last executing test programs:

1m18.691032178s ago: executing program 4 (id=176):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f00000005c0), 0x3}, 0x64, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0\x00', <r0=>0x0})
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000040)={r0, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x9}}, 0x10)
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000004c0)={r0, 0x3, 0x6, @remote}, 0x10)

1m18.192308479s ago: executing program 4 (id=181):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x47, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0}, 0x9092, 0x0, 0x43a5bd76, 0x2, 0x9, 0x6, 0x6, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0}, 0x800, 0x0, 0x800000, 0x6, 0xd4, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xf7f8000000000001, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r1, 0x0, r3, 0x0, 0x8000f28, 0x0)
splice(r2, 0x0, r1, 0x0, 0x7f, 0xe)
write(r0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
mincore(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0)
socket$unix(0x1, 0x5, 0x0)
set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0)

1m13.496383549s ago: executing program 4 (id=191):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x9}}, 0x10)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6, @remote}, 0x10)

1m13.32640307s ago: executing program 4 (id=194):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f00000000c0)={[{@nolazytime}, {@barrier_val={'barrier', 0x3d, 0x7ff}}]}, 0x1, 0xbe5, &(0x7f00000009c0)="$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")
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
mkdir(&(0x7f0000000280)='./file0\x00', 0x304)
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', r3, &(0x7f0000000080)='./file0\x00', 0x120)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x68, 0x30, 0xffff, 0x70bd2b, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x2, r2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

1m12.498814772s ago: executing program 4 (id=197):
unshare(0x2040400)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, 0x0, 0x0)
timer_create(0x2, 0x0, &(0x7f0000000200)=<r0=>0x0)
clock_gettime(0x0, &(0x7f0000000140)={<r1=>0x0, <r2=>0x0})
timer_settime(r0, 0x0, &(0x7f0000000180)={{r1, r2+60000000}, {0x0, 0x3938700}}, 0x0)
timer_gettime(r0, &(0x7f00000002c0))
unshare(0x400)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe", @ANYRES64], 0x24}}, 0x4000000)
r3 = socket(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000100)=""/83, 0x53, 0x4000000500)
unshare(0x40000)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)={0x16c, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0xc0, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0xa4, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT={0x88, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0xb}}, {0x14, 0x4, @empty}}}]}, @CTA_EXPECT_NAT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x43}}}}]}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}]}, 0x16c}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x34, 0xb, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xcaf}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x30000004}, 0x10)
sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400})

1m9.137384511s ago: executing program 4 (id=207):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a340000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000000a00038004000080140000001100010000000000000000000100000a"], 0x5c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x10000006, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
r1 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xb}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xffe0, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008040}, 0x24000000)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', r2, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3)
exit(0x3)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1)
sendmsg$NL80211_CMD_STOP_AP(r5, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r6, 0x4, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4044}, 0x4044044)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000002000000080003"], 0x34}}, 0x884)

1m9.096434564s ago: executing program 32 (id=207):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a340000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000000a00038004000080140000001100010000000000000000000100000a"], 0x5c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x10000006, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
r1 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xb}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xffe0, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008040}, 0x24000000)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', r2, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3)
exit(0x3)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1)
sendmsg$NL80211_CMD_STOP_AP(r5, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r6, 0x4, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4044}, 0x4044044)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000002000000080003"], 0x34}}, 0x884)

44.766745477s ago: executing program 1 (id=328):
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="796100e8ff00fedbdf257e586d68a7009900070000001700000008b87af76ea539f13796e5f61955511ed3e6b6704c3b5407b012f59d042f0ef70851366b02f7c67bfb67b90fb45a5ea75ae47dd0caa77672eab8aca3d56b2f3971d1afcdad2f884d9aaa70"], 0x20}, 0x1, 0x0, 0x0, 0x8004800}, 0x8)

43.480516998s ago: executing program 1 (id=345):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0)
bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x3, 0x0, 0x500, 0x0, 0x54, 0xd}, 0x9c)

42.072314076s ago: executing program 1 (id=347):
unshare(0xa000400)
shmget(0x1, 0xffffffffff000, 0x200, &(0x7f0000ffb000/0x3000)=nil)
r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
r1 = dup2(r0, r0)
connect$packet(r1, &(0x7f0000000140)={0x11, 0xc, 0x0, 0x1, 0x6}, 0x14)
syz_io_uring_setup(0x25ef, &(0x7f0000000340)={0x0, 0xb416, 0x200, 0x0, 0x21b, 0x0, r1}, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e25}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000280)=@gcm_128={{0x303}, "ed197fbfb5c342b6", "28852cbbbeba35380ee5190047169f9d", "2eb387e0", "11edf8da8e55bb27"}, 0x28)
r5 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x9916, 0x0, 0x0, 0x164}, &(0x7f0000000040)=<r6=>0x0, &(0x7f0000000480)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
r8 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000580)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r5, 0xf23, 0x0, 0xc, 0x0, 0x0)
r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
getsockname$llc(r9, 0x0, 0x0)

40.618073006s ago: executing program 1 (id=350):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x2c2, &(0x7f00000006c0)="$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")
keyctl$restrict_keyring(0xa, 0x0, 0x0, &(0x7f0000000000)='id:cb2e')
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8)
close(r1)
r2 = syz_clone(0x3500, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={r2, r1, 0x0, 0x0, 0x0}, 0x30)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000080)=[0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x2, 0x7, &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x67, &(0x7f0000000140)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0xfc, 0x8, 0x8, &(0x7f0000000200)}}, 0x10)
sendmsg$nl_route_sched(r1, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@gettfilter={0x6c, 0x2e, 0x200, 0x4, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xfff0, 0x8}, {0xc, 0xfff2}, {0x5, 0x4}}, [{0x8, 0xb, 0xfffffff7}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x7fff}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x101}, {0x8, 0xb, 0x7}, {0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)

40.299651709s ago: executing program 1 (id=354):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x3}, 0x64, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x9}}, 0x10)
setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0)

38.070303381s ago: executing program 1 (id=361):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_int(r0, 0x6, 0x2b, 0x0, &(0x7f0000000380))
close_range(0xffffffffffffffff, r0, 0x2)
ioctl$FIONCLEX(0xffffffffffffffff, 0x5450)
socket$can_j1939(0x1d, 0x2, 0x7)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48}, 0x4800)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000080654d970008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_audit(0x10, 0x3, 0x9)
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x4000000)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x120c042, &(0x7f0000000180)={[{@nodelalloc}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@resuid}, {@grpquota}, {@debug}, {}, {@nodiscard}, {@noauto_da_alloc}]}, 0x1, 0x5fd, &(0x7f00000005c0)="$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")
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x14, 0x0, 0x11004, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r4 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0xeae7, 0x1000, 0x6, 0x39a}, &(0x7f0000000000)=<r5=>0x0, &(0x7f0000000080)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r3, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20000044})
io_uring_enter(r4, 0x2afd, 0x308b, 0xc, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xffffffff}, 0x1c, 0x0}}], 0x1, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

38.069937451s ago: executing program 33 (id=361):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_int(r0, 0x6, 0x2b, 0x0, &(0x7f0000000380))
close_range(0xffffffffffffffff, r0, 0x2)
ioctl$FIONCLEX(0xffffffffffffffff, 0x5450)
socket$can_j1939(0x1d, 0x2, 0x7)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48}, 0x4800)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000080654d970008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_audit(0x10, 0x3, 0x9)
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x4000000)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x120c042, &(0x7f0000000180)={[{@nodelalloc}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@resuid}, {@grpquota}, {@debug}, {}, {@nodiscard}, {@noauto_da_alloc}]}, 0x1, 0x5fd, &(0x7f00000005c0)="$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")
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x14, 0x0, 0x11004, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r4 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0xeae7, 0x1000, 0x6, 0x39a}, &(0x7f0000000000)=<r5=>0x0, &(0x7f0000000080)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r3, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20000044})
io_uring_enter(r4, 0x2afd, 0x308b, 0xc, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xffffffff}, 0x1c, 0x0}}], 0x1, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

10.826357374s ago: executing program 6 (id=559):
socket$key(0xf, 0x3, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000500)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
getresgid(&(0x7f0000000080), &(0x7f00000000c0), 0x0)
execve(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f00000002c0)}, 0x4580, 0x0, 0x800000, 0x5, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socket$inet_sctp(0x2, 0x5, 0x84)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x25, 0x359, &(0x7f0000000bc0)="$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")
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x20008000)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x103801, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3312, 0x10000)
r6 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5)

7.794310362s ago: executing program 0 (id=591):
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0xff01, 0x0)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x4000080)
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x1000000, &(0x7f0000000440)={[{@nodots}, {@fat=@errors_continue}, {@fat=@time_offset={'time_offset', 0x3d, 0x4c4}}, {@nodots}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x8001}}, {@fat=@nocase}, {@dots}, {@fat=@uid}, {@nodots}, {@nodots}, {@nodots}]}, 0x1, 0x25f, &(0x7f0000000140)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e)
renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, 0x0, 0x0)

7.759694396s ago: executing program 0 (id=594):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
close(0xffffffffffffffff)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0xf, 0x5}, 0x50)
r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=0xffffffffffffffff, 0x4)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x2, 0x0, r2, 0x6, '\x00', 0x0, r3, 0x0, 0x1, 0x5}, 0x50)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000500)={'veth1_macvtap\x00', 0x1})
bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e23, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}, 0x1c)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
r4 = openat$cgroup_ro(r0, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x0, 0x0)
r5 = syz_open_dev$sg(&(0x7f0000000100), 0x10001, 0x80)
ioctl$SG_SET_COMMAND_Q(r5, 0x2271, &(0x7f0000000240)=0x1)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002e0000004f0000000000000025000000000000009500000d00000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x8, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x8000000, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f)
pidfd_getfd(r4, r0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05000000040000000c0000000b"], 0x50)
socket$inet6_tcp(0xa, 0x1, 0x0)
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0)
setsockopt$RDS_RECVERR(0xffffffffffffffff, 0x114, 0x5, &(0x7f0000000180), 0x4)
r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
fsmount(r6, 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400))
syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x58ee, 0x800, 0x200, 0x13c}, &(0x7f00000003c0)=<r8=>0x0, &(0x7f0000000200))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYRESDEC=r7], 0x0, 0x9, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

7.671163461s ago: executing program 0 (id=597):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4)
socket$kcm(0x10, 0x2, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x54}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
socket$inet_udp(0x2, 0x2, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="1400000010000100000000821bd468000300000a580000000c0a010100000000000000000a00000a0900020073797a31000000000900010073797a31000000002c000380280000800c00018006000100d10300000c000440000000002df31ab30c0005400000000000000081"], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NL80211_CMD_STOP_AP(r6, 0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0)

6.746215225s ago: executing program 0 (id=602):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
close(0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="7eba0000000000000000000000400000000000005d743133041a49ecd59c462903509846973eb081e279c0bf2dfc30b9952366fb89bdfe2b2682d9a2cca563592b7001a46b1d531e960a7b0b033874e3eb89c3f756e3114099ac58c1b84d16fc7d6f0f6e635904d1d6e184f2409de08c16d11f9f2237903287a45dd06897509f0ccd8ec898555fd93c3e7eb001a2cddec89fb81867fc1d94d291004ada561aea092e73187ad7d0a45411c9ca90056f354a53e241e33d81fd66", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000000), &(0x7f00000001c0)=0x4)
r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0x0, 0xcc}, 0x0, 0x0, 0x0, 0x8, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x200000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001a80), 0x0}, 0x20)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="e3ab36d9", @ANYRES16=r7, @ANYBLOB="8b3300000000ffdbdf250500000006001d800c0000800500040080000000"], 0x38}}, 0x0)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001200000008000800000000000800090000000100180001801400020076657468305f746f5f626f6e640000000800090000000000080006"], 0x4c}}, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1, 0x2be, &(0x7f00000002c0)="$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")
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4775000)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0xc2)
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x100000a, 0x11, r8, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x4, 0xe, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0xe}, 0x10}, 0x94)
read(r8, &(0x7f0000001400)=""/4096, 0x1000)
getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x1, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0)

6.530368476s ago: executing program 0 (id=603):
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000340))
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="1400000010000100000000000000fff30000000a50000000060a0b0400000000000000000200fffe24000480200001800700010063740000140002800800014000000002080002400000000a0900010000008030000050000900020073796a320000000014000000110001000000000000001d000500000aebccd00c70bf01d452404d3a39f31da4cd22febe3e1b1d2ada9605fb3e8742e493e90672db19d7f08c7d5d9f8c3315fc51560d8f0cac6bb4630d32f1a12cd0834dd22764c1548379745f0f642e37fc288bc70530b82b58"], 0x78}, 0x1, 0x0, 0x0, 0x24040840}, 0x0)
socket(0x400000000010, 0x3, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socket(0xa, 0x5, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
socket$inet6(0xa, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xad}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
socket$netlink(0x10, 0x3, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x380470a, &(0x7f0000000a00)={[{@quota}, {@bsdgroups}, {@lazytime}, {@errors_remount}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x46b, &(0x7f0000000a80)="$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")
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100))
ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0x4236}], 0x1, 0x0, 0x0, 0x0)
lseek(r1, 0x4, 0x47980145443ecfa1)
writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

6.418289027s ago: executing program 6 (id=606):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0)
r0 = socket$kcm(0x2a, 0x2, 0x0)
r1 = socket$inet(0x2, 0x3, 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40900}, 0x0)
setsockopt$sock_int(r1, 0x1, 0x5, &(0x7f0000000340)=0x6, 0x4)
sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0xffff, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000940b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x24008024)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x891c, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
r6 = fcntl$dupfd(r5, 0x406, r5)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xf1}]}, 0x10)
sendto$inet(r5, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x37)
sendmsg$SEG6_CMD_SET_TUNSRC(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)={0x14, 0x0, 0x100, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0xa0c5)
perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x21, 0x2, 0x2)

6.202173398s ago: executing program 0 (id=608):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0x7, 0x4)
setsockopt$inet6_buf(r0, 0x29, 0x2c, &(0x7f0000000240)="2cf719fd7e6a4215f2358376110485bf3ac7e165b66b77aaeb2d7c93dbff273ec9cf8d6201c7b04b2d0c5477fe05be93fc49ef026a807645b324b9b9db104fe200c32bbe1ff17fa05d4f3595604b5db9dbd5b479f267bf7b804c808fcb85808586d19ae583d576fcd5a8fc6b02652840d3b22bebaef689cf87a2d946adb784e8a462759273d40b7ddd6dac84e2c156ea0f4bdc012ef848d4e962eb6cc6b979baecf68683d6e736eb42b44201e3", 0xad)
bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x97f, @loopback, 0x1}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0xfffffeffdbfb9f3e, &(0x7f0000000100)={0xa, 0x4e20, 0x99, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0xc}, 0x95b0, 0x4d, 0x800020, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x77a3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
openat$ptp0(0xffffffffffffff9c, 0x0, 0x129081, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000353000/0x1000)=nil, 0x1000, 0x1000000, 0x4000010, 0xffffffffffffffff, 0x8000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
pipe2(&(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x84000)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_pid(0xffffffffffffffff, &(0x7f00000002c0), 0x12)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r4=>0x0})
connect$can_bcm(r3, &(0x7f0000001ff0)={0x1d, r4}, 0x10)
recvfrom$packet(0xffffffffffffffff, &(0x7f00000003c0)=""/77, 0x4d, 0x40000042, &(0x7f00000004c0)={0x11, 0x16, r4, 0x1, 0x3, 0x6, @local}, 0x14)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x2002, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5)
readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/73, 0xfffffd8d}], 0x1)
writev(r2, &(0x7f0000000200)=[{&(0x7f0000000100)="19", 0x3a4e1e905c56cdb7}], 0x1)
mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil)
ioctl$XFS_IOC_GET_RESBLKS(r5, 0x80105873, &(0x7f0000000340))
madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15)
socket$inet6(0xa, 0x2, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000080))
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000080)='./file1\x00', 0x4851, &(0x7f00000001c0)={[{@max_dir_size_kb}, {@commit={'commit', 0x3d, 0x5}}, {@data_err_abort}, {@errors_continue}]}, 0x0, 0x4ed, &(0x7f0000000940)="$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")
lremovexattr(&(0x7f0000000040)='./file1\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="6ff3780000000083000000"])

6.200995308s ago: executing program 34 (id=608):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0x7, 0x4)
setsockopt$inet6_buf(r0, 0x29, 0x2c, &(0x7f0000000240)="2cf719fd7e6a4215f2358376110485bf3ac7e165b66b77aaeb2d7c93dbff273ec9cf8d6201c7b04b2d0c5477fe05be93fc49ef026a807645b324b9b9db104fe200c32bbe1ff17fa05d4f3595604b5db9dbd5b479f267bf7b804c808fcb85808586d19ae583d576fcd5a8fc6b02652840d3b22bebaef689cf87a2d946adb784e8a462759273d40b7ddd6dac84e2c156ea0f4bdc012ef848d4e962eb6cc6b979baecf68683d6e736eb42b44201e3", 0xad)
bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x97f, @loopback, 0x1}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0xfffffeffdbfb9f3e, &(0x7f0000000100)={0xa, 0x4e20, 0x99, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0xc}, 0x95b0, 0x4d, 0x800020, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x77a3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
openat$ptp0(0xffffffffffffff9c, 0x0, 0x129081, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000353000/0x1000)=nil, 0x1000, 0x1000000, 0x4000010, 0xffffffffffffffff, 0x8000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
pipe2(&(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x84000)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_pid(0xffffffffffffffff, &(0x7f00000002c0), 0x12)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r4=>0x0})
connect$can_bcm(r3, &(0x7f0000001ff0)={0x1d, r4}, 0x10)
recvfrom$packet(0xffffffffffffffff, &(0x7f00000003c0)=""/77, 0x4d, 0x40000042, &(0x7f00000004c0)={0x11, 0x16, r4, 0x1, 0x3, 0x6, @local}, 0x14)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x2002, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5)
readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/73, 0xfffffd8d}], 0x1)
writev(r2, &(0x7f0000000200)=[{&(0x7f0000000100)="19", 0x3a4e1e905c56cdb7}], 0x1)
mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil)
ioctl$XFS_IOC_GET_RESBLKS(r5, 0x80105873, &(0x7f0000000340))
madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15)
socket$inet6(0xa, 0x2, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000080))
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000080)='./file1\x00', 0x4851, &(0x7f00000001c0)={[{@max_dir_size_kb}, {@commit={'commit', 0x3d, 0x5}}, {@data_err_abort}, {@errors_continue}]}, 0x0, 0x4ed, &(0x7f0000000940)="$eJzs3MtvVNUfAPDvnT6gP+DX/vi95KGMorHRSGl5LlyA0YSNiYnG4LK2hSAFDK0JkEbqI5i40PAXoO5M/Atc6caocaFxK9G1CTFdWHRhxpyZO8O0M9MXfUD7+SRTzrn33HvOufceeh5zG8CGVUw/soitEfFTRHRXojMTFCv/3J6aGPpjamIoi1Lpxd+ycrrpqYmPqkmrx23JI72FiMK7Wexqku/Y5StnB0dHRy5Wou/cHC/ke84Nnh45PXJ+4OjRgwe6jhweOLQs9Uxlmt755oXdO068cv35oZPXX/3ms1TeUr5/empiaOYRPYvMoa1hSzGKM69lnccWefZ73ba6cNaefhbWrjAsWHpq0+3qKLf/7mgrxyq647m3a4mAdadUKpU2NWytNfjJUr0sqxwArBOZJg0b0Pa63/jTU2mkOjHUOA5e324dj/IIKNX7dv6p7Gkvj2CLPZWxUccK5f+fiDg5+eeN9Imm8xAAAMvri+MRpV9+70j9juqnsqcQ/6tL9898bagnIv4VEanv+O+8//LfiHLa/0fEA3XHpB7l5nnyL86KN/Z/fujKA6nLuuR6tpL6f0/na1sz+3+19Yuetjy2rVz/juzUmdGR/fk16Y2OTSne33jq2rTal8/++GGr/It1/b/0SflX+4J5OX5tnzVBNzw4Pni39a669Vb5wl5trH8W7Vk1FLEjInY2Of7YPOdP1+zME5/ubrW/Vv+2uHEy1bOh/h+0Pnn7PJkvQOnjiMcr938yZtU/6cxDfePnXu8bu3zlqTP165P9Rw4PHOrbHKMj+/uqT0Wjb7+/9kIebBhGzH//V1a6//9o+vzXVi57svr12rHF53Ht5nstxzRLff47s5fK4c5826XB8fGL/RGd2WTj9oE7x14a7JqRPtW/d2/z9r894q/q4vauiEgP8YMR8VBE7MnL/nBEPBIRe+eo/9fPPPpaqyHkvXD/hxd1/1sFjn0X0XxX29mvPm/I+P3iAuuf7v/Bcqg33zI8OD7fr5WYq6T1gbu+gAAAAHAf2BMRWyMr7MvnOLdGobBvX8SW2gzK2PiTpy68cX648o5AT3QUqjNd3XXzof353HCKp6MG6uJp/4HyvHGpVCp1pXgav49uW9uqw4a3pUX7vzODCqxri1pHa/VGG3BfWvo6+vJ/IQNYXcvwPRrgPqX9w8a14Pa/Um/BAWumWfu/GnF7DYoCrLJm7f/lNSgHsPqM/2Hj0v5h49L+YUNa0EvySwhsPzF7S11eWfvKZNo6UIi5/wpAT0R1S/ULjnOf8OdCxPKUsG1Za9o1454WmqbZHMuRVxTmTdO+iD/EsLqBwr1RjEpgU0TM8/TWHrar1cCVlS5YuRF8srb/OwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANy9vwMAAP//AyLQjg==")
lremovexattr(&(0x7f0000000040)='./file1\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="6ff3780000000083000000"])

