last executing test programs:

7m0.000956904s ago: executing program 32 (id=53):
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00')
pread64(r0, 0x0, 0x0, 0x1000000300)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000001c0)=@ethtool_ringparam={0x11, 0x1, 0xf39, 0x2000004, 0x8cc, 0x10000, 0xd, 0x7fffffff, 0x7fff}})
sched_setscheduler(0x0, 0x2, 0x0)
r2 = getpid()
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0)
r3 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x44, 0x2, [@TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x9}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x5}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x4}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0xf}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x75}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x9b93}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x9}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x5}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c010}, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9, 0x2}, 0x0, 0x0, 0x800000, 0x1, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x42002)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x2004006, &(0x7f0000001180)=ANY=[], 0x25, 0x352, &(0x7f0000000c80)="$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")
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
rename(&(0x7f00000002c0)='./file0\x00', 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@nolazytime}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@dax}, {@resuid}, {@lazytime}, {@grpid}], [], 0x2c}, 0x84, 0x4f8, &(0x7f0000001340)="$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")
r5 = inotify_init()
inotify_add_watch(r5, &(0x7f0000000000)='./file0\x00', 0x10000320)
openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x60000, 0x3)
syz_io_uring_setup(0x7540, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0xfffffffc, 0xac}, &(0x7f0000000100), &(0x7f0000000440)=<r6=>0x0)
syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
r7 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112)
fcntl$notify(r1, 0x402, 0x3)
getdents(r7, &(0x7f0000001fc0)=""/184, 0xb8)

6m5.085906862s ago: executing program 33 (id=636):
munmap(&(0x7f0000003000/0x2000)=nil, 0x2000)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x40000000000008, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x2, @perf_config_ext={0xffffffff, 0xfc}, 0x6220, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x1, 0x1, 0x0, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000080), 0x8101000000000006}, 0x205, 0x0, 0x0, 0x0, 0x4, 0xfffffffd, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0)
write(r0, 0x0, 0xc03e)

4m19.731301256s ago: executing program 34 (id=1496):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r3=>0x0})
setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={r3, @dev={0xac, 0x14, 0x14, 0x36}, @multicast1}, 0xc)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_int(r1, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4)
recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0)
r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
connect$inet(r5, &(0x7f0000000100)={0x2, 0x4e23, @multicast1}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x10010, r5, 0x0)
write$selinux_load(r4, &(0x7f0000000000)={0xf97cff8c, 0x8, 'SE Linux', "55bcc91e218327ff45a77529803a7205d4d1b6f934273f4a559820c63fe7b92f78992b04bde3f12c82a3e55e42317b35d259e69aa549f906353285776fa92b7c3ebe54e943b774ddddac4f47c0b70859"}, 0x60)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r6=>0x0})
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r7, 0x83625fc5352ba305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x2000040)

2m52.966880184s ago: executing program 7 (id=2298):
r0 = gettid()
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
r5 = open(&(0x7f0000000240)='./file1\x00', 0x105342, 0x20)
sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, 0x0, 0x48080)
sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x24, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x4}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000844}, 0x40040)
ftruncate(r5, 0x2007ffc)
unshare(0x20000400)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xf}, 0x4, 0x0, 0x11000, 0x0, 0x400, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x80000000, 0x3}, 0x102802, 0x3, 0x0, 0x0, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet(r3, 0x0, 0x0, 0xc000)
r6 = openat$rtc(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
ioctl$RTC_SET_TIME(r6, 0x4024700a, &(0x7f00000007c0)={0x7, 0xb, 0x10, 0xb, 0x6, 0xff, 0x6, 0x11e, 0xffffffffffffffff})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e02000000000000"], 0x0, 0x37, 0x0, 0x1}, 0x28)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
sendfile(r5, r5, 0x0, 0x800000009)
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000))

2m51.422371342s ago: executing program 7 (id=2303):
socket$inet6(0xa, 0x2, 0x0)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x20)
r1 = socket$kcm(0x2, 0x1000000000000002, 0x0)
r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x14, 0x18, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000243f000000000000000800004d2401000400000018220000", @ANYRES32=r0, @ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0x4, 0x4, 0x4}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[r0, r0], &(0x7f0000000300)=[{0x4, 0x2, 0x1, 0xc}, {0x4, 0x1, 0x2, 0xb}], 0x10, 0x4}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000400)=r3, 0x4)
r4 = getpgrp(0x0)
perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x1886, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x7, 0x7, 0x9, 0x20000006, 0x2, 0x0, 0xfffffffc, 0x0, 0x2009}, r4, 0x0, 0xffffffffffffffff, 0x0)
ioctl$USBDEVFS_SETCONFIGURATION(r2, 0x80045505, &(0x7f0000000000)=0x1)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r5, 0x112, 0x9, &(0x7f0000000440)=0x5, 0x1)

2m51.220040506s ago: executing program 7 (id=2309):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1a, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000300000000000000fe02001085000000b700000095"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x100, 0x37, '\x00', 0x0, @tracing=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r4 = creat(&(0x7f00000002c0)='./file0\x00', 0xf)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socket(0x10, 0x803, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
r8 = open$dir(&(0x7f0000000080)='./file0\x00', 0x40000, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r8, 0x0)
write$cgroup_pid(r4, &(0x7f0000000100), 0x12)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r9, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000007c0)=[0x5], 0x0, 0x0, 0x4c}}, 0xa3)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0xc3)
ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0xfffffffc, 0x8003, 0x0, 0x4a, 0x5, "08c956e2fb9e1d9a6a84282758a862364727a3", 0xac})
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000140)=0xd)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r10=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10)
r11 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r11, 0x84, 0xa, &(0x7f0000000200)={0xf97e, 0x3, 0x0, 0x3f3644fd, 0x1, 0x80, 0x5, 0x2, r10}, &(0x7f0000000300)=0x20)

2m50.034831047s ago: executing program 7 (id=2326):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000500)=ANY=[@ANYRES8=0x0], 0x1, 0x322, &(0x7f0000000980)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105842, 0x0)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=<r1=>0x0)
r2 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0)
process_vm_writev(r2, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0)
r3 = accept4$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, &(0x7f00000000c0)=0x10, 0x81800)
r4 = socket$caif_stream(0x25, 0x1, 0x3)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x40000000015, 0x5, 0x0)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x8015, 0x3, 'dh\x00', 0x1, 0x4, 0x6d}, 0x2c)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_FLUSH(r7, 0x0, 0x485, 0x0, 0x0)
setsockopt$RDS_CONG_MONITOR(r6, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4)
sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="380000001800dd8d0000000000000000020000000000000500000000060015000200000014001680100008800c00038005000100"], 0x38}}, 0x0)
kcmp(r1, r2, 0x2, r3, r4)
writev(r0, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000e00)='t', 0x1}], 0x2)

2m49.762206459s ago: executing program 7 (id=2331):
r0 = socket$key(0xf, 0x3, 0x2)
r1 = dup2(r0, r0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r1)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r2)
sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={0x48, r3, 0x1, 0x0, 0x40000, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x20048083}, 0x20004080)
syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r2)
syz_mount_image$vfat(&(0x7f00000004c0), &(0x7f0000000080)='./file0\x00', 0x244cd1, &(0x7f00000014c0)={[{@fat=@dos1xfloppy}, {@fat=@fmask={'fmask', 0x3d, 0x9}}, {@rodir}, {@utf8}, {@shortname_winnt}, {@uni_xlateno}, {@numtail}, {@shortname_mixed}, {@fat=@gid}, {@uni_xlate}, {@uni_xlateno}, {@shortname_winnt}]}, 0xfe, 0x284, &(0x7f0000000700)="$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")
pselect6(0x40, &(0x7f0000000040)={0x9, 0x4, 0xa, 0x1, 0x1000, 0xbf, 0x400, 0xfffffffffffffffc}, &(0x7f00000000c0)={0x100, 0x2, 0x0, 0x7, 0x80000000, 0x8, 0xfffffffffffff40d, 0x8000}, &(0x7f0000000100)={0x7fff, 0x0, 0x8, 0x6, 0x8, 0x4, 0x9, 0x8}, &(0x7f0000000140)={0x77359400}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x4]}, 0x8})
openat$tun(0xffffffffffffff9c, 0x0, 0x2241, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000200)='./file0/file0\x00', 0x808719, &(0x7f0000000300)={[{@nogrpid}, {@oldalloc}, {@discard}, {@errors_remount}, {@mblk_io_submit, 0x0}, {@noauto_da_alloc}, {@mblk_io_submit}, {@journal_checksum}, {@mblk_io_submit}, {@i_version}, {@minixdf}, {@nolazytime}, {@dax_inode}, {@prjquota}, {@nouid32}, {@data_writeback}, {@resgid}], [{@smackfshat={'smackfshat', 0x3d, '-@):.#})#'}}, {@fsmagic={'fsmagic', 0x3d, 0x4}}, {@fsname={'fsname', 0x3d, 'errors=remount-ro'}}], 0x2c}, 0x2, 0x4fc, &(0x7f0000000e40)="$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")

