last executing test programs:

4.76378979s ago: executing program 0 (id=295):
unshare(0x26020480)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0x2, &(0x7f0000006680))
r0 = open(&(0x7f0000000a40)='.\x00', 0x0, 0x0)
utimensat(r0, 0x0, &(0x7f0000000300)={{}, {0x0, 0xffffffffffffffff}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newtaction={0x14, 0x30, 0x5, 0x70bd29}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x0)
sendmmsg(r1, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}, {@nobh}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
truncate(&(0x7f0000000480)='./file1\x00', 0x2fffffd)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r4, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, &(0x7f0000000180)={0x17c04, 0xffffffffffffffff, 0x84, 0x75ea, 0x100000000, 0xfffffffffffffffd})
r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x1, 0x1, 0x0, 0xfd, 0x0, 0x2, 0xf4262, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
open$dir(&(0x7f0000000140)='./file1\x00', 0x105000, 0xc)

4.302011987s ago: executing program 4 (id=303):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x42000, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)=0x2)
ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000080)=0xffffffff)

4.187564844s ago: executing program 4 (id=307):
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c0001400000000000000000090003"], 0xd4}}, 0x8818)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES16, @ANYRES32, @ANYBLOB="0000000000000000b7020000140000fbb703000000e31f008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0)

3.840950174s ago: executing program 0 (id=311):
syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x22000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@journal_async_commit}, {@grpjquota}, {@barrier_val}, {@grpid}], [], 0x2c}, 0x84, 0x4ed, &(0x7f0000001e00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f00000000c0)={0x0, 0x10000002000002, 0x5, 0x0, 0x2, 0x0, [{0x2, 0x9, 0x7fffffff, '\x00', 0x2}, {0x5, 0x101, 0x7fff}]})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a64000000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000b2000128010000180090001006c617374000000000c0001a0080001006475700008000340000001"], 0x8c}, 0x1, 0x0, 0x0, 0x4044050}, 0x20000000)
fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000040))
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, 0x0, 0x30)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
statfs(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000340)=""/104)
sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="a1ab00000000000000003200000008001781"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='ns\x00')
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x5, 0x0, 0x0, 0x0, 0x5, 0x200, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc095, 0x2, @perf_bp={0x0, 0x8}, 0x13e42, 0x0, 0x11000, 0x9, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40000000000001}, 0x0, 0xa, r5, 0x2)
perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xffffffffffffffff, 0x8000000000000000}, 0x0, 0x10000, 0x4, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x3, 0x8000, 0x1}, 0x50)
bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000780)={r6, &(0x7f00000006c0), 0xf0107ff0780000}, 0x20)
open(&(0x7f0000000140)='./bus\x00', 0x143bc2, 0x1c0)

3.437543358s ago: executing program 3 (id=317):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {0x3, 0xfffffffd}, {0xfffffffe}]}, @fwd, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x4}, @volatile={0x0, 0x0, 0x0, 0x9, 0x6}]}}, 0x0, 0x96}, 0x28)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000300000018000000", @ANYRES32, @ANYBLOB="000000000000000095000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001a00010028bd7000fedbdf24818080000000f4ffffffffff07000f"], 0x38}, 0x1, 0x0, 0x0, 0x4004880}, 0x884)
syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2010410, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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")
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000180)={0x0, 'netdevsim0\x00', {0x4}, 0x9})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

3.377730771s ago: executing program 0 (id=319):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x2, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="3c0000001000850600000000000000000000000000dd68be7021369c929000e2bfaf736fea96f6256b2271f8566427cbe34f7fb0ac9c74f23c6cb0d0b6d09d6109b4f6837924de9fa01317bfb6bf35e5aedd1723c00e00004bfcb79dfb2c4c314e884f4ffa49e625754949a4a34b1ca28cf3a3a3d58c6f70187adacd5e4a7651e7596acce4da56b443a169a6961d396217fdc44513118d2a8862450b7f73447f21fd784e96558057fff70b775e3a84357d28e8dc02950bb71ec0e90a37a724ade8ad26943ef643971ee47fcc22edbb5f8cd439e942e29b655df107647cc646d7df6dd4a1f9c327d3a5234c319a76ca4a353d6616cbb200bb2bfac9280e892fe6bd4d654aef245c58896160e22565ee70ce61cbe95e1dd941e7dff419b547baca6f14d52d3d924026528128074d384172206c293e86ea9b98de4ca02f74781677cd728c8dde223f16", @ANYRES32=<r3=>r2, @ANYBLOB="01000000000000005c0012000c000100626f6e64"], 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94)
write$P9_RVERSION(r5, &(0x7f0000000c40)=ANY=[], 0x13)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5, 0x7], 0x0, 0x0, 0x2}}, 0x40)
r7 = socket(0x1, 0x803, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r10=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x2c, r9, 0x1, 0x2000000, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xe}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048049}, 0x8000)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x30, r9, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x30}, 0x1, 0x0, 0x0, 0x8884}, 0x4)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100), 0x4, 0x4eb, &(0x7f0000000540)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=")
r11 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r11, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r12 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
fsync(r12)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
prctl$PR_SET_DUMPABLE(0x4, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRES64=r3, @ANYRES32=r2, @ANYRESOCT=r0, @ANYRES32=r1], 0x50}}, 0x2)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="5000000010001fff00000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0007000000000000000012800b000100697036746e6c0000180c028014040300fc02000000000000000000000000000008000a00", @ANYRES32=r2, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

3.322207645s ago: executing program 4 (id=321):
unshare(0x26020480)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0x2, &(0x7f0000006680))
r0 = open(&(0x7f0000000a40)='.\x00', 0x0, 0x0)
utimensat(r0, 0x0, &(0x7f0000000300)={{}, {0x0, 0xffffffffffffffff}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newtaction={0x14, 0x30, 0x5, 0x70bd29}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x0)
sendmmsg(r1, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}, {@nobh}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
truncate(&(0x7f0000000480)='./file1\x00', 0x2fffffd)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r4, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, &(0x7f0000000180)={0x17c04, 0xffffffffffffffff, 0x84, 0x75ea, 0x100000000, 0xfffffffffffffffd})
r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x1, 0x1, 0x0, 0xfd, 0x0, 0x2, 0xf4262, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
open$dir(&(0x7f0000000140)='./file1\x00', 0x105000, 0xc)

2.826778924s ago: executing program 3 (id=327):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xe}, 0x0, 0x10000, 0x100, 0x6, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
socket(0x400000000010, 0x3, 0x0)
r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
syz_mount_image$ext4(&(0x7f0000000340)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000000)={[{@data_err_abort}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x80001}}, {@bh}, {@barrier}, {@data_err_ignore}, {@noload}]}, 0xfe, 0x459, &(0x7f0000000d80)="$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")
renameat2(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x2)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x8000)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x80, 0x0, 0x7ffc1ffb}]})
r2 = syz_open_dev$loop(&(0x7f0000000240), 0x6, 0x0)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000004c0)=@o_path={&(0x7f0000000480)='./file0\x00', r0, 0x4000, r3}, 0x18)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000280)={r4, 0x0, {0x0, 0x0, 0x0, 0x32, 0x4000000000001001, 0x0, 0x0, 0x1c, 0xc, "faf98317e5a1149989fc8dbe53ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a8a0f3500000000000000000e00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0x3, 0x6]}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'ip6tnl0\x00', <r5=>0x0, 0x4, 0x1, 0x1, 0x7, 0x11, @loopback, @mcast2, 0x8, 0x80, 0x5, 0x5}})
connect$can_bcm(r4, &(0x7f0000000240)={0x1d, r5}, 0x10)
r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7)
process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r8 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_PROMISC(r8, 0x6b, 0x2, 0x0, 0x0)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r9, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94)

2.673417783s ago: executing program 1 (id=329):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4}}]}, {0x4, 0xa}, {0xc, 0x7, {0x0, 0x600}}, {0xc}}}]}]}, 0x68}}, 0x2000a804)

2.653921334s ago: executing program 0 (id=331):
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x12}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x3}, 0x10)
socket$tipc(0x1e, 0x2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x1f)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r4 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="26000000040000000100", @ANYRES32, @ANYBLOB='\x00'/11], 0x50)
io_uring_enter(r4, 0x6214, 0x7721, 0x13, 0x0, 0x38)
r5 = socket(0x1e, 0x4, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f0000000480), 0x4)
recvmmsg(r5, &(0x7f0000000800)=[{{0x0, 0x39, &(0x7f0000000580)=[{&(0x7f0000001e40)=""/174, 0xae}], 0x1, &(0x7f0000001fc0)=""/65, 0x41}, 0x1}], 0x1, 0x40002122, 0x0)
sendmsg$tipc(r5, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000000c0)="e8", 0x1}], 0x1}, 0x4800)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$binfmt_script(r6, &(0x7f00000001c0)={'#! ', './file0/../file0'}, 0x14)
sendfile(r3, r6, &(0x7f0000000100)=0x10, 0x10001)
setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000140)={0x41, 0x2}, 0x10)
bind$tipc(r2, 0x0, 0x0)
sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x18}}, 0x10, 0x0}, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000340), 0x1, 0x7c3, &(0x7f0000001680)="$eJzs3c1rHOcZAPBnVpJXkt1KhdLWN0HBFRivKle1W+jBpYdSqMHQnmuL1Vq4WmmNdmUsIahNCeQSSEIOgeTicz6cW675gFyS/Bc5BBsnkU0ccggKszsrydKuPmxpV7F+PxjN+87M6nmf+Xx3Z9gN4MgaSf/kIk5GxMtJxFA2PYmIvnqpN+JCY7nHK8v9EVFMYnX1X18n9WUerSwXY8NrUsezym8i4qMXIk7ntsatLi7NTJbLpfmsPlabvT5WXVw6c212cro0XZo7Nz4xcfb8H8+f279cv/186cT9V/7+u3cvfP//X9996eMkLsSJbN7GPPbLSIxk66QvXYVP+Nt+B+uypNsN4Kmkh2ZP4yiPkzEUPfVSGwOdbBkAcFD+FxGrAMARk7j+A8AR0/wc4NHKcrE5dPcTic568NeI6G/k/zgbGnN6s3t2/fX7oIOPkifujCQRMbwP8Uci4s33/3OqJ6un7XAvDeiEW7cj4srwyNbzf7LlmYW9+v12M1fz9dHIpslH7foD3fRB2v/5U6v+X26t/xMt+j/5xrH7q2eNv/Pxn7v3rDG2k/b//tJ4tm1T/2/tobXhnqz2s3qfry+5eq1cSs9tP4+I0ejLp/Xx+qKte26jD3942C5+1v97Ox2+efW/b6Xx0/H6Erl7vfknXzM1Wev95FkTzzy4HYNZcVP+ydr2T9r0fy/tMsY//vziG+3mpfmn+TaHrfkfrNU7Eadabv/1bZls+3ziWH13GGvuFC2898Xrg+3ib9z+6ZDGT8f7n2lrD25HfQdIkvV10Jizlv9wsvF5zereY3x2Z+jDdvN2zr/l/j95LPl3vXwsm3ZzslabH484lvxz6/Sz669t1pvLp/mP/rb18d8I23r/T98TXtll/r33v3rn6fM/WGn+U9vv/5u2f382eX3KToW7j2d62sXf3fafqJdGsynp9t8pr9206+n2ZgAAAAAAAAAAAAAAAAAAAAAAAADYu1xEnIgkV1gr53KFQuM3vH8Zg7lypVo7fbWyMDcV9d/KHo6+XPOrLoc2fB/qePZ9+M362U31P0TELyLitfxAvV4oVspT3U4eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADLH2/z+f+rLfLdbBwAcmP5uNwAA6DjXfwA4evZ2/R84sHYAAJ3j/T8AHD27vv5fOdh2AACd0+b6v9zpdgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDcunTxYjqsfreyXEzrUzcWF2YqN85MlaozhdmFYqFYmb9emK5UpsulQrEy2/Yf3WqMypXK9YmYW7g5VitVa2PVxaXLs5WFudrla7OT06XLpb6OZQYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu1ddXJqZLJdL889D4dP8emL7HGKgqwkOHorVu7HQG4eiGYe6kI8ts3KHomG7Kmw8Swx04cwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8NPwYwAAAP//L0cXYQ==")
quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f00000001c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000380)='./file1\x00')

2.626946666s ago: executing program 1 (id=332):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x6, 0x7fc00100}]})
poll(&(0x7f0000000080)=[{r0, 0x4000}], 0x1, 0xfffffffa)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x4)
r1 = socket$igmp6(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r1, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x4e24, 0x101, @empty}, {0xa, 0x4e22, 0x0, @dev}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x899, 0x1]}}, 0x5c)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
msync(&(0x7f000030d000/0x1000)=nil, 0x1000, 0x3)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@dioread_nolock}, {@stripe={'stripe', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400000}}, {@acl}, {@nombcache}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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")
r2 = open(&(0x7f0000000000)='./file1\x00', 0x143142, 0x80)
sendfile(r2, r2, 0x0, 0x1000000201005)
poll(0x0, 0x0, 0x7)
bpf$MAP_CREATE(0x0, 0x0, 0x48)

2.413980928s ago: executing program 2 (id=333):
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000080001"], 0x24}}, 0x0)

2.333916953s ago: executing program 4 (id=334):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000004c0)={0x5, 0x4, 0x3, 0x0, @vifc_lcl_addr=@private=0xa010102, @empty}, 0x10)
setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000040)=0x6, 0x4)

2.328681673s ago: executing program 2 (id=335):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x82}, 0x2000400c)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
write$binfmt_aout(r0, 0x0, 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"})
syz_open_pts(r0, 0x900)
r1 = socket(0xa, 0x3, 0x87)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'lo\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$tipc2(0x0, r2)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x14, r6, 0x4, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4040801}, 0x4004005)
r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f00000083c0)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_START(r7, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r7, 0x54a3)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r7, 0x54a2)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x18, r5})
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000480)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x18, r5})
socket$inet6(0xa, 0x1, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x8936, &(0x7f0000000000))
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)

2.244409268s ago: executing program 3 (id=336):
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000080001"], 0x24}}, 0x0) (fail_nth: 2)

2.177473142s ago: executing program 0 (id=337):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2000004, &(0x7f0000002480)=ANY=[@ANYBLOB="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"/1286], 0x21, 0x11f4, &(0x7f0000001280)="$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")
r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x113)
r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
io_setup(0x7d, &(0x7f0000000600)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000000)="96", 0x1, 0x0, 0x0, 0x0, r3}]) (fail_nth: 2)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)

2.177222352s ago: executing program 4 (id=338):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
open(&(0x7f0000000140)='.\x00', 0x8000, 0x112)
symlink(0x0, &(0x7f0000000200)='./file0\x00')
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000500)={0x0, 0xe, 0x1, 'queue0\x00'})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x3c0000, 0x0, 0x0, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000)
setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x1000080002, 0x100000000000088)
bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @remote, 0x3}, 0x1c)
r5 = socket$inet6(0xa, 0x802, 0x88)
setsockopt$inet6_udp_int(r5, 0x11, 0x100000000a, &(0x7f0000000440)=0x800000001, 0x4)
r6 = eventfd2(0xffffffff, 0x1)
write$eventfd(r6, &(0x7f0000000080)=0xffffffff00000000, 0x8)