5.37547773s ago: executing program 6 (id=617):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
set_mempolicy(0x6005, 0x0, 0x4)
r3 = socket$kcm(0x10, 0x2, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x54}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
socket$inet_udp(0x2, 0x2, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="1400000010000100000000821bd468000300000a580000000c0a010100000000000000000a00000a0900020073797a31000000000900010073797a31000000002c000380280000800c00018006000100d10300000c000440000000002df31ab30c0005400000000000000081"], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NL80211_CMD_STOP_AP(r6, 0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0)

4.509297875s ago: executing program 6 (id=624):
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1a00000004000000000000000100000000800000", @ANYRES32=0x1, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32], 0x50)
r0 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000100)=@secondary)
r1 = socket(0x10, 0x3, 0x0)
socket$inet(0x2, 0x5, 0x8)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c0000000000", @ANYRES8=0x0, @ANYRES32=r1], 0x30}}, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfe}}, 0xffffffff}, 0x1c)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a"], 0x0, 0x5e, 0x0, 0x5}, 0x28)

4.377652692s ago: executing program 6 (id=625):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073114100000000008510000002000000850000005600000095000810000000009500000500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x1, @ANYBLOB="00000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, <r2=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x11, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000300000000000000f7ffffff18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000950256074aef497ceee7ec09160000000000000016402cbda7a9ac015f831130d230eaeff9669d82f7353fd7e49503375201a4fc4ab3e2c5d9ede2fd52000000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3, r1}, 0xc)

4.361922529s ago: executing program 6 (id=626):
socket$key(0xf, 0x3, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00008000"/28], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000500)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
getresgid(&(0x7f0000000080), &(0x7f00000000c0), 0x0)
execve(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f00000002c0)}, 0x4580, 0x0, 0x800000, 0x5, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socket$inet_sctp(0x2, 0x5, 0x84)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="2c6f624a5f726f6c653d80006173682ca8ea26de004d22080834ec21408c1cbd571f6191519244adb50f367988fb2727cc32238fac4fbdc332b1719e340000000004f23246a8d5ec9c21dd657ad6d91f895438297d5da5a51f2163a3aefc9a13608114683a6be3371b75c707284241970a8159ba2bec7414c90ddbdd8218b3ce593b992196b6a3cd4bc2bb6754b654ba0fa3821193cdf866d2630a60f040d612f358308919f24bccb430ad754832a2402e3b7240e7eec9ad32c333f3dca7ab50db1f0415a70ece849f03e8441be2c1c54491c7428bbfdcea758eb7de27821cbc79a45c11b52ff4b704fefa01987a8fa8be2756414f8d10f022600574c68d130d46301ff52bbd08cf61190205"], 0x25, 0x359, &(0x7f0000000bc0)="$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")
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x20008000)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x103801, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3312, 0x10000)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5)

3.093886822s ago: executing program 5 (id=631):
openat2(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x2042, 0x30, 0xa}, 0x18)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x85)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021501700001e0a05010000000000000000070000000900020073797a31"], 0x17d4}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000058000000050a01020000000000000000010020000c00024000000000000000010900010073797a310000000020000480140003"], 0xf4}}, 0x10)
r3 = syz_open_procfs(0x0, 0x0)
sendfile(r1, r3, 0x0, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4)
r6 = socket$inet6(0xa, 0x80002, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="660a000000000000811179000000000085000000cd00000095"], &(0x7f0000000000)='GPL\x00'}, 0x94)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r7 = socket$tipc(0x1e, 0x5, 0x0)
r8 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
sendmsg$tipc(r7, &(0x7f0000000400)={&(0x7f00000008c0), 0x58, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x20)
connect$inet6(r6, &(0x7f0000002140)={0xa, 0x4e28, 0x8, @mcast2, 0x5}, 0x1c)
sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x200008c0}, 0x24000000)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r9 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$KDFONTOP_SET(r9, 0x4b72, 0x0)
r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r10, 0x84, 0x7c, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x2e, 0x0, 0xc}, 0x28)

2.91065904s ago: executing program 2 (id=634):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x300, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0xffffffffffffff35, 0x19, {0x0, 0x3, 0x6, 0x5}}}, ["", "", ""]}, 0x30}}, 0x40)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000500850000008200000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4)
r4 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x0, 0x40024e}, &(0x7f0000000340)=<r5=>0x0, &(0x7f0000000040)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_TIMEOUT={0xb, 0x8, 0x0, 0x0, 0x7, &(0x7f0000000b80), 0x1, 0x40, 0x1})
io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x30)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x21, 0x5b, 0x7ff, 0xbaf0, 0x4c001, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x0, 0x0, @value=r3}, 0x50)
getsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, 0x0, &(0x7f0000000200))
creat(&(0x7f0000000280)='./file0\x00', 0x50)

2.69024433s ago: executing program 2 (id=636):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10002}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000004c0), 0x75, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000400)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, r0}, 0xc) (async, rerun: 32)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000000)={[{@noauto_da_alloc}, {@norecovery}, {@mb_optimize_scan}, {@norecovery}, {}]}, 0x1, 0x4d7, &(0x7f0000000a00)="$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") (rerun: 32)
inotify_init() (async, rerun: 64)
setresuid(0x0, 0xee01, 0x0) (async, rerun: 64)
r2 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x87) (async, rerun: 32)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000540)={'syztnl1\x00', &(0x7f0000000340)={'syztnl2\x00', <r3=>0x0, 0x4, 0x5, 0x3, 0xf7e1, 0x22, @remote, @dev={0xfe, 0x80, '\x00', 0xd}, 0x8, 0x7800, 0x1, 0x1}}) (rerun: 32)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r0, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000600)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0], <r4=>0x0, 0x68, &(0x7f00000006c0)=[{}], 0x8, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0x9c, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x7, 0x18, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x997f}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x53}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x8, 0x3d, &(0x7f00000001c0)=""/61, 0x41000, 0x0, '\x00', r3, @fallback=0x26, r2, 0x8, &(0x7f0000000580)={0x2, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x5, 0xb, 0x1}, 0x10, r4, r2, 0x3, &(0x7f0000000940)=[r0, r2, r0, r2], &(0x7f0000000980)=[{0x1, 0x1, 0xe, 0xa}, {0x4, 0x4, 0x1, 0x3}, {0x1, 0x1, 0xa, 0xa}], 0x10, 0x1}, 0x94)

2.57606997s ago: executing program 3 (id=638):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f000009f580), r0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48)
r3 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r1, r2})
sendmmsg$inet(r3, &(0x7f0000001500)=[{{0x0, 0x100000019, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x34000}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40)
recvmmsg(r3, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/54, 0x36}], 0x1}, 0x2}], 0x1, 0x140, 0x0)

2.46258997s ago: executing program 3 (id=639):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0)
r3 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r3)
keyctl$KEYCTL_MOVE(0x1e, r3, r3, r4, 0x0)
keyctl$clear(0x7, r4)
connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020200d0000000000000020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000008000000850000000600000018010000786c6c2500000000000020207b1af8ff00000000bfa100000000000007010000f8ff"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r7}, 0xc)
sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000200000000000000070000000c001600fbffffffffffffff140008"], 0x34}}, 0x0)

2.35069032s ago: executing program 3 (id=640):
syz_open_dev$loop(&(0x7f0000000100), 0x5, 0x0)
unshare(0x20040600)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r0, <r1=>0xffffffffffffffff}, 0x4)
bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000200)={r1, 0x0, 0x0}, 0x20)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r2)
r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x7, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff)
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x444, &(0x7f0000000940)=ANY=[@ANYBLOB="75746638006d61703d6f983c756661703d6e6f726d616c2c6909000000f2ff00003dda5de4d586f0df206d65656b416d6f64653d3078303030303010303071303030303030302c73657373696f6e3d307830faffffff30303030303030f4e4b4f82c6d61736b3d4d4159574b50be30c8486470722677b93165cfe6f62127553b2017754598752d977369672c7063723d303030303030303030303030303030303030332c64566e745f6d6561737572652c00000000000000006bbf4d6406b59dbc529c00000000000000fada265ab14119997600a2299d2c35a2efc1bf037787a0d801f26d335ef2ba9ac2423a358ccbb776b21e1d3b", @ANYRESDEC=0x0, @ANYRESHEX=0x0, @ANYRES64], 0xfe, 0x667, &(0x7f00000002c0)="$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")
sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x64, r4, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x1f}}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:scanner_device_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6_vti0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x40000)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)

2.324575765s ago: executing program 5 (id=641):
r0 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000bc0), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r1, 0x0)
keyctl$get_security(0x11, r0, &(0x7f0000000c00)=""/4096, 0x1000) (fail_nth: 2)

1.902165609s ago: executing program 5 (id=642):
socket$key(0xf, 0x3, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00008000"/28], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000500)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
getresgid(&(0x7f0000000080), &(0x7f00000000c0), 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f00000002c0)}, 0x4580, 0x0, 0x800000, 0x5, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socket$inet_sctp(0x2, 0x5, 0x84)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="2c6f624a5f726f6c653d80006173682ca8ea26de004d22080834ec21408c1cbd571f6191519244adb50f367988fb2727cc32238fac4fbdc332b1719e340000000004f23246a8d5ec9c21dd657ad6d91f895438297d5da5a51f2163a3aefc9a13608114683a6be3371b75c707284241970a8159ba2bec7414c90ddbdd8218b3ce593b992196b6a3cd4bc2bb6754b654ba0fa3821193cdf866d2630a60f040d612f358308919f24bccb430ad754832a2402e3b7240e7eec9ad32c333f3dca7ab50db1f0415a70ece849f03e8441be2c1c54491c7428bbfdcea758eb7de27821cbc79a45c11b52ff4b704fefa01987a8fa8be2756414f8d10f022600574c68d130d46301ff52bbd08cf61190205"], 0x25, 0x359, &(0x7f0000000bc0)="$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")
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x20008000)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x103801, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3312, 0x10000)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5)

1.592566204s ago: executing program 3 (id=643):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x188)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x3, &(0x7f0000000200)=0x20000003)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendto$inet6(r1, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c)
recvmmsg(r1, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0)

1.51524586s ago: executing program 2 (id=644):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000000)={0x2, 'dvmrp0\x00', {0xdaa1}, 0x8})
geteuid()
r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setresuid(0x0, 0xee00, 0x0)
io_uring_setup(0x4b63, &(0x7f0000000300)={0x0, 0xbfffeffb, 0x10000, 0x0, 0x3cf})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000440)={0x0, 0xfffffffc, 0xffdffff8, 0xffffffff, 0x0, "ff0000bb719b98fb73e53a0000000600"})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000005600010000000000000000000700c6c9", @ANYRES32=0x0, @ANYBLOB="200001"], 0x38}}, 0x0)
ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000740)=0x1004af)
r4 = syz_open_pts(r2, 0x0)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x13)
setrlimit(0x40000000000008, &(0x7f0000000000))
mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r1, 0x0)

1.326450477s ago: executing program 2 (id=645):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.286477829s ago: executing program 2 (id=646):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (fail_nth: 3)

488.804527ms ago: executing program 5 (id=647):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="90010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x190}}, 0x4008095)
pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="20000000010301010000000000000072d1b12a7fff0300000708000200fffff0"], 0x20}, 0x1, 0x0, 0x0, 0x20000014}, 0x4820)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34308, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x2}, 0x10732, 0x10003, 0xffffbff8, 0x2, 0x100008, 0x20005, 0x9, 0x0, 0x4, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r2, 0x0)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r4 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
connect$inet6(r4, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c)
connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e63, 0xe4, @empty, 0x7daa}, 0x1c)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000000104010400000001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x21000}, 0x8000)
sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000001240)=ANY=[@ANYBLOB="20000000010401010000000000000000050000010a0002"], 0x20}, 0x1, 0x0, 0x0, 0x10040051}, 0x4000010)
socket$netlink(0x10, 0x3, 0x8000000004)
writev(r4, &(0x7f0000000180), 0x1000000000000388)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000041401042cbd7000fcdbdf0600000000020000f408000100010000000800010000000000c8098bbc16afd9cca46d4795397e00bf7ea15aeba0d163a2b6480b1e764d7ee218ed9245b3158a941e3e264e449d15f5a5b40c3da882e0889e29f03f65578f1ef4dc696ac7e1eea46d2820f0116227becedd1d4ffb5b4f5feaedac68cd5066f4950aa0633cbe81be3afca26f09352fea306aad0422e5fccc414097a36af72356f542bebc3cd8de656d3ab7e48b71cee3a73b8c3c87d0c559640000000000"], 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x8054)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x12, r6, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680), 0x100)

432.118907ms ago: executing program 7 (id=610):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f000009f580), r0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48)
r3 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r1, r2})
recvmmsg(r3, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/54, 0x36}], 0x1}, 0x2}], 0x1, 0x140, 0x0)

290.320652ms ago: executing program 7 (id=648):
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000340))
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="1400000010000100000000000000fff30000000a50000000060a0b0400000000000000000200fffe24000480200001800700010063740000140002800800014000000002080002400000000a0900010000008030000050000900020073796a320000000014000000110001000000000000001d000500000aebccd00c70bf01d452404d3a39f31da4cd22febe3e1b1d2ada9605fb3e8742e493e90672db19d7f08c7d5d9f8c3315fc51560d8f0cac6bb4630d32f1a12cd0834dd22764c1548379745f0f642e37fc288bc70530b82b58"], 0x78}, 0x1, 0x0, 0x0, 0x24040840}, 0x0)
socket(0x400000000010, 0x3, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socket(0xa, 0x5, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
socket$inet6(0xa, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xad}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x380470a, &(0x7f0000000a00)={[{@quota}, {@bsdgroups}, {@lazytime}, {@errors_remount}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x46b, &(0x7f0000000a80)="$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")
sendmsg$NFT_BATCH(r1, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWOBJ={0x34, 0x12, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_DATA={0x20, 0x4, 0x0, 0x1, [@NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0xe}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x7fffffffffffffff}]}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100))
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x22042, 0x120)
writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

290.031581ms ago: executing program 3 (id=649):
r0 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
sendmmsg$inet6(r0, &(0x7f0000001600)=[{{&(0x7f0000000180)={0xa, 0x4e20, 0x3, @dev={0xfe, 0x80, '\x00', 0x30}, 0x5}, 0x1c, 0x0}}], 0x1, 0x888)

289.722911ms ago: executing program 5 (id=650):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054010b8008"], 0x184}}, 0x0)

238.561232ms ago: executing program 3 (id=651):
unshare(0xa000400)
shmget(0x1, 0xffffffffff000, 0x200, &(0x7f0000ffb000/0x3000)=nil)
r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
r1 = dup2(r0, r0)
connect$packet(r1, &(0x7f0000000140)={0x11, 0xc, 0x0, 0x1, 0x6}, 0x14)
syz_io_uring_setup(0x25ef, &(0x7f0000000340)={0x0, 0xb416, 0x200, 0x0, 0x21b, 0x0, r1}, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e25}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000280)=@gcm_128={{0x303}, "ed197fbfb5c342b6", "28852cbbbeba35380ee5190047169f9d", "2eb387e0", "11edf8da8e55bb27"}, 0x28)
r5 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x9916, 0x0, 0x0, 0x164}, &(0x7f0000000040)=<r6=>0x0, &(0x7f0000000480)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
r8 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000580)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r5, 0xf23, 0x0, 0xc, 0x0, 0x0)
r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
getsockname$llc(r9, 0x0, 0x0)

209.714497ms ago: executing program 5 (id=652):
syz_open_dev$loop(&(0x7f0000000100), 0x5, 0x0)
unshare(0x20040600)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r0, <r1=>0xffffffffffffffff}, 0x4)
bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000200)={r1, 0x0, 0x0}, 0x20)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r2)
r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x7, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff)
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x444, &(0x7f0000000940)=ANY=[@ANYBLOB="75746638006d61703d6f983c756661703d6e6f726d616c2c6909000000f2ff00003dda5de4d586f0df206d65656b416d6f64653d3078303030303010303071303030303030302c73657373696f6e3d307830faffffff30303030303030f4e4b4f82c6d61736b3d4d4159574b50be30c8486470722677b93165cfe6f62127553b2017754598752d977369672c7063723d303030303030303030303030303030303030332c64566e745f6d6561737572652c00000000000000006bbf4d6406b59dbc529c00000000000000fada265ab14119997600a2299d2c35a2efc1bf037787a0d801f26d335ef2ba9ac2423a358ccbb776b21e1d3b", @ANYRESDEC=0x0, @ANYRESHEX=0x0, @ANYRES64], 0xfe, 0x667, &(0x7f00000002c0)="$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")
sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x64, r4, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x1f}}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:scanner_device_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6_vti0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x40000)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)

653.62Āµs ago: executing program 7 (id=653):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x47, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0}, 0x9092, 0x0, 0x43a5bd76, 0x2, 0x9, 0x6, 0x6, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0}, 0x800, 0x0, 0x800000, 0x6, 0xd4, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xf7f8000000000001, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x8000f28, 0x0)
write(r0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
mincore(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0)
socket$unix(0x1, 0x5, 0x0)

0s ago: executing program 2 (id=654):
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10003, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
ioperm(0x7, 0x4, 0x7) (fail_nth: 1)

kernel console output (not intermixed with test programs):

