0x5, 0x1}]})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0xae}, @printk={@llu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x20000, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc)
sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r0, @ANYBLOB="06001500070000000c001680080001"], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x44081}, 0x800)
r3 = socket(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0xfff0)

13m17.336202912s ago: executing program 3 (id=200):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil)
perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x1b9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000000c0), 0xfd, 0x461, &(0x7f0000001840)="$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")
r3 = shmget$private(0x0, 0x4000, 0x1a81, &(0x7f0000ffa000/0x4000)=nil)
madvise(&(0x7f00009b0000/0x3000)=nil, 0x3000, 0x65)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
unshare(0x2000400)
r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
shmctl$IPC_RMID(r3, 0x0)

13m14.262984717s ago: executing program 3 (id=204):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x14}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c00000012002103", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x2c}, 0x1, 0x0, 0x0, 0x200000c1}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x1, 0x0, 0x7fff7ffc}]})
r2 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4)
fadvise64(r2, 0x2000000001000, 0xd1a6, 0x1)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond_slave_0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xffff, 0xfff3}, {0x0, 0xfff3}, {0x2, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x88a8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)

13m13.009947008s ago: executing program 3 (id=207):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000000c0), 0xfd, 0x461, &(0x7f0000001840)="$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")
r2 = shmget$private(0x0, 0x4000, 0x1a81, &(0x7f0000ffa000/0x4000)=nil)
madvise(&(0x7f00009b0000/0x3000)=nil, 0x3000, 0x65)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_SIOCOUTQ(r3, 0x5411, 0x0)
unshare(0x2000400)
r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002440)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
shmctl$IPC_RMID(r2, 0x0)

12m57.342720771s ago: executing program 34 (id=207):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000000c0), 0xfd, 0x461, &(0x7f0000001840)="$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")
r2 = shmget$private(0x0, 0x4000, 0x1a81, &(0x7f0000ffa000/0x4000)=nil)
madvise(&(0x7f00009b0000/0x3000)=nil, 0x3000, 0x65)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_SIOCOUTQ(r3, 0x5411, 0x0)
unshare(0x2000400)
r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002440)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
shmctl$IPC_RMID(r2, 0x0)

5.276977755s ago: executing program 5 (id=3490):
socket$nl_route(0x10, 0x3, 0x0)
set_mempolicy(0x8000, 0x0, 0x5)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xe, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b9a18fe00000000b6090800400000007b9af0ff00000000bf8610000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000001500000076000000bf980000000000003d08f0ff0000000085000000b4000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
set_mempolicy(0x2, &(0x7f0000000140)=0x8, 0x7)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180))
socket$kcm(0xf, 0x3, 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040000}, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0xfd, 0x7ffc0001}]})
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r2)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x27}, 0x74)

4.491599564s ago: executing program 5 (id=3494):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x80940, 0xd2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000084c0)=ANY=[@ANYBLOB], 0x40c4}}, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff})
shutdown(r3, 0x2)
mount$9p_fd(0x0, &(0x7f0000000c40)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
readv(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1)
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000003000000000000000000000003000000000000000000000000000002000000000000000000000004"], 0x0, 0x56}, 0x20)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x6, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r5, 0x0, 0x1}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x20000}, 0x0, 0x0, 0x0, 0x6, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="180000003d000b08d25a80648c7494f90324fc600b000240", 0x18}], 0x1}, 0x48)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2)
get_mempolicy(&(0x7f00000000c0), &(0x7f0000000100), 0x1ff, &(0x7f0000ffe000/0x1000)=nil, 0x0)

4.119932712s ago: executing program 5 (id=3496):
r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x2, @perf_config_ext={0x4, 0x60}, 0x10c0e8, 0x1, 0x0, 0x3, 0x209, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$bt_hci(r1, 0x84, 0x80, &(0x7f0000000000)=""/4103, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000012c0))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303136323134372c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c6e6f6e756d7461696c3d302c696f636861727365743d6b6f69382d72752c756e695f786c6174653d302c696f636861727365743d757466382c6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c7379735f696d6d757461626c652c757466383d302c0074c3fc52ac6365d676e1"], 0x1, 0x3c4, &(0x7f0000000a80)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$IP_VS_SO_SET_ZERO(r3, 0x0, 0x48f, 0x0, 0x0)
syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="11010000733336088dee1edb236100"], 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x5c, r5, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @empty}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}, 0x1, 0x620b}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15)

3.657377694s ago: executing program 2 (id=3499):
unshare(0x8040480)
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x400}, 0x364e, 0x0, 0x4, 0x0, 0x1, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0})

3.584842575s ago: executing program 2 (id=3501):
r0 = socket$xdp(0x2c, 0x3, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0xe8180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0x3)
bind$xdp(r0, &(0x7f00000000c0)={0x2c, 0xb9335a9b7ba7e223, 0x0, 0x21}, 0x10)
r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000007b00), 0x0, 0x0)
pwritev(r1, 0x0, 0x0, 0x8, 0xfffffffd)
rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x12)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbb6, &(0x7f00000017c0)="$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")
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
pwritev2(r2, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0xc8000}], 0x1c, 0x0, 0x0, 0x22)

3.096989597s ago: executing program 5 (id=3505):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0xf)
getpeername$packet(r1, &(0x7f0000000040)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="b8000000100001000800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b0000000000900016806c0001800c0003000100000006000100280001"], 0xb8}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'})
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x32, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7c, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x6, 0x20008, 0x0, 0x0, 0x0, 0x0, 0x2000001020000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0)
syz_open_dev$evdev(0x0, 0x2, 0x862b01)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
bind$packet(r4, &(0x7f00000001c0)={0x11, 0xd, r2, 0x1, 0xf9, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0x14)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0xfdef, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x2, 0x5b6}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r5, &(0x7f0000000080)={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10)
r6 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file1\x00', 0x1008490, &(0x7f0000000a40)={[{@bh}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000001500)="$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")
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x39, 0x4, &(0x7f0000001180))
geteuid()
r7 = creat(&(0x7f0000000180)='./file1\x00', 0x1)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003bc0)=ANY=[@ANYBLOB="2c0000001000210041bd700000000000030000001800018014001680100300800c00208008004900e0000001"], 0x2c}}, 0x80)
rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00')
ioctl$FS_IOC_FSSETXATTR(r7, 0x40086602, &(0x7f0000000000)={0x20052f9, 0xfffffff8, 0x100802, 0x2, 0x8})

2.912212621s ago: executing program 6 (id=3507):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000200)=@name={0x1e, 0x2, 0x3, {{0x42, 0x1}}}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$kcm(0x29, 0x0, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000)
r2 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000380)={0xc, 0x8, 0x144, {&(0x7f0000001140)}}, 0x10)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500)={<r3=>0xffffffffffffffff}, 0x13f, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x1, @loopback, 0x100009}, {0xa, 0x4e22, 0xfffffffc, @mcast1}, r3}}, 0x48)
r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0, 0xa}, 0x1022e0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xfff8000000000000, 0xffffffffffffffff, 0x1)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x200000b, 0x8010, 0xffffffffffffffff, 0x0)
dup3(0xffffffffffffffff, r4, 0x80000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17)
syz_open_procfs$namespace(r1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mbind(&(0x7f000000a000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x5, 0x0)
madvise(&(0x7f00001a8000/0x1000)=nil, 0x1000, 0x10)
fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000200)='./file0\x00', 0xffffffffffffffff)
munlockall()
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
socket$tipc(0x1e, 0x5, 0x0)
socket$tipc(0x1e, 0x5, 0x0)

2.833568263s ago: executing program 2 (id=3509):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
getpid()
prlimit64(0x0, 0x4, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xffffffff, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000027c0)={0x20, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000e000000000000000000000001811", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f1ff760000e8be9800000000000056080000010000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x1}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c350000001800030a0200000000000000"], 0x1c}}, 0x8000)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
getrlimit(0x5, 0x0)
r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000024c0)=@newtaction={0x6c, 0x30, 0x58f, 0x0, 0x0, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x0, 0x0, 0x0, 0xfffffffd}, @local, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000)
sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff})
recvmsg$unix(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2082)
mmap(&(0x7f000015c000/0x4000)=nil, 0x4000, 0x1000002, 0x11012, r4, 0x3a0c0000)
syz_clone(0xc30e3400, 0x0, 0x0, 0x0, 0x0, 0x0)

1.871312526s ago: executing program 2 (id=3511):
unshare(0x8040480)
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0})

1.858841756s ago: executing program 6 (id=3512):
syz_read_part_table(0x5c6, &(0x7f0000000bc0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0, 0x0)
ioctl$BLKPG(r0, 0x1269, 0x0)
unshare(0x20000400)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, 0x0}, 0x68)
io_uring_setup(0x766d, &(0x7f0000000040)={0x0, 0x73e9, 0x80, 0x2, 0x2b8})
listns(&(0x7f0000000180)={0x20, 0x0, 0x7b, 0x80, 0x0, 0x6f63}, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0)
io_uring_setup(0x5483, &(0x7f0000000040)={0x0, 0xc6f2, 0x80, 0x2, 0x129, 0x0, r0})
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, r0, 0x1)
openat(r0, &(0x7f0000000500)='./file0\x00', 0x2500, 0x479)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000003c0)={'\x00', 0x7f, 0x1000, 0x8, 0xcc9, 0xfffffffffffffff8, 0xffffffffffffffff})

1.812427217s ago: executing program 2 (id=3513):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
ftruncate(0xffffffffffffffff, 0xf)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_WOL_GET(r4, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002040)={&(0x7f0000000080)={0x2c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004040)
listen(0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000180)={[{@dioread_lock}, {@resgid}, {@mblk_io_submit}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resgid}, {@nobarrier}, {@grpid}, {@jqfmt_vfsv0}]}, 0xfc, 0x58f, &(0x7f0000002d00)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x143042, 0x51)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x60}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a090400000000000000000200000040000480100001800c0001006e6f747261636b002c0001800e000100"], 0x94}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400009b0100010000000000000000000000000a20000000080a01010037a199fb000000020040090900010073797a30006b0000002c00008800050a030000a1386517105e00000000000000020000010900010073797a30000000000900030073797a32000000001400000011000100000000000000"], 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x8084)

1.756846179s ago: executing program 7 (id=3514):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
time(&(0x7f0000000040))
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r4, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24044040)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_int(r5, &(0x7f0000000180)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0)
sendfile(r6, r6, 0x0, 0xf)
r7 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r7, 0x0, 0x0)
getsockopt$inet6_tcp_buf(r7, 0x6, 0x0, &(0x7f0000000ec0)=""/4096, &(0x7f0000001ec0)=0x1000)
syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xb7}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$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")
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a320000000054000000060a010400000000000000000100000008000b40000000002c000480280001800e000100627974656f7264657200000014000280080002400000001008000140000000110900010073797a3000000000146041d480a6a3b10f000000000000000700000a"], 0xc8}}, 0x0)
r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r7)
sendmsg$IPVS_CMD_FLUSH(r7, &(0x7f00000002c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40100004}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x20, r8, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x800)

1.672334801s ago: executing program 7 (id=3515):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000200)=@name={0x1e, 0x2, 0x3, {{0x42, 0x1}}}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$kcm(0x29, 0x0, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000)
r2 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000380)={0xc, 0x8, 0x144, {&(0x7f0000001140)}}, 0x10)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500)={<r3=>0xffffffffffffffff}, 0x13f, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x1, @loopback, 0x100009}, {0xa, 0x4e22, 0xfffffffc, @mcast1}, r3}}, 0x48)
r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0, 0xa}, 0x1022e0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xfff8000000000000, 0xffffffffffffffff, 0x1)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x200000b, 0x8010, 0xffffffffffffffff, 0x0)
dup3(0xffffffffffffffff, r4, 0x80000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17)
syz_open_procfs$namespace(r1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mbind(&(0x7f000000a000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x5, 0x0)
madvise(&(0x7f00001a8000/0x1000)=nil, 0x1000, 0x10)
fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000200)='./file0\x00', 0xffffffffffffffff)
munlockall()
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
bind$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
socket$tipc(0x1e, 0x5, 0x0)

1.651294661s ago: executing program 6 (id=3516):
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1400000002010500c3"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) (fail_nth: 2)

1.646231451s ago: executing program 5 (id=3517):
socket$nl_route(0x10, 0x3, 0x0)
set_mempolicy(0x8000, 0x0, 0x5)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xe, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b9a18fe00000000b6090800400000007b9af0ff00000000bf8610000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000001500000076000000bf980000000000003d08f0ff0000000085000000b4000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
set_mempolicy(0x2, &(0x7f0000000140)=0x8, 0x7)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180))
socket$kcm(0xf, 0x3, 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040000}, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0xfd, 0x7ffc0001}]})
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r2)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x27}, 0x74)

1.332406869s ago: executing program 6 (id=3518):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0x2e, &(0x7f0000000080)={@in={{0xb1e0, 0x0, @multicast2}}, 0x3, 0x0, 0x1a, 0x0, "5ec800000000000000fabcaff49c2eeb8c4614c85b196a0c67a7768e058e3008931c08d43101cb8242bc42b8e0662749302c1ffcd1d1190000000000000000000000000000000000000000000200"}, 0xd8)

1.133021083s ago: executing program 6 (id=3519):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x40000000c000000}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)

1.020641946s ago: executing program 6 (id=3520):
r0 = socket$xdp(0x2c, 0x3, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0xe8180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0x3)
bind$xdp(r0, &(0x7f00000000c0)={0x2c, 0xb9335a9b7ba7e223, 0x0, 0x21}, 0x10)
r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000007b00), 0x0, 0x0)
pwritev(r1, 0x0, 0x0, 0x8, 0xfffffffd)
rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x12)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbb6, &(0x7f00000017c0)="$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")
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
pwritev2(r2, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0xc8000}], 0x1c, 0x0, 0x0, 0x22)

956.404627ms ago: executing program 1 (id=3521):
modify_ldt$write2(0x11, &(0x7f0000000040)={0x651, 0xa000000, 0x3ffe, 0x1}, 0x10)

855.56629ms ago: executing program 1 (id=3522):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000200000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10)

