last executing test programs:

46.877797658s ago: executing program 0 (id=487):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
close(r1)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
io_setup(0x2, &(0x7f0000000000)=<r2=>0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x1)
syz_clone3(0x0, 0x0)
io_submit(r2, 0x2, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, 0xffffffffffffffff, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0x7ba, 0xffffffffffffffff, 0x0, 0x0, 0x7}])

45.73842879s ago: executing program 0 (id=491):
r0 = syz_open_dev$loop(&(0x7f0000000000), 0xfffffffffffffffe, 0x41)
fadvise64(r0, 0x401, 0xffffffff, 0x3)

45.636951005s ago: executing program 0 (id=492):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x21081e, &(0x7f0000000440)={[{@data_err_abort}, {@user_xattr}, {@oldalloc}, {@jqfmt_vfsv0}, {@data_err_ignore}, {@noload}]}, 0x1, 0x501, &(0x7f0000000ac0)="$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") (async)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x82}, 0x100b28, 0x5, 0x0, 0x8, 0x8, 0x6, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/user\x00')
open_by_handle_at(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB=' '], 0x0)
lchown(&(0x7f0000000200)='./file1\x00', 0xee00, 0xee01)

45.223593688s ago: executing program 0 (id=495):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001000000000000000000000000272000030000000000000000010000000900010073797a3000000000400000000009000300737b7a320000000014000480080002400000000308000040000900010073797a300000000058000000060a010400000000000000000100000008000b400000f1c00900010073797a3000000000300004802c0001800a0001006c696d69740000001c0002800c00024000000000800000010c0001400000000000000008140000001100010000000000000000000000000a000000"], 0xe0}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2200054, &(0x7f00000101c0)={[{@dioread_lock}, {@nodelalloc}]}, 0x1, 0x24c, &(0x7f0000000800)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x100)
mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x100)
r2 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112)
getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8)
getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8)
r3 = dup(r1)
ioctl$PTP_PEROUT_REQUEST2(r3, 0x40383d0c, &(0x7f0000000280)={{0xeb4, 0x7}, {0xeb4, 0x8007}, 0x10000004, 0x5})
syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x1, 0x31, 0x30, 0x65, 0x0, 0x9, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x1, 0x5, 0x0, 0x65, 0x174, 0xd, 0x73, 0x6, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x110)
pwrite64(r4, &(0x7f0000000140)='2', 0x1, 0x8080c61)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, <r5=>0xffffffffffffffff}, 0x4)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000700)={'syztnl0\x00', &(0x7f00000005c0)={'tunl0\x00', <r6=>0x0, 0x40, 0x40, 0x3ff, 0x101, {{0x43, 0x4, 0x0, 0x2c, 0x10c, 0x67, 0x0, 0x6, 0x29, 0x0, @rand_addr=0x64010102, @multicast1, {[@lsrr={0x83, 0x13, 0x6e, [@private=0xa010100, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @timestamp_prespec={0x44, 0x3c, 0x4b, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffffa}, {@private=0xa010101, 0x3ff}, {@broadcast, 0x6}, {@broadcast, 0x3}, {@remote, 0xa87}, {@rand_addr=0x8, 0x75a}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}]}, @lsrr={0x83, 0x1f, 0xf4, [@rand_addr=0x64010100, @local, @broadcast, @private=0xa010102, @loopback, @remote, @broadcast]}, @cipso={0x86, 0x34, 0x3, [{0x6, 0x6, "b21f0fb4"}, {0x7, 0x7, "e7cff9ac4e"}, {0x7, 0x10, "a05451048da546ed5679139f9012"}, {0x7, 0x8, "b54a59a848d0"}, {0x7, 0x7, "a499afd243"}, {0x6, 0x2}]}, @ssrr={0x89, 0x17, 0xc1, [@multicast1, @multicast2, @multicast2, @rand_addr=0x64010101, @broadcast]}, @end, @lsrr={0x83, 0x7, 0x47, [@multicast2]}, @timestamp_prespec={0x44, 0x34, 0x4a, 0x3, 0x8, [{@loopback, 0xfffffffd}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@dev={0xac, 0x14, 0x14, 0x40}, 0x4}, {@rand_addr=0x64010100, 0x8001}, {@multicast1, 0x400000}, {@remote, 0x80}]}]}}}}})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0x6, '\x00', r6, r2, 0x0, 0x2, 0x5}, 0x50)
ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)

44.949808583s ago: executing program 0 (id=496):
socket$nl_route(0x10, 0x3, 0x0)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@fallback=r0, r0, 0x2f, 0x8, 0xffffffffffffffff, @void, @value=0x0}, 0x20)
prctl$PR_MCE_KILL(0x21, 0x1, 0x2)

44.336701036s ago: executing program 0 (id=501):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xc0000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000004, 0x4, @perf_config_ext={0x100000003, 0x10001}, 0x8000, 0x6, 0x4010000, 0x2, 0x9, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x10000bc}, 0x0, 0xdffffff7ffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80)
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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")
ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000140)={'pim6reg1\x00', {0x2, 0x4e24, @multicast1}})
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = dup(r2)
ioctl$SG_GET_ACCESS_COUNT(r3, 0x2289, &(0x7f0000000300))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f00000001c0)="92", 0x1}], 0x1}, 0x5)
sendmsg$sock(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000600)="bd", 0x1}], 0x1}, 0x2400c082)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200002, 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000100)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', &(0x7f0000000300)='/dev/net/tun\x00', 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x46, 0x1, 0x0, 0x0, 0x0, 0x3, 0x40510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x0, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
ioctl$IMDELTIMER(r3, 0x80044941, &(0x7f0000000100)=0x1)
socketpair(0x2c, 0x3, 0x0, &(0x7f0000000000))
r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
fsetxattr(r7, &(0x7f0000001b80)=ANY=[@ANYBLOB='uszr>h0\x00'], 0x0, 0x0, 0x0)

44.27035421s ago: executing program 32 (id=501):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xc0000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000004, 0x4, @perf_config_ext={0x100000003, 0x10001}, 0x8000, 0x6, 0x4010000, 0x2, 0x9, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x10000bc}, 0x0, 0xdffffff7ffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80)
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$eJzs3c9vFFUcAPDv7LalpWALMSoepIkxkCgtLWCI8QBXYxr8ES9erLQgoUDT1mjRhJLgxcR4McbEkwfxv1AiV0960YMXT4aEqOFo4prZ7vTnbH8s7Q4wn0+y7My8ebw3LN++t6/vzQRQWgPpH5WIAxExlUT0JfOLaR3RSBxYOO/ePx+fTV9J1Gpv/JVE0jiWnZ803nsbmbsj4ucfk9hfXVvuzNzVi2OTkxPTjf2h2UtTQzNzV49cuDR2fuL8xOWRF0dOnjh+4uTw0Zau69raQ2l1Puj7dPTtb7/+Nxn+7vfRJE7FK40Tl1/HdhmIgfq/SbI2qffkdhdWkGrj/8nyjzjpKLBCbEn2+XVGxJPRF9VY+vD64pPXCq0csKNqSUQNKKlE/ENJZf2A7Lv96u/BlUJ6JUA73D29MACwNv47FsYGo7s+NrD7XhLLh3WSiGhtZG6lPRHx0+3RG+duj96Y3rsz43BAvvnrEfHUsvjvylKSevz3R3f01+O/siL+037BmcZ7evz1FstfPVQs/qF9FuK/O6f9X4r/aBL/7yyL/3dbLH9gafO9nhXx39PqJQEAAAAAAEBp3TodES/kzf+pLM7/iZz5P70RcWobyh9Ytb/29/+VO9tQDJDj7umIl3Pn/1aiujD7t7/a+D3/3vp8gM7k3IXJiaMR8VhEHI7OXen+8DplHPls/1fN0gYa8/+yV1p++r50RuVOx66VecbHZsfu97qBiLvXI57Onf+bLLb/SU77n/48mNpkGfufu3mmWdrG8Q/slNo3EYdy2/+lu1Yk69+fY6jeHxjKegVrPfPR5983K7/V+HeLCbh/afu/e/3470+W369nZutlHJvrqDVLa7X/35W8Wb/lTLZc4cOx2dnp4Yie5NVqenTF8ZGt1xkeRVk8ZPGSxv/hZ9cf/8vr//dExPyqvzv5e+Wa4swT//X+0aw++v9QnDT+x7fU/jfdSOYjcpNGbvb/0Kz8zbX/x+tt/eHGEeN/sODLLEy7Vh7PCdCOvKR21xcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgWViNgTSWVwcbtSGRyM6I2Ix2N3ZfLKzOzz5668f3k8Tas//7+SPem3b2E/yZ7/379sf2TV/rGI2BcRX1R76vuDZ69Mjhd98QAAAAAAAAAAAAAAAAAAAPCA6G2y/j/1Z7Xo2gE7rqPoCgCFyYn/X4qoB9B+2n8oL/EP5SX+obzEP5SX+IfyEv9QXuIfykv8AwAAAADAI2XfwVu/JREx/1JP/ZXqaqR1FlozYKdViq4AUBi3+IHyMvUHyst3fCDZIL27aaaNcjbLnJo6u3FmAAAAAAAAAAAAACBz6ID1/1BW1v9DeVn/D+WVrf8/WHA9gPZr+Tt+0zW9wMNovZX8zcN9E+v/AQAAAAAAAAAAAIBtMTN39eLY5OTEdPs2fm089Cv3nJ6IaHN9so23iii02I1arXat/lE8IPV5yDeyqfCbz9WdHwU7s5Gt9dtcroJ+IAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGv8HwAA//+xpBxA")
ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000140)={'pim6reg1\x00', {0x2, 0x4e24, @multicast1}})
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = dup(r2)
ioctl$SG_GET_ACCESS_COUNT(r3, 0x2289, &(0x7f0000000300))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f00000001c0)="92", 0x1}], 0x1}, 0x5)
sendmsg$sock(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000600)="bd", 0x1}], 0x1}, 0x2400c082)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200002, 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000100)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', &(0x7f0000000300)='/dev/net/tun\x00', 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x46, 0x1, 0x0, 0x0, 0x0, 0x3, 0x40510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x0, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
ioctl$IMDELTIMER(r3, 0x80044941, &(0x7f0000000100)=0x1)
socketpair(0x2c, 0x3, 0x0, &(0x7f0000000000))
r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
fsetxattr(r7, &(0x7f0000001b80)=ANY=[@ANYBLOB='uszr>h0\x00'], 0x0, 0x0, 0x0)

4.523439893s ago: executing program 3 (id=741):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
close(r1)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
io_setup(0x2, &(0x7f0000000000)=<r2=>0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x1)
syz_clone3(&(0x7f0000000300)={0x22800000, &(0x7f0000000040)=<r3=>0xffffffffffffffff, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_submit(r2, 0x2, &(0x7f0000000200)=[0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0x7ba, r3, 0x0, 0x0, 0x7}])

3.931124375s ago: executing program 3 (id=746):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0, <r1=>0xffffffffffffffff}, 0x4)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x3, r1, 0x4}, 0x38)

3.684700709s ago: executing program 3 (id=747):
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000000140))
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a3000"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x854}, 0x4040080)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@debug}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@i_version}]}, 0xfd, 0x50f, &(0x7f0000000dc0)="$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")
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = syz_open_dev$loop(&(0x7f0000000200), 0x89, 0x2282)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000005c0)={r3, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x12, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}})
shutdown(r1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff)
unshare(0x20000400)
pselect6(0x40, &(0x7f0000000100)={0x6, 0x0, 0x5, 0xfffffffffffffffe, 0x800, 0x400000000, 0x8000000100000, 0x10000000000}, 0x0, &(0x7f0000000000)={0x1f, 0x0, 0x9, 0x1, 0xf, 0x0, 0x6a9, 0x43}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)

2.833362095s ago: executing program 4 (id=755):
r0 = socket$inet6(0x10, 0x3, 0x0) (async)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
listen(r1, 0x0) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f00000002c0), &(0x7f00000002c0)=@tcp=r1, 0x2}, 0x20) (async)
r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SCSI_IOCTL_DOORLOCK(r3, 0x5380) (async)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
shutdown(r4, 0x1)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x4, 0x4) (async)
sendto$inet(r4, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) (async)
listen(r4, 0x89) (async)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="5500000020007fafa72d13b2a4a2719302000000030b43026c26236925000400fd7f0000dbddc2806b367e0000bd2dca8a9848a3c728f1c46b7b31afdc1338d5090000007ba900005ae583de0da6d8319fd8af8400", 0x55}], 0x1}, 0x0)

2.696100783s ago: executing program 4 (id=758):
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
syz_open_dev$tty1(0xc, 0x4, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x7, 0x4, 0x0, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)

2.695571133s ago: executing program 2 (id=759):
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x4, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402000a}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000040), 0xcf)
socket$kcm(0xa, 0x5, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
io_uring_setup(0x1c75, &(0x7f0000000180)={0x0, 0xd0a9, 0x1, 0x1, 0x209})
r2 = syz_io_uring_setup(0x4d17, &(0x7f0000000280)={0x0, 0xada, 0x2, 0x2, 0x3a0}, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
syz_io_uring_setup(0x3793, &(0x7f0000000080)={0x0, 0x8000004, 0x20, 0x10004, 0x383, 0x0, r2}, &(0x7f0000000240)=<r3=>0x0, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000000))
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000)
r5 = syz_open_procfs(0x0, &(0x7f0000000480)='fdinfo/3\x00')
syz_io_uring_complete(r3, r4)
read$eventfd(r5, &(0x7f0000000140), 0x8)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x25}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0)

2.611770897s ago: executing program 2 (id=760):
r0 = io_uring_setup(0x70c3, &(0x7f0000000180)={0x0, 0x2c43, 0x0, 0x80001, 0x2})
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000a00)="d800000018008105e00212ba0d8105040a020200020f108b067c55a1bc000900b80006990200000015000500fc038178a80015000338004002000c0901ac040000d67f6f947a7100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e97030000000000000000000000000081e1df1a0000008dc5fb510162", 0xd8}], 0x1}, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68)
syz_emit_ethernet(0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r2 = io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0x3723, 0xf080, 0xc, 0xa0002f5})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa040, 0x0)
fcntl$setlease(r3, 0x400, 0x0)
flock(r3, 0x6)
r4 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r4, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
bind$tipc(r4, &(0x7f0000000140)=@name={0x1e, 0x2, 0xfffffffffffffffe, {{0x42, 0x2}, 0x2000}}, 0x10)
r5 = syz_clone(0x5121000, &(0x7f0000000680)="2f19db9f46c57c008448aa37a92d5c46698a05647eb8cf4471eaf6a4c68426f34a0141456f76c9fc763f2ab008a8a3dd5a52582597cb3a6b5e2fd70dbeaec101a7f9bff3ee428038db16335447979f0ee5aa34", 0x53, &(0x7f0000000740), &(0x7f0000000780), &(0x7f00000007c0)="ab0698880f3e7d80762920a00dc4d767abe0174c61fae6548897ce4f5a9041998a57fdfd303ec0768302ebb534e19721e8bad9d2e38bf67cd4bb24cb0b29a4cc5981f5ee418dca31bc9d2ff6aad8d85ca5c02db790bfcb069d64570933498987b013a4bd6f8865848abe88ea10227c707a4af434026ea885472d957781f268f3f0bed84e3813c7e1cb24d7758565e36007c5e3d268cbcccf4a28bcd3c43c51d9c5a954ce22")
r6 = syz_clone(0xc0000000, &(0x7f0000000880)="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", 0xfd, &(0x7f0000000980), &(0x7f00000009c0), &(0x7f0000000a00)="d0410b556f878ad8f294950c15dceb3b2503b52706663b3155edf6d3216f405bc520ccca35e411442278606d989d41aa56c7523fd6866127b97ed866bbf91f1cea6c1824863110d0b9068694fd74f3aad1064b9534b58b9a4a7c97c2460722e692678e67b0f5f0c7c89b1ecbc3e26bee347ff5990e250e52a6f55ffc05315a723734bbcd60c16d0c67420d9f0d787137f642000b0cdb56af10494d54d73fee5d4e4411fcf1184eba4b4abf66aba7f91a3d1784c3d47007e54868a09e4717c2149a36a6ec651f86b30af4bbbfcede12b8663b91954ec9db97590334733d6687a3822b474c90d2c4c64ff5ecae9c39a20d07777b2454867c0a0e96c212")
syz_clone3(&(0x7f0000000b40)={0x300040080, &(0x7f0000000240), &(0x7f00000002c0), &(0x7f0000000300), {0x1e}, &(0x7f0000000540)=""/199, 0xc7, &(0x7f0000000640)=""/44, &(0x7f0000000b00)=[r5, r6], 0x2, {r3}}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x107220, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1})
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'macsec0\x00'})

2.491241584s ago: executing program 3 (id=761):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x2100, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x224, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0x3)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000900)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="08002abd7000fbdbdf250600000008000004", @ANYRES32=r5, @ANYBLOB="f0ff0500000000000500530000000000050053000000000008001780040003001c00e700e460bf5bffa1de43e25a8059c41cc41c15766ff2a89e3f281c00e70027c66567930c3f16bbd528e2c86571eca4c71cd39542f1681c00e7008a126b1be8650e01b9ea6b0ffd5ed66c40643f80808537e41c00e70007cf7d8c4aa9e3c779a0ef41415e6c66d83f1e6d9c15c598080005000c0000000500530001000000080005000600000005005300000000000500530001000000"], 0xd4}, 0x1, 0x0, 0x0, 0x5}, 0x895)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000100)={0x34, r1, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x3, 0x3d}}}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040c5}, 0x44054)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0xc0239, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x20a3, 0x0, 0x0, 0x0, 0x89, 0x0, 0x43, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)="cd2c35ea4f0134beb902000000002e3edaa67f066a80f87ee6daaeacfff979df2b5edbdcb747901195845facb1ac7f30e1f1767de49da2aa3c90c067db2b624055", &(0x7f0000000300), 0x201003, r8}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000001d40)={r8, &(0x7f0000000000), &(0x7f0000001c40)=""/245}, 0x20)
sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000003000000580001800d0001007564703a737982310000000044000400200011000a004e240000004300000000000000000000ffffe0000001f80f000020"], 0x6c}}, 0x0)
r9 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r9, 0x29, 0x11, &(0x7f0000000140)=0x7, 0x4)