2.176502682s ago: executing program 2 (id=339):
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001280)={0xffffffffffffffff, 0x20, &(0x7f0000000c40)={&(0x7f0000001140)=""/82, 0x52, <r0=>0x0, &(0x7f00000011c0)=""/157, 0x9d}}, 0x10)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x9, [@enum={0x0, 0x9, 0x0, 0x6, 0x4, [{0xa, 0x5}, {0x2, 0x5}, {0xc, 0x401}, {0xa, 0x3}, {0x5}, {0xb, 0x5cf}, {0xc, 0x57f}, {0x8, 0x9}, {0x7, 0x4000000}]}]}, {0x0, [0x5f, 0x5f, 0x2e, 0x61, 0x61, 0x2e, 0x5f]}}, &(0x7f0000001340)=""/56, 0x75, 0x38, 0x1, 0x9337}, 0x28)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000200000000000000e1ffffff84000000bc00000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @xdp, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7040ffdbdf250c0000000c0005"], 0x20}, 0x1, 0x0, 0x0, 0x84}, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0x1, 0x4b4, &(0x7f0000000c80)="$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")
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x15)
ioctl$EXT4_IOC_SWAP_BOOT(r6, 0x6611)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r7, <r8=>0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)='%pK    \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r8}, 0x4)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r9, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000500)="b9ff03076003008cb89e08f086dd93c60f059fb7b40771d3cf23b10a048a394ff6c5d2f498ad2ccffe929f0d63ab053a05f39ba2647d", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r10=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, r10, 0x25, 0x0, @val=@iter={0x0}}, 0x20)
syz_emit_ethernet(0x1046, &(0x7f00000026c0)=ANY=[], 0x0)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r9, r8}, 0xc)
r11 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r11, 0x0, &(0x7f0000000540)=<r12=>0x0)
r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r14 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r14, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x14, 0x0, 0x8, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40500c0)
r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r16 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r15)
sendmsg$NFC_CMD_DEV_UP(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r16, @ANYBLOB="010029bd7000fedbdf250200000008000100", @ANYRES32=r12, @ANYBLOB="3da6907fe5d58106d7c367754536c99351c2c2c8845e43bb1b4b5f83db7762413939cac1fc71b1cb6133f57619c499439a34a493371eea5459dd517940b2b2e04c66d9571611"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004)
sendmsg$nfc_llcp(r6, &(0x7f0000000580)={&(0x7f00000002c0)={0x27, r12, 0x1, 0x3, 0xf, 0x1, "26963cfc7ba89f49182caa48675b4ade01d0616129609ec4cacbb688e8265795b902b12d1a27794d5f410c8e7a37004a1ae803c4f8fa157844dc3edf7ab670", 0x19}, 0x60, &(0x7f0000000a40)=[{&(0x7f00000001c0)="85ef5a4d0dedeea0e54b28b424e1c5a0f8e555772169013f3651652bb8720ab2e1cf191aa49bea81d5", 0x29}, {&(0x7f0000000600)="4dd65f7a8ce141beb1b6f5b54d82924b7dc7216b7c87a018ef59f211679c41108843ddfb8b4d29273d7cdba5c58c3b5d56bf2f9ce65ac491d9c63266d71f5860b748fde36e49c1f80f4e81eae58c962c3f0369342cda4750f478d8a02e3b2634338681fa5046dc5826d3eb2117f3ead44740fa863a981d73fcadc3a0cc9ba9a58cb565ca7be791083dbfe900245a829f2555d4804c34b1c4d07df3f8bd23b39c96fc799c49a5c94efbf0aa91ef5eec32cbe9bf5a3d085cee65c0d2e023d251d5241617708284e650b65d29bd9bc9147274606eaace22f37f98d17602d821a0f03712bab9", 0xe4}, {&(0x7f0000000540)="3bb211683854a1f1fefa9fa512e6237462b00a8e796c4de05afd97dd1fc619c4269f72c9edd9658faaa03b", 0x2b}, {&(0x7f0000000700)="01267a5e39bdf3dc50c628557a334dc9b185c95976334dea4203f34a2b9435a192af1f2472a6e872bab25bbec1143598d941d4072f61999c04d46c139f47556233b5fad0f8863b8214cbf4007b0c78ff5ee1d7a78b797e0f33f5d978fd5517030fa4d6c677109bd0e3078757db130356b900bb45e0bec46f7bd0d4afe12e95042216b9b8751c787e4ba00152d090aacd5838866c50d39295aeb78e67aec1480b87e6f79168bb1b9b6ac28ea84db91e6b21779a806fbadf1967dce1e0c7ca11b781245eb3ffa66d62c8c6cdf7eeb2b10d56fbf8c5be68b3ff53c9", 0xda}, {&(0x7f0000000800)="3f6401426d7619b4e2c9997e028fc2c56b5c9bcf4acbf7690d40a7867459a85cd9eaae4150c471b95accb2d260a523e4177b7355b796812470311f1c434319b2a4b93c24fe93b64716199913f627d4", 0x4f}, {&(0x7f0000000880)="1af60ad08926b1dd39d7e56bcdc974f605b1f4e56ff1b1373a7be82243731ad436a3f167b1c6add4bd146048bb21e788ffa077d0319a9ce01a50437e1d56f8e1652d36e252a11dd5270c405d468778fa5d1a4ada82784796e4c7db871dadc49cdfc61a2507395f01051477e005bc04bd8515a82cfe45f101cdbbe3ea15e9a8128ee8e00dca7c89d20f853f0a", 0x8c}, {&(0x7f0000000940)="f4b689947448430f867bc20c6997469146f94989611d9cffcbc8e567eb23cb6ffee6bf1bcc76b9b626d7b2f05f3cb3eb8809ca916866c446d22885b0cd79821fa864f7bdaf8cca493112f85c996fbfcc5b6e949106229b76f696c644d405918ee69d67d54f68f8274952c00d7b56d46b7fcb6760b1a51f806bba8a11f1c77a22b3b08f58bbdb17a01d2b1a32e202abe83b0fc9d8935839df8b9dc926885d7f06f5d55d1e4fa16eb98924843cb5c3ef6eb1398469d04664e886231d448eaab18b9a74144c5b55f98a8f8fda68ff1f5bbc10d39fee", 0xd4}], 0x7, &(0x7f0000000ac0)={0xe0, 0x0, 0xff, "95c0eb1e8d75e116d008775b1134041c66ec50b778c30035c2955be76b01ac2133bea685da1859b5170d96e6e3a62aadb645da5407087f014b97bc4ac5db9568100241d73a147e1668e7babbb3763d561f45881c494b4bd48e41570efdfcf710f0c122d122dfe23cea14591a32a08bcadb923e1e46a96298efda3c603ad184dd93f24506c908d9be5c943cc3b8439c3d99609b0ed1ac269d1c0048ca95386cc238dd796587e919e9bc1ad4b632d6bd83fa5b5025e85847a4a073da3edc96977c608e4a4db305915dfd6e4a6d75fb7a"}, 0xe0, 0x80}, 0x20000050)

1.936333606s ago: executing program 3 (id=340):
unshare(0x22020600)
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
listen(r0, 0x6)
sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000008400000005"], 0x20, 0x2400e044}, 0x4080)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000)={<r2=>0x0, 0x7}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000100)=@assoc_id=r2, 0x4)
r3 = open(&(0x7f0000000080)='.\x00', 0x200c80, 0xac)
setns(r3, 0x10000000)

648.104402ms ago: executing program 3 (id=341):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x100010, 0xffffffffffffffff, 0xe4c5c000)
madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3)
r0 = gettid()
socketpair$tipc(0x1e, 0xf, 0x0, &(0x7f0000000780))
sigaltstack(&(0x7f00000000c0)={&(0x7f00000012c0)=""/4081, 0x0, 0xff1}, 0x0)
rt_sigqueueinfo(r0, 0x33, &(0x7f0000000000)={0x17})

537.320399ms ago: executing program 3 (id=342):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xf}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}, @TCA_FQ_PIE_ECN={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f00000007c0), 0xe}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2000004, &(0x7f0000002480)=ANY=[@ANYBLOB="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"/1286], 0x1, 0x11f4, &(0x7f0000001280)="$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")
r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x113)
r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000100)={[{@grpid}, {@auto_da_alloc}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x6}}]}, 0x7, 0x4d4, &(0x7f0000000180)="$eJzs3M9vFGUfAPDvbHdpgZfXioiCKAU0Nia2UFA4eMHExIMmRjzIsWkrQRYwtAchREpiuJN4NDEejTdNvOrRePIPwIMHE0NCDBfA05jZnWm3291ttz8p+/kk232e2WfmeZ6ZeWaffZ7OBNCzhrI/ScT/IuJORDxVjy5MMFR/e3j/+sSj+9cnYjZNz/yT1NI9yOK5Yr2deWS4FFH6MmnaYN301WsXxqvVqSt5fHTm4mej01evvX7+4vi5qXNTl8ZOnTpx/NjJN8fe6L5SLfLL6vVg/xeXD+x79+zt9yfKxfKB/L2xHm2VuyvGUIfPXuluU4+9XQ3hZPF+urGhhWHZBvLTupK1/+vVw2c3u0DAhknTNO1v//Fs2uzmoiXAlpXEZpcA2BzFF332+7d4bVDX47Fw73T9B1BW74f5q/5JOUp5mkrT79u1NBQRH8/++032ik7jEH+uUwEAgJ7zy+miJ9jc/yvF3oZ0/8/nUAYj4umI2B0Rz0TEnoh4NqKW9rmIeL45gyQi7ZD/nqb4fP4/5rMIpburrmQHWf/vrXxua2H/r+j9xWBfHtsVUXSYp47m+2Q4Kv2fnK9OHWuz/W1L5N/Y/8teWf5FXzAvx91y0wDd5PjM+Mpqu9i9mxH7y831T8rZgSumcZKI2BcR+7vY7mBD+Pxr3x2Yi1Ty96/rb0vXvyZtMaXX9XxcK+m3Ea/Wj/9sNB7/ZD7HpPP85OhAVKeOjmZnwdGWefz2+60P2uW/ZP1/+qt5lXdO/nxm1fUuZMd/R8P5H8X87fwk6mASkczN105HpH3d5XHrj/YrrPT835Z8VAsX7evz8ZmZK8citiXvLV4+Nr9uES/SZ/UfPtK6/e/O18n2xAsRkZ3EL0bESxFxMC/7oYg4HBFHOtT/17df/nTl9V9fWf0nW17/Fhz/+fn6ZQaKlbMlfRcO3XnU5uKxvON/ohYazpe0vv4lCy4Ryy3p6vYeAAAAbA2lqP3vf2lkLlwqjYzUx4D2xI5S9fL0zMGIuDRZv0dgMCqlYqSrPh5cSYrxz8GG+FhT/Hg+bvxV3/ZafGTicnVysysPPW5nrc0ni9p/5u8ux3mBLWgN5tGALWqp9r/39gYVBNhwvv+hdzW0/9k2SWb9pww8mXz/Q+9q1f5vxPcd711wzYCtL9WWoadp/9C7yvHhXLh223PLu22BJ5Hvf+hJ3d7Xv5xA8biGaxfS/tZpBqLFEwMG1rgYeWB7i7w2JZD1rNZwg5WIWF7i7SvJougCtn/CQ6m7DfbH4o/6otNaSRfPcSgC2V5ZMvG5vWt+8hfPRFnr0+aH+XZaaTgW5aWOzuoDG3oZAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWDf/BQAA//8mic8a")
open(0x0, 0x109042, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000000)=0x20)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x4)
statx(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x4000, 0x1f842f947b598ea3, 0x0)
r6 = inotify_init()
inotify_add_watch(r6, &(0x7f0000000000)='.\x00', 0x400017e)
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
r7 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r8 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
ftruncate(r9, 0x2000009)
sendfile(r8, r9, 0x0, 0x20000000000006)
vmsplice(r7, &(0x7f0000000200)=[{&(0x7f00000002c0)='u', 0x1}], 0x1, 0x0)
set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x3)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a310000000070000000060a010400000000000000000100000008000b400000000048000480440001800b000100657874686472000034000280080001400000000c080003400000000008000440000000220500020007000000080006400000000308000540000000000900010073797a300000000020000000030a010300000000000000000a0000020900030073797a300000000044010000080a01080000000000000000010000073a00074032e97608c07b8f34d704cc507d07a8d4c429672a9b6841e516ce194f03354b3c46a930469ce36ee8391a02352a70d543c633dc17a9d300007900074012119f33dbd27dbba871f33b8206fc0a59dac6df96baf86f3deffa20b8a2b13fa2fbc917a33ad4b9dc903553ff1e7533cd9d1e3f6a3248b10a63552977fab38d9ad7409cbd223b094a0bb6f0884c8839890d122f9b9963668c97749b2304852a8d461ccc39dc307f41ac41688a4f2d64a916dc532d00000008000a40000000000900010073797a30000000000900020073797a31000000002c00058008000140000086dd080001400000002c080001400000001608000140000000736afd014000008100080009"], 0x248}}, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
io_setup(0x7d, &(0x7f0000000600)=<r11=>0x0)
io_submit(r11, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000000)="96", 0x1, 0x0, 0x0, 0x0, r3}])
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'})

536.944889ms ago: executing program 1 (id=343):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x24}, 0x0)

481.360922ms ago: executing program 2 (id=344):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x0, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x9, 0x4}, {0x7, 0xfffc}, {0xb, 0xf}}}, 0x24}}, 0x80800)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000001000010426bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010065727370616e0000180002800400120008009400090000000500160000000000140003006e"], 0x5c}, 0x1, 0x0, 0x0, 0x8c1}, 0x0)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r3=>0x0})
r4 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r4, &(0x7f0000000000)={0x1d, r3}, 0x10)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0xb}, {0x0, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x8041}, 0x40044)
r5 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r6, {0xfff3, 0x3}, {0xffff, 0xffff}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xb4, r1, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4008840}, 0x40800)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x0, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x9, 0x4}, {0x7, 0xfffc}, {0xb, 0xf}}}, 0x24}}, 0x80800) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000001000010426bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010065727370616e0000180002800400120008009400090000000500160000000000140003006e"], 0x5c}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async)
socket$can_raw(0x1d, 0x3, 0x1) (async)
bind$can_raw(r4, &(0x7f0000000000)={0x1d, r3}, 0x10) (async)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0xb}, {0x0, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x8041}, 0x40044) (async)
socket(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async)
sendmsg$nl_route_sched(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r6, {0xfff3, 0x3}, {0xffff, 0xffff}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) (async)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xb4, r1, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4008840}, 0x40800) (async)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)

478.653982ms ago: executing program 0 (id=345):
unshare(0x26020480)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0x2, &(0x7f0000006680))
r0 = open(&(0x7f0000000a40)='.\x00', 0x0, 0x0)
utimensat(r0, 0x0, &(0x7f0000000300)={{}, {0x0, 0xffffffffffffffff}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newtaction={0x14, 0x30, 0x5, 0x70bd29}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x0)
sendmmsg(r1, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}, {@nobh}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
truncate(&(0x7f0000000480)='./file1\x00', 0x2fffffd)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r4, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, &(0x7f0000000180)={0x17c04, 0xffffffffffffffff, 0x84, 0x75ea, 0x100000000, 0xfffffffffffffffd})
r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x1, 0x1, 0x0, 0xfd, 0x0, 0x2, 0xf4262, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
open$dir(&(0x7f0000000140)='./file1\x00', 0x105000, 0xc)

392.964787ms ago: executing program 1 (id=346):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000100)={[{@bsdgroups}, {@journal_dev={'journal_dev', 0x3d, 0x7}}], [{@appraise_type}]}, 0x80, 0x54f, &(0x7f0000000a00)="$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") (async)
mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) (async)
r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) (async)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
setuid(0xee01) (async)
ioctl$VT_OPENQRY(r1, 0x4b4b, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) (async)
socket$nl_rdma(0x10, 0x3, 0x14) (async)
epoll_create(0x8000) (async)
futex(&(0x7f000000cffc), 0xd, 0x400002, 0x0, 0x0, 0x0)

301.949313ms ago: executing program 4 (id=347):
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014})
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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")
lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0xc33, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3e, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x3}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={0x1}, 0x4)
syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')
truncate(&(0x7f0000000080)='./file1\x00', 0xf62)

301.475953ms ago: executing program 1 (id=348):
r0 = socket$kcm(0x29, 0x5, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$bt_hci(r1, 0x84, 0x24, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007)
r2 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}, {@nobh}, {@commit={'commit', 0x3d, 0x2}}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f0000001b40)="$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")
r3 = socket$inet6(0xa, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0xffffff9e, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0)
getsockname$packet(r4, &(0x7f0000000940)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="500000001000370400000000ffdbdf2500000000", @ANYRES32=r5, @ANYBLOB="01f5050000000000300012800b00010067656e657665000020000280050004000100000014000700fc02000000000000000000000001edd02c0c250b82dd610c07921b0820cc90f0908bbbfe41636a65e1c72bc877575ac5f98b9c1c9b0b901c932d16e85adfceb1edc4612fa9c5aad08b"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x40004)
sendmmsg$inet(r3, &(0x7f0000000240)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @loopback}}}], 0x20}}], 0x1, 0x80)
fchmodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x40)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001180)=ANY=[@ANYBLOB="1400000013397c5a9883a24234c2c62d0000f99802c45865e2afd5e80d696fdd62db065b16840a944282068d1877bec94278"], 0x14}, 0x1, 0x0, 0x0, 0x20005}, 0x20008054)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x9, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000001040)=r8, 0x4)
sendmsg$NFT_MSG_GETSET(r6, &(0x7f0000000a40)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000880)=ANY=[@ANYBLOB="d80000000a0a0102000000000000000007000000c3000d40ee8b674885f37aeaed8d46fcf20a87fab076a8f831e3ee7df49d1b530e8b2afbc6a76d57948133fb065b5b6114ee140261b3d73e60e88e354434dc3f7ac509d4319b3829c11706516b6c7510419d1d2455aba1d42b3262a42b7ad0f94573ef56895491e62e80ee3220f2169fb079cad12d669f84461cccc2c4cf53782eeee20be7fc2e970b96cc694d6ad8d4271c6e3d95bb8b5767b67923c37eafd4bde6961fbc22d9fbc159f9594c8f6bc25fdd0f68ceccb81159fa920237fd242000"], 0xd8}, 0x1, 0x0, 0x0, 0x20008044}, 0x40)
syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @link_local, @val, {@ipv4={0x8100, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0)
r9 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_qrtr_TIOCOUTQ(r9, 0x5411, &(0x7f0000000080))
r10 = creat(&(0x7f0000001240)='./file1\x00', 0x34)
close(r10)
socket(0x1d, 0x2, 0x6)
r11 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200), 0x30c002, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r11])
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r12=>r2, {0x1}}, './file1\x00'})
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f00000012c0)={'team0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r12, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)=@gettclass={0x24, 0x2a, 0x4, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r13, {0x0, 0x1b}, {0xfffd, 0x5}, {0xd, 0xc}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000)
shmget(0x3, 0x2000, 0x1, &(0x7f0000ffd000/0x2000)=nil)

138.584702ms ago: executing program 2 (id=349):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c00000010001fff28bd70000000800000000000", @ANYRES32=0x0, @ANYBLOB="efb00000800000006c0012800b00010062726964676500005c00028008000500010000000c002e"], 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x14)

83.570786ms ago: executing program 1 (id=350):
unshare(0x60400)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)={0x24, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x0, 0x0, 0x0}, @typed={0xd, 0x2e, 0x0, 0x0, @str='\xd0@:-}-+)\x00'}]}, 0x24}], 0x1}, 0x0)
r1 = memfd_create(&(0x7f0000000c00)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfc\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\xec\xb3\xd8\x96\xbcq\xe6\xb3\xbc\xb9\xf3N\xb4f\x168\xaf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x8a[^\xaa\x0e\xe7\xa4\x8dE\xeaj\xa0\x83\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x997\xb5W\x8c<\x89#\xaf\xce\xe8\xb7-\xe3~4\xe6\xdc\x96\xa7\xa3\xbd;\xd6\xef.\x19\xdcV\x83Zir\tK\xc2&@o\xc1\xe0\xf2/\vS7U\xe5\x95\xe7&\xf5\xdd\x85K6\xc0\xcb\xa3\xcf\xff\xf5\xc3\xf3]*n\x88\x82\xc9a(\xa7\xe8\x88\x12\x9e}\xc5\xe9B\xeb\xa5\np\x10\xbc\xf4]\xbc\xcf\xf8\xc5\x97A\xd6A\xf1s\xf0\xed\x8azX?\x97\x92\x90\xbb\xa7\x94\xd1Z\n\xbb[\x04\x16\xeaJ\x9ciJg\x05\xe2q)\xd0\xc6]\x88\x83\xf4\x95\xb8\x80e/XB\xb1\x10\xe0W\xd1\x99\x06S\xf4\x05\xa9\xad\xe2;X\xb5s\x02\tG\xa5\xb02\x8e\xd0\xf1\x96en\xb7Ga\xc5\xd2\xefP\x993\xcak\xf0\x1c\xa9\x8dj7>\xcfs\xa1\x1c\xb5j*m\x99X\x10\xae\x84\xe9\x9b?\x93dI\xf1yEQ\x187y\xe3\xbf\xb9f\xd3S022\xa2o\xd59\xb7\xa1F\x01\x1a\x18\x91\xd3\xb3\r\xd5n.T_\xcc3:\xdb\x00\xbb\xd0YH\xc9\xd3 \xd4\xdav\v\x1e|6k\xbf\xe2r\xa5\x00\xc0\xbf\x01\xc4S\xe5\xb2\xc9\xc6\x93/l\xc13=7\x8e\x9e', 0x4)
fcntl$addseals(r1, 0x409, 0xc)