784.319451ms ago: executing program 1 (id=3523):
unshare(0x8040480)
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0})

714.021463ms ago: executing program 1 (id=3524):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
getsockname$netlink(r0, &(0x7f0000000000), &(0x7f0000000040)=0xc)
sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010018"], 0x1c}}, 0x0)

671.702774ms ago: executing program 7 (id=3525):
r0 = socket(0x1f, 0xa, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f5ffffff00000000000000008500000036000000940000005000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)
r2 = gettid()
syz_open_procfs(r2, &(0x7f0000000040)='timerslack_ns\x00')
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0xe, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x105, 0x7ffffffffffffffe}, 0x10eccc, 0x1224, 0xfd, 0x2, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x200000102ffffffd}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x20, 0xf, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x67a021c03d2005e9, 0xa, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x0)
r5 = openat(r4, &(0x7f0000000280)='.\x00', 0x2000, 0x0)
open_by_handle_at(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="08000000020001"], 0x30002)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.events\x00', 0x26e1, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000001010101000000000000000002001c002000018006000340000000001400018008c301007f000001080002007f0000010c00198008000100", @ANYRES32=r6], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000702000000b0fffebc26100000000000bf6720000000000016020000000000016702000020000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48)
r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0)
ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r6, 0x5386, &(0x7f00000002c0))
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r9)
sendmsg$NL802154_CMD_SET_LBT_MODE(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYBLOB="11e5c56392b5e496001d7ae0d2a6460a9a2114831378f12186b92f7ce727bfd61e495898918f23c4053936844c746bacf5702db6df968f19a933aa90938e36708e002b01881fa915304722e0aab8a493a9abc9485e0b10b8b7c8b20ae39ae8c9d458132d171fe9b26bfb3e31b8c4ac0338ca4b0c46bce7036f4c2b33d7957cba130a8b37b1e996bd2f59aa98f0bdbd769c7a90d3c7221b9fe73718f18aa45508161e78cba8a0d1b21b1058a3b98ba9be0b7a0514e5e9f0416ee301bb74", @ANYBLOB="15042bbd7000ffdbdf2512000000050013000100000005001300000000000c00060001"], 0x48}, 0x1, 0x0, 0x0, 0x40864}, 0x4000)
r10 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', <r11=>0x0})
r12 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
r13 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r13, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r11, {0x0, 0xd}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x24, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x81}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40005}, 0x8010)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={<r14=>0x0}, &(0x7f0000000140)=0xc)
write$cgroup_pid(r8, &(0x7f0000000280)=r14, 0x12)

607.427175ms ago: executing program 1 (id=3526):
syz_read_part_table(0x5c6, &(0x7f0000000bc0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0, 0x0)
ioctl$BLKPG(r0, 0x1269, 0x0)
unshare(0x20000400)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, 0x0}, 0x68)
io_uring_setup(0x766d, &(0x7f0000000040)={0x0, 0x73e9, 0x80, 0x2, 0x2b8})
listns(&(0x7f0000000180)={0x20, 0x0, 0x7b, 0x80, 0x0, 0x6f63}, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0)
io_uring_setup(0x5483, &(0x7f0000000040)={0x0, 0xc6f2, 0x80, 0x2, 0x129, 0x0, r0})
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, r0, 0x1)
openat(r0, &(0x7f0000000500)='./file0\x00', 0x2500, 0x479)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000003c0)={'\x00', 0x7f, 0x1000, 0x8, 0xcc9, 0xfffffffffffffff8, 0xffffffffffffffff})

368.346391ms ago: executing program 7 (id=3527):
sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c0000000406070400000000000000000500000305000100070100000500010007000e6f0500010007000000050001000700000005000100070000000900020073797a32000000000900020073797a31000000000500010007000000"], 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0xc0)

356.277952ms ago: executing program 5 (id=3528):
syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]})
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/cgroup.procs\x00', 0x2, 0x128)
io_setup(0x9, &(0x7f0000001d00))
getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000280), &(0x7f0000000300)=0x4)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0)
connect$inet6(r0, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0)
bind$netlink(0xffffffffffffffff, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r2 = socket$kcm(0x10, 0x2, 0x0)
r3 = io_uring_setup(0xc01, &(0x7f0000000000)={0x0, 0xc08f, 0x40, 0x4, 0x318})
io_uring_register$IORING_UNREGISTER_PBUF_RING(r3, 0x17, 0x0, 0x1)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x40008840}, 0x0)
sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7ff, 0x80000000000000}, 0x106200, 0x10004, 0x30da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_SET(r4, &(0x7f0000000680)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)={0x180, r5, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x97b}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6}}]}, 0x180}, 0x1, 0x0, 0x0, 0x20000845}, 0x890)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x1}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$unix(0x1, 0x5, 0x0)
socket$unix(0x1, 0x5, 0x0)
openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10)

343.251092ms ago: executing program 1 (id=3529):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
accept$packet(r0, 0x0, 0x0) (fail_nth: 4)

268.394393ms ago: executing program 7 (id=3530):
unshare(0x8040480)
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x400}, 0x364e, 0x0, 0x4, 0x0, 0x1, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
unshare(0x22020600)
close(0x3)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x145042, 0x52)
open(&(0x7f0000000200)='./file1\x00', 0x2fe, 0x20)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00004c2000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000150000/0x1000)=nil, &(0x7f0000b21000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00004c2000/0x1000)=nil, &(0x7f000069c000/0x2000)=nil, &(0x7f0000184000/0x2000)=nil, &(0x7f0000b1e000/0x4000)=nil, 0x0}, 0x68)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0})

97.742848ms ago: executing program 2 (id=3531):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x80940, 0xd2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000084c0)=ANY=[@ANYBLOB], 0x40c4}}, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff})
shutdown(r3, 0x2)
mount$9p_fd(0x0, &(0x7f0000000c40)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
readv(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1)
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000003000000000000000000000003000000000000000000000000000002000000000000000000000004"], 0x0, 0x56}, 0x20)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x6, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r5, 0x0, 0x1}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x20000}, 0x0, 0x0, 0x0, 0x6, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="180000003d000b08d25a80648c7494f90324fc600b000240", 0x18}], 0x1}, 0x48)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, 0x0, 0x0)
get_mempolicy(&(0x7f00000000c0), &(0x7f0000000100), 0x1ff, &(0x7f0000ffe000/0x1000)=nil, 0x0)

0s ago: executing program 7 (id=3532):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
sched_rr_get_interval(r1, &(0x7f0000000000))
ptrace(0x10, r0)
r2 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4)
listen(r2, 0xa)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000ac0), r3)
sendmsg$NFC_CMD_LLC_SDREQ(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000b40)={0x14, r4, 0x1, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4b1c9bd21c86d913}, 0x4000)
ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={&(0x7f0000000240)=""/16, 0x10})

kernel console output (not intermixed with test programs):