2.156061232s ago: executing program 5 (id=762):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001800010000000001fddbdf251d01020008000a00", @ANYRES32, @ANYBLOB='\b\x00\t\x00', @ANYRES32, @ANYBLOB="1500040003000000030300004505a8b9e859abc00100000008000e006c"], 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
flistxattr(r1, &(0x7f0000000000)=""/7, 0x7)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x8, 0x0, 0x0}}, 0x9)
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x1ea, 0x0, &(0x7f0000000680)="c3ef7f670000ec6783b4241544b50000000000000000000000000033a42c9550f50ac311e0f0544b00aab05450dc23d925bde6a1b56f92241432fa00228f11b0cc67e2e658d909c57270d30b39d3050b381d0000000000000004e1932780b192d2d61359ae0fe90b9d2a6faff570879d2f1b517210627c69e56ed195980a9a880700d5f059a6b7bb7b6a9787136a408914de373597695c519462765ac26a88185098ad1245c1d4d5162ce2fea5c53a8a44e93948de54e526e931694b28cdbc247797e769ef43a9f6bd08ef5c0abb843cc87035a5b7000083add0ccba38d197307108bfdbfae41be13e5d862e02e9f2d2582ff8ac1633f06ec78ba44e55b01022e4571179474ab5fdc0434372f826013043d00700000000000000a398285fc817fcc5ff0f02ea32cfd39b6a35f62e75f5a18720b2c73e9146cd67f57e2826f63986c202521300f2d4de3a1aed06b4771d349920e5a7891bd7b0ce80fdcbced288defdce000000e5ff00000000f75ac937aa74824fc2d467e0cfc3ff42b92176967ffb5940c531cb0dfb88cb3218c79c622b233ff7a008adf59e6dc4f4f306dd87ff882fa663110d10b9360893de41007872ca49edb852b1892823276badf3eaba18117ab83f7e38c666252d78151229c61119ba29e621def514c7f8ce13db7c270c0de77d53b5e759de56", 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x10000008}, 0x50)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x8b8}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x4)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RATE_DEL(r4, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0b1600000000000000004a0000000800b800000000000e"], 0x3c}}, 0x0)
r5 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0)
ioctl$FIBMAP(r5, 0x1, &(0x7f0000000040)=0x85)
ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000080)={0x2001, 0xfffffffa, 0x8b9, 0x6})
sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0)

2.034752468s ago: executing program 5 (id=763):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0)
ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000000)={0x16, 0x1000011, 0x7, 0x7, 0x7, 0x55, 0x6, 0x142, 0xffffffffffffffff})
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, r1}}, 0x48)
mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='cgroup\x00', 0x0, &(0x7f0000000380)='source')
arch_prctl$ARCH_SHSTK_ENABLE(0x1003, 0xf0ff1f00000000)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0xffffffffffffffff, <r3=>0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000140)}, 0x20)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_DEL(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x18, 0x2, 0x9, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFCTH_TUPLE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000280)={'syztnl1\x00', <r5=>0x0, 0x2f, 0x3, 0x8b, 0x4, 0x4d, @private1={0xfc, 0x1, '\x00', 0x1}, @local, 0x20, 0x40, 0x2, 0x19dd}})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000340)={{0x1, 0x1, 0x18, <r6=>r0, {0x2}}, './file0\x00'})
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x2, '\x00', r5, r6, 0x2, 0x2, 0x3}, 0x50)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x201, 0x0, 0x0, {0x2}}, @NFT_MSG_NEWFLOWTABLE={0x44, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x18, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, @NFT_MSG_DELFLOWTABLE={0xa0, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x74, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'macsec0\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x10}}, 0x120}}, 0x0)

1.998830461s ago: executing program 2 (id=764):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)}], 0x1}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)

1.876191977s ago: executing program 5 (id=765):
socket$pptp(0x18, 0x1, 0x2)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400))
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x12, r0, 0x0)
mlock2(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x0)
syz_io_uring_setup(0x48ba, &(0x7f0000000000)={0x0, 0xfdfffffc, 0x20, 0xfffffdfb, 0x71}, &(0x7f0000000080), &(0x7f0000ff4000), &(0x7f0000000000))
syz_clone(0x80201000, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbff, {{}, {}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x110}, 0x80080)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48)
r3 = add_key$keyring(&(0x7f0000000580), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9)
add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f00000000c0)="ba0e3700f4f01ccff1384bb1faaf15ad650ca0adfafe1e38faa8d6ba16fc27a5f672d11ca46445d417110cd80ce5579d71c352f3f24d8dac65ab719062be9d757d9b673fc0b86050430d23d0317b143d23c1eeeeb96772a0", 0x58, r3)
socket$nl_generic(0x10, 0x3, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f00000001c0)=[{0x6, 0x84, 0x7, 0x7ffc0001}]})
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x1e, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x3, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
brk(0x20000000000000)

1.776832743s ago: executing program 4 (id=766):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000000000b0, 0x42758, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xd07, 0x4}, 0x2000, 0x8, 0x0, 0x0, 0xb, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x0, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x62, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0)

1.564241034s ago: executing program 4 (id=768):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r0, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f40)=""/24, 0x18}, {&(0x7f0000001f80)=""/132, 0x84}], 0x2}, 0x4}], 0x1, 0x0, 0x0)
syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070, 0x4}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
io_setup(0x7, &(0x7f0000000280)=<r2=>0x0)
r3 = openat$sysfs(0xffffff9c, &(0x7f00000001c0)='/sys/power/pm_trace', 0x42, 0x0)
io_submit(r2, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0xfffffc98}])
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

1.508264677s ago: executing program 1 (id=769):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_gstrings={0x1b, 0x8}})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x17, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
close(0x3)
unshare(0x400)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
dup2(r4, r3)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7}, 0x50)

1.443397771s ago: executing program 1 (id=770):
io_uring_setup(0x70c3, &(0x7f0000000180)={0x0, 0x2c43, 0x0, 0x80001, 0x2})
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000a00)="d800000018008105e00212ba0d8105040a020200020f108b067c55a1bc000900b80006990200000015000500fc038178a80015000338004002000c0901ac040000d67f6f947a7100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e97030000000000000000000000000081e1df1a0000008dc5fb510162", 0xd8}], 0x1}, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68)
syz_emit_ethernet(0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
syz_clone(0xc0000000, &(0x7f0000000880)="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", 0xfd, &(0x7f0000000980), &(0x7f00000009c0), &(0x7f0000000a00)="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")
openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@gettaction={0x14, 0x32, 0xe72c5f922f23cad9, 0x70bd27, 0x25dfdbf7}, 0x14}, 0x1, 0x0, 0x0, 0x400c844}, 0x4000000)
futex(&(0x7f000000cffc)=0x1, 0x5, 0x11, 0x0, &(0x7f0000000700), 0x7ffffffe)
socket$nl_route(0x10, 0x3, 0x0)

1.144855587s ago: executing program 1 (id=771):
r0 = socket(0x10, 0x3, 0x0)
write(r0, 0x0, 0x0)
fcntl$notify(r0, 0x402, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000180)={'dummy0\x00', &(0x7f00000009c0)=@ethtool_per_queue_op={0x4b, 0xe, [0x0, 0x400, 0x37f, 0x5e71, 0x2, 0x0, 0x7, 0x1, 0xc098, 0xd3e, 0x20c5, 0xffffffff, 0x80, 0xa6, 0xf042, 0xf328, 0x3, 0x200, 0x856f, 0x1, 0x1, 0x5b2, 0x0, 0x5be, 0x0, 0x1, 0x2, 0x9, 0x6, 0x200, 0xa62, 0xb, 0x0, 0x9e280, 0x3723, 0x713, 0x4f80, 0x9, 0x3, 0x6, 0x1, 0xff, 0xc000000, 0xf, 0x6, 0x7fffffff, 0xc00000, 0xfffffc51, 0xed, 0x9, 0x1, 0x7, 0x9, 0x1c, 0x3, 0x5, 0x8, 0xfffffffc, 0x0, 0x2, 0x3, 0x3, 0x8, 0xa8, 0x6, 0x8, 0x6, 0x0, 0x7, 0x3, 0x80, 0x0, 0x5, 0x0, 0x44d, 0x3, 0x3, 0x7, 0x4, 0x80000000, 0x9, 0x6, 0x8, 0x7f, 0xfffffffc, 0xc, 0x7f, 0x200, 0x7, 0x9, 0x4, 0x200, 0x10, 0xffff, 0x7, 0x6, 0x10, 0x8, 0x7fffffff, 0x40, 0x5, 0x3, 0x2, 0xfc3, 0x85, 0x7ff, 0x8, 0x9, 0x6, 0x5, 0x4, 0xfffffbf3, 0x0, 0xda1, 0x80, 0x8001, 0x8, 0x9, 0x0, 0x3b, 0x10001, 0x0, 0x8001, 0x3, 0x3, 0x1, 0x7, 0x7]}})
recvmmsg(r0, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa00e1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xa}, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x41)
ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000880)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x5, 0x900, 0xffffffffffffffff, 0x0, 0xa}, {0xffffffff, 0x4, 0x9, 0xa}]})
sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000085}, 0x40008)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0, 0x80}, 0x1, 0x7}, 0x0)
r3 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x29, 0x2d, 0x0, 0x0)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, 0x0, 0x0)
fsetxattr$security_capability(r2, &(0x7f00000001c0), &(0x7f0000000380)=@v3={0x3000000, [{0x0, 0x9f}, {0xe, 0x1}]}, 0x18, 0x3)
keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f00000000c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2008404, &(0x7f0000000600)=ANY=[@ANYRES8=r3, @ANYBLOB="999c07c03c5b07a3d07b90faae21d196274f93a6593a9830472d5633665f2f51cfb24aaad481c74e142cd734ec6fd04935a94af71c756dbd6f5e2f39b2c4c30725d103d40d7e65129bb928ef73849dae618e438695e0a907a58e6694f38c1adf3dbd02308605ba418298145bf2fec11b0d16763288e7ecfe663aa5ff450d1e46d251160109c0378e04fe2629890c955362d397", @ANYRESOCT, @ANYRES32=r4, @ANYRES16], 0x41, 0x2bd, &(0x7f00000007c0)="$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")
r5 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0x80)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000440)={0x0, <r6=>0x0})
syz_pidfd_open(r6, 0x0)
sendfile(r5, r5, 0x0, 0x7a680000)

1.065236551s ago: executing program 5 (id=772):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000001c0)=0xe)
capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd})
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x2)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x6, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x800000e2, 0x0, 0x0, 0x0, 0x2000000}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8006}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5c298795369ca04f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r5=>0x0})
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000700)={&(0x7f0000000400)="318e36d12b3c2f677df2f148d747ba047631ab0ececca73923fe4b11287c9839c7c493d7771cd5a59015dc4f5fb15399916978ec388cce2a175a0edd644b43a014ec3cb5122f26fc18a05fc2b4285b4ca56f63a5eac59345f198161e7640c0a27288cb2dd7bcdb48abc645ba7af87441a333517fae07aebfe022412accc29473563227cebe7bdbe5209bbab98f5ab6cf1fef8d14759ad478947b0a8173b589d169a741d6a66f30d3e5655abaa967a219eef710b7d5544b0240b3ab5d354c739f6ce2ff", &(0x7f0000000500)=""/93, &(0x7f0000000580), &(0x7f0000000600)="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", 0x3, r1, 0x4}, 0x38)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r3, r5, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x40)
syz_emit_ethernet(0xe, &(0x7f0000000c40)={@multicast, @local, @void, {@mpls_mc}}, 0x0)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x180, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000001}]}, @TIPC_NLA_NODE={0x158, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x148, 0x3, "ba5bdea387a06d90df8d6bb82a684ae45f90eb17d749cb417e622cdfcbcf40398222a35c54cea986b70c4e9d08b8257d5faaf40aa8e96affd0360137902ec5bd920c6be52a11f0436c9b964f6acdcfbd8bd52474cd1de5fc375b63bb88689bf9887c05892b19f0fcf678c13f6b0a330e1f2cb963ab0cf6e6626d9e776c812b880f2d5e2a2f51c359b09af9161daf389cd93c91da64b48ed131e9a10f9d8cfca183965c095ae35dcf438de1dcb8d6032c6edc5265c91d8d9e73b95d0216f16b3e6c85aa1c31f58418ddf63f1e3c8dc2912d82ffc03dd17d76388610a1807d242390dcb62e3a8794e38b2c0984d63ffd5e18d3e1f320f375ec673c6720e80d8bdac13b7c943d88b71daa53ff975463a639b9559a8dde4a1772d1e97ec6652e38deff8ebfbf0c1190dcc45405eb5bcd56d4d1ee684d090ba7e9c34d5c9e2753bfb8224c1618"}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x4000040}, 0x8004)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r6 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4})
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {&(0x7f0000000200)}], 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='*'], 0x50)
io_uring_enter(r6, 0x2219, 0x1adf, 0x16, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @dev={0xfe, 0x80, '\x00', 0xf}, 0x8}}}, &(0x7f0000000100)=0x84)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0)

965.841207ms ago: executing program 2 (id=773):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)
r0 = socket(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1a, 0x4, 0x7fe2, 0x1, 0x40, 0xffffffffffffffff, 0x8}, 0x48)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001800010000000001fddbdf251d01020008000a00", @ANYRES32, @ANYBLOB='\b\x00\t\x00', @ANYRES32, @ANYBLOB="15000400"], 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0)

965.456627ms ago: executing program 2 (id=774):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_tos={0x0}}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000300)="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", 0x16e}, {&(0x7f0000001480)="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", 0x1001}], 0x3)

714.394921ms ago: executing program 5 (id=775):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000001c0)=0xe)
capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd})
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x2)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x6, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x800000e2, 0x0, 0x0, 0x0, 0x2000000}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8006}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5c298795369ca04f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r5=>0x0})
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000700)={&(0x7f0000000400)="318e36d12b3c2f677df2f148d747ba047631ab0ececca73923fe4b11287c9839c7c493d7771cd5a59015dc4f5fb15399916978ec388cce2a175a0edd644b43a014ec3cb5122f26fc18a05fc2b4285b4ca56f63a5eac59345f198161e7640c0a27288cb2dd7bcdb48abc645ba7af87441a333517fae07aebfe022412accc29473563227cebe7bdbe5209bbab98f5ab6cf1fef8d14759ad478947b0a8173b589d169a741d6a66f30d3e5655abaa967a219eef710b7d5544b0240b3ab5d354c739f6ce2ff", &(0x7f0000000500)=""/93, &(0x7f0000000580), &(0x7f0000000600)="fde9dd9dc8ab831861983ac10afaac10596b324603aec3843c348cf8e0faef3a305861c7416fcf546182b64ca7c50cfbc2290504d5824f364aa1685d98630985fa019ef96e1a97d3a5495658014e9545ad8413526b3e1271870328ae15eaa083b3dca8a379906be1031a9df2f4cb84c7dc38f6168d3485555b0b505037e8e7466820d8809aa2c1dee9cf539cb8a06b6a2ce224408cafde22e4ff3beb43907cdc650655fca31ab888ef11f0f9c12097f8c660af6749878db5f952b59116b38edc616930d1a2f631650234aadf545e0e1cd15a7a1f5ef403736c4d08c4624742d47f49396b596796063ffac481ca5271e2e5aff6ab6127038b26c6eb141767", 0x3, r1, 0x4}, 0x38)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r3, r5, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x40)
syz_emit_ethernet(0xe, &(0x7f0000000c40)={@multicast, @local, @void, {@mpls_mc}}, 0x0)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x180, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000001}]}, @TIPC_NLA_NODE={0x158, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x148, 0x3, "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"}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x4000040}, 0x8004)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r6 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4})
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {&(0x7f0000000200)}], 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='*'], 0x50)
io_uring_enter(r6, 0x2219, 0x1adf, 0x16, 0x0, 0x0)
r7 = socket(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r7, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)

655.724173ms ago: executing program 4 (id=776):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x4fe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0xffffffffffffff30)
r2 = socket$inet(0x2, 0x80001, 0x84)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x60}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)

582.004098ms ago: executing program 4 (id=777):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x80c0}, 0x10)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x403, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x3, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x109000, 0x0)
write$binfmt_aout(r1, 0x0, 0xff2e)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
syz_read_part_table(0x105f, &(0x7f0000001080)="$eJzsz7FtwkAYBeDnS2z5lCJVRoiyQTZJnRKJEhZwQ0XBHLAJkzCGEbLNCEDxfc09vSed9Ienarqs/99+ktQkw72e3/exSUoOm4/fNttVkm4aalLLd5LyeWlvRb+fhvNx+aOrS+qbccpD+uy+Ms59+Ts94EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHnXAAAA//8SNwwv")
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
read$msr(r3, &(0x7f0000000d40)=""/43, 0x2b)
r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0)
ioctl$SG_SET_RESERVED_SIZE(r4, 0x2275, &(0x7f0000000000)=0x6)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x20000000000002, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$nl_route(0x10, 0x3, 0x0)
r6 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x12122, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0)
write$selinux_attr(r7, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r6, {0x1}}, './file0\x00'})
syz_emit_ethernet(0x86, &(0x7f0000000480)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd60f4a30000503a01fe8000000000000000000000000000bbff02000000000000000000000000000104009078000000066cf6cd53ffff3cfffe800000000000000000001c00000035fe8000000000000000000000000000aa2f020401032802002001000000000000000000000000000013d86558da0a7f6b"], 0x0)
r8 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000400)=""/74, 0x328000, 0x1000}, 0x20)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x1, 0x38, 0x3, 0x6, 0x0, 0x1ff, 0x1, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x5f, 0x200}, 0x6080, 0x9, 0xe6, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x10}, 0x0, 0x10, r0, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
mbind(&(0x7f00006d4000/0x2000)=nil, 0x2000, 0xc002, 0x0, 0x3, 0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x89f9b000)
remap_file_pages(&(0x7f00007b4000/0x1000)=nil, 0x1000, 0x4, 0x3e0400000000, 0x1)

430.304396ms ago: executing program 5 (id=778):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000001c0)=0xe)
capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd})
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x2)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x6, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x800000e2, 0x0, 0x0, 0x0, 0x2000000}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8006}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5c298795369ca04f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r5=>0x0})
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000700)={&(0x7f0000000400)="318e36d12b3c2f677df2f148d747ba047631ab0ececca73923fe4b11287c9839c7c493d7771cd5a59015dc4f5fb15399916978ec388cce2a175a0edd644b43a014ec3cb5122f26fc18a05fc2b4285b4ca56f63a5eac59345f198161e7640c0a27288cb2dd7bcdb48abc645ba7af87441a333517fae07aebfe022412accc29473563227cebe7bdbe5209bbab98f5ab6cf1fef8d14759ad478947b0a8173b589d169a741d6a66f30d3e5655abaa967a219eef710b7d5544b0240b3ab5d354c739f6ce2ff", &(0x7f0000000500)=""/93, &(0x7f0000000580), &(0x7f0000000600)="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", 0x3, r1, 0x4}, 0x38)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r3, r5, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x40)
syz_emit_ethernet(0xe, &(0x7f0000000c40)={@multicast, @local, @void, {@mpls_mc}}, 0x0)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x180, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000001}]}, @TIPC_NLA_NODE={0x158, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x148, 0x3, "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"}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x4000040}, 0x8004)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r6 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4})
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {&(0x7f0000000200)}], 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='*'], 0x50)
io_uring_enter(r6, 0x2219, 0x1adf, 0x16, 0x0, 0x0)
r7 = socket(0x10, 0x3, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @dev={0xfe, 0x80, '\x00', 0xf}, 0x8}}}, &(0x7f0000000100)=0x84)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r7, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0)

233.505917ms ago: executing program 1 (id=779):
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
ioctl$TCGETS(r0, 0x5401, &(0x7f00000000c0))
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xda}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000500)='cpu\t&4&&\t')

109.399994ms ago: executing program 1 (id=780):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x8, &(0x7f0000000280)=@framed={{0x18, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x98, &(0x7f00000001c0)=""/152, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000040)=0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0xf, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x35, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r1 = socket$kcm(0x11, 0x200000000000002, 0x300)
ioctl$XFS_IOC_AG_GEOMETRY(r0, 0xc080583d, &(0x7f0000000080)={0x8, 0x6c7, 0x5, 0xffff0000, 0x4, 0x0, 0x1, 0x1})
setsockopt$sock_attach_bpf(r1, 0x107, 0xc, &(0x7f0000000100), 0x4)
socket$tipc(0x1e, 0x5, 0x0)