2m49.419919419s ago: executing program 7 (id=2334):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]})
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, 0x0, 0x0)
connect$inet(r0, &(0x7f0000000280)={0x2, 0xfffd, @multicast1}, 0x10)

2m49.36448914s ago: executing program 35 (id=2334):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]})
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, 0x0, 0x0)
connect$inet(r0, &(0x7f0000000280)={0x2, 0xfffd, @multicast1}, 0x10)

2m17.790938669s ago: executing program 3 (id=2672):
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x800005, 0x32, 0xffffffffffffffff, 0x852ac000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x4, &(0x7f00000001c0)=@framed={{}, [@generic={0x81, 0x5, 0x0, 0x8}]}, &(0x7f0000000240)='GPL\x00', 0x8, 0x100d, &(0x7f0000002500)=""/4109, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x1800, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)

2m17.790470848s ago: executing program 3 (id=2673):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4)
sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0, 0x0, 0x0, 0xe0}}], 0x17fd147c801ae9af, 0xff00)

2m17.758407653s ago: executing program 3 (id=2675):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x3, &(0x7f0000000140)={[{@errors_remount}, {@noload}, {@noblock_validity}, {@bsdgroups}, {@nobarrier}]}, 0x1, 0x63c, &(0x7f0000000e40)="$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")
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00')
preadv(r0, &(0x7f0000000600)=[{&(0x7f0000000280)=""/215, 0xd7}], 0x1, 0x1006c, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0)
flock(r2, 0x1)
close(0x3)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, r3, 0xa522e09a44bebd7d, 0x70bd2c, 0xffffffff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r4}]}, 0x3c}}, 0x0)
unshare(0x2a020480)
r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fremovexattr(r5, &(0x7f0000000040)=@known='system.posix_acl_default\x00')

2m17.378287336s ago: executing program 3 (id=2679):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000a00)='./bus\x00', 0x200000, &(0x7f0000000540)={[{@dioread_nolock}, {@resuid}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@noauto_da_alloc}]}, 0x5, 0x487, &(0x7f0000000ec0)="$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")
ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000100)={{0x2, 0x0, 0x81, 0x3, 0x3}, 0x400, 0x2, 'id0\x00', 'timer0\x00', 0x0, 0x1, 0x2, 0x4})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000100)=ANY=[])
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x301142, 0x0)
close(r2)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast})
openat(0xffffffffffffffff, 0x0, 0x448140, 0x20)
openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
timerfd_create(0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r3=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0x8, &(0x7f0000000600)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r3, 0x0}])

2m16.799057284s ago: executing program 3 (id=2687):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0)
getrlimit(0x9, &(0x7f0000000340))
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
setrlimit(0xd, 0x0)
socket(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x20800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
lsm_list_modules(&(0x7f0000000280)=[0x0], &(0x7f00000002c0)=0x8, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6}}, {@nogrpid}, {@nombcache}]}, 0x1, 0x45c, &(0x7f00000015c0)="$eJzs289rHFUcAPDv7Cat/WXWUn/0hxqtYlGbNGmtPXhRFDwoCHqox5ikpXbbSBPBhmCjh3qUgjcP4lHwL/CkF1FPgle9S6FIEFo9rczuTLK73d386CaL2c8Hpnlv5m3f++bN23kzLxNA3xpO/0ki9kbE7xExVMs2Fhiu/biztDD5z9LCZBKVytt/JdVyt5cWJvOi+ef25JlS+3pnr85fnCiXp69k+dG5Sx+Mzl6dP37h0sT56fPTl8fPnDl1cuzF0+MvdCXONK7bhz6eOXLw9XdvvDl59sZ7P3+b5PE3xdElw50OPl2pdLm63tpXl04GetgQ1qUYEWl3DVbH/1AUY6XzhuK1T3vaOGBTVSqVykPtDy9WgG0siXV+4NomNQTYYvmFPr3/zbb80r8Fs4/eu/Vy7QYojf1OttWODEQhKzPYdH/bTcMRcXbx36/SLdb7HKKwSY0CALa179P5z/MN879s/lGI+udC92drKKWIeCAi9kfE6Yg4EBEPRlTLPhwRj7SqJGlff/Miyd3zn8LNDQe3Bun876Vsbatx/rc8uSoVs9y+avyDybkL5ekT2e/kWAzuTPNjHer44dXfPm93rH7+l25p/flcMGvHzYGdjZ+ZmpibuJeY6936JOLQQKv4k+WVgLT7DkbEoQ3WceHZb47k6cPFxmOrx99BF9aZKl9HPFPr/8Voij+XdF6fHL0vytMnRvOz4m6//Hr9rXb131P8XZD2/+6W5/9y/KWkfr12dv11XP/js7b3NBs9/3ck7zTs+2hibu7KWMSO5I1ao+v3jzeVG18pn8Z/7Gjr8b8/Vn4Th9PzvxDxaEQ8FhGPZ21/IiKejIijHeL/6ZWn3u8Y/9/t4t/Z4X/tjjT+qYb+z7/42vX/SmJHNO9pnShe/PG7hkpLTfGv2v+nqqlj2Z61fP+tpV0bO5sBAADg/ye92d8bSWFkOV0ojIzU/ob/QOwulGdm5547N/Ph5anaOwKlGCzkT7qG6p6HjmW39Xl+vCl/Mntu/EVxVzU/MjlTnup18NDn9rQZ/6k/i71uHbDpvK8F/cv4h75V/x4A0GfaXf+Pf7nFDQG2XIvxv6t5x1Dth4kCbDOtrv/XetAOYOs1jX/LftBHPP+H/mX8Q/8y/qEvze6K1V+Sl5CoTyQRMR+FXjdDYjMTvf5mAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6I7/AgAA//9xpumm")

2m16.692237705s ago: executing program 3 (id=2690):
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, 0x0, 0x0)
sendmmsg$unix(r1, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
r3 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0x3, 0x23}, &(0x7f00000003c0)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r2, 0x0, 0x0, 0x0, 0x80000})
io_uring_enter(r3, 0x47f5, 0x0, 0x0, 0x0, 0x40040)

2m16.691904595s ago: executing program 36 (id=2690):
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, 0x0, 0x0)
sendmmsg$unix(r1, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
r3 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0x3, 0x23}, &(0x7f00000003c0)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r2, 0x0, 0x0, 0x0, 0x80000})
io_uring_enter(r3, 0x47f5, 0x0, 0x0, 0x0, 0x40040)

1m55.851274954s ago: executing program 8 (id=2874):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_USERDATA={0x5, 0x6, 0x1, 0x0, "06"}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x24000850}, 0x40)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c000000210a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)

1m55.76925638s ago: executing program 8 (id=2876):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c)
sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f00000000c0)={0xa, 0x4e23, 0x2, @empty, 0xffffffff}, 0x1c)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000001080)={{0x2, 0x4e23, @remote}, {0x1, @local}, 0x4, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'veth1_vlan\x00'})
getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000080), &(0x7f0000000240)=0x4)