s too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  837.164179][T16117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  837.204627][T16117] hsr_slave_0: entered promiscuous mode
[  837.211334][T16117] hsr_slave_1: entered promiscuous mode
[  837.223948][T16117] debugfs: 'hsr0' already exists in 'hsr'
[  837.243877][T16117] Cannot create hsr debugfs directory
[  837.298495][T16150] loop7: detected capacity change from 0 to 512
[  837.306526][T16150] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  837.337235][T16150] s
z1: rxe_newlink: already configured on lo
[  837.345636][T16117] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  837.345855][T16150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  837.364807][T16150] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  837.385458][T16150] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548)
[  837.393829][T16150] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548)
[  837.403433][T16150] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548)
[  837.412068][T16150] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548)
[  837.420447][T16117] bond0: (slave netdevsim2): Releasing backup interface
[  837.420894][T16150] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548)
[  837.435834][T16150] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548)
[  837.444472][T16150] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548)
[  837.452911][T16150] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548)
[  837.457075][T16117] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  837.461754][T16150] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548)
[  837.479828][T16150] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548)
[  837.488348][T16150] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548)
[  837.496803][T16150] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548)
[  837.505763][T16150] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548)
[  837.515844][T16150] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548)
[  837.525086][T16150] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 548)
[  837.527530][T16154] loop1: detected capacity change from 0 to 512
[  837.534212][T16150] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548)
[  837.541790][T16154] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  837.605048][T16117] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  837.651768][T16154] rdma_rxe: rxe_newlink: failed to add lo
[  837.663366][T16154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  837.672307][T16154] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  837.692588][T16154] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[  837.701189][T16154] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[  837.709674][T16154] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[  837.718046][T16154] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[  837.727106][T16154] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[  837.735641][T16154] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[  837.744195][T16158] loop2: detected capacity change from 0 to 512
[  837.744290][T16154] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[  837.752026][T16158] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  837.758982][T16154] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[  837.779042][T16154] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[  837.787532][T16154] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[  837.796193][T16154] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[  837.804862][T16154] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[  837.813467][T16154] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[  837.821821][T16154] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[  837.830226][T16154] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 548)
[  837.839221][T16154] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[  837.943323][T16162] lo speed is unknown, defaulting to 1000
[  838.079631][T16158] rdma_rxe: rxe_newlink: failed to add lo
[  838.097317][T16158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  838.106613][T16158] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  838.158343][T16158] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548)
[  838.167182][T16158] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548)
[  838.176561][T16158] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548)
[  838.186318][T16158] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548)
[  838.195658][T16158] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548)
[  838.204895][T16158] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548)
[  838.213694][T16158] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548)
[  838.222378][T16158] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548)
[  838.231025][T16158] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548)
[  838.239466][T16158] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548)
[  838.247854][T16158] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548)
[  838.256620][T16158] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548)
[  838.265238][T16158] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548)
[  838.273839][T16158] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548)
[  838.274508][T16117] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  838.282309][T16158] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 548)
[  838.301412][T16158] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548)
[  838.394774][T16117] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  838.403296][T16117] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  838.411094][T16117] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  838.419824][T16117] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  838.427345][T16117] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  838.435744][T16117] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  838.443946][T16117] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  838.457761][T16117] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  838.499473][T16168] loop7: detected capacity change from 0 to 512
[  838.507515][T16168] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  838.528832][T16168] s
z1: rxe_newlink: already configured on lo
[  838.537749][T16168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  838.546436][T16168] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  838.559777][T16168] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548)
[  838.568311][T16168] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548)
[  838.576913][T16168] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548)
[  838.585353][T16168] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548)
[  838.593919][T16168] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548)
[  838.602302][T16168] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548)
[  838.610740][T16168] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548)
[  838.619360][T16168] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548)
[  838.627849][T16168] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548)
[  838.636563][T16168] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548)
[  838.645200][T16168] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548)
[  838.653899][T16168] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548)
[  838.655813][T16117] 8021q: adding VLAN 0 to HW filter on device bond0
[  838.662553][T16168] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548)
[  838.677275][T16168] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548)
[  838.686084][T16168] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 548)
[  838.695249][T16168] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548)
[  838.706876][T16117] 8021q: adding VLAN 0 to HW filter on device team0
[  838.725290][  T313] bridge0: port 1(bridge_slave_0) entered blocking state
[  838.732482][  T313] bridge0: port 1(bridge_slave_0) entered forwarding state
[  838.742353][  T313] bridge0: port 2(bridge_slave_1) entered blocking state
[  838.749465][  T313] bridge0: port 2(bridge_slave_1) entered forwarding state
[  838.868421][T16117] 8021q: adding VLAN 0 to HW filter on device batadv0
[  838.898973][T16190] loop2: detected capacity change from 0 to 164
[  838.917300][T16190] iso9660: Unknown parameter 'ÿÿ'
[  839.074728][T16117] veth0_vlan: entered promiscuous mode
[  839.086349][T16117] veth1_vlan: entered promiscuous mode
[  839.104372][T16117] veth0_macvtap: entered promiscuous mode
[  839.112687][T16117] veth1_macvtap: entered promiscuous mode
[  839.125003][T16117] batman_adv: batadv0: Interface activated: batadv_slave_0
[  839.152165][T16117] batman_adv: batadv0: Interface activated: batadv_slave_1
[  839.161405][T16205] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3245'.
[  839.212894][ T9724] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  839.227819][ T9724] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  839.238622][ T9724] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  839.247729][ T9724] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  839.302406][T16204] lo speed is unknown, defaulting to 1000
[  839.408811][T16211] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16211 comm=syz.7.3246
[  839.487525][T16208] EXT4-fs error (device loop6): ext4_get_branch:178: inode #11: block 4294967295: comm syz.6.3233: invalid block
[  839.500686][T16208] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  839.509173][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  839.524791][    C1] EXT4-fs (loop6): initial error at time 1785570082: ext4_get_branch:178: inode 11: block 4294967295
[  839.535697][    C1] EXT4-fs (loop6): last error at time 1785570082: ext4_get_branch:178: inode 11: block 4294967295
[  839.547374][T16208] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.3233: invalid indirect mapped block 4294967295 (level 1)
[  839.580821][T16218] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  839.604728][T16218] s
z1: rxe_newlink: already configured on lo
[  839.611976][T16208] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  839.612509][T16208] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.3233: invalid indirect mapped block 4294967295 (level 1)
[  839.641455][T16218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  839.650312][T16218] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  839.702137][T16208] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  839.703463][T16208] EXT4-fs (loop6): 2 truncates cleaned up
[  839.741381][T16218] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548)
[  839.750268][T16218] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548)
[  839.759758][T16218] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548)
[  839.768449][T16218] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548)
[  839.778020][T16218] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548)
[  839.786942][T16218] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548)
[  839.796194][T16218] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548)
[  839.805988][T16218] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548)
[  839.815564][T16218] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548)
[  839.824660][T16218] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548)
[  839.833752][T16218] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548)
[  839.842433][T16218] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548)
[  839.851849][T16218] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548)
[  839.860687][T16218] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548)
[  839.869479][T16218] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 548)
[  839.878631][T16218] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548)
[  840.014818][T16208] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  840.054697][T16208] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  840.098854][   T28] kauditd_printk_skb: 312 callbacks suppressed
[  840.098869][   T28] audit: type=1326 audit(1785570083.539:15466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16189 comm="syz.2.3245" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe5662de019 code=0x7ffc0000
[  840.146335][T16224] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16224 comm=syz.1.3249
[  840.169955][   T28] audit: type=1326 audit(1785570083.609:15467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16189 comm="syz.2.3245" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe5662de019 code=0x7ffc0000
[  840.232778][T16224] set_capacity_and_notify: 2 callbacks suppressed
[  840.232800][T16224] loop1: detected capacity change from 0 to 512
[  840.265998][T16224] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.3249: invalid indirect mapped block 4294967295 (level 1)
[  840.300152][T16229] loop6: detected capacity change from 0 to 512
[  840.307655][T16229] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  840.338018][T16229] rdma_rxe: rxe_newlink: failed to add lo
[  840.346661][T16229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  840.355548][T16229] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  840.374226][T16224] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  840.374782][T16224] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.3249: invalid indirect mapped block 4294967295 (level 1)
[  840.384241][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  840.384333][    C0] EXT4-fs (loop1): initial error at time 1785570083: ext4_free_branches:1023: inode 11
[  840.384442][    C0] EXT4-fs (loop1): last error at time 1785570083: ext4_free_branches:1023: inode 11
[  840.428961][T16224] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  840.439994][T16231] loop5: detected capacity change from 0 to 512
[  840.456944][T16231] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  840.467467][T16190] Set syz1 is full, maxelem 65536 reached
[  840.475394][T16224] EXT4-fs (loop1): 2 truncates cleaned up
[  840.491703][T16231] rdma_rxe: rxe_newlink: failed to add lo
[  840.506606][T16231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  840.516646][T16231] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  840.528643][T16224] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  840.554538][T16231] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548)
[  840.563104][T16231] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548)
[  840.570792][T16224] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  840.571816][T16231] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548)
[  840.588652][T16233] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3253'.
[  840.597999][T16231] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548)
[  840.607211][T16231] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548)
[  840.610402][T16235] loop2: detected capacity change from 0 to 512
[  840.615729][T16231] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548)
[  840.623078][T16235] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  840.630421][T16231] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548)
[  840.650545][T16231] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548)
[  840.659259][T16231] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548)
[  840.660040][T16238] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3253'.
[  840.667847][T16231] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548)
[  840.685572][T16231] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548)
[  840.694240][T16231] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548)
[  840.703022][T16231] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548)
[  840.706678][T16235] rdma_rxe: rxe_newlink: failed to add lo
[  840.711674][T16231] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548)
[  840.725625][T16231] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 548)
[  840.733497][T16235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  840.734621][T16231] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548)
[  840.743154][T16235] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  840.820334][T16240] loop1: detected capacity change from 0 to 512
[  840.827740][T16240] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  840.847860][T16240] rdma_rxe: rxe_newlink: failed to add lo
[  840.855521][T16240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  840.864492][T16240] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  840.875789][T16240] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[  840.884340][T16240] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[  840.892896][T16240] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[  840.901351][T16240] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[  840.909983][T16240] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[  840.918398][T16240] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[  840.927188][T16240] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[  840.935855][T16240] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[  840.944717][T16240] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[  840.953105][T16240] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[  840.961640][T16240] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[  840.970030][T16240] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[  840.978548][T16240] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[  840.987016][T16240] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[  840.995421][T16240] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 548)
[  841.005111][T16240] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[  841.285033][T16246] loop6: detected capacity change from 0 to 1024
[  841.297094][T16246] EXT4-fs: Ignoring removed mblk_io_submit option
[  841.332053][T16246] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  841.370910][T16246] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3256'.
[  841.380202][T16246] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3256'.
[  841.399395][   T28] audit: type=1400 audit(1785570084.799:15468): avc:  denied  { write } for  pid=16241 comm="syz.6.3256" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  842.099112][   T28] audit: type=1400 audit(1785570085.539:15469): avc:  denied  { create } for  pid=16261 comm="syz.7.3262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  842.128924][T16262] syz_tun: entered allmulticast mode
[  842.196991][T16252] loop5: detected capacity change from 0 to 512