0s ago: executing program 2 (id=351):
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21}, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xe, 0x42708, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x7, 0x40}, 0x104b18, 0x6, 0x0, 0x1, 0x8, 0x4, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x1, 0x0)
fchdir(r1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f00000001c0)={[{@inlinecrypt}]}, 0x1, 0x512, &(0x7f0000000c40)="$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")

kernel console output (not intermixed with test programs):

[   23.333905][   T29] audit: type=1400 audit(1769389572.545:62): avc:  denied  { search } for  pid=3194 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   23.356002][   T29] audit: type=1400 audit(1769389572.545:63): avc:  denied  { search } for  pid=3194 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=478 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   23.378673][   T29] audit: type=1400 audit(1769389572.545:64): avc:  denied  { search } for  pid=3194 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   23.402039][   T29] audit: type=1400 audit(1769389572.545:65): avc:  denied  { search } for  pid=3194 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   23.425052][   T29] audit: type=1400 audit(1769389572.545:66): avc:  denied  { read open } for  pid=3195 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
Warning: Permanently added '10.128.0.189' (ED25519) to the list of known hosts.
[   28.504071][   T29] kauditd_printk_skb: 3 callbacks suppressed
[   28.504088][   T29] audit: type=1400 audit(1769389577.715:70): avc:  denied  { mounton } for  pid=3298 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   28.533155][   T29] audit: type=1400 audit(1769389577.745:71): avc:  denied  { mount } for  pid=3298 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   28.535504][ T3298] cgroup: Unknown subsys name 'net'
[   28.561065][   T29] audit: type=1400 audit(1769389577.775:72): avc:  denied  { unmount } for  pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   28.738182][ T3298] cgroup: Unknown subsys name 'cpuset'
[   28.744474][ T3298] cgroup: Unknown subsys name 'rlimit'
[   28.916313][   T29] audit: type=1400 audit(1769389578.125:73): avc:  denied  { setattr } for  pid=3298 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   28.939683][   T29] audit: type=1400 audit(1769389578.135:74): avc:  denied  { create } for  pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   28.960189][   T29] audit: type=1400 audit(1769389578.135:75): avc:  denied  { write } for  pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   28.980581][   T29] audit: type=1400 audit(1769389578.135:76): avc:  denied  { read } for  pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   29.001355][   T29] audit: type=1400 audit(1769389578.145:77): avc:  denied  { read } for  pid=3041 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[   29.022403][   T29] audit: type=1400 audit(1769389578.165:78): avc:  denied  { mounton } for  pid=3298 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   29.036821][ T3304] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   29.047280][   T29] audit: type=1400 audit(1769389578.165:79): avc:  denied  { mount } for  pid=3298 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   29.138599][ T3298] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   31.098364][ T3312] chnl_net:caif_netlink_parms(): no params data found
[   31.114423][ T3321] chnl_net:caif_netlink_parms(): no params data found
[   31.126961][ T3314] chnl_net:caif_netlink_parms(): no params data found
[   31.209532][ T3315] chnl_net:caif_netlink_parms(): no params data found
[   31.255580][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.262706][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state
[   31.269982][ T3312] bridge_slave_0: entered allmulticast mode
[   31.276536][ T3312] bridge_slave_0: entered promiscuous mode
[   31.283390][ T3313] chnl_net:caif_netlink_parms(): no params data found
[   31.292485][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.299686][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state
[   31.306823][ T3312] bridge_slave_1: entered allmulticast mode
[   31.313422][ T3312] bridge_slave_1: entered promiscuous mode
[   31.365765][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.372914][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state
[   31.380200][ T3314] bridge_slave_0: entered allmulticast mode
[   31.386694][ T3314] bridge_slave_0: entered promiscuous mode
[   31.393280][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.400412][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state
[   31.407576][ T3321] bridge_slave_0: entered allmulticast mode
[   31.413997][ T3321] bridge_slave_0: entered promiscuous mode
[   31.421815][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   31.431098][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.438191][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state
[   31.445426][ T3321] bridge_slave_1: entered allmulticast mode
[   31.451951][ T3321] bridge_slave_1: entered promiscuous mode
[   31.472486][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.479572][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state
[   31.486911][ T3314] bridge_slave_1: entered allmulticast mode
[   31.493606][ T3314] bridge_slave_1: entered promiscuous mode
[   31.501046][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   31.525411][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.532547][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state
[   31.539836][ T3315] bridge_slave_0: entered allmulticast mode
[   31.546222][ T3315] bridge_slave_0: entered promiscuous mode
[   31.563031][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   31.573567][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   31.585675][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.592808][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state
[   31.599950][ T3315] bridge_slave_1: entered allmulticast mode
[   31.606582][ T3315] bridge_slave_1: entered promiscuous mode
[   31.618358][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   31.628236][ T3312] team0: Port device team_slave_0 added
[   31.634959][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   31.659150][ T3312] team0: Port device team_slave_1 added
[   31.682900][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.690067][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state
[   31.697160][ T3313] bridge_slave_0: entered allmulticast mode
[   31.703496][ T3313] bridge_slave_0: entered promiscuous mode
[   31.714701][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.721882][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state
[   31.729082][ T3313] bridge_slave_1: entered allmulticast mode
[   31.735632][ T3313] bridge_slave_1: entered promiscuous mode
[   31.752510][ T3314] team0: Port device team_slave_0 added
[   31.759523][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   31.774394][ T3321] team0: Port device team_slave_0 added
[   31.785411][ T3314] team0: Port device team_slave_1 added
[   31.791786][ T3321] team0: Port device team_slave_1 added
[   31.798816][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   31.808342][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0
[   31.815346][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   31.841414][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   31.853495][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   31.864000][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   31.887998][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1
[   31.894961][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   31.920920][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   31.945748][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0
[   31.952766][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   31.978786][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   32.002525][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0
[   32.009515][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   32.035474][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   32.046529][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1
[   32.053559][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   32.079586][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   32.091201][ T3315] team0: Port device team_slave_0 added
[   32.098002][ T3315] team0: Port device team_slave_1 added
[   32.109459][ T3313] team0: Port device team_slave_0 added
[   32.120032][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1
[   32.127025][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   32.153083][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   32.174368][ T3313] team0: Port device team_slave_1 added
[   32.180310][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0
[   32.187274][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   32.213562][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   32.225166][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1
[   32.232295][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   32.258550][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   32.294544][ T3312] hsr_slave_0: entered promiscuous mode
[   32.300644][ T3312] hsr_slave_1: entered promiscuous mode
[   32.338497][ T3321] hsr_slave_0: entered promiscuous mode
[   32.344522][ T3321] hsr_slave_1: entered promiscuous mode
[   32.350546][ T3321] debugfs: 'hsr0' already exists in 'hsr'
[   32.356279][ T3321] Cannot create hsr debugfs directory
[   32.364698][ T3315] hsr_slave_0: entered promiscuous mode
[   32.370887][ T3315] hsr_slave_1: entered promiscuous mode
[   32.376857][ T3315] debugfs: 'hsr0' already exists in 'hsr'
[   32.382623][ T3315] Cannot create hsr debugfs directory
[   32.392919][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0
[   32.399920][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   32.425963][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   32.464081][ T3314] hsr_slave_0: entered promiscuous mode
[   32.470356][ T3314] hsr_slave_1: entered promiscuous mode
[   32.476436][ T3314] debugfs: 'hsr0' already exists in 'hsr'
[   32.482250][ T3314] Cannot create hsr debugfs directory
[   32.493084][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1
[   32.500160][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   32.526130][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   32.594507][ T3313] hsr_slave_0: entered promiscuous mode
[   32.600754][ T3313] hsr_slave_1: entered promiscuous mode
[   32.606692][ T3313] debugfs: 'hsr0' already exists in 'hsr'
[   32.612572][ T3313] Cannot create hsr debugfs directory
[   32.775654][ T3314] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   32.785167][ T3314] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   32.796721][ T3314] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   32.805884][ T3314] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   32.834242][ T3312] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   32.846885][ T3312] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   32.855944][ T3312] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   32.865561][ T3312] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   32.891233][ T3315] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   32.902343][ T3315] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   32.919765][ T3315] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   32.930148][ T3315] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   32.966566][ T3313] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   32.975984][ T3313] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   32.985163][ T3313] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   32.993968][ T3313] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   33.021197][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0
[   33.045984][ T3321] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   33.059746][ T3321] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   33.071367][ T3314] 8021q: adding VLAN 0 to HW filter on device team0
[   33.083892][ T3321] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   33.093422][ T3321] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   33.107425][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0
[   33.118483][ T3312] 8021q: adding VLAN 0 to HW filter on device team0
[   33.134650][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   33.141847][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   33.151981][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   33.159054][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   33.167810][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   33.174900][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   33.189840][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   33.196905][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   33.233955][ T3314] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   33.244382][ T3314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   33.265438][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0
[   33.301703][ T3315] 8021q: adding VLAN 0 to HW filter on device team0
[   33.333975][ T3315] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   33.344572][ T3315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   33.363385][ T1848] bridge0: port 1(bridge_slave_0) entered blocking state
[   33.370601][ T1848] bridge0: port 1(bridge_slave_0) entered forwarding state
[   33.379722][ T1848] bridge0: port 2(bridge_slave_1) entered blocking state
[   33.386806][ T1848] bridge0: port 2(bridge_slave_1) entered forwarding state
[   33.418697][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0
[   33.444133][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0
[   33.467897][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0
[   33.478735][ T3313] 8021q: adding VLAN 0 to HW filter on device team0
[   33.492342][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   33.499476][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   33.516963][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0
[   33.534524][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0
[   33.549462][   T31] bridge0: port 2(bridge_slave_1) entered blocking state
[   33.556660][   T31] bridge0: port 2(bridge_slave_1) entered forwarding state
[   33.583752][ T3313] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   33.594247][ T3313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   33.630257][ T3321] 8021q: adding VLAN 0 to HW filter on device team0
[   33.680674][ T3314] veth0_vlan: entered promiscuous mode
[   33.688864][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   33.696111][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   33.705726][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   33.712995][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   33.746252][ T3321] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   33.756743][ T3321] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   33.806706][ T3314] veth1_vlan: entered promiscuous mode
[   33.822383][ T3312] veth0_vlan: entered promiscuous mode
[   33.840906][ T3314] veth0_macvtap: entered promiscuous mode
[   33.864782][ T3314] veth1_macvtap: entered promiscuous mode
[   33.878889][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0
[   33.896663][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0
[   33.906673][ T3312] veth1_vlan: entered promiscuous mode
[   33.926023][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0
[   33.942832][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1
[   33.955860][ T3312] veth0_macvtap: entered promiscuous mode
[   33.978628][ T3315] veth0_vlan: entered promiscuous mode
[   33.985905][   T52] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   33.996331][ T3312] veth1_macvtap: entered promiscuous mode
[   34.009296][   T29] kauditd_printk_skb: 10 callbacks suppressed
[   34.009314][   T29] audit: type=1400 audit(1769389583.225:90): avc:  denied  { mounton } for  pid=3314 comm="syz-executor" path="/root/syzkaller.QpvgtR/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[   34.054375][   T52] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   34.060415][   T29] audit: type=1400 audit(1769389583.265:91): avc:  denied  { mount } for  pid=3314 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   34.085374][   T29] audit: type=1400 audit(1769389583.265:92): avc:  denied  { mounton } for  pid=3314 comm="syz-executor" path="/root/syzkaller.QpvgtR/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   34.090593][   T52] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   34.110912][   T29] audit: type=1400 audit(1769389583.265:93): avc:  denied  { mount } for  pid=3314 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   34.141350][   T29] audit: type=1400 audit(1769389583.265:94): avc:  denied  { mounton } for  pid=3314 comm="syz-executor" path="/root/syzkaller.QpvgtR/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   34.150596][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0
[   34.168131][   T29] audit: type=1400 audit(1769389583.265:95): avc:  denied  { mounton } for  pid=3314 comm="syz-executor" path="/root/syzkaller.QpvgtR/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[   34.185563][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1
[   34.202564][   T29] audit: type=1400 audit(1769389583.265:96): avc:  denied  { unmount } for  pid=3314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   34.229418][   T29] audit: type=1400 audit(1769389583.275:97): avc:  denied  { mounton } for  pid=3314 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[   34.252174][   T29] audit: type=1400 audit(1769389583.275:98): avc:  denied  { mount } for  pid=3314 comm="syz-executor" name="/" dev="gadgetfs" ino=4707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[   34.276817][ T3315] veth1_vlan: entered promiscuous mode
[   34.288697][   T52] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   34.310666][ T3314] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   34.335577][ T3315] veth0_macvtap: entered promiscuous mode