1m55.670166122s ago: executing program 8 (id=2878):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0xf6ae, 0x3180, 0x8000, 0x1a0}, &(0x7f0000000340)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x16, 0x1})
io_uring_enter(r2, 0xd44, 0x44c1, 0x7, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0xcc}}, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
setsockopt$inet6_tcp_TLS_RX(r0, 0x11a, 0x2, &(0x7f0000000140)=@gcm_128={{0x304}, "81901c851d6348c3", "68e3a2fa543c6917310279c9df006208", "894c0ac6", "04cb771788a09889"}, 0x28)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c)
r6 = fcntl$dupfd(r1, 0x406, r1)
write$cgroup_pid(r6, &(0x7f0000000240), 0xb375)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002740)=@raw={'raw\x00', 0x3c1, 0x3, 0x298, 0xd0, 0x178, 0xc, 0x0, 0x178, 0x1c8, 0x258, 0x258, 0x1c8, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, [], [0xffffffff, 0xff, 0x0, 0xffffff00], 'geneve0\x00', 'netpci0\x00', {}, {0xff}, 0x2e, 0x2}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x6, 0x200, 0x2}}}, {{@ipv6={@private1, @local, [0x0, 0xff, 0x0, 0xffffff00], [0x0, 0xff000000], 'wg2\x00', 'geneve1\x00', {0xff}, {}, 0x0, 0x0, 0x3}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xeb3d}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8)
io_uring_enter(r6, 0xecf, 0x7c9b, 0x64, &(0x7f0000000080)={[0x5]}, 0x8)

1m55.378374271s ago: executing program 8 (id=2881):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000bc0)=@newsa={0x154, 0x10, 0x1, 0x8000000, 0x0, {{@in=@remote, @in6=@loopback, 0x2, 0x0, 0x4e20, 0x50, 0x0, 0x20, 0x0, 0x16}, {@in6=@local, 0xfffffffc, 0x33}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0xffffffffffffff80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000, 0x0, 0x0, 0x10000}, {0x401, 0x9}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x90}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2d, 0x70bd28, 0x70bd2b, 0x70bd2b, 0x8}}]}, 0x154}}, 0x24000058)

1m55.336611994s ago: executing program 8 (id=2882):
r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301)
r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10)
r2 = perf_event_open(&(0x7f0000000500)={0x3, 0x80, 0x2a, 0x7d, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xffff}, 0x20d0, 0x30, 0x7, 0x4, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x5, r1, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0x1)
socket$inet6(0xa, 0x4, 0x8001)

1m55.248184608s ago: executing program 8 (id=2886):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, 0x0, 0x0)
sendmmsg$unix(r1, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x1, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xbf, {}, {}, @raw32={[0x0, 0xbf]}}], 0xffc8)

55.836556803s ago: executing program 37 (id=2886):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, 0x0, 0x0)
sendmmsg$unix(r1, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x1, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xbf, {}, {}, @raw32={[0x0, 0xbf]}}], 0xffc8)

50.097357573s ago: executing program 6 (id=2933):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffed9)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x0)
openat(r3, &(0x7f0000000b40)='.\x00', 0x413903, 0x9e)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x989680}, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x3a)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = dup(r5)
fsetxattr$security_selinux(r6, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0)
connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4e24, 0x10000008, @mcast2, 0x9}, 0x1c)
r7 = syz_open_dev$hiddev(&(0x7f0000000140), 0x7, 0x200000)
ioctl$HIDIOCGCOLLECTIONINDEX(r7, 0x40184810, &(0x7f0000000200)={0x3, 0xffffffff, 0x0, 0xffffff01, 0xffff, 0x2})
sendto$inet6(r4, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf40000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x68, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

49.90845973s ago: executing program 6 (id=2934):
r0 = socket(0x15, 0x5, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000100)={<r2=>0x0}, &(0x7f00000002c0)=0x8)
prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='\\\x00')
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000004c0)={r2, @in6={{0xa, 0x4e24, 0x7fff, @private1, 0x2}}, 0x1, 0x4f, 0x8000, 0x10000, 0x61, 0x2, 0xf9}, 0x9c)
r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0)
write(r4, &(0x7f00000006c0)="2cd889f035a5", 0x6)
write$char_usb(r4, &(0x7f0000000480)="1f64", 0x2)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x54, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x8], 0x0, 0x0, 0x1}}, 0x40)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
preadv(r7, &(0x7f0000000080)=[{&(0x7f0000000040)=""/46, 0x2e}], 0x1, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb0100180000000000000060000000600000000b00000001000000070000060400000007000000000100000300000008000000060000000600000004000000400000000700000000000000000000000d8d00000f00000009000000030000000000000c03000000070000000000000e0400000000000000002e30615f300061", @ANYRES8=r0], 0x0, 0x83, 0x0, 0x1, 0x800000}, 0x28)

49.817324023s ago: executing program 6 (id=2935):
socket$inet6_icmp(0xa, 0x2, 0x3a)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x40000, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7ff, 0xb}, 0x106200, 0x11004, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000200000000000000202c000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x66, &(0x7f00000006c0)=""/102, 0x41100, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94)

49.778914697s ago: executing program 6 (id=2937):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x4, 0x40, 0x7fff0000}]})
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x1000000, &(0x7f0000000080), 0x1, 0x7b9, &(0x7f00000007c0)="$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")
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a)
open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7ffffffffffffff7, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4, 0x3]})
unlink(&(0x7f0000000080)='./file1\x00')
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
fcntl$setsig(r1, 0xa, 0x12)

49.407979441s ago: executing program 6 (id=2940):
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r1 = io_uring_setup(0x7625, &(0x7f00000002c0)={0x0, 0x253f, 0x10000, 0x0, 0x28e})
io_uring_register$IORING_REGISTER_FILES(r1, 0x1e, &(0x7f0000000000)=[0xffffffffffffffff], 0x1)
syz_mount_image$ext4(0x0, &(0x7f0000000300)='./cgroup.cpu/cgroup.procs/file0\x00', 0x2008012, 0x0, 0x2, 0x0, &(0x7f0000000340))
close(r0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020200000d0000000000000000000000030006000000000002000000ac1414bb000000000000000002000100000000000000000000000000030005000000000002000000ac1414aa000000000000000001001500000000000100140000000000010016"], 0x68}, 0x1, 0x7}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)=ANY=[@ANYBLOB="650000010206010800000000000000000500000005000c00070000000900020073797a30000000001400078008001240fffffffe080013400000ffff05000400000400001000baca0300686173683a69702c6d61630005000a000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4028055}, 0x0)
r4 = socket(0x1e, 0x1, 0x0)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4])

48.690760575s ago: executing program 6 (id=2944):
r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
ioctl$XFS_IOC_FSGETXATTRA(r0, 0x801c582d, 0x0)
r1 = socket(0x10, 0x3, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x4, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), 0x0, 0xcff5}, 0x38)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0x40485404, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$TCSBRKP(r2, 0x5425, 0x0)
r3 = gettid()
perf_event_open(0x0, r3, 0x0, 0xffffffffffffffff, 0x1)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f0000bbdffc)=<r4=>0x0)
timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$TCSETSW2(r2, 0x5408, &(0x7f0000000540)={0xff, 0x37, 0xffffffee, 0x7fffffef, 0x0, "b850e43615b1b70500000000000400", 0x81002, 0x2})
fcntl$setown(r1, 0x8, 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
r5 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_LOOPBACK(r5, 0x65, 0x3, &(0x7f0000000000), 0x4)
sendmsg$can_raw(r5, &(0x7f0000000140)={&(0x7f0000000080), 0x10, &(0x7f0000000100)={&(0x7f00000000c0)=@can={{0x1, 0x1, 0x1}, 0x27, 0x1, 0x0, 0x0, "c8e3f6461d1a4557"}, 0x10}, 0x1, 0x0, 0x0, 0x20000015}, 0x0)