[  842.213979][   T28] audit: type=1400 audit(1785570085.569:15470): avc:  denied  { create } for  pid=16261 comm="syz.7.3262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  842.244206][T16264] Invalid ELF header magic: != ELF
[  842.288240][T16264] xt_hashlimit: size too large, truncated to 1048576
[  842.306366][T16252] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3258: invalid indirect mapped block 4294967295 (level 1)
[  842.323499][T16260] loop1: detected capacity change from 0 to 512
[  842.342734][   T28] audit: type=1400 audit(1785570085.569:15471): avc:  denied  { setopt } for  pid=16261 comm="syz.7.3262" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  842.399307][T16252] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  842.401764][T16252] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3258: invalid indirect mapped block 4294967295 (level 1)
[  842.411173][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  842.411212][    C1] EXT4-fs (loop5): initial error at time 1785570085: ext4_free_branches:1023: inode 11
[  842.411332][    C1] EXT4-fs (loop5): last error at time 1785570085: ext4_free_branches:1023: inode 11
[  842.458389][T16260] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.3261: invalid indirect mapped block 4294967295 (level 1)
[  842.498413][   T28] audit: type=1400 audit(1785570085.689:15472): avc:  denied  { module_load } for  pid=16263 comm="syz.7.3263" path="/sys/kernel/notes" dev="sysfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1
[  842.537453][T16260] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  842.540450][T16260] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.3261: invalid indirect mapped block 4294967295 (level 1)
[  842.549798][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  842.549919][    C1] EXT4-fs (loop1): initial error at time 1785570085: ext4_free_branches:1023: inode 11
[  842.550009][    C1] EXT4-fs (loop1): last error at time 1785570085: ext4_free_branches:1023: inode 11
[  842.625808][   T28] audit: type=1400 audit(1785570085.729:15473): avc:  denied  { ioctl } for  pid=16263 comm="syz.7.3263" path="socket:[52633]" dev="sockfs" ino=52633 ioctlcmd=0xf511 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  842.677944][T16252] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  842.681038][T16252] EXT4-fs (loop5): 2 truncates cleaned up
[  842.701426][T16260] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  842.701823][   T28] audit: type=1400 audit(1785570086.049:15474): avc:  denied  { accept } for  pid=16263 comm="syz.7.3263" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  842.732213][T16117] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  842.734771][T16252] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  842.756276][T16260] EXT4-fs (loop1): 2 truncates cleaned up
[  842.766589][T16260] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  842.781650][T16252] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  842.801075][T16260] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  842.813353][T16271] loop6: detected capacity change from 0 to 512
[  842.847514][T16271] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  842.974981][T16275] loop5: detected capacity change from 0 to 164
[  842.982884][T16271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  843.012258][T16271] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  843.022513][T16275] iso9660: Unknown parameter 'ÿÿ'
[  843.035566][T16277] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  843.075651][T16281] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3268'.
[  843.100572][T16277] s
z1: rxe_newlink: already configured on lo
[  843.108740][   T28] audit: type=1326 audit(1785570086.549:15475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16274 comm="syz.5.3265" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ad4d6e019 code=0x7ffc0000
[  843.139591][T16283] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3268'.
[  843.145757][T16282] lo speed is unknown, defaulting to 1000
[  843.177845][T16277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  843.206967][T16277] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  843.259830][T16277] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548)
[  843.276893][T16277] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548)
[  843.331642][T16286] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3265'.
[  843.343501][T16277] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548)
[  843.373943][T16277] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548)
[  843.396094][T16277] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548)
[  843.418422][T16277] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548)
[  843.452298][T16277] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548)
[  843.493417][T16277] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548)
[  843.526701][T16277] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548)
[  843.549596][T16277] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548)
[  843.572165][T16277] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548)
[  843.592100][T16277] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548)
[  843.612573][T16277] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548)
[  843.633043][T16277] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548)
[  843.658016][T16277] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 548)
[  843.680731][T16277] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548)
[  843.826845][T16294] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  843.851315][T16294] rdma_rxe: rxe_newlink: failed to add lo
[  843.859939][T16294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  843.868613][T16294] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  843.894491][T16294] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548)
[  843.903094][T16294] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548)
[  843.911924][T16294] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548)
[  843.920411][T16294] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548)
[  843.929009][T16294] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548)
[  843.937744][T16294] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548)
[  843.946298][T16294] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548)
[  843.954801][T16294] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548)
[  843.963402][T16294] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548)
[  843.971917][T16294] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548)
[  843.980817][T16294] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548)
[  843.989534][T16294] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548)
[  843.998151][T16294] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548)
[  844.006654][T16294] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548)
[  844.015106][T16294] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 548)
[  844.024135][T16294] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548)
[  844.257587][T16308] FAULT_INJECTION: forcing a failure.
[  844.257587][T16308] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  844.282492][T16308] CPU: 0 UID: 0 PID: 16308 Comm: syz.1.3271 Not tainted syzkaller #0 PREEMPT(lazy) 
[  844.282568][T16308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  844.282587][T16308] Call Trace:
[  844.282595][T16308]  <TASK>
[  844.282604][T16308]  __dump_stack+0x1d/0x30
[  844.282629][T16308]  dump_stack_lvl+0x95/0xd0
[  844.282649][T16308]  dump_stack+0x15/0x1b
[  844.282728][T16308]  should_fail_ex+0x25e/0x270
[  844.282827][T16308]  should_fail+0xb/0x20
[  844.282848][T16308]  should_fail_usercopy+0x1a/0x20
[  844.282915][T16308]  _copy_from_user+0x1c/0xb0
[  844.282939][T16308]  copy_from_sockptr+0x5e/0x90
[  844.282963][T16308]  packet_setsockopt+0x5d2/0xfd0
[  844.282980][T16308]  ? __pfx_packet_setsockopt+0x10/0x10
[  844.282997][T16308]  __sys_setsockopt+0x184/0x200
[  844.283026][T16308]  __x64_sys_setsockopt+0x64/0x80
[  844.283054][T16308]  x64_sys_call+0x2327/0x3020
[  844.283074][T16308]  do_syscall_64+0x136/0x3c0
[  844.283094][T16308]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  844.283110][T16308] RIP: 0033:0x7f48c616e019
[  844.283130][T16308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  844.283227][T16308] RSP: 002b:00007f48c4bc7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  844.283248][T16308] RAX: ffffffffffffffda RBX: 00007f48c63f5fa0 RCX: 00007f48c616e019
[  844.283263][T16308] RDX: 0000000000000017 RSI: 0000000000000107 RDI: 0000000000000003
[  844.283358][T16308] RBP: 00007f48c4bc7090 R08: 0000000000000004 R09: 0000000000000000
[  844.283372][T16308] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001
[  844.283458][T16308] R13: 00007f48c63f6038 R14: 00007f48c63f5fa0 R15: 00007fffb45c50b8
[  844.283473][T16308]  </TASK>
[  844.536147][T16275] Set syz1 is full, maxelem 65536 reached
[  844.586941][T16317] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3274'.
[  844.721958][T16324] IPv6: NLM_F_CREATE should be specified when creating new route
[  844.771095][T16324] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3278'.
[  844.824619][T16322] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3277: invalid indirect mapped block 4294967295 (level 1)
[  844.915322][T16337] lo speed is unknown, defaulting to 1000
[  844.958194][T16322] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  844.959164][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  844.974753][    C1] EXT4-fs (loop5): initial error at time 1785570088: ext4_free_branches:1023: inode 11
[  844.984413][    C1] EXT4-fs (loop5): last error at time 1785570088: ext4_free_branches:1023: inode 11
[  844.995880][T16322] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3277: invalid indirect mapped block 4294967295 (level 1)
[  845.030734][T16322] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  845.042250][T16329] lo speed is unknown, defaulting to 1000
[  845.081735][T16322] EXT4-fs (loop5): 2 truncates cleaned up
[  845.117100][T16322] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  845.161783][T16322] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  845.203536][T16339] lo speed is unknown, defaulting to 1000
[  845.318355][   T28] kauditd_printk_skb: 232 callbacks suppressed
[  845.318366][   T28] audit: type=1400 audit(1785570088.759:15708): avc:  denied  { ioctl } for  pid=16341 comm="syz.5.3281" path="socket:[52095]" dev="sockfs" ino=52095 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  845.459379][T16345] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3282'.
[  845.526847][T16347] set_capacity_and_notify: 3 callbacks suppressed
[  845.526872][T16347] loop7: detected capacity change from 0 to 512
[  845.541497][T16347] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  845.572303][   T28] audit: type=1400 audit(1785570089.019:15709): avc:  denied  { create } for  pid=16346 comm="syz.7.3283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  845.572471][T16347] s
z1: rxe_newlink: already configured on lo
[  845.683222][   T28] audit: type=1400 audit(1785570089.019:15710): avc:  denied  { write } for  pid=16346 comm="syz.7.3283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  845.694874][T16347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  845.712366][T16347] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  845.800331][   T28] audit: type=1400 audit(1785570089.249:15711): avc:  denied  { bind } for  pid=16353 comm="syz.2.3286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  845.845000][   T28] audit: type=1400 audit(1785570089.269:15712): avc:  denied  { read write } for  pid=16353 comm="syz.2.3286" name="rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  845.900651][   T28] audit: type=1400 audit(1785570089.269:15713): avc:  denied  { open } for  pid=16353 comm="syz.2.3286" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  846.132671][   T28] audit: type=1400 audit(1785570089.579:15714): avc:  denied  { create } for  pid=16358 comm="syz.2.3289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1
[  846.297849][   T28] audit: type=1400 audit(1785570089.739:15715): avc:  denied  { ioctl } for  pid=16363 comm="syz.6.3290" path="socket:[52792]" dev="sockfs" ino=52792 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  846.326739][T16361] loop2: detected capacity change from 0 to 4096
[  846.365349][   T28] audit: type=1326 audit(1785570089.799:15716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16363 comm="syz.6.3290" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0e27e019 code=0x7ffc0000
[  846.367758][T16374] netlink: 'syz.7.3293': attribute type 15 has an invalid length.
[  846.423690][T16361] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  846.437665][   T28] audit: type=1326 audit(1785570089.799:15717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16363 comm="syz.6.3290" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f7c0e27e019 code=0x7ffc0000
[  846.603236][T16372] loop1: detected capacity change from 0 to 512
[  846.646245][T16372] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.3292: invalid block
[  846.658971][T16372] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  846.659181][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  846.675170][    C0] EXT4-fs (loop1): initial error at time 1785570090: ext4_get_branch:178: inode 11: block 4294967295
[  846.686201][    C0] EXT4-fs (loop1): last error at time 1785570090: ext4_get_branch:178: inode 11: block 4294967295
[  846.698445][T16372] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.3292: invalid indirect mapped block 4294967295 (level 1)
[  846.713154][T16372] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  846.713960][T16372] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.3292: invalid indirect mapped block 4294967295 (level 1)
[  846.742019][T16372] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  846.744031][T16372] EXT4-fs (loop1): 2 truncates cleaned up
[  846.768352][T16372] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  846.788521][T16372] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  846.878359][T16387] loop6: detected capacity change from 0 to 1024
[  846.885704][T16387] EXT4-fs: Ignoring removed mblk_io_submit option
[  846.948065][T16387] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  847.440871][T16400] netlink: 'syz.7.3297': attribute type 10 has an invalid length.
[  847.497490][T16400] team0: Port device dummy0 added
[  847.647294][T16390] __nla_validate_parse: 1 callbacks suppressed
[  847.647309][T16390] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3295'.
[  847.662509][T16390] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3295'.
[  847.856908][T14945] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  848.269020][T16411] loop5: detected capacity change from 0 to 1024
[  848.276649][T16411] EXT4-fs: Ignoring removed mblk_io_submit option
[  848.308454][T16411] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  848.951279][T16117] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  849.077486][T16433] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3305'.
[  849.195223][T16429] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3305'.
[  849.559029][T16439] loop6: detected capacity change from 0 to 1024
[  849.566725][T16439] EXT4-fs: Ignoring removed mblk_io_submit option
[  849.592932][T16439] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  849.611940][T16400] syz.7.3297 (16400) used greatest stack depth: 9216 bytes left
[  850.054870][T15192] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  850.195119][T16447] lo speed is unknown, defaulting to 1000
[  851.022532][T16455] FAULT_INJECTION: forcing a failure.
[  851.022532][T16455] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  851.088595][T16455] CPU: 1 UID: 0 PID: 16455 Comm: syz.2.3311 Not tainted syzkaller #0 PREEMPT(lazy) 
[  851.088621][T16455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  851.088632][T16455] Call Trace:
[  851.088649][T16455]  <TASK>
[  851.088657][T16455]  __dump_stack+0x1d/0x30
[  851.088677][T16455]  dump_stack_lvl+0x95/0xd0
[  851.088734][T16455]  dump_stack+0x15/0x1b
[  851.088749][T16455]  should_fail_ex+0x25e/0x270
[  851.088771][T16455]  should_fail+0xb/0x20
[  851.088789][T16455]  should_fail_usercopy+0x1a/0x20
[  851.088871][T16455]  _copy_to_user+0x20/0xa0
[  851.088887][T16455]  simple_read_from_buffer+0xb5/0x130
[  851.088958][T16455]  proc_fail_nth_read+0x10e/0x150
[  851.088991][T16455]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  851.089008][T16455]  vfs_read+0x18e/0x7c0
[  851.089029][T16455]  ? __rcu_read_unlock+0x4e/0x70
[  851.089097][T16455]  ? __fget_files+0x184/0x1c0
[  851.089116][T16455]  ? mutex_lock+0x57/0x90
[  851.089140][T16455]  ksys_read+0xdc/0x1a0
[  851.089155][T16455]  __x64_sys_read+0x40/0x50
[  851.089232][T16455]  x64_sys_call+0x2886/0x3020
[  851.089251][T16455]  do_syscall_64+0x136/0x3c0
[  851.089276][T16455]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  851.089296][T16455] RIP: 0033:0x7fe56629e84e
[  851.089337][T16455] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  851.089427][T16455] RSP: 002b:00007fe564d36fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  851.089447][T16455] RAX: ffffffffffffffda RBX: 00007fe564d376c0 RCX: 00007fe56629e84e
[  851.089459][T16455] RDX: 000000000000000f RSI: 00007fe564d370a0 RDI: 0000000000000004
[  851.089470][T16455] RBP: 00007fe564d37090 R08: 0000000000000000 R09: 0000000000000000
[  851.089480][T16455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  851.089514][T16455] R13: 00007fe566566038 R14: 00007fe566565fa0 R15: 00007ffdf11bbf08
[  851.089533][T16455]  </TASK>
[  851.303154][T16464] loop1: detected capacity change from 0 to 512
[  851.311105][T16464] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  851.337648][T16117] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  851.341104][T16464] rdma_rxe: rxe_newlink: failed to add lo
[  851.382301][   T28] kauditd_printk_skb: 14 callbacks suppressed
[  851.382346][   T28] audit: type=1400 audit(1785570094.829:15732): avc:  denied  { read } for  pid=16467 comm="syz.2.3317" path="socket:[53253]" dev="sockfs" ino=53253 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  851.690671][T16474] loop5: detected capacity change from 0 to 1024
[  851.702782][T16474] EXT4-fs: Ignoring removed mblk_io_submit option
[  851.754334][T16472] loop6: detected capacity change from 0 to 164