[   34.351275][   T52] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   34.375207][ T3315] veth1_macvtap: entered promiscuous mode
[   34.391696][   T52] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   34.400272][   T29] audit: type=1400 audit(1769389583.615:99): avc:  denied  { read write } for  pid=3312 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   34.430533][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0
[   34.460725][ T3483] Zero length message leads to an empty skb
[   34.466948][   T52] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   34.479578][ T3313] veth0_vlan: entered promiscuous mode
[   34.497159][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1
[   34.515067][   T52] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   34.526213][ T3313] veth1_vlan: entered promiscuous mode
[   34.532097][ T3487] capability: warning: `syz.3.7' uses 32-bit capabilities (legacy support in use)
[   34.545762][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   34.559656][ T3487] loop3: detected capacity change from 0 to 128
[   34.579081][ T3489] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6'.
[   34.588336][   T31] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   34.602038][ T3321] veth0_vlan: entered promiscuous mode
[   34.608982][   T31] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   34.620942][ T3489] bond0: entered promiscuous mode
[   34.626054][ T3489] bond_slave_0: entered promiscuous mode
[   34.631920][ T3489] bond_slave_1: entered promiscuous mode
[   34.639672][ T3489] ipvlan1: entered promiscuous mode
[   34.646441][ T3489] ipvlan1: left promiscuous mode
[   34.654263][ T3489] bond0: left promiscuous mode
[   34.659143][ T3489] bond_slave_0: left promiscuous mode
[   34.664826][ T3489] bond_slave_1: left promiscuous mode
[   34.674837][ T3491] loop0: detected capacity change from 0 to 1024
[   34.682502][ T3491] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   34.693308][ T3491] JBD2: no valid journal superblock found
[   34.695254][   T31] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   34.699197][ T3491] EXT4-fs (loop0): Could not load journal inode
[   34.725130][ T3313] veth0_macvtap: entered promiscuous mode
[   34.739688][ T3321] veth1_vlan: entered promiscuous mode
[   34.759156][ T3313] veth1_macvtap: entered promiscuous mode
[   34.783502][ T3493] /dev/sg0: Can't lookup blockdev
[   34.795525][ T3493] bond0: (slave bond_slave_1): Releasing backup interface
[   34.819094][ T3495] loop3: detected capacity change from 0 to 164
[   34.827108][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0
[   34.850791][ T3321] veth0_macvtap: entered promiscuous mode
[   34.869494][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1
[   34.886418][ T3321] veth1_macvtap: entered promiscuous mode
[   34.902902][   T37] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   34.937790][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0
[   34.951133][   T37] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   34.968423][ T3504] netlink: 14 bytes leftover after parsing attributes in process `syz.4.11'.
[   34.990376][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1
[   35.024070][   T37] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   35.036006][ T3502] netlink: 'syz.0.10': attribute type 46 has an invalid length.
[   35.051718][   T37] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   35.094947][   T37] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   35.130822][   T37] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   35.152940][   T37] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   35.171285][   T37] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   35.227059][ T3518] FAULT_INJECTION: forcing a failure.
[   35.227059][ T3518] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   35.240320][ T3518] CPU: 1 UID: 0 PID: 3518 Comm: syz.4.13 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   35.240356][ T3518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   35.240376][ T3518] Call Trace:
[   35.240385][ T3518]  <TASK>
[   35.240392][ T3518]  __dump_stack+0x1d/0x30
[   35.240421][ T3518]  dump_stack_lvl+0x95/0xd0
[   35.240522][ T3518]  dump_stack+0x15/0x1b
[   35.240545][ T3518]  should_fail_ex+0x263/0x280
[   35.240576][ T3518]  should_fail+0xb/0x20
[   35.240640][ T3518]  should_fail_usercopy+0x1a/0x20
[   35.240733][ T3518]  _copy_from_user+0x1c/0xb0
[   35.240760][ T3518]  snd_seq_write+0x1d5/0x560
[   35.240842][ T3518]  ? __pfx_snd_seq_write+0x10/0x10
[   35.240931][ T3518]  vfs_write+0x269/0x9f0
[   35.240956][ T3518]  ? __rcu_read_unlock+0x4e/0x70
[   35.240996][ T3518]  ? __fget_files+0x184/0x1c0
[   35.241027][ T3518]  ksys_write+0xdc/0x1a0
[   35.241054][ T3518]  __x64_sys_write+0x40/0x50
[   35.241093][ T3518]  x64_sys_call+0x2847/0x3000
[   35.241127][ T3518]  do_syscall_64+0xc0/0x2a0
[   35.241165][ T3518]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   35.241235][ T3518] RIP: 0033:0x7ff746a2acb9
[   35.241255][ T3518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   35.241273][ T3518] RSP: 002b:00007ff745487028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   35.241329][ T3518] RAX: ffffffffffffffda RBX: 00007ff746ca5fa0 RCX: 00007ff746a2acb9
[   35.241348][ T3518] RDX: 000000000000ffc8 RSI: 0000200000000000 RDI: 0000000000000004
[   35.241365][ T3518] RBP: 00007ff745487090 R08: 0000000000000000 R09: 0000000000000000
[   35.241382][ T3518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   35.241396][ T3518] R13: 00007ff746ca6038 R14: 00007ff746ca5fa0 R15: 00007ffc092ca0d8
[   35.241472][ T3518]  </TASK>
[   35.259269][ T3521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'.
[   35.506474][ T3528] loop2: detected capacity change from 0 to 512
[   35.516042][ T3495] iso9660: Corrupted directory entry in block 2 of inode 1920
[   35.526448][ T3532] loop1: detected capacity change from 0 to 128
[   35.543779][ T3528] EXT4-fs (loop2): revision level too high, forcing read-only mode
[   35.544174][ T3528] EXT4-fs (loop2): orphan cleanup on readonly fs
[   35.544200][ T3528] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13
[   35.544643][ T3528] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.16: attempt to clear invalid blocks 2 len 1
[   35.545021][ T3528] EXT4-fs (loop2): Remounting filesystem read-only
[   35.545226][ T3528] EXT4-fs (loop2): 1 truncate cleaned up
[   35.545704][ T3528] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   35.546979][ T3532] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   35.549322][ T3532] ext4 filesystem being mounted at /2/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   35.553378][ T3532] EXT4-fs error (device loop1): ext4_validate_block_bitmap:423: comm syz.1.18: bg 0: bad block bitmap checksum
[   35.588678][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.636202][ T3313] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   35.673515][ T3527] loop0: detected capacity change from 0 to 8192
[   35.673853][ T3527] =======================================================
[   35.673853][ T3527] WARNING: The mand mount option has been deprecated and
[   35.673853][ T3527]          and is ignored by this kernel. Remove the mand
[   35.673853][ T3527]          option from the mount to silence this warning.
[   35.673853][ T3527] =======================================================
[   35.747322][    C0] hrtimer: interrupt took 35738 ns
[   35.754687][ T3547] loop1: detected capacity change from 0 to 1024
[   35.768971][ T3527] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15'.
[   35.812632][ T3547] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   35.937921][ T3551] syz.2.22 uses obsolete (PF_INET,SOCK_PACKET)
[   35.957627][ T3547] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   36.017228][ T3547] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: block 1: comm syz.1.23: lblock 1 mapped to illegal pblock 1 (length 5)
[   36.033752][ T3547] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 5 with error 117
[   36.046188][ T3547] EXT4-fs (loop1): This should not happen!! Data will be lost
[   36.046188][ T3547] 
[   36.058350][ T3555] netlink: 136 bytes leftover after parsing attributes in process `syz.0.25'.
[   36.132154][ T3565] loop3: detected capacity change from 0 to 1764
[   36.166029][ T1848] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:7: lblock 8 mapped to illegal pblock 8 (length 8)
[   36.186912][ T1848] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[   36.199397][ T1848] EXT4-fs (loop1): This should not happen!! Data will be lost
[   36.199397][ T1848] 
[   36.205739][ T3569] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   36.229286][ T3568] netlink: 8 bytes leftover after parsing attributes in process `syz.0.30'.
[   36.230665][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   36.254578][ T3569] Cannot find set identified by id 0 to match
[   36.303792][ T3573] loop0: detected capacity change from 0 to 512
[   36.320030][ T3573] EXT4-fs (loop0): 1 truncate cleaned up
[   36.333259][ T3573] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   36.351376][ T3577] loop1: detected capacity change from 0 to 764
[   36.366859][ T3573] 9p: Bad value for 'rfdno'
[   36.375248][ T3573] batadv1: entered promiscuous mode
[   36.498591][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.664565][ T3608] openvswitch: netlink: Missing key (keys=40, expected=80)
[   36.734941][ T3610] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[   36.838155][ T3610] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   36.922991][ T3610] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.45: bg 0: block 248: padding at end of block bitmap is not set
[   36.945890][ T3610] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.45: Failed to acquire dquot type 1
[   36.962659][ T3624] netlink: 'syz.1.48': attribute type 6 has an invalid length.
[   36.997756][ T3610] EXT4-fs (loop4): 1 truncate cleaned up
[   37.004235][ T3610] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[   37.088671][ T3630] netlink: 20 bytes leftover after parsing attributes in process `syz.0.41'.
[   37.100583][ T3610] syz.4.45 (3610) used greatest stack depth: 9136 bytes left
[   37.136065][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[   37.682870][ T3648] netlink: 80 bytes leftover after parsing attributes in process `syz.3.56'.
[   37.779493][ T3654] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   37.843136][ T3660] netlink: 36 bytes leftover after parsing attributes in process `syz.1.62'.
[   37.887541][ T3660] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   37.981657][ T3666] netlink: 68 bytes leftover after parsing attributes in process `syz.1.65'.
[   38.327797][ T3691] Invalid logical block size (6)
[   38.616747][ T3699] syzkaller0: entered promiscuous mode
[   38.622317][ T3699] syzkaller0: entered allmulticast mode
[   38.911680][ T3717] EXT4-fs: Ignoring removed bh option
[   38.929015][ T3717] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   38.961302][ T3717] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   39.037659][   T29] kauditd_printk_skb: 138 callbacks suppressed
[   39.037695][   T29] audit: type=1400 audit(1769389588.255:236): avc:  denied  { connect } for  pid=3716 comm="syz.0.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   39.084869][   T29] audit: type=1400 audit(1769389588.295:237): avc:  denied  { write } for  pid=3721 comm="syz.3.86" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   39.110754][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.167528][   T29] audit: type=1326 audit(1769389588.375:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3729 comm="syz.0.89" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8249a5acb9 code=0x0
[   39.176526][ T3733] EXT4-fs: Ignoring removed nobh option
[   39.190270][   T29] audit: type=1326 audit(1769389588.375:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3730 comm="syz.1.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16a3fbacb9 code=0x7ffc0000
[   39.196022][ T3733] EXT4-fs: Ignoring removed nomblk_io_submit option
[   39.219306][   T29] audit: type=1326 audit(1769389588.375:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3730 comm="syz.1.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16a3fbacb9 code=0x7ffc0000
[   39.249458][   T29] audit: type=1326 audit(1769389588.375:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3730 comm="syz.1.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f16a3fbacb9 code=0x7ffc0000
[   39.272970][   T29] audit: type=1326 audit(1769389588.375:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3730 comm="syz.1.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16a3fbacb9 code=0x7ffc0000
[   39.274998][ T3727] FAULT_INJECTION: forcing a failure.
[   39.274998][ T3727] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   39.296162][   T29] audit: type=1326 audit(1769389588.375:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3730 comm="syz.1.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16a3fbacb9 code=0x7ffc0000
[   39.309273][ T3727] CPU: 0 UID: 0 PID: 3727 Comm: syz.4.88 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   39.309319][ T3727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   39.309335][ T3727] Call Trace:
[   39.309342][ T3727]  <TASK>
[   39.309352][ T3727]  __dump_stack+0x1d/0x30
[   39.309460][ T3727]  dump_stack_lvl+0x95/0xd0
[   39.309483][ T3727]  dump_stack+0x15/0x1b
[   39.309510][ T3727]  should_fail_ex+0x263/0x280
[   39.309605][ T3727]  should_fail+0xb/0x20
[   39.309682][ T3727]  should_fail_usercopy+0x1a/0x20
[   39.309742][ T3727]  _copy_to_user+0x20/0xa0
[   39.309785][ T3727]  simple_read_from_buffer+0xb5/0x130
[   39.309953][ T3727]  proc_fail_nth_read+0x10e/0x150
[   39.310140][ T3727]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   39.310316][ T3727]  vfs_read+0x1ab/0x7f0
[   39.310382][ T3727]  ? __schedule+0x881/0xc90
[   39.310457][ T3727]  ? __rcu_read_unlock+0x4e/0x70
[   39.310661][ T3727]  ? __fget_files+0x184/0x1c0
[   39.310779][ T3727]  ? mutex_lock+0x57/0x90
[   39.310817][ T3727]  ksys_read+0xdc/0x1a0
[   39.310837][ T3727]  __x64_sys_read+0x40/0x50
[   39.310948][ T3727]  x64_sys_call+0x2889/0x3000
[   39.311034][ T3727]  do_syscall_64+0xc0/0x2a0
[   39.311155][ T3727]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   39.311229][ T3727] RIP: 0033:0x7ff7469eb58e
[   39.311292][ T3727] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   39.311488][ T3727] RSP: 002b:00007ff745486fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   39.311569][ T3727] RAX: ffffffffffffffda RBX: 00007ff7454876c0 RCX: 00007ff7469eb58e
[   39.311615][ T3727] RDX: 000000000000000f RSI: 00007ff7454870a0 RDI: 0000000000000007
[   39.311666][ T3727] RBP: 00007ff745487090 R08: 0000000000000000 R09: 0000000000000000
[   39.311709][ T3727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   39.311752][ T3727] R13: 00007ff746ca6038 R14: 00007ff746ca5fa0 R15: 00007ffc092ca0d8
[   39.311813][ T3727]  </TASK>
[   39.532250][   T29] audit: type=1326 audit(1769389588.375:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3730 comm="syz.1.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f16a3fbacb9 code=0x7ffc0000
[   39.555652][   T29] audit: type=1326 audit(1769389588.375:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3730 comm="syz.1.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16a3fbacb9 code=0x7ffc0000
[   39.605693][ T3733] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   39.663172][ T3754] set_capacity_and_notify: 6 callbacks suppressed
[   39.663244][ T3754] loop4: detected capacity change from 0 to 512
[   39.695129][ T3754] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[   39.750090][   T23] hid (null): unknown global tag 0xc
[   39.756302][   T23] hid-generic FFFF:7C84EA47:0001.0001: unknown main item tag 0x4
[   39.764208][   T23] hid-generic FFFF:7C84EA47:0001.0001: unknown main item tag 0x2
[   39.772164][   T23] hid-generic FFFF:7C84EA47:0001.0001: unknown main item tag 0x0
[   39.779973][   T23] hid-generic FFFF:7C84EA47:0001.0001: unexpected long global item
[   39.791525][ T3754] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002]
[   39.798776][   T23] hid-generic FFFF:7C84EA47:0001.0001: probe with driver hid-generic failed with error -22
[   39.820248][ T3754] EXT4-fs (loop4): orphan cleanup on readonly fs
[   39.832073][ T3754] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   39.846807][ T3754] EXT4-fs (loop4): Cannot turn on quotas: error -117
[   39.854297][ T3754] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[   39.872204][ T3754] EXT4-fs (loop4): Remounting filesystem read-only
[   39.878856][ T3754] EXT4-fs (loop4): 1 truncate cleaned up
[   39.885102][ T3754] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   39.894011][ T3764] FAULT_INJECTION: forcing a failure.
[   39.894011][ T3764] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[   39.910852][ T3764] CPU: 0 UID: 0 PID: 3764 Comm: syz.2.98 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   39.910923][ T3764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   39.910940][ T3764] Call Trace:
[   39.910948][ T3764]  <TASK>
[   39.910958][ T3764]  __dump_stack+0x1d/0x30
[   39.910985][ T3764]  dump_stack_lvl+0x95/0xd0
[   39.911008][ T3764]  dump_stack+0x15/0x1b
[   39.911030][ T3764]  should_fail_ex+0x263/0x280
[   39.911102][ T3764]  should_fail_alloc_page+0xf2/0x100
[   39.911130][ T3764]  __alloc_frozen_pages_noprof+0x108/0x350
[   39.911170][ T3764]  alloc_pages_mpol+0xb3/0x260
[   39.911203][ T3764]  ? css_rstat_updated+0xbb/0x280
[   39.911234][ T3764]  vma_alloc_folio_noprof+0x1a9/0x300
[   39.911279][ T3764]  handle_mm_fault+0x111f/0x3030
[   39.911318][ T3764]  ? vma_start_read+0x1c7/0x2c0
[   39.911352][ T3764]  do_user_addr_fault+0x62f/0x1050
[   39.911380][ T3764]  ? ksys_mmap_pgoff+0xc1/0x310
[   39.911427][ T3764]  ? fpregs_assert_state_consistent+0xb3/0xe0
[   39.911512][ T3764]  ? arch_exit_to_user_mode_prepare+0x26/0x80
[   39.911551][ T3764]  ? irqentry_exit+0x3c/0x510
[   39.911654][ T3764]  exc_page_fault+0x62/0xa0
[   39.911800][ T3764]  asm_exc_page_fault+0x26/0x30
[   39.911822][ T3764] RIP: 0033:0x7fd6e8cb2898