106.990654ms ago: executing program 3 (id=781):
close(0x3)
unshare(0x400)
bpf$MAP_CREATE(0x1800, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7}, 0x50)

82.750045ms ago: executing program 1 (id=782):
io_uring_setup(0x70c3, &(0x7f0000000180)={0x0, 0x2c43, 0x0, 0x80001, 0x2})
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000a00)="d800000018008105e00212ba0d8105040a020200020f108b067c55a1bc000900b80006990200000015000500fc038178a80015000338004002000c0901ac040000d67f6f947a7100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e97030000000000000000000000000081e1df1a0000008dc5fb510162", 0xd8}], 0x1}, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
syz_clone(0xc0000000, &(0x7f0000000880)="1a3a4b3a94556ea690ad18c03cc18887a0bac1caad82831612909cd691b62999ce962c691ecbf8233e179f604656245b2527c3d1658076c2d08602e69057a1ec70f5eeef0f9ac533ed8a9ddac69f29dd8803323c208356b12826fd5d44fbe97db3549faf44562fb6354bfd88b695dde262a7c8f633a0081235914ecab0354e4840181e99d57735331aff8fa74e4f6999ddb54b6d4722c33a81e82a31d0f99c09c0eb6cc527cefc06a6b8f38e2b454adc15abcc952fb50dc37cff575b0fccb106affd2de021bd861fa87dc091cc7fb61f1ea7c47943d160b35fe46a7d05dd10cda24cf8e1bbdc5706034677cfdb02c0e13db91bb579ef6fa2fa00dbfee8", 0xfd, &(0x7f0000000980), &(0x7f00000009c0), &(0x7f0000000a00)="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")
openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@gettaction={0x14, 0x32, 0xe72c5f922f23cad9, 0x70bd27, 0x25dfdbf7}, 0x14}, 0x1, 0x0, 0x0, 0x400c844}, 0x4000000)
futex(&(0x7f000000cffc)=0x1, 0x5, 0x11, 0x0, &(0x7f0000000700), 0x7ffffffe)
socket$nl_route(0x10, 0x3, 0x0)

80.177535ms ago: executing program 3 (id=783):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)}], 0x1}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)

0s ago: executing program 2 (id=784):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0xffffffffffffffd8}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x6c}}, 0x0) (async)
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r0) (async)
r5 = socket(0xa, 0x3, 0x87)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
setsockopt$inet6_int(r5, 0x29, 0x8, &(0x7f0000000040)=0x735, 0x4) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'sit0\x00', <r7=>0x0}) (async)
r8 = io_uring_setup(0x7fc0, &(0x7f0000000000)={0x0, 0x3, 0x40})
io_uring_register$IORING_REGISTER_RESTRICTIONS(r8, 0xb, &(0x7f0000000280), 0x56) (async)
io_uring_register$IORING_REGISTER_RING_FDS(r8, 0x14, 0x0, 0x0) (async)
ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={@remote, 0x78, r7}) (async)
ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x8936, &(0x7f0000000000))

kernel console output (not intermixed with test programs):