[  851.792792][T16477] veth1_macvtap: left promiscuous mode
[  851.812825][   T28] audit: type=1400 audit(1785570095.239:15733): avc:  denied  { create } for  pid=16475 comm="syz.2.3318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  851.898691][T16474] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  851.927307][T16474] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3316'.
[  851.937927][T16474] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3316'.
[  851.989102][T16450] lo speed is unknown, defaulting to 1000
[  852.048631][T16472] iso9660: Unknown parameter 'ÿÿ'
[  852.079592][   T28] audit: type=1400 audit(1785570095.359:15734): avc:  denied  { write } for  pid=16465 comm="syz.5.3316" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  852.220172][   T28] audit: type=1326 audit(1785570095.659:15735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16471 comm="syz.6.3314" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0e27e019 code=0x7ffc0000
[  852.822300][   T28] audit: type=1326 audit(1785570095.669:15736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16471 comm="syz.6.3314" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0e27e019 code=0x7ffc0000
[  852.848138][   T28] audit: type=1326 audit(1785570095.699:15737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16471 comm="syz.6.3314" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f7c0e27e019 code=0x7ffc0000
[  852.896789][T16491] loop1: detected capacity change from 0 to 512
[  852.945835][   T28] audit: type=1326 audit(1785570095.699:15738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16471 comm="syz.6.3314" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0e27e019 code=0x7ffc0000
[  853.050690][T16496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  853.061209][T16491] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  853.088061][T16496] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  853.102030][T16491] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  853.141659][   T28] audit: type=1326 audit(1785570095.699:15739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16471 comm="syz.6.3314" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0e27e019 code=0x7ffc0000
[  853.212045][T15870] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  853.225170][T15192] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  853.229755][   T28] audit: type=1326 audit(1785570095.699:15740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16471 comm="syz.6.3314" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f7c0e27e019 code=0x7ffc0000
[  853.260228][   T28] audit: type=1326 audit(1785570095.709:15741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16471 comm="syz.6.3314" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0e27e019 code=0x7ffc0000
[  853.353640][T16506] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3325'.
[  853.366980][T16486] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3314'.
[  853.367300][T16505] loop5: detected capacity change from 0 to 1024
[  853.397250][T16505] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  853.425206][T16501] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3325'.
[  853.533545][T16505] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #3: block 1: comm syz.5.3326: lblock 1 mapped to illegal pblock 1 (length 1)
[  853.547614][T16505] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  853.547819][T16505] EXT4-fs error (device loop5): ext4_acquire_dquot:7041: comm syz.5.3326: Failed to acquire dquot type 0
[  853.556886][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  853.556907][    C0] EXT4-fs (loop5): initial error at time 1785570096: ext4_map_blocks:833: inode 3: block 1
[  853.556946][    C0] EXT4-fs (loop5): last error at time 1785570096: ext4_map_blocks:833: inode 3: block 1
[  853.757162][T16513] loop1: detected capacity change from 0 to 1024
[  853.767511][T16513] EXT4-fs: Ignoring removed mblk_io_submit option
[  853.784571][T16505] loop5: lost filesystem error report for type 5 error -117
[  853.827141][T16505] EXT4-fs error (device loop5): ext4_free_blocks:6718: comm syz.5.3326: Freeing blocks not in datazone - block = 0, count = 4096
[  853.897596][T16513] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  854.031331][T16505] loop5: lost filesystem error report for type 5 error -117
[  854.031864][T16505] EXT4-fs error (device loop5): ext4_read_inode_bitmap:141: comm syz.5.3326: Invalid inode bitmap blk 0 in block_group 0
[  854.116139][T16517] loop2: detected capacity change from 0 to 512
[  854.154028][T16505] loop5: lost filesystem error report for type 5 error -117
[  854.154407][T16505] EXT4-fs error (device loop5) in ext4_free_inode:363: Corrupt filesystem
[  854.191092][T16517] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  854.427945][T16505] loop5: lost filesystem error report for type 5 error -117
[  854.428732][T16505] EXT4-fs (loop5): 1 orphan inode deleted
[  854.490952][T16517] rdma_rxe: rxe_newlink: failed to add lo
[  854.528302][T16505] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  854.547635][ T9724] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1)
[  854.566202][T16517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  854.604416][T16517] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  854.630844][ T9724] EXT4-fs error (device loop5): ext4_release_dquot:7077: comm kworker/u8:7: Failed to release dquot type 0
[  854.665579][T16517] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548)
[  854.677826][T15192] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  854.713291][T16517] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548)
[  854.748194][T16517] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548)
[  854.789841][T16517] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548)
[  854.825856][T16517] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548)
[  854.998304][T16517] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548)
[  855.024835][T16517] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548)
[  855.372444][T16525] loop5: detected capacity change from 0 to 1024
[  855.383875][T16525] EXT4-fs: Ignoring removed mblk_io_submit option
[  855.421026][T15870] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  855.472142][T16517] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548)
[  855.524476][T16517] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548)
[  855.550230][T16517] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548)
[  855.572486][T16517] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548)
[  855.611753][T16517] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548)
[  855.642262][T16517] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548)
[  855.671598][T16517] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548)
[  855.712168][T16517] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 548)
[  855.742150][T16517] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548)
[  856.015786][T16472] Set syz1 is full, maxelem 65536 reached
[  856.915275][   T11] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  856.923009][   T28] kauditd_printk_skb: 134 callbacks suppressed
[  856.923030][   T28] audit: type=1400 audit(1785570100.359:15873): avc:  denied  { read write } for  pid=16533 comm="syz.1.3332" name="uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  857.003123][T16525] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  857.048002][   T11] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  857.062778][   T11] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  857.075082][   T11] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  857.215028][   T28] audit: type=1400 audit(1785570100.359:15874): avc:  denied  { open } for  pid=16533 comm="syz.1.3332" path="/dev/uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  857.238986][   T28] audit: type=1400 audit(1785570100.469:15875): avc:  denied  { write } for  pid=16522 comm="syz.5.3330" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  857.266772][   T11] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  857.276724][   T11] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  857.285511][   T11] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  857.359220][   T11] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  857.370965][   T11] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.10 Device [syz0] on syz0
[  857.372143][T15192] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  857.418154][   T28] audit: type=1400 audit(1785570100.859:15876): avc:  denied  { sqpoll } for  pid=16545 comm="syz.1.3337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  857.474126][T16550] loop1: detected capacity change from 0 to 2048
[  857.486710][T16551] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16551 comm=syz.7.3339
[  857.504967][T16544] fido_id[16544]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  857.537037][   T28] audit: type=1400 audit(1785570100.979:15877): avc:  denied  { setattr } for  pid=16552 comm="syz.5.3336" name="netstat" dev="proc" ino=4026532890 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  857.571298][T16542] loop2: detected capacity change from 0 to 512
[  857.578326][T16550]  loop1: p1 < > p4
[  857.588968][T16550] loop1: p4 size 722688 extends beyond EOD, truncated
[  857.595777][T16553] loop5: detected capacity change from 0 to 512
[  857.612012][T16542] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3335: invalid indirect mapped block 4294967295 (level 1)
[  857.655431][   T28] audit: type=1400 audit(1785570101.079:15878): avc:  denied  { read } for  pid=16549 comm="syz.1.3338" name="loop1p1" dev="devtmpfs" ino=4522 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  857.664378][T16542] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  857.679182][T16542] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3335: invalid indirect mapped block 4294967295 (level 1)
[  857.702813][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  857.702863][    C1] EXT4-fs (loop2): initial error at time 1785570101: ext4_free_branches:1023: inode 11
[  857.702971][    C1] EXT4-fs (loop2): last error at time 1785570101: ext4_free_branches:1023: inode 11
[  857.742260][T16543] lo speed is unknown, defaulting to 1000
[  857.759310][T16542] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  857.761266][T16542] EXT4-fs (loop2): 2 truncates cleaned up
[  857.772978][   T28] audit: type=1400 audit(1785570101.079:15879): avc:  denied  { open } for  pid=16549 comm="syz.1.3338" path="/dev/loop1p1" dev="devtmpfs" ino=4522 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  857.779837][T16542] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  857.902590][T16551] loop7: detected capacity change from 0 to 512
[  857.935980][T16551] EXT4-fs error (device loop7): ext4_get_branch:178: inode #11: block 4294967295: comm syz.7.3339: invalid block
[  857.952817][T16542] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  857.966782][T16551] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  857.967507][T16551] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.3339: invalid indirect mapped block 4294967295 (level 1)
[  857.976889][    C1] EXT4-fs (loop7): error count since last fsck: 1
[  857.976926][    C1] EXT4-fs (loop7): initial error at time 1785570101: ext4_get_branch:178: inode 11: block 4294967295
[  857.977037][    C1] EXT4-fs (loop7): last error at time 1785570101: ext4_get_branch:178: inode 11: block 4294967295
[  858.023974][T16551] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  858.025313][T16551] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.3339: invalid indirect mapped block 4294967295 (level 1)
[  858.059401][T16551] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  858.060448][T16551] EXT4-fs (loop7): 2 truncates cleaned up
[  858.110060][T16567] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3342'.
[  858.242030][T16569] loop5: detected capacity change from 0 to 1024
[  858.252679][T16569] EXT4-fs: Ignoring removed mblk_io_submit option
[  858.321666][T16569] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  858.375804][T16551] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  858.402596][   T28] audit: type=1400 audit(1785570101.789:15880): avc:  denied  { write } for  pid=16557 comm="syz.5.3340" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  858.433380][T16572] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3342'.
[  858.460937][T16551] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  859.100667][T16581] loop6: detected capacity change from 0 to 512
[  859.107550][T16581] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  859.143876][T16578] rdma_rxe: rxe_newlink: failed to add lo
[  859.146689][   T28] audit: type=1400 audit(1785570102.579:15881): avc:  denied  { shutdown } for  pid=16573 comm="syz.1.3343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  859.663940][T16578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  859.702348][T16578] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  859.746119][T16587] lo speed is unknown, defaulting to 1000
[  859.881290][T15192] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  859.914302][   T28] audit: type=1400 audit(1785570103.359:15882): avc:  denied  { execute } for  pid=16591 comm="syz.1.3348" name="file0" dev="tmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  860.010357][T16596] loop7: detected capacity change from 0 to 512
[  860.032493][T16596] EXT4-fs (loop7): inodes count not valid: 32768 vs 32
[  860.227726][T16607] lo speed is unknown, defaulting to 1000
[  860.398610][T16610] loop7: detected capacity change from 0 to 1024
[  860.409889][T16610] EXT4-fs: Ignoring removed mblk_io_submit option
[  860.490763][T16610] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  860.695615][T16615] loop2: detected capacity change from 0 to 512
[  862.273321][   T28] kauditd_printk_skb: 4 callbacks suppressed
[  862.273335][   T28] audit: type=1400 audit(1785570105.719:15887): avc:  denied  { execute } for  pid=16623 comm="syz.1.3358" path="/file1" dev="ramfs" ino=54342 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1
[  862.729630][T16625] loop5: detected capacity change from 0 to 1024
[  862.740262][T16625] EXT4-fs: Ignoring removed mblk_io_submit option
[  862.776279][T16625] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  862.780034][T14661] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  863.174806][   T28] audit: type=1400 audit(1785570106.619:15888): avc:  denied  { bind } for  pid=16636 comm="syz.7.3359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  863.218126][   T28] audit: type=1400 audit(1785570106.649:15889): avc:  denied  { setopt } for  pid=16636 comm="syz.7.3359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  863.355361][T16639] FAULT_INJECTION: forcing a failure.
[  863.355361][T16639] name fail_futex, interval 1, probability 0, space 0, times 1
[  863.375587][T16640] tipc: Started in network mode
[  863.380843][   T28] audit: type=1400 audit(1785570106.819:15890): avc:  denied  { read append } for  pid=16636 comm="syz.7.3359" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  863.507441][T16640] tipc: Node identity ac14140f, cluster identity 4711
[  863.514950][T15192] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  863.546354][T16639] CPU: 1 UID: 0 PID: 16639 Comm: syz.2.3361 Not tainted syzkaller #0 PREEMPT(lazy) 
[  863.546377][T16639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  863.546388][T16639] Call Trace:
[  863.546394][T16639]  <TASK>
[  863.546401][T16639]  __dump_stack+0x1d/0x30
[  863.546420][T16639]  dump_stack_lvl+0x95/0xd0
[  863.546451][T16639]  dump_stack+0x15/0x1b
[  863.546519][T16639]  should_fail_ex+0x25e/0x270
[  863.546544][T16639]  should_fail+0xb/0x20
[  863.546662][T16639]  get_futex_key+0x12f/0xb10
[  863.546686][T16639]  ? refill_pi_state_cache+0x5f/0xe0
[  863.546824][T16639]  futex_requeue+0x177/0x1450
[  863.546843][T16639]  ? _parse_integer+0x27/0x40
[  863.546867][T16639]  ? kstrtouint_from_user+0xa8/0xf0
[  863.546898][T16639]  ? get_pid_task+0x92/0xc0
[  863.546918][T16639]  do_futex+0x3bf/0x460
[  863.546939][T16639]  __se_sys_futex+0x2f6/0x370
[  863.546961][T16639]  __x64_sys_futex+0x78/0x90
[  863.546992][T16639]  x64_sys_call+0x24ab/0x3020
[  863.547137][T16639]  do_syscall_64+0x136/0x3c0
[  863.547161][T16639]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  863.547182][T16639] RIP: 0033:0x7fe5662de019
[  863.547199][T16639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  863.547260][T16639] RSP: 002b:00007fe564cf5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  863.547277][T16639] RAX: ffffffffffffffda RBX: 00007fe566566180 RCX: 00007fe5662de019
[  863.547288][T16639] RDX: 0000000000000001 RSI: 000000000000000c RDI: 000020000000cffc
[  863.547318][T16639] RBP: 00007fe564cf5090 R08: 0000200000048000 R09: 0000000000000000
[  863.547332][T16639] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001
[  863.547369][T16639] R13: 00007fe566566218 R14: 00007fe566566180 R15: 00007ffdf11bbf08
[  863.547389][T16639]  </TASK>
[  863.755395][T16640] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  863.800248][T16646] lo speed is unknown, defaulting to 1000
[  863.805089][   T28] audit: type=1400 audit(1785570106.819:15891): avc:  denied  { open } for  pid=16636 comm="syz.7.3359" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  863.829960][   T28] audit: type=1400 audit(1785570106.819:15892): avc:  denied  { ioctl } for  pid=16636 comm="syz.7.3359" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  863.855194][   T28] audit: type=1400 audit(1785570106.819:15893): avc:  denied  { create } for  pid=16636 comm="syz.7.3359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[  863.875143][   T28] audit: type=1400 audit(1785570106.819:15894): avc:  denied  { write } for  pid=16636 comm="syz.7.3359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[  863.895366][   T28] audit: type=1400 audit(1785570107.329:15895): avc:  denied  { create } for  pid=16644 comm="syz.1.3362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  863.945664][   T28] audit: type=1400 audit(1785570107.329:15896): avc:  denied  { getopt } for  pid=16644 comm="syz.1.3362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  864.155441][T16650] loop5: detected capacity change from 0 to 512
[  864.857047][T16670] loop6: detected capacity change from 0 to 512
[  864.919598][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  865.084721][T16676] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3370'.
[  865.111558][T16675] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3370'.