48.619780722s ago: executing program 38 (id=2944):
r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
ioctl$XFS_IOC_FSGETXATTRA(r0, 0x801c582d, 0x0)
r1 = socket(0x10, 0x3, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x4, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), 0x0, 0xcff5}, 0x38)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0x40485404, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$TCSBRKP(r2, 0x5425, 0x0)
r3 = gettid()
perf_event_open(0x0, r3, 0x0, 0xffffffffffffffff, 0x1)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f0000bbdffc)=<r4=>0x0)
timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$TCSETSW2(r2, 0x5408, &(0x7f0000000540)={0xff, 0x37, 0xffffffee, 0x7fffffef, 0x0, "b850e43615b1b70500000000000400", 0x81002, 0x2})
fcntl$setown(r1, 0x8, 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
r5 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_LOOPBACK(r5, 0x65, 0x3, &(0x7f0000000000), 0x4)
sendmsg$can_raw(r5, &(0x7f0000000140)={&(0x7f0000000080), 0x10, &(0x7f0000000100)={&(0x7f00000000c0)=@can={{0x1, 0x1, 0x1}, 0x27, 0x1, 0x0, 0x0, "c8e3f6461d1a4557"}, 0x10}, 0x1, 0x0, 0x0, 0x20000015}, 0x0)

11.522965609s ago: executing program 2 (id=3262):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x200, 0x7}, 0x4, 0x0, 0xffff, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
timer_create(0x0, 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0500000005000000fd09000084"], 0x48)
r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r0}, 0x38)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041)
write$sndseq(r4, &(0x7f0000000080)=[{0xe, 0xfd, 0x0, 0xfd, @time={0x5, 0x1}, {0x3}, {0xe}, @connect}], 0x1c)
pipe(&(0x7f0000000440))
msgrcv(0x0, 0x0, 0x0, 0x2, 0x3000)

11.322590674s ago: executing program 2 (id=3264):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000100001d9ffffffffffffff000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000108000a40fffffffc880000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000005c0003805800008008000340000000024c000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c00014000000000000100001c000180090001006c617374"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x40)

11.157040614s ago: executing program 2 (id=3265):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newsa={0x154, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in=@broadcast, 0xffff, 0x4000, 0x0, 0x8001, 0x0, 0x20, 0x0, 0x5c}, {@in=@dev, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, {0x323, 0x0, 0xffffff80, 0xe0, 0xfffffffffffffffd}, {}, {}, 0x70bd2d, 0xffffffff, 0xa, 0x2, 0x0, 0x18}, [@algo_crypt={0x48, 0x2, {{'lrw(twofish)\x00'}}}, @encap={0x1c, 0x20, {0x0, 0x4e1e, 0x0, @in=@private=0xa010102}}]}, 0x154}}, 0x0)

11.07309139s ago: executing program 2 (id=3266):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x380470a, &(0x7f0000000a00)={[{@quota}, {@bsdgroups}, {@lazytime}, {@errors_remount}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x46b, &(0x7f0000000a80)="$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")
io_setup(0x8, &(0x7f00000001c0)=<r0=>0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/freeze_filesystems', 0x22000, 0x5)
io_submit(r0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x734b, r1, 0x0, 0x0, 0x7, 0x0, 0x2}])
modify_ldt$write(0x1, &(0x7f00000003c0)={0x23, 0x1800, 0x400}, 0x10)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x22042, 0x20)
pwrite64(r2, &(0x7f0000000140)='2', 0x1, 0x8000c61)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0xd2a9, 0x100000002, 0x7ab2, 0x4})

10.818979575s ago: executing program 2 (id=3270):
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x106200, 0x800, 0x2, 0x6, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000019cffffffffffffff000000000a20000000000a05000000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000080007006e617400140004800800014000000000080002"], 0xa4}}, 0x0)

10.558867979s ago: executing program 2 (id=3275):
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
close(r0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020200000d"], 0x68}, 0x1, 0x7}, 0x0)
r2 = socket(0x1e, 0x1, 0x0)
listen(r2, 0x0)
mount$9p_fd(0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])

10.542487546s ago: executing program 39 (id=3275):
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
close(r0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020200000d"], 0x68}, 0x1, 0x7}, 0x0)
r2 = socket(0x1e, 0x1, 0x0)
listen(r2, 0x0)
mount$9p_fd(0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])

3.678718617s ago: executing program 5 (id=3343):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0)
pipe2(&(0x7f0000000100)={<r1=>0xffffffffffffffff}, 0x80)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000003000000fdfffffffeffffff0000000000000000000000070000000000000000000000090000000000000000000000090400000000000000000000090600000001"], 0x0, 0x96}, 0x28)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="d80000001c0081030081f782db44b904021d080201000000040000a118000c000600141a62600e1208000f0100810401a8001600200001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x44005)
r3 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0xfe33)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000300000018000000", @ANYRES32, @ANYBLOB="000000000000000095000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x94)
setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xd}, 0x106200, 0x10004, 0x30da, 0x5, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2c, r4, 0x301, 0x800000, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40006)

3.557472486s ago: executing program 5 (id=3344):
r0 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_STATISTICS(r0, 0x11b, 0x8, 0x0, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x6000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0xc1)
r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a32, 0xc000, 0x7, 0x337})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4046855)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)
r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080))
ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, &(0x7f0000000000)=[{0x7, 0x0, 0xfffffffffffff7ff}, {0x4, 0x1, 0xfffd}], 0x2, 0xbff, 0x1e, 0x0, 0x2c, 0x6a})

3.431621184s ago: executing program 5 (id=3345):
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
shutdown(r1, 0x0)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5991ee20139b401046a89606ffcf92e", "2c5be7c6", "a0ca05c0707e52f4"}, 0x28)
splice(r1, 0x0, r0, 0x0, 0x10000008ebc, 0x0)

3.374839944s ago: executing program 5 (id=3346):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000001780)="91f8a9849519def28691bbc4173c3d6f357de68907e50e997fc26e4c91ea4feb931647fc5393de1f0000000000002c847ecfbcfa0a026a6f96a4ffd844b1252fa8332e469c6b1aafc08e0e632da389ba8899e94ce0216d23bec00ff251e11ba4e19e7fe33f6d7635fbf6f16f1f0a381d1e3219c1cfa013b391b6623f164f55a0a33902f0c938d626905f8cd1fba51334c16b150281addd9ae74a51c0572bfcc1af96ea1177e68f6f60136d777fb081848b4eddb2ede3cd121b0a5630932fdbce2a202e9ad400bf330b68344c8eda3e9fcbe42abb4486553d2e3e6c6b62650eedfc021896346567b68ee468501d5174cd4febc162dd79ef058d6e6ac11d1dc8d3d06498d64ba74b1846c2abfb704cae1af98a3eb2dd6f414e350b1c25fb4571d1670499461260284142405ba6e49bdc94821f2f52a6f45e6189022f7624c1ccf45bf009554c72ca457623fb6ce0053ac1165113c8847153a19457245be0f5289ef1c3384a85dde2dd092d3b9c6875ee1732b8a56e84d18429869718a8ff285ffa75148fcdb53abe2ca822f08db08cdf3560c4c15bdbd1d66723d71fc404b583c35ce145b95230e68a537ab83904f2c882f06b3a7690c141e4dff70088a1", 0x1bd}, {&(0x7f0000001300)="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", 0x1b2}], 0x2}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e50fe595e1e0dbe84ed0f70abb4ed2dfb6648df7dbbd18fa5533a6b0acc138c81a8acbcb2fb79a7d7857d4", 0xdb}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x2090)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f00000015c0)="177188b7282c32d735bee7b4dfa9d0028a56d21b0fa9c05930147cd2a8b5f73149939ec1eff53f8726147babb7210558208a4f3a8ac5cea498e3dab5d16b05ab41665f00e6ea3778118ff980d96ca382d73f204ada3ae6ee3eb1000002416ca5a9cdcd357576a896b6b55bf1e8348f18a3d81384a8afc4aae95cc109525727e54d0951602d7dee7f0886b5142f4b428603c8ff2ac2ff0fbbfd7b838b353048d9f4c90de475d89ffa8c7fca47bab63288626b8f9eaa060000000000000022ebdbd3c24c83632eccfa542baada0000000000000000e330cf9e3c54269a420a498ce7c8c92fe00a586600d0bfe63259461c47eec8144f55ae3362bdf45ba293e4c128c31388b3da8755fb7491b9d5ea6c28ebdb3189d4d0a77de44d938b83dfce8fdd5bb8da609a386d3dd98f7705b47a01ab800e7ea3b063232f5f7a992e152bb62c9484f0b1c45cfe24769a673dc048a2fcffabb0e4adf9336427f72fe50b6285a97f9d0f49bab6218bc7dd2dcf55411460281c511866fb323f5ba870dea66b59dc97e900b029ddc0eb1be1f8f09ca2c076b667cc4396725de1d5f4c81f204ca09166e9dff28fbf8a1d7716460db457832c6b322725b2", 0xffffffffffffff88, 0x0, 0x0, 0xfffffffffffffd20)