9.078460][ T4443] FAT-fs (loop2): Directory bread(block 73) failed
[   89.092585][   T28] audit: type=1326 audit(1772958525.896:3606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4438 comm="syz.1.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e4254c799 code=0x7ffc0000
[   89.120634][ T4452] __vm_enough_memory: pid: 4452, comm: syz.3.252, bytes: 4503599627366400 not enough memory for the allocation
[   89.121755][ T4429] netlink: 20 bytes leftover after parsing attributes in process `syz.2.245'.
[   89.147074][ T4450] loop0: detected capacity change from 0 to 512
[   89.153415][   T28] audit: type=1326 audit(1772958526.075:3607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4428 comm="syz.2.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f57c3e5cfce code=0x7ffc0000
[   89.156274][ T4444] FAT-fs (loop1): Directory bread(block 64) failed
[   89.177524][ T4443] random: crng reseeded on system resumption
[   89.183493][ T4444] FAT-fs (loop1): Directory bread(block 65) failed
[   89.196585][ T4444] FAT-fs (loop1): Directory bread(block 66) failed
[   89.201795][ T4450] EXT4-fs: Ignoring removed oldalloc option
[   89.203153][ T4444] FAT-fs (loop1): Directory bread(block 67) failed
[   89.203184][ T4444] FAT-fs (loop1): Directory bread(block 68) failed
[   89.222231][ T4444] FAT-fs (loop1): Directory bread(block 69) failed
[   89.229253][ T4444] FAT-fs (loop1): Directory bread(block 70) failed
[   89.235841][ T4444] FAT-fs (loop1): Directory bread(block 71) failed
[   89.242690][ T4444] FAT-fs (loop1): Directory bread(block 72) failed
[   89.249328][ T4444] FAT-fs (loop1): Directory bread(block 73) failed
[   89.264745][ T4450] EXT4-fs (loop0): 1 truncate cleaned up
[   89.270819][ T4450] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   89.292813][   T28] audit: type=1326 audit(1772958526.075:3608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4428 comm="syz.2.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f57c3e9abd7 code=0x7ffc0000
[   89.316663][   T28] audit: type=1326 audit(1772958526.075:3609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4428 comm="syz.2.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f57c3e5cfce code=0x7ffc0000
[   89.340240][   T28] audit: type=1326 audit(1772958526.075:3610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4428 comm="syz.2.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57c3e9c799 code=0x7ffc0000
[   89.363735][   T28] audit: type=1326 audit(1772958526.075:3611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4428 comm="syz.2.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57c3e9c799 code=0x7ffc0000
[   89.387693][   T28] audit: type=1326 audit(1772958526.075:3612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4428 comm="syz.2.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57c3e9c799 code=0x7ffc0000
[   89.393904][ T4450] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=4450 comm=syz.0.251
[   89.411595][   T28] audit: type=1326 audit(1772958526.075:3613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4428 comm="syz.2.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57c3e9c799 code=0x7ffc0000
[   89.448482][   T28] audit: type=1326 audit(1772958526.075:3614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4428 comm="syz.2.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f57c3e9c799 code=0x7ffc0000
[   89.523987][ T4441] netlink: 20 bytes leftover after parsing attributes in process `syz.1.250'.
[   89.533819][ T4441] random: crng reseeded on system resumption
[   89.856112][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.982201][ T4490] loop1: detected capacity change from 0 to 512
[   90.073801][ T4495] loop3: detected capacity change from 0 to 4096
[   90.104556][ T4495] EXT4-fs: Ignoring removed bh option
[   90.192805][ T4495] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   90.253309][ T4505] FAULT_INJECTION: forcing a failure.
[   90.253309][ T4505] name failslab, interval 1, probability 0, space 0, times 0
[   90.401944][ T4505] CPU: 0 UID: 0 PID: 4505 Comm: syz.1.271 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[   90.402047][ T4505] Tainted: [W]=WARN
[   90.402054][ T4505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   90.402066][ T4505] Call Trace:
[   90.402072][ T4505]  <TASK>
[   90.402078][ T4505]  __dump_stack+0x1d/0x30
[   90.402111][ T4505]  dump_stack_lvl+0x95/0xd0
[   90.402191][ T4505]  dump_stack+0x15/0x1b
[   90.402219][ T4505]  should_fail_ex+0x263/0x280
[   90.402259][ T4505]  should_failslab+0x8c/0xb0
[   90.402282][ T4505]  __kvmalloc_node_noprof+0x155/0x650
[   90.402315][ T4505]  ? rhashtable_init_noprof+0x30c/0x450
[   90.402352][ T4505]  rhashtable_init_noprof+0x30c/0x450
[   90.402432][ T4505]  rhltable_init_noprof+0x1d/0x40
[   90.402466][ T4505]  nf_tables_newtable+0x522/0xea0
[   90.402551][ T4505]  nfnetlink_rcv+0xc1e/0x1720
[   90.402616][ T4505]  netlink_unicast+0x5c0/0x690
[   90.402682][ T4505]  netlink_sendmsg+0x5c8/0x6f0
[   90.402722][ T4505]  ? __pfx_netlink_sendmsg+0x10/0x10
[   90.402754][ T4505]  ____sys_sendmsg+0x563/0x5b0
[   90.402886][ T4505]  ___sys_sendmsg+0x195/0x1e0
[   90.403014][ T4505]  __x64_sys_sendmsg+0xd4/0x160
[   90.403185][ T4505]  x64_sys_call+0x194c/0x3020
[   90.403276][ T4505]  do_syscall_64+0x12c/0x370
[   90.403297][ T4505]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   90.403326][ T4505] RIP: 0033:0x7f5e4254c799
[   90.403346][ T4505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   90.403423][ T4505] RSP: 002b:00007f5e40f9f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   90.403445][ T4505] RAX: ffffffffffffffda RBX: 00007f5e427c5fa0 RCX: 00007f5e4254c799
[   90.403458][ T4505] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004
[   90.403470][ T4505] RBP: 00007f5e40f9f090 R08: 0000000000000000 R09: 0000000000000000
[   90.403482][ T4505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   90.403497][ T4505] R13: 00007f5e427c6038 R14: 00007f5e427c5fa0 R15: 00007fffc4698758
[   90.403522][ T4505]  </TASK>
[   90.911485][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   91.053988][ T4510] loop5: detected capacity change from 0 to 512
[   91.076397][ T4510] EXT4-fs: Ignoring removed oldalloc option
[   91.105390][ T4510] EXT4-fs (loop5): 1 truncate cleaned up
[   91.129646][ T4518] FAULT_INJECTION: forcing a failure.
[   91.129646][ T4518] name failslab, interval 1, probability 0, space 0, times 0
[   91.129628][ T4510] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   91.142545][ T4518] CPU: 1 UID: 0 PID: 4518 Comm: syz.0.277 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[   91.142646][ T4518] Tainted: [W]=WARN
[   91.142708][ T4518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   91.142748][ T4518] Call Trace:
[   91.142769][ T4518]  <TASK>
[   91.142791][ T4518]  __dump_stack+0x1d/0x30
[   91.142873][ T4518]  dump_stack_lvl+0x95/0xd0
[   91.142953][ T4518]  dump_stack+0x15/0x1b
[   91.143018][ T4518]  should_fail_ex+0x263/0x280
[   91.143106][ T4518]  should_failslab+0x8c/0xb0
[   91.143207][ T4518]  kmem_cache_alloc_noprof+0x66/0x400
[   91.143279][ T4518]  ? skb_clone+0x151/0x1f0
[   91.143379][ T4518]  skb_clone+0x151/0x1f0
[   91.143464][ T4518]  nfnetlink_rcv+0x316/0x1720
[   91.143612][ T4518]  ? nlmon_xmit+0x4f/0x60
[   91.143713][ T4518]  ? consume_skb+0x4b/0x160
[   91.143832][ T4518]  ? nlmon_xmit+0x4f/0x60
[   91.143947][ T4518]  ? dev_hard_start_xmit+0x3b9/0x3f0
[   91.144040][ T4518]  ? __dev_queue_xmit+0x136c/0x1f20
[   91.144166][ T4518]  ? __dev_queue_xmit+0x148/0x1f20
[   91.144309][ T4518]  ? ref_tracker_free+0x37d/0x3e0
[   91.144451][ T4518]  netlink_unicast+0x5c0/0x690
[   91.144542][ T4518]  netlink_sendmsg+0x5c8/0x6f0
[   91.144667][ T4518]  ? __pfx_netlink_sendmsg+0x10/0x10
[   91.144771][ T4518]  ____sys_sendmsg+0x563/0x5b0
[   91.144867][ T4518]  ___sys_sendmsg+0x195/0x1e0
[   91.144998][ T4518]  __x64_sys_sendmsg+0xd4/0x160
[   91.145138][ T4518]  x64_sys_call+0x194c/0x3020
[   91.145228][ T4518]  do_syscall_64+0x12c/0x370
[   91.145322][ T4518]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   91.145423][ T4518] RIP: 0033:0x7f679119c799
[   91.145476][ T4518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   91.145529][ T4518] RSP: 002b:00007f678fbef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   91.145592][ T4518] RAX: ffffffffffffffda RBX: 00007f6791415fa0 RCX: 00007f679119c799
[   91.145634][ T4518] RDX: 0000000020040004 RSI: 0000200000000000 RDI: 0000000000000003
[   91.145668][ T4518] RBP: 00007f678fbef090 R08: 0000000000000000 R09: 0000000000000000
[   91.145680][ T4518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   91.145776][ T4518] R13: 00007f6791416038 R14: 00007f6791415fa0 R15: 00007ffea87297a8
[   91.145838][ T4518]  </TASK>
[   91.366835][ T4525] loop2: detected capacity change from 0 to 512
[   91.383089][ T4510] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=4510 comm=syz.5.274
[   91.561262][ T4536] __vm_enough_memory: pid: 4536, comm: syz.3.282, bytes: 4503599627366400 not enough memory for the allocation
[   91.955935][ T4194] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   92.070492][ T4542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.283'.
[   92.100968][ T4547] netlink: 'syz.1.286': attribute type 1 has an invalid length.
[   92.116572][ T4547] netlink: 4 bytes leftover after parsing attributes in process `syz.1.286'.
[   92.128321][ T4547] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   92.140878][ T4547] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address
[   92.151312][ T4547] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[   92.265102][ T4548] loop5: detected capacity change from 0 to 512
[   92.313213][ T4554] loop2: detected capacity change from 0 to 1024
[   92.326247][ T4554] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[   92.330309][ T4542] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.336169][ T4554] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[   92.336236][ T4554] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled
[   92.367523][ T4542] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.377661][ T4554] EXT4-fs error (device loop2): ext4_get_journal_inode:5863: inode #32: comm syz.2.287: iget: special inode unallocated
[   92.390584][ T4554] loop2: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117
[   92.390736][ T4554] EXT4-fs (loop2): no journal found
[   92.399944][    C0] EXT4-fs (loop2): error count since last fsck: 1
[   92.399966][    C0] EXT4-fs (loop2): initial error at time 1772958529: ext4_get_journal_inode:5863: inode 32
[   92.400052][    C0] EXT4-fs (loop2): last error at time 1772958529: ext4_get_journal_inode:5863: inode 32
[   92.432067][ T4554] EXT4-fs (loop2): can't get journal size
[   92.442841][ T4554] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   92.459450][ T4554] EXT4-fs error (device loop2): __ext4_iget:5378: inode #15: block 1803188595: comm syz.2.287: invalid block
[   92.751015][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   92.917218][ T4566] loop5: detected capacity change from 0 to 256
[   93.308034][ T4566] FAT-fs (loop5): Directory bread(block 64) failed
[   93.314686][ T4566] FAT-fs (loop5): Directory bread(block 65) failed
[   93.321499][ T4566] FAT-fs (loop5): Directory bread(block 66) failed
[   93.328290][ T4566] FAT-fs (loop5): Directory bread(block 67) failed
[   93.334897][ T4566] FAT-fs (loop5): Directory bread(block 68) failed
[   93.341545][ T4566] FAT-fs (loop5): Directory bread(block 69) failed
[   93.348219][ T4566] FAT-fs (loop5): Directory bread(block 70) failed
[   93.354850][ T4566] FAT-fs (loop5): Directory bread(block 71) failed
[   93.361461][ T4566] FAT-fs (loop5): Directory bread(block 72) failed
[   93.368358][ T4566] FAT-fs (loop5): Directory bread(block 73) failed
[   93.397060][ T4566] netlink: 20 bytes leftover after parsing attributes in process `syz.5.289'.
[   93.407677][ T4566] random: crng reseeded on system resumption
[   93.973470][ T4588] loop0: detected capacity change from 0 to 512
[   94.042574][ T4588] ext2: Invalid gid '0x00000000ffffffff'
[   94.116901][ T4588] netlink: 4 bytes leftover after parsing attributes in process `syz.0.295'.
[   94.190683][   T28] kauditd_printk_skb: 450 callbacks suppressed
[   94.190727][   T28] audit: type=1400 audit(1772958531.124:4065): avc:  denied  { read } for  pid=4587 comm="syz.0.295" path="socket:[9407]" dev="sockfs" ino=9407 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   94.324116][ T4599] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=4599 comm=syz.1.299
[   94.356341][ T4606] FAULT_INJECTION: forcing a failure.
[   94.356341][ T4606] name failslab, interval 1, probability 0, space 0, times 0
[   94.429185][ T4606] CPU: 1 UID: 0 PID: 4606 Comm: syz.0.300 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[   94.429223][ T4606] Tainted: [W]=WARN
[   94.429303][ T4606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   94.429318][ T4606] Call Trace:
[   94.429325][ T4606]  <TASK>
[   94.429331][ T4606]  __dump_stack+0x1d/0x30
[   94.429358][ T4606]  dump_stack_lvl+0x95/0xd0
[   94.429383][ T4606]  dump_stack+0x15/0x1b
[   94.429418][ T4606]  should_fail_ex+0x263/0x280
[   94.429441][ T4606]  should_failslab+0x8c/0xb0
[   94.429465][ T4606]  kmem_cache_alloc_noprof+0x66/0x400
[   94.429495][ T4606]  ? skb_clone+0x151/0x1f0
[   94.429535][ T4606]  skb_clone+0x151/0x1f0
[   94.429567][ T4606]  __netlink_deliver_tap+0x2c9/0x500
[   94.429644][ T4606]  netlink_unicast+0x66b/0x690
[   94.429680][ T4606]  netlink_sendmsg+0x5c8/0x6f0
[   94.429711][ T4606]  ? __pfx_netlink_sendmsg+0x10/0x10
[   94.429772][ T4606]  ____sys_sendmsg+0x563/0x5b0
[   94.429819][ T4606]  ___sys_sendmsg+0x195/0x1e0
[   94.429889][ T4606]  __x64_sys_sendmsg+0xd4/0x160
[   94.429932][ T4606]  x64_sys_call+0x194c/0x3020
[   94.429960][ T4606]  do_syscall_64+0x12c/0x370
[   94.430047][ T4606]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   94.430068][ T4606] RIP: 0033:0x7f679119c799
[   94.430082][ T4606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   94.430104][ T4606] RSP: 002b:00007f678fbef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   94.430136][ T4606] RAX: ffffffffffffffda RBX: 00007f6791415fa0 RCX: 00007f679119c799
[   94.430154][ T4606] RDX: 0000000000000000 RSI: 0000200000009b40 RDI: 0000000000000005
[   94.430209][ T4606] RBP: 00007f678fbef090 R08: 0000000000000000 R09: 0000000000000000
[   94.430230][ T4606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   94.430245][ T4606] R13: 00007f6791416038 R14: 00007f6791415fa0 R15: 00007ffea87297a8
[   94.430264][ T4606]  </TASK>
[   94.430412][ T4606] netlink: 28 bytes leftover after parsing attributes in process `syz.0.300'.
[   94.979615][   T28] audit: type=1400 audit(1772958531.822:4066): avc:  denied  { write } for  pid=4623 comm="syz.1.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   95.614704][ T4648] netlink: 168 bytes leftover after parsing attributes in process `syz.2.304'.
[   95.672553][   T28] audit: type=1400 audit(1772958532.609:4067): avc:  denied  { create } for  pid=4647 comm="syz.2.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[   95.794247][   T28] audit: type=1400 audit(1772958532.729:4068): avc:  denied  { ioctl } for  pid=4647 comm="syz.2.304" path="socket:[8520]" dev="sockfs" ino=8520 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[   96.263481][   T28] audit: type=1326 audit(1772958533.197:4069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4667 comm="syz.2.307" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f57c3e9c799 code=0x0
[   96.394176][   T28] audit: type=1326 audit(1772958533.197:4070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4667 comm="syz.2.307" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f57c3e9c799 code=0x0
[   96.479050][ T4675] netlink: 10 bytes leftover after parsing attributes in process `syz.2.309'.
[   96.496951][ T4672] loop0: detected capacity change from 0 to 1024
[   96.586963][ T4672] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   96.646163][ T4683] loop2: detected capacity change from 0 to 1024
[   96.649515][ T4685] loop1: detected capacity change from 0 to 512
[   96.653618][ T4683] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a055c01c, mo2=0002]
[   96.653725][ T4683] System zones: 0-1, 3-36
[   96.654607][ T4683] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   96.774091][ T4688] syz_tun: entered promiscuous mode
[   96.774161][ T4688] macsec1: entered allmulticast mode
[   96.774175][ T4688] syz_tun: entered allmulticast mode
[   96.791711][ T4688] syz_tun: left allmulticast mode
[   96.791745][ T4688] syz_tun: left promiscuous mode
[   96.905273][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.237812][ T4698] veth0: entered promiscuous mode
[   97.237903][ T4697] veth0: left promiscuous mode
[   97.426323][ T4700] netlink: 8 bytes leftover after parsing attributes in process `syz.2.314'.
[   97.439233][ T4700] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.441178][ T4700] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.638199][   T28] audit: type=1400 audit(1772958534.563:4071): avc:  denied  { bind } for  pid=4707 comm="syz.2.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   97.726539][ T4712] netlink: 12 bytes leftover after parsing attributes in process `syz.3.318'.
[   97.770037][ T4716] loop3: detected capacity change from 0 to 512
[   97.771763][   T28] audit: type=1400 audit(1772958534.593:4072): avc:  denied  { setopt } for  pid=4707 comm="syz.2.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   97.868070][ T4724] loop2: detected capacity change from 0 to 164
[   97.991437][ T4716] EXT4-fs (loop3): 1 truncate cleaned up
[   98.011838][ T4716] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   98.058477][   T28] audit: type=1400 audit(1772958534.912:4073): avc:  denied  { bind } for  pid=4723 comm="syz.2.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   98.104606][ T4728] loop2: detected capacity change from 0 to 512
[   98.111112][   T28] audit: type=1400 audit(1772958534.912:4074): avc:  denied  { write } for  pid=4723 comm="syz.2.322" path="socket:[9518]" dev="sockfs" ino=9518 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   98.398441][ T4734] veth0: entered promiscuous mode
[   98.404149][ T4733] veth0: left promiscuous mode
[   98.459959][ T4737] lo speed is unknown, defaulting to 1000
[   98.714538][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.047763][ T4749] netlink: 12 bytes leftover after parsing attributes in process `syz.1.328'.
[   99.110818][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.195190][ T4755] netlink: 28 bytes leftover after parsing attributes in process `syz.3.330'.
[   99.207026][ T4757] __vm_enough_memory: pid: 4757, comm: syz.5.332, bytes: 4503599627366400 not enough memory for the allocation
[   99.223522][   T28] kauditd_printk_skb: 3 callbacks suppressed
[   99.223539][   T28] audit: type=1400 audit(1772958536.149:4078): avc:  denied  { getopt } for  pid=4752 comm="syz.0.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   99.299319][   T28] audit: type=1400 audit(1772958536.228:4079): avc:  denied  { create } for  pid=4756 comm="syz.5.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   99.382175][   T28] audit: type=1400 audit(1772958536.248:4080): avc:  denied  { connect } for  pid=4756 comm="syz.5.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   99.501981][ T4762] netlink: 8 bytes leftover after parsing attributes in process `syz.3.333'.
[   99.736787][ T4768] netlink: 32 bytes leftover after parsing attributes in process `syz.3.335'.
[   99.766435][ T4768] netlink: 32 bytes leftover after parsing attributes in process `syz.3.335'.
[   99.870715][   T28] audit: type=1400 audit(1772958536.787:4081): avc:  denied  { wake_alarm } for  pid=4772 comm="syz.0.337" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   99.875794][ T4773] 9p: Bad value for 'wfdno'
[   99.993172][ T4782] loop0: detected capacity change from 0 to 1024
[  100.000151][ T4780] veth0: entered promiscuous mode
[  100.005949][ T4779] veth0: left promiscuous mode
[  100.017868][   T28] audit: type=1400 audit(1772958536.937:4082): avc:  denied  { ioctl } for  pid=4783 comm="syz.5.341" path="socket:[9673]" dev="sockfs" ino=9673 ioctlcmd=0x9422 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  100.055186][ T4782] ext4: Bad value for 'barrier'
[  100.622081][ T4796] loop5: detected capacity change from 0 to 256
[  101.292223][   T28] audit: type=1326 audit(1772958537.455:4083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4789 comm="syz.5.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94815c799 code=0x7ffc0000
[  101.654556][ T4796] FAT-fs (loop5): Directory bread(block 64) failed
[  101.661262][ T4796] FAT-fs (loop5): Directory bread(block 65) failed