[  865.161808][T16670] EXT4-fs error (device loop6): ext4_get_branch:178: inode #11: block 4294967295: comm syz.6.3368: invalid block
[  865.279248][T16670] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  865.289157][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  865.304749][    C0] EXT4-fs (loop6): initial error at time 1785570108: ext4_get_branch:178: inode 11: block 4294967295
[  865.315668][    C0] EXT4-fs (loop6): last error at time 1785570108: ext4_get_branch:178: inode 11: block 4294967295
[  865.686693][T16670] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.3368: invalid indirect mapped block 4294967295 (level 1)
[  865.790019][T16670] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  865.790149][T16670] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.3368: invalid indirect mapped block 4294967295 (level 1)
[  865.883514][T16684] netlink: 'syz.7.3372': attribute type 10 has an invalid length.
[  865.890686][T16670] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  865.891623][T16670] EXT4-fs (loop6): 2 truncates cleaned up
[  865.918673][T16670] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  865.932688][T16670] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  866.333258][T16701] lo speed is unknown, defaulting to 1000
[  866.646745][T16711] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3383'.
[  866.752141][T16716] vlan2: entered allmulticast mode
[  866.764785][T16716] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  866.796332][T16716] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3383'.
[  866.887838][T16715] loop6: detected capacity change from 0 to 512
[  866.944566][T16720] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3386'.
[  866.985174][T16715] EXT4-fs error (device loop6): ext4_get_branch:178: inode #11: block 4294967295: comm syz.6.3385: invalid block
[  866.999576][T16715] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  867.010140][T16715] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.3385: invalid indirect mapped block 4294967295 (level 1)
[  867.019818][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  867.019870][    C1] EXT4-fs (loop6): initial error at time 1785570110: ext4_get_branch:178: inode 11: block 4294967295
[  867.020027][    C1] EXT4-fs (loop6): last error at time 1785570110: ext4_get_branch:178: inode 11: block 4294967295
[  867.066503][T16715] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  867.068542][T16715] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.3385: invalid indirect mapped block 4294967295 (level 1)
[  867.104711][T16710] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3381'.
[  867.117548][T16715] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  867.118493][T16715] EXT4-fs (loop6): 2 truncates cleaned up
[  867.145552][T16715] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  867.147134][T16732] rdma_rxe: rxe_newlink: failed to add lo
[  867.182696][T16715] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  867.210327][T16732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  867.219071][T16732] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  867.252518][T16734] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16734 comm=syz.7.3390
[  867.273391][T16696] lo speed is unknown, defaulting to 1000
[  867.306887][T16738] FAULT_INJECTION: forcing a failure.
[  867.306887][T16738] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  867.323953][T16738] CPU: 0 UID: 0 PID: 16738 Comm: syz.2.3392 Not tainted syzkaller #0 PREEMPT(lazy) 
[  867.323981][T16738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  867.323994][T16738] Call Trace:
[  867.324002][T16738]  <TASK>
[  867.324013][T16738]  __dump_stack+0x1d/0x30
[  867.324036][T16738]  dump_stack_lvl+0x95/0xd0
[  867.324086][T16738]  dump_stack+0x15/0x1b
[  867.324101][T16738]  should_fail_ex+0x25e/0x270
[  867.324124][T16738]  should_fail+0xb/0x20
[  867.324156][T16738]  should_fail_usercopy+0x1a/0x20
[  867.324258][T16738]  _copy_from_user+0x1c/0xb0
[  867.324279][T16738]  ___sys_sendmsg+0xc1/0x1e0
[  867.324360][T16738]  __x64_sys_sendmsg+0xd4/0x160
[  867.324383][T16738]  x64_sys_call+0x194c/0x3020
[  867.324452][T16738]  do_syscall_64+0x136/0x3c0
[  867.324477][T16738]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  867.324562][T16738] RIP: 0033:0x7fe5662de019
[  867.324576][T16738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  867.324592][T16738] RSP: 002b:00007fe564d37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  867.324610][T16738] RAX: ffffffffffffffda RBX: 00007fe566565fa0 RCX: 00007fe5662de019
[  867.324622][T16738] RDX: 0000000004004040 RSI: 0000200000000340 RDI: 0000000000000005
[  867.324634][T16738] RBP: 00007fe564d37090 R08: 0000000000000000 R09: 0000000000000000
[  867.324647][T16738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  867.324686][T16738] R13: 00007fe566566038 R14: 00007fe566565fa0 R15: 00007ffdf11bbf08
[  867.324705][T16738]  </TASK>
[  867.545478][T16734] loop7: detected capacity change from 0 to 512
[  867.590170][T16734] EXT4-fs error (device loop7): ext4_get_branch:178: inode #11: block 4294967295: comm syz.7.3390: invalid block
[  867.602585][T16734] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  867.603297][T16734] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.3390: invalid indirect mapped block 4294967295 (level 1)
[  867.612638][    C0] EXT4-fs (loop7): error count since last fsck: 1
[  867.612667][    C0] EXT4-fs (loop7): initial error at time 1785570111: ext4_get_branch:178: inode 11: block 4294967295
[  867.612837][    C0] EXT4-fs (loop7): last error at time 1785570111: ext4_get_branch:178: inode 11: block 4294967295
[  867.660121][T16734] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  867.668276][T16734] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.3390: invalid indirect mapped block 4294967295 (level 1)
[  867.693221][T16734] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  867.718038][T16755] macvlan0: entered promiscuous mode
[  867.729531][T16734] EXT4-fs (loop7): 2 truncates cleaned up
[  867.743750][T16734] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  867.778980][T16755] loop5: detected capacity change from 0 to 1024
[  867.785764][T16755] EXT4-fs: quotafile must be on filesystem root
[  867.793795][T16753] loop2: detected capacity change from 0 to 164
[  867.794980][T16734] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  867.819735][T16753] iso9660: Unknown parameter 'ÿÿ'
[  867.828784][T16757] loop6: detected capacity change from 0 to 512
[  867.847465][   T28] kauditd_printk_skb: 9 callbacks suppressed
[  867.847479][   T28] audit: type=1326 audit(1785570111.289:15904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16747 comm="syz.2.3396" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5662de019 code=0x7ffc0000
[  867.876434][T16757] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem
[  867.890091][   T28] audit: type=1326 audit(1785570111.339:15905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16747 comm="syz.2.3396" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5662de019 code=0x7ffc0000
[  867.930887][T16757] EXT4-fs error (device loop6): ext4_orphan_get:1425: comm syz.6.3398: bad orphan inode 15
[  867.950605][   T28] audit: type=1326 audit(1785570111.339:15906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16747 comm="syz.2.3396" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5662de019 code=0x7ffc0000
[  867.976362][T16757] loop6: lost filesystem error report for type 5 error -117
[  867.977916][T16757] ext4_test_bit(bit=14, block=18) = 1
[  867.985244][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  867.985261][    C1] EXT4-fs (loop6): initial error at time 1785570111: ext4_orphan_get:1425
[  867.985278][    C1] EXT4-fs (loop6): last error at time 1785570111: ext4_orphan_get:1425
[  868.013935][   T28] audit: type=1326 audit(1785570111.339:15907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16747 comm="syz.2.3396" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7fe5662de019 code=0x7ffc0000
[  868.039650][   T28] audit: type=1326 audit(1785570111.339:15908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16747 comm="syz.2.3396" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5662de019 code=0x7ffc0000
[  868.042412][T16757] is_bad_inode(inode)=0
[  868.065326][   T28] audit: type=1326 audit(1785570111.339:15909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16747 comm="syz.2.3396" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5662de019 code=0x7ffc0000
[  868.095207][   T28] audit: type=1326 audit(1785570111.339:15910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16747 comm="syz.2.3396" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5662de019 code=0x7ffc0000
[  868.105015][T16762] rdma_rxe: rxe_newlink: failed to add lo
[  868.120843][T16757] NEXT_ORPHAN(inode)=1023
[  868.120934][T16757] max_ino=32
[  868.120941][T16757] i_nlink=0
[  868.138678][T16757] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3398: bg 0: block 161: padding at end of block bitmap is not set
[  868.154142][T16765] audit: audit_backlog=65 > audit_backlog_limit=64
[  868.154993][   T28] audit: type=1326 audit(1785570111.339:15911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16747 comm="syz.2.3396" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5662de019 code=0x7ffc0000
[  868.189303][   T28] audit: type=1326 audit(1785570111.339:15912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16747 comm="syz.2.3396" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fe5662de019 code=0x7ffc0000
[  868.202264][T16766] loop7: detected capacity change from 0 to 512
[  868.215648][T16757] loop6: lost filesystem error report for type 5 error -117
[  868.222732][T16766] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  868.234951][T16762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  868.263645][T16762] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  868.280212][T16757] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  868.289521][T16766] s
z1: rxe_newlink: already configured on lo
[  868.295959][T16757] loop6: lost filesystem error report for type 5 error -117
[  868.298453][T16757] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  868.319533][T16766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  868.322530][T16763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3396'.
[  868.328292][T16766] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  868.359389][T16759] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3399'.
[  868.378587][T16759] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3399'.
[  868.389697][T16757] ext2 filesystem being mounted at /27/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff)
[  868.401782][T16759] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3399'.
[  868.517668][T16769] mmap: syz.5.3402 (16769) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  868.565397][T16117] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  868.610554][T16769] MTRR 1 not used
[  868.765855][T16780] loop6: detected capacity change from 0 to 1024
[  868.782474][T16780] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a055c01c, mo2=0002]
[  868.795144][T16780] System zones: 0-1, 3-36
[  868.801561][T16780] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  868.816924][T16780] EXT4-fs error (device loop6): ext4_iget_extra_inode:5180: inode #15: comm syz.6.3407: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[  868.834451][T16780] EXT4-fs error (device loop6): ext4_iget_extra_inode:5180: inode #15: comm syz.6.3407: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[  868.960244][T16782] loop5: detected capacity change from 0 to 1024
[  868.971134][T16782] EXT4-fs: Ignoring removed mblk_io_submit option
[  869.021228][T16782] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  869.184470][T16117] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  869.395823][T16753] Set syz1 is full, maxelem 65536 reached
[  869.545889][T16790] netlink: 'syz.7.3408': attribute type 1 has an invalid length.
[  869.615659][T16792] lo speed is unknown, defaulting to 1000
[  869.683814][T16795] sg_write: data in/out 24660/136 bytes for SCSI command 0x0-- guessing data in;
[  869.683814][T16795]    program syz.1.3412 not setting count and/or reply_len properly
[  869.773965][T16797] loop7: detected capacity change from 0 to 1024
[  869.819863][T16797] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a055c01c, mo2=0002]
[  869.867559][T16797] System zones: 0-1, 3-36
[  869.893346][T16797] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  870.105698][T16811] loop6: detected capacity change from 0 to 512
[  870.182906][T16816] __nla_validate_parse: 2 callbacks suppressed
[  870.182964][T16816] netlink: 27 bytes leftover after parsing attributes in process `syz.2.3417'.
[  870.206343][T16814] lo speed is unknown, defaulting to 1000
[  870.290415][T16797] EXT4-fs error (device loop7): ext4_iget_extra_inode:5180: inode #15: comm syz.7.3413: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[  870.322042][T15192] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  870.344728][T16810] EXT4-fs error (device loop7): ext4_iget_extra_inode:5180: inode #15: comm syz.7.3413: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[  870.364092][T16811] EXT4-fs error (device loop6): ext4_iget_extra_inode:5180: inode #15: comm syz.6.3415: corrupted in-inode xattr: overlapping e_value 
[  870.378420][T16811] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  870.378632][T16811] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.3415: couldn't read orphan inode 15 (err -117)
[  870.387799][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  870.387817][    C1] EXT4-fs (loop6): initial error at time 1785570113: ext4_iget_extra_inode:5180: inode 15
[  870.387848][    C1] EXT4-fs (loop6): last error at time 1785570113: ext4_iget_extra_inode:5180: inode 15
[  870.439222][T16811] loop6: lost filesystem error report for type 5 error -117
[  870.440264][T16811] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  870.466213][T16824] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3418'.
[  870.550053][T14661] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  870.587612][T16811] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  870.624720][T16826] loop5: detected capacity change from 0 to 512
[  870.693038][T16826] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  870.782914][T16826] rdma_rxe: rxe_newlink: failed to add lo
[  870.831410][T16826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  870.850549][T16826] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  870.868353][T16826] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548)
[  870.883450][T16826] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548)
[  870.892371][T16826] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548)
[  870.901054][T16826] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548)
[  870.909780][T16826] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548)
[  870.919033][T16826] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548)
[  870.928068][T16826] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548)
[  870.936899][T16826] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548)
[  870.947227][T16826] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548)
[  870.956136][T16826] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548)
[  870.970421][T16826] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548)
[  870.979258][T16826] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548)
[  870.988116][T16826] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548)
[  871.000253][T16826] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548)
[  871.013696][T16835] 
: renamed from team_slave_1 (while UP)
[  871.027928][T16826] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 548)
[  871.045820][T16826] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548)
[  871.065269][T16835] usb usb7: check_ctrlrecip: process 16835 (syz.1.3423) requesting ep 01 but needs 81
[  871.076757][T16835] vhci_hcd vhci_hcd.3: default hub control req: 0211 v0005 i0001 l0
[  871.094474][T16838] bridge0: port 2(bridge_slave_1) entered disabled state
[  871.279774][T16846] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3427'.
[  871.289061][T16846] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3427'.
[  871.352341][T16850] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3428'.
[  871.380630][T16851] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3428'.
[  871.935146][T16856] loop5: detected capacity change from 0 to 1024
[  871.945909][T16856] EXT4-fs: Ignoring removed mblk_io_submit option
[  872.069018][T16856] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  872.495425][T16860] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.3430: invalid indirect mapped block 4294967295 (level 1)
[  872.571154][T16865] usb usb8: usbfs: process 16865 (syz.7.3431) did not claim interface 0 before use
[  872.590073][T16860] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  872.590529][T16860] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.3430: invalid indirect mapped block 4294967295 (level 1)
[  872.600808][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  872.600836][    C1] EXT4-fs (loop6): initial error at time 1785570116: ext4_free_branches:1023: inode 11
[  872.600959][    C1] EXT4-fs (loop6): last error at time 1785570116: ext4_free_branches:1023: inode 11
[  872.709808][T11886] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  872.729370][T11886] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  872.763900][T11886] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  872.779646][T11886] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  872.790590][T16860] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  872.793201][T16860] EXT4-fs (loop6): 2 truncates cleaned up
[  872.813753][T11886] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  872.829000][T11886] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  872.845435][T16860] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  872.858547][   T28] kauditd_printk_skb: 280 callbacks suppressed
[  872.858560][   T28] audit: type=1326 audit(1785570116.309:16191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16863 comm="syz.7.3431" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f44c1c6e84e code=0x7ffc0000