[   39.911839][ T3764] Code: 85 ed 74 3b 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41
[   39.911858][ T3764] RSP: 002b:00007fd6e7835470 EFLAGS: 00010202
[   39.911876][ T3764] RAX: 0000000000001000 RBX: 00007fd6e7835530 RCX: 0000000000000003
[   39.911960][ T3764] RDX: 00000000000007e3 RSI: 0000000000000be4 RDI: 00007fd6e78355d0
[   39.911974][ T3764] RBP: 0000000000000004 R08: 00007fd6df416000 R09: 0000000000000002
[   39.912008][ T3764] R10: 0000200000000382 R11: 0000000000000511 R12: 0000000000000801
[   39.912022][ T3764] R13: 00007fd6e8ea7880 R14: 0000000000000016 R15: 00007fd6e78355d0
[   39.912043][ T3764]  </TASK>
[   39.912119][ T3764] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[   40.118839][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.133649][ T3764] loop2: detected capacity change from 0 to 512
[   40.155917][ T3773] program syz.4.101 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   40.180716][ T3764] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   40.199967][ T3773] random: crng reseeded on system resumption
[   40.214837][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.244670][ T3764] EXT4-fs (loop2): revision level too high, forcing read-only mode
[   40.263823][ T3764] EXT4-fs (loop2): orphan cleanup on readonly fs
[   40.271340][ T3764] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   40.286387][ T3764] EXT4-fs (loop2): Cannot turn on quotas: error -117
[   40.293953][ T3764] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #16: comm syz.2.98: corrupted inode contents
[   40.306496][ T3764] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #16: comm syz.2.98: mark_inode_dirty error
[   40.318265][ T3764] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #16: comm syz.2.98: corrupted inode contents
[   40.330352][ T3764] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.98: mark_inode_dirty error
[   40.341748][ T3764] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #16: comm syz.2.98: corrupted inode contents
[   40.355009][ T3764] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem
[   40.364309][ T3764] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #16: comm syz.2.98: corrupted inode contents
[   40.385255][ T3764] EXT4-fs error (device loop2): ext4_truncate:4635: inode #16: comm syz.2.98: mark_inode_dirty error
[   40.396708][ T3764] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem
[   40.406237][ T3764] EXT4-fs (loop2): 1 truncate cleaned up
[   40.433694][ T3764] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   40.497090][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.519767][ T3796] loop0: detected capacity change from 0 to 512
[   40.556245][ T3801] FAULT_INJECTION: forcing a failure.
[   40.556245][ T3801] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   40.569375][ T3801] CPU: 1 UID: 0 PID: 3801 Comm: syz.2.111 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   40.569406][ T3801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   40.569423][ T3801] Call Trace:
[   40.569431][ T3801]  <TASK>
[   40.569440][ T3801]  __dump_stack+0x1d/0x30
[   40.569473][ T3801]  dump_stack_lvl+0x95/0xd0
[   40.569535][ T3801]  dump_stack+0x15/0x1b
[   40.569563][ T3801]  should_fail_ex+0x263/0x280
[   40.569600][ T3801]  should_fail+0xb/0x20
[   40.569684][ T3801]  should_fail_usercopy+0x1a/0x20
[   40.569772][ T3801]  _copy_to_user+0x20/0xa0
[   40.569798][ T3801]  simple_read_from_buffer+0xb5/0x130
[   40.569872][ T3801]  proc_fail_nth_read+0x10e/0x150
[   40.569911][ T3801]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   40.569974][ T3801]  vfs_read+0x1ab/0x7f0
[   40.569998][ T3801]  ? __rcu_read_unlock+0x4e/0x70
[   40.570038][ T3801]  ? __fget_files+0x184/0x1c0
[   40.570154][ T3801]  ? mutex_lock+0x57/0x90
[   40.570186][ T3801]  ksys_read+0xdc/0x1a0
[   40.570236][ T3801]  __x64_sys_read+0x40/0x50
[   40.570263][ T3801]  x64_sys_call+0x2889/0x3000
[   40.570298][ T3801]  do_syscall_64+0xc0/0x2a0
[   40.570337][ T3801]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   40.570411][ T3801] RIP: 0033:0x7fd6e8dbb58e
[   40.570427][ T3801] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   40.570536][ T3801] RSP: 002b:00007fd6e7856fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   40.570561][ T3801] RAX: ffffffffffffffda RBX: 00007fd6e78576c0 RCX: 00007fd6e8dbb58e
[   40.570575][ T3801] RDX: 000000000000000f RSI: 00007fd6e78570a0 RDI: 0000000000000004
[   40.570632][ T3801] RBP: 00007fd6e7857090 R08: 0000000000000000 R09: 0000000000000000
[   40.570650][ T3801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   40.570663][ T3801] R13: 00007fd6e9076038 R14: 00007fd6e9075fa0 R15: 00007ffc144f4158
[   40.570690][ T3801]  </TASK>
[   40.646565][ T3792] loop4: detected capacity change from 0 to 1024
[   40.664176][ T3799] loop1: detected capacity change from 0 to 1764
[   40.719398][ T3790] loop3: detected capacity change from 0 to 512
[   40.756214][ T3792] EXT4-fs: Ignoring removed nobh option
[   40.759962][ T3799] iso9660: Unknown parameter '01777777777777777777777@�+��T}a@ݡ�2Zr��x/ý�ϠLe'
[   40.778575][ T3790] EXT4-fs: Ignoring removed nomblk_io_submit option
[   40.783250][ T3792] EXT4-fs: Ignoring removed nomblk_io_submit option
[   40.816378][ T3790] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #15: comm syz.3.107: corrupted in-inode xattr: bad e_name length
[   40.885199][ T3790] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.107: couldn't read orphan inode 15 (err -117)
[   40.897120][ T3810] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   40.915387][ T3796] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   40.935423][ T3810] loop2: detected capacity change from 0 to 512
[   40.952861][ T3796] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   40.962971][ T3816] program syz.1.114 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   40.971292][ T3810] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.113: inode has both inline data and extents flags
[   40.975160][ T3790] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   40.998588][ T3810] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.113: couldn't read orphan inode 15 (err -117)
[   41.011699][ T3792] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   41.022887][ T3810] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   41.085064][ T3818] __nla_validate_parse: 2 callbacks suppressed
[   41.085081][ T3818] netlink: 4 bytes leftover after parsing attributes in process `syz.1.115'.
[   41.148048][ T3823] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   41.199094][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.529841][ T3838] netlink: 28 bytes leftover after parsing attributes in process `syz.1.121'.
[   41.538814][ T3838] netlink: 28 bytes leftover after parsing attributes in process `syz.1.121'.
[   41.578582][ T3839] ieee802154 phy0 wpan0: encryption failed: -22
[   41.702661][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.738668][ T3821] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.748571][ T3810] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.801274][ T3844] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[   41.848151][ T3856] netlink: 'syz.4.127': attribute type 1 has an invalid length.
[   41.863844][ T3858] netlink: 12 bytes leftover after parsing attributes in process `syz.2.128'.
[   41.874492][ T3854] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   41.881767][ T3854] IPv6: NLM_F_CREATE should be set when creating new route
[   41.889074][ T3854] IPv6: NLM_F_CREATE should be set when creating new route
[   41.896306][ T3854] IPv6: NLM_F_CREATE should be set when creating new route
[   41.951249][ T3866] loop1: detected capacity change from 0 to 1024
[   41.961098][ T3866] EXT4-fs: inline encryption not supported
[   41.967000][ T3866] EXT4-fs: Ignoring removed oldalloc option
[   42.007553][ T3866] ext4: Unknown parameter 'uid<00000000000000000000'
[   42.145926][ T3875] loop4: detected capacity change from 0 to 8192
[   42.230260][ T3875] netlink: 12 bytes leftover after parsing attributes in process `syz.4.133'.
[   42.291491][ T3874] loop1: detected capacity change from 0 to 1024
[   42.358029][ T3874] EXT4-fs: Ignoring removed nobh option
[   42.364971][ T3874] EXT4-fs: Ignoring removed nomblk_io_submit option
[   42.439316][ T3874] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   42.630342][ T3905] netlink: 12 bytes leftover after parsing attributes in process `syz.0.144'.
[   42.781865][ T3914] netlink: 8 bytes leftover after parsing attributes in process `syz.3.148'.
[   42.793637][ T3912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.147'.
[   42.981701][ T3928] xt_hashlimit: size too large, truncated to 1048576
[   42.998521][ T3874] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.217572][ T3939] FAULT_INJECTION: forcing a failure.
[   43.217572][ T3939] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   43.230761][ T3939] CPU: 1 UID: 0 PID: 3939 Comm: syz.4.157 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   43.230796][ T3939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   43.230813][ T3939] Call Trace:
[   43.230823][ T3939]  <TASK>
[   43.230833][ T3939]  __dump_stack+0x1d/0x30
[   43.230858][ T3939]  dump_stack_lvl+0x95/0xd0
[   43.230899][ T3939]  dump_stack+0x15/0x1b
[   43.230927][ T3939]  should_fail_ex+0x263/0x280
[   43.231048][ T3939]  should_fail+0xb/0x20
[   43.231090][ T3939]  should_fail_usercopy+0x1a/0x20
[   43.231123][ T3939]  _copy_from_user+0x1c/0xb0
[   43.231145][ T3939]  vmemdup_user+0x5e/0xd0
[   43.231185][ T3939]  map_get_next_key+0x140/0x330
[   43.231225][ T3939]  ? __sys_bpf+0x599/0x7b0
[   43.231264][ T3939]  __sys_bpf+0x5a3/0x7b0
[   43.231333][ T3939]  __x64_sys_bpf+0x41/0x50
[   43.231367][ T3939]  x64_sys_call+0x28e1/0x3000
[   43.231458][ T3939]  do_syscall_64+0xc0/0x2a0
[   43.231503][ T3939]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   43.231535][ T3939] RIP: 0033:0x7ff746a2acb9
[   43.231556][ T3939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   43.231645][ T3939] RSP: 002b:00007ff745487028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   43.231674][ T3939] RAX: ffffffffffffffda RBX: 00007ff746ca5fa0 RCX: 00007ff746a2acb9
[   43.231690][ T3939] RDX: 0000000000000020 RSI: 0000200000000340 RDI: 0000000000000004
[   43.231709][ T3939] RBP: 00007ff745487090 R08: 0000000000000000 R09: 0000000000000000
[   43.231728][ T3939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   43.231764][ T3939] R13: 00007ff746ca6038 R14: 00007ff746ca5fa0 R15: 00007ffc092ca0d8
[   43.231792][ T3939]  </TASK>
[   43.437263][ T3942] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.158: invalid indirect mapped block 4294967295 (level 1)
[   43.473454][ T3942] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.158: invalid indirect mapped block 4294967295 (level 1)
[   43.489972][ T3947] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   43.523858][ T3942] EXT4-fs (loop1): 2 truncates cleaned up
[   43.537221][ T3947] EXT4-fs (loop4): 1 truncate cleaned up
[   43.538615][ T3942] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   43.544750][ T3947] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   43.616043][ T3954] sch_tbf: burst 22 is lower than device lo mtu (65550) !
[   43.623641][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.645229][ T3942] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.158: bg 0: block 5: invalid block bitmap
[   43.704123][ T3956] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   43.717672][ T3954] sch_tbf: burst 22 is lower than device lo mtu (65550) !
[   43.738386][ T3956] ext4 filesystem being mounted at /31/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   43.772580][ T3956] netlink: 'syz.4.163': attribute type 29 has an invalid length.
[   43.921094][ T3315] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   44.186421][ T3970] EXT4-fs: Ignoring removed orlov option
[   44.195480][ T3966] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   44.208628][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.288504][ T3970] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   44.312167][ T3976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.168'.
[   44.461511][   T29] kauditd_printk_skb: 95 callbacks suppressed
[   44.461527][   T29] audit: type=1400 audit(1769389593.675:339): avc:  denied  { ioctl } for  pid=3904 comm="syz.0.144" path="socket:[6722]" dev="sockfs" ino=6722 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   44.590438][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.611811][ T3968] EXT4-fs: Ignoring removed nobh option
[   44.621030][ T3968] EXT4-fs: Ignoring removed nomblk_io_submit option
[   44.629367][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.691554][   T29] audit: type=1400 audit(1769389593.885:340): avc:  denied  { read } for  pid=3979 comm="syz.4.171" name="mISDNtimer" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   44.749469][ T3985] netlink: 'syz.1.172': attribute type 10 has an invalid length.
[   44.757453][ T3985] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   44.792411][ T3968] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   44.879820][ T3980] set_capacity_and_notify: 8 callbacks suppressed
[   44.879851][ T3980] loop4: detected capacity change from 0 to 512
[   44.939942][ T3980] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   45.019281][   T29] audit: type=1400 audit(1769389594.235:341): avc:  denied  { watch watch_reads } for  pid=3998 comm="syz.0.175" path="/33" dev="tmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   45.044306][ T4001] netlink: 2 bytes leftover after parsing attributes in process `syz.0.175'.
[   45.052977][ T3980] EXT4-fs (loop4): 1 truncate cleaned up
[   45.067330][ T3968] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.080296][ T3980] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.098137][   T29] audit: type=1400 audit(1769389594.315:342): avc:  denied  { sqpoll } for  pid=4002 comm="syz.3.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   45.116256][ T4000] 8021q: adding VLAN 0 to HW filter on device bond1
[   45.124585][   T29] audit: type=1400 audit(1769389594.315:343): avc:  denied  { ioctl } for  pid=4002 comm="syz.3.176" path="socket:[5965]" dev="sockfs" ino=5965 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   45.163532][ T4001] macvtap1: entered allmulticast mode
[   45.169000][ T4001] veth0_macvtap: entered allmulticast mode
[   45.179368][   T29] audit: type=1400 audit(1769389594.395:344): avc:  denied  { write } for  pid=4002 comm="syz.3.176" name="rt_acct" dev="proc" ino=4026532761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   45.235460][ T3980] ext4: Unknown parameter '18446744073709551615f��v�$�(~���_5J7�;�M��C�
_������n;kb��Ş�G��V��}[�#�~�)gbe��Ͻ���d��nx�u{`�tS��_$��39��-�Qx�3m�R�6�ws��ƏU2}���c;!N'
[   45.254638][   T29] audit: type=1400 audit(1769389594.435:345): avc:  denied  { ioctl } for  pid=3979 comm="syz.4.171" path="/dev/mISDNtimer" dev="devtmpfs" ino=250 ioctlcmd=0x4940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   45.279513][   T29] audit: type=1400 audit(1769389594.445:346): avc:  denied  { remount } for  pid=3979 comm="syz.4.171" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   45.298904][   T29] audit: type=1400 audit(1769389594.445:347): avc:  denied  { setopt } for  pid=4016 comm="syz.1.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   45.318339][   T29] audit: type=1400 audit(1769389594.445:348): avc:  denied  { write } for  pid=4016 comm="syz.1.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   45.376450][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.459197][ T4035] FAULT_INJECTION: forcing a failure.
[   45.459197][ T4035] name failslab, interval 1, probability 0, space 0, times 1
[   45.471971][ T4035] CPU: 0 UID: 0 PID: 4035 Comm: syz.1.186 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   45.472084][ T4035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   45.472101][ T4035] Call Trace:
[   45.472110][ T4035]  <TASK>
[   45.472126][ T4035]  __dump_stack+0x1d/0x30
[   45.472160][ T4035]  dump_stack_lvl+0x95/0xd0
[   45.472186][ T4035]  dump_stack+0x15/0x1b
[   45.472211][ T4035]  should_fail_ex+0x263/0x280
[   45.472320][ T4035]  should_failslab+0x8c/0xb0
[   45.472353][ T4035]  __kmalloc_cache_node_noprof+0x69/0x4a0
[   45.472418][ T4035]  ? __get_vm_area_node+0x106/0x1d0
[   45.472455][ T4035]  __get_vm_area_node+0x106/0x1d0
[   45.472499][ T4035]  __vmalloc_node_range_noprof+0x291/0x12b0
[   45.472592][ T4035]  ? bpf_prog_alloc_no_stats+0x47/0x380
[   45.472632][ T4035]  ? __rcu_read_unlock+0x4e/0x70
[   45.472667][ T4035]  ? avc_has_perm_noaudit+0xab/0x130
[   45.472751][ T4035]  ? bpf_prog_alloc_no_stats+0x47/0x380
[   45.472851][ T4035]  __vmalloc_noprof+0xa4/0xf0
[   45.472888][ T4035]  ? bpf_prog_alloc_no_stats+0x47/0x380
[   45.472922][ T4035]  bpf_prog_alloc_no_stats+0x47/0x380
[   45.472993][ T4035]  ? bpf_prog_alloc+0x2a/0x150
[   45.473047][ T4035]  bpf_prog_alloc+0x3c/0x150
[   45.473083][ T4035]  bpf_prog_load+0x506/0x1140
[   45.473151][ T4035]  ? security_bpf+0x2b/0x90
[   45.473184][ T4035]  __sys_bpf+0x469/0x7b0
[   45.473232][ T4035]  __x64_sys_bpf+0x41/0x50
[   45.473267][ T4035]  x64_sys_call+0x28e1/0x3000
[   45.473329][ T4035]  do_syscall_64+0xc0/0x2a0
[   45.473375][ T4035]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   45.473407][ T4035] RIP: 0033:0x7f16a3fbacb9
[   45.473474][ T4035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   45.473500][ T4035] RSP: 002b:00007f16a2a17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   45.473553][ T4035] RAX: ffffffffffffffda RBX: 00007f16a4235fa0 RCX: 00007f16a3fbacb9
[   45.473573][ T4035] RDX: 0000000000000094 RSI: 0000200000000700 RDI: 0000000000000005
[   45.473673][ T4035] RBP: 00007f16a2a17090 R08: 0000000000000000 R09: 0000000000000000
[   45.473691][ T4035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   45.473714][ T4035] R13: 00007f16a4236038 R14: 00007f16a4235fa0 R15: 00007ffe7eefaac8
[   45.473746][ T4035]  </TASK>
[   45.473758][ T4035] syz.1.186: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0
[   45.717081][ T4035] CPU: 0 UID: 0 PID: 4035 Comm: syz.1.186 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   45.717136][ T4035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   45.717153][ T4035] Call Trace:
[   45.717160][ T4035]  <TASK>
[   45.717168][ T4035]  __dump_stack+0x1d/0x30
[   45.717251][ T4035]  dump_stack_lvl+0x95/0xd0
[   45.717314][ T4035]  dump_stack+0x15/0x1b
[   45.717344][ T4035]  warn_alloc+0x145/0x1c0
[   45.717390][ T4035]  __vmalloc_node_range_noprof+0x2b6/0x12b0
[   45.717462][ T4035]  ? __rcu_read_unlock+0x4e/0x70
[   45.717508][ T4035]  ? avc_has_perm_noaudit+0xab/0x130
[   45.717636][ T4035]  ? bpf_prog_alloc_no_stats+0x47/0x380
[   45.717691][ T4035]  __vmalloc_noprof+0xa4/0xf0
[   45.717731][ T4035]  ? bpf_prog_alloc_no_stats+0x47/0x380
[   45.717794][ T4035]  bpf_prog_alloc_no_stats+0x47/0x380
[   45.717842][ T4035]  ? bpf_prog_alloc+0x2a/0x150
[   45.717882][ T4035]  bpf_prog_alloc+0x3c/0x150
[   45.717921][ T4035]  bpf_prog_load+0x506/0x1140
[   45.718095][ T4035]  ? security_bpf+0x2b/0x90
[   45.718126][ T4035]  __sys_bpf+0x469/0x7b0
[   45.718321][ T4035]  __x64_sys_bpf+0x41/0x50
[   45.718360][ T4035]  x64_sys_call+0x28e1/0x3000
[   45.718447][ T4035]  do_syscall_64+0xc0/0x2a0
[   45.718502][ T4035]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   45.718533][ T4035] RIP: 0033:0x7f16a3fbacb9
[   45.718556][ T4035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   45.718584][ T4035] RSP: 002b:00007f16a2a17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   45.718675][ T4035] RAX: ffffffffffffffda RBX: 00007f16a4235fa0 RCX: 00007f16a3fbacb9
[   45.718746][ T4035] RDX: 0000000000000094 RSI: 0000200000000700 RDI: 0000000000000005
[   45.718775][ T4035] RBP: 00007f16a2a17090 R08: 0000000000000000 R09: 0000000000000000
[   45.718794][ T4035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   45.718876][ T4035] R13: 00007f16a4236038 R14: 00007f16a4235fa0 R15: 00007ffe7eefaac8
[   45.718906][ T4035]  </TASK>
[   45.918031][ T4035] Mem-Info:
[   45.921178][ T4035] active_anon:7742 inactive_anon:0 isolated_anon:0
[   45.921178][ T4035]  active_file:20641 inactive_file:2291 isolated_file:0
[   45.921178][ T4035]  unevictable:0 dirty:1714 writeback:0
[   45.921178][ T4035]  slab_reclaimable:3217 slab_unreclaimable:14386
[   45.921178][ T4035]  mapped:29286 shmem:192 pagetables:1229
[   45.921178][ T4035]  sec_pagetables:0 bounce:0
[   45.921178][ T4035]  kernel_misc_reclaimable:0
[   45.921178][ T4035]  free:1875977 free_pcp:20321 free_cma:0
[   45.966648][ T4035] Node 0 active_anon:30968kB inactive_anon:0kB active_file:82564kB inactive_file:9164kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117144kB dirty:6856kB writeback:0kB shmem:768kB kernel_stack:3456kB pagetables:5032kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   45.994037][ T4035] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   46.023919][ T4035] lowmem_reserve[]: 0 2879 7858 7858
[   46.029366][ T4035] Node 0 DMA32 free:2944856kB boost:0kB min:4128kB low:7056kB high:9984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948384kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB
[   46.061116][ T4035] lowmem_reserve[]: 0 0 4978 4978
[   46.066294][ T4035] Node 0 Normal free:4543692kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:30968kB inactive_anon:0kB active_file:82564kB inactive_file:9164kB unevictable:0kB writepending:6856kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:77732kB local_pcp:27696kB free_cma:0kB
[   46.099460][ T4035] lowmem_reserve[]: 0 0 0 0
[   46.104083][ T4035] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   46.117117][ T4035] Node 0 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 4*128kB (M) 4*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944856kB
[   46.133385][ T4035] Node 0 Normal: 392*4kB (UME) 158*8kB (UME) 202*16kB (UME) 184*32kB (UM) 97*64kB (UME) 30*128kB (UME) 7*256kB (UME) 2*512kB (U) 5*1024kB (U) 2*2048kB (UE) 1101*4096kB (M) = 4543728kB
[   46.151973][ T4035] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[   46.161368][ T4035] 23239 total pagecache pages
[   46.166065][ T4035] 0 pages in swap cache
[   46.170292][ T4035] Free swap  = 124996kB
[   46.174466][ T4035] Total swap = 124996kB
[   46.178670][ T4035] 2097051 pages RAM
[   46.182574][ T4035] 0 pages HighMem/MovableOnly
[   46.187275][ T4035] 81555 pages reserved
[   46.188175][ T4037] loop4: detected capacity change from 0 to 1024
[   46.202988][ T4039] Driver unsupported XDP return value 0 on prog  (id 44) dev N/A, expect packet loss!
[   46.219915][ T4037] EXT4-fs: Ignoring removed nobh option
[   46.227006][ T4037] EXT4-fs: Ignoring removed nomblk_io_submit option
[   46.282914][ T4042] program syz.2.190 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   46.319583][ T4037] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   46.370048][ T4047] program syz.2.191 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   46.421131][ T4051] __nla_validate_parse: 1 callbacks suppressed
[   46.421151][ T4051] netlink: 52 bytes leftover after parsing attributes in process `syz.1.189'.
[   46.453269][ T4053] FAULT_INJECTION: forcing a failure.
[   46.453269][ T4053] name failslab, interval 1, probability 0, space 0, times 0
[   46.466000][ T4053] CPU: 1 UID: 0 PID: 4053 Comm: syz.2.193 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   46.466031][ T4053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   46.466048][ T4053] Call Trace:
[   46.466062][ T4053]  <TASK>
[   46.466071][ T4053]  __dump_stack+0x1d/0x30
[   46.466103][ T4053]  dump_stack_lvl+0x95/0xd0
[   46.466154][ T4053]  dump_stack+0x15/0x1b
[   46.466191][ T4053]  should_fail_ex+0x263/0x280
[   46.466281][ T4053]  should_failslab+0x8c/0xb0
[   46.466313][ T4053]  __kmalloc_noprof+0xb8/0x580
[   46.466347][ T4053]  ? parse_usbdevfs_streams+0x11c/0x610
[   46.466418][ T4053]  parse_usbdevfs_streams+0x11c/0x610
[   46.466466][ T4053]  ? ioctl_has_perm+0x27e/0x2d0
[   46.466546][ T4053]  proc_alloc_streams+0x72/0x2a0
[   46.466632][ T4053]  ? do_vfs_ioctl+0x84f/0xe70
[   46.466701][ T4053]  ? selinux_file_ioctl+0x5f7/0xcb0
[   46.466768][ T4053]  usbdev_ioctl+0xc66/0x1750
[   46.466859][ T4053]  ? __pfx_usbdev_ioctl+0x10/0x10
[   46.466900][ T4053]  __se_sys_ioctl+0xce/0x140
[   46.466944][ T4053]  __x64_sys_ioctl+0x43/0x50
[   46.467040][ T4053]  x64_sys_call+0x14b0/0x3000
[   46.467081][ T4053]  do_syscall_64+0xc0/0x2a0
[   46.467203][ T4053]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   46.467230][ T4053] RIP: 0033:0x7fd6e8dfacb9
[   46.467251][ T4053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   46.467276][ T4053] RSP: 002b:00007fd6e7857028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   46.467330][ T4053] RAX: ffffffffffffffda RBX: 00007fd6e9075fa0 RCX: 00007fd6e8dfacb9
[   46.467417][ T4053] RDX: 0000200000000400 RSI: 000000008008551c RDI: 0000000000000004
[   46.467435][ T4053] RBP: 00007fd6e7857090 R08: 0000000000000000 R09: 0000000000000000
[   46.467476][ T4053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   46.467493][ T4053] R13: 00007fd6e9076038 R14: 00007fd6e9075fa0 R15: 00007ffc144f4158
[   46.467520][ T4053]  </TASK>
[   46.662416][ T4050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   46.670962][ T4050] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   46.885538][ T4057] loop2: detected capacity change from 0 to 8192
[   46.892370][ T4062] FAULT_INJECTION: forcing a failure.
[   46.892370][ T4062] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   46.905519][ T4062] CPU: 0 UID: 0 PID: 4062 Comm: syz.3.196 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   46.905566][ T4062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   46.905585][ T4062] Call Trace:
[   46.905595][ T4062]  <TASK>
[   46.905606][ T4062]  __dump_stack+0x1d/0x30
[   46.905642][ T4062]  dump_stack_lvl+0x95/0xd0
[   46.905675][ T4062]  dump_stack+0x15/0x1b
[   46.905709][ T4062]  should_fail_ex+0x263/0x280
[   46.905805][ T4062]  should_fail+0xb/0x20
[   46.905845][ T4062]  should_fail_usercopy+0x1a/0x20
[   46.905891][ T4062]  _copy_from_user+0x1c/0xb0
[   46.905937][ T4062]  mon_bin_ioctl+0x376/0x960
[   46.906050][ T4062]  ? __fget_files+0x184/0x1c0
[   46.906130][ T4062]  ? __pfx_mon_bin_ioctl+0x10/0x10
[   46.906179][ T4062]  __se_sys_ioctl+0xce/0x140
[   46.906264][ T4062]  __x64_sys_ioctl+0x43/0x50
[   46.906307][ T4062]  x64_sys_call+0x14b0/0x3000
[   46.906342][ T4062]  do_syscall_64+0xc0/0x2a0
[   46.906455][ T4062]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   46.906485][ T4062] RIP: 0033:0x7f39706cacb9
[   46.906507][ T4062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   46.906607][ T4062] RSP: 002b:00007f396f127028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   46.906634][ T4062] RAX: ffffffffffffffda RBX: 00007f3970945fa0 RCX: 00007f39706cacb9
[   46.906653][ T4062] RDX: 0000000000000000 RSI: 0000000040189206 RDI: 0000000000000003
[   46.906670][ T4062] RBP: 00007f396f127090 R08: 0000000000000000 R09: 0000000000000000
[   46.906688][ T4062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   46.906704][ T4062] R13: 00007f3970946038 R14: 00007f3970945fa0 R15: 00007ffd4a8ab0b8
[   46.906796][ T4062]  </TASK>
[   47.098915][ T4055] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.133748][ T4070] netlink: 8 bytes leftover after parsing attributes in process `syz.0.198'.
[   47.146768][ T4072] loop4: detected capacity change from 0 to 256
[   47.188186][ T4076] loop3: detected capacity change from 0 to 128
[   47.218648][ T4076] syz.3.201: attempt to access beyond end of device
[   47.218648][ T4076] loop3: rw=2049, sector=138, nr_sectors = 4 limit=128
[   47.283990][ T4076] syz.3.201: attempt to access beyond end of device
[   47.283990][ T4076] loop3: rw=2049, sector=138, nr_sectors = 8 limit=128
[   47.298098][ T4085] program syz.2.202 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   47.321751][ T4076] syz.3.201: attempt to access beyond end of device
[   47.321751][ T4076] loop3: rw=8390657, sector=144, nr_sectors = 2 limit=128
[   47.335403][ T4076] Buffer I/O error on dev loop3, logical block 72, lost async page write
[   47.356357][ T4076] syz.3.201: attempt to access beyond end of device
[   47.356357][ T4076] loop3: rw=2049, sector=146, nr_sectors = 8 limit=128
[   47.370143][ T4072] FAT-fs (loop4): Directory bread(block 64) failed
[   47.376742][ T4072] FAT-fs (loop4): Directory bread(block 65) failed
[   47.387489][ T4072] FAT-fs (loop4): Directory bread(block 66) failed
[   47.400407][ T4072] FAT-fs (loop4): Directory bread(block 67) failed
[   47.408318][ T4076] syz.3.201: attempt to access beyond end of device
[   47.408318][ T4076] loop3: rw=8390657, sector=152, nr_sectors = 2 limit=128
[   47.421996][ T4076] Buffer I/O error on dev loop3, logical block 76, lost async page write
[   47.432770][ T4072] FAT-fs (loop4): Directory bread(block 68) failed
[   47.439448][ T4072] FAT-fs (loop4): Directory bread(block 69) failed
[   47.446236][ T4072] FAT-fs (loop4): Directory bread(block 70) failed
[   47.452943][ T4072] FAT-fs (loop4): Directory bread(block 71) failed
[   47.460184][ T4072] FAT-fs (loop4): Directory bread(block 72) failed
[   47.467217][ T4072] FAT-fs (loop4): Directory bread(block 73) failed
[   47.468068][ T4076] syz.3.201: attempt to access beyond end of device
[   47.468068][ T4076] loop3: rw=2049, sector=170, nr_sectors = 8 limit=128
[   47.515163][ T4079] loop1: detected capacity change from 0 to 512
[   47.566794][ T4076] syz.3.201: attempt to access beyond end of device
[   47.566794][ T4076] loop3: rw=8390657, sector=176, nr_sectors = 2 limit=128
[   47.580491][ T4076] Buffer I/O error on dev loop3, logical block 88, lost async page write
[   47.602496][ T4076] syz.3.201: attempt to access beyond end of device
[   47.602496][ T4076] loop3: rw=2049, sector=178, nr_sectors = 8 limit=128
[   47.616684][ T4079] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   47.628063][ T4076] syz.3.201: attempt to access beyond end of device
[   47.628063][ T4076] loop3: rw=8390657, sector=184, nr_sectors = 2 limit=128
[   47.641703][ T4076] Buffer I/O error on dev loop3, logical block 92, lost async page write
[   47.660081][ T4091] loop2: detected capacity change from 0 to 8192
[   47.668061][ T4076] syz.3.201: attempt to access beyond end of device
[   47.668061][ T4076] loop3: rw=2049, sector=202, nr_sectors = 8 limit=128
[   47.693776][ T4076] Buffer I/O error on dev loop3, logical block 104, lost async page write
[   47.704733][ T4079] EXT4-fs (loop1): 1 truncate cleaned up
[   47.719137][ T4091] netlink: 12 bytes leftover after parsing attributes in process `syz.2.206'.
[   47.751333][ T4076] Buffer I/O error on dev loop3, logical block 108, lost async page write
[   47.790263][ T4079] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   47.825983][ T4076] Buffer I/O error on dev loop3, logical block 120, lost async page write
[   47.828927][ T4076] Buffer I/O error on dev loop3, logical block 124, lost async page write
[   47.830946][ T4076] Buffer I/O error on dev loop3, logical block 80, lost async page write
[   47.834907][ T4076] Buffer I/O error on dev loop3, logical block 84, lost async page write
[   48.035155][ T4102] loop0: detected capacity change from 0 to 1024
[   48.053242][ T4102] EXT4-fs: Ignoring removed nobh option
[   48.054072][ T4102] EXT4-fs: Ignoring removed nomblk_io_submit option
[   48.104189][ T4102] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   48.167882][ T4079] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   48.222049][ T4079] ext4: Unknown parameter '00000000000000000000f��v�$�(~���_5J7�;�M��C�
_������n;kb��Ş�G��V��}[�#�~�)gbe��Ͻ���d��nx�u{`�tS��_$��39��-�Qx�3m�R�6�ws��ƏU2}���c;!N'
[   48.493127][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.534972][ T4119] program syz.4.216 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   49.377198][ T4102] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.500146][ T4129] usb usb8: usbfs: process 4129 (syz.2.220) did not claim interface 0 before use
[   49.723199][   T29] kauditd_printk_skb: 22 callbacks suppressed
[   49.723219][   T29] audit: type=1400 audit(1769389854.932:371): avc:  denied  { getopt } for  pid=4146 comm="syz.2.227" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   49.791276][   T29] audit: type=1400 audit(1769389854.962:372): avc:  denied  { bind } for  pid=4144 comm="syz.4.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   49.810615][   T29] audit: type=1400 audit(1769389854.962:373): avc:  denied  { name_bind } for  pid=4144 comm="syz.4.225" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[   49.832343][   T29] audit: type=1400 audit(1769389854.962:374): avc:  denied  { node_bind } for  pid=4144 comm="syz.4.225" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[   49.853057][   T29] audit: type=1400 audit(1769389854.972:375): avc:  denied  { create } for  pid=4144 comm="syz.4.225" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   49.873748][   T29] audit: type=1400 audit(1769389854.972:376): avc:  denied  { write } for  pid=4144 comm="syz.4.225" name="file0" dev="tmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   49.895970][   T29] audit: type=1400 audit(1769389854.972:377): avc:  denied  { open } for  pid=4144 comm="syz.4.225" path="/41/file0" dev="tmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   49.935166][ T4143] loop0: detected capacity change from 0 to 8192
[   49.948020][ T4153] program syz.2.228 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   50.983359][   T29] audit: type=1400 audit(1769389856.192:378): avc:  denied  { unlink } for  pid=3315 comm="syz-executor" name="file0" dev="tmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   51.073080][   T29] audit: type=1400 audit(1769389856.272:379): avc:  denied  { read } for  pid=4130 comm="syz.1.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   51.204560][   T29] audit: type=1400 audit(1769389856.342:380): avc:  denied  { getopt } for  pid=4159 comm="syz.4.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   51.456921][ T4183] netlink: 4 bytes leftover after parsing attributes in process `syz.4.237'.
[   51.608191][ T4184] mmap: syz.4.237 (4184) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   52.505718][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.513242][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.927862][ T4183] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   52.961768][ T4191] netlink: 12 bytes leftover after parsing attributes in process `syz.1.235'.
[   52.970969][ T4191] netlink: 28 bytes leftover after parsing attributes in process `syz.1.235'.
[   52.994838][ T4183] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   53.009798][ T4194] loop3: detected capacity change from 0 to 128
[   53.062114][ T4194] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   53.111765][ T4194] ext4 filesystem being mounted at /42/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   53.176885][   T37] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   53.197366][   T37] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   53.206475][   T37] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   53.217501][   T37] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   53.291463][ T4211] netlink: 4 bytes leftover after parsing attributes in process `syz.4.241'.
[   53.386533][ T3314] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   53.578727][ T4219] program syz.1.245 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   53.606772][ T4213] loop3: detected capacity change from 0 to 8192
[   53.706506][ T4223] netlink: 20 bytes leftover after parsing attributes in process `syz.3.243'.
[   53.736580][ T4224] netlink: 20 bytes leftover after parsing attributes in process `syz.1.247'.
[   53.809390][ T4226] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(15)
[   53.816062][ T4226] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   53.823688][ T4226] vhci_hcd vhci_hcd.0: Device attached
[   53.828780][ T4231] loop4: detected capacity change from 0 to 512
[   53.863523][ T4233] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(18)
[   53.870162][ T4233] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   53.877832][ T4233] vhci_hcd vhci_hcd.0: Device attached
[   53.900133][ T4231] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   53.925605][ T4226] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(17)