[  101.668020][ T4796] FAT-fs (loop5): Directory bread(block 66) failed
[  101.720399][ T4796] FAT-fs (loop5): Directory bread(block 67) failed
[  101.727466][ T4796] FAT-fs (loop5): Directory bread(block 68) failed
[  101.734099][ T4796] FAT-fs (loop5): Directory bread(block 69) failed
[  101.740791][ T4796] FAT-fs (loop5): Directory bread(block 70) failed
[  101.747512][ T4796] FAT-fs (loop5): Directory bread(block 71) failed
[  101.754271][ T4796] FAT-fs (loop5): Directory bread(block 72) failed
[  101.760911][ T4796] FAT-fs (loop5): Directory bread(block 73) failed
[  102.327163][ T4801] __vm_enough_memory: pid: 4801, comm: syz.1.347, bytes: 4503599627366400 not enough memory for the allocation
[  102.672697][   T28] audit: type=1326 audit(1772958537.455:4084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4789 comm="syz.5.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94815c799 code=0x7ffc0000
[  102.707672][   T28] audit: type=1326 audit(1772958537.455:4085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4789 comm="syz.5.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94815c799 code=0x7ffc0000
[  102.810201][   T28] audit: type=1326 audit(1772958537.455:4086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4789 comm="syz.5.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94815c799 code=0x7ffc0000
[  102.833923][   T28] audit: type=1326 audit(1772958537.525:4087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4789 comm="syz.5.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7ff94815c799 code=0x7ffc0000
[  102.957291][ T4796] netlink: 20 bytes leftover after parsing attributes in process `syz.5.344'.
[  102.994310][ T4791] random: crng reseeded on system resumption
[  103.178878][ T4808] loop1: detected capacity change from 0 to 256
[  103.188859][ T4810] netlink: 12 bytes leftover after parsing attributes in process `syz.3.351'.
[  103.198279][ T4808] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  103.278240][ T4808] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  103.466315][ T3314] FAT-fs (loop1): error, corrupted directory (invalid entries)
[  103.473995][ T3314] FAT-fs (loop1): Filesystem has been set read-only
[  103.481432][ T3314] FAT-fs (loop1): error, corrupted directory (invalid entries)
[  103.501652][ T4818] loop0: detected capacity change from 0 to 256
[  103.633780][ T4821] loop3: detected capacity change from 0 to 256
[  103.658192][ T4821] FAT-fs (loop3): Directory bread(block 64) failed
[  103.664978][ T4821] FAT-fs (loop3): Directory bread(block 65) failed
[  103.671776][ T4821] FAT-fs (loop3): Directory bread(block 66) failed
[  103.678588][ T4821] FAT-fs (loop3): Directory bread(block 67) failed
[  103.685232][ T4821] FAT-fs (loop3): Directory bread(block 68) failed
[  103.692044][ T4821] FAT-fs (loop3): Directory bread(block 69) failed
[  103.698893][ T4821] FAT-fs (loop3): Directory bread(block 70) failed
[  103.705476][ T4821] FAT-fs (loop3): Directory bread(block 71) failed
[  103.712128][ T4821] FAT-fs (loop3): Directory bread(block 72) failed
[  103.718749][ T4821] FAT-fs (loop3): Directory bread(block 73) failed
[  103.751553][ T4821] netlink: 20 bytes leftover after parsing attributes in process `syz.3.353'.
[  103.761576][ T4821] random: crng reseeded on system resumption
[  103.786627][ T4818] FAT-fs (loop0): Directory bread(block 64) failed
[  103.854838][ T4818] FAT-fs (loop0): Directory bread(block 65) failed
[  103.884003][ T4818] FAT-fs (loop0): Directory bread(block 66) failed
[  103.915916][ T4818] FAT-fs (loop0): Directory bread(block 67) failed
[  103.978955][ T4818] FAT-fs (loop0): Directory bread(block 68) failed
[  104.052266][ T4818] FAT-fs (loop0): Directory bread(block 69) failed
[  104.130486][ T4818] FAT-fs (loop0): Directory bread(block 70) failed
[  104.248327][ T4818] FAT-fs (loop0): Directory bread(block 71) failed
[  104.310242][ T4818] FAT-fs (loop0): Directory bread(block 72) failed
[  104.376187][ T4818] FAT-fs (loop0): Directory bread(block 73) failed
[  104.388991][   T28] kauditd_printk_skb: 605 callbacks suppressed
[  104.389005][   T28] audit: type=1400 audit(1772958541.297:4693): avc:  denied  { name_bind } for  pid=4825 comm="syz.2.356" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[  104.421853][ T4827] ˛˙: renamed from team_slave_1 (while UP)
[  104.519223][   T28] audit: type=1400 audit(1772958541.327:4694): avc:  denied  { read write } for  pid=4825 comm="syz.2.356" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  104.569409][ T4818] netlink: 20 bytes leftover after parsing attributes in process `syz.0.349'.
[  104.592515][ T4818] random: crng reseeded on system resumption
[  104.658983][   T28] audit: type=1400 audit(1772958541.327:4695): avc:  denied  { open } for  pid=4825 comm="syz.2.356" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  104.754866][   T28] audit: type=1326 audit(1772958541.387:4696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4812 comm="syz.3.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f293143c799 code=0x7ffc0000
[  105.061634][ T4833] netlink: 'syz.2.358': attribute type 4 has an invalid length.
[  105.100971][   T28] audit: type=1326 audit(1772958541.477:4697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4805 comm="syz.0.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f679115cfce code=0x7ffc0000
[  105.220566][ T4833] netlink: 152 bytes leftover after parsing attributes in process `syz.2.358'.
[  105.280614][   T28] audit: type=1326 audit(1772958541.477:4698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4805 comm="syz.0.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f679119abd7 code=0x7ffc0000
[  105.360890][ T4833] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  105.415451][   T28] audit: type=1326 audit(1772958541.477:4699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4805 comm="syz.0.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f679115cfce code=0x7ffc0000
[  105.496681][   T28] audit: type=1326 audit(1772958541.477:4700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4805 comm="syz.0.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f679119c799 code=0x7ffc0000
[  105.532715][ T4843] loop3: detected capacity change from 0 to 512
[  105.549708][   T28] audit: type=1326 audit(1772958541.477:4701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4805 comm="syz.0.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f679119c799 code=0x7ffc0000
[  105.581972][   T28] audit: type=1326 audit(1772958541.477:4702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4805 comm="syz.0.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f679119c799 code=0x7ffc0000
[  105.617203][ T4843] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  105.680344][ T4843] ext4 filesystem being mounted at /73/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  105.747751][   T50] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.866911][   T50] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.927628][   T50] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.953022][ T4858] new mount options do not match the existing superblock, will be ignored
[  105.979074][ T4848] lo speed is unknown, defaulting to 1000
[  106.003295][   T50] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.009862][ T4858] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 ""
[  106.320645][ T4848] chnl_net:caif_netlink_parms(): no params data found
[  106.353967][   T50] bridge_slave_1: left allmulticast mode
[  106.359844][   T50] bridge_slave_1: left promiscuous mode
[  106.368281][   T50] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.438951][   T50] bridge_slave_0: left allmulticast mode
[  106.462662][   T50] bridge_slave_0: left promiscuous mode
[  106.482855][   T50] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.871492][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.937744][ T4871] loop5: detected capacity change from 0 to 1024
[  107.027466][ T4871] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  107.051909][ T4871] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  107.114144][ T4884] netlink: 'syz.2.370': attribute type 1 has an invalid length.
[  107.124133][   T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  107.144139][   T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  107.163981][   T50] bond0 (unregistering): Released all slaves
[  107.172546][   T50] bond1 (unregistering): Released all slaves
[  107.253638][ T4194] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.338392][   T50] hsr_slave_0: left promiscuous mode
[  107.354312][   T50] hsr_slave_1: left promiscuous mode
[  107.361576][   T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  107.379700][   T50] batman_adv: batadv0: Removing interface: batadv_slave_0
[  107.395190][   T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  107.402727][   T50] batman_adv: batadv0: Removing interface: batadv_slave_1
[  107.416388][   T50] veth1_macvtap: left promiscuous mode
[  107.421907][   T50] veth0_macvtap: left promiscuous mode
[  107.428685][   T50] veth1_vlan: left promiscuous mode
[  107.433948][   T50] veth0_vlan: left promiscuous mode
[  108.029248][   T50] team0 (unregistering): Port device team_slave_1 removed
[  108.054111][   T50] team0 (unregistering): Port device team_slave_0 removed
[  108.115513][ T4848] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.122877][ T4848] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.131004][ T4848] bridge_slave_0: entered allmulticast mode
[  108.137833][ T4848] bridge_slave_0: entered promiscuous mode
[  108.147634][ T4901] ip6gretap1: entered promiscuous mode
[  108.153266][ T4901] ip6gretap1: entered allmulticast mode
[  108.160736][ T4909] veth0: entered promiscuous mode
[  108.167959][ T4907] veth0: left promiscuous mode
[  108.180071][ T4848] bridge0: port 2(bridge_slave_1) entered blocking state
[  108.187496][ T4848] bridge0: port 2(bridge_slave_1) entered disabled state
[  108.194749][ T4848] bridge_slave_1: entered allmulticast mode
[  108.203126][ T4848] bridge_slave_1: entered promiscuous mode
[  108.257484][ T4848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  108.298744][ T4926] FAULT_INJECTION: forcing a failure.
[  108.298744][ T4926] name failslab, interval 1, probability 0, space 0, times 0
[  108.317684][ T4848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  108.346245][ T4926] CPU: 0 UID: 0 PID: 4926 Comm: syz.3.375 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  108.346282][ T4926] Tainted: [W]=WARN
[  108.346291][ T4926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  108.346374][ T4926] Call Trace:
[  108.346380][ T4926]  <TASK>
[  108.346387][ T4926]  __dump_stack+0x1d/0x30
[  108.346422][ T4926]  dump_stack_lvl+0x95/0xd0
[  108.346453][ T4926]  dump_stack+0x15/0x1b
[  108.346478][ T4926]  should_fail_ex+0x263/0x280
[  108.346566][ T4926]  should_failslab+0x8c/0xb0
[  108.346587][ T4926]  kmem_cache_alloc_noprof+0x66/0x400
[  108.346608][ T4926]  ? skb_clone+0x151/0x1f0
[  108.346645][ T4926]  skb_clone+0x151/0x1f0
[  108.346787][ T4926]  __netlink_deliver_tap+0x2c9/0x500
[  108.346828][ T4926]  netlink_unicast+0x66b/0x690
[  108.346960][ T4926]  netlink_sendmsg+0x5c8/0x6f0
[  108.346998][ T4926]  ? __pfx_netlink_sendmsg+0x10/0x10
[  108.347035][ T4926]  ____sys_sendmsg+0x563/0x5b0
[  108.347123][ T4926]  ___sys_sendmsg+0x195/0x1e0
[  108.347173][ T4926]  __x64_sys_sendmsg+0xd4/0x160
[  108.347213][ T4926]  x64_sys_call+0x194c/0x3020
[  108.347314][ T4926]  do_syscall_64+0x12c/0x370
[  108.347335][ T4926]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  108.347358][ T4926] RIP: 0033:0x7f293143c799
[  108.347376][ T4926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  108.347396][ T4926] RSP: 002b:00007f292fe8f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  108.347415][ T4926] RAX: ffffffffffffffda RBX: 00007f29316b5fa0 RCX: 00007f293143c799
[  108.347429][ T4926] RDX: 0000000000040000 RSI: 0000200000000080 RDI: 0000000000000003
[  108.347443][ T4926] RBP: 00007f292fe8f090 R08: 0000000000000000 R09: 0000000000000000
[  108.347473][ T4926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  108.347485][ T4926] R13: 00007f29316b6038 R14: 00007f29316b5fa0 R15: 00007ffce6028548
[  108.347503][ T4926]  </TASK>
[  108.587573][ T4848] team0: Port device team_slave_0 added
[  108.594462][ T4848] team0: Port device team_slave_1 added
[  108.610466][ T4848] batman_adv: batadv0: Adding interface: batadv_slave_0
[  108.617542][ T4848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  108.643808][ T4848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  108.671260][ T4848] batman_adv: batadv0: Adding interface: batadv_slave_1
[  108.679202][ T4848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  108.722301][ T4848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  108.755209][ T4848] hsr_slave_0: entered promiscuous mode
[  108.761631][ T4848] hsr_slave_1: entered promiscuous mode
[  108.842358][ T4934] lo speed is unknown, defaulting to 1000
[  108.863501][ T4934] lo speed is unknown, defaulting to 1000
[  108.873626][ T4934] lo speed is unknown, defaulting to 1000
[  108.949101][ T4956] netlink: 12 bytes leftover after parsing attributes in process `syz.0.381'.
[  108.958381][ T4848] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  108.973081][ T4848] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  108.988966][ T4848] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  108.996057][ T4934] infiniband syU×: set active
[  109.000980][ T4934] infiniband syU×: added lo
[  109.012287][   T23] lo speed is unknown, defaulting to 1000
[  109.019317][ T4848] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  109.039807][ T4934] RDS/IB: syU×: added
[  109.046121][ T4934] smc: adding ib device syU× with port count 1
[  109.052749][ T4934] smc:    ib device syU× port 1 has no pnetid
[  109.060252][   T23] lo speed is unknown, defaulting to 1000
[  109.066399][ T4934] lo speed is unknown, defaulting to 1000
[  109.177967][ T4848] 8021q: adding VLAN 0 to HW filter on device bond0
[  109.196010][ T4934] lo speed is unknown, defaulting to 1000
[  109.222395][ T4848] 8021q: adding VLAN 0 to HW filter on device team0
[  109.243573][  T310] bridge0: port 1(bridge_slave_0) entered blocking state
[  109.250809][  T310] bridge0: port 1(bridge_slave_0) entered forwarding state
[  109.272553][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  109.279771][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  109.355769][ T4934] lo speed is unknown, defaulting to 1000
[  109.417037][ T4991] loop0: detected capacity change from 0 to 128
[  109.431401][ T4984] loop2: detected capacity change from 0 to 1024
[  109.480148][ T4984] __quota_error: 141 callbacks suppressed
[  109.480164][ T4984] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5
[  109.496331][ T4848] 8021q: adding VLAN 0 to HW filter on device batadv0
[  109.526395][ T4934] lo speed is unknown, defaulting to 1000
[  109.570722][ T4984] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0
[  109.590786][ T5007] loop5: detected capacity change from 0 to 164
[  109.628386][ T5007] Unable to read rock-ridge attributes
[  109.649329][ T5007] Unable to read rock-ridge attributes
[  109.650350][ T4984] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.380: Failed to acquire dquot type 0
[  109.668366][ T5007] Unable to read rock-ridge attributes
[  109.704472][ T5007] iso9660: Corrupted directory entry in block 4 of inode 1792
[  109.705357][ T4984] loop2: lost filesystem error report for type 5 error -117
[  109.719192][ T4934] lo speed is unknown, defaulting to 1000
[  109.732942][ T4984] EXT4-fs error (device loop2): mb_free_blocks:2047: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt.
[  109.747510][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  109.747532][    C1] EXT4-fs (loop2): initial error at time 1772958546: ext4_acquire_dquot:7001
[  109.747560][    C1] EXT4-fs (loop2): last error at time 1772958546: ext4_acquire_dquot:7001
[  109.776183][ T4984] EXT4-fs (loop2): 1 truncate cleaned up
[  109.793238][ T4984] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  109.817071][ T4984] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.879245][ T4848] veth0_vlan: entered promiscuous mode
[  109.887267][ T5032] FAULT_INJECTION: forcing a failure.
[  109.887267][ T5032] name failslab, interval 1, probability 0, space 0, times 0
[  109.906222][ T5034] __vm_enough_memory: pid: 5034, comm: syz.0.388, bytes: 4503599627366400 not enough memory for the allocation
[  109.920063][ T4848] veth1_vlan: entered promiscuous mode
[  109.928122][ T5032] CPU: 1 UID: 0 PID: 5032 Comm: syz.5.387 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  109.928212][ T5032] Tainted: [W]=WARN
[  109.928220][ T5032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  109.928232][ T5032] Call Trace:
[  109.928239][ T5032]  <TASK>
[  109.928251][ T5032]  __dump_stack+0x1d/0x30
[  109.928380][ T5032]  dump_stack_lvl+0x95/0xd0
[  109.928410][ T5032]  dump_stack+0x15/0x1b
[  109.928431][ T5032]  should_fail_ex+0x263/0x280
[  109.928459][ T5032]  should_failslab+0x8c/0xb0
[  109.928480][ T5032]  kmem_cache_alloc_noprof+0x66/0x400
[  109.928534][ T5032]  ? skb_clone+0x151/0x1f0
[  109.928571][ T5032]  skb_clone+0x151/0x1f0
[  109.928607][ T5032]  __netlink_deliver_tap+0x2c9/0x500
[  109.928643][ T5032]  netlink_unicast+0x66b/0x690
[  109.928704][ T5032]  netlink_sendmsg+0x5c8/0x6f0
[  109.928737][ T5032]  ? __pfx_netlink_sendmsg+0x10/0x10
[  109.928774][ T5032]  ____sys_sendmsg+0x563/0x5b0
[  109.928956][ T5032]  ___sys_sendmsg+0x195/0x1e0
[  109.929004][ T5032]  __x64_sys_sendmsg+0xd4/0x160
[  109.929104][ T5032]  x64_sys_call+0x194c/0x3020
[  109.929139][ T5032]  do_syscall_64+0x12c/0x370
[  109.929167][ T5032]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.929203][ T5032] RIP: 0033:0x7ff94815c799
[  109.929223][ T5032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  109.929240][ T5032] RSP: 002b:00007ff946bb7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  109.929259][ T5032] RAX: ffffffffffffffda RBX: 00007ff9483d5fa0 RCX: 00007ff94815c799
[  109.929273][ T5032] RDX: 0000000000040000 RSI: 0000200000000080 RDI: 0000000000000003
[  109.929285][ T5032] RBP: 00007ff946bb7090 R08: 0000000000000000 R09: 0000000000000000
[  109.929362][ T5032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  109.929378][ T5032] R13: 00007ff9483d6038 R14: 00007ff9483d5fa0 R15: 00007ffc126368c8
[  109.929402][ T5032]  </TASK>
[  110.137948][ T4848] veth0_macvtap: entered promiscuous mode
[  110.150865][ T4848] veth1_macvtap: entered promiscuous mode
[  110.181781][ T4848] batman_adv: batadv0: Interface activated: batadv_slave_0
[  110.193215][ T4848] batman_adv: batadv0: Interface activated: batadv_slave_1
[  110.349522][  T118] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  110.442988][  T118] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  110.464665][ T5046] loop2: detected capacity change from 0 to 512
[  110.464680][  T118] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  110.464717][  T118] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  110.488949][ T5046] EXT4-fs: Ignoring removed oldalloc option
[  110.527643][ T5046] EXT4-fs (loop2): 1 truncate cleaned up
[  110.540975][ T5052] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5052 comm=syz.6.362
[  110.557347][ T5046] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  110.582754][ T5041] loop3: detected capacity change from 0 to 512
[  110.603215][ T5041] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities
[  111.019840][ T5068] __vm_enough_memory: pid: 5068, comm: syz.6.396, bytes: 4503599627366400 not enough memory for the allocation
[  111.173339][ T5072] loop5: detected capacity change from 0 to 164
[  111.195792][ T5072] Unable to read rock-ridge attributes
[  111.207809][ T5072] Unable to read rock-ridge attributes
[  111.214682][ T5072] Unable to read rock-ridge attributes
[  111.220660][   T28] audit: type=1400 audit(1772958548.127:4844): avc:  denied  { setopt } for  pid=5073 comm="syz.0.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  111.241762][ T5072] iso9660: Corrupted directory entry in block 4 of inode 1792
[  111.300180][ T5080] netlink: 4 bytes leftover after parsing attributes in process `syz.3.401'.
[  111.383883][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.385127][ T5084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.403'.
[  111.642683][ T5098] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=5098 comm=syz.3.409
[  111.681844][ T5099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.404'.
[  112.112647][   T28] audit: type=1400 audit(1772958549.016:4845): avc:  denied  { setopt } for  pid=5110 comm="syz.3.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  112.158423][ T5109] syz.2.412 (5109) used greatest stack depth: 9064 bytes left