[  872.895953][T11886] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  872.911677][T11886] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  872.931666][T16860] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  872.941701][T11886] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.10 Device [syz0] on syz0
[  872.960505][   T28] audit: type=1326 audit(1785570116.339:16192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16863 comm="syz.7.3431" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f44c1c6e84e code=0x7ffc0000
[  873.064292][T10940] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  873.104424][T10940] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  873.125161][   T28] audit: type=1326 audit(1785570116.339:16193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16863 comm="syz.7.3431" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f44c1c6e84e code=0x7ffc0000
[  873.160579][T10940] hid-generic 0000:0000:0000.0003: hidraw0: <UNKNOWN> HID v0.10 Device [syz0] on syz0
[  873.276270][T16879] fido_id[16879]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  873.277896][   T28] audit: type=1326 audit(1785570116.349:16194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16863 comm="syz.7.3431" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f44c1c6e84e code=0x7ffc0000
[  873.320409][   T28] audit: type=1326 audit(1785570116.349:16195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16863 comm="syz.7.3431" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f44c1c6e84e code=0x7ffc0000
[  873.351454][T15192] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  873.367200][   T28] audit: type=1326 audit(1785570116.349:16196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16863 comm="syz.7.3431" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f44c1c6e84e code=0x7ffc0000
[  873.393208][   T28] audit: type=1326 audit(1785570116.349:16197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16863 comm="syz.7.3431" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f44c1c6e84e code=0x7ffc0000
[  873.427848][T16888] FAULT_INJECTION: forcing a failure.
[  873.427848][T16888] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  873.441224][T16888] CPU: 0 UID: 0 PID: 16888 Comm: syz.5.3438 Not tainted syzkaller #0 PREEMPT(lazy) 
[  873.441250][T16888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  873.441273][T16888] Call Trace:
[  873.441280][T16888]  <TASK>
[  873.441288][T16888]  __dump_stack+0x1d/0x30
[  873.441307][T16888]  dump_stack_lvl+0x95/0xd0
[  873.441342][T16888]  dump_stack+0x15/0x1b
[  873.441360][T16888]  should_fail_ex+0x25e/0x270
[  873.441384][T16888]  should_fail+0xb/0x20
[  873.441426][T16888]  should_fail_usercopy+0x1a/0x20
[  873.441448][T16888]  _copy_from_iter+0xcc/0xe70
[  873.441476][T16888]  ? __alloc_skb+0x511/0x6f0
[  873.441515][T16888]  ? __alloc_skb+0x205/0x6f0
[  873.441540][T16888]  netlink_sendmsg+0x4a4/0x6f0
[  873.441574][T16888]  ? __pfx_netlink_sendmsg+0x10/0x10
[  873.441614][T16888]  ____sys_sendmsg+0x532/0x580
[  873.441707][T16888]  ___sys_sendmsg+0x195/0x1e0
[  873.441802][T16888]  __x64_sys_sendmsg+0xd4/0x160
[  873.441865][T16888]  x64_sys_call+0x194c/0x3020
[  873.441935][T16888]  do_syscall_64+0x136/0x3c0
[  873.441959][T16888]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  873.441976][T16888] RIP: 0033:0x7f2ad4d6e019
[  873.441990][T16888] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  873.442044][T16888] RSP: 002b:00007f2ad37c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  873.442062][T16888] RAX: ffffffffffffffda RBX: 00007f2ad4ff5fa0 RCX: 00007f2ad4d6e019
[  873.442074][T16888] RDX: 0000000020000000 RSI: 0000200000000100 RDI: 0000000000000003
[  873.442086][T16888] RBP: 00007f2ad37c7090 R08: 0000000000000000 R09: 0000000000000000
[  873.442129][T16888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  873.442145][T16888] R13: 00007f2ad4ff6038 R14: 00007f2ad4ff5fa0 R15: 00007fff7884acb8
[  873.442164][T16888]  </TASK>
[  873.619774][   T28] audit: type=1326 audit(1785570116.359:16198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16863 comm="syz.7.3431" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f44c1c6e84e code=0x7ffc0000
[  873.701879][T16893] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16893 comm=syz.5.3440
[  873.706416][   T28] audit: type=1326 audit(1785570116.359:16199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16863 comm="syz.7.3431" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f44c1c6e84e code=0x7ffc0000
[  873.743998][T16895] set_capacity_and_notify: 1 callbacks suppressed
[  873.744015][T16895] loop7: detected capacity change from 0 to 256
[  873.750601][   T28] audit: type=1326 audit(1785570116.369:16200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16863 comm="syz.7.3431" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f44c1c6e84e code=0x7ffc0000
[  873.785544][T16895] FAT-fs (loop7): Directory bread(block 1285) failed
[  873.792541][T16895] FAT-fs (loop7): Directory bread(block 1286) failed
[  873.802299][T16895] FAT-fs (loop7): Directory bread(block 1287) failed
[  873.809058][T16895] FAT-fs (loop7): Directory bread(block 1288) failed
[  873.872114][T16895] FAT-fs (loop7): Directory bread(block 1285) failed
[  873.888321][T16895] FAT-fs (loop7): Directory bread(block 1286) failed
[  873.895514][T16895] FAT-fs (loop7): Directory bread(block 1287) failed
[  873.902437][T16895] FAT-fs (loop7): Directory bread(block 1288) failed
[  873.910078][T16895] FAT-fs (loop7): FAT read failed (blocknr 1281)
[  873.947885][T16893] loop5: detected capacity change from 0 to 512
[  873.948975][ T5063] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.10 Device [syz0] on syz0
[  874.020894][T16893] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3440: invalid indirect mapped block 4294967295 (level 1)
[  874.037604][T16906] fido_id[16906]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  874.059351][T16893] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  874.069547][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  874.085273][    C1] EXT4-fs (loop5): initial error at time 1785570117: ext4_free_branches:1023: inode 11
[  874.095106][    C1] EXT4-fs (loop5): last error at time 1785570117: ext4_free_branches:1023: inode 11
[  874.120393][T16893] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3440: invalid indirect mapped block 4294967295 (level 1)
[  874.146574][T16916] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16916 comm=syz.2.3447
[  874.179263][T16893] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  874.181366][T16893] EXT4-fs (loop5): 2 truncates cleaned up
[  874.199792][T16893] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  874.244542][T16910] team0: Port device dummy0 removed
[  874.267850][T16893] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  874.369303][T16922] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3450'.
[  874.420629][T16914] loop6: detected capacity change from 0 to 512
[  874.431568][T16927] loop7: detected capacity change from 0 to 512
[  874.449400][T16924] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=770 sclass=netlink_route_socket pid=16924 comm=syz.5.3452
[  874.509846][T16916] loop2: detected capacity change from 0 to 512
[  874.526941][T16927] EXT4-fs (loop7): orphan cleanup on readonly fs
[  874.600771][T16927] EXT4-fs warning (device loop7): ext4_enable_quotas:7276: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  874.628433][T16916] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3447: invalid indirect mapped block 4294967295 (level 1)
[  874.642288][T16914] EXT4-fs error (device loop6): ext4_get_branch:178: inode #11: block 4294967295: comm syz.6.3446: invalid block
[  874.643125][T16916] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  874.655226][T16927] EXT4-fs (loop7): Cannot turn on quotas: error -22
[  874.655281][T16927] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.3451: couldn't read orphan inode 26 (err -116)
[  874.655307][T16927] loop7: lost filesystem error report for type 5 error -116
[  874.659159][    C1] EXT4-fs (loop7): error count since last fsck: 1
[  874.689194][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  874.690346][    C1] EXT4-fs (loop7): initial error at time 1785570118: ext4_orphan_get:1404
[  874.696745][    C0] EXT4-fs (loop2): initial error at time 1785570118: ext4_free_branches:1023
[  874.703139][    C1] 
[  874.703146][    C1] EXT4-fs (loop7): last error at time 1785570118: ext4_orphan_get:1404
[  874.703372][T16927] EXT4-fs (loop7): Remounting filesystem read-only
[  874.711673][    C0] : inode 11
[  874.711689][    C0] EXT4-fs (loop2): last error at time 1785570118: ext4_free_branches:1023: inode 11
[  874.751919][T16914] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  874.752783][T16916] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3447: invalid indirect mapped block 4294967295 (level 1)
[  874.762072][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  874.762123][    C1] EXT4-fs (loop6): initial error at time 1785570118: ext4_get_branch:178: inode 11: block 4294967295
[  874.762252][    C1] EXT4-fs (loop6): last error at time 1785570118: ext4_get_branch:178: inode 11: block 4294967295
[  874.816382][T16914] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.3446: invalid indirect mapped block 4294967295 (level 1)
[  874.852582][T16914] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  874.853157][T16916] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  874.864724][T16916] EXT4-fs (loop2): 2 truncates cleaned up
[  874.890574][T16927] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  874.891191][T16941] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3456'.
[  874.903589][T16914] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.3446: invalid indirect mapped block 4294967295 (level 1)
[  874.925513][T16916] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  874.975344][T16916] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  874.985113][T14661] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  874.986833][T16914] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  874.999460][T16914] EXT4-fs (loop6): 2 truncates cleaned up
[  875.103304][T16914] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  875.122208][T16914] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  875.265331][T16956] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3461'.
[  875.356290][T16961] FAULT_INJECTION: forcing a failure.
[  875.356290][T16961] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  875.380853][T16961] CPU: 1 UID: 0 PID: 16961 Comm: syz.7.3457 Not tainted syzkaller #0 PREEMPT(lazy) 
[  875.380878][T16961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  875.380888][T16961] Call Trace:
[  875.380894][T16961]  <TASK>
[  875.380902][T16961]  __dump_stack+0x1d/0x30
[  875.381037][T16961]  dump_stack_lvl+0x95/0xd0
[  875.381053][T16961]  dump_stack+0x15/0x1b
[  875.381068][T16961]  should_fail_ex+0x25e/0x270
[  875.381094][T16961]  should_fail+0xb/0x20
[  875.381170][T16961]  should_fail_usercopy+0x1a/0x20
[  875.381193][T16961]  _copy_to_user+0x20/0xa0
[  875.381213][T16961]  simple_read_from_buffer+0xb5/0x130
[  875.381283][T16961]  proc_fail_nth_read+0x10e/0x150
[  875.381301][T16961]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  875.381318][T16961]  vfs_read+0x18e/0x7c0
[  875.381376][T16961]  ? __rcu_read_unlock+0x4e/0x70
[  875.381414][T16961]  ? __fget_files+0x184/0x1c0
[  875.381435][T16961]  ? mutex_lock+0x57/0x90
[  875.381517][T16961]  ksys_read+0xdc/0x1a0
[  875.381536][T16961]  __x64_sys_read+0x40/0x50
[  875.381614][T16961]  x64_sys_call+0x2886/0x3020
[  875.381636][T16961]  do_syscall_64+0x136/0x3c0
[  875.381657][T16961]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  875.381677][T16961] RIP: 0033:0x7f44c1c6e84e
[  875.381694][T16961] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  875.381744][T16961] RSP: 002b:00007f44c06e5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  875.381761][T16961] RAX: ffffffffffffffda RBX: 00007f44c06e66c0 RCX: 00007f44c1c6e84e
[  875.381772][T16961] RDX: 000000000000000f RSI: 00007f44c06e60a0 RDI: 0000000000000003
[  875.381785][T16961] RBP: 00007f44c06e6090 R08: 0000000000000000 R09: 0000000000000000
[  875.381798][T16961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  875.381811][T16961] R13: 00007f44c1f36128 R14: 00007f44c1f36090 R15: 00007ffcef1c3d98
[  875.381831][T16961]  </TASK>
[  875.633545][T16954] loop6: detected capacity change from 0 to 512
[  875.723496][T16968] loop5: detected capacity change from 0 to 164
[  875.732309][T16971] xt_TCPMSS: Only works on TCP SYN packets
[  875.754901][T16968] iso9660: Unknown parameter 'ÿÿ'
[  875.785770][T16974] netlink: 'syz.7.3467': attribute type 7 has an invalid length.
[  875.827279][T16954] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  875.915930][T16954] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  875.999317][T16978] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3465'.
[  876.008215][T16954] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.3460: corrupted xattr block 33: invalid checksum
[  876.034991][T16979] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3466'.
[  876.053279][T16979] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3466'.
[  876.069292][T16979] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3466'.
[  876.074009][T16954] SELinux: inode_doinit_use_xattr:  getxattr returned 74 for dev=loop6 ino=15
[  876.233262][T16988] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16988 comm=syz.2.3469
[  876.253888][T16117] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  876.359182][T16988] loop2: detected capacity change from 0 to 512
[  876.426371][T16988] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.3469: invalid block
[  876.439447][T16988] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  876.443030][T16988] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3469: invalid indirect mapped block 4294967295 (level 1)
[  876.452408][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  876.452463][    C0] EXT4-fs (loop2): initial error at time 1785570119: ext4_get_branch:178: inode 11: block 4294967295
[  876.452548][    C0] EXT4-fs (loop2): last error at time 1785570119: ext4_get_branch:178: inode 11: block 4294967295
[  876.454583][T16990] loop6: detected capacity change from 0 to 512
[  876.508947][T16988] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  876.517164][T16988] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3469: invalid indirect mapped block 4294967295 (level 1)
[  876.549625][T16988] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  876.553204][T16988] EXT4-fs (loop2): 2 truncates cleaned up
[  876.600535][T16990] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.3470: invalid indirect mapped block 4294967295 (level 1)
[  876.632940][T16988] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  876.660103][T16990] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  876.663896][T16990] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.3470: invalid indirect mapped block 4294967295 (level 1)
[  876.673705][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  876.673756][    C0] EXT4-fs (loop6): initial error at time 1785570120: ext4_free_branches:1023: inode 11
[  876.673825][    C0] EXT4-fs (loop6): last error at time 1785570120: ext4_free_branches:1023: inode 11
[  876.697776][T16988] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  876.704614][T16990] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  876.725562][T16990] EXT4-fs (loop6): 2 truncates cleaned up
[  876.748832][T16990] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  876.818045][T16990] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  877.010250][T17008] FAULT_INJECTION: forcing a failure.
[  877.010250][T17008] name failslab, interval 1, probability 0, space 0, times 0
[  877.020855][T17010] loop6: detected capacity change from 0 to 512
[  877.022986][T17008] CPU: 0 UID: 0 PID: 17008 Comm: syz.1.3476 Not tainted syzkaller #0 PREEMPT(lazy) 
[  877.023010][T17008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  877.023021][T17008] Call Trace:
[  877.023028][T17008]  <TASK>
[  877.023088][T17008]  __dump_stack+0x1d/0x30
[  877.023110][T17008]  dump_stack_lvl+0x95/0xd0
[  877.023128][T17008]  dump_stack+0x15/0x1b
[  877.023153][T17008]  should_fail_ex+0x25e/0x270
[  877.023175][T17008]  should_failslab+0x8c/0xb0
[  877.023193][T17008]  kmem_cache_alloc_noprof+0x7f/0x3c0
[  877.023212][T17008]  ? skb_clone+0x151/0x1f0
[  877.023274][T17008]  ? skb_clone+0x151/0x1f0
[  877.023311][T17008]  skb_clone+0x151/0x1f0
[  877.023481][T17008]  dev_queue_xmit_nit+0x13e/0x510
[  877.023507][T17008]  dev_hard_start_xmit+0xba/0x380
[  877.023603][T17008]  __dev_queue_xmit+0xbfc/0x1e90
[  877.023630][T17008]  ? __dev_queue_xmit+0x151/0x1e90
[  877.023698][T17008]  ? should_fail_ex+0xd9/0x270
[  877.023723][T17008]  ? __copy_skb_header+0x22f/0x2b0
[  877.023750][T17008]  ? __skb_clone+0x2a4/0x2c0
[  877.023777][T17008]  __netlink_deliver_tap+0x3c8/0x510
[  877.023835][T17008]  netlink_unicast+0x654/0x680
[  877.023857][T17008]  netlink_sendmsg+0x5be/0x6f0
[  877.023921][T17008]  ? __pfx_netlink_sendmsg+0x10/0x10
[  877.023944][T17008]  ____sys_sendmsg+0x532/0x580
[  877.023963][T17008]  ___sys_sendmsg+0x195/0x1e0
[  877.023990][T17008]  __x64_sys_sendmsg+0xd4/0x160
[  877.024071][T17008]  x64_sys_call+0x194c/0x3020
[  877.024099][T17008]  do_syscall_64+0x136/0x3c0
[  877.024123][T17008]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  877.024178][T17008] RIP: 0033:0x7f48c616e019
[  877.024268][T17008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  877.024354][T17008] RSP: 002b:00007f48c4bc7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  877.024375][T17008] RAX: ffffffffffffffda RBX: 00007f48c63f5fa0 RCX: 00007f48c616e019
[  877.024389][T17008] RDX: 0000000004040010 RSI: 00002000000012c0 RDI: 0000000000000008
[  877.024402][T17008] RBP: 00007f48c4bc7090 R08: 0000000000000000 R09: 0000000000000000
[  877.024413][T17008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  877.024426][T17008] R13: 00007f48c63f6038 R14: 00007f48c63f5fa0 R15: 00007fffb45c50b8
[  877.024519][T17008]  </TASK>
[  877.239584][T16968] Set syz1 is full, maxelem 65536 reached
[  877.248792][T17010] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  877.262378][T17012] tipc: Started in network mode
[  877.282283][T17012] tipc: Node identity 2007ff, cluster identity 4711
[  877.294646][T17012] tipc: Node number set to 2099199
[  877.305686][T17010] rdma_rxe: rxe_newlink: failed to add lo