 invalid length.
[  113.345728][ T4939] netlink: 'syz.2.388': attribute type 30 has an invalid length.
[  113.394846][ T4940] veth0_vlan: left allmulticast mode
[  113.419349][ T4073] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  113.447701][ T4073] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  113.496730][ T4073] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  113.533536][ T4073] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  113.756683][ T4954] loop4: detected capacity change from 0 to 2048
[  113.808507][ T4959] hub 8-0:1.0: USB hub found
[  113.829013][ T4954] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  113.844887][ T4959] hub 8-0:1.0: 8 ports detected
[  113.973418][ T4954] netlink: 60 bytes leftover after parsing attributes in process `syz.4.395'.
[  114.038362][ T4954] unsupported nlmsg_type 40
[  114.208031][ T4972] netlink: 120 bytes leftover after parsing attributes in process `syz.0.399'.
[  114.357608][ T3330] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.406724][ T4975] process 'syz.0.400' launched '/dev/fd/5' with NULL argv: empty string added
[  114.407550][   T28] kauditd_printk_skb: 1229 callbacks suppressed
[  114.407594][   T28] audit: type=1400 audit(1776806293.274:5375): avc:  denied  { execute } for  pid=4974 comm="syz.0.400" dev="tmpfs" ino=81 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  114.515445][   T28] audit: type=1400 audit(1776806293.334:5376): avc:  denied  { execute_no_trans } for  pid=4974 comm="syz.0.400" path=2F6D656D66643A5B0BDB58AE5B35A990FF631F1AA9FDFAADD16D64E7E27F9BD55210F3B6FF54BFD1C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=81 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  114.640273][ T4981] FAULT_INJECTION: forcing a failure.
[  114.640273][ T4981] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  114.674804][   T28] audit: type=1400 audit(1776806293.544:5377): avc:  denied  { listen } for  pid=4974 comm="syz.0.400" lport=59880 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  114.721590][ T4981] CPU: 1 UID: 0 PID: 4981 Comm: syz.4.402 Not tainted syzkaller #0 PREEMPT(full) 
[  114.721627][ T4981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  114.721643][ T4981] Call Trace:
[  114.721684][ T4981]  <TASK>
[  114.721694][ T4981]  __dump_stack+0x1d/0x30
[  114.721732][ T4981]  dump_stack_lvl+0x95/0xd0
[  114.721767][ T4981]  dump_stack+0x15/0x1b
[  114.721813][ T4981]  should_fail_ex+0x263/0x280
[  114.721912][ T4981]  should_fail+0xb/0x20
[  114.721946][ T4981]  should_fail_usercopy+0x1a/0x20
[  114.722024][ T4981]  _copy_from_iter+0xcf/0xea0
[  114.722058][ T4981]  ? __alloc_skb+0x4f6/0x690
[  114.722089][ T4981]  ? __alloc_skb+0x200/0x690
[  114.722116][ T4981]  netlink_sendmsg+0x4ae/0x6f0
[  114.722245][ T4981]  ? __pfx_netlink_sendmsg+0x10/0x10
[  114.722284][ T4981]  ____sys_sendmsg+0x563/0x5b0
[  114.722421][ T4981]  ___sys_sendmsg+0x195/0x1e0
[  114.722506][ T4981]  __x64_sys_sendmsg+0xd4/0x160
[  114.722550][ T4981]  x64_sys_call+0x194c/0x3020
[  114.722600][ T4981]  do_syscall_64+0x12c/0x3b0
[  114.722634][ T4981]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.722662][ T4981] RIP: 0033:0x7fe3e18bc819
[  114.722682][ T4981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  114.722780][ T4981] RSP: 002b:00007fe3e0317028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  114.722806][ T4981] RAX: ffffffffffffffda RBX: 00007fe3e1b35fa0 RCX: 00007fe3e18bc819
[  114.722824][ T4981] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000005
[  114.722840][ T4981] RBP: 00007fe3e0317090 R08: 0000000000000000 R09: 0000000000000000
[  114.722856][ T4981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  114.722879][ T4981] R13: 00007fe3e1b36038 R14: 00007fe3e1b35fa0 R15: 00007ffe366fe628
[  114.722905][ T4981]  </TASK>
[  114.909428][   T28] audit: type=1400 audit(1776806293.544:5378): avc:  denied  { accept } for  pid=4974 comm="syz.0.400" lport=54507 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  114.981412][   T28] audit: type=1400 audit(1776806293.854:5379): avc:  denied  { getopt } for  pid=4983 comm="syz.3.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  114.992773][ T4985] macvtap0: entered promiscuous mode
[  115.085451][ T4985] macvtap0: left promiscuous mode
[  115.375575][ T4993] loop4: detected capacity change from 0 to 2048
[  115.520942][ T4990] 9p: Could not find request transport: f
[  115.717138][ T4994] syzkaller0: entered promiscuous mode
[  115.731544][ T4994] syzkaller0: entered allmulticast mode
[  115.961237][ T5009] netlink: 8 bytes leftover after parsing attributes in process `syz.4.410'.
[  115.996731][ T5009] netlink: 8 bytes leftover after parsing attributes in process `syz.4.410'.
[  116.031875][ T5012] loop4: detected capacity change from 0 to 512
[  116.044905][ T5012] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6).
[  116.045006][ T5012] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  116.045363][ T5012] EXT4-fs (loop4): mount failed
[  116.285429][ T5021] hub 8-0:1.0: USB hub found
[  116.290897][ T5021] hub 8-0:1.0: 8 ports detected
[  116.747024][ T5028] hub 8-0:1.0: USB hub found
[  116.752093][ T5028] hub 8-0:1.0: 8 ports detected
[  117.334161][   T28] audit: type=1400 audit(1776806296.204:5380): avc:  denied  { setopt } for  pid=5032 comm="syz.1.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  117.397210][ T5035] xt_CT: You must specify a L4 protocol and not use inversions on it
[  117.467083][ T5037] capability: warning: `syz.1.415' uses deprecated v2 capabilities in a way that may be insecure
[  117.549719][ T5039] syzkaller0: entered promiscuous mode
[  117.574938][ T5039] syzkaller0: entered allmulticast mode
[  117.776392][   T28] audit: type=1400 audit(1776806296.644:5381): avc:  denied  { ioctl } for  pid=5051 comm="syz.2.421" path="socket:[10965]" dev="sockfs" ino=10965 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  117.812857][   T28] audit: type=1400 audit(1776806296.644:5382): avc:  denied  { bind } for  pid=5051 comm="syz.2.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  117.845880][   T28] audit: type=1400 audit(1776806296.714:5383): avc:  denied  { sqpoll } for  pid=5054 comm="syz.3.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  117.990896][ T5064] loop3: detected capacity change from 0 to 128
[  118.022452][ T5064] vfat: Unknown parameter '™œÀ<[£Ð{�ú®!Ñ–'O“¦Y:˜0G-V3f_/QϲJªÔ�ÇN'
[  118.150783][ T5068] loop0: detected capacity change from 0 to 128
[  118.173705][ T5068] vfat: Unknown parameter '™œÀ<[£Ð{�ú®!Ñ–'O“¦Y:˜0G-V3f_/QϲJªÔ�ÇN'
[  118.355975][ T5070] loop1: detected capacity change from 0 to 1024
[  118.414032][ T5070] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  118.429804][ T5070] System zones: 0-1, 3-36
[  118.447245][ T5070] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.425: bad orphan inode 134217728
[  118.460953][ T5070] loop1: lost filesystem error report for type 5 error -117
[  118.467760][ T5070] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  118.732375][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.891866][ T5082] syzkaller0: entered promiscuous mode
[  118.906895][ T5082] syzkaller0: entered allmulticast mode
[  118.998339][ T5090] netlink: 32 bytes leftover after parsing attributes in process `syz.3.432'.
[  119.436923][ T5102] loop2: detected capacity change from 0 to 512
[  119.468491][ T5102] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.434: bg 0: block 4: invalid block bitmap
[  119.481959][ T5102] loop2: lost filesystem error report for type 5 error -117
[  119.483415][ T5102] EXT4-fs (loop2): Remounting filesystem read-only
[  119.491363][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  119.491434][    C0] EXT4-fs (loop2): initial error at time 1776806298: ext4_validate_block_bitmap:432
[  119.492062][    C0] EXT4-fs (loop2): last error at time 1776806298: ext4_validate_block_bitmap:432
[  119.528453][ T5102] EXT4-fs (loop2): 1 truncate cleaned up
[  119.544031][ T5102] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  119.585683][   T28] kauditd_printk_skb: 82 callbacks suppressed
[  119.585709][   T28] audit: type=1326 audit(1776806298.454:5466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5091 comm="syz.0.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad5773c819 code=0x7ffc0000
[  119.941361][   T28] audit: type=1326 audit(1776806298.484:5467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5091 comm="syz.0.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad5773c819 code=0x7ffc0000
[  120.049370][   T28] audit: type=1326 audit(1776806298.554:5468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5091 comm="syz.0.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad5773c819 code=0x7ffc0000
[  120.163028][   T28] audit: type=1326 audit(1776806298.564:5470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5091 comm="syz.0.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fad5773c819 code=0x7ffc0000
[  120.268405][ T5120] loop4: detected capacity change from 0 to 128
[  120.306950][   T28] audit: type=1326 audit(1776806298.564:5472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5091 comm="syz.0.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad5773c819 code=0x7ffc0000
[  120.370309][ T5120] vfat: Unknown parameter '™œÀ<[£Ð{�ú®!Ñ–'O“¦Y:˜0G-V3f_/QϲJªÔ�ÇN'
[  120.427012][   T28] audit: type=1326 audit(1776806298.564:5471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5091 comm="syz.0.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad5773c819 code=0x7ffc0000
[  120.481449][   T28] audit: type=1326 audit(1776806298.564:5474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5091 comm="syz.0.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad5773c819 code=0x7ffc0000
[  120.589923][ T5129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  120.626563][ T5128] loop3: detected capacity change from 0 to 128
[  120.644873][   T28] audit: type=1326 audit(1776806298.564:5475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5091 comm="syz.0.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad5773c819 code=0x7ffc0000
[  120.689001][ T5128] vfat: Unknown parameter '™œÀ<[£Ð{�ú®!Ñ–'O“¦Y:˜0G-V3f_/QϲJªÔ�ÇN'
[  120.705389][ T5129] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  120.751975][   T28] audit: type=1326 audit(1776806298.564:5469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5091 comm="syz.0.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fad5773c819 code=0x7ffc0000
[  120.807107][ T5129] loop0: detected capacity change from 0 to 764
[  120.832144][   T28] audit: type=1326 audit(1776806298.564:5473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5091 comm="syz.0.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fad5773c819 code=0x7ffc0000
[  121.078513][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.128243][ T5133] syzkaller0: entered promiscuous mode
[  121.138372][ T5133] syzkaller0: entered allmulticast mode
[  121.151499][ T5136] bridge1: the hash_elasticity option has been deprecated and is always 16
[  121.160683][ T5136] bridge1: entered promiscuous mode
[  121.388335][ T5145] hub 8-0:1.0: USB hub found
[  121.393281][ T5145] hub 8-0:1.0: 8 ports detected
[  121.842961][ T5151] netlink: 'syz.0.451': attribute type 10 has an invalid length.
[  121.906768][ T5151] team0: Device xfrm0 is of different type
[  121.942587][ T5151] loop0: detected capacity change from 0 to 512
[  121.953147][ T5151] EXT4-fs: Ignoring removed nobh option
[  121.983728][ T5151] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #3: comm syz.0.451: corrupted inode contents
[  121.999516][ T5151] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  122.007469][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  122.023114][    C0] EXT4-fs (loop0): initial error at time 1776806300: ext4_do_update_inode:5690: inode 3
[  122.033013][    C0] EXT4-fs (loop0): last error at time 1776806300: ext4_do_update_inode:5690: inode 3
[  122.044331][ T5151] EXT4-fs (loop0): Remounting filesystem read-only
[  122.068758][ T5151] EXT4-fs (loop0): 1 truncate cleaned up
[  122.075794][ T5151] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  122.145558][ T5151] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  122.314291][ T5166] hub 8-0:1.0: USB hub found
[  122.319498][ T5166] hub 8-0:1.0: 8 ports detected
[  122.421160][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  122.848044][ T5172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.456'.
[  122.956996][ T5175] netlink: 8 bytes leftover after parsing attributes in process `syz.4.458'.
[  123.024970][ T5167] loop2: detected capacity change from 0 to 1024
[  123.109555][ T5177] syzkaller0: entered promiscuous mode
[  123.121750][ T5177] syzkaller0: entered allmulticast mode
[  123.137236][ T5178] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  123.147408][ T5184] FAULT_INJECTION: forcing a failure.
[  123.147408][ T5184] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  123.162387][ T5167] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  123.180746][ T5167] System zones: 0-1, 3-36
[  123.203767][ T5184] CPU: 0 UID: 0 PID: 5184 Comm: syz.1.460 Not tainted syzkaller #0 PREEMPT(full) 
[  123.203802][ T5184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  123.203876][ T5184] Call Trace:
[  123.203884][ T5184]  <TASK>
[  123.203894][ T5184]  __dump_stack+0x1d/0x30
[  123.203993][ T5184]  dump_stack_lvl+0x95/0xd0
[  123.204026][ T5184]  dump_stack+0x15/0x1b
[  123.204102][ T5184]  should_fail_ex+0x263/0x280
[  123.204151][ T5184]  should_fail+0xb/0x20
[  123.204229][ T5184]  should_fail_usercopy+0x1a/0x20
[  123.204273][ T5184]  _copy_from_user+0x1c/0xb0
[  123.204297][ T5184]  ___sys_recvmsg+0xaa/0x3b0
[  123.204347][ T5184]  do_recvmmsg+0x1ef/0x560
[  123.204447][ T5184]  ? get_timespec64+0xd2/0x100
[  123.204482][ T5184]  __x64_sys_recvmmsg+0xfb/0x170
[  123.204529][ T5184]  x64_sys_call+0x80f/0x3020
[  123.204618][ T5184]  do_syscall_64+0x12c/0x3b0
[  123.204650][ T5184]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  123.204683][ T5184] RIP: 0033:0x7faa748fc819
[  123.204702][ T5184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  123.204779][ T5184] RSP: 002b:00007faa7332e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  123.204805][ T5184] RAX: ffffffffffffffda RBX: 00007faa74b76090 RCX: 00007faa748fc819
[  123.204823][ T5184] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003
[  123.204850][ T5184] RBP: 00007faa7332e090 R08: 0000200000003700 R09: 0000000000000000
[  123.204897][ T5184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  123.204913][ T5184] R13: 00007faa74b76128 R14: 00007faa74b76090 R15: 00007ffdcef51b28
[  123.204938][ T5184]  </TASK>
[  123.400585][ T5167] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.455: bad orphan inode 134217728
[  123.421835][ T5167] loop2: lost filesystem error report for type 5 error -117
[  123.425399][ T5167] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  123.535280][ T5192] loop4: detected capacity change from 0 to 128
[  123.569235][ T5193] netlink: 8 bytes leftover after parsing attributes in process `syz.1.463'.
[  123.578356][ T5193] netlink: 'syz.1.463': attribute type 30 has an invalid length.
[  123.589464][ T5192] vfat: Unknown parameter '™œÀ<[£Ð{�ú®!Ñ–'O“¦Y:˜0G-V3f_/QϲJªÔ�ÇN'
[  123.622004][  T310] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  123.633593][ T5196] netlink: 8 bytes leftover after parsing attributes in process `syz.1.463'.
[  123.644795][  T310] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  123.659052][  T310] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  123.668118][ T5189] loop3: detected capacity change from 0 to 1024
[  123.668535][  T310] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  123.687648][ T5196] netlink: 'syz.1.463': attribute type 30 has an invalid length.
[  123.718848][ T5172] loop0: detected capacity change from 0 to 512
[  123.727973][ T5172] EXT4-fs: Ignoring removed i_version option
[  123.739583][ T5172] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c018, mo2=0082]
[  123.747815][ T5172] System zones: 0-2, 18-18, 34-35
[  123.755087][ T5189] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  123.767220][ T5172] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  123.776534][ T5189] System zones: 
[  123.785915][ T5172] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  123.801635][ T5189] 0-1, 3-36
[  123.820449][ T5189] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.462: bad orphan inode 134217728
[  123.837173][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.843297][ T5189] loop3: lost filesystem error report for type 5 error -117
[  123.857788][ T5172] support for cryptoloop has been removed.  Use dm-crypt instead.
[  123.897867][ T5189] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  124.037032][ T5206] hub 8-0:1.0: USB hub found
[  124.042124][ T5206] hub 8-0:1.0: 8 ports detected
[  124.465773][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.516540][ T5210] netlink: 56 bytes leftover after parsing attributes in process `syz.0.466'.
[  124.539376][ T5210] netlink: 12 bytes leftover after parsing attributes in process `syz.0.466'.
[  124.543304][ T5205] loop1: detected capacity change from 0 to 1024
[  124.619987][ T5213] hub 8-0:1.0: USB hub found
[  124.624986][ T5213] hub 8-0:1.0: 8 ports detected
[  124.999467][ T5205] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  125.063172][ T5219] netlink: 'syz.0.469': attribute type 10 has an invalid length.
[  125.081652][ T5205] System zones: 0-1, 3-36
[  125.093758][ T5219] team0: Device xfrm0 is of different type
[  125.136547][ T5219] loop0: detected capacity change from 0 to 512
[  125.156980][ T5219] EXT4-fs: Ignoring removed nobh option
[  125.186434][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  125.197364][ T5205] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.465: bad orphan inode 134217728
[  125.220805][ T5219] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #3: comm syz.0.469: corrupted inode contents
[  125.234610][ T5205] loop1: lost filesystem error report for type 5 error -117
[  125.236358][ T5219] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  125.237507][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  125.257577][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  125.259843][    C1] EXT4-fs (loop1): initial error at time 1776806304: ext4_orphan_get:1423
[  125.266280][    C0] EXT4-fs (loop0): initial error at time 1776806304: ext4_do_update_inode:5690: inode 3
[  125.274898][    C1] EXT4-fs (loop1): last error at time 1776806304: ext4_orphan_get:1423
[  125.284642][    C0] EXT4-fs (loop0): last error at time 1776806304: ext4_do_update_inode:5690
[  125.284652][    C1] 
[  125.284669][    C0] : inode 3
[  125.299172][ T5205] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  125.301718][    C0] 
[  125.359450][ T5219] EXT4-fs (loop0): Remounting filesystem read-only
[  125.366516][ T5219] __quota_error: 180 callbacks suppressed
[  125.366536][ T5219] Quota error (device loop0): write_blk: dquota write failed
[  125.390086][ T5219] Quota error (device loop0): qtree_write_dquot: Error -30 occurred while creating quota
[  125.403229][ T5219] EXT4-fs (loop0): 1 truncate cleaned up
[  125.425711][ T5219] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  125.444107][   T28] audit: type=1400 audit(1776806304.314:5654): avc:  denied  { bind } for  pid=5226 comm="syz.4.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  125.509420][ T5219] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  125.605283][ T5231] syzkaller0: entered promiscuous mode
[  125.612604][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  125.615286][ T5231] syzkaller0: entered allmulticast mode
[  125.691485][ T5227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  125.710675][ T5227] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  125.725234][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  125.731420][ T5227] netlink: 84 bytes leftover after parsing attributes in process `syz.4.471'.
[  125.785601][ T5238] xt_hashlimit: size too large, truncated to 1048576
[  125.815858][ T5240] xt_CT: You must specify a L4 protocol and not use inversions on it
[  125.939704][ T5247] loop3: detected capacity change from 0 to 128
[  125.989545][ T5247] vfat: Unknown parameter '™œÀ<[£Ð{�ú®!Ñ–'O“¦Y:˜0G-V3f_/QϲJªÔ�ÇN'
[  126.083169][   T28] audit: type=1400 audit(1776806304.954:5655): avc:  denied  { module_load } for  pid=5253 comm="syz.1.479" path="/94/bus" dev="tmpfs" ino=522 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1
[  126.194050][ T5252] loop0: detected capacity change from 0 to 1024
[  126.240333][ T5252] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  126.258059][ T5252] System zones: 0-1, 3-36
[  126.310858][ T5252] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.478: bad orphan inode 134217728
[  126.343258][ T5252] loop0: lost filesystem error report for type 5 error -117
[  126.349151][ T5262] hub 8-0:1.0: USB hub found
[  126.380175][ T5252] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  126.430374][ T5262] hub 8-0:1.0: 8 ports detected
[  126.748897][ T5273] netlink: 'syz.3.484': attribute type 10 has an invalid length.
[  126.775984][ T5273] team0: Device xfrm0 is of different type
[  126.829118][ T5273] loop3: detected capacity change from 0 to 512
[  126.852941][ T5273] EXT4-fs: Ignoring removed nobh option
[  126.898887][ T5273] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #3: comm syz.3.484: corrupted inode contents
[  126.965702][ T5273] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  126.965979][ T5273] EXT4-fs (loop3): Remounting filesystem read-only
[  126.975211][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  126.975236][    C0] EXT4-fs (loop3): initial error at time 1776806305: ext4_do_update_inode:5690: inode 3
[  126.975273][    C0] EXT4-fs (loop3): last error at time 1776806305: ext4_do_update_inode:5690: inode 3
[  127.089494][ T5273] Quota error (device loop3): write_blk: dquota write failed
[  127.100630][ T5273] Quota error (device loop3): qtree_write_dquot: Error -30 occurred while creating quota
[  127.135478][ T5273] EXT4-fs (loop3): 1 truncate cleaned up
[  127.155957][ T5273] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  127.198059][ T5273] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  127.236011][ T5273] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.385526][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.464570][ T5288] FAULT_INJECTION: forcing a failure.
[  127.464570][ T5288] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  127.497519][ T5288] CPU: 1 UID: 0 PID: 5288 Comm: syz.3.488 Not tainted syzkaller #0 PREEMPT(full) 
[  127.497579][ T5288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  127.497595][ T5288] Call Trace:
[  127.497603][ T5288]  <TASK>
[  127.497612][ T5288]  __dump_stack+0x1d/0x30