[   53.932280][ T4226] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[   53.939929][ T4226] vhci_hcd vhci_hcd.0: Device attached
[   53.953253][ T4226] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[   53.966259][ T4231] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   53.977063][ T4226] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(23)
[   53.983698][ T4226] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   53.991413][ T4226] vhci_hcd vhci_hcd.0: Device attached
[   54.007760][ T4226] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(25)
[   54.014400][ T4226] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[   54.022136][ T4226] vhci_hcd vhci_hcd.0: Device attached
[   54.052476][ T4226] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[   54.064091][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.077996][ T4226] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(29)
[   54.084648][ T4226] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   54.092356][ T4226] vhci_hcd vhci_hcd.0: Device attached
[   54.097991][ T4202] usb 1-1: new low-speed USB device number 2 using vhci_hcd
[   54.128155][ T4233] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[   54.171899][ T4243] vhci_hcd: connection closed
[   54.172030][ T4228] vhci_hcd: connection reset by peer
[   54.172585][ T4239] vhci_hcd: connection closed
[   54.176974][   T52] vhci_hcd vhci_hcd.0: stop threads
[   54.192304][   T52] vhci_hcd vhci_hcd.0: release socket
[   54.197746][   T52] vhci_hcd vhci_hcd.0: disconnect device
[   54.199121][ T4234] vhci_hcd: connection closed
[   54.203508][ T4247] vhci_hcd: connection closed
[   54.207031][ T4257] netlink: 40 bytes leftover after parsing attributes in process `syz.3.254'.
[   54.213379][ T4251] vhci_hcd: connection closed
[   54.232264][   T52] vhci_hcd vhci_hcd.0: stop threads
[   54.242260][   T52] vhci_hcd vhci_hcd.0: release socket
[   54.247708][   T52] vhci_hcd vhci_hcd.0: disconnect device
[   54.273755][   T52] vhci_hcd vhci_hcd.0: stop threads
[   54.279045][   T52] vhci_hcd vhci_hcd.0: release socket
[   54.284511][   T52] vhci_hcd vhci_hcd.0: disconnect device
[   54.307503][   T52] vhci_hcd vhci_hcd.0: stop threads
[   54.312756][   T52] vhci_hcd vhci_hcd.0: release socket
[   54.318244][   T52] vhci_hcd vhci_hcd.0: disconnect device
[   54.337578][   T52] vhci_hcd vhci_hcd.0: stop threads
[   54.342845][   T52] vhci_hcd vhci_hcd.0: release socket
[   54.348368][   T52] vhci_hcd vhci_hcd.0: disconnect device
[   54.366866][   T52] vhci_hcd vhci_hcd.0: stop threads
[   54.372280][   T52] vhci_hcd vhci_hcd.0: release socket
[   54.377829][   T52] vhci_hcd vhci_hcd.0: disconnect device
[   54.385417][ T4258] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   54.771925][ T4261] netlink: 40 bytes leftover after parsing attributes in process `syz.1.255'.
[   54.797121][ T4263] program syz.2.256 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   54.901250][ T4267] netlink: 176 bytes leftover after parsing attributes in process `syz.2.258'.
[   54.941820][   T29] kauditd_printk_skb: 7 callbacks suppressed
[   54.941895][   T29] audit: type=1400 audit(1769389860.152:388): avc:  denied  { create } for  pid=4266 comm="syz.2.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[   54.967497][   T29] audit: type=1400 audit(1769389860.152:389): avc:  denied  { ioctl } for  pid=4266 comm="syz.2.258" path="socket:[8281]" dev="sockfs" ino=8281 ioctlcmd=0x89ee scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[   55.212913][   T29] audit: type=1400 audit(1769389860.262:390): avc:  denied  { ioctl } for  pid=4272 comm="syz.2.259" path="socket:[8288]" dev="sockfs" ino=8288 ioctlcmd=0xf506 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[   56.347228][ T4275] loop3: detected capacity change from 0 to 8192
[   56.373078][ T4282] bridge1: entered allmulticast mode
[   56.403080][ T4283] loop0: detected capacity change from 0 to 256
[   56.441240][ T4283] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   56.513182][ T4283] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008)
[   56.521277][ T4283] FAT-fs (loop0): Filesystem has been set read-only
[   56.606866][ T4296] FAULT_INJECTION: forcing a failure.
[   56.606866][ T4296] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   56.620304][ T4296] CPU: 0 UID: 0 PID: 4296 Comm: syz.1.268 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   56.620369][ T4296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   56.620382][ T4296] Call Trace:
[   56.620391][ T4296]  <TASK>
[   56.620401][ T4296]  __dump_stack+0x1d/0x30
[   56.620433][ T4296]  dump_stack_lvl+0x95/0xd0
[   56.620458][ T4296]  dump_stack+0x15/0x1b
[   56.620549][ T4296]  should_fail_ex+0x263/0x280
[   56.620590][ T4296]  should_fail+0xb/0x20
[   56.620622][ T4296]  should_fail_usercopy+0x1a/0x20
[   56.620707][ T4296]  _copy_to_user+0x20/0xa0
[   56.620727][ T4296]  simple_read_from_buffer+0xb5/0x130
[   56.620768][ T4296]  proc_fail_nth_read+0x10e/0x150
[   56.620797][ T4296]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   56.620903][ T4296]  vfs_read+0x1ab/0x7f0
[   56.620941][ T4296]  ? __rcu_read_unlock+0x4e/0x70
[   56.620982][ T4296]  ? __fget_files+0x184/0x1c0
[   56.621068][ T4296]  ? fput+0x8f/0xc0
[   56.621103][ T4296]  ? mutex_lock+0x57/0x90
[   56.621133][ T4296]  ksys_read+0xdc/0x1a0
[   56.621220][ T4296]  __x64_sys_read+0x40/0x50
[   56.621251][ T4296]  x64_sys_call+0x2889/0x3000
[   56.621351][ T4296]  do_syscall_64+0xc0/0x2a0
[   56.621458][ T4296]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   56.621542][ T4296] RIP: 0033:0x7f16a3f7b58e
[   56.621558][ T4296] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   56.621576][ T4296] RSP: 002b:00007f16a2a16fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   56.621662][ T4296] RAX: ffffffffffffffda RBX: 00007f16a2a176c0 RCX: 00007f16a3f7b58e
[   56.621681][ T4296] RDX: 000000000000000f RSI: 00007f16a2a170a0 RDI: 0000000000000006
[   56.621699][ T4296] RBP: 00007f16a2a17090 R08: 0000000000000000 R09: 0000000000000000
[   56.621716][ T4296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   56.621735][ T4296] R13: 00007f16a4236038 R14: 00007f16a4235fa0 R15: 00007ffe7eefaac8
[   56.621755][ T4296]  </TASK>
[   57.005834][ T4310] loop3: detected capacity change from 0 to 8192
[   57.028023][ T4307] loop0: detected capacity change from 0 to 1024
[   57.039382][   T29] audit: type=1400 audit(1769389862.242:391): avc:  denied  { ioctl } for  pid=4308 comm="syz.1.273" path="socket:[7347]" dev="sockfs" ino=7347 ioctlcmd=0x9413 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   57.071036][ T4307] EXT4-fs: Ignoring removed nobh option
[   57.077395][ T4307] EXT4-fs: Ignoring removed nomblk_io_submit option
[   57.122065][ T4307] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   57.778670][ T4329] program syz.2.276 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   57.833182][ T4335] FAULT_INJECTION: forcing a failure.
[   57.833182][ T4335] name failslab, interval 1, probability 0, space 0, times 0
[   57.845999][ T4335] CPU: 0 UID: 0 PID: 4335 Comm: syz.3.277 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   57.846100][ T4335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   57.846181][ T4335] Call Trace:
[   57.846190][ T4335]  <TASK>
[   57.846201][ T4335]  __dump_stack+0x1d/0x30
[   57.846233][ T4335]  dump_stack_lvl+0x95/0xd0
[   57.846289][ T4335]  dump_stack+0x15/0x1b
[   57.846418][ T4335]  should_fail_ex+0x263/0x280
[   57.846608][ T4335]  should_failslab+0x8c/0xb0
[   57.846639][ T4335]  __kmalloc_noprof+0xb8/0x580
[   57.846672][ T4335]  ? bpf_test_init+0x86/0x130
[   57.846797][ T4335]  bpf_test_init+0x86/0x130
[   57.846837][ T4335]  bpf_prog_test_run_skb+0x2b5/0xf50
[   57.846876][ T4335]  ? kstrtouint+0x76/0xc0
[   57.847023][ T4335]  ? __rcu_read_unlock+0x4e/0x70
[   57.847063][ T4335]  ? __fget_files+0x184/0x1c0
[   57.847176][ T4335]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[   57.847217][ T4335]  bpf_prog_test_run+0x204/0x340
[   57.847336][ T4335]  __sys_bpf+0x4c0/0x7b0
[   57.847381][ T4335]  __x64_sys_bpf+0x41/0x50
[   57.847413][ T4335]  x64_sys_call+0x28e1/0x3000
[   57.847503][ T4335]  do_syscall_64+0xc0/0x2a0
[   57.847546][ T4335]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   57.847595][ T4335] RIP: 0033:0x7f39706cacb9
[   57.847615][ T4335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   57.847677][ T4335] RSP: 002b:00007f396f127028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   57.847702][ T4335] RAX: ffffffffffffffda RBX: 00007f3970945fa0 RCX: 00007f39706cacb9
[   57.847757][ T4335] RDX: 0000000000000023 RSI: 0000200000000240 RDI: 000000000000000a
[   57.847774][ T4335] RBP: 00007f396f127090 R08: 0000000000000000 R09: 0000000000000000
[   57.847808][ T4335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   57.847825][ T4335] R13: 00007f3970946038 R14: 00007f3970945fa0 R15: 00007ffd4a8ab0b8
[   57.847853][ T4335]  </TASK>
[   58.067283][ T4333] loop1: detected capacity change from 0 to 8192
[   58.086172][ T4338] FAULT_INJECTION: forcing a failure.
[   58.086172][ T4338] name failslab, interval 1, probability 0, space 0, times 0
[   58.098973][ T4338] CPU: 0 UID: 0 PID: 4338 Comm: syz.3.281 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   58.099079][ T4338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   58.099094][ T4338] Call Trace:
[   58.099101][ T4338]  <TASK>
[   58.099109][ T4338]  __dump_stack+0x1d/0x30
[   58.099136][ T4338]  dump_stack_lvl+0x95/0xd0
[   58.099167][ T4338]  dump_stack+0x15/0x1b
[   58.099188][ T4338]  should_fail_ex+0x263/0x280
[   58.099224][ T4338]  should_failslab+0x8c/0xb0
[   58.099311][ T4338]  kmem_cache_alloc_node_noprof+0x6a/0x4a0
[   58.099338][ T4338]  ? __alloc_skb+0x2f0/0x4b0
[   58.099439][ T4338]  __alloc_skb+0x2f0/0x4b0
[   58.099470][ T4338]  ? __alloc_skb+0x219/0x4b0
[   58.099512][ T4338]  netlink_alloc_large_skb+0xbf/0xf0
[   58.099546][ T4338]  netlink_sendmsg+0x40c/0x6f0
[   58.099569][ T4338]  ? __pfx_netlink_sendmsg+0x10/0x10
[   58.099590][ T4338]  ____sys_sendmsg+0x5af/0x600
[   58.099614][ T4338]  ___sys_sendmsg+0x195/0x1e0
[   58.099733][ T4338]  __x64_sys_sendmsg+0xd4/0x160
[   58.099759][ T4338]  x64_sys_call+0x17ba/0x3000
[   58.099813][ T4338]  do_syscall_64+0xc0/0x2a0
[   58.099848][ T4338]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   58.099936][ T4338] RIP: 0033:0x7f39706cacb9
[   58.099953][ T4338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   58.099984][ T4338] RSP: 002b:00007f396f127028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   58.100005][ T4338] RAX: ffffffffffffffda RBX: 00007f3970945fa0 RCX: 00007f39706cacb9
[   58.100059][ T4338] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000004
[   58.100073][ T4338] RBP: 00007f396f127090 R08: 0000000000000000 R09: 0000000000000000
[   58.100087][ T4338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   58.100100][ T4338] R13: 00007f3970946038 R14: 00007f3970945fa0 R15: 00007ffd4a8ab0b8
[   58.100122][ T4338]  </TASK>
[   58.159522][ T4333] FAULT_INJECTION: forcing a failure.
[   58.159522][ T4333] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   58.162291][ T4307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.166112][ T4333] CPU: 1 UID: 0 PID: 4333 Comm: syz.1.279 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   58.166226][ T4333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   58.166291][ T4333] Call Trace:
[   58.166312][ T4333]  <TASK>
[   58.166352][ T4333]  __dump_stack+0x1d/0x30
[   58.166441][ T4333]  dump_stack_lvl+0x95/0xd0
[   58.166516][ T4333]  dump_stack+0x15/0x1b
[   58.166587][ T4333]  should_fail_ex+0x263/0x280
[   58.166711][ T4333]  should_fail+0xb/0x20
[   58.166866][ T4333]  should_fail_usercopy+0x1a/0x20
[   58.166982][ T4333]  _copy_to_user+0x20/0xa0
[   58.167054][ T4333]  simple_read_from_buffer+0xb5/0x130
[   58.167197][ T4333]  proc_fail_nth_read+0x10e/0x150
[   58.167291][ T4333]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   58.167465][ T4333]  vfs_read+0x1ab/0x7f0
[   58.167616][ T4333]  ? __rcu_read_unlock+0x4e/0x70
[   58.167730][ T4333]  ? __fget_files+0x184/0x1c0
[   58.167866][ T4333]  ? mutex_lock+0x57/0x90
[   58.167947][ T4333]  ksys_read+0xdc/0x1a0
[   58.168007][ T4333]  __x64_sys_read+0x40/0x50
[   58.168069][ T4333]  x64_sys_call+0x2889/0x3000
[   58.168182][ T4333]  do_syscall_64+0xc0/0x2a0
[   58.168305][ T4333]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   58.168425][ T4333] RIP: 0033:0x7f16a3f7b58e
[   58.168550][ T4333] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   58.168623][ T4333] RSP: 002b:00007f16a2a16fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   58.168685][ T4333] RAX: ffffffffffffffda RBX: 00007f16a2a176c0 RCX: 00007f16a3f7b58e
[   58.168714][ T4333] RDX: 000000000000000f RSI: 00007f16a2a170a0 RDI: 0000000000000004
[   58.168726][ T4333] RBP: 00007f16a2a17090 R08: 0000000000000000 R09: 0000000000000000
[   58.168738][ T4333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   58.168750][ T4333] R13: 00007f16a4236038 R14: 00007f16a4235fa0 R15: 00007ffe7eefaac8
[   58.168854][ T4333]  </TASK>
[   58.195879][ T4341] netlink: 12 bytes leftover after parsing attributes in process `syz.2.280'.
[   58.527721][ T4340] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[   58.536955][ T4340] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   58.557562][ T4345] netlink: 40 bytes leftover after parsing attributes in process `syz.3.283'.
[   58.613925][   T29] audit: type=1400 audit(1769389863.822:392): avc:  denied  { read write } for  pid=4350 comm="syz.4.285" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   58.637174][   T29] audit: type=1400 audit(1769389863.822:393): avc:  denied  { open } for  pid=4350 comm="syz.4.285" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   58.664510][   T29] audit: type=1400 audit(1769389863.872:394): avc:  denied  { create } for  pid=4353 comm="syz.2.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   58.697838][ T4352] gretap1: entered promiscuous mode
[   58.704440][   T29] audit: type=1400 audit(1769389863.912:395): avc:  denied  { ioctl } for  pid=4350 comm="syz.4.285" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   58.763869][   T29] audit: type=1400 audit(1769389863.972:396): avc:  denied  { connect } for  pid=4360 comm="syz.4.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   58.786748][ T4361] netlink: 28 bytes leftover after parsing attributes in process `syz.4.289'.
[   58.801483][   T29] audit: type=1400 audit(1769389863.972:397): avc:  denied  { ioctl } for  pid=4360 comm="syz.4.289" path="socket:[8548]" dev="sockfs" ino=8548 ioctlcmd=0xb100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   58.816900][ T4361] netlink: 80 bytes leftover after parsing attributes in process `syz.4.289'.
[   58.850870][ T4361] 9pnet_fd: Insufficient options for proto=fd
[   58.858663][ T4366] program syz.0.291 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   58.868478][ T4364] loop2: detected capacity change from 0 to 8192
[   58.918689][ T4370] FAULT_INJECTION: forcing a failure.
[   58.918689][ T4370] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   58.931942][ T4370] CPU: 0 UID: 0 PID: 4370 Comm: syz.0.293 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   58.931971][ T4370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   58.931984][ T4370] Call Trace:
[   58.931990][ T4370]  <TASK>
[   58.931998][ T4370]  __dump_stack+0x1d/0x30
[   58.932039][ T4370]  dump_stack_lvl+0x95/0xd0
[   58.932068][ T4370]  dump_stack+0x15/0x1b
[   58.932095][ T4370]  should_fail_ex+0x263/0x280
[   58.932134][ T4370]  should_fail+0xb/0x20
[   58.932234][ T4370]  should_fail_usercopy+0x1a/0x20
[   58.932276][ T4370]  _copy_from_user+0x1c/0xb0
[   58.932367][ T4370]  smc_setsockopt+0x2ac/0x750
[   58.932439][ T4370]  ? __pfx_smc_setsockopt+0x10/0x10
[   58.932478][ T4370]  __sys_setsockopt+0x184/0x200
[   58.932600][ T4370]  __x64_sys_setsockopt+0x64/0x80
[   58.932694][ T4370]  x64_sys_call+0x21d5/0x3000
[   58.932785][ T4370]  do_syscall_64+0xc0/0x2a0
[   58.932821][ T4370]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   58.932919][ T4370] RIP: 0033:0x7f8249a5acb9
[   58.932936][ T4370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   58.932954][ T4370] RSP: 002b:00007f82484b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   58.932984][ T4370] RAX: ffffffffffffffda RBX: 00007f8249cd5fa0 RCX: 00007f8249a5acb9
[   58.933002][ T4370] RDX: 0000000000000005 RSI: 0000000000000006 RDI: 0000000000000003
[   58.933054][ T4370] RBP: 00007f82484b7090 R08: 0000000000000004 R09: 0000000000000000
[   58.933067][ T4370] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001
[   58.933080][ T4370] R13: 00007f8249cd6038 R14: 00007f8249cd5fa0 R15: 00007fff0008a498
[   58.933101][ T4370]  </TASK>
[   59.147877][ T4202] usb 1-1: enqueue for inactive port 0
[   59.153437][ T4202] usb 1-1: enqueue for inactive port 0
[   59.166105][ T4375] loop0: detected capacity change from 0 to 1024
[   59.179296][ T4375] EXT4-fs: Ignoring removed nobh option
[   59.185961][ T4375] EXT4-fs: Ignoring removed nomblk_io_submit option
[   59.221226][ T4377] netlink: 8 bytes leftover after parsing attributes in process `syz.3.296'.
[   59.227883][ T4202] vhci_hcd vhci_hcd.0: vhci_device speed not set
[   59.233159][ T4375] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   59.260383][ T4377] loop3: detected capacity change from 0 to 2048
[   59.499930][ T4396] loop4: detected capacity change from 0 to 512
[   59.519121][ T4396] msdos: Unknown parameter 'n5���!B](��odots'
[   59.673735][ T4406] loop1: detected capacity change from 0 to 512
[   59.694894][ T4406] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   59.709353][ T4406] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.306: invalid indirect mapped block 4294967295 (level 1)
[   59.732745][ T4413] netlink: 40 bytes leftover after parsing attributes in process `syz.4.307'.
[   59.737971][ T4406] EXT4-fs (loop1): Remounting filesystem read-only
[   59.759959][ T4406] EXT4-fs (loop1): 2 truncates cleaned up
[   59.778296][ T4406] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   59.844680][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   59.954366][   T29] kauditd_printk_skb: 10 callbacks suppressed