[  877.313832][T17010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  877.322846][T17010] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  877.337410][T17010] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 548)
[  877.346629][T17010] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 548)
[  877.355461][T17010] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 548)
[  877.363966][T17010] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 548)
[  877.372621][T17010] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 548)
[  877.381075][T17010] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 548)
[  877.389725][T17010] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 548)
[  877.398224][T17010] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 548)
[  877.406758][T17010] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 548)
[  877.415295][T17010] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 548)
[  877.424014][T17010] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 548)
[  877.432501][T17010] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 548)
[  877.441268][T17010] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 548)
[  877.449722][T17010] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 548)
[  877.458646][T17010] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 548)
[  877.468057][T17010] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 548)
[  877.601696][T17027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3483'.
[  877.611614][T17027] bridge_slave_1: left allmulticast mode
[  877.618124][T17027] bridge_slave_1: left promiscuous mode
[  877.625264][T17027] bridge0: port 2(bridge_slave_1) entered disabled state
[  877.640957][T17027] bridge_slave_0: left allmulticast mode
[  877.666494][T17027] bridge_slave_0: left promiscuous mode
[  877.811655][T17033] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17033 comm=syz.7.3485
[  877.834386][T17031] EXT4-fs: Ignoring removed bh option
[  877.873480][T17027] bridge0: port 1(bridge_slave_0) entered disabled state
[  877.956265][T17031] EXT4-fs (loop2): stripe (7) is not aligned with cluster size (16), stripe is disabled
[  878.006087][T17029] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3484: invalid indirect mapped block 4294967295 (level 1)
[  878.064889][T17036] EXT4-fs error (device loop7): ext4_get_branch:178: inode #11: block 4294967295: comm syz.7.3485: invalid block
[  878.080991][T17031] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  878.116111][T17029] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  878.117231][T17029] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3484: invalid indirect mapped block 4294967295 (level 1)
[  878.126650][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  878.126688][    C0] EXT4-fs (loop5): initial error at time 1785570121: ext4_free_branches:1023: inode 11
[  878.126770][    C0] EXT4-fs (loop5): last error at time 1785570121: ext4_free_branches:1023: inode 11
[  878.181741][T17036] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  878.189179][    C0] EXT4-fs (loop7): error count since last fsck: 1
[  878.204771][    C0] EXT4-fs (loop7): initial error at time 1785570121: ext4_get_branch:178: inode 11: block 4294967295
[  878.215676][    C0] EXT4-fs (loop7): last error at time 1785570121: ext4_get_branch:178: inode 11: block 4294967295
[  878.230796][T17036] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.3485: invalid indirect mapped block 4294967295 (level 1)
[  878.325702][T17036] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  878.325808][T17036] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.3485: invalid indirect mapped block 4294967295 (level 1)
[  878.369065][T17036] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  878.370436][T17036] EXT4-fs (loop7): 2 truncates cleaned up
[  878.395257][T17029] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  878.396117][T17029] EXT4-fs (loop5): 2 truncates cleaned up
[  878.418929][T17036] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  878.451916][T17029] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  878.474258][T17036] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  878.498751][T14945] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  878.531171][T17029] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  878.597771][T17049] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3487'.
[  878.662106][T17049] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3487'.
[  878.738041][T17051] iso9660: Unknown parameter 'ÿÿ'
[  878.775313][   T28] kauditd_printk_skb: 340 callbacks suppressed
[  878.775325][   T28] audit: type=1326 audit(1785570122.219:16541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17052 comm="syz.5.3490" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ad4d6e019 code=0x7ffc0000
[  878.928105][   T28] audit: type=1326 audit(1785570122.259:16542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17052 comm="syz.5.3490" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f2ad4d2e84e code=0x7ffc0000
[  878.954021][   T28] audit: type=1326 audit(1785570122.259:16543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17052 comm="syz.5.3490" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f2ad4d2e84e code=0x7ffc0000
[  879.225739][T17060] set_capacity_and_notify: 4 callbacks suppressed
[  879.225802][T17060] loop6: detected capacity change from 0 to 1024
[  879.243828][T17060] EXT4-fs: Ignoring removed mblk_io_submit option
[  879.366217][T17065] 9p: Bad value for 'wfdno'
[  879.376051][T17060] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  879.395021][T17060] audit: audit_backlog=65 > audit_backlog_limit=64
[  879.401897][T17060] audit: audit_lost=6 audit_rate_limit=0 audit_backlog_limit=64
[  879.409868][T17060] audit: backlog limit exceeded
[  879.427498][T17060] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3491'.
[  879.436849][T17060] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3491'.
[  879.489112][T17055] loop2: detected capacity change from 0 to 512
[  879.591101][T17065] MTRR 1 not used
[  879.634442][T17055] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.3492: invalid block
[  879.654441][   T28] audit: type=1326 audit(1785570122.259:16544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17052 comm="syz.5.3490" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f2ad4d2e84e code=0x7ffc0000
[  879.717995][T17055] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3492: invalid indirect mapped block 4294967295 (level 1)
[  879.732266][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  879.732316][    C0] EXT4-fs (loop2): initial error at time 1785570123: ext4_get_branch:178: inode 11: block 4294967295
[  879.732465][    C0] EXT4-fs (loop2): last error at time 1785570123: ext4_get_branch:178: inode 11: block 4294967295
[  879.802181][   T28] audit: type=1326 audit(1785570122.259:16545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17052 comm="syz.5.3490" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ad4d6e019 code=0x7ffc0000
[  879.908863][T17077] loop5: detected capacity change from 0 to 512
[  879.946625][T17077] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  879.958812][T17081] 0ªî{X¹¦: renamed from gretap0 (while UP)
[  879.967850][   T28] audit: type=1326 audit(1785570122.259:16546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17052 comm="syz.5.3490" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f2ad4d6e019 code=0x7ffc0000
[  879.994322][T17055] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3492: invalid indirect mapped block 4294967295 (level 1)
[  880.015379][T17081] 0ªî{X¹¦: entered allmulticast mode
[  880.021925][T17081] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  880.051658][T17077] rdma_rxe: rxe_newlink: failed to add lo
[  880.058639][T17055] EXT4-fs (loop2): 2 truncates cleaned up
[  880.069672][T17077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  880.079112][T17055] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  880.093224][   T28] audit: type=1326 audit(1785570122.259:16547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17052 comm="syz.5.3490" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ad4d6e019 code=0x7ffc0000
[  880.120380][T17077] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  880.138927][T17055] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  880.518776][T16117] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  880.621701][T17089] loop2: detected capacity change from 0 to 4096
[  880.662363][T17089] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  880.896759][T17100] __nla_validate_parse: 2 callbacks suppressed
[  880.896774][T17100] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3505'.
[  880.915255][T17100] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  880.999170][T17051] Set syz1 is full, maxelem 65536 reached
[  881.131221][T14945] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  881.416616][T17115] loop7: detected capacity change from 0 to 512
[  881.516282][T17121] lo speed is unknown, defaulting to 1000
[  881.676197][T17115] EXT4-fs error (device loop7): ext4_get_branch:178: inode #11: block 4294967295: comm syz.7.3510: invalid block
[  881.746658][T17115] fserror_report: 3 callbacks suppressed
[  881.746682][T17115] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  881.774444][T17115] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.3510: invalid indirect mapped block 4294967295 (level 1)
[  881.785047][    C0] EXT4-fs (loop7): error count since last fsck: 1
[  881.785146][    C0] EXT4-fs (loop7): initial error at time 1785570125: ext4_get_branch:178: inode 11: block 4294967295
[  881.785243][    C0] EXT4-fs (loop7): last error at time 1785570125: ext4_get_branch:178: inode 11: block 4294967295
[  881.879617][T17115] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  881.883725][T17115] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.3510: invalid indirect mapped block 4294967295 (level 1)
[  881.898548][T17100] loop5: detected capacity change from 0 to 512
[  881.928260][T17115] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  881.931193][T17115] EXT4-fs (loop7): 2 truncates cleaned up
[  881.958312][T17100] EXT4-fs: Ignoring removed bh option
[  881.978705][T17115] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  882.073779][T17115] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  882.113111][T17130] loop6: detected capacity change from 0 to 2048
[  882.120134][T17100] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  882.133766][T17100] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  882.163398][T17130]  loop6: p1 < > p4
[  882.174456][T17130] loop6: p4 size 722688 extends beyond EOD, truncated
[  882.184418][T17100] netlink: 'syz.5.3505': attribute type 1 has an invalid length.
[  882.275923][ T2979]  loop6: p1 < > p4
[  882.280774][ T2979] loop6: p4 size 722688 extends beyond EOD, truncated
[  882.313439][T15192] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  882.327561][T17143] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3516'.
[  882.337744][T17143] FAULT_INJECTION: forcing a failure.
[  882.337744][T17143] name failslab, interval 1, probability 0, space 0, times 0
[  882.350409][T17143] CPU: 0 UID: 0 PID: 17143 Comm: syz.6.3516 Not tainted syzkaller #0 PREEMPT(lazy) 
[  882.350438][T17143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  882.350451][T17143] Call Trace:
[  882.350459][T17143]  <TASK>
[  882.350468][T17143]  __dump_stack+0x1d/0x30
[  882.350530][T17143]  dump_stack_lvl+0x95/0xd0
[  882.350546][T17143]  dump_stack+0x15/0x1b
[  882.350569][T17143]  should_fail_ex+0x25e/0x270
[  882.350593][T17143]  should_failslab+0x8c/0xb0
[  882.350621][T17143]  kmem_cache_alloc_node_noprof+0x85/0x3d0
[  882.350709][T17143]  ? __alloc_skb+0x2db/0x6f0
[  882.350782][T17143]  ? __alloc_skb+0x2db/0x6f0
[  882.350808][T17143]  __alloc_skb+0x2db/0x6f0
[  882.350875][T17143]  ? __alloc_skb+0x205/0x6f0
[  882.350901][T17143]  netlink_alloc_large_skb+0xbf/0xf0
[  882.350925][T17143]  netlink_sendmsg+0x40c/0x6f0
[  882.350948][T17143]  ? __pfx_netlink_sendmsg+0x10/0x10
[  882.350979][T17143]  ____sys_sendmsg+0x532/0x580
[  882.351002][T17143]  ___sys_sendmsg+0x195/0x1e0
[  882.351089][T17143]  __x64_sys_sendmsg+0xd4/0x160
[  882.351194][T17143]  x64_sys_call+0x194c/0x3020
[  882.351212][T17143]  do_syscall_64+0x136/0x3c0
[  882.351274][T17143]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  882.351334][T17143] RIP: 0033:0x7f7c0e27e019
[  882.351348][T17143] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  882.351362][T17143] RSP: 002b:00007f7c0ccd7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  882.351381][T17143] RAX: ffffffffffffffda RBX: 00007f7c0e505fa0 RCX: 00007f7c0e27e019
[  882.351396][T17143] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000006
[  882.351409][T17143] RBP: 00007f7c0ccd7090 R08: 0000000000000000 R09: 0000000000000000
[  882.351485][T17143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  882.351496][T17143] R13: 00007f7c0e506038 R14: 00007f7c0e505fa0 R15: 00007fffc1701d38
[  882.351560][T17143]  </TASK>
[  882.618708][T17146] loop2: detected capacity change from 0 to 1024
[  882.625887][T17146] EXT4-fs: Ignoring removed mblk_io_submit option
[  882.656147][T17146] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  882.674387][T17146] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3513'.
[  882.683531][T17146] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3513'.
[  883.312306][T15102] udevd[15102]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory
[  883.325345][ T7671] udevd[7671]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory
[  883.374977][T17155] loop6: detected capacity change from 0 to 4096
[  883.407920][ T3259] udevd[3259]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory
[  883.436826][T17171] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3525'.
[  883.455427][T17155] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  883.660892][T17178] FAULT_INJECTION: forcing a failure.
[  883.660892][T17178] name failslab, interval 1, probability 0, space 0, times 0
[  883.680668][T17177] netlink: 'syz.5.3528': attribute type 10 has an invalid length.
[  883.746583][T17178] CPU: 0 UID: 0 PID: 17178 Comm: syz.1.3529 Not tainted syzkaller #0 PREEMPT(lazy) 
[  883.746612][T17178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  883.746622][T17178] Call Trace:
[  883.746628][T17178]  <TASK>
[  883.746673][T17178]  __dump_stack+0x1d/0x30
[  883.746695][T17178]  dump_stack_lvl+0x95/0xd0
[  883.746711][T17178]  dump_stack+0x15/0x1b
[  883.746725][T17178]  should_fail_ex+0x25e/0x270
[  883.746747][T17178]  should_failslab+0x8c/0xb0
[  883.746826][T17178]  kmem_cache_alloc_noprof+0x7f/0x3c0
[  883.746844][T17178]  ? alloc_empty_file+0x70/0x1e0
[  883.746864][T17178]  ? alloc_empty_file+0x70/0x1e0
[  883.746885][T17178]  alloc_empty_file+0x70/0x1e0
[  883.746911][T17178]  alloc_file_pseudo+0x92/0x120
[  883.746948][T17178]  sock_alloc_file+0x9c/0x1e0
[  883.747018][T17178]  do_accept+0x1e3/0x390
[  883.747046][T17178]  __sys_accept4+0xbe/0x170
[  883.747072][T17178]  __x64_sys_accept+0x42/0x50
[  883.747098][T17178]  x64_sys_call+0x2344/0x3020
[  883.747197][T17178]  do_syscall_64+0x136/0x3c0
[  883.747222][T17178]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  883.747254][T17178] RIP: 0033:0x7f48c616e019
[  883.747268][T17178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  883.747286][T17178] RSP: 002b:00007f48c4bc7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002b
[  883.747307][T17178] RAX: ffffffffffffffda RBX: 00007f48c63f5fa0 RCX: 00007f48c616e019
[  883.747343][T17178] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  883.747353][T17178] RBP: 00007f48c4bc7090 R08: 0000000000000000 R09: 0000000000000000
[  883.747364][T17178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  883.747375][T17178] R13: 00007f48c63f6038 R14: 00007f48c63f5fa0 R15: 00007fffb45c50b8
[  883.747461][T17178]  </TASK>
[  883.806168][ T7671] udevd[7671]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory
[  883.840376][T17177] team0: Port device dummy0 added
[  883.959315][T17155] ==================================================================
[  883.960147][T14945] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  883.967417][T17155] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked
[  883.983668][T17155] 
[  883.985994][T17155] read-write to 0xffff8881075cd6b8 of 8 bytes by task 16414 on cpu 0:
[  883.994145][T17155]  __xa_clear_mark+0xf5/0x1e0
[  883.998834][T17155]  __folio_end_writeback+0xf4/0x360
[  884.004038][T17155]  folio_end_writeback_no_dropbehind+0x6d/0x1d0
[  884.010281][T17155]  folio_end_writeback+0x1c/0x70
[  884.015215][T17155]  ext4_finish_bio+0x454/0x770
[  884.020011][T17155]  ext4_release_io_end+0x9f/0x1f0
[  884.025114][T17155]  ext4_end_io_end+0x18d/0x240
[  884.029868][T17155]  ext4_end_io_rsv_work+0x15b/0x1f0
[  884.035059][T17155]  process_scheduled_works+0x4d4/0x9a0
[  884.040523][T17155]  worker_thread+0x569/0x750
[  884.045125][T17155]  kthread+0x221/0x270
[  884.049185][T17155]  ret_from_fork+0x146/0x330
[  884.053772][T17155]  ret_from_fork_asm+0x1a/0x30
[  884.058549][T17155] 
[  884.060863][T17155] read to 0xffff8881075cd6b8 of 8 bytes by task 17155 on cpu 1:
[  884.068481][T17155]  xas_find_marked+0x211/0x650
[  884.073244][T17155]  filemap_get_folios_tag+0xf7/0x400
[  884.078532][T17155]  file_write_and_wait_range+0x20c/0x2f0
[  884.084159][T17155]  mmb_fsync_noflush+0x48/0x140
[  884.089006][T17155]  ext4_sync_file+0x1f2/0x6d0
[  884.093685][T17155]  vfs_fsync_range+0xc5/0xe0
[  884.098270][T17155]  ext4_buffered_write_iter+0x426/0x480
[  884.103810][T17155]  ext4_file_write_iter+0x38e/0xef0
[  884.109009][T17155]  do_iter_readv_writev+0x4f6/0x5a0
[  884.114196][T17155]  vfs_writev+0x2d1/0x8b0
[  884.118520][T17155]  __se_sys_pwritev2+0xfc/0x1c0
[  884.123363][T17155]  __x64_sys_pwritev2+0x67/0x80
[  884.128204][T17155]  x64_sys_call+0xe07/0x3020
[  884.132785][T17155]  do_syscall_64+0x136/0x3c0
[  884.137371][T17155]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  884.143259][T17155] 
[  884.145573][T17155] value changed: 0xffffc00000000000 -> 0xfe00000000000000
[  884.152662][T17155] 
[  884.154972][T17155] Reported by Kernel Concurrency Sanitizer on:
[  884.161108][T17155] CPU: 1 UID: 0 PID: 17155 Comm: syz.6.3520 Not tainted syzkaller #0 PREEMPT(lazy) 
[  884.170469][T17155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  884.180514][T17155] ==================================================================
[  884.232986][T16117] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.