[  112.197205][   T28] audit: type=1400 audit(1772958549.096:4846): avc:  denied  { mount } for  pid=5110 comm="syz.3.413" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[  112.243741][   T28] audit: type=1400 audit(1772958549.096:4847): avc:  denied  { watch } for  pid=5110 comm="syz.3.413" path="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=dir permissive=1
[  113.809137][ T5145] netlink: 8 bytes leftover after parsing attributes in process `syz.3.421'.
[  113.967159][   T28] audit: type=1400 audit(1772958550.854:4848): avc:  denied  { create } for  pid=5146 comm="syz.0.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  114.015935][ T5148] lo speed is unknown, defaulting to 1000
[  114.022127][ T5148] lo speed is unknown, defaulting to 1000
[  114.047034][   T28] audit: type=1400 audit(1772958550.854:4849): avc:  denied  { setopt } for  pid=5146 comm="syz.0.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  114.088245][ T5153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  114.113201][   T28] audit: type=1400 audit(1772958550.944:4850): avc:  denied  { create } for  pid=5152 comm="syz.5.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  114.128820][ T5153] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  114.208891][ T5168] loop5: detected capacity change from 0 to 512
[  114.223744][ T5168] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  114.243533][ T5168] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2
[  114.276479][ T5168] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2
[  114.406192][ T5168] EXT4-fs (loop5): 1 truncate cleaned up
[  114.412345][ T5168] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  114.449418][ T5153] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters
[  114.465011][   T28] audit: type=1400 audit(1772958551.344:4851): avc:  denied  { create } for  pid=5152 comm="syz.5.424" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  114.494669][ T5153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  114.503252][ T5153] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  114.648922][ T5179] netlink: 56 bytes leftover after parsing attributes in process `syz.2.431'.
[  114.705053][ T5184] loop0: detected capacity change from 0 to 512
[  114.713532][ T5184] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #17: comm syz.0.433: iget: immutable or append flags not allowed on symlinks
[  114.728179][ T5184] loop0: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117
[  114.728309][ T5184] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.433: couldn't read orphan inode 17 (err -117)
[  114.737539][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  114.737559][    C0] EXT4-fs (loop0): initial error at time 1772958551: ext4_orphan_get:1391: inode 17
[  114.737594][    C0] EXT4-fs (loop0): last error at time 1772958551: ext4_orphan_get:1391: inode 17
[  114.778709][ T5184] loop0: lost filesystem error report for type 5 error -117
[  114.779301][ T5184] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  114.800276][ T5184] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.433: bg 0: block 7: invalid block bitmap
[  114.845076][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.242514][   T28] audit: type=1400 audit(1772958552.133:4852): avc:  denied  { create } for  pid=5190 comm="syz.0.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  115.312891][ T4194] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.367912][   T28] audit: type=1400 audit(1772958552.133:4853): avc:  denied  { write } for  pid=5190 comm="syz.0.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  115.661280][ T5208] loop5: detected capacity change from 0 to 512
[  115.674823][ T5210] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=5210 comm=syz.6.442
[  115.691547][   T28] audit: type=1400 audit(1772958552.582:4854): avc:  denied  { cpu } for  pid=5203 comm="syz.3.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  115.826512][   T28] audit: type=1400 audit(1772958552.702:4855): avc:  denied  { create } for  pid=5218 comm="" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  115.850048][ T5221] loop6: detected capacity change from 0 to 512
[  115.862319][   T28] audit: type=1400 audit(1772958552.702:4856): avc:  denied  { write } for  pid=5218 comm="" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  115.892420][ T5225] netlink: 'syz.2.447': attribute type 10 has an invalid length.
[  115.892469][ T5225] netlink: 2 bytes leftover after parsing attributes in process `syz.2.447'.
[  115.892707][ T5225] bond0: entered promiscuous mode
[  115.892798][ T5225] bond_slave_0: entered promiscuous mode
[  115.893750][ T5225] bond_slave_1: entered promiscuous mode
[  115.896784][ T5225] bridge0: port 3(bond0) entered blocking state
[  115.897172][ T5225] bridge0: port 3(bond0) entered disabled state
[  115.898275][ T5225] bond0: entered allmulticast mode
[  115.898324][ T5225] bond_slave_0: entered allmulticast mode
[  115.898394][ T5225] bond_slave_1: entered allmulticast mode
[  115.911152][   T28] audit: type=1326 audit(1772958552.722:4857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5220 comm="syz.6.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f160ad6c799 code=0x7ffc0000
[  115.911183][   T28] audit: type=1326 audit(1772958552.722:4858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5220 comm="syz.6.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f160ad6c799 code=0x7ffc0000
[  115.911263][   T28] audit: type=1326 audit(1772958552.722:4859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5220 comm="syz.6.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f160ad6c799 code=0x7ffc0000
[  115.911297][   T28] audit: type=1326 audit(1772958552.722:4860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5220 comm="syz.6.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f160ad6c799 code=0x7ffc0000
[  115.911329][   T28] audit: type=1326 audit(1772958552.722:4861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5220 comm="syz.6.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f160ad6c799 code=0x7ffc0000
[  115.914763][ T5221] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #11: comm syz.6.445: iget: bad extra_isize 90 (inode size 256)
[  115.914800][ T5221] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  115.916227][ T5221] EXT4-fs (loop6): Remounting filesystem read-only
[  115.916259][ T5221] EXT4-fs warning (device loop6): ext4_evict_inode:258: couldn't mark inode dirty (err -30)
[  115.916300][ T5221] EXT4-fs (loop6): 1 orphan inode deleted
[  115.916724][ T5221] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  115.917345][ T5221] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.245603][ T5238] loop5: detected capacity change from 0 to 128
[  117.357965][ T5258] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=5258 comm=syz.6.456
[  117.372771][ T5259] loop2: detected capacity change from 0 to 164
[  117.380728][ T5259] Unable to read rock-ridge attributes
[  117.387345][ T5259] Unable to read rock-ridge attributes
[  117.401740][ T5259] Unable to read rock-ridge attributes
[  117.428537][ T5259] iso9660: Corrupted directory entry in block 4 of inode 1792
[  118.092240][ T5294] FAULT_INJECTION: forcing a failure.
[  118.092240][ T5294] name failslab, interval 1, probability 0, space 0, times 0
[  118.146625][ T5297] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=5297 comm=syz.0.470
[  118.214567][ T5294] CPU: 0 UID: 0 PID: 5294 Comm: syz.3.469 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  118.214601][ T5294] Tainted: [W]=WARN
[  118.214607][ T5294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  118.214620][ T5294] Call Trace:
[  118.214627][ T5294]  <TASK>
[  118.214686][ T5294]  __dump_stack+0x1d/0x30
[  118.214717][ T5294]  dump_stack_lvl+0x95/0xd0
[  118.214743][ T5294]  dump_stack+0x15/0x1b
[  118.214764][ T5294]  should_fail_ex+0x263/0x280
[  118.214860][ T5294]  ? ip_set_create+0x1ec/0x970
[  118.214892][ T5294]  should_failslab+0x8c/0xb0
[  118.214920][ T5294]  __kmalloc_cache_noprof+0x5f/0x410
[  118.215018][ T5294]  ip_set_create+0x1ec/0x970
[  118.215063][ T5294]  ? __nla_parse+0x40/0x60
[  118.215094][ T5294]  nfnetlink_rcv_msg+0x509/0x5d0
[  118.215153][ T5294]  netlink_rcv_skb+0x123/0x220
[  118.215180][ T5294]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  118.215213][ T5294]  nfnetlink_rcv+0x167/0x1720
[  118.215237][ T5294]  ? consume_skb+0x4b/0x160
[  118.215281][ T5294]  ? __dev_queue_xmit+0x148/0x1f20
[  118.215317][ T5294]  ? preempt_schedule_common+0x11/0x30
[  118.215344][ T5294]  ? preempt_schedule_thunk+0x16/0x30
[  118.215423][ T5294]  ? __dev_queue_xmit+0x148/0x1f20
[  118.215471][ T5294]  ? __local_bh_enable_ip+0x5f/0x80
[  118.215492][ T5294]  ? __dev_queue_xmit+0x136c/0x1f20
[  118.215523][ T5294]  ? __dev_queue_xmit+0x148/0x1f20
[  118.215558][ T5294]  ? ref_tracker_free+0x37d/0x3e0
[  118.215623][ T5294]  ? _raw_spin_lock+0x52/0xa0
[  118.215653][ T5294]  ? __list_del_entry_valid_or_report+0x65/0x130
[  118.215776][ T5294]  ? _raw_spin_unlock_irqrestore+0x9/0x30
[  118.215808][ T5294]  ? rcu_preempt_deferred_qs_irqrestore+0x3dd/0x5c0
[  118.215845][ T5294]  ? rcu_read_unlock_special+0x9f/0x200
[  118.215871][ T5294]  netlink_unicast+0x5c0/0x690
[  118.215958][ T5294]  netlink_sendmsg+0x5c8/0x6f0
[  118.215999][ T5294]  ? __pfx_netlink_sendmsg+0x10/0x10
[  118.216031][ T5294]  ____sys_sendmsg+0x563/0x5b0
[  118.216128][ T5294]  ___sys_sendmsg+0x195/0x1e0
[  118.216168][ T5294]  __x64_sys_sendmsg+0xd4/0x160
[  118.216243][ T5294]  x64_sys_call+0x194c/0x3020
[  118.216270][ T5294]  do_syscall_64+0x12c/0x370
[  118.216356][ T5294]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.216506][ T5294] RIP: 0033:0x7f293143c799
[  118.216523][ T5294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  118.216543][ T5294] RSP: 002b:00007f292fe8f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  118.216567][ T5294] RAX: ffffffffffffffda RBX: 00007f29316b5fa0 RCX: 00007f293143c799
[  118.216584][ T5294] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003
[  118.216599][ T5294] RBP: 00007f292fe8f090 R08: 0000000000000000 R09: 0000000000000000
[  118.216616][ T5294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  118.216675][ T5294] R13: 00007f29316b6038 R14: 00007f29316b5fa0 R15: 00007ffce6028548
[  118.216694][ T5294]  </TASK>
[  118.706902][ T5304] loop0: detected capacity change from 0 to 4096
[  118.710264][ T5307] FAULT_INJECTION: forcing a failure.
[  118.710264][ T5307] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  118.769579][ T5309] loop3: detected capacity change from 0 to 512
[  118.776408][ T5309] EXT4-fs: Ignoring removed mblk_io_submit option
[  118.799618][ T5307] CPU: 1 UID: 0 PID: 5307 Comm: syz.2.474 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  118.799659][ T5307] Tainted: [W]=WARN
[  118.799668][ T5307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  118.799681][ T5307] Call Trace:
[  118.799703][ T5307]  <TASK>
[  118.799711][ T5307]  __dump_stack+0x1d/0x30
[  118.799742][ T5307]  dump_stack_lvl+0x95/0xd0
[  118.799772][ T5307]  dump_stack+0x15/0x1b
[  118.799801][ T5307]  should_fail_ex+0x263/0x280
[  118.799846][ T5307]  should_fail+0xb/0x20
[  118.799900][ T5307]  should_fail_usercopy+0x1a/0x20
[  118.800029][ T5307]  _copy_from_user+0x1c/0xb0
[  118.800099][ T5307]  input_event_from_user+0x5e/0x190
[  118.800181][ T5307]  ? input_inject_event+0x104/0x120
[  118.800211][ T5307]  evdev_write+0x1b0/0x2b0
[  118.800309][ T5307]  ? __pfx_evdev_write+0x10/0x10
[  118.800350][ T5307]  vfs_write+0x269/0x9f0
[  118.800399][ T5307]  ? __rcu_read_unlock+0x4e/0x70
[  118.800427][ T5307]  ? __fget_files+0x184/0x1c0
[  118.800520][ T5307]  ksys_write+0xdc/0x1a0
[  118.800539][ T5307]  __x64_sys_write+0x40/0x50
[  118.800572][ T5307]  x64_sys_call+0x27e1/0x3020
[  118.800608][ T5307]  do_syscall_64+0x12c/0x370
[  118.800637][ T5307]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.800665][ T5307] RIP: 0033:0x7f57c3e9c799
[  118.800727][ T5307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  118.800750][ T5307] RSP: 002b:00007f57c28ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  118.800775][ T5307] RAX: ffffffffffffffda RBX: 00007f57c4115fa0 RCX: 00007f57c3e9c799
[  118.800792][ T5307] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000003
[  118.800808][ T5307] RBP: 00007f57c28ef090 R08: 0000000000000000 R09: 0000000000000000
[  118.800823][ T5307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  118.800837][ T5307] R13: 00007f57c4116038 R14: 00007f57c4115fa0 R15: 00007ffef8869df8
[  118.800934][ T5307]  </TASK>
[  118.801919][ T5304] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  118.889842][ T5312] loop5: detected capacity change from 0 to 256
[  118.938106][ T5309] EXT4-fs (loop3): orphan cleanup on readonly fs
[  119.024318][ T5309] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13
[  119.036439][ T5309] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.473: attempt to clear invalid blocks 2 len 1
[  119.054953][ T5312] FAT-fs (loop5): Directory bread(block 64) failed
[  119.061575][ T5312] FAT-fs (loop5): Directory bread(block 65) failed
[  119.068254][ T5312] FAT-fs (loop5): Directory bread(block 66) failed
[  119.074798][ T5312] FAT-fs (loop5): Directory bread(block 67) failed
[  119.081442][ T5312] FAT-fs (loop5): Directory bread(block 68) failed
[  119.088024][ T5312] FAT-fs (loop5): Directory bread(block 69) failed
[  119.089117][ T5309] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  119.094580][ T5312] FAT-fs (loop5): Directory bread(block 70) failed
[  119.095600][ T5309] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, 
[  119.103748][ T5312] FAT-fs (loop5): Directory bread(block 71) failed
[  119.103765][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  119.103785][    C1] EXT4-fs (loop3): initial error at time 1772958555: ext4_clear_blocks:876
[  119.103788][ T5312] FAT-fs (loop5): Directory bread(block 72) failed
[  119.103808][    C1] : inode 13
[  119.103821][    C1] EXT4-fs (loop3): last error at time 1772958555: ext4_clear_blocks:876
[  119.103824][ T5312] FAT-fs (loop5): Directory bread(block 73) failed
[  119.103848][    C1] : inode 13
[  119.168575][ T5309] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  119.186774][ T5308] netlink: 20 bytes leftover after parsing attributes in process `syz.5.471'.
[  119.196449][ T5308] random: crng reseeded on system resumption
[  119.203365][ T5309] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.473: invalid indirect mapped block 1819239214 (level 0)
[  119.229400][ T5309] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  119.236942][ T5309] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.473: invalid indirect mapped block 1819239214 (level 1)
[  119.275441][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.294664][ T5309] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  119.295347][ T5309] EXT4-fs (loop3): 1 truncate cleaned up
[  119.318063][ T5309] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  119.341324][ T5317] loop2: detected capacity change from 0 to 512
[  119.396258][ T5320] netlink: 356 bytes leftover after parsing attributes in process `syz.0.476'.
[  119.508758][ T5325] FAULT_INJECTION: forcing a failure.
[  119.508758][ T5325] name failslab, interval 1, probability 0, space 0, times 0
[  119.541789][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.558817][ T5331] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=5331 comm=syz.5.482
[  119.598406][ T5325] CPU: 1 UID: 0 PID: 5325 Comm: syz.2.479 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  119.598525][ T5325] Tainted: [W]=WARN
[  119.598533][ T5325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  119.598545][ T5325] Call Trace:
[  119.598551][ T5325]  <TASK>
[  119.598559][ T5325]  __dump_stack+0x1d/0x30
[  119.598650][ T5325]  dump_stack_lvl+0x95/0xd0
[  119.598683][ T5325]  dump_stack+0x15/0x1b
[  119.598722][ T5325]  should_fail_ex+0x263/0x280
[  119.598756][ T5325]  should_failslab+0x8c/0xb0
[  119.598859][ T5325]  kmem_cache_alloc_noprof+0x66/0x400
[  119.598888][ T5325]  ? skb_clone+0x151/0x1f0
[  119.598930][ T5325]  skb_clone+0x151/0x1f0
[  119.599030][ T5325]  __netlink_deliver_tap+0x2c9/0x500
[  119.599062][ T5325]  netlink_dump+0x836/0x8a0
[  119.599101][ T5325]  netlink_recvmsg+0x420/0x550
[  119.599237][ T5325]  ? __pfx_netlink_recvmsg+0x10/0x10
[  119.599286][ T5325]  sock_recvmsg+0xf5/0x120
[  119.599307][ T5325]  ____sys_recvmsg+0xf5/0x280
[  119.599342][ T5325]  ___sys_recvmsg+0x11f/0x3b0
[  119.599385][ T5325]  do_recvmmsg+0x1ef/0x560
[  119.599437][ T5325]  ? fput+0x8f/0xc0
[  119.599466][ T5325]  __x64_sys_recvmmsg+0xe5/0x170
[  119.599500][ T5325]  x64_sys_call+0x80f/0x3020
[  119.599621][ T5325]  do_syscall_64+0x12c/0x370
[  119.599647][ T5325]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.599676][ T5325] RIP: 0033:0x7f57c3e9c799
[  119.599696][ T5325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  119.599718][ T5325] RSP: 002b:00007f57c28ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  119.599786][ T5325] RAX: ffffffffffffffda RBX: 00007f57c4115fa0 RCX: 00007f57c3e9c799
[  119.599801][ T5325] RDX: 0000000000000003 RSI: 000020000000cd40 RDI: 0000000000000003
[  119.599815][ T5325] RBP: 00007f57c28ef090 R08: 0000000000000000 R09: 0000000000000000
[  119.599829][ T5325] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000001
[  119.599843][ T5325] R13: 00007f57c4116038 R14: 00007f57c4115fa0 R15: 00007ffef8869df8
[  119.599866][ T5325]  </TASK>
[  119.837047][ T5335] loop2: detected capacity change from 0 to 512
[  119.869974][ T5335] EXT4-fs: Ignoring removed nobh option
[  119.889126][ T5335] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  119.925202][ T5335] EXT4-fs (loop2): 1 truncate cleaned up
[  119.941484][ T5341] loop5: detected capacity change from 0 to 512
[  119.948424][ T5335] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  119.988473][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.998567][ T5341] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  120.046110][ T5341] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  120.088765][ T5341] EXT4-fs warning (device loop5): verify_group_input:137: Cannot add at group 73 (only 1 groups)
[  120.120589][ T5344] lo speed is unknown, defaulting to 1000
[  120.126637][ T5344] lo speed is unknown, defaulting to 1000
[  120.158558][ T4194] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  120.223679][ T5348] netlink: 356 bytes leftover after parsing attributes in process `syz.6.488'.
[  120.453866][ T5352] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5352 comm=syz.5.489
[  120.499849][ T5359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  120.513107][ T5361] program syz.5.491 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  120.513138][   T28] kauditd_printk_skb: 326 callbacks suppressed
[  120.513152][   T28] audit: type=1400 audit(1772958557.399:5188): avc:  denied  { ioctl } for  pid=5358 comm="syz.6.490" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=10849 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  120.568248][ T5359] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  120.833604][   T28] audit: type=1400 audit(1772958557.729:5189): avc:  denied  { ioctl } for  pid=5377 comm="syz.2.493" path="socket:[11825]" dev="sockfs" ino=11825 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  120.849177][ T5384] netlink: 12 bytes leftover after parsing attributes in process `syz.2.493'.
[  120.949056][ T5392] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=5392 comm=syz.2.494
[  121.493198][ T5432] netlink: 56 bytes leftover after parsing attributes in process `syz.5.500'.
[  121.591421][ T5333] loop3: detected capacity change from 0 to 512
[  121.624398][ T5333] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities
[  121.890600][ T5456] netlink: 8 bytes leftover after parsing attributes in process `syz.3.502'.
[  121.949850][ T5403] loop2: detected capacity change from 0 to 1024
[  121.978127][ T5403] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (29845!=20869)
[  122.007933][ T5403] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  122.037998][ T5403] EXT4-fs error (device loop2): __ext4_get_inode_loc:4782: comm syz.2.496: Invalid inode table block 0 in block_group 0
[  122.103789][ T5403] loop2: lost filesystem error report for type 5 error -117
[  122.103927][ T5403] EXT4-fs (loop2): no journal found
[  122.111397][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  122.111428][    C1] EXT4-fs (loop2): initial error at time 1772958558: __ext4_get_inode_loc:4782
[  122.111465][    C1] EXT4-fs (loop2): last error at time 1772958558: __ext4_get_inode_loc:4782
[  122.188922][ T5403] EXT4-fs (loop2): can't get journal size