[   59.954399][   T29] audit: type=1400 audit(1769389865.162:408): avc:  denied  { read } for  pid=4419 comm="syz.2.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   60.011282][ T4375] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.060727][ T4425] EXT4-fs error (device loop0): ext4_iget_extra_inode:5073: inode #15: comm syz.0.311: corrupted in-inode xattr: e_name out of bounds
[   60.083159][ T4425] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.311: couldn't read orphan inode 15 (err -117)
[   60.095655][ T4425] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   60.146066][ T4425] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   60.157686][ T4425] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it
[   60.167905][ T4425] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.311: Corrupt directory, running e2fsck is recommended
[   60.199313][ T4425] netlink: 4 bytes leftover after parsing attributes in process `syz.0.311'.
[   60.213427][   T29] audit: type=1400 audit(1769389865.422:409): avc:  denied  { getopt } for  pid=4432 comm="syz.3.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   60.253899][ T4425] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   60.262216][   T29] audit: type=1400 audit(1769389865.462:410): avc:  denied  { execute } for  pid=4436 comm="syz.3.315" dev="hugetlbfs" ino=7592 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[   60.265584][ T4425] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it
[   60.288505][ T4437] process 'syz.3.315' launched '/dev/fd/7' with NULL argv: empty string added
[   60.297866][ T4425] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.311: Corrupt directory, running e2fsck is recommended
[   60.308279][   T29] audit: type=1400 audit(1769389865.512:411): avc:  denied  { execute_no_trans } for  pid=4436 comm="syz.3.315" path=2F6D656D66643A5B0BDB58AE5B1A02FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="hugetlbfs" ino=7592 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[   60.379266][ T4439] netlink: 140 bytes leftover after parsing attributes in process `syz.1.316'.
[   60.406167][ T4441] netlink: 'syz.3.317': attribute type 15 has an invalid length.
[   60.422568][ T4441] bio_check_eod: 19 callbacks suppressed
[   60.422588][ T4441] syz.3.317: attempt to access beyond end of device
[   60.422588][ T4441] loop3: rw=2049, sector=154, nr_sectors = 8 limit=128
[   60.454486][   T29] audit: type=1400 audit(1769389865.652:412): avc:  denied  { create } for  pid=4442 comm="syz.1.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[   60.475128][   T29] audit: type=1400 audit(1769389865.662:413): avc:  denied  { write } for  pid=4442 comm="syz.1.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[   60.497890][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.511419][ T4441] syz.3.317: attempt to access beyond end of device
[   60.511419][ T4441] loop3: rw=8390657, sector=160, nr_sectors = 2 limit=128
[   60.525122][ T4441] buffer_io_error: 4 callbacks suppressed
[   60.525138][ T4441] Buffer I/O error on dev loop3, logical block 80, lost async page write
[   60.567585][ T4451] netlink: 28 bytes leftover after parsing attributes in process `syz.0.319'.
[   60.568469][ T4449] program syz.1.320 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   60.596555][ T4441] syz.3.317: attempt to access beyond end of device
[   60.596555][ T4441] loop3: rw=8390657, sector=154, nr_sectors = 2 limit=128
[   60.610670][ T4441] Buffer I/O error on dev loop3, logical block 77, lost async page write
[   60.629055][ T4451] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=4451 comm=syz.0.319
[   60.640108][ T4441] syz.3.317: attempt to access beyond end of device
[   60.640108][ T4441] loop3: rw=8390657, sector=156, nr_sectors = 2 limit=128
[   60.655077][ T4441] Buffer I/O error on dev loop3, logical block 78, lost async page write
[   60.687486][ T4441] syz.3.317: attempt to access beyond end of device
[   60.687486][ T4441] loop3: rw=8390657, sector=158, nr_sectors = 2 limit=128
[   60.701123][ T4441] Buffer I/O error on dev loop3, logical block 79, lost async page write
[   60.737370][ T4441] syz.3.317: attempt to access beyond end of device
[   60.737370][ T4441] loop3: rw=8390657, sector=160, nr_sectors = 2 limit=128
[   60.751173][ T4441] Buffer I/O error on dev loop3, logical block 80, lost async page write
[   60.765263][ T4451] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   60.798431][ T4451] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   60.802243][ T4447] EXT4-fs: Ignoring removed nobh option
[   60.816758][ T4447] EXT4-fs: Ignoring removed nomblk_io_submit option
[   60.818557][ T4451] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.867872][ T4462] FAULT_INJECTION: forcing a failure.
[   60.867872][ T4462] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   60.881002][ T4462] CPU: 1 UID: 0 PID: 4462 Comm: syz.1.324 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   60.881036][ T4462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   60.881053][ T4462] Call Trace:
[   60.881062][ T4462]  <TASK>
[   60.881072][ T4462]  __dump_stack+0x1d/0x30
[   60.881130][ T4462]  dump_stack_lvl+0x95/0xd0
[   60.881160][ T4462]  dump_stack+0x15/0x1b
[   60.881187][ T4462]  should_fail_ex+0x263/0x280
[   60.881227][ T4462]  should_fail+0xb/0x20
[   60.881365][ T4462]  should_fail_usercopy+0x1a/0x20
[   60.881410][ T4462]  _copy_to_user+0x20/0xa0
[   60.881513][ T4462]  simple_read_from_buffer+0xb5/0x130
[   60.881552][ T4462]  proc_fail_nth_read+0x10e/0x150
[   60.881586][ T4462]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   60.881689][ T4462]  vfs_read+0x1ab/0x7f0
[   60.881714][ T4462]  ? __rcu_read_unlock+0x4e/0x70
[   60.881771][ T4462]  ? __fget_files+0x184/0x1c0
[   60.881828][ T4462]  ? mutex_lock+0x57/0x90
[   60.881874][ T4462]  ksys_read+0xdc/0x1a0
[   60.881894][ T4462]  __x64_sys_read+0x40/0x50
[   60.881913][ T4462]  x64_sys_call+0x2889/0x3000
[   60.881968][ T4462]  do_syscall_64+0xc0/0x2a0
[   60.882040][ T4462]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   60.882164][ T4462] RIP: 0033:0x7f16a3f7b58e
[   60.882180][ T4462] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   60.882200][ T4462] RSP: 002b:00007f16a2a16fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   60.882225][ T4462] RAX: ffffffffffffffda RBX: 00007f16a2a176c0 RCX: 00007f16a3f7b58e
[   60.882244][ T4462] RDX: 000000000000000f RSI: 00007f16a2a170a0 RDI: 0000000000000004
[   60.882261][ T4462] RBP: 00007f16a2a17090 R08: 0000000000000000 R09: 0000000000000000
[   60.882279][ T4462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   60.882295][ T4462] R13: 00007f16a4236038 R14: 00007f16a4235fa0 R15: 00007ffe7eefaac8
[   60.882316][ T4462]  </TASK>
[   60.884059][ T4461] capability: warning: `syz.2.325' uses deprecated v2 capabilities in a way that may be insecure
[   60.970491][ T4447] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   61.064687][ T4451] netlink: 48 bytes leftover after parsing attributes in process `syz.0.319'.
[   61.222917][   T29] audit: type=1400 audit(1769389866.432:414): avc:  denied  { read } for  pid=4478 comm="syz.2.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[   61.273127][ T4469] EXT4-fs: Ignoring removed bh option
[   61.320642][ T4469] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[   61.334025][ T4469] EXT4-fs (loop3): 1 truncate cleaned up
[   61.337737][   T29] audit: type=1400 audit(1769389866.472:415): avc:  denied  { append } for  pid=4478 comm="syz.2.330" name="mISDNtimer" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   61.349184][ T4469] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   61.362825][   T29] audit: type=1400 audit(1769389866.482:416): avc:  denied  { create } for  pid=4467 comm="syz.3.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   61.394008][   T29] audit: type=1400 audit(1769389866.492:417): avc:  denied  { getopt } for  pid=4478 comm="syz.2.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[   61.446715][ T4486] set_capacity_and_notify: 5 callbacks suppressed
[   61.446735][ T4486] loop0: detected capacity change from 0 to 2048
[   61.469871][ T4469] EXT4-fs error (device loop3): ext4_search_dir:1474: inode #2: block 13: comm syz.3.327: bad entry in directory: inode out of bounds - offset=60, inode=3087, rec_len=16, size=1024 fake=0
[   61.499761][ T4447] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   61.579462][ T4493] pimreg: entered allmulticast mode
[   61.586804][ T4486] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   61.601871][ T4493] pimreg: left allmulticast mode
[   61.632258][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   61.651996][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   61.694886][ T4499] FAULT_INJECTION: forcing a failure.
[   61.694886][ T4499] name failslab, interval 1, probability 0, space 0, times 0
[   61.707767][ T4499] CPU: 1 UID: 0 PID: 4499 Comm: syz.3.336 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   61.707800][ T4499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   61.707816][ T4499] Call Trace:
[   61.707824][ T4499]  <TASK>
[   61.707883][ T4499]  __dump_stack+0x1d/0x30
[   61.707924][ T4499]  dump_stack_lvl+0x95/0xd0
[   61.707958][ T4499]  dump_stack+0x15/0x1b
[   61.707990][ T4499]  should_fail_ex+0x263/0x280
[   61.708084][ T4499]  should_failslab+0x8c/0xb0
[   61.708112][ T4499]  kmem_cache_alloc_node_noprof+0x6a/0x4a0
[   61.708178][ T4499]  ? __alloc_skb+0x2f0/0x4b0
[   61.708255][ T4499]  __alloc_skb+0x2f0/0x4b0
[   61.708284][ T4499]  ? __alloc_skb+0x219/0x4b0
[   61.708315][ T4499]  netlink_alloc_large_skb+0xbf/0xf0
[   61.708400][ T4499]  netlink_sendmsg+0x40c/0x6f0
[   61.708427][ T4499]  ? __pfx_netlink_sendmsg+0x10/0x10
[   61.708446][ T4499]  ____sys_sendmsg+0x5af/0x600
[   61.708468][ T4499]  ___sys_sendmsg+0x195/0x1e0
[   61.708503][ T4499]  __x64_sys_sendmsg+0xd4/0x160
[   61.708538][ T4499]  x64_sys_call+0x17ba/0x3000
[   61.708566][ T4499]  do_syscall_64+0xc0/0x2a0
[   61.708606][ T4499]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   61.708645][ T4499] RIP: 0033:0x7f39706cacb9
[   61.708660][ T4499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   61.708681][ T4499] RSP: 002b:00007f396f127028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   61.708707][ T4499] RAX: ffffffffffffffda RBX: 00007f3970945fa0 RCX: 00007f39706cacb9
[   61.708726][ T4499] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004
[   61.708743][ T4499] RBP: 00007f396f127090 R08: 0000000000000000 R09: 0000000000000000
[   61.708760][ T4499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   61.708809][ T4499] R13: 00007f3970946038 R14: 00007f3970945fa0 R15: 00007ffd4a8ab0b8
[   61.708871][ T4499]  </TASK>
[   61.910999][   T10] usb usb2-port1: attempt power cycle
[   61.948527][ T4502] loop2: detected capacity change from 0 to 512
[   61.962025][ T4505] sctp: [Deprecated]: syz.3.340 (pid 4505) Use of int in maxseg socket option.
[   61.962025][ T4505] Use struct sctp_assoc_value instead
[   61.977067][ T4502] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.339: bg 0: block 393: padding at end of block bitmap is not set
[   62.056155][ T4507] loop1: detected capacity change from 0 to 1024
[   62.069196][ T4507] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled
[   62.098733][ T4507] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   62.917751][ T4502] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6689: Corrupt filesystem
[   62.927900][ T4508] loop0: detected capacity change from 0 to 8192
[   62.936726][ T4487] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.332: missing EA_INODE flag
[   62.970259][ T4487] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.332: error while reading EA inode 11 err=-117
[   62.989912][ T4502] EXT4-fs (loop2): 2 truncates cleaned up
[   63.015685][ T4502] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   63.034216][ T4514] FAULT_INJECTION: forcing a failure.
[   63.034216][ T4514] name failslab, interval 1, probability 0, space 0, times 0
[   63.047183][ T4514] CPU: 0 UID: 0 PID: 4514 Comm: syz.0.337 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   63.047218][ T4514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   63.047298][ T4514] Call Trace:
[   63.047307][ T4514]  <TASK>
[   63.047318][ T4514]  __dump_stack+0x1d/0x30
[   63.047354][ T4514]  dump_stack_lvl+0x95/0xd0
[   63.047396][ T4514]  dump_stack+0x15/0x1b
[   63.047423][ T4514]  should_fail_ex+0x263/0x280
[   63.047464][ T4514]  should_failslab+0x8c/0xb0
[   63.047554][ T4514]  kmem_cache_alloc_noprof+0x68/0x490
[   63.047588][ T4514]  ? io_submit_one+0xcf/0x1350
[   63.047624][ T4514]  io_submit_one+0xcf/0x1350
[   63.047669][ T4514]  __se_sys_io_submit+0xfb/0x280
[   63.047711][ T4514]  __x64_sys_io_submit+0x43/0x50
[   63.047738][ T4514]  x64_sys_call+0x2e40/0x3000
[   63.047772][ T4514]  do_syscall_64+0xc0/0x2a0
[   63.047869][ T4514]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   63.047905][ T4514] RIP: 0033:0x7f8249a5acb9
[   63.047947][ T4514] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   63.047971][ T4514] RSP: 002b:00007f8248496028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
[   63.047997][ T4514] RAX: ffffffffffffffda RBX: 00007f8249cd6090 RCX: 00007f8249a5acb9
[   63.048084][ T4514] RDX: 0000200000001d00 RSI: 0000000000000001 RDI: 00007f824a80f000
[   63.048102][ T4514] RBP: 00007f8248496090 R08: 0000000000000000 R09: 0000000000000000
[   63.048119][ T4514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   63.048135][ T4514] R13: 00007f8249cd6128 R14: 00007f8249cd6090 R15: 00007fff0008a498
[   63.048210][ T4514]  </TASK>
[   63.301187][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   63.395594][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   63.504350][ T4523] loop3: detected capacity change from 0 to 8192
[   63.564077][ T4535] loop1: detected capacity change from 0 to 1024
[   63.579580][ T4533] __nla_validate_parse: 2 callbacks suppressed
[   63.579597][ T4533] netlink: 4 bytes leftover after parsing attributes in process `syz.2.344'.
[   63.607686][ T4535] EXT4-fs: Ignoring removed nobh option
[   63.615560][ T4535] EXT4-fs: Ignoring removed nomblk_io_submit option
[   63.630842][ T4538] netlink: 36 bytes leftover after parsing attributes in process `syz.3.342'.
[   63.647614][ T4537] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4537 comm=syz.2.344
[   63.668464][ T4535] EXT4-fs (loop1): can't mount with commit=, fs mounted w/o journal
[   63.706604][ T4535] geneve2: entered promiscuous mode
[   63.749667][ T4544] netlink: 68 bytes leftover after parsing attributes in process `syz.2.349'.
[   63.813134][ T4546] netlink: 4 bytes leftover after parsing attributes in process `syz.1.350'.
[   63.851027][ T4538] ==================================================================
[   63.859163][ T4538] BUG: KCSAN: data-race in fat16_ent_put / fat_mirror_bhs
[   63.866316][ T4538] 
[   63.868666][ T4538] write to 0xffff88812930227e of 2 bytes by task 4523 on cpu 0:
[   63.876317][ T4538]  fat16_ent_put+0x28/0x60
[   63.880770][ T4538]  fat_alloc_clusters+0x57b/0xc50
[   63.885845][ T4538]  fat_get_block+0x258/0x5e0
[   63.890493][ T4538]  __block_write_begin_int+0x400/0xf90
[   63.895998][ T4538]  cont_write_begin+0x5fe/0x970
[   63.900887][ T4538]  fat_write_begin+0x4f/0xe0
[   63.905519][ T4538]  cont_write_begin+0x1b0/0x970
[   63.910411][ T4538]  fat_write_begin+0x4f/0xe0
[   63.915040][ T4538]  generic_cont_expand_simple+0xb0/0x150
[   63.920720][ T4538]  fat_cont_expand+0x3e/0x170
[   63.925462][ T4538]  fat_setattr+0x2a4/0x8a0
[   63.929909][ T4538]  notify_change+0x872/0x8f0
[   63.934534][ T4538]  do_ftruncate+0x349/0x3d0
[   63.939068][ T4538]  __x64_sys_ftruncate+0x68/0xc0
[   63.944040][ T4538]  x64_sys_call+0x2e35/0x3000
[   63.948754][ T4538]  do_syscall_64+0xc0/0x2a0
[   63.953297][ T4538]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   63.959216][ T4538] 
[   63.961558][ T4538] read to 0xffff888129302200 of 512 bytes by task 4538 on cpu 1:
[   63.969295][ T4538]  fat_mirror_bhs+0x1df/0x320
[   63.974021][ T4538]  fat_ent_write+0xd0/0xe0
[   63.978495][ T4538]  fat_chain_add+0x16c/0x490
[   63.983157][ T4538]  fat_get_block+0x46c/0x5e0
[   63.987793][ T4538]  __block_write_begin_int+0x400/0xf90
[   63.993385][ T4538]  cont_write_begin+0x5fe/0x970
[   63.998274][ T4538]  fat_write_begin+0x4f/0xe0
[   64.002900][ T4538]  cont_write_begin+0x1b0/0x970
[   64.007824][ T4538]  fat_write_begin+0x4f/0xe0
[   64.012454][ T4538]  generic_cont_expand_simple+0xb0/0x150
[   64.018140][ T4538]  fat_cont_expand+0x3e/0x170
[   64.022849][ T4538]  fat_fallocate+0x177/0x1c0
[   64.027465][ T4538]  vfs_fallocate+0x3b6/0x450
[   64.032083][ T4538]  __x64_sys_fallocate+0x7a/0xd0
[   64.037051][ T4538]  x64_sys_call+0x1cd4/0x3000
[   64.041768][ T4538]  do_syscall_64+0xc0/0x2a0
[   64.046316][ T4538]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   64.052273][ T4538] 
[   64.054620][ T4538] Reported by Kernel Concurrency Sanitizer on:
[   64.060796][ T4538] CPU: 1 UID: 0 PID: 4538 Comm: syz.3.342 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   64.070462][ T4538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   64.080544][ T4538] ==================================================================
[   64.137136][ T4548] loop2: detected capacity change from 0 to 512
[   64.161530][ T4548] EXT4-fs: inline encryption not supported
[   64.188458][ T4536] loop0: detected capacity change from 0 to 1024
[   64.233727][ T4548] EXT4-fs (loop2): revision level too high, forcing read-only mode
[   64.243003][ T4548] EXT4-fs (loop2): orphan cleanup on readonly fs
[   64.250877][ T4548] EXT4-fs (loop2): 1 orphan inode deleted
[   64.256899][   T31] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:1: Failed to release dquot type 1
[   64.273922][ T4536] EXT4-fs: Ignoring removed nobh option
[   64.297133][ T4536] EXT4-fs: Ignoring removed nomblk_io_submit option
[   64.314206][ T4548] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   64.352349][ T4554] loop4: detected capacity change from 0 to 8192
[   64.354426][ T4548] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   64.424811][ T4536] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   64.737757][   T10] usb usb2-port1: unable to enumerate USB device