2.229662432s ago: executing program 5 (id=3353):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380)={[{@block_validity}, {}, {@data_err_ignore}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@usrquota}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x569, &(0x7f0000000940)="$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")
r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x9000)
fallocate(r0, 0x0, 0x0, 0x8800000)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r1, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10)
syz_io_uring_setup(0x149a, &(0x7f0000000400)={0x0, 0xbfb6, 0x800, 0x0, 0x400250}, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000002c0))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
r3 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21)
pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3)

1.693941947s ago: executing program 1 (id=3357):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bind$can_j1939(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
syz_emit_ethernet(0x66, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6002adf700000100fe880000000000000000000000000001ff0200"], 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup(r0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="080086dd0001"], 0xfdef) (fail_nth: 3)

1.630932877s ago: executing program 9 (id=3360):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000400), 0x3, 0x589, &(0x7f00000083c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101041, 0x15)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c)

1.540974991s ago: executing program 9 (id=3362):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
getsockopt(r1, 0x2, 0x4, &(0x7f0000000280)=""/84, &(0x7f00000000c0)=0x54)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8004, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x3000000, 0x0, 0x40001}, 0x0)

1.54057498s ago: executing program 1 (id=3363):
unshare(0x28000600)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_wakeup_irq', 0x3a34c0, 0x1)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r1, &(0x7f00000007c0)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x2, @private0}, 0x1c, &(0x7f0000000d00)=[{&(0x7f00000002c0)='\n', 0x1}], 0x1}}], 0x1, 0x40088d4)
shutdown(r1, 0x1)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90)
mq_getsetattr(r0, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
getsockopt$SO_J1939_PROMISC(r2, 0x6b, 0x2, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYRES8=r3, @ANYRES16=r3, @ANYRESOCT=r3], 0x7c}}, 0x20000001)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x2, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
msgget$private(0x0, 0x722)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000001850000002c00000095000000000000004495e980d4ab43a654dbda1289491fde9751ca443daaa97c18e213"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x24, '\x00', 0x0, @xdp}, 0x94)
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x801, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42404}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8, 0x1, r6}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r4}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0)
syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=<r7=>0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pidfd_send_signal(r7, 0x21, 0x0, 0x0)
waitid$P_PIDFD(0x3, r7, 0x0, 0x40000004, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

1.378807522s ago: executing program 9 (id=3366):
socket$nl_route(0x10, 0x3, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r3=>0x0})
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', r3}, 0x94)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x25dfdbfd, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r4}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000d00)={'\x00', 0x2, 0x74, 0x3, 0x3ea0, 0x5, <r6=>0x0})
capset(&(0x7f0000000d80)={0x19980330, r6}, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000c40)={0x73622a85, 0x0, 0x1})
socket$inet6_tcp(0xa, 0x1, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/225, 0xe1}], 0x1, 0x7, 0x20000000)

1.355002728s ago: executing program 1 (id=3367):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0x2, 0x80805, 0x0)
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value, &(0x7f0000000080)=0x8)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000019080)=ANY=[@ANYBLOB="1e000000ff010000080000000900000010640000", @ANYRES32=0x1, @ANYBLOB="04000000000000000000000000009ab040890f86", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000000000000400"/28], 0x50)
close(r2)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000040), &(0x7f0000000440)=""/183}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r2, &(0x7f0000000180), &(0x7f0000000680)=""/141}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r2, &(0x7f0000000040)}, 0x20)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)=@o_path={&(0x7f00000002c0)='./file0\x00', r2, 0x4000, r0}, 0x18)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00')
pread64(r3, &(0x7f0000000040)=""/102400, 0x19000, 0x10000002fc)
r4 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x22, 0x8, 0x0, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x10, 0x0, 0x0, 0x5}})
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4002, &(0x7f0000000200)={[{@errors_remount}, {@bh}, {@grpquota}, {@stripe={'stripe', 0x3d, 0x1}}]}, 0x1, 0xbd2, &(0x7f0000000540)="$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")
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010003000000fbdbdf25250000000e0001006e657464bc70b83417dd31eb33eac7f36a657673696d0000000f0002"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_open_dev$usbfs(&(0x7f0000019440), 0x0, 0x40)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x3, &(0x7f0000000100)=[{0x15}, {0x15, 0x0, 0x0, 0x3}, {0x6, 0x0, 0x0, 0x7ffffdbe}]})
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0xc080661a, &(0x7f000001b980)={@desc={0x1, 0x0, @desc1}})
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0)
write(r9, &(0x7f0000004200)='t', 0x1)

1.281853885s ago: executing program 5 (id=3368):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x5, 0x4, 0xd}, {0x20, 0x27, 0x5, 0x4}, {0x6, 0x2, 0x4, 0x2f}]})
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0xe369, 0x0, 0x8001, 0x400252}, &(0x7f0000000400)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x16, 0x1})
io_uring_enter(r1, 0xd44, 0x44c1, 0x7, 0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="03000000040000000400", @ANYBLOB='\x00\x00\a'], 0x48)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x400800)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=ANY=[@ANYBLOB="38010000fefff7ff00010000fc01000000dc93000000000000000000fc010000000000000000000000000001000107144e230045000000a03a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb000004d46c000000fe880000000000000000000000000001000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000000200000000000000feffffffffffffff02000000fcffffff400000002abd700003350000020001002000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000803a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/522], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
sendmsg$nl_route_sched(r4, 0x0, 0x20040084)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40098}, 0x4000000)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)=@generic={&(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r7}, 0x18)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', <r11=>0x0})
sendmmsg$inet6(r9, &(0x7f0000001a40)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0xe9, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002\x00\x00\x00', @ANYRES32=r11], 0x28}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001840)="b43d200fd468e8b286b3106d37d687e4680e88f9795ad36cd3d77ac6dece3e0691f2ed5d911dec6cff55e1068b34c83c5e7143f941d30f6ea8f882231007ba27ba532d799fee8339b0ba14c8cb2e710a8f4227121a75dcf67deaf1b2b0f59025bbf390775e6dcaa68e19796554b540c8a712058ece61e5c473f76d18d6bbeada03fca3cd5c79c2ff43f20775baaf54df30381f04b248ddb8bfafa07fbf33f98a05902ffe95f85d1f4ba94ad4eb28505ae11265f590e8360bc3304aac75b659aa5d48a6", 0xc3}, {&(0x7f0000000440)="9391cf2f41ddd9a0e59ee10d91ca775221a786d9f39280fcc223f5adce0067315c0a37d24a8fdcb75410010f8dcf86227048a9bacfaeda6cace1dfaf73556627228bd5ac650442ee842eb79b15579dd4c87c0c", 0x53}, {&(0x7f0000000140)="aaee464261451a8157f316a9dfb9be7543d5daa8dd61dd", 0x17}, {&(0x7f00000006c0)="ec1dca7c2dcbeac0028402c5c4ce6d6bf814e289450c536af5c03b7e47d7b1b20aee5e6fc8d7fdea6bcb86056f53b0097a65e071d7c4b2a6e89a68e628bf5abf7baecc4b5ab40132b337081a0ae361f1079c96c70d3fa5ebc8632040ceb49a89315951f62934f074be3af19ead", 0x6d}, {&(0x7f0000001940)="acfa5d289f3f9f21746f5fb529a16473b86c2d45cd42b3238611c6caf1377198eed89550af8758c53797d8a23fde50b3825776a2df670edc04fd9851658773bd8f4f144fcf7781731e9e6a76078506e243bd9134ccfbd49fdf0842e46e50c16059c1d557173d3408bba1212c78712fd37b666cd1a6ee5aba61bd5d2474acf9c3c5d26f00bf3cce24c092c2fc85ea1e2cd716c60a3057ff5d31c24684d946a255dd40e3243dc3634d5ca2e205398b36ea4af705981716c5b42eaafd5b8d1c409a6490a26fdd00ad84cfd4da0efee9ae84764e3d5b37b692", 0xd7}], 0x5}}], 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="84000000180001002cbd7000ffdbdf251d0107000c000b00040000a00300008015000100030000a006000000bac45f9ce14233bd0000000008000900", @ANYRES32=r12, @ANYBLOB="0c000b00000000e0020000a015000200010000a0070300007f15f0386605000b0200000008000a"], 0x84}}, 0x0)
r13 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r13, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b160000000000000000020000084c00048018000180080001006f7366000c000280080001400000000430000180080001006e61740024003e47ace3d1620723000008000340220000140800024000000002080044400000000b0900010073797a300000000016fbfa89567700020073797a32000000001400000011000100000000cf9dd4e4ff1d2a7798"], 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x0)