[  122.208848][ T5403] EXT4-fs error (device loop2): __ext4_get_inode_loc:4782: comm syz.2.496: Invalid inode table block 0 in block_group 0
[  122.367840][ T5403] loop2: lost filesystem error report for type 5 error -117
[  122.373119][ T5403] EXT4-fs (loop2): get root inode failed
[  122.542008][ T5403] EXT4-fs (loop2): mount failed
[  122.694321][   T28] audit: type=1400 audit(1772958559.589:5190): avc:  denied  { bind } for  pid=5402 comm="syz.2.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  122.741311][ T5469] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=5469 comm=syz.6.505
[  122.819175][   T28] audit: type=1400 audit(1772958559.699:5191): avc:  denied  { relabelfrom } for  pid=5472 comm="syz.2.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  122.844900][   T28] audit: type=1400 audit(1772958559.699:5192): avc:  denied  { relabelto } for  pid=5472 comm="syz.2.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  123.049879][ T5484] loop0: detected capacity change from 0 to 256
[  123.090795][ T5484] FAT-fs (loop0): Directory bread(block 64) failed
[  123.097427][ T5484] FAT-fs (loop0): Directory bread(block 65) failed
[  123.104153][ T5484] FAT-fs (loop0): Directory bread(block 66) failed
[  123.110824][ T5484] FAT-fs (loop0): Directory bread(block 67) failed
[  123.117486][ T5484] FAT-fs (loop0): Directory bread(block 68) failed
[  123.124437][ T5484] FAT-fs (loop0): Directory bread(block 69) failed
[  123.131045][ T5484] FAT-fs (loop0): Directory bread(block 70) failed
[  123.137745][ T5484] FAT-fs (loop0): Directory bread(block 71) failed
[  123.144321][ T5484] FAT-fs (loop0): Directory bread(block 72) failed
[  123.151092][ T5484] FAT-fs (loop0): Directory bread(block 73) failed
[  123.237822][   T28] audit: type=1326 audit(1772958559.939:5193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5476 comm="syz.0.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f679119c799 code=0x7ffc0000
[  123.409386][ T5493] netlink: 176 bytes leftover after parsing attributes in process `syz.5.511'.
[  123.431910][ T5495] loop2: detected capacity change from 0 to 512
[  123.443805][ T5490] loop6: detected capacity change from 0 to 512
[  123.547269][ T5490] EXT4-fs (loop6): 1 truncate cleaned up
[  123.597098][   T28] audit: type=1326 audit(1772958559.939:5194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5476 comm="syz.0.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f679119c799 code=0x7ffc0000
[  123.672025][ T5490] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  123.903981][ T5490] audit: audit_backlog=65 > audit_backlog_limit=64
[  123.986064][   T28] audit: type=1326 audit(1772958559.939:5195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5476 comm="syz.0.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f679119c799 code=0x7ffc0000
[  124.015498][ T5490] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64
[  124.068717][ T5511] loop5: detected capacity change from 0 to 512
[  124.160133][ T5511] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  124.284959][ T5484] netlink: 20 bytes leftover after parsing attributes in process `syz.0.508'.
[  124.295572][ T5484] random: crng reseeded on system resumption
[  124.382334][ T5511] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  124.495276][ T4848] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.644858][ T5511] EXT4-fs error (device loop5): ext4_lookup:1785: inode #12: comm syz.5.515: iget: bad i_size value: 2533274857506816
[  124.660128][ T5511] EXT4-fs error (device loop5): ext4_lookup:1785: inode #12: comm syz.5.515: iget: bad i_size value: 2533274857506816
[  124.793116][ T4194] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  125.757731][ T5556] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=5556 comm=syz.0.530
[  125.879945][   T28] kauditd_printk_skb: 175 callbacks suppressed
[  125.879960][   T28] audit: type=1400 audit(1772958562.779:5370): avc:  denied  { map } for  pid=5560 comm="syz.2.532" path="socket:[11015]" dev="sockfs" ino=11015 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  125.912801][   T28] audit: type=1400 audit(1772958562.809:5371): avc:  denied  { read } for  pid=5560 comm="syz.2.532" path="socket:[11015]" dev="sockfs" ino=11015 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  125.928338][ T5558] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  125.957880][ T5564] loop6: detected capacity change from 0 to 512
[  126.062893][ T5564] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  126.116804][ T5557] Process accounting resumed
[  126.302815][ T5575] loop5: detected capacity change from 0 to 256
[  126.322830][ T5564] EXT4-fs (loop6): 1 truncate cleaned up
[  126.331453][ T5564] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  127.135015][ T5564] netlink: 12 bytes leftover after parsing attributes in process `syz.6.533'.
[  127.295918][   T28] audit: type=1326 audit(1772958563.199:5372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5566 comm="syz.5.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94815c799 code=0x7ffc0000
[  127.319328][   T28] audit: type=1326 audit(1772958563.199:5373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5566 comm="syz.5.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94815c799 code=0x7ffc0000
[  127.374656][ T5577] loop0: detected capacity change from 0 to 256
[  128.295856][   T28] audit: type=1326 audit(1772958563.199:5374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5566 comm="syz.5.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94815c799 code=0x7ffc0000
[  128.319225][   T28] audit: type=1326 audit(1772958563.199:5375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5566 comm="syz.5.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94815c799 code=0x7ffc0000
[  128.342539][   T28] audit: type=1326 audit(1772958563.199:5376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5566 comm="syz.5.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7ff94815c799 code=0x7ffc0000
[  129.316196][   T28] audit: type=1326 audit(1772958563.199:5377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5566 comm="syz.5.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94815c799 code=0x7ffc0000
[  129.339955][   T28] audit: type=1326 audit(1772958563.199:5378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5566 comm="syz.5.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94815c799 code=0x7ffc0000
[  129.363414][   T28] audit: type=1326 audit(1772958563.199:5379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5566 comm="syz.5.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94815c799 code=0x7ffc0000
[  129.466855][ T5575] FAT-fs (loop5): Directory bread(block 64) failed
[  129.473532][ T5575] FAT-fs (loop5): Directory bread(block 65) failed
[  129.480127][ T5575] FAT-fs (loop5): Directory bread(block 66) failed
[  129.486675][ T5575] FAT-fs (loop5): Directory bread(block 67) failed
[  129.493328][ T5575] FAT-fs (loop5): Directory bread(block 68) failed
[  129.499985][ T5575] FAT-fs (loop5): Directory bread(block 69) failed
[  129.506699][ T5575] FAT-fs (loop5): Directory bread(block 70) failed
[  129.513284][ T5575] FAT-fs (loop5): Directory bread(block 71) failed
[  129.519026][ T5577] FAT-fs (loop0): Directory bread(block 64) failed
[  129.520021][ T5575] FAT-fs (loop5): Directory bread(block 72) failed
[  129.526418][ T5577] FAT-fs (loop0): Directory bread(block 65) failed
[  129.533055][ T5575] FAT-fs (loop5): Directory bread(block 73) failed
[  129.539675][ T5577] FAT-fs (loop0): Directory bread(block 66) failed
[  129.552689][ T5577] FAT-fs (loop0): Directory bread(block 67) failed
[  129.559457][ T5577] FAT-fs (loop0): Directory bread(block 68) failed
[  129.566005][ T5577] FAT-fs (loop0): Directory bread(block 69) failed
[  129.572619][ T5577] FAT-fs (loop0): Directory bread(block 70) failed
[  129.579184][ T5577] FAT-fs (loop0): Directory bread(block 71) failed
[  129.585735][ T5577] FAT-fs (loop0): Directory bread(block 72) failed
[  129.592438][ T5577] FAT-fs (loop0): Directory bread(block 73) failed
[  129.723685][ T5564] Process accounting resumed
[  129.747228][ T4848] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.848423][ T5592] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=5592 comm=syz.6.541
[  130.657246][ T5603] loop0: detected capacity change from 0 to 512
[  130.771684][ T5603] EXT4-fs: Ignoring removed oldalloc option
[  130.887481][   T28] kauditd_printk_skb: 55 callbacks suppressed
[  130.887500][   T28] audit: type=1400 audit(1772958567.730:5435): avc:  denied  { read } for  pid=5604 comm="syz.5.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  130.957329][   T28] audit: type=1400 audit(1772958567.770:5436): avc:  denied  { create } for  pid=5604 comm="syz.5.545" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  130.993599][ T5603] EXT4-fs (loop0): 1 truncate cleaned up
[  131.031077][ T5603] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  131.073863][   T28] audit: type=1400 audit(1772958567.780:5437): avc:  denied  { write } for  pid=5604 comm="syz.5.545" name="file0" dev="tmpfs" ino=383 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  131.185387][   T28] audit: type=1400 audit(1772958567.780:5438): avc:  denied  { open } for  pid=5604 comm="syz.5.545" path="/68/file0" dev="tmpfs" ino=383 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  131.289849][   T28] audit: type=1400 audit(1772958567.950:5439): avc:  denied  { allowed } for  pid=5609 comm="syz.2.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  131.371992][   T28] audit: type=1400 audit(1772958568.050:5440): avc:  denied  { create } for  pid=5611 comm="syz.2.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  131.417624][ T5621] FAULT_INJECTION: forcing a failure.
[  131.417624][ T5621] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  131.449389][ T5585] loop3: detected capacity change from 0 to 512
[  131.462210][   T28] audit: type=1400 audit(1772958568.060:5441): avc:  denied  { write } for  pid=5611 comm="syz.2.547" lport=262 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  131.497716][ T5621] CPU: 0 UID: 0 PID: 5621 Comm: syz.6.551 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  131.497747][ T5621] Tainted: [W]=WARN
[  131.497753][ T5621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  131.497958][ T5621] Call Trace:
[  131.497964][ T5621]  <TASK>
[  131.497973][ T5621]  __dump_stack+0x1d/0x30
[  131.498021][ T5621]  dump_stack_lvl+0x95/0xd0
[  131.498049][ T5621]  dump_stack+0x15/0x1b
[  131.498110][ T5621]  should_fail_ex+0x263/0x280
[  131.498140][ T5621]  should_fail+0xb/0x20
[  131.498166][ T5621]  should_fail_usercopy+0x1a/0x20
[  131.498216][ T5621]  _copy_to_user+0x20/0xa0
[  131.498243][ T5621]  simple_read_from_buffer+0xb5/0x130
[  131.498265][ T5621]  proc_fail_nth_read+0x10e/0x150
[  131.498295][ T5621]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  131.498456][ T5621]  vfs_read+0x1ab/0x7f0
[  131.498567][ T5621]  ? __rcu_read_unlock+0x4e/0x70
[  131.498670][ T5621]  ? __fget_files+0x184/0x1c0
[  131.498697][ T5621]  ? mutex_lock+0x57/0x90
[  131.498745][ T5621]  ksys_read+0xdc/0x1a0
[  131.498786][ T5621]  __x64_sys_read+0x40/0x50
[  131.498809][ T5621]  x64_sys_call+0x2886/0x3020
[  131.498936][ T5621]  do_syscall_64+0x12c/0x370
[  131.498957][ T5621]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  131.498982][ T5621] RIP: 0033:0x7f160ad2cfce
[  131.499005][ T5621] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  131.499028][ T5621] RSP: 002b:00007f16097c6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  131.499117][ T5621] RAX: ffffffffffffffda RBX: 00007f16097c76c0 RCX: 00007f160ad2cfce
[  131.499134][ T5621] RDX: 000000000000000f RSI: 00007f16097c70a0 RDI: 0000000000000005
[  131.499150][ T5621] RBP: 00007f16097c7090 R08: 0000000000000000 R09: 0000000000000000
[  131.499166][ T5621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  131.499181][ T5621] R13: 00007f160afe6038 R14: 00007f160afe5fa0 R15: 00007fff4fc329e8
[  131.499285][ T5621]  </TASK>
[  131.722369][ T5585] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities
[  131.780311][ T5623] loop6: detected capacity change from 0 to 512
[  131.865117][ T5625] batadv_slave_0: entered promiscuous mode
[  131.894328][   T28] audit: type=1400 audit(1772958568.790:5442): avc:  denied  { read write } for  pid=5624 comm="syz.2.554" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  131.942354][ T5625] batman_adv: batadv0: Adding interface: macsec1
[  131.949453][   T28] audit: type=1400 audit(1772958568.790:5443): avc:  denied  { open } for  pid=5624 comm="syz.2.554" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  131.974649][ T5625] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  132.002907][ T5625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  132.015125][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.200198][ T5625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  132.438361][   T28] audit: type=1400 audit(1772958569.330:5444): avc:  denied  { unlink } for  pid=4194 comm="syz-executor" name="file0" dev="tmpfs" ino=383 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  132.604916][ T5625] batman_adv: batadv0: Interface activated: macsec1
[  132.870509][ T5639] lo speed is unknown, defaulting to 1000
[  132.870711][ T5640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.552'.
[  132.911141][ T5639] lo speed is unknown, defaulting to 1000
[  132.970382][ T5644] __vm_enough_memory: pid: 5644, comm: syz.2.558, bytes: 4503599627366400 not enough memory for the allocation
[  133.208932][ T5653] loop6: detected capacity change from 0 to 256
[  133.266265][ T5652] loop3: detected capacity change from 0 to 512
[  133.285377][ T5653] FAT-fs (loop6): Directory bread(block 64) failed
[  133.291271][ T5652] EXT4-fs: Ignoring removed oldalloc option
[  133.304678][ T5653] FAT-fs (loop6): Directory bread(block 65) failed
[  133.311898][ T5653] FAT-fs (loop6): Directory bread(block 66) failed
[  133.319105][ T5653] FAT-fs (loop6): Directory bread(block 67) failed
[  133.332134][ T5652] EXT4-fs (loop3): 1 truncate cleaned up
[  133.338077][ T5653] FAT-fs (loop6): Directory bread(block 68) failed
[  133.344807][ T5653] FAT-fs (loop6): Directory bread(block 69) failed
[  133.352015][ T5653] FAT-fs (loop6): Directory bread(block 70) failed
[  133.359142][ T5653] FAT-fs (loop6): Directory bread(block 71) failed
[  133.365852][ T5653] FAT-fs (loop6): Directory bread(block 72) failed
[  133.369406][ T5652] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  133.373428][ T5653] FAT-fs (loop6): Directory bread(block 73) failed
[  133.394316][ T5661] syzkaller0: entered promiscuous mode
[  133.404033][ T5661] syzkaller0: entered allmulticast mode
[  133.422127][ T5653] netlink: 20 bytes leftover after parsing attributes in process `syz.6.559'.
[  133.438921][ T5653] random: crng reseeded on system resumption
[  133.583069][ T5663] loop0: detected capacity change from 0 to 512
[  133.888858][ T5683] netlink: 8 bytes leftover after parsing attributes in process `syz.0.573'.
[  133.917935][ T5685] syzkaller0: entered promiscuous mode
[  133.933677][ T5685] syzkaller0: entered allmulticast mode
[  133.942016][ T5685] FAULT_INJECTION: forcing a failure.
[  133.942016][ T5685] name failslab, interval 1, probability 0, space 0, times 0
[  133.961902][ T5685] CPU: 1 UID: 0 PID: 5685 Comm: syz.2.574 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  133.961941][ T5685] Tainted: [W]=WARN
[  133.961950][ T5685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  133.961967][ T5685] Call Trace:
[  133.961975][ T5685]  <TASK>
[  133.961985][ T5685]  __dump_stack+0x1d/0x30
[  133.962097][ T5685]  dump_stack_lvl+0x95/0xd0
[  133.962129][ T5685]  dump_stack+0x15/0x1b
[  133.962154][ T5685]  should_fail_ex+0x263/0x280
[  133.962218][ T5685]  should_failslab+0x8c/0xb0
[  133.962318][ T5685]  kmem_cache_alloc_node_noprof+0x6d/0x460
[  133.962342][ T5685]  ? __alloc_skb+0x2d6/0x690
[  133.962366][ T5685]  __alloc_skb+0x2d6/0x690
[  133.962389][ T5685]  ? __alloc_skb+0x200/0x690
[  133.962431][ T5685]  alloc_skb_with_frags+0x7d/0x470
[  133.962476][ T5685]  sock_alloc_send_pskb+0x44d/0x500
[  133.962516][ T5685]  ? __rcu_read_unlock+0x4e/0x70
[  133.962539][ T5685]  packet_sendmsg+0x23c7/0x3370
[  133.962610][ T5685]  ? avc_has_perm+0x101/0x190
[  133.962777][ T5685]  ? selinux_socket_sendmsg+0x192/0x1c0
[  133.962818][ T5685]  ? __pfx_packet_sendmsg+0x10/0x10
[  133.962848][ T5685]  __sys_sendto+0x42e/0x490
[  133.962964][ T5685]  __x64_sys_sendto+0x76/0x90
[  133.962999][ T5685]  x64_sys_call+0x2d35/0x3020
[  133.963031][ T5685]  do_syscall_64+0x12c/0x370
[  133.963060][ T5685]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.963132][ T5685] RIP: 0033:0x7f57c3e9c799
[  133.963149][ T5685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  133.963167][ T5685] RSP: 002b:00007f57c28ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  133.963187][ T5685] RAX: ffffffffffffffda RBX: 00007f57c4115fa0 RCX: 00007f57c3e9c799
[  133.963202][ T5685] RDX: 000000000000000e RSI: 00002000000005c0 RDI: 0000000000000008
[  133.963323][ T5685] RBP: 00007f57c28ef090 R08: 00002000000001c0 R09: 0000000000000014
[  133.963337][ T5685] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000001
[  133.963349][ T5685] R13: 00007f57c4116038 R14: 00007f57c4115fa0 R15: 00007ffef8869df8
[  133.963373][ T5685]  </TASK>
[  134.225861][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.239624][ T5689] netlink: 'syz.5.577': attribute type 3 has an invalid length.
[  134.279500][ T5691] loop3: detected capacity change from 0 to 512
[  134.332706][ T5695] FAULT_INJECTION: forcing a failure.
[  134.332706][ T5695] name failslab, interval 1, probability 0, space 0, times 0
[  134.384087][ T5695] CPU: 1 UID: 0 PID: 5695 Comm: syz.2.579 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  134.384127][ T5695] Tainted: [W]=WARN
[  134.384134][ T5695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  134.384147][ T5695] Call Trace:
[  134.384153][ T5695]  <TASK>
[  134.384167][ T5695]  __dump_stack+0x1d/0x30
[  134.384199][ T5695]  dump_stack_lvl+0x95/0xd0
[  134.384228][ T5695]  dump_stack+0x15/0x1b
[  134.384249][ T5695]  should_fail_ex+0x263/0x280
[  134.384351][ T5695]  should_failslab+0x8c/0xb0
[  134.384441][ T5695]  kmem_cache_alloc_node_noprof+0x6d/0x460
[  134.384508][ T5695]  ? __alloc_skb+0x2d6/0x690
[  134.384554][ T5695]  __alloc_skb+0x2d6/0x690
[  134.384586][ T5695]  ? __alloc_skb+0x200/0x690
[  134.384608][ T5695]  netlink_alloc_large_skb+0xbf/0xf0
[  134.384634][ T5695]  netlink_sendmsg+0x40c/0x6f0
[  134.384685][ T5695]  ? __pfx_netlink_sendmsg+0x10/0x10
[  134.384714][ T5695]  ____sys_sendmsg+0x563/0x5b0
[  134.384745][ T5695]  ___sys_sendmsg+0x195/0x1e0
[  134.384835][ T5695]  __x64_sys_sendmsg+0xd4/0x160
[  134.384866][ T5695]  x64_sys_call+0x194c/0x3020
[  134.384964][ T5695]  do_syscall_64+0x12c/0x370
[  134.384990][ T5695]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.385019][ T5695] RIP: 0033:0x7f57c3e9c799
[  134.385036][ T5695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  134.385054][ T5695] RSP: 002b:00007f57c28ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  134.385135][ T5695] RAX: ffffffffffffffda RBX: 00007f57c4115fa0 RCX: 00007f57c3e9c799
[  134.385154][ T5695] RDX: 0000000000004080 RSI: 0000200000000200 RDI: 0000000000000004
[  134.385222][ T5695] RBP: 00007f57c28ef090 R08: 0000000000000000 R09: 0000000000000000
[  134.385236][ T5695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  134.385250][ T5695] R13: 00007f57c4116038 R14: 00007f57c4115fa0 R15: 00007ffef8869df8
[  134.385301][ T5695]  </TASK>
[  134.496069][ T5699] program syz.5.581 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  134.592306][ T5702] FAULT_INJECTION: forcing a failure.
[  134.592306][ T5702] name failslab, interval 1, probability 0, space 0, times 0
[  134.611303][ T5702] CPU: 0 UID: 0 PID: 5702 Comm: syz.3.580 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  134.611342][ T5702] Tainted: [W]=WARN
[  134.611351][ T5702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  134.611367][ T5702] Call Trace:
[  134.611375][ T5702]  <TASK>
[  134.611430][ T5702]  __dump_stack+0x1d/0x30
[  134.611460][ T5702]  dump_stack_lvl+0x95/0xd0
[  134.611491][ T5702]  dump_stack+0x15/0x1b
[  134.611545][ T5702]  should_fail_ex+0x263/0x280
[  134.611569][ T5702]  should_failslab+0x8c/0xb0
[  134.611637][ T5702]  kmem_cache_alloc_noprof+0x66/0x400
[  134.611666][ T5702]  ? _sctp_make_chunk+0xbf/0x210
[  134.611706][ T5702]  _sctp_make_chunk+0xbf/0x210
[  134.611746][ T5702]  sctp_make_heartbeat+0x59/0x290
[  134.611793][ T5702]  sctp_sf_do_prm_requestheartbeat+0x29/0x130
[  134.611829][ T5702]  sctp_do_sm+0xd0/0x3330
[  134.611860][ T5702]  ? lockref_put_return+0xf7/0x130
[  134.611934][ T5702]  ? __rcu_read_unlock+0x4e/0x70
[  134.611977][ T5702]  sctp_primitive_REQUESTHEARTBEAT+0x74/0x90