[  127.497643][ T5288]  dump_stack_lvl+0x95/0xd0
[  127.497698][ T5288]  dump_stack+0x15/0x1b
[  127.497731][ T5288]  should_fail_ex+0x263/0x280
[  127.497772][ T5288]  should_fail+0xb/0x20
[  127.497848][ T5288]  should_fail_usercopy+0x1a/0x20
[  127.497888][ T5288]  _copy_from_iter+0xcf/0xea0
[  127.497928][ T5288]  ? __alloc_skb+0x4f6/0x690
[  127.497998][ T5288]  ? __alloc_skb+0x200/0x690
[  127.498028][ T5288]  netlink_sendmsg+0x4ae/0x6f0
[  127.498075][ T5288]  ? __pfx_netlink_sendmsg+0x10/0x10
[  127.498173][ T5288]  ____sys_sendmsg+0x563/0x5b0
[  127.498212][ T5288]  ___sys_sendmsg+0x195/0x1e0
[  127.498300][ T5288]  __x64_sys_sendmsg+0xd4/0x160
[  127.498339][ T5288]  x64_sys_call+0x194c/0x3020
[  127.498445][ T5288]  do_syscall_64+0x12c/0x3b0
[  127.498476][ T5288]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  127.498519][ T5288] RIP: 0033:0x7f344f88c819
[  127.498542][ T5288] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  127.498565][ T5288] RSP: 002b:00007f344e2e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  127.498713][ T5288] RAX: ffffffffffffffda RBX: 00007f344fb05fa0 RCX: 00007f344f88c819
[  127.498729][ T5288] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003
[  127.498746][ T5288] RBP: 00007f344e2e7090 R08: 0000000000000000 R09: 0000000000000000
[  127.498802][ T5288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  127.498814][ T5288] R13: 00007f344fb06038 R14: 00007f344fb05fa0 R15: 00007ffd0f3b15d8
[  127.498875][ T5288]  </TASK>
[  127.776041][ T5287] syzkaller0: entered promiscuous mode
[  127.814803][ T5287] syzkaller0: entered allmulticast mode
[  128.099342][ T5293] loop3: detected capacity change from 0 to 512
[  128.218023][ T5293] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.489: bg 0: block 4: invalid block bitmap
[  128.231233][ T5293] loop3: lost filesystem error report for type 5 error -117
[  128.233238][ T5293] EXT4-fs (loop3): Remounting filesystem read-only
[  128.241050][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  128.241117][    C1] EXT4-fs (loop3): initial error at time 1776806307: ext4_validate_block_bitmap:432
[  128.241298][    C1] EXT4-fs (loop3): last error at time 1776806307: ext4_validate_block_bitmap:432
[  128.277489][ T5293] EXT4-fs (loop3): 1 truncate cleaned up
[  128.292498][ T5293] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  128.332071][ T5298] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  128.671558][ T5306] loop0: detected capacity change from 0 to 512
[  129.054662][ T5311] loop4: detected capacity change from 0 to 1024
[  129.069702][ T5315] loop0: detected capacity change from 0 to 128
[  129.081632][ T5311] EXT4-fs: Ignoring removed nomblk_io_submit option
[  129.115222][ T5315] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  129.159857][ T5315] ext4 filesystem being mounted at /99/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  129.228657][ T5311] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  129.241081][   T28] audit: type=1400 audit(1776806307.924:5656): avc:  denied  { read append } for  pid=5314 comm="syz.0.495" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  129.317801][ T3320] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  129.334737][   T28] audit: type=1400 audit(1776806307.924:5657): avc:  denied  { open } for  pid=5314 comm="syz.0.495" path="/dev/ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  129.359198][ T3330] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.392975][   T28] audit: type=1400 audit(1776806308.144:5658): avc:  denied  { create } for  pid=5314 comm="syz.0.495" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  129.435354][   T28] audit: type=1400 audit(1776806308.144:5659): avc:  denied  { ioctl } for  pid=5314 comm="syz.0.495" path="/dev/ptp0" dev="devtmpfs" ino=247 ioctlcmd=0x3d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  129.623310][ T5321] xt_CT: You must specify a L4 protocol and not use inversions on it
[  129.654924][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.683209][ T5323] netlink: 'syz.4.497': attribute type 10 has an invalid length.
[  129.714253][ T5323] team0: Device xfrm0 is of different type
[  129.730292][ T5323] loop4: detected capacity change from 0 to 512
[  129.740441][ T5323] EXT4-fs: Ignoring removed nobh option
[  129.769101][ T5323] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #3: comm syz.4.497: corrupted inode contents
[  129.785419][ T5323] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  129.785751][ T5323] EXT4-fs (loop4): Remounting filesystem read-only
[  129.795071][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  129.795095][    C1] EXT4-fs (loop4): initial error at time 1776806308: ext4_do_update_inode:5690: inode 3
[  129.795131][    C1] EXT4-fs (loop4): last error at time 1776806308: ext4_do_update_inode:5690: inode 3
[  129.830690][ T5323] EXT4-fs (loop4): 1 truncate cleaned up
[  129.838077][ T5323] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  129.865236][ T5323] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  129.893483][ T5323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.914142][   T68] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.935009][ T5325] xt_CT: You must specify a L4 protocol and not use inversions on it
[  130.007594][ T5339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.504'.
[  130.034424][ T5339] netlink: 'syz.2.504': attribute type 30 has an invalid length.
[  130.061003][ T5336] syzkaller0: entered promiscuous mode
[  130.067244][ T5336] syzkaller0: entered allmulticast mode
[  130.085859][ T5343] netlink: 8 bytes leftover after parsing attributes in process `syz.2.504'.
[  130.137656][ T5343] netlink: 'syz.2.504': attribute type 30 has an invalid length.
[  130.160023][   T68] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.259430][ T5347] hub 8-0:1.0: USB hub found
[  130.264384][ T5347] hub 8-0:1.0: 8 ports detected
[  130.854798][ T5362] bridge_slave_1: left allmulticast mode
[  130.861980][ T5362] bridge_slave_1: left promiscuous mode
[  130.911108][ T5362] bridge0: port 2(bridge_slave_1) entered disabled state
[  130.924132][   T28] kauditd_printk_skb: 4 callbacks suppressed
[  130.924222][   T28] audit: type=1400 audit(1776806309.794:5662): avc:  denied  { ioctl } for  pid=5361 comm="syz.3.509" path="socket:[11809]" dev="sockfs" ino=11809 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  130.961993][   T68] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.042712][   T68] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.105049][ T5377] loop3: detected capacity change from 0 to 512
[  131.197960][ T5379] hub 8-0:1.0: USB hub found
[  131.203223][ T5379] hub 8-0:1.0: 8 ports detected
[  131.317777][   T28] audit: type=1400 audit(1776806310.184:5663): avc:  denied  { read } for  pid=3047 comm="dhcpcd" name="n25" dev="tmpfs" ino=4291 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  131.522423][   T68] bridge_slave_1: left allmulticast mode
[  131.567971][   T68] bridge_slave_1: left promiscuous mode
[  131.591570][   T28] audit: type=1400 audit(1776806310.184:5664): avc:  denied  { open } for  pid=3047 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=4291 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  131.642192][   T68] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.685789][   T28] audit: type=1400 audit(1776806310.184:5665): avc:  denied  { getattr } for  pid=3047 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=4291 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  131.715780][   T68] bridge_slave_0: left allmulticast mode
[  131.730270][   T68] bridge_slave_0: left promiscuous mode
[  131.741061][   T68] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.880133][   T28] audit: type=1400 audit(1776806310.754:5666): avc:  denied  { create } for  pid=5387 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  131.918679][   T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  131.954204][   T28] audit: type=1400 audit(1776806310.774:5667): avc:  denied  { write } for  pid=5387 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=4307 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  132.012742][   T28] audit: type=1400 audit(1776806310.774:5668): avc:  denied  { append } for  pid=5387 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=4307 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  132.046070][   T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  132.058061][   T28] audit: type=1400 audit(1776806310.914:5669): avc:  denied  { unlink } for  pid=5399 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=4307 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  132.084140][   T68] bond0 (unregistering): Released all slaves
[  132.099896][   T10] syz1: Port: 1 Link DOWN
[  132.151991][ T5405] netlink: 'syz.2.515': attribute type 10 has an invalid length.
[  132.167076][ T5349] chnl_net:caif_netlink_parms(): no params data found
[  132.183405][ T3047] 8021q: adding VLAN 0 to HW filter on device eth1
[  132.225975][ T5405] team0: Device xfrm0 is of different type
[  132.314923][ T5405] loop2: detected capacity change from 0 to 512
[  132.328373][ T5405] EXT4-fs: Ignoring removed nobh option
[  132.378327][ T5405] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #3: comm syz.2.515: corrupted inode contents
[  132.399956][   T68] hsr_slave_0: left promiscuous mode
[  132.408977][ T5405] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  132.410501][ T5405] EXT4-fs (loop2): Remounting filesystem read-only
[  132.418791][ T5406] loop4: detected capacity change from 0 to 1024
[  132.419604][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  132.419625][    C0] EXT4-fs (loop2): initial error at time 1776806311: ext4_do_update_inode:5690: inode 3
[  132.419660][    C0] EXT4-fs (loop2): last error at time 1776806311: ext4_do_update_inode:5690: inode 3
[  132.464150][ T5405] Quota error (device loop2): write_blk: dquota write failed
[  132.464767][   T68] hsr_slave_1: left promiscuous mode
[  132.489215][   T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  132.501225][ T5406] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  132.507588][   T68] batman_adv: batadv0: Removing interface: batadv_slave_0
[  132.530305][ T5405] Quota error (device loop2): qtree_write_dquot: Error -30 occurred while creating quota
[  132.530314][   T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  132.530346][   T68] batman_adv: batadv0: Removing interface: batadv_slave_1
[  132.565707][ T5405] EXT4-fs (loop2): 1 truncate cleaned up
[  132.572855][ T5406] System zones: 0-1, 3-36
[  132.579426][ T5405] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  132.598385][ T5405] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  132.609567][   T68] veth1_macvtap: left promiscuous mode
[  132.616177][   T68] veth0_macvtap: left promiscuous mode
[  132.622038][   T68] veth1_vlan: left promiscuous mode
[  132.627422][   T68] veth0_vlan: left promiscuous mode
[  132.633586][ T5405] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.636086][ T5406] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.514: bad orphan inode 134217728
[  132.714854][ T5406] loop4: lost filesystem error report for type 5 error -117
[  132.717477][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  132.731347][    C1] EXT4-fs (loop4): initial error at time 1776806311: ext4_orphan_get:1423
[  132.739953][    C1] EXT4-fs (loop4): last error at time 1776806311: ext4_orphan_get:1423
[  132.769998][ T5406] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  132.855275][   T68] team0 (unregistering): Port device team_slave_1 removed
[  132.874496][   T68] team0 (unregistering): Port device team_slave_0 removed
[  132.895559][ T3732] smc: removing ib device syz1
[  133.083272][ T5420] syzkaller0: entered promiscuous mode
[  133.103830][ T5420] syzkaller0: entered allmulticast mode
[  133.271364][ T5349] bridge0: port 1(bridge_slave_0) entered blocking state
[  133.294501][ T5349] bridge0: port 1(bridge_slave_0) entered disabled state
[  133.324282][ T5349] bridge_slave_0: entered allmulticast mode
[  133.366601][ T5349] bridge_slave_0: entered promiscuous mode
[  133.409225][ T5349] bridge0: port 2(bridge_slave_1) entered blocking state
[  133.425150][ T5349] bridge0: port 2(bridge_slave_1) entered disabled state
[  133.440110][ T3330] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.447972][ T5349] bridge_slave_1: entered allmulticast mode
[  133.498596][ T5349] bridge_slave_1: entered promiscuous mode
[  133.627150][ T5349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  133.642399][ T5349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  133.652943][ T3047] 8021q: adding VLAN 0 to HW filter on device eth2
[  133.753085][ T5458] hub 8-0:1.0: USB hub found
[  133.758248][ T5458] hub 8-0:1.0: 8 ports detected
[  134.098439][ T5349] team0: Port device team_slave_0 added
[  134.177346][ T5349] team0: Port device team_slave_1 added
[  134.233636][ T5349] batman_adv: batadv0: Adding interface: batadv_slave_0
[  134.240716][ T5349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  134.283713][ T5349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  134.294453][ T5464] loop2: detected capacity change from 0 to 1024
[  134.320913][ T5349] batman_adv: batadv0: Adding interface: batadv_slave_1
[  134.339246][ T5349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  134.342626][ T5464] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  134.391572][ T5349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  134.447154][ T5349] hsr_slave_0: entered promiscuous mode
[  134.453553][ T5349] hsr_slave_1: entered promiscuous mode
[  134.459703][ T5349] debugfs: 'hsr0' already exists in 'hsr'
[  134.465552][ T5349] Cannot create hsr debugfs directory
[  134.477800][ T5464] System zones: 0-1, 3-36
[  134.510913][ T5464] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.522: bad orphan inode 134217728
[  134.558588][ T5464] loop2: lost filesystem error report for type 5 error -117
[  134.561913][ T5464] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  134.646195][ T3047] 8021q: adding VLAN 0 to HW filter on device eth3
[  134.892744][ T5349] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  134.920311][ T5349] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  134.946987][ T5349] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  134.979227][ T5349] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  134.992633][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.999864][ T5349] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  135.026735][ T5349] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  135.063205][ T5349] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  135.088445][ T5349] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  135.103719][ T3047] 8021q: adding VLAN 0 to HW filter on device eth4
[  135.233398][ T5349] 8021q: adding VLAN 0 to HW filter on device bond0
[  135.351838][ T5349] 8021q: adding VLAN 0 to HW filter on device team0
[  135.383223][ T4073] bridge0: port 1(bridge_slave_0) entered blocking state
[  135.390398][ T4073] bridge0: port 1(bridge_slave_0) entered forwarding state
[  135.405489][ T3732] bridge0: port 2(bridge_slave_1) entered blocking state
[  135.412852][ T3732] bridge0: port 2(bridge_slave_1) entered forwarding state
[  135.449604][ T5514] netlink: 248 bytes leftover after parsing attributes in process `syz.4.526'.
[  135.499731][ T5518] FAULT_INJECTION: forcing a failure.
[  135.499731][ T5518] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  135.513159][ T5514] netlink: 8 bytes leftover after parsing attributes in process `syz.4.526'.
[  135.549773][ T5518] CPU: 0 UID: 0 PID: 5518 Comm: syz.4.526 Not tainted syzkaller #0 PREEMPT(full) 
[  135.549802][ T5518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  135.549815][ T5518] Call Trace:
[  135.549822][ T5518]  <TASK>
[  135.549830][ T5518]  __dump_stack+0x1d/0x30
[  135.549867][ T5518]  dump_stack_lvl+0x95/0xd0
[  135.549904][ T5518]  dump_stack+0x15/0x1b
[  135.549935][ T5518]  should_fail_ex+0x263/0x280
[  135.550041][ T5518]  should_fail+0xb/0x20
[  135.550075][ T5518]  should_fail_usercopy+0x1a/0x20
[  135.550115][ T5518]  _copy_from_iter+0xcf/0xea0
[  135.550238][ T5518]  ? __kvmalloc_node_noprof+0x569/0x640
[  135.550266][ T5518]  ? __pfx_woken_wake_function+0x10/0x10
[  135.550294][ T5518]  file_tty_write+0x322/0x680
[  135.550349][ T5518]  ? __pfx_tty_write+0x10/0x10
[  135.550383][ T5518]  tty_write+0x25/0x30
[  135.550424][ T5518]  vfs_write+0x5a6/0x9f0
[  135.550584][ T5518]  ksys_write+0xdc/0x1a0
[  135.550651][ T5518]  __x64_sys_write+0x40/0x50
[  135.550696][ T5518]  x64_sys_call+0x27e1/0x3020
[  135.550734][ T5518]  do_syscall_64+0x12c/0x3b0
[  135.550763][ T5518]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.550814][ T5518] RIP: 0033:0x7fe3e18bc819
[  135.550836][ T5518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  135.550865][ T5518] RSP: 002b:00007fe3e02d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  135.550911][ T5518] RAX: ffffffffffffffda RBX: 00007fe3e1b36180 RCX: 00007fe3e18bc819
[  135.550929][ T5518] RDX: 000000000000ff2e RSI: 0000200000000100 RDI: 0000000000000005
[  135.550946][ T5518] RBP: 00007fe3e02d5090 R08: 0000000000000000 R09: 0000000000000000
[  135.550963][ T5518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  135.550978][ T5518] R13: 00007fe3e1b36218 R14: 00007fe3e1b36180 R15: 00007ffe366fe628
[  135.551004][ T5518]  </TASK>
[  135.942202][ T5525] syzkaller0: entered promiscuous mode
[  135.953245][ T5529] FAULT_INJECTION: forcing a failure.
[  135.953245][ T5529] name failslab, interval 1, probability 0, space 0, times 0
[  135.985012][ T5525] syzkaller0: entered allmulticast mode
[  136.024811][ T5349] 8021q: adding VLAN 0 to HW filter on device batadv0
[  136.028824][ T5529] CPU: 0 UID: 0 PID: 5529 Comm: syz.4.528 Not tainted syzkaller #0 PREEMPT(full) 
[  136.028977][ T5529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  136.029026][ T5529] Call Trace:
[  136.029048][ T5529]  <TASK>
[  136.029071][ T5529]  __dump_stack+0x1d/0x30
[  136.029190][ T5529]  dump_stack_lvl+0x95/0xd0
[  136.029310][ T5529]  dump_stack+0x15/0x1b
[  136.029396][ T5529]  should_fail_ex+0x263/0x280
[  136.029504][ T5529]  should_failslab+0x8c/0xb0
[  136.029630][ T5529]  kmem_cache_alloc_noprof+0x66/0x3f0
[  136.029728][ T5529]  ? skb_clone+0x151/0x1f0
[  136.029826][ T5529]  skb_clone+0x151/0x1f0
[  136.029969][ T5529]  __netlink_deliver_tap+0x2c9/0x500
[  136.030099][ T5529]  netlink_unicast+0x653/0x680
[  136.030232][ T5529]  netlink_sendmsg+0x5c8/0x6f0
[  136.030355][ T5529]  ? __pfx_netlink_sendmsg+0x10/0x10
[  136.030471][ T5529]  ____sys_sendmsg+0x563/0x5b0
[  136.030629][ T5529]  ___sys_sendmsg+0x195/0x1e0
[  136.030777][ T5529]  __x64_sys_sendmsg+0xd4/0x160
[  136.030886][ T5529]  x64_sys_call+0x194c/0x3020
[  136.031021][ T5529]  do_syscall_64+0x12c/0x3b0
[  136.031116][ T5529]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  136.031277][ T5529] RIP: 0033:0x7fe3e18bc819
[  136.031330][ T5529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  136.031446][ T5529] RSP: 002b:00007fe3e0317028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  136.031510][ T5529] RAX: ffffffffffffffda RBX: 00007fe3e1b35fa0 RCX: 00007fe3e18bc819
[  136.031562][ T5529] RDX: 0000000000000800 RSI: 00002000000000c0 RDI: 0000000000000003
[  136.031606][ T5529] RBP: 00007fe3e0317090 R08: 0000000000000000 R09: 0000000000000000
[  136.031650][ T5529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  136.031694][ T5529] R13: 00007fe3e1b36038 R14: 00007fe3e1b35fa0 R15: 00007ffe366fe628
[  136.031729][ T5529]  </TASK>
[  136.355730][ T5542] netlink: 4 bytes leftover after parsing attributes in process `syz.3.530'.
[  136.457997][ T5539] loop4: detected capacity change from 0 to 1024
[  136.490142][ T5349] veth0_vlan: entered promiscuous mode
[  136.527086][ T5349] veth1_vlan: entered promiscuous mode
[  136.544157][ T5539] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  136.557579][ T5550] hub 8-0:1.0: USB hub found
[  136.562310][ T5550] hub 8-0:1.0: 8 ports detected
[  136.570354][ T5539] System zones: 0-1, 3-36
[  136.590040][ T5349] veth0_macvtap: entered promiscuous mode
[  136.608216][ T5349] veth1_macvtap: entered promiscuous mode
[  136.624216][ T5349] batman_adv: batadv0: Interface activated: batadv_slave_0
[  136.636944][ T5349] batman_adv: batadv0: Interface activated: batadv_slave_1
[  136.647081][ T4073] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  136.668712][ T5539] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.529: bad orphan inode 134217728
[  136.681202][ T5554] loop1: detected capacity change from 0 to 128
[  136.697167][ T4073] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  136.708593][ T5554] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  136.724682][ T5539] loop4: lost filesystem error report for type 5 error -117
[  136.727548][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  136.743066][    C0] EXT4-fs (loop4): initial error at time 1776806315: ext4_orphan_get:1423
[  136.753179][    C0] EXT4-fs (loop4): last error at time 1776806315: ext4_orphan_get:1423
[  136.765903][ T4073] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  136.782821][ T5554] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  136.794231][ T4073] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  136.805510][   T28] kauditd_printk_skb: 646 callbacks suppressed
[  136.805527][   T28] audit: type=1400 audit(1776806315.674:6316): avc:  denied  { remount } for  pid=5553 comm="syz.1.532" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[  136.861916][ T4073] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  136.904577][ T5539] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  136.936280][   T28] audit: type=1326 audit(1776806315.804:6317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5558 comm="syz.1.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa748fc819 code=0x7ffc0000
[  136.987121][   T28] audit: type=1326 audit(1776806315.804:6318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5558 comm="syz.1.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa748fc819 code=0x7ffc0000
[  137.024668][   T28] audit: type=1326 audit(1776806315.804:6319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5558 comm="syz.1.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa748fc819 code=0x7ffc0000
[  137.066348][   T28] audit: type=1326 audit(1776806315.804:6320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5558 comm="syz.1.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa748fc819 code=0x7ffc0000
[  137.104490][   T28] audit: type=1326 audit(1776806315.834:6321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5558 comm="syz.1.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7faa748fc819 code=0x7ffc0000
[  137.135653][ T5567] netlink: 8 bytes leftover after parsing attributes in process `syz.5.534'.