1.155588542s ago: executing program 0 (id=3370):
mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x4, 0x8})
readv(r0, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4087, 0xff7}], 0x1) (fail_nth: 2)

797.20291ms ago: executing program 9 (id=3371):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x6, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x1000000000000, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdffffffffffffffb, 0xffffffffffffffff, 0x1)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x5, 0x3, &(0x7f0000000140)=ANY=[], &(0x7f0000000c00)='GPL\x00', 0x400, 0x0, 0x0, 0x0, 0x13}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
unshare(0x60000600)
sync()
sync()
sync()
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5a8, &(0x7f0000000680)="$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")
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2503)
ioctl$EVIOCGMASK(r2, 0x80104592, 0x0)
ioctl$EVIOCGEFFECTS(r2, 0x80044584, 0x0)
r3 = dup(0xffffffffffffffff)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
syz_read_part_table(0x1055, &(0x7f0000002100)="$eJzsz7GtwjAABNDzzweSVMzCBqGioKViHGYBCUZiATagDUpSRCwAFO811p1Othy+qkzHfZM0SZ9LO5cpqZr3eZVhlDzn6tT9JXVS/ndDbLMdY45D2pdcu2XKerGqp/nj3I/3j28cbp/4IwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8ulcAAAD//7B/C4Q=")
getpgrp(0x0)
sendmsg$AUDIT_SET(r3, 0x0, 0x20040090)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x1040)
write$tun(r1, &(0x7f0000000740)=ANY=[], 0x2e)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x17, 0x4, &(0x7f0000000700)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x100, 0x62)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r5, 0x40086610, &(0x7f00000004c0)={@id={0x2, 0x2000000, @b}})
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000100)=[{0x1, 0x6, 0x14, 0x3}, {0xf, 0x3, 0xa, 0xffff2dc4}, {0x0, 0xc1, 0x0, 0x6}]})
socket$nl_netfilter(0x10, 0x3, 0xc)

743.00886ms ago: executing program 1 (id=3372):
bpf$PROG_LOAD(0x5, 0x0, 0x0)

699.594632ms ago: executing program 1 (id=3373):
r0 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$NFT_MSG_GETGEN(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x14, 0x10, 0xa, 0x101, 0x0, 0x0, {0x6, 0x0, 0x1}, ["", "", "", ""]}, 0x14}}, 0x10000)
r1 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
setregid(0xffffffffffffffff, r3)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)={[{@resgid={'resgid', 0x3d, r3}}, {@user_xattr}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}], [{@uid_gt={'uid>', r2}}, {@fowner_lt}, {@measure}, {@smackfsroot={'smackfsroot', 0x3d, 'norecovery'}}, {@context={'context', 0x3d, 'root'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '-:^-})\\^2\v('}}, {@uid_eq={'uid', 0x3d, r2}}, {@permit_directio}, {@measure}, {@fowner_eq={'fowner', 0x3d, r2}}]}, 0x1, 0x60e, &(0x7f0000000a40)="$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")

553.883177ms ago: executing program 1 (id=3375):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001500)=@newtfilter={0x74, 0x2c, 0xd27, 0x1070bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xe}, {}, {0x9, 0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0x44, 0x2, [@TCA_FLOW_EMATCHES={0x40, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x8, 0x3, 0x67e6}, {0x9, 0x7fffffff, 0x5, 0x9}}}, @TCF_EM_CANID={0x14, 0x0, 0x0, 0x0, {{0xf4d6, 0x7, 0x4}, {{0x3, 0x0, 0x1}, {0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4ef3}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x40001}, 0x0)
mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000100)=0x5, 0x6, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket(0xa, 0x2, 0x88)
syz_emit_ethernet(0x2a, &(0x7f0000000740)={@link_local, @local, @void, {@ipv4={0x800, @generic={{0x7, 0x4, 0x0, 0x2, 0x1c, 0x65, 0x0, 0x3, 0x4, 0x0, @private=0xa010102, @multicast1, {[@timestamp={0x44, 0x4, 0x1e, 0x0, 0x4}, @end, @lsrr={0x83, 0x3, 0xd6}]}}}}}}, 0x0)
connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e21, 0x101, @ipv4={'\x00', '\xff\xff', @empty}, 0xffffff87}, 0x1c)
r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udplite6\x00')
lseek(r7, 0x9, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r9 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r8)
io_setup(0x8, &(0x7f00000001c0)=<r10=>0x0)
r11 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0)
io_cancel(r10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x2, 0x4, r6, &(0x7f0000000200), 0x0, 0xfffffffffffffffe, 0x0, 0x2, r11}, &(0x7f0000000580))
mount$9p_unix(0x0, 0x0, 0x0, 0x12d7498, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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")
r12 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0)
r13 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
write(r13, &(0x7f0000004200)='t', 0x1)
sendfile(r13, r12, 0x0, 0x3ffff)
sendfile(r13, r12, 0x0, 0x7ffff000)

497.135116ms ago: executing program 4 (id=3376):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_USERDATA={0x5, 0x6, 0x1, 0x0, "06"}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c000000210a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)

496.746177ms ago: executing program 0 (id=3377):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newsa={0x138, 0x10, 0x1, 0x70bd26, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2c}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x33}, @in6=@mcast2, {0x0, 0x40000000, 0x4, 0x2, 0x0, 0x2, 0x0, 0xffffffffffffffff}, {0xfff, 0x800}, {0x3}, 0x70bd2a, 0x3500, 0xa, 0x0, 0x0, 0x26}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0)

496.021566ms ago: executing program 4 (id=3378):
mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x4, 0x8})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
r3 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10)
sendmmsg$inet(r3, &(0x7f0000000bc0)=[{{&(0x7f0000000180)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10, 0x0}}], 0x1, 0x20004840)
sendto$inet(r3, &(0x7f00000002c0)='\x00', 0x1, 0x2000c005, 0x0, 0x0)
shutdown(r3, 0x1)
recvfrom$inet(r3, &(0x7f0000000300)=""/248, 0xf8, 0x2, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'})
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0)
read$char_usb(r4, &(0x7f00000001c0)=""/4068, 0xfe4)
readv(r0, &(0x7f0000000080), 0x0)

390.998378ms ago: executing program 4 (id=3379):
socketpair(0x1e, 0x1, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$nl_route_sched(r0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0)
socket$inet(0x2, 0x1, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
perf_event_open(0x0, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1)
munmap(&(0x7f0000ffb000/0x3000)=nil, 0xffffffffffffffff)
timerfd_create(0x5, 0x800)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000039000900f036d67600dfffeb03000000040000000c0001800600064788"], 0x24}}, 0x10)

390.060518ms ago: executing program 0 (id=3380):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
ptrace(0x4207, r0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
ioctl(0xffffffffffffffff, 0x8b22, &(0x7f0000000040))
bind$inet6(r1, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e)
sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x90030000, @loopback}, 0x1c)

389.671598ms ago: executing program 9 (id=3381):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1, 0x2bc, &(0x7f00000015c0)="$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")
socket$nl_rdma(0x10, 0x3, 0x14)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x1c3)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r1, &(0x7f0000000000)={0x2a, 0x2, 0x7ffe}, 0xc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x4, &(0x7f0000000200)=ANY=[@ANYRESDEC], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x78, '\x00', 0x0, @cgroup_sysctl=0x12, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r2}, 0x8)
socket(0x10, 0x80003, 0x0)
bind$qrtr(r1, &(0x7f0000000080)={0x2a, 0x1, 0x4000}, 0xc)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4012011, r0, 0x300000000000000)
truncate(&(0x7f0000000900)='./file1\x00', 0x9)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)