[  134.612009][ T5702]  sctp_apply_peer_addr_params+0x93/0xbe0
[  134.612044][ T5702]  sctp_setsockopt_peer_addr_params+0x499/0x4e0
[  134.612073][ T5702]  sctp_setsockopt+0x6fc/0xea0
[  134.612166][ T5702]  sock_common_setsockopt+0x69/0x80
[  134.612193][ T5702]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  134.612221][ T5702]  __sys_setsockopt+0x184/0x200
[  134.612262][ T5702]  __x64_sys_setsockopt+0x64/0x80
[  134.612368][ T5702]  x64_sys_call+0x2327/0x3020
[  134.612414][ T5702]  do_syscall_64+0x12c/0x370
[  134.612435][ T5702]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.612501][ T5702] RIP: 0033:0x7f293143c799
[  134.612518][ T5702] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  134.612537][ T5702] RSP: 002b:00007f292fe4d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  134.612557][ T5702] RAX: ffffffffffffffda RBX: 00007f29316b6180 RCX: 00007f293143c799
[  134.612571][ T5702] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000005
[  134.612587][ T5702] RBP: 00007f292fe4d090 R08: 000000000000009c R09: 0000000000000000
[  134.612656][ T5702] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001
[  134.612671][ T5702] R13: 00007f29316b6218 R14: 00007f29316b6180 R15: 00007ffce6028548
[  134.612695][ T5702]  </TASK>
[  134.934114][ T5712] netlink: 8 bytes leftover after parsing attributes in process `syz.2.585'.
[  135.176674][ T5716] loop2: detected capacity change from 0 to 512
[  135.193039][ T5716] EXT4-fs: Ignoring removed oldalloc option
[  135.242216][ T5716] EXT4-fs (loop2): 1 truncate cleaned up
[  135.277769][ T5716] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  135.444751][ T5723] netlink: 4 bytes leftover after parsing attributes in process `syz.3.588'.
[  135.476323][ T5723] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  135.492827][ T5723] batman_adv: batadv0: Removing interface: batadv_slave_0
[  135.508440][ T5723] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  135.523716][ T5723] batman_adv: batadv0: Removing interface: batadv_slave_1
[  135.546185][ T5687] loop0: detected capacity change from 0 to 512
[  135.605090][ T5687] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities
[  135.749580][ T5727] loop5: detected capacity change from 0 to 2048
[  135.816410][ T5729] syzkaller0: entered promiscuous mode
[  135.822181][ T5729] syzkaller0: entered allmulticast mode
[  135.866547][ T4107]  loop5: unable to read partition table
[  135.872371][ T4107] loop5: partition table beyond EOD, truncated
[  135.912285][ T5727]  loop5: unable to read partition table
[  135.918101][ T5727] loop5: partition table beyond EOD, truncated
[  135.924584][ T5727] loop_reread_partitions: partition scan of loop5 () failed (rc=-5)
[  135.961319][ T5731] loop0: detected capacity change from 0 to 512
[  136.018073][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.094273][ T5742] netlink: 28 bytes leftover after parsing attributes in process `syz.5.596'.
[  136.441579][   T28] kauditd_printk_skb: 244 callbacks suppressed
[  136.441613][   T28] audit: type=1400 audit(1772958573.340:5689): avc:  denied  { ioctl } for  pid=5750 comm="syz.5.598" path="socket:[12579]" dev="sockfs" ino=12579 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  137.057980][   T28] audit: type=1400 audit(1772958573.960:5690): avc:  denied  { getopt } for  pid=5767 comm="syz.0.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  137.081438][ T5768] loop0: detected capacity change from 0 to 256
[  137.117530][ T5768] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  137.161792][ T5768] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008)
[  137.170250][ T5768] FAT-fs (loop0): Filesystem has been set read-only
[  137.176884][ T5768] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008)
[  137.205572][ T3312] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 0000ff00)
[  137.226152][ T3312] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 0000ff00)
[  137.289627][ T5773] loop5: detected capacity change from 0 to 512
[  137.360285][ T5775] netlink: 32 bytes leftover after parsing attributes in process `syz.5.605'.
[  137.369689][ T5775] netlink: 32 bytes leftover after parsing attributes in process `syz.5.605'.
[  137.398833][   T28] audit: type=1400 audit(1772958574.290:5691): avc:  denied  { ioctl } for  pid=5776 comm="syz.6.606" path="socket:[12621]" dev="sockfs" ino=12621 ioctlcmd=0x891c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  137.558415][ T5783] netlink: 28 bytes leftover after parsing attributes in process `syz.3.609'.
[  137.760603][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.937472][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.089763][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.160410][ T5804] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=5804 comm=syz.3.614
[  138.180276][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.271462][ T5793] lo speed is unknown, defaulting to 1000
[  138.278189][ T5810] loop5: detected capacity change from 0 to 512
[  138.347004][   T28] audit: type=1400 audit(1772958575.250:5692): avc:  denied  { connect } for  pid=5811 comm="syz.3.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  138.366522][ T5793] lo speed is unknown, defaulting to 1000
[  138.372375][   T28] audit: type=1400 audit(1772958575.260:5693): avc:  denied  { bind } for  pid=5811 comm="syz.3.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  138.387413][   T12] bridge_slave_1: left allmulticast mode
[  138.415857][   T28] audit: type=1400 audit(1772958575.260:5694): avc:  denied  { write } for  pid=5811 comm="syz.3.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  138.437731][ T5816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.618'.
[  138.446714][   T12] bridge_slave_1: left promiscuous mode
[  138.478327][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  138.515239][   T28] audit: type=1400 audit(1772958575.260:5695): avc:  denied  { read } for  pid=5811 comm="syz.3.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  138.557064][   T12] bridge_slave_0: left allmulticast mode
[  138.568340][   T12] bridge_slave_0: left promiscuous mode
[  138.590814][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.731778][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  138.760798][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  138.777327][   T12] bond0 (unregistering): Released all slaves
[  138.811109][ T5839] syzkaller0: entered promiscuous mode
[  138.818354][ T5839] syzkaller0: entered allmulticast mode
[  138.873683][   T12] hsr_slave_0: left promiscuous mode
[  138.879678][   T12] hsr_slave_1: left promiscuous mode
[  138.885761][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  138.893605][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  138.902201][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  138.909980][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  138.921211][   T12] veth1_macvtap: left promiscuous mode
[  138.927150][   T12] veth0_macvtap: left promiscuous mode
[  138.932839][   T12] veth1_vlan: left promiscuous mode
[  138.940124][   T12] veth0_vlan: left promiscuous mode
[  139.011065][   T28] audit: type=1400 audit(1772958575.910:5696): avc:  denied  { bind } for  pid=5844 comm="syz.3.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  139.063640][   T12] team0 (unregistering): Port device team_slave_1 removed
[  139.074945][   T12] team0 (unregistering): Port device team_slave_0 removed
[  139.112520][ T5845] syzkaller0: entered promiscuous mode
[  139.118291][ T5845] syzkaller0: entered allmulticast mode
[  139.612260][ T5793] chnl_net:caif_netlink_parms(): no params data found
[  139.744603][   T28] audit: type=1326 audit(1772958576.640:5697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5872 comm="syz.6.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f160ad6c799 code=0x7ffc0000
[  139.775397][   T28] audit: type=1326 audit(1772958576.670:5698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5872 comm="syz.6.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f160ad6c799 code=0x7ffc0000
[  139.802477][ T5885] loop3: detected capacity change from 0 to 256
[  139.814502][ T5884] loop6: detected capacity change from 0 to 256
[  139.839947][ T5885] FAT-fs (loop3): Directory bread(block 64) failed
[  139.846532][ T5885] FAT-fs (loop3): Directory bread(block 65) failed
[  139.853134][ T5885] FAT-fs (loop3): Directory bread(block 66) failed
[  139.859774][ T5885] FAT-fs (loop3): Directory bread(block 67) failed
[  139.866309][ T5885] FAT-fs (loop3): Directory bread(block 68) failed
[  139.872971][ T5885] FAT-fs (loop3): Directory bread(block 69) failed
[  139.879604][ T5885] FAT-fs (loop3): Directory bread(block 70) failed
[  139.886218][ T5885] FAT-fs (loop3): Directory bread(block 71) failed
[  139.892841][ T5885] FAT-fs (loop3): Directory bread(block 72) failed
[  139.899409][ T5885] FAT-fs (loop3): Directory bread(block 73) failed
[  139.913538][ T5885] netlink: 20 bytes leftover after parsing attributes in process `syz.3.627'.
[  139.923228][ T5885] random: crng reseeded on system resumption
[  139.956812][ T5842] loop5: detected capacity change from 0 to 512
[  139.989710][ T5842] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities
[  140.016413][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state
[  140.027317][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state
[  140.036930][ T5793] bridge_slave_0: entered allmulticast mode
[  140.046570][ T5793] bridge_slave_0: entered promiscuous mode
[  140.054882][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state
[  140.062144][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state
[  140.069492][ T5793] bridge_slave_1: entered allmulticast mode
[  140.076480][ T5793] bridge_slave_1: entered promiscuous mode
[  140.137559][ T5884] FAT-fs (loop6): Directory bread(block 64) failed
[  140.152349][ T5884] FAT-fs (loop6): Directory bread(block 65) failed
[  140.158038][ T5898] syzkaller0: entered promiscuous mode
[  140.164516][ T5898] syzkaller0: entered allmulticast mode
[  140.170519][ T5884] FAT-fs (loop6): Directory bread(block 66) failed
[  140.175787][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  140.187141][ T5884] FAT-fs (loop6): Directory bread(block 67) failed
[  140.196252][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  140.212899][ T5884] FAT-fs (loop6): Directory bread(block 68) failed
[  140.219601][ T5884] FAT-fs (loop6): Directory bread(block 69) failed
[  140.226245][ T5884] FAT-fs (loop6): Directory bread(block 70) failed
[  140.233008][ T5884] FAT-fs (loop6): Directory bread(block 71) failed
[  140.240061][ T5884] FAT-fs (loop6): Directory bread(block 72) failed
[  140.246693][ T5884] FAT-fs (loop6): Directory bread(block 73) failed
[  140.262198][ T5884] netlink: 20 bytes leftover after parsing attributes in process `syz.6.626'.
[  140.310452][ T5793] team0: Port device team_slave_0 added
[  140.320614][ T5904] FAULT_INJECTION: forcing a failure.
[  140.320614][ T5904] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  140.324629][ T5793] team0: Port device team_slave_1 added
[  140.369250][ T5904] CPU: 0 UID: 0 PID: 5904 Comm: syz.5.629 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  140.369292][ T5904] Tainted: [W]=WARN
[  140.369299][ T5904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  140.369311][ T5904] Call Trace:
[  140.369317][ T5904]  <TASK>
[  140.369324][ T5904]  __dump_stack+0x1d/0x30
[  140.369398][ T5904]  dump_stack_lvl+0x95/0xd0
[  140.369429][ T5904]  dump_stack+0x15/0x1b
[  140.369454][ T5904]  should_fail_ex+0x263/0x280
[  140.369528][ T5904]  should_fail+0xb/0x20
[  140.369554][ T5904]  should_fail_usercopy+0x1a/0x20
[  140.369640][ T5904]  _copy_to_user+0x20/0xa0
[  140.369677][ T5904]  simple_read_from_buffer+0xb5/0x130
[  140.369706][ T5904]  proc_fail_nth_read+0x10e/0x150
[  140.369819][ T5904]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  140.369857][ T5904]  vfs_read+0x1ab/0x7f0
[  140.369915][ T5904]  ? mutex_unlock+0x4e/0x90
[  140.369989][ T5904]  ? __rcu_read_unlock+0x4e/0x70
[  140.370031][ T5904]  ? __fget_files+0x184/0x1c0
[  140.370057][ T5904]  ? mutex_lock+0x57/0x90
[  140.370084][ T5904]  ksys_read+0xdc/0x1a0
[  140.370264][ T5904]  __x64_sys_read+0x40/0x50
[  140.370287][ T5904]  x64_sys_call+0x2886/0x3020
[  140.370323][ T5904]  do_syscall_64+0x12c/0x370
[  140.370361][ T5904]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  140.370437][ T5904] RIP: 0033:0x7ff94811cfce
[  140.370457][ T5904] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  140.370481][ T5904] RSP: 002b:00007ff946bb6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  140.370505][ T5904] RAX: ffffffffffffffda RBX: 00007ff946bb76c0 RCX: 00007ff94811cfce
[  140.370615][ T5904] RDX: 000000000000000f RSI: 00007ff946bb70a0 RDI: 0000000000000004
[  140.370631][ T5904] RBP: 00007ff946bb7090 R08: 0000000000000000 R09: 0000000000000000
[  140.370648][ T5904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  140.370663][ T5904] R13: 00007ff9483d6038 R14: 00007ff9483d5fa0 R15: 00007ffc126368c8
[  140.370686][ T5904]  </TASK>
[  140.485349][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0
[  140.585238][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  140.614702][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  140.627776][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1
[  140.634768][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  140.709116][ T5915] netlink: 8 bytes leftover after parsing attributes in process `syz.3.632'.
[  140.720976][ T5916] netlink: 12 bytes leftover after parsing attributes in process `syz.5.631'.
[  140.730067][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  140.756265][ T5911] bridge2: entered allmulticast mode
[  140.828804][ T5793] hsr_slave_0: entered promiscuous mode
[  140.837542][ T5793] hsr_slave_1: entered promiscuous mode
[  140.843469][ T5793] debugfs: 'hsr0' already exists in 'hsr'
[  140.849713][ T5793] Cannot create hsr debugfs directory
[  141.009787][ T5793] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  141.012791][ T5793] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  141.014806][ T5793] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  141.018651][ T5793] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  141.056138][ T5950] loop2: detected capacity change from 0 to 512
[  141.088870][ T5950] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  141.088934][ T5950] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  141.195660][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0
[  141.233004][ T5793] 8021q: adding VLAN 0 to HW filter on device team0
[  141.251597][  T310] bridge0: port 1(bridge_slave_0) entered blocking state
[  141.297070][  T310] bridge0: port 1(bridge_slave_0) entered forwarding state
[  141.328324][  T310] bridge0: port 2(bridge_slave_1) entered blocking state
[  141.328366][  T310] bridge0: port 2(bridge_slave_1) entered forwarding state
[  141.488353][ T5971] loop3: detected capacity change from 0 to 164
[  141.517943][ T5974] FAULT_INJECTION: forcing a failure.
[  141.517943][ T5974] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  141.543903][ T5971] Unable to read rock-ridge attributes
[  141.553081][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0
[  141.575314][ T5971] Unable to read rock-ridge attributes
[  141.583813][ T5975] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.636: corrupted xattr block 32: bad e_name length
[  141.597837][ T5975] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop2 ino=15
[  141.607711][ T5971] iso9660: Corrupted directory entry in block 4 of inode 1792
[  141.615338][ T5974] CPU: 0 UID: 0 PID: 5974 Comm: syz.5.641 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  141.615379][ T5974] Tainted: [W]=WARN
[  141.615398][ T5974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  141.615411][ T5974] Call Trace:
[  141.615417][ T5974]  <TASK>
[  141.615425][ T5974]  __dump_stack+0x1d/0x30
[  141.615451][ T5974]  dump_stack_lvl+0x95/0xd0
[  141.615478][ T5974]  dump_stack+0x15/0x1b
[  141.615507][ T5974]  should_fail_ex+0x263/0x280
[  141.615548][ T5974]  should_fail+0xb/0x20
[  141.615568][ T5974]  should_fail_usercopy+0x1a/0x20
[  141.615620][ T5974]  _copy_to_user+0x20/0xa0
[  141.615651][ T5974]  keyctl_get_security+0x167/0x270
[  141.615684][ T5974]  __se_sys_keyctl+0x256/0xb80
[  141.615826][ T5974]  ? __rcu_read_unlock+0x4e/0x70
[  141.615854][ T5974]  ? __fget_files+0x184/0x1c0
[  141.615894][ T5974]  ? mutex_lock+0x57/0x90
[  141.615921][ T5974]  ? mutex_unlock+0x4e/0x90
[  141.615950][ T5974]  ? fput+0x8f/0xc0
[  141.616021][ T5974]  __x64_sys_keyctl+0x67/0x80
[  141.616085][ T5974]  x64_sys_call+0x1d12/0x3020
[  141.616120][ T5974]  do_syscall_64+0x12c/0x370
[  141.616201][ T5974]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  141.616229][ T5974] RIP: 0033:0x7ff94815c799
[  141.616248][ T5974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  141.616321][ T5974] RSP: 002b:00007ff946b96028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa
[  141.616349][ T5974] RAX: ffffffffffffffda RBX: 00007ff9483d6090 RCX: 00007ff94815c799
[  141.616363][ T5974] RDX: 0000200000000c00 RSI: 0000000002f145b2 RDI: 0000000000000011
[  141.616376][ T5974] RBP: 00007ff946b96090 R08: 0000000000000000 R09: 0000000000000000
[  141.616392][ T5974] R10: 0000000000001000 R11: 0000000000000246 R12: 0000000000000001
[  141.616437][ T5974] R13: 00007ff9483d6128 R14: 00007ff9483d6090 R15: 00007ffc126368c8
[  141.616463][ T5974]  </TASK>
[  141.807600][ T5975] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.636: corrupted xattr block 32: bad e_name length
[  141.839437][ T5975] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop2 ino=15
[  141.927012][ T5975] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.636: corrupted xattr block 32: bad e_name length
[  141.940504][   T28] kauditd_printk_skb: 582 callbacks suppressed
[  141.940520][   T28] audit: type=1400 audit(1772958578.830:6281): avc:  denied  { read write } for  pid=5948 comm="syz.2.636" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  141.987893][ T5975] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop2 ino=15
[  142.023397][   T28] audit: type=1400 audit(1772958578.920:6282): avc:  denied  { open } for  pid=5948 comm="syz.2.636" path="/146/file0/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  142.047732][   T28] audit: type=1326 audit(1772958578.950:6283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5979 comm="syz.5.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94815c799 code=0x7ffc0000
[  142.089175][ T5983] loop5: detected capacity change from 0 to 256
[  142.116828][   T28] audit: type=1326 audit(1772958578.950:6284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5979 comm="syz.5.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94815c799 code=0x7ffc0000
[  142.149977][ T5983] FAT-fs (loop5): Directory bread(block 64) failed
[  142.156730][ T5983] FAT-fs (loop5): Directory bread(block 65) failed
[  142.163311][ T5983] FAT-fs (loop5): Directory bread(block 66) failed
[  142.169978][ T5983] FAT-fs (loop5): Directory bread(block 67) failed
[  142.176601][ T5983] FAT-fs (loop5): Directory bread(block 68) failed
[  142.183366][ T5983] FAT-fs (loop5): Directory bread(block 69) failed
[  142.190317][ T5983] FAT-fs (loop5): Directory bread(block 70) failed
[  142.196914][ T5983] FAT-fs (loop5): Directory bread(block 71) failed
[  142.203470][ T5983] FAT-fs (loop5): Directory bread(block 72) failed
[  142.209652][   T28] audit: type=1326 audit(1772958578.950:6285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5979 comm="syz.5.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94815c799 code=0x7ffc0000
[  142.210100][ T5983] FAT-fs (loop5): Directory bread(block 73) failed
[  142.247517][ T5983] netlink: 20 bytes leftover after parsing attributes in process `syz.5.642'.
[  142.268569][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  142.283325][   T28] audit: type=1326 audit(1772958578.950:6287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5979 comm="syz.5.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7ff94815c799 code=0x7ffc0000
[  142.307511][   T28] audit: type=1326 audit(1772958578.950:6288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5979 comm="syz.5.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94815c799 code=0x7ffc0000
[  142.331353][   T28] audit: type=1326 audit(1772958578.950:6286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5979 comm="syz.5.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94815c799 code=0x7ffc0000
[  142.419131][ T5793] veth0_vlan: entered promiscuous mode
[  142.420309][   T28] audit: type=1326 audit(1772958578.950:6289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5979 comm="syz.5.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94815c799 code=0x7ffc0000