[  137.136163][   T28] audit: type=1326 audit(1776806315.854:6322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5558 comm="syz.1.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa748fc819 code=0x7ffc0000
[  137.164251][ T5567] netlink: 'syz.5.534': attribute type 30 has an invalid length.
[  137.177581][   T28] audit: type=1326 audit(1776806315.854:6323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5558 comm="syz.1.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa748fc819 code=0x7ffc0000
[  137.205031][   T28] audit: type=1326 audit(1776806315.854:6324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5558 comm="syz.1.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7faa748fc582 code=0x7ffc0000
[  137.217198][ T5569] netlink: 8 bytes leftover after parsing attributes in process `syz.5.534'.
[  137.246612][   T28] audit: type=1326 audit(1776806315.854:6325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5558 comm="syz.1.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7faa748fc617 code=0x7ffc0000
[  137.274206][ T5569] netlink: 'syz.5.534': attribute type 30 has an invalid length.
[  137.322759][ T4073] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  137.336316][ T4073] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  137.354648][ T5573] netlink: 8 bytes leftover after parsing attributes in process `syz.5.536'.
[  137.370184][ T4073] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  137.378707][ T5573] netlink: 'syz.5.536': attribute type 30 has an invalid length.
[  137.396046][   T30] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  137.429952][ T5576] netlink: 8 bytes leftover after parsing attributes in process `syz.5.536'.
[  137.439371][ T5576] netlink: 'syz.5.536': attribute type 30 has an invalid length.
[  137.566430][ T3330] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.663127][ T5585] loop5: detected capacity change from 0 to 1024
[  137.684490][ T5585] EXT4-fs: Ignoring removed bh option
[  137.706162][ T5585] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  137.754580][ T5584] syzkaller0: entered promiscuous mode
[  137.755104][ T5585] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  137.769409][ T5584] syzkaller0: entered allmulticast mode
[  137.914910][ T5596] netlink: 'syz.3.542': attribute type 3 has an invalid length.
[  138.436511][ T5604] hub 8-0:1.0: USB hub found
[  138.506654][ T5604] hub 8-0:1.0: 8 ports detected
[  139.279613][ T5621] loop4: detected capacity change from 0 to 1024
[  139.388190][ T5621] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  139.425910][ T5621] System zones: 0-1, 3-36
[  139.495205][ T5621] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.550: bad orphan inode 134217728
[  139.546323][ T5621] loop4: lost filesystem error report for type 5 error -117
[  139.547539][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  139.561515][    C1] EXT4-fs (loop4): initial error at time 1776806318: ext4_orphan_get:1423
[  139.570155][    C1] EXT4-fs (loop4): last error at time 1776806318: ext4_orphan_get:1423
[  139.743952][ T5621] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  139.867913][ T5632] netlink: 260 bytes leftover after parsing attributes in process `syz.1.552'.
[  139.877231][ T5632] netlink: 84 bytes leftover after parsing attributes in process `syz.1.552'.
[  140.021176][ T5349] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  140.875998][ T3330] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  141.025197][ T5645] netlink: 68 bytes leftover after parsing attributes in process `syz.3.557'.
[  141.073069][ T5645] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5645 comm=syz.3.557
[  141.090116][ T5650] loop5: detected capacity change from 0 to 1024
[  141.097320][ T5650] EXT4-fs: Ignoring removed orlov option
[  141.117926][ T5650] EXT4-fs (loop5): can't mount with journal_async_commit, fs mounted w/o journal
[  141.209851][ T5648] syzkaller0: entered promiscuous mode
[  141.240719][ T5648] syzkaller0: entered allmulticast mode
[  141.279998][ T5650] netlink: 'syz.5.558': attribute type 10 has an invalid length.
[  141.288975][ T5650] netlink: 2 bytes leftover after parsing attributes in process `syz.5.558'.
[  141.304907][ T5650] bond0: entered promiscuous mode
[  141.312005][ T5650] bond_slave_0: entered promiscuous mode
[  141.321776][ T5650] bond_slave_1: entered promiscuous mode
[  141.331498][ T5650] bridge0: port 3(bond0) entered blocking state
[  141.338485][ T5650] bridge0: port 3(bond0) entered disabled state
[  141.347254][ T5650] bond0: entered allmulticast mode
[  141.353210][ T5650] bond_slave_0: entered allmulticast mode
[  141.360457][ T5650] bond_slave_1: entered allmulticast mode
[  141.373550][ T5650] bridge0: port 3(bond0) entered blocking state
[  141.380985][ T5650] bridge0: port 3(bond0) entered forwarding state
[  141.477352][ T5662] netlink: 8 bytes leftover after parsing attributes in process `syz.5.559'.
[  141.510455][ T5662] netlink: 'syz.5.559': attribute type 30 has an invalid length.
[  141.550262][ T5662] netlink: 8 bytes leftover after parsing attributes in process `syz.5.559'.
[  141.564525][ T5662] netlink: 'syz.5.559': attribute type 30 has an invalid length.
[  141.815817][ T5675] loop5: detected capacity change from 0 to 1024
[  141.925156][ T5675] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  141.944168][ T5675] System zones: 0-1, 3-36
[  141.977206][ T5675] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.562: bad orphan inode 134217728
[  141.996224][ T5683] netlink: 8 bytes leftover after parsing attributes in process `syz.4.564'.
[  142.003841][ T5675] loop5: lost filesystem error report for type 5 error -117
[  142.007477][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  142.021312][    C1] EXT4-fs (loop5): initial error at time 1776806320: ext4_orphan_get:1423
[  142.027537][ T5683] netlink: 24 bytes leftover after parsing attributes in process `syz.4.564'.
[  142.029969][    C1] EXT4-fs (loop5): last error at time 1776806320: ext4_orphan_get:1423
[  142.041464][ T5675] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  142.047739][ T5684] netlink: 8 bytes leftover after parsing attributes in process `syz.4.564'.
[  142.047757][ T5684] netlink: 24 bytes leftover after parsing attributes in process `syz.4.564'.
[  142.449266][ T5691] loop3: detected capacity change from 0 to 1024
[  142.496896][ T5349] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  142.499554][ T5691] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  142.516475][ T5691] System zones: 0-1, 3-36
[  142.565270][ T5696] FAULT_INJECTION: forcing a failure.
[  142.565270][ T5696] name failslab, interval 1, probability 0, space 0, times 0
[  142.577943][ T5696] CPU: 0 UID: 0 PID: 5696 Comm: syz.5.568 Not tainted syzkaller #0 PREEMPT(full) 
[  142.577971][ T5696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  142.577987][ T5696] Call Trace:
[  142.578012][ T5696]  <TASK>
[  142.578023][ T5696]  __dump_stack+0x1d/0x30
[  142.578165][ T5696]  dump_stack_lvl+0x95/0xd0
[  142.578195][ T5696]  dump_stack+0x15/0x1b
[  142.578222][ T5696]  should_fail_ex+0x263/0x280
[  142.578304][ T5696]  ? nsim_fib_event_nb+0x19f/0xda0
[  142.578337][ T5696]  should_failslab+0x8c/0xb0
[  142.578362][ T5696]  __kmalloc_cache_noprof+0x5f/0x400
[  142.578506][ T5696]  nsim_fib_event_nb+0x19f/0xda0
[  142.578569][ T5696]  ? pcpu_alloc_area+0x4ad/0x4d0
[  142.578669][ T5696]  ? __account_obj_stock+0x3d5/0x590
[  142.578699][ T5696]  ? __pfx_nsim_fib_event_nb+0x10/0x10
[  142.578723][ T5696]  atomic_notifier_call_chain+0x79/0x1a0
[  142.578748][ T5696]  ? __rcu_read_unlock+0x4e/0x70
[  142.578840][ T5696]  call_fib_notifiers+0x65/0xa0
[  142.578874][ T5696]  call_fib6_notifiers+0x30/0x40
[  142.579038][ T5696]  fib6_add_rt2node+0xb9b/0x19d0
[  142.579073][ T5696]  ? fib6_add_1+0x4f8/0xa80
[  142.579110][ T5696]  ? fib6_add_1+0x830/0xa80
[  142.579186][ T5696]  fib6_add+0x5c3/0xe70
[  142.579233][ T5696]  ? ip6_route_info_create_nh+0x5e5/0x6b0
[  142.579262][ T5696]  ip6_route_add+0xc7/0x170
[  142.579372][ T5696]  ipv6_route_ioctl+0x2de/0x310
[  142.579398][ T5696]  inet6_ioctl+0x152/0x190
[  142.579495][ T5696]  sock_do_ioctl+0x73/0x230
[  142.579608][ T5696]  sock_ioctl+0x41b/0x610
[  142.579648][ T5696]  ? mutex_lock+0x57/0x90
[  142.579786][ T5696]  ? __pfx_sock_ioctl+0x10/0x10
[  142.579884][ T5696]  __se_sys_ioctl+0xce/0x140
[  142.579936][ T5696]  __x64_sys_ioctl+0x43/0x50
[  142.579977][ T5696]  x64_sys_call+0x1563/0x3020
[  142.580024][ T5696]  do_syscall_64+0x12c/0x3b0
[  142.580057][ T5696]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  142.580142][ T5696] RIP: 0033:0x7f85776ec819
[  142.580211][ T5696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  142.580230][ T5696] RSP: 002b:00007f857613f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  142.580251][ T5696] RAX: ffffffffffffffda RBX: 00007f8577965fa0 RCX: 00007f85776ec819
[  142.580270][ T5696] RDX: 0000200000000000 RSI: 000000000000890b RDI: 0000000000000004
[  142.580287][ T5696] RBP: 00007f857613f090 R08: 0000000000000000 R09: 0000000000000000
[  142.580365][ T5696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  142.580381][ T5696] R13: 00007f8577966038 R14: 00007f8577965fa0 R15: 00007fff2a17c828
[  142.580450][ T5696]  </TASK>
[  142.867729][ T5691] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.566: bad orphan inode 134217728
[  142.888056][ T5691] loop3: lost filesystem error report for type 5 error -117
[  142.901853][ T5691] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  142.952451][   T28] kauditd_printk_skb: 206 callbacks suppressed
[  142.952470][   T28] audit: type=1326 audit(1776806321.824:6532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5697 comm="syz.1.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa748fc819 code=0x7ffc0000
[  142.987993][   T28] audit: type=1326 audit(1776806321.834:6533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5697 comm="syz.1.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa748fc819 code=0x7ffc0000
[  143.001804][ T5702] syzkaller0: entered promiscuous mode
[  143.013119][   T28] audit: type=1326 audit(1776806321.864:6534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5697 comm="syz.1.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa748fc819 code=0x7ffc0000
[  143.062639][ T5702] syzkaller0: entered allmulticast mode
[  143.115834][   T28] audit: type=1326 audit(1776806321.864:6535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5697 comm="syz.1.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa748fc819 code=0x7ffc0000
[  143.174622][ T5709] loop4: detected capacity change from 0 to 512
[  143.183676][   T28] audit: type=1326 audit(1776806321.864:6536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5697 comm="syz.1.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7faa748fc819 code=0x7ffc0000
[  143.235285][   T28] audit: type=1326 audit(1776806321.914:6537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5697 comm="syz.1.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa748fc819 code=0x7ffc0000
[  143.285767][ T5709] EXT4-fs: Ignoring removed nobh option
[  143.314462][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  143.319387][   T28] audit: type=1326 audit(1776806321.914:6538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5697 comm="syz.1.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7faa748fc582 code=0x7ffc0000
[  143.327787][ T5709] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  143.372098][   T28] audit: type=1326 audit(1776806321.914:6539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5697 comm="syz.1.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7faa748fc617 code=0x7ffc0000
[  143.410980][ T5709] EXT4-fs (loop4): 1 truncate cleaned up
[  143.417471][ T5709] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  143.445253][   T28] audit: type=1326 audit(1776806321.914:6540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5697 comm="syz.1.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7faa748b9511 code=0x7ffc0000
[  143.499527][ T5718] loop3: detected capacity change from 0 to 128
[  143.512018][ T3330] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  143.525360][ T5721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.575'.
[  143.547090][ T5718] vfat: Unknown parameter '™œÀ<[£Ð{�ú®!Ñ–'O“¦Y:˜0G-V3f_/QϲJªÔ�ÇN'
[  143.561816][   T28] audit: type=1326 audit(1776806321.914:6541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5697 comm="syz.1.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7faa748fd609 code=0x7ffc0000
[  143.587588][ T5721] netlink: 24 bytes leftover after parsing attributes in process `syz.2.575'.
[  143.766178][ T5734] loop1: detected capacity change from 0 to 512
[  143.816766][ T5734] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  143.877854][ T5734] EXT4-fs (loop1): 1 orphan inode deleted
[  143.896766][ T5734] EXT4-fs (loop1): 1 truncate cleaned up
[  143.918772][ T5734] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  144.010825][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  144.105853][ T5741] loop1: detected capacity change from 0 to 512
[  144.128882][ T5741] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  144.171181][ T5741] EXT4-fs (loop1): 1 orphan inode deleted
[  144.187571][ T5741] EXT4-fs (loop1): 1 truncate cleaned up
[  144.208199][ T5741] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  144.325767][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  144.707150][ T5752] loop3: detected capacity change from 0 to 512
[  144.804531][ T5752] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.582: bg 0: block 4: invalid block bitmap
[  144.817543][ T5752] loop3: lost filesystem error report for type 5 error -117
[  144.818692][ T5752] EXT4-fs (loop3): Remounting filesystem read-only
[  144.827509][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  144.827591][    C1] EXT4-fs (loop3): initial error at time 1776806323: ext4_validate_block_bitmap:432
[  144.827760][    C1] EXT4-fs (loop3): last error at time 1776806323: ext4_validate_block_bitmap:432
[  144.866341][ T5752] EXT4-fs (loop3): 1 truncate cleaned up
[  144.883717][ T5752] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  145.717024][ T5765] loop5: detected capacity change from 0 to 512
[  145.743615][ T5765] EXT4-fs: Ignoring removed nobh option
[  145.778912][ T5765] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  145.835730][ T5765] EXT4-fs (loop5): 1 truncate cleaned up
[  145.858675][ T5765] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  145.886482][ T5759] loop1: detected capacity change from 0 to 1024
[  145.969923][ T5349] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  145.998965][ T5759] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  146.028397][ T5759] System zones: 0-1, 3-36
[  146.075275][ T5759] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.585: bad orphan inode 134217728
[  146.115245][ T5759] loop1: lost filesystem error report for type 5 error -117
[  146.117597][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  146.132947][    C1] EXT4-fs (loop1): initial error at time 1776806324: ext4_orphan_get:1423
[  146.142532][    C1] EXT4-fs (loop1): last error at time 1776806324: ext4_orphan_get:1423
[  146.335543][ T5759] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  146.357977][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.475919][ T5785] netlink: 8 bytes leftover after parsing attributes in process `syz.5.589'.
[  146.527787][ T5785] netlink: 24 bytes leftover after parsing attributes in process `syz.5.589'.
[  146.530196][ T5789] netlink: 8 bytes leftover after parsing attributes in process `syz.5.589'.
[  146.589649][ T5789] netlink: 24 bytes leftover after parsing attributes in process `syz.5.589'.
[  146.630256][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.870007][ T5814] loop5: detected capacity change from 0 to 128
[  146.882724][ T5814] vfat: Unknown parameter '™œÀ<[£Ð{�ú®!Ñ–'O“¦Y:˜0G-V3f_/QϲJªÔ�ÇN'
[  147.284796][ T5849] netlink: 'syz.3.597': attribute type 1 has an invalid length.
[  147.295315][ T5849] netlink: 152 bytes leftover after parsing attributes in process `syz.3.597'.
[  147.305228][ T5849] FAULT_INJECTION: forcing a failure.
[  147.305228][ T5849] name failslab, interval 1, probability 0, space 0, times 0
[  147.318215][ T5849] CPU: 0 UID: 0 PID: 5849 Comm: syz.3.597 Not tainted syzkaller #0 PREEMPT(full) 
[  147.318272][ T5849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  147.318290][ T5849] Call Trace:
[  147.318299][ T5849]  <TASK>
[  147.318311][ T5849]  __dump_stack+0x1d/0x30
[  147.318421][ T5849]  dump_stack_lvl+0x95/0xd0
[  147.318454][ T5849]  dump_stack+0x15/0x1b
[  147.318486][ T5849]  should_fail_ex+0x263/0x280
[  147.318532][ T5849]  should_failslab+0x8c/0xb0
[  147.318636][ T5849]  kmem_cache_alloc_node_noprof+0x6d/0x450
[  147.318701][ T5849]  ? __alloc_skb+0x2d6/0x690
[  147.318727][ T5849]  __alloc_skb+0x2d6/0x690
[  147.318750][ T5849]  ? __alloc_skb+0x200/0x690
[  147.318832][ T5849]  netlink_ack+0xfd/0x500
[  147.318877][ T5849]  netlink_rcv_skb+0x192/0x220
[  147.318917][ T5849]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  147.319008][ T5849]  nfnetlink_rcv+0x167/0x1720
[  147.319053][ T5849]  ? xas_load+0x413/0x430
[  147.319113][ T5849]  ? xas_load+0x413/0x430
[  147.319140][ T5849]  ? __rcu_read_unlock+0x4e/0x70
[  147.319172][ T5849]  ? xa_load+0xb1/0xe0
[  147.319221][ T5849]  ? memcg_list_lru_alloc+0xd0/0x4f0
[  147.319265][ T5849]  ? set_normalized_timespec64+0xe0/0x110
[  147.319378][ T5849]  ? __account_obj_stock+0x3d5/0x590
[  147.319414][ T5849]  ? __account_obj_stock+0x3d5/0x590
[  147.319501][ T5849]  ? __rcu_read_unlock+0x4e/0x70
[  147.319534][ T5849]  ? should_fail_ex+0x30/0x280
[  147.319575][ T5849]  ? __rcu_read_unlock+0x4e/0x70
[  147.319605][ T5849]  ? avc_has_perm_noaudit+0xab/0x130
[  147.319704][ T5849]  ? selinux_nlmsg_lookup+0x99/0x890
[  147.319734][ T5849]  ? selinux_netlink_send+0x5b9/0x610
[  147.319832][ T5849]  ? __rcu_read_unlock+0x33/0x70
[  147.319863][ T5849]  ? __netlink_lookup+0x276/0x2b0
[  147.319928][ T5849]  netlink_unicast+0x5a8/0x680
[  147.319957][ T5849]  netlink_sendmsg+0x5c8/0x6f0
[  147.320077][ T5849]  ? __pfx_netlink_sendmsg+0x10/0x10
[  147.320117][ T5849]  ____sys_sendmsg+0x563/0x5b0
[  147.320149][ T5849]  ___sys_sendmsg+0x195/0x1e0
[  147.320292][ T5849]  __x64_sys_sendmsg+0xd4/0x160
[  147.320334][ T5849]  x64_sys_call+0x194c/0x3020
[  147.320372][ T5849]  do_syscall_64+0x12c/0x3b0
[  147.320487][ T5849]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  147.320517][ T5849] RIP: 0033:0x7f344f88c819
[  147.320539][ T5849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  147.320564][ T5849] RSP: 002b:00007f344e2e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  147.320665][ T5849] RAX: ffffffffffffffda RBX: 00007f344fb05fa0 RCX: 00007f344f88c819
[  147.320680][ T5849] RDX: 0000000000048084 RSI: 0000200000000080 RDI: 0000000000000003
[  147.320693][ T5849] RBP: 00007f344e2e7090 R08: 0000000000000000 R09: 0000000000000000
[  147.320709][ T5849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  147.320769][ T5849] R13: 00007f344fb06038 R14: 00007f344fb05fa0 R15: 00007ffd0f3b15d8
[  147.320796][ T5849]  </TASK>
[  147.674729][ T5851] loop5: detected capacity change from 0 to 512
[  147.695174][ T5851] EXT4-fs: Ignoring removed nobh option
[  147.705747][ T5853] loop3: detected capacity change from 0 to 128
[  147.718240][ T5851] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  147.775753][ T5851] EXT4-fs (loop5): 1 truncate cleaned up
[  147.782219][ T5851] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  147.809161][ T5349] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.846508][ T5857] netlink: 'syz.1.600': attribute type 1 has an invalid length.
[  147.854307][ T5857] netlink: 152 bytes leftover after parsing attributes in process `syz.1.600'.
[  147.974537][   T28] kauditd_printk_skb: 72 callbacks suppressed
[  147.974568][   T28] audit: type=1326 audit(1776806326.844:6614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5861 comm="syz.3.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f344f88c819 code=0x7ffc0000
[  148.033945][ T5866] netlink: 8 bytes leftover after parsing attributes in process `syz.1.603'.
[  148.055275][   T28] audit: type=1326 audit(1776806326.874:6615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5861 comm="syz.3.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f344f88c819 code=0x7ffc0000
[  148.086051][ T5868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.603'.
[  148.117016][   T28] audit: type=1326 audit(1776806326.874:6616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5861 comm="syz.3.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f344f88c819 code=0x7ffc0000
[  148.177488][   T28] audit: type=1326 audit(1776806326.874:6617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5861 comm="syz.3.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f344f88c819 code=0x7ffc0000
[  148.248992][   T28] audit: type=1326 audit(1776806326.934:6618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5861 comm="syz.3.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f344f88c819 code=0x7ffc0000
[  148.329001][   T28] audit: type=1326 audit(1776806326.934:6619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5861 comm="syz.3.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f344f88c582 code=0x7ffc0000
[  148.392004][   T28] audit: type=1326 audit(1776806326.934:6620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5861 comm="syz.3.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f344f88c617 code=0x7ffc0000
[  148.440987][ T5876] loop1: detected capacity change from 0 to 764
[  148.447916][   T28] audit: type=1326 audit(1776806326.934:6621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5861 comm="syz.3.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f344f849511 code=0x7ffc0000
[  148.458581][ T5876] iso9660: Unknown parameter 'ÿÿ'
[  148.477134][   T28] audit: type=1326 audit(1776806326.934:6622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5861 comm="syz.3.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f344f88d609 code=0x7ffc0000
[  148.508838][   T28] audit: type=1326 audit(1776806326.934:6623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5861 comm="syz.3.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f344f84957b code=0x7ffc0000
[  148.747067][ T5880] loop1: detected capacity change from 0 to 512
[  148.797734][ T5880] EXT4-fs: Ignoring removed bh option
[  148.844602][ T5880] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  148.926668][ T5880] EXT4-fs (loop1): 1 truncate cleaned up
[  148.960019][ T5880] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  148.985817][ T5880] IPv4: Oversized IP packet from 127.0.0.1
[  148.991919][    C0] IPv4: Oversized IP packet from 127.0.0.1