343.82409ms ago: executing program 9 (id=3382):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
pselect6(0x40, &(0x7f0000000c00)={0x7, 0x5cc, 0x4, 0x4, 0x7, 0x6, 0x8, 0x10001}, &(0x7f0000000c40)={0x10001, 0x6c2, 0x2, 0x2, 0x7fffffffffffffff, 0x80000, 0xac4, 0x8}, 0x0, &(0x7f0000000cc0)={0x77359400}, &(0x7f0000000d40)={&(0x7f0000000d00)={[0x100]}, 0x8})
listen(r0, 0xfffffffe)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000680)='h', 0x1}], 0x1)
r1 = accept4$unix(r0, 0x0, 0x0, 0x0)
recvfrom$unix(r1, &(0x7f00000001c0)=""/236, 0x26, 0x10120, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @jmp={0x5, 0x1, 0x10, 0x7, 0xa, 0xfffffffffffffffe}, @exit]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa}, 0x94)
r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0xe)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newtaction={0x80, 0x30, 0xb, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_ct={0x68, 0x1, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xf, 0x0, 0x3}}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e23}, @TCA_CT_ACTION={0x6, 0x3, 0x1b}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @mcast1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x604ff3648f564820}, 0x40014)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
r6 = socket$inet6(0xa, 0x2, 0x0)
connect$inet(r5, &(0x7f0000000100)={0x2, 0x4e20, @remote}, 0x10)
setsockopt$inet6_int(r6, 0x29, 0x1a, &(0x7f00000000c0)=0x8000, 0x4)
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r2, 0x8008f511, &(0x7f0000000080))
bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
syz_emit_ethernet(0x2a, &(0x7f0000000480)=ANY=[@ANYBLOB="5b1a033f251100000000000000000011907800000000e000000100004e200008d811e314195da61a7877dea48e2fab28f9add83f3db3a9a77b7adcb693a949ebb108d9ab094fd8ea2673d53943e6f5fd6b487f34d0b10f4a1742ae7f8cac7a12dfd8dc59"], 0x0)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x25, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x880)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000180)=ANY=[@ANYRES64=0x0], 0xfe, 0x122e, &(0x7f0000001280)="$eJzs3E1rXFUYB/DHSdrExLyotVpBerAb3VySLNwoSJAUpANK2witINyaiQ65zoTcITAiRldu3fgB3IpLd4K4001c+BncZePShXqlM+lL7GjQau8Qfr/NPMy5f3jO3OHAGebcg5c+fW9rs8w28140Hno5GtsRk7+lSNGIWz6K51/87vtnrly7fmm12Vy7nNLF1avLL6SU5s9/8+YHXz77bW/2ja/mv56K/cW3Dn5e+Wn/7P65g9+vvtsuU7tMnW4v5elGt9vLbxSttNEut7KUXi9aedlK7U7Z2jkyvll0t7f7Ke9szM1s77TKMuWdftpq9VOvm3o7/ZS/k7c7KcuyNDcT3I/1L36pqiqiqk7F6aiqqno4ZqIRj8RczMdCLMaj8Vg8HmfiiTgbT8ZTcW5wVd19AwAAAAAAAAAAAAAAAAAAwMky6vz/7D3n/z+LGHX+/3zNzQMAAAAAAAAAAAAAAAAAAMAJceXa9Uurzeba5ZSmI4pPdtd314evw/HVzWhHEa1YioX4NQan/4eG9elori2lgcX4uNg7zO/trk8czS8PHidwT/7iq8215WE+Hc1Pxczd+ZVYiDOj8yt/yl8Y5KfjuQt35bNYiB/fjm4UsRE3s3fyHy6n9Mprzdv5H/aHc9+o8b4AAADAfylLt43cv2fZX40P88f9PnBzf710Z38eixGH+cl4erLeuRNR9t/fyouitVN7cauj4Tt7ETEmjf3rohERY9DG3xSnjr1mtobGPp+NuI/4xJEv0lh8zmNeTI8aOm7lmPhf1yUejMObPlV3HwAAAAAAAAAAAPwzD+IPhnXPEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/mAHjgUAAAAAhPlbp9GxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXwUAAP//3m/GvA==")
r7 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc)
fallocate(r7, 0x0, 0x0, 0x8800000)
r8 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21)
pwritev2(r8, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1600, 0x0, 0x3)

263.458885ms ago: executing program 0 (id=3383):
bpf$PROG_LOAD(0x5, 0x0, 0x0)

263.063295ms ago: executing program 4 (id=3384):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f00000000c0)=0xffffff01, 0x4)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="50ffff001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="00000000000000001c001280090001007866726d000000000c0002800800020004000000140003007866726d3000"/56], 0x50}}, 0xc0)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x402, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={0x0, 0xe8}}, 0x0)
connect$netlink(r1, &(0x7f00000001c0), 0xc)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x1, @perf_config_ext={0x400000000000d07, 0x40}, 0x100b28, 0x6, 0x0, 0x5, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = socket$nl_route(0x10, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
r5 = socket(0x840000000002, 0x3, 0x100)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x9c, 0x0, @val=0x80}}}}}}}, 0x0)
r6 = epoll_create1(0x80000)
r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000d80)='/sys/power/hibernate_compression_threads', 0x101000, 0x41)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000000)={0xe000001a})
r8 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r6, &(0x7f0000000100)={0x5})
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000001900)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x1c0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x2000, 'pimreg\x00', 'veth0_to_bond\x00'}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004002000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0x8}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398)
fsopen(&(0x7f0000000580)='tracefs\x00', 0x1)
fcntl$dupfd(r2, 0x0, r3)
sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r4, @ANYBLOB="06001500070000000c00168008000100", @ANYRES16=r3], 0x38}}, 0x10)

194.862913ms ago: executing program 0 (id=3385):
r0 = open(&(0x7f0000000040)='./file0\x00', 0x101040, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffa})
rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0})
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', <r4=>0x0})
bind$packet(r3, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14)
socket$packet(0x11, 0x3, 0x300)
syz_open_procfs(0x0, &(0x7f00000003c0)='net/ptype\x00')

159.193307ms ago: executing program 0 (id=3386):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7fffffff}, 0x0)
r0 = getpid()
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r1], 0x28}}, 0x802)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001b40), r2)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132})
ioctl$TUNSETVNETLE(r4, 0x400454dc, 0x0)
socket(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x400, 0x0, 0x2, 0x3, 0xffe, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
msgget$private(0x0, 0x722)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00'})
sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f00000026c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="21f126bd7000fbdbdf250400000008000800ac14142508000700e000000106000b000a0000000800020005000000"], 0x34}, 0x1, 0x0, 0x0, 0x802}, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0)
r6 = semget$private(0x0, 0x4, 0x0)
semop(r6, &(0x7f0000000380)=[{0x0, 0xffff}], 0x1)
semtimedop(r6, &(0x7f0000000000)=[{0x2, 0xfffa}, {0x3, 0x7278, 0x1000}, {0x2, 0xc, 0x1000}, {0x0, 0xff74, 0x800}, {0x2, 0x2, 0x800}], 0x5, 0x0)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000100)={<r7=>0x0}, &(0x7f0000000080)=0xc)
syz_open_procfs$namespace(r7, &(0x7f00000000c0)='ns/mnt\x00')

149.731875ms ago: executing program 4 (id=3387):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xd, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffffffff}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @printk={@p, {}, {0x5, 0x1, 0xb, 0x1, 0x2, 0xffff}, {}, {0x5, 0x0, 0xb, 0x2, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0xa0}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000}, 0x94)