[  142.455782][ T5793] veth1_vlan: entered promiscuous mode
[  142.504428][ T5793] veth0_macvtap: entered promiscuous mode
[  142.512200][ T6001] FAULT_INJECTION: forcing a failure.
[  142.512200][ T6001] name failslab, interval 1, probability 0, space 0, times 0
[  142.529545][   T28] audit: type=1326 audit(1772958578.950:6290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5979 comm="syz.5.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94815c799 code=0x7ffc0000
[  142.530984][ T5793] veth1_macvtap: entered promiscuous mode
[  142.566775][ T6001] CPU: 0 UID: 0 PID: 6001 Comm: syz.2.646 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  142.566807][ T6001] Tainted: [W]=WARN
[  142.566813][ T6001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  142.566830][ T6001] Call Trace:
[  142.566837][ T6001]  <TASK>
[  142.566847][ T6001]  __dump_stack+0x1d/0x30
[  142.566912][ T6001]  dump_stack_lvl+0x95/0xd0
[  142.566942][ T6001]  dump_stack+0x15/0x1b
[  142.566994][ T6001]  should_fail_ex+0x263/0x280
[  142.567018][ T6001]  should_failslab+0x8c/0xb0
[  142.567043][ T6001]  __kmalloc_node_noprof+0xc8/0x560
[  142.567074][ T6001]  ? __vmalloc_node_range_noprof+0x428/0x12b0
[  142.567103][ T6001]  __vmalloc_node_range_noprof+0x428/0x12b0
[  142.567209][ T6001]  ? selinux_file_open+0x2e6/0x330
[  142.567234][ T6001]  ? __rcu_read_unlock+0x4e/0x70
[  142.567260][ T6001]  ? bpf_prog_alloc_no_stats+0x47/0x390
[  142.567322][ T6001]  __vmalloc_noprof+0xa4/0xf0
[  142.567352][ T6001]  ? bpf_prog_alloc_no_stats+0x47/0x390
[  142.567415][ T6001]  bpf_prog_alloc_no_stats+0x47/0x390
[  142.567487][ T6001]  ? bpf_prog_alloc+0x2a/0x150
[  142.567505][ T6001]  bpf_prog_alloc+0x3c/0x150
[  142.567527][ T6001]  bpf_prog_load+0x506/0x1140
[  142.567566][ T6001]  ? security_bpf+0x2b/0x90
[  142.567671][ T6001]  __sys_bpf+0x505/0x7e0
[  142.567791][ T6001]  __x64_sys_bpf+0x41/0x50
[  142.567833][ T6001]  x64_sys_call+0x10cb/0x3020
[  142.567865][ T6001]  do_syscall_64+0x12c/0x370
[  142.568004][ T6001]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  142.568030][ T6001] RIP: 0033:0x7f57c3e9c799
[  142.568045][ T6001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  142.568111][ T6001] RSP: 002b:00007f57c28ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  142.568136][ T6001] RAX: ffffffffffffffda RBX: 00007f57c4115fa0 RCX: 00007f57c3e9c799
[  142.568155][ T6001] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005
[  142.568172][ T6001] RBP: 00007f57c28ef090 R08: 0000000000000000 R09: 0000000000000000
[  142.568185][ T6001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  142.568238][ T6001] R13: 00007f57c4116038 R14: 00007f57c4115fa0 R15: 00007ffef8869df8
[  142.568262][ T6001]  </TASK>
[  142.568305][ T6001] syz.2.646: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null)
[  142.637384][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0
[  142.677574][ T5983] random: crng reseeded on system resumption
[  142.736845][ T6001] ,cpuset=/,mems_allowed=0
[  142.829928][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1
[  142.841394][ T6001] CPU: 1 UID: 0 PID: 6001 Comm: syz.2.646 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  142.841480][ T6001] Tainted: [W]=WARN
[  142.841489][ T6001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  142.841504][ T6001] Call Trace:
[  142.841510][ T6001]  <TASK>
[  142.841517][ T6001]  __dump_stack+0x1d/0x30
[  142.841548][ T6001]  dump_stack_lvl+0x95/0xd0
[  142.841571][ T6001]  dump_stack+0x15/0x1b
[  142.841690][ T6001]  warn_alloc+0x145/0x1c0
[  142.841755][ T6001]  __vmalloc_node_range_noprof+0x7d9/0x12b0
[  142.841811][ T6001]  ? selinux_file_open+0x2e6/0x330
[  142.841840][ T6001]  ? __rcu_read_unlock+0x4e/0x70
[  142.841875][ T6001]  ? bpf_prog_alloc_no_stats+0x47/0x390
[  142.841902][ T6001]  __vmalloc_noprof+0xa4/0xf0
[  142.842004][ T6001]  ? bpf_prog_alloc_no_stats+0x47/0x390
[  142.842067][ T6001]  bpf_prog_alloc_no_stats+0x47/0x390
[  142.842091][ T6001]  ? bpf_prog_alloc+0x2a/0x150
[  142.842112][ T6001]  bpf_prog_alloc+0x3c/0x150
[  142.842130][ T6001]  bpf_prog_load+0x506/0x1140
[  142.842167][ T6001]  ? security_bpf+0x2b/0x90
[  142.842207][ T6001]  __sys_bpf+0x505/0x7e0
[  142.842270][ T6001]  __x64_sys_bpf+0x41/0x50
[  142.842304][ T6001]  x64_sys_call+0x10cb/0x3020
[  142.842417][ T6001]  do_syscall_64+0x12c/0x370
[  142.842470][ T6001]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  142.842571][ T6001] RIP: 0033:0x7f57c3e9c799
[  142.842591][ T6001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  142.842614][ T6001] RSP: 002b:00007f57c28ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  142.842640][ T6001] RAX: ffffffffffffffda RBX: 00007f57c4115fa0 RCX: 00007f57c3e9c799
[  142.842655][ T6001] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005
[  142.842710][ T6001] RBP: 00007f57c28ef090 R08: 0000000000000000 R09: 0000000000000000
[  142.842727][ T6001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  142.842743][ T6001] R13: 00007f57c4116038 R14: 00007f57c4115fa0 R15: 00007ffef8869df8
[  142.842767][ T6001]  </TASK>
[  142.844980][  T310] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  142.851044][ T6001] Mem-Info:
[  143.064922][  T310] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  143.074008][ T6001] active_anon:30301 inactive_anon:0 isolated_anon:0
[  143.074008][ T6001]  active_file:24871 inactive_file:2612 isolated_file:0
[  143.074008][ T6001]  unevictable:0 dirty:154 writeback:0
[  143.074008][ T6001]  slab_reclaimable:3596 slab_unreclaimable:18658
[  143.074008][ T6001]  mapped:48192 shmem:21638 pagetables:3548
[  143.074008][ T6001]  sec_pagetables:0 bounce:0
[  143.074008][ T6001]  kernel_misc_reclaimable:0
[  143.074008][ T6001]  free:1857083 free_pcp:3161 free_cma:0
[  143.084933][  T310] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  143.146814][ T6001] Node 0 active_anon:123988kB inactive_anon:0kB active_file:99484kB inactive_file:10448kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:193696kB dirty:616kB writeback:0kB shmem:89452kB kernel_stack:3760kB pagetables:14192kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  143.178828][  T310] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  143.185291][ T6001] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  143.266950][ T6001] lowmem_reserve[]: 0 2879 7857 7857
[  143.272428][ T6001] Node 0 DMA32 free:2944560kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948188kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:104kB free_cma:0kB
[  143.343858][ T6001] lowmem_reserve[]: 0 0 4978 4978
[  143.372109][ T6001] Node 0 Normal free:4459056kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:110832kB inactive_anon:0kB active_file:99560kB inactive_file:9996kB unevictable:0kB writepending:684kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:29348kB local_pcp:24988kB free_cma:0kB
[  143.417267][ T6011] netlink: 8 bytes leftover after parsing attributes in process `syz.5.647'.
[  143.447189][ T6001] lowmem_reserve[]: 0 0 0 0
[  143.451901][ T6001] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  143.491530][ T6001] Node 0 DMA32: 2*4kB (M) 1*8kB (M) 4*16kB (M) 3*32kB (M) 4*64kB (M) 1*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944560kB
[  143.513463][ T6015] loop7: detected capacity change from 0 to 512
[  143.520315][ T6015] EXT4-fs: Ignoring removed oldalloc option
[  143.540624][ T6015] EXT4-fs (loop7): 1 truncate cleaned up
[  143.546967][ T6015] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  143.594266][ T6021] loop5: detected capacity change from 0 to 164
[  143.606665][ T6001] Node 0 Normal: 2*4kB (UE) 45*8kB (UE) 26*16kB (UM) 19*32kB (UME) 10*64kB (UE) 8*128kB (UE) 17*256kB (UM) 24*512kB (UM) 27*1024kB (UME) 14*2048kB (UM) 1070*4096kB (UM) = 4458736kB
[  143.625842][ T6015] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=6015 comm=syz.7.648
[  143.651203][ T6021] Unable to read rock-ridge attributes
[  143.660880][ T6023] __vm_enough_memory: pid: 6023, comm: syz.3.651, bytes: 4503599627366400 not enough memory for the allocation
[  143.673618][ T6021] Unable to read rock-ridge attributes
[  143.691224][ T6021] iso9660: Corrupted directory entry in block 4 of inode 1792
[  143.699515][ T6001] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB
[  143.725270][ T6001] 46780 total pagecache pages
[  143.731166][ T5793] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  143.731204][ T6001] 0 pages in swap cache
[  143.731215][ T6001] Free swap  = 124996kB
[  143.731239][ T6001] Total swap = 124996kB
[  143.731249][ T6001] 2097051 pages RAM
[  143.731259][ T6001] 0 pages HighMem/MovableOnly
[  143.731269][ T6001] 81604 pages reserved
[  143.731313][ T5793] ==================================================================
[  143.731342][ T5793] BUG: KCSAN: data-race in data_push_tail / vsnprintf
[  143.731368][ T5793] 
[  143.731375][ T5793] write to 0xffffffff89392528 of 13 bytes by task 6001 on cpu 0:
[  143.731396][ T5793]  vsnprintf+0x2ce/0x860
[  143.731421][ T5793]  vscnprintf+0x41/0x90
[  143.731445][ T5793]  printk_sprint+0x30/0x2e0
[  143.731464][ T5793]  vprintk_store+0x57b/0x910
[  143.731483][ T5793]  vprintk_emit+0x1a4/0x600
[  143.731503][ T5793]  vprintk_default+0x26/0x30
[  143.731523][ T5793]  vprintk+0x1d/0x30
[  143.731550][ T5793]  _printk+0x79/0xa0
[  143.731569][ T5793]  show_swap_cache_info+0x54/0x80
[  143.731595][ T5793]  __show_mem+0x135d/0x1440
[  143.731617][ T5793]  warn_alloc+0x1a1/0x1c0
[  143.731642][ T5793]  __vmalloc_node_range_noprof+0x7d9/0x12b0
[  143.731670][ T5793]  __vmalloc_noprof+0xa4/0xf0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  143.731696][ T5793]  bpf_prog_alloc_no_stats+0x47/0x390
[  143.731716][ T5793]  bpf_prog_alloc+0x3c/0x150
[  143.731734][ T5793]  bpf_prog_load+0x506/0x1140
[  143.731756][ T5793]  __sys_bpf+0x505/0x7e0
[  143.731775][ T5793]  __x64_sys_bpf+0x41/0x50
[  143.731809][ T5793]  x64_sys_call+0x10cb/0x3020
[  143.731838][ T5793]  do_syscall_64+0x12c/0x370
[  143.731858][ T5793]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  143.731880][ T5793] 
[  143.731887][ T5793] read to 0xffffffff89392530 of 8 bytes by task 5793 on cpu 1:
[  143.731904][ T5793]  data_push_tail+0x100/0x470
[  143.731923][ T5793]  data_alloc+0x11b/0x390
[  143.731954][ T5793]  prb_reserve+0x8d7/0xae0
[  143.731985][ T5793]  vprintk_store+0x54a/0x910
[  143.732005][ T5793]  vprintk_emit+0x1a4/0x600
[  143.732024][ T5793]  vprintk_default+0x26/0x30
[  143.732044][ T5793]  vprintk+0x1d/0x30
[  143.732076][ T5793]  _printk+0x79/0xa0
[  143.732094][ T5793]  __ext4_msg+0x1aa/0x1c0
[  143.732115][ T5793]  ext4_put_super+0x90/0x7d0
[  143.732139][ T5793]  generic_shutdown_super+0xee/0x220
[  143.732170][ T5793]  kill_block_super+0x2a/0x70
[  143.732203][ T5793]  ext4_kill_sb+0x42/0x80
[  143.732222][ T5793]  deactivate_locked_super+0x75/0x1c0
[  143.732252][ T5793]  deactivate_super+0x97/0xa0
[  143.732280][ T5793]  cleanup_mnt+0x2bb/0x330
[  143.732307][ T5793]  __cleanup_mnt+0x19/0x20
[  143.732334][ T5793]  task_work_run+0x130/0x1a0
[  143.732357][ T5793]  exit_to_user_mode_loop+0x1f4/0x6f0
[  143.732378][ T5793]  do_syscall_64+0x249/0x370
[  143.732397][ T5793]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  143.732419][ T5793] 
[  143.732424][ T5793] value changed: 0x00000000ffffe364 -> 0x343231203d202070
[  143.732438][ T5793] 
[  143.732443][ T5793] Reported by Kernel Concurrency Sanitizer on:
[  143.732458][ T5793] CPU: 1 UID: 0 PID: 5793 Comm: syz-executor Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  143.732489][ T5793] Tainted: [W]=WARN
[  143.732498][ T5793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  143.732512][ T5793] ==================================================================
[  144.249624][  T118] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.369547][  T118] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.419587][  T118] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.479169][  T118] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.596805][  T118] bridge_slave_1: left allmulticast mode
[  144.602533][  T118] bridge_slave_1: left promiscuous mode
[  144.616717][  T118] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.637185][  T118] bridge_slave_0: left allmulticast mode
[  144.642941][  T118] bridge_slave_0: left promiscuous mode
[  144.651343][  T118] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.788960][  T118] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  144.801483][  T118] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  144.811523][  T118] bond0 (unregistering): Released all slaves
[  144.888488][  T118] hsr_slave_0: left promiscuous mode
[  144.894294][  T118] hsr_slave_1: left promiscuous mode
[  144.900382][  T118] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  144.910742][  T118] batman_adv: batadv0: Removing interface: batadv_slave_0
[  144.919008][  T118] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  144.926832][  T118] batman_adv: batadv0: Removing interface: batadv_slave_1
[  144.938005][  T118] veth1_macvtap: left promiscuous mode
[  144.943530][  T118] veth0_macvtap: left promiscuous mode
[  144.949299][  T118] veth1_vlan: left promiscuous mode
[  144.954557][  T118] veth0_vlan: left promiscuous mode
[  145.037401][  T118] team0 (unregistering): Port device team_slave_1 removed
[  145.047661][  T118] team0 (unregistering): Port device team_slave_0 removed
[  145.362408][  T118] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.429643][  T118] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.509867][  T118] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.570449][  T118] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.652262][  T118] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.689521][  T118] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.741588][  T118] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.790152][  T118] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.868402][  T118] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.920287][  T118] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.971582][  T118] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.021647][  T118] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.088519][  T118] bridge_slave_1: left allmulticast mode
[  146.094248][  T118] bridge_slave_1: left promiscuous mode
[  146.100507][  T118] bridge0: port 2(bridge_slave_1) entered disabled state
[  146.108474][  T118] bridge_slave_0: left allmulticast mode
[  146.114145][  T118] bridge_slave_0: left promiscuous mode
[  146.120217][  T118] bridge0: port 1(bridge_slave_0) entered disabled state
[  146.129512][  T118] bridge_slave_1: left allmulticast mode
[  146.135325][  T118] bridge_slave_1: left promiscuous mode
[  146.141517][  T118] bridge0: port 2(bridge_slave_1) entered disabled state
[  146.149536][  T118] bridge_slave_0: left allmulticast mode
[  146.155254][  T118] bridge_slave_0: left promiscuous mode
[  146.161461][  T118] bridge0: port 1(bridge_slave_0) entered disabled state
[  146.169942][  T118] bond0: left allmulticast mode
[  146.174872][  T118] bond_slave_0: left allmulticast mode
[  146.180797][  T118] bond_slave_1: left allmulticast mode
[  146.186436][  T118] bridge0: port 3(bond0) entered disabled state
[  146.193605][  T118] bridge_slave_1: left allmulticast mode
[  146.199552][  T118] bridge_slave_1: left promiscuous mode
[  146.205445][  T118] bridge0: port 2(bridge_slave_1) entered disabled state
[  146.213639][  T118] bridge_slave_0: left allmulticast mode
[  146.219552][  T118] bridge_slave_0: left promiscuous mode
[  146.225524][  T118] bridge0: port 1(bridge_slave_0) entered disabled state
[  146.379002][  T118] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  146.388984][  T118] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  146.398560][  T118] bond0 (unregistering): Released all slaves
[  146.478579][  T118] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  146.488647][  T118] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  146.498138][  T118] bond0 (unregistering): Released all slaves
[  146.658369][  T118] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  146.667299][  T118] bond_slave_0: left promiscuous mode
[  146.673785][  T118] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  146.682835][  T118] bond_slave_1: left promiscuous mode
[  146.688891][  T118] bond0 (unregistering): Released all slaves
[  146.696615][  T118] bond1 (unregistering): Released all slaves
[  146.805080][  T118] hsr_slave_0: left promiscuous mode
[  146.811015][  T118] hsr_slave_1: left promiscuous mode
[  146.817928][  T118] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  146.825360][  T118] batman_adv: batadv0: Removing interface: batadv_slave_0
[  146.833229][  T118] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  146.841310][  T118] batman_adv: batadv0: Removing interface: batadv_slave_1
[  146.850624][  T118] hsr_slave_0: left promiscuous mode
[  146.856301][  T118] hsr_slave_1: left promiscuous mode
[  146.863965][  T118] hsr_slave_0: left promiscuous mode
[  146.870114][  T118] hsr_slave_1: left promiscuous mode
[  146.875920][  T118] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  146.884106][  T118] batman_adv: batadv0: Removing interface: batadv_slave_0
[  146.891904][  T118] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  146.900915][  T118] batman_adv: batadv0: Removing interface: batadv_slave_1
[  146.908862][  T118] batman_adv: batadv0: Interface deactivated: macsec1
[  146.915782][  T118] batman_adv: batadv0: Removing interface: macsec1
[  146.929803][  T118] veth1_macvtap: left promiscuous mode
[  146.935323][  T118] veth0_macvtap: left promiscuous mode
[  146.941319][  T118] veth1_vlan: left promiscuous mode
[  146.946853][  T118] veth0_vlan: left promiscuous mode
[  146.952715][  T118] veth1_macvtap: left promiscuous mode
[  146.958415][  T118] veth0_macvtap: left promiscuous mode
[  146.963948][  T118] veth1_vlan: left promiscuous mode
[  146.969280][  T118] veth0_vlan: left promiscuous mode
[  146.975063][  T118] batadv_slave_0: left promiscuous mode
[  146.980711][  T118] veth1_macvtap: left promiscuous mode
[  146.986213][  T118] veth0_macvtap: left promiscuous mode
[  146.991837][  T118] veth1_vlan: left promiscuous mode
[  146.997183][  T118] veth0_vlan: left promiscuous mode
[  147.137625][  T118] team0 (unregistering): Port device team_slave_1 removed
[  147.147340][  T118] team0 (unregistering): Port device team_slave_0 removed
[  147.207085][  T118] team0 (unregistering): Port device team_slave_1 removed
[  147.217368][  T118] team0 (unregistering): Port device team_slave_0 removed
[  147.248894][   T30] smc: removing ib device syU×
[  147.299280][  T118] team0 (unregistering): Port device 
7
2˛˙ removed
[  147.310605][  T118] team0 (unregistering): Port device team_slave_0 removed
[  147.348404][ T3356] lo speed is unknown, defaulting to 1000
[  147.354161][ T3356] infiniband syz0: ib_query_port failed (-19)
[  147.362417][ T3415] lo speed is unknown, defaulting to 1000
[  147.368559][ T3415] syU×: Port: 1 Link DOWN
[  147.950795][  T118] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.011407][  T118] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.059358][  T118] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.100246][  T118] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.159081][  T118] bridge_slave_1: left allmulticast mode
[  148.164832][  T118] bridge_slave_1: left promiscuous mode
[  148.170803][  T118] bridge0: port 2(bridge_slave_1) entered disabled state
[  148.179189][  T118] bridge_slave_0: left allmulticast mode
[  148.184869][  T118] bridge_slave_0: left promiscuous mode
[  148.190993][  T118] bridge0: port 1(bridge_slave_0) entered disabled state
[  148.271134][  T118] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  148.281285][  T118] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  148.291017][  T118] bond0 (unregistering): Released all slaves
[  148.350479][  T118] hsr_slave_0: left promiscuous mode
[  148.356209][  T118] hsr_slave_1: left promiscuous mode
[  148.361958][  T118] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  148.369517][  T118] batman_adv: batadv0: Removing interface: batadv_slave_0
[  148.377250][  T118] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  148.384726][  T118] batman_adv: batadv0: Removing interface: batadv_slave_1
[  148.395500][  T118] veth1_macvtap: left promiscuous mode
[  148.401143][  T118] veth0_macvtap: left promiscuous mode
[  148.407098][  T118] veth1_vlan: left promiscuous mode
[  148.412362][  T118] veth0_vlan: left promiscuous mode
[  148.489754][  T118] team0 (unregistering): Port device team_slave_1 removed
[  148.499503][  T118] team0 (unregistering): Port device team_slave_0 removed