[  149.076946][ T5888] hub 8-0:1.0: USB hub found
[  149.101546][ T5888] hub 8-0:1.0: 8 ports detected
[  149.112051][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.158744][ T5892] netlink: 8 bytes leftover after parsing attributes in process `syz.5.613'.
[  149.333461][ T5901] loop2: detected capacity change from 0 to 128
[  149.357101][ T5901] vfat: Unknown parameter '™œÀ<[£Ð{�ú®!Ñ–'O“¦Y:˜0G-V3f_/QϲJªÔ�ÇN'
[  149.400956][ T5908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.616'.
[  149.633418][ T5892] loop5: detected capacity change from 0 to 512
[  149.664461][ T5892] EXT4-fs: Ignoring removed i_version option
[  149.692681][ T5892] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c018, mo2=0082]
[  149.716148][ T5892] System zones: 0-2, 18-18, 34-35
[  149.737170][ T5892] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  149.753922][ T5892] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  149.786353][ T5892] support for cryptoloop has been removed.  Use dm-crypt instead.
[  149.928312][ T5349] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.198534][ T5928] loop4: detected capacity change from 0 to 1024
[  150.217317][ T5928] EXT4-fs: Ignoring removed bh option
[  150.235062][ T5932] C: renamed from lo (while UP)
[  150.254000][ T5928] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  150.275670][ T5932] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  150.390212][ T5928] EXT4-fs (loop4): shut down requested (0)
[  150.541888][ T3330] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.640783][ T5947] hub 8-0:1.0: USB hub found
[  150.645611][ T5947] hub 8-0:1.0: 8 ports detected
[  150.780846][ T5945] loop5: detected capacity change from 0 to 1024
[  151.072948][ T5945] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  151.082802][ T5945] System zones: 0-1, 3-36
[  151.115858][ T5945] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.628: bad orphan inode 134217728
[  151.133429][ T5945] loop5: lost filesystem error report for type 5 error -117
[  151.137636][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  151.153250][    C0] EXT4-fs (loop5): initial error at time 1776806330: ext4_orphan_get:1423
[  151.163480][    C0] EXT4-fs (loop5): last error at time 1776806330: ext4_orphan_get:1423
[  151.226136][ T5945] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  151.288577][ T5964] loop3: detected capacity change from 0 to 128
[  151.300160][ T5964] vfat: Unknown parameter '™œÀ<[£Ð{�ú®!Ñ–'O“¦Y:˜0G-V3f_/QϲJªÔ�ÇN'
[  151.565782][ T5971] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  151.623629][ T5971] EXT4-fs error (device loop4): ext4_init_orphan_info:583: comm syz.4.636: inode #0: comm syz.4.636: iget: illegal inode #
[  151.650469][ T5971] loop4: lost filesystem error report for type 5 error -117
[  151.657565][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  151.671502][    C1] EXT4-fs (loop4): initial error at time 1776806330: ext4_init_orphan_info:583
[  151.680521][    C1] EXT4-fs (loop4): last error at time 1776806330: ext4_init_orphan_info:583
[  151.696314][ T5971] EXT4-fs (loop4): get orphan inode failed
[  151.700148][ T5349] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.703646][ T5971] EXT4-fs (loop4): mount failed
[  151.993324][ T5977] set_capacity_and_notify: 1 callbacks suppressed
[  151.993413][ T5977] loop5: detected capacity change from 0 to 1024
[  152.099945][ T5977] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  152.131846][ T5977] System zones: 0-1, 3-36
[  152.244574][ T5977] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.637: bad orphan inode 134217728
[  152.300281][ T5977] loop5: lost filesystem error report for type 5 error -117
[  152.300890][ T5977] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  153.331811][ T6010] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5137 sclass=netlink_route_socket pid=6010 comm=syz.3.646
[  153.381855][ T6012] __nla_validate_parse: 4 callbacks suppressed
[  153.381876][ T6012] netlink: 324 bytes leftover after parsing attributes in process `syz.3.646'.
[  153.612030][   T28] kauditd_printk_skb: 202 callbacks suppressed
[  153.612048][   T28] audit: type=1400 audit(1776806332.484:6826): avc:  denied  { execute } for  pid=6013 comm="syz.4.647" path="/111/file0" dev="tmpfs" ino=618 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  154.191406][   T28] audit: type=1326 audit(1776806333.064:6827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6021 comm="syz.3.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f344f88c819 code=0x7ffc0000
[  154.310398][   T28] audit: type=1326 audit(1776806333.064:6828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6021 comm="syz.3.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f344f88c819 code=0x7ffc0000
[  154.408725][   T28] audit: type=1326 audit(1776806333.094:6829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6021 comm="syz.3.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f344f88c819 code=0x7ffc0000
[  154.520794][   T28] audit: type=1326 audit(1776806333.094:6830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6021 comm="syz.3.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f344f88c819 code=0x7ffc0000
[  154.612834][ T6028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  154.621461][ T6028] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  154.693937][ T6028] audit: audit_backlog=65 > audit_backlog_limit=64
[  154.700582][ T6028] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64
[  154.708285][ T6028] audit: backlog limit exceeded
[  154.764448][ T5349] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  154.795821][   T28] audit: type=1326 audit(1776806333.094:6831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6021 comm="syz.3.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f344f88c819 code=0x7ffc0000
[  154.959623][   T28] audit: type=1326 audit(1776806333.094:6832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6021 comm="syz.3.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f344f88c819 code=0x7ffc0000
[  155.346797][ T6035] loop5: detected capacity change from 0 to 128
[  155.371297][ T6035] vfat: Unknown parameter '™œÀ<[£Ð{�ú®!Ñ–'O“¦Y:˜0G-V3f_/QϲJªÔ�ÇN'
[  155.716348][ T6046] loop4: detected capacity change from 0 to 2048
[  155.741223][ T6046] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  155.765826][ T6048] loop2: detected capacity change from 0 to 128
[  155.781515][ T6048] vfat: Unknown parameter '™œÀ<[£Ð{�ú®!Ñ–'O“¦Y:˜0G-V3f_/QϲJªÔ�ÇN'
[  155.794022][ T6046] ext4 filesystem being mounted at /113/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  155.865698][ T3330] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  155.908677][ T6057] netlink: 164 bytes leftover after parsing attributes in process `syz.4.656'.
[  156.371740][ T6065] loop4: detected capacity change from 0 to 512
[  156.455844][ T6065] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.657: bg 0: block 4: invalid block bitmap
[  156.469022][ T6065] loop4: lost filesystem error report for type 5 error -117
[  156.470873][ T6065] EXT4-fs (loop4): Remounting filesystem read-only
[  156.478793][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  156.478846][    C0] EXT4-fs (loop4): initial error at time 1776806335: ext4_validate_block_bitmap:432
[  156.479371][    C0] EXT4-fs (loop4): last error at time 1776806335: ext4_validate_block_bitmap:432
[  156.515402][ T6065] EXT4-fs (loop4): 1 truncate cleaned up
[  156.532812][ T6065] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  156.693304][ T6064] loop5: detected capacity change from 0 to 8192
[  157.015115][ T6064] FAT-fs (loop5): error, clusters badly computed (2 != 1)
[  157.048608][ T6064] FAT-fs (loop5): Filesystem has been set read-only
[  157.066677][ T6072] netlink: 8 bytes leftover after parsing attributes in process `syz.5.658'.
[  157.075792][ T6072] netlink: 8 bytes leftover after parsing attributes in process `syz.5.658'.
[  157.088525][ T6072] ip6gretap1: entered allmulticast mode
[  157.186204][ T6073] loop3: detected capacity change from 0 to 1024
[  157.276375][ T6073] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  157.297226][ T6073] System zones: 0-1, 3-36
[  157.307942][ T6077] netlink: 8 bytes leftover after parsing attributes in process `syz.5.661'.
[  157.324489][ T6073] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.660: bad orphan inode 134217728
[  157.342277][ T6073] loop3: lost filesystem error report for type 5 error -117
[  157.351819][ T6077] netlink: 'syz.5.661': attribute type 30 has an invalid length.
[  157.380023][ T6073] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  157.398509][ T6078] netlink: 8 bytes leftover after parsing attributes in process `syz.5.661'.
[  157.407561][ T6078] netlink: 'syz.5.661': attribute type 30 has an invalid length.
[  157.514211][ T6080] FAULT_INJECTION: forcing a failure.
[  157.514211][ T6080] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  157.575335][ T6080] CPU: 0 UID: 0 PID: 6080 Comm: syz.1.662 Not tainted syzkaller #0 PREEMPT(full) 
[  157.575412][ T6080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  157.575425][ T6080] Call Trace:
[  157.575431][ T6080]  <TASK>
[  157.575439][ T6080]  __dump_stack+0x1d/0x30
[  157.575468][ T6080]  dump_stack_lvl+0x95/0xd0
[  157.575498][ T6080]  dump_stack+0x15/0x1b
[  157.575546][ T6080]  should_fail_ex+0x263/0x280
[  157.575638][ T6080]  should_fail+0xb/0x20
[  157.575690][ T6080]  should_fail_usercopy+0x1a/0x20
[  157.575732][ T6080]  _copy_from_iter+0xcf/0xea0
[  157.575809][ T6080]  ? __alloc_skb+0x4f6/0x690
[  157.575899][ T6080]  ? __alloc_skb+0x200/0x690
[  157.575984][ T6080]  netlink_sendmsg+0x4ae/0x6f0
[  157.576073][ T6080]  ? __pfx_netlink_sendmsg+0x10/0x10
[  157.576105][ T6080]  ____sys_sendmsg+0x563/0x5b0
[  157.576145][ T6080]  ___sys_sendmsg+0x195/0x1e0
[  157.576253][ T6080]  __x64_sys_sendmsg+0xd4/0x160
[  157.576358][ T6080]  x64_sys_call+0x194c/0x3020
[  157.576537][ T6080]  do_syscall_64+0x12c/0x3b0
[  157.576636][ T6080]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  157.576659][ T6080] RIP: 0033:0x7faa748fc819
[  157.576679][ T6080] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  157.576702][ T6080] RSP: 002b:00007faa7334f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  157.576794][ T6080] RAX: ffffffffffffffda RBX: 00007faa74b75fa0 RCX: 00007faa748fc819
[  157.576809][ T6080] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000004
[  157.576821][ T6080] RBP: 00007faa7334f090 R08: 0000000000000000 R09: 0000000000000000
[  157.576835][ T6080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  157.576847][ T6080] R13: 00007faa74b76038 R14: 00007faa74b75fa0 R15: 00007ffdcef51b28
[  157.576942][ T6080]  </TASK>
[  157.808429][ T6083] loop2: detected capacity change from 0 to 512
[  157.839107][ T6083] EXT4-fs: Ignoring removed nobh option
[  157.903559][ T6083] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  157.952961][ T6083] EXT4-fs (loop2): 1 truncate cleaned up
[  157.963636][ T6083] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  158.106080][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.188244][ T3330] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.497450][ T6105] loop1: detected capacity change from 0 to 512
[  158.564623][ T6105] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.667: bg 0: block 4: invalid block bitmap
[  158.577950][ T6105] loop1: lost filesystem error report for type 5 error -117
[  158.579314][ T6105] EXT4-fs (loop1): Remounting filesystem read-only
[  158.595594][ T6105] EXT4-fs (loop1): 1 truncate cleaned up
[  158.602130][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  158.602159][    C0] EXT4-fs (loop1): initial error at time 1776806337: ext4_validate_block_bitmap:432
[  158.602282][    C0] EXT4-fs (loop1): last error at time 1776806337: ext4_validate_block_bitmap:432
[  158.645920][ T6105] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  158.723650][   T28] kauditd_printk_skb: 210 callbacks suppressed
[  158.723666][   T28] audit: type=1326 audit(1776806337.594:7043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6104 comm="syz.5.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f85776ec819 code=0x7ffc0000
[  158.767986][ T6109] loop2: detected capacity change from 0 to 128
[  158.860539][ T6109] vfat: Unknown parameter 'ÿ™œÀ<[£Ð{�ú®!Ñ–'O“¦Y:˜0G-V3f_/QϲJªÔ�ÇN'
[  159.174351][   T28] audit: type=1326 audit(1776806337.694:7044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6092 comm="syz.5.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f85776ec819 code=0x7ffc0000
[  159.306256][   T28] audit: type=1326 audit(1776806337.694:7045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6092 comm="syz.5.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f85776ec819 code=0x7ffc0000
[  159.342969][ T6115] netlink: 8 bytes leftover after parsing attributes in process `syz.5.670'.
[  159.414624][ T6117] netlink: 8 bytes leftover after parsing attributes in process `syz.5.670'.
[  159.423615][ T6117] netlink: 'syz.5.670': attribute type 30 has an invalid length.
[  159.438502][ T6115] netlink: 'syz.5.670': attribute type 30 has an invalid length.
[  159.455044][ T6118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.671'.
[  159.511607][ T6120] netlink: 4 bytes leftover after parsing attributes in process `syz.4.672'.
[  159.534514][ T6118] netlink: 'syz.2.671': attribute type 30 has an invalid length.
[  159.565312][ T6121] netlink: 8 bytes leftover after parsing attributes in process `syz.2.671'.
[  159.601525][ T6121] netlink: 'syz.2.671': attribute type 30 has an invalid length.
[  159.707460][   T28] audit: type=1326 audit(1776806338.574:7046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6122 comm="syz.4.673" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe3e18bc819 code=0x0
[  159.952149][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.147124][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.172029][ T6133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.676'.
[  160.247981][ T6135] netlink: 8 bytes leftover after parsing attributes in process `syz.1.677'.
[  160.395609][ T6137] hub 8-0:1.0: USB hub found
[  160.405844][ T6137] hub 8-0:1.0: 8 ports detected
[  160.453317][ T6133] loop3: detected capacity change from 0 to 512
[  160.468963][ T6133] EXT4-fs: Ignoring removed i_version option
[  160.482118][ T6133] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c018, mo2=0082]
[  160.495158][ T6133] System zones: 0-2, 18-18, 34-35
[  160.515253][ T6146] netlink: 'syz.2.680': attribute type 10 has an invalid length.
[  160.524137][ T6133] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  160.529329][ T6146] macvlan1: entered promiscuous mode
[  160.538151][ T6133] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  160.552913][ T6146] macvlan1: entered allmulticast mode
[  160.560756][ T6146] veth1_vlan: entered allmulticast mode
[  160.568834][ T6146] bond0: (slave macvlan1): Enslaving as an active interface with an up link
[  160.580769][ T6133] support for cryptoloop has been removed.  Use dm-crypt instead.
[  160.652276][   T28] audit: type=1400 audit(1776806339.524:7047): avc:  denied  { connect } for  pid=6151 comm="syz.5.683" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  160.677291][ T6135] loop1: detected capacity change from 0 to 512
[  160.714082][ T6135] EXT4-fs: Ignoring removed i_version option
[  160.755260][   T28] audit: type=1326 audit(1776806339.524:7048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6147 comm="syz.4.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3e18bc819 code=0x7ffc0000
[  160.783439][   T28] audit: type=1326 audit(1776806339.544:7049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6147 comm="syz.4.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3e18bc819 code=0x7ffc0000
[  160.809586][   T28] audit: type=1326 audit(1776806339.544:7050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6147 comm="syz.4.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3e18bc819 code=0x7ffc0000
[  160.812616][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.834504][ T6135] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c018, mo2=0082]
[  160.850315][ T6135] System zones: 0-2, 18-18, 34-35
[  160.857540][   T28] audit: type=1326 audit(1776806339.544:7051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6147 comm="syz.4.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fe3e18bc819 code=0x7ffc0000
[  160.881225][   T28] audit: type=1326 audit(1776806339.594:7052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6147 comm="syz.4.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3e18bc819 code=0x7ffc0000
[  160.881321][ T6160] loop2: detected capacity change from 0 to 512
[  160.882172][ T6160] EXT4-fs: Ignoring removed nobh option
[  160.907137][ T6135] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  160.911317][ T6160] EXT4-fs: inline encryption not supported
[  160.917082][ T6135] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  160.929754][ T6160] ext4: Unknown parameter 'dont_appraise'
[  160.956640][ T6160] netlink: 12 bytes leftover after parsing attributes in process `syz.2.685'.
[  160.961649][ T6135] support for cryptoloop has been removed.  Use dm-crypt instead.
[  161.151810][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.179096][ T6164] netlink: 8 bytes leftover after parsing attributes in process `syz.3.686'.
[  161.517005][ T6173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.689'.
[  161.643451][ T6174] loop1: detected capacity change from 0 to 1024
[  161.698650][ T6164] loop3: detected capacity change from 0 to 512
[  161.718749][ T6164] EXT4-fs: Ignoring removed i_version option
[  161.746035][ T6164] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c018, mo2=0082]
[  161.762819][ T6164] System zones: 0-2, 18-18, 34-35
[  161.777638][ T6174] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  161.785332][ T6179] hub 8-0:1.0: USB hub found
[  161.791867][ T6164] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  161.808095][ T6179] hub 8-0:1.0: 8 ports detected
[  161.818388][ T6174] System zones: 0-1, 3-36
[  161.846998][ T6164] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  161.903088][ T6174] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.687: bad orphan inode 134217728
[  161.921560][ T6164] support for cryptoloop has been removed.  Use dm-crypt instead.
[  161.937685][ T6174] loop1: lost filesystem error report for type 5 error -117
[  161.986811][ T6174] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  162.117053][ T6173] loop2: detected capacity change from 0 to 512
[  162.134251][ T6173] EXT4-fs: Ignoring removed i_version option
[  162.170736][ T6173] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c018, mo2=0082]
[  162.180892][ T6173] System zones: 0-2, 18-18, 34-35
[  162.188737][ T6173] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  162.207601][ T6173] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  162.256257][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.280438][ T6191] hub 8-0:1.0: USB hub found
[  162.285346][ T6191] hub 8-0:1.0: 8 ports detected
[  162.379362][ T6173] support for cryptoloop has been removed.  Use dm-crypt instead.
[  162.793256][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.615814][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.683197][ T6221] FAULT_INJECTION: forcing a failure.
[  163.683197][ T6221] name failslab, interval 1, probability 0, space 0, times 0
[  163.756478][ T6221] CPU: 1 UID: 0 PID: 6221 Comm: syz.1.700 Not tainted syzkaller #0 PREEMPT(full) 
[  163.756513][ T6221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  163.756567][ T6221] Call Trace:
[  163.756620][ T6221]  <TASK>
[  163.756629][ T6221]  __dump_stack+0x1d/0x30
[  163.756667][ T6221]  dump_stack_lvl+0x95/0xd0
[  163.756695][ T6221]  dump_stack+0x15/0x1b
[  163.756726][ T6221]  should_fail_ex+0x263/0x280
[  163.756804][ T6221]  should_failslab+0x8c/0xb0
[  163.756827][ T6221]  kmem_cache_alloc_noprof+0x66/0x3f0
[  163.756853][ T6221]  ? skb_clone+0x151/0x1f0
[  163.756936][ T6221]  skb_clone+0x151/0x1f0
[  163.756989][ T6221]  __netlink_deliver_tap+0x2c9/0x500
[  163.757038][ T6221]  netlink_unicast+0x653/0x680
[  163.757078][ T6221]  netlink_sendmsg+0x5c8/0x6f0
[  163.757173][ T6221]  ? __pfx_netlink_sendmsg+0x10/0x10
[  163.757226][ T6221]  ____sys_sendmsg+0x563/0x5b0
[  163.757370][ T6221]  ___sys_sendmsg+0x195/0x1e0
[  163.757421][ T6221]  __x64_sys_sendmsg+0xd4/0x160
[  163.757459][ T6221]  x64_sys_call+0x194c/0x3020
[  163.757557][ T6221]  do_syscall_64+0x12c/0x3b0
[  163.757594][ T6221]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.757623][ T6221] RIP: 0033:0x7faa748fc819
[  163.757684][ T6221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  163.757709][ T6221] RSP: 002b:00007faa7334f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  163.757734][ T6221] RAX: ffffffffffffffda RBX: 00007faa74b75fa0 RCX: 00007faa748fc819
[  163.757753][ T6221] RDX: 0000000004000810 RSI: 0000200000000100 RDI: 0000000000000003
[  163.757771][ T6221] RBP: 00007faa7334f090 R08: 0000000000000000 R09: 0000000000000000
[  163.757795][ T6221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  163.757810][ T6221] R13: 00007faa74b76038 R14: 00007faa74b75fa0 R15: 00007ffdcef51b28
[  163.757837][ T6221]  </TASK>
[  164.278785][   T28] kauditd_printk_skb: 188 callbacks suppressed
[  164.278804][   T28] audit: type=1326 audit(1776806343.154:7241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6234 comm="syz.1.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa748fc819 code=0x7ffc0000
[  164.342035][   T28] audit: type=1326 audit(1776806343.194:7242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6234 comm="syz.1.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa748fc819 code=0x7ffc0000
[  164.417590][   T28] audit: type=1326 audit(1776806343.194:7243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6234 comm="syz.1.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa748fc819 code=0x7ffc0000
[  164.477500][   T28] audit: type=1326 audit(1776806343.194:7244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6234 comm="syz.1.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa748fc819 code=0x7ffc0000
[  164.488129][ T6240] loop5: detected capacity change from 0 to 128
[  164.530703][   T28] audit: type=1326 audit(1776806343.194:7245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6234 comm="syz.1.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7faa748fc819 code=0x7ffc0000
[  164.578248][   T28] audit: type=1326 audit(1776806343.244:7246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6234 comm="syz.1.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa748fc819 code=0x7ffc0000
[  164.592917][ T6240] vfat: Unknown parameter '™œÀ<[£Ð{�ú®!Ñ–'O“¦Y:˜0G-V3f_/QϲJªÔ�ÇN'
[  164.601875][   T28] audit: type=1326 audit(1776806343.244:7247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6234 comm="syz.1.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7faa748fc582 code=0x7ffc0000
[  164.634852][   T28] audit: type=1326 audit(1776806343.244:7248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6234 comm="syz.1.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7faa748fc617 code=0x7ffc0000
[  164.690612][   T28] audit: type=1326 audit(1776806343.244:7249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6234 comm="syz.1.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7faa748b9511 code=0x7ffc0000
[  164.730605][   T28] audit: type=1326 audit(1776806343.244:7250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6234 comm="syz.1.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7faa748fd609 code=0x7ffc0000
[  164.826005][ T6245] syzkaller0: entered promiscuous mode
[  164.841780][ T6245] syzkaller0: entered allmulticast mode
[  164.875883][ T6245] FAULT_INJECTION: forcing a failure.
[  164.875883][ T6245] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  164.915479][ T6245] CPU: 1 UID: 0 PID: 6245 Comm: syz.4.706 Not tainted syzkaller #0 PREEMPT(full) 
[  164.915523][ T6245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  164.915537][ T6245] Call Trace:
[  164.915544][ T6245]  <TASK>
[  164.915588][ T6245]  __dump_stack+0x1d/0x30
[  164.915661][ T6245]  dump_stack_lvl+0x95/0xd0
[  164.915697][ T6245]  dump_stack+0x15/0x1b
[  164.915728][ T6245]  should_fail_ex+0x263/0x280
[  164.915773][ T6245]  should_fail+0xb/0x20
[  164.915811][ T6245]  should_fail_usercopy+0x1a/0x20
[  164.915939][ T6245]  _copy_from_user+0x1c/0xb0
[  164.916018][ T6245]  __copy_msghdr+0x244/0x300
[  164.916056][ T6245]  ___sys_sendmsg+0x10c/0x1e0
[  164.916186][ T6245]  __x64_sys_sendmsg+0xd4/0x160
[  164.916218][ T6245]  x64_sys_call+0x194c/0x3020
[  164.916268][ T6245]  do_syscall_64+0x12c/0x3b0
[  164.916303][ T6245]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.916332][ T6245] RIP: 0033:0x7fe3e18bc819
[  164.916408][ T6245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  164.916427][ T6245] RSP: 002b:00007fe3e0317028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  164.916446][ T6245] RAX: ffffffffffffffda RBX: 00007fe3e1b35fa0 RCX: 00007fe3e18bc819
[  164.916462][ T6245] RDX: 0000000000004005 RSI: 0000200000000280 RDI: 0000000000000006
[  164.916479][ T6245] RBP: 00007fe3e0317090 R08: 0000000000000000 R09: 0000000000000000
[  164.916503][ T6245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  164.916532][ T6245] R13: 00007fe3e1b36038 R14: 00007fe3e1b35fa0 R15: 00007ffe366fe628
[  164.916552][ T6245]  </TASK>
[  165.294086][ T6257] loop3: detected capacity change from 0 to 1024
[  165.355139][ T6257] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  165.381620][ T6257] System zones: 0-1, 3-36
[  165.382933][ T6269] loop1: detected capacity change from 0 to 512
[  165.394386][ T6257] 
[  165.401340][ T6273] loop5: detected capacity change from 0 to 128
[  165.419158][ T6273] vfat: Unknown parameter 'pagemap'
[  165.422678][ T6257] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.708: bad orphan inode 134217728
[  165.455673][ T6269] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  165.507311][ T6269] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  165.557709][ T6257] loop3: lost filesystem error report for type 5 error -117
[  165.592276][ T6269] __nla_validate_parse: 2 callbacks suppressed
[  165.592297][ T6269] netlink: 16 bytes leftover after parsing attributes in process `syz.1.714'.
[  165.739716][ T6292] loop2: detected capacity change from 0 to 512
[  165.856810][ T6257] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  166.052397][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.386495][ T6297] hub 8-0:1.0: USB hub found
[  166.397604][ T6297] hub 8-0:1.0: 8 ports detected
[  166.525348][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.561065][ T6305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.721'.
[  166.644612][ T6305] netlink: 'syz.4.721': attribute type 30 has an invalid length.
[  166.727170][   T30] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  166.749060][ T6311] loop3: detected capacity change from 0 to 128
[  166.757280][   T30] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  166.789457][ T6311] vfat: Unknown parameter '™œÀ<[£Ð{�ú®!Ñ–'O“¦Y:˜0G-V3f_/QϲJªÔ�ÇN'
[  166.839048][   T30] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  166.859506][   T30] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  166.903279][ T6314] FAULT_INJECTION: forcing a failure.
[  166.903279][ T6314] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  166.935772][ T6314] CPU: 0 UID: 0 PID: 6314 Comm: syz.4.725 Not tainted syzkaller #0 PREEMPT(full) 
[  166.935836][ T6314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  166.935882][ T6314] Call Trace:
[  166.935891][ T6314]  <TASK>
[  166.935903][ T6314]  __dump_stack+0x1d/0x30
[  166.935933][ T6314]  dump_stack_lvl+0x95/0xd0
[  166.935958][ T6314]  dump_stack+0x15/0x1b
[  166.935984][ T6314]  should_fail_ex+0x263/0x280
[  166.936039][ T6314]  should_fail+0xb/0x20
[  166.936116][ T6314]  should_fail_usercopy+0x1a/0x20
[  166.936149][ T6314]  _copy_from_user+0x1c/0xb0
[  166.936230][ T6314]  core_sys_select+0x1e6/0x730
[  166.936305][ T6314]  ? set_user_sigmask+0x8b/0x140
[  166.936395][ T6314]  __se_sys_pselect6+0x23c/0x2a0
[  166.936463][ T6314]  __x64_sys_pselect6+0x78/0x90
[  166.936494][ T6314]  x64_sys_call+0x8d5/0x3020
[  166.936531][ T6314]  do_syscall_64+0x12c/0x3b0
[  166.936561][ T6314]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  166.936603][ T6314] RIP: 0033:0x7fe3e18bc819
[  166.936621][ T6314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  166.936645][ T6314] RSP: 002b:00007fe3e0317028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e
[  166.936671][ T6314] RAX: ffffffffffffffda RBX: 00007fe3e1b35fa0 RCX: 00007fe3e18bc819
[  166.936689][ T6314] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000040
[  166.936721][ T6314] RBP: 00007fe3e0317090 R08: 0000000000000000 R09: 0000000000000000
[  166.936784][ T6314] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001
[  166.936799][ T6314] R13: 00007fe3e1b36038 R14: 00007fe3e1b35fa0 R15: 00007ffe366fe628
[  166.936884][ T6314]  </TASK>
[  167.152435][ T6316] loop4: detected capacity change from 0 to 512
[  167.173119][ T6316] EXT4-fs: Ignoring removed mblk_io_submit option
[  167.206130][ T6316] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  167.234048][ T6316] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  167.245118][ T6316] EXT4-fs (loop4): orphan cleanup on readonly fs
[  167.270635][ T6316] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.726: Failed to acquire dquot type 1
[  167.295811][ T6316] loop4: lost filesystem error report for type 5 error -5
[  167.297604][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  167.314494][    C0] EXT4-fs (loop4): last error at time 1776806346: ext4_acquire_dquot:7034
[  167.371536][ T6316] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.726: Invalid block bitmap block 0 in block_group 0
[  167.443888][ T6316] loop4: lost filesystem error report for type 5 error -117
[  167.587257][ T6316] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.726: Invalid block bitmap block 0 in block_group 0
[  167.611283][ T6316] loop4: lost filesystem error report for type 5 error -117
[  167.631364][ T6316] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.726: Invalid block bitmap block 0 in block_group 0
[  167.879704][ T6328] loop5: detected capacity change from 0 to 512
[  167.950126][ T6328] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.727: bg 0: block 4: invalid block bitmap
[  167.963783][ T6328] loop5: lost filesystem error report for type 5 error -117
[  167.965502][ T6328] EXT4-fs (loop5): Remounting filesystem read-only
[  167.973801][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  167.973951][    C0] EXT4-fs (loop5): initial error at time 1776806346: ext4_validate_block_bitmap:432
[  167.974231][    C0] EXT4-fs (loop5): last error at time 1776806346: ext4_validate_block_bitmap:432
[  168.010973][ T6328] EXT4-fs (loop5): 1 truncate cleaned up
[  168.026804][ T6328] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  168.084876][ T6316] loop4: lost filesystem error report for type 5 error -117
[  168.088013][ T6316] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.726: Failed to acquire dquot type 1
[  168.204085][ T6333] syzkaller0: entered promiscuous mode
[  168.217984][ T6316] loop4: lost filesystem error report for type 5 error -28
[  168.232649][ T6333] syzkaller0: entered allmulticast mode
[  168.260810][ T6316] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.726: Failed to acquire dquot type 1
[  168.483706][ T6316] loop4: lost filesystem error report for type 5 error -28
[  168.500051][ T6316] EXT4-fs (loop4): 1 orphan inode deleted
[  168.635860][ T6336] netlink: 24 bytes leftover after parsing attributes in process `syz.3.730'.
[  168.755303][ T6338] hub 8-0:1.0: USB hub found
[  168.783712][ T6338] hub 8-0:1.0: 8 ports detected
[  168.790524][ T6316] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  168.955563][ T6346] FAULT_INJECTION: forcing a failure.
[  168.955563][ T6346] name failslab, interval 1, probability 0, space 0, times 0
[  168.968628][ T6346] CPU: 0 UID: 0 PID: 6346 Comm: syz.2.735 Not tainted syzkaller #0 PREEMPT(full) 
[  168.968660][ T6346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  168.968673][ T6346] Call Trace:
[  168.968679][ T6346]  <TASK>
[  168.968686][ T6346]  __dump_stack+0x1d/0x30
[  168.968721][ T6346]  dump_stack_lvl+0x95/0xd0
[  168.968824][ T6346]  dump_stack+0x15/0x1b
[  168.968849][ T6346]  should_fail_ex+0x263/0x280
[  168.968890][ T6346]  should_failslab+0x8c/0xb0
[  168.968928][ T6346]  __kmalloc_noprof+0xb8/0x4d0
[  168.968951][ T6346]  ? security_sk_alloc+0x52/0x120
[  168.968974][ T6346]  security_sk_alloc+0x52/0x120
[  168.969019][ T6346]  sk_prot_alloc+0xc2/0x180
[  168.969070][ T6346]  sk_alloc+0x35/0x3e0
[  168.969131][ T6346]  ? pfkey_create+0xb2/0x390
[  168.969277][ T6346]  pfkey_create+0xd7/0x390
[  168.969308][ T6346]  __sock_create+0x2e4/0x580
[  168.969338][ T6346]  __sys_socket+0xaf/0x180
[  168.969366][ T6346]  __x64_sys_socket+0x3f/0x50
[  168.969419][ T6346]  x64_sys_call+0x11fc/0x3020
[  168.969453][ T6346]  do_syscall_64+0x12c/0x3b0
[  168.969479][ T6346]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.969505][ T6346] RIP: 0033:0x7ffb12d5c819
[  168.969527][ T6346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  168.969595][ T6346] RSP: 002b:00007ffb117b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  168.969614][ T6346] RAX: ffffffffffffffda RBX: 00007ffb12fd5fa0 RCX: 00007ffb12d5c819
[  168.969628][ T6346] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 000000000000000f
[  168.969640][ T6346] RBP: 00007ffb117b7090 R08: 0000000000000000 R09: 0000000000000000
[  168.969657][ T6346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  168.969682][ T6346] R13: 00007ffb12fd6038 R14: 00007ffb12fd5fa0 R15: 00007ffee512d168
[  168.969701][ T6346]  </TASK>
[  169.203308][ T6348] netlink: 16 bytes leftover after parsing attributes in process `syz.2.737'.
[  169.217617][ T6348] xt_hashlimit: max too large, truncated to 1048576
[  169.239289][ T6316] syz.4.726 (6316) used greatest stack depth: 7552 bytes left
[  169.248570][ T3330] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  169.329396][ T6351] FAULT_INJECTION: forcing a failure.
[  169.329396][ T6351] name failslab, interval 1, probability 0, space 0, times 0
[  169.343670][ T6351] CPU: 0 UID: 0 PID: 6351 Comm: syz.1.736 Not tainted syzkaller #0 PREEMPT(full) 
[  169.343705][ T6351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  169.343759][ T6351] Call Trace:
[  169.343767][ T6351]  <TASK>
[  169.343775][ T6351]  __dump_stack+0x1d/0x30
[  169.343813][ T6351]  dump_stack_lvl+0x95/0xd0
[  169.343858][ T6351]  dump_stack+0x15/0x1b
[  169.343889][ T6351]  should_fail_ex+0x263/0x280
[  169.343927][ T6351]  should_failslab+0x8c/0xb0
[  169.343953][ T6351]  __kvmalloc_node_noprof+0x155/0x640
[  169.343991][ T6351]  ? bpf_test_run_xdp_live+0x137/0x1360
[  169.344121][ T6351]  ? mutex_unlock+0x4e/0x90
[  169.344156][ T6351]  bpf_test_run_xdp_live+0x137/0x1360
[  169.344290][ T6351]  ? __pfx_wait_rcu_exp_gp+0x10/0x10
[  169.344402][ T6351]  ? __static_call_update+0x343/0x380
[  169.344445][ T6351]  ? __SCT__tp_func_azx_runtime_resume+0x8/0x8
[  169.344655][ T6351]  ? mutex_unlock+0x4e/0x90
[  169.344727][ T6351]  ? 0xffffffffa0205240
[  169.344765][ T6351]  ? bpf_dispatcher_change_prog+0x6ec/0x7f0
[  169.344853][ T6351]  ? 0xffffffffa0205240
[  169.344885][ T6351]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[  169.345013][ T6351]  bpf_prog_test_run_xdp+0x57b/0xa10
[  169.345047][ T6351]  ? __rcu_read_unlock+0x4e/0x70
[  169.345133][ T6351]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  169.345175][ T6351]  bpf_prog_test_run+0x204/0x340
[  169.345213][ T6351]  __sys_bpf+0x52e/0x7e0
[  169.345295][ T6351]  __x64_sys_bpf+0x41/0x50
[  169.345326][ T6351]  x64_sys_call+0x10cb/0x3020
[  169.345356][ T6351]  do_syscall_64+0x12c/0x3b0
[  169.345434][ T6351]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  169.345462][ T6351] RIP: 0033:0x7faa748fc819
[  169.345482][ T6351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  169.345506][ T6351] RSP: 002b:00007faa7334f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  169.345598][ T6351] RAX: ffffffffffffffda RBX: 00007faa74b75fa0 RCX: 00007faa748fc819
[  169.345615][ T6351] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  169.345690][ T6351] RBP: 00007faa7334f090 R08: 0000000000000000 R09: 0000000000000000
[  169.345706][ T6351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  169.345722][ T6351] R13: 00007faa74b76038 R14: 00007faa74b75fa0 R15: 00007ffdcef51b28
[  169.345748][ T6351]  </TASK>
[  169.689449][ T6356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.740'.
[  169.710022][ T6356] netlink: 'syz.1.740': attribute type 30 has an invalid length.
[  169.748652][ T5349] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  169.807120][ T6358] syzkaller0: entered promiscuous mode
[  169.812831][ T6358] syzkaller0: entered allmulticast mode
[  169.841771][   T28] kauditd_printk_skb: 288 callbacks suppressed
[  169.841789][   T28] audit: type=1400 audit(1776806348.714:7533): avc:  denied  { name_bind } for  pid=6368 comm="syz.5.744" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  169.969369][ T6371] hub 8-0:1.0: USB hub found
[  169.974429][ T6371] hub 8-0:1.0: 8 ports detected
[  170.152839][ T6362] loop4: detected capacity change from 0 to 128
[  170.358193][ T6362] vfat: Unknown parameter '™œÀ<[£Ð{�ú®!Ñ–'O“¦Y:˜0G-V3f_/QϲJªÔ�ÇN'
[  170.431665][   T28] audit: type=1326 audit(1776806349.254:7534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6372 comm="syz.2.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb12d5c819 code=0x7ffc0000
[  170.455141][   T28] audit: type=1326 audit(1776806349.254:7535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6372 comm="syz.2.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb12d5c819 code=0x7ffc0000
[  170.478616][   T28] audit: type=1326 audit(1776806349.264:7536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6372 comm="syz.2.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb12d5c819 code=0x7ffc0000
[  170.519682][   T28] audit: type=1326 audit(1776806349.264:7538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6372 comm="syz.2.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb12d5c819 code=0x7ffc0000
[  170.564342][ T6378] netlink: 8 bytes leftover after parsing attributes in process `syz.3.747'.
[  170.567666][   T28] audit: type=1326 audit(1776806349.264:7537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6372 comm="syz.2.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7ffb12d5c819 code=0x7ffc0000
[  170.617967][   T28] audit: type=1326 audit(1776806349.264:7539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6372 comm="syz.2.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb12d5c819 code=0x7ffc0000
[  170.644528][   T28] audit: type=1326 audit(1776806349.264:7540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6372 comm="syz.2.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb12d5c819 code=0x7ffc0000
[  170.692395][   T28] audit: type=1326 audit(1776806349.264:7541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6372 comm="syz.2.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb12d5c819 code=0x7ffc0000
[  170.726476][   T28] audit: type=1326 audit(1776806349.274:7542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6372 comm="syz.2.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb12d5c819 code=0x7ffc0000
[  170.795400][ T6385] loop4: detected capacity change from 0 to 512
[  170.809624][ T6385] EXT4-fs: Ignoring removed nobh option
[  170.833545][ T6385] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  170.857984][ T6385] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities
[  170.986013][ T6395] loop2: detected capacity change from 0 to 512
[  171.032474][ T6398] netlink: 12 bytes leftover after parsing attributes in process `syz.1.752'.
[  171.033819][ T6395] EXT4-fs: Ignoring removed nobh option
[  171.087200][ T6398] loop1: detected capacity change from 0 to 512
[  171.099302][ T6395] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  171.120289][ T6395] EXT4-fs (loop2): 1 truncate cleaned up
[  171.128997][ T6395] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  171.129679][ T6398] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  171.180075][ T6398] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a000c028, mo2=0002]
[  171.214047][ T6398] System zones: 1-12
[  171.235395][ T6398] EXT4-fs (loop1): 1 truncate cleaned up
[  171.244590][ T6378] loop3: detected capacity change from 0 to 512
[  171.251437][ T6378] EXT4-fs: Ignoring removed i_version option
[  171.288988][ T6398] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  171.289658][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.319535][ T6378] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c018, mo2=0082]
[  171.367952][ T6378] System zones: 0-2, 18-18, 34-35
[  171.399638][ T6378] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  171.430660][ T6408] netlink: 'syz.4.755': attribute type 4 has an invalid length.
[  171.430671][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.440290][ T6408] netlink: 17 bytes leftover after parsing attributes in process `syz.4.755'.
[  171.473732][ T6378] ext4 filesystem being mounted at /164/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  171.522961][ T6378] support for cryptoloop has been removed.  Use dm-crypt instead.
[  171.596438][ T6416] loop1: detected capacity change from 0 to 4096
[  171.611338][ T6416] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  171.768812][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.916962][ T6416] xt_hashlimit: size too large, truncated to 1048576
[  171.981509][ T6433] tipc: Invalid UDP bearer configuration
[  171.981526][ T6433] tipc: Enabling of bearer <udp:sy‚1> rejected, failed to enable media
[  172.096387][ T6436] netlink: 4 bytes leftover after parsing attributes in process `syz.5.762'.
[  172.135894][ T6436] program syz.5.762 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  172.250939][ T6439] Non-string source
[  172.482163][ T6444] loop5: detected capacity change from 0 to 512
[  172.536537][ T6449] netlink: 44 bytes leftover after parsing attributes in process `syz.4.766'.
[  172.563134][ T6444] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  172.620108][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.666782][ T6444] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  173.195168][ T5349] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  173.233795][ T6466] loop1: detected capacity change from 0 to 128
[  173.282740][ T6466] vfat: Unknown parameter '™œÀ<[£Ð{�ú®!Ñ–'O“¦Y:˜0G-V3f_/QϲJªÔ�ÇN'
[  173.658948][ T6479] netlink: 8 bytes leftover after parsing attributes in process `syz.5.775'.
[  173.686152][ T6479] netlink: 'syz.5.775': attribute type 30 has an invalid length.
[  173.786099][ T6481] loop4: detected capacity change from 0 to 8192
[  173.839144][ T6481]  loop4: p1 < > p2 p4 < p5 >
[  173.863695][ T6481] loop4: partition table partially beyond EOD, truncated
[  173.886734][ T6481] loop4: p1 start 134217728 is beyond EOD, truncated
[  173.901366][ T6481] loop4: p2 size 591360 extends beyond EOD, truncated
[  173.910904][ T6481] loop4: p5 size 591360 extends beyond EOD, truncated
[  173.928269][ T6484] netlink: 8 bytes leftover after parsing attributes in process `syz.5.778'.
[  173.967351][ T6484] netlink: 'syz.5.778': attribute type 30 has an invalid length.
[  174.004434][ T6485] netlink: 8 bytes leftover after parsing attributes in process `syz.5.778'.
[  174.061083][ T6485] netlink: 'syz.5.778': attribute type 30 has an invalid length.
[  174.233039][ T6499] ==================================================================
[  174.241189][ T6499] BUG: KCSAN: data-race in mas_walk / mas_wmb_replace
[  174.248019][ T6499] 
[  174.250364][ T6499] write to 0xffff888104bec400 of 8 bytes by task 6497 on cpu 0:
[  174.258014][ T6499]  mas_wmb_replace+0x234/0x1760
[  174.262901][ T6499]  mas_wr_store_entry+0x54ff/0x5ad0
[  174.268159][ T6499]  mas_store_prealloc+0x43e/0x690
[  174.273226][ T6499]  vma_complete+0x3c7/0x850
[  174.277775][ T6499]  __split_vma+0x593/0x640
[  174.282237][ T6499]  vma_modify+0xb4b/0xca0
[  174.286613][ T6499]  vma_modify_flags+0x182/0x210
[  174.291930][ T6499]  mprotect_fixup+0x3a2/0x680
[  174.296652][ T6499]  do_mprotect_pkey+0x6ae/0x960
[  174.301531][ T6499]  __x64_sys_mprotect+0x48/0x60
[  174.306415][ T6499]  x64_sys_call+0x2768/0x3020
[  174.311126][ T6499]  do_syscall_64+0x12c/0x3b0
[  174.315740][ T6499]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  174.321663][ T6499] 
[  174.324097][ T6499] read to 0xffff888104bec400 of 8 bytes by task 6499 on cpu 1:
[  174.331746][ T6499]  mas_walk+0x176/0x370
[  174.335937][ T6499]  lock_vma_under_rcu+0xc9/0x210
[  174.340905][ T6499]  do_user_addr_fault+0x232/0x1050
[  174.346137][ T6499]  exc_page_fault+0x62/0xa0
[  174.350675][ T6499]  asm_exc_page_fault+0x26/0x30
[  174.355553][ T6499] 
[  174.357896][ T6499] value changed: 0xffff888155d03d01 -> 0xffff888104bec400
[  174.365046][ T6499] 
[  174.367391][ T6499] Reported by Kernel Concurrency Sanitizer on:
[  174.373572][ T6499] CPU: 1 UID: 0 PID: 6499 Comm: syz.2.784 Not tainted syzkaller #0 PREEMPT(full) 
[  174.382877][ T6499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  174.392950][ T6499] ==================================================================
[  174.548558][ T6505] mmap: syz.4.777 (6505) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.