0s ago: executing program 4 (id=3388):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000180)={r0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_open_procfs(0x0, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x9, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]})
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x4851, &(0x7f0000000100), 0x0, 0x4ed, &(0x7f0000000440)="$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")
r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
io_setup(0x5, &(0x7f0000000540)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f00000003c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0xe, r3, &(0x7f00000000c0)='\f\v', 0x2, 0x0, 0x0, 0x4}])
lremovexattr(&(0x7f0000000040)='./file1\x00', &(0x7f0000000100)=@random={'osx.', '\\,\x18\x9c\xc98\x00\x00'})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r5 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81)
ioctl$HIDIOCSFEATURE(r5, 0xc0404806, &(0x7f0000000040))
close_range(r1, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

t to 1
[  409.339160][T14606] tipc: Cannot configure node identity twice
[  409.472234][T14629] loop5: detected capacity change from 0 to 512
[  409.484166][T14629] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[  409.502425][T14629] EXT4-fs (loop5): orphan cleanup on readonly fs
[  409.509710][T14629] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:517: comm syz.5.2970: Block bitmap for bg 0 marked uninitialized
[  409.523284][T14629] loop5: lost filesystem error report for type 5 error -117
[  409.523424][T14629] EXT4-fs (loop5): Remounting filesystem read-only
[  409.537326][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  409.537341][    C0] EXT4-fs (loop5): initial error at time 1773018889: ext4_read_block_bitmap_nowait:517
[  409.537362][    C0] EXT4-fs (loop5): last error at time 1773018889: ext4_read_block_bitmap_nowait:517
[  409.563936][T14629] EXT4-fs (loop5): 1 orphan inode deleted
[  409.570452][T14629] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  409.587393][T14054] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  409.670073][T14629] bridge0: port 2(bridge_slave_1) entered disabled state
[  409.677374][T14629] bridge0: port 1(bridge_slave_0) entered disabled state
[  409.677462][   T28] audit: type=1400 audit(1773018889.321:3391): avc:  denied  { setattr } for  pid=14640 comm="syz.2.2971" name="tty24" dev="devtmpfs" ino=42 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1
[  409.725159][T14647] FAULT_INJECTION: forcing a failure.
[  409.725159][T14647] name failslab, interval 1, probability 0, space 0, times 0
[  409.768200][T14647] CPU: 0 UID: 0 PID: 14647 Comm: syz.2.2972 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  409.768243][T14647] Tainted: [W]=WARN
[  409.768250][T14647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  409.768262][T14647] Call Trace:
[  409.768269][T14647]  <TASK>
[  409.768277][T14647]  __dump_stack+0x1d/0x30
[  409.768304][T14647]  dump_stack_lvl+0x95/0xd0
[  409.768324][T14647]  dump_stack+0x15/0x1b
[  409.768371][T14647]  should_fail_ex+0x263/0x280
[  409.768393][T14647]  should_failslab+0x8c/0xb0
[  409.768410][T14647]  kmem_cache_alloc_noprof+0x66/0x400
[  409.768454][T14647]  ? skb_clone+0x151/0x1f0
[  409.768479][T14647]  skb_clone+0x151/0x1f0
[  409.768525][T14647]  nfnetlink_rcv+0x316/0x1720
[  409.768604][T14647]  ? nlmon_xmit+0x4f/0x60
[  409.768633][T14647]  ? consume_skb+0x4b/0x160
[  409.768658][T14647]  ? nlmon_xmit+0x4f/0x60
[  409.768741][T14647]  ? dev_hard_start_xmit+0x3b9/0x3f0
[  409.768765][T14647]  ? __dev_queue_xmit+0x136c/0x1f20
[  409.768788][T14647]  ? __dev_queue_xmit+0x148/0x1f20
[  409.768816][T14647]  ? ref_tracker_free+0x37d/0x3e0
[  409.768865][T14647]  netlink_unicast+0x5c0/0x690
[  409.768892][T14647]  netlink_sendmsg+0x5c8/0x6f0
[  409.768917][T14647]  ? __pfx_netlink_sendmsg+0x10/0x10
[  409.769018][T14647]  ____sys_sendmsg+0x563/0x5b0
[  409.769106][T14647]  ___sys_sendmsg+0x195/0x1e0
[  409.769144][T14647]  __x64_sys_sendmsg+0xd4/0x160
[  409.769176][T14647]  x64_sys_call+0x194c/0x3020
[  409.769201][T14647]  do_syscall_64+0x12c/0x370
[  409.769256][T14647]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  409.769280][T14647] RIP: 0033:0x7f92fd78c799
[  409.769367][T14647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  409.769386][T14647] RSP: 002b:00007f92fc1e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  409.769407][T14647] RAX: ffffffffffffffda RBX: 00007f92fda05fa0 RCX: 00007f92fd78c799
[  409.769474][T14647] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003
[  409.769487][T14647] RBP: 00007f92fc1e7090 R08: 0000000000000000 R09: 0000000000000000
[  409.769501][T14647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  409.769515][T14647] R13: 00007f92fda06038 R14: 00007f92fda05fa0 R15: 00007ffd8e1b02b8
[  409.769535][T14647]  </TASK>
[  410.257798][T14629] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  410.283643][T14629] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  410.312030][T14690] loop2: detected capacity change from 0 to 512
[  410.351004][ T4448] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  410.360821][ T4448] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  410.369754][ T4448] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  410.392458][T14690] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -13
[  410.401534][T14690] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #13: comm syz.2.2976: iget: bad i_size value: 12154757448730
[  410.402035][ T5864] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  410.417552][T14643] geneve2: entered promiscuous mode
[  410.430264][T14690] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  410.430430][T14690] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.2976: couldn't read orphan inode 13 (err -117)
[  410.439592][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  410.439610][    C0] EXT4-fs (loop2): initial error at time 1773018890: ext4_orphan_get:1391: inode 13
[  410.439635][    C0] EXT4-fs (loop2): last error at time 1773018890: ext4_orphan_get:1391: inode 13
[  410.453578][T14683] netlink: 3260 bytes leftover after parsing attributes in process `syz.9.2974'.
[  410.458397][T14690] loop2: lost filesystem error report for type 5 error -117
[  410.470990][ T5864] Buffer I/O error on dev loop1, logical block 1, lost sync page write
[  410.616837][T14334] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  410.655874][T14695] lo speed is unknown, defaulting to 1000
[  410.777074][ T4448] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  410.880096][ T4448] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  410.895579][T14690] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  410.932196][ T5864] EXT4-fs (loop1): I/O error while writing superblock
[  410.940647][ T4448] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  410.969596][T14712] FAULT_INJECTION: forcing a failure.
[  410.969596][T14712] name failslab, interval 1, probability 0, space 0, times 0
[  410.998139][T14712] CPU: 1 UID: 0 PID: 14712 Comm: syz.9.2981 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  410.998172][T14712] Tainted: [W]=WARN
[  410.998180][T14712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  410.998311][T14712] Call Trace:
[  410.998319][T14712]  <TASK>
[  410.998327][T14712]  __dump_stack+0x1d/0x30
[  410.998417][T14712]  dump_stack_lvl+0x95/0xd0
[  410.998441][T14712]  dump_stack+0x15/0x1b
[  410.998463][T14712]  should_fail_ex+0x263/0x280
[  410.998486][T14712]  ? proc_self_get_link+0x96/0x110
[  410.998514][T14712]  should_failslab+0x8c/0xb0
[  410.998567][T14712]  __kmalloc_cache_noprof+0x5f/0x410
[  410.998593][T14712]  ? __pfx_proc_self_get_link+0x10/0x10
[  410.998620][T14712]  proc_self_get_link+0x96/0x110
[  410.998691][T14712]  pick_link+0x514/0x8e0
[  410.998716][T14712]  step_into_slowpath+0x36a/0x4c0
[  410.998788][T14712]  link_path_walk+0x974/0xe30
[  410.998814][T14712]  path_openat+0x1c6/0x2050
[  410.998890][T14712]  ? _parse_integer_limit+0x170/0x190
[  410.998914][T14712]  ? kstrtouint+0x76/0xc0
[  410.998944][T14712]  do_file_open+0x16c/0x290
[  410.998980][T14712]  do_sys_openat2+0x94/0x130
[  410.999081][T14712]  __x64_sys_openat+0xf2/0x120
[  410.999109][T14712]  x64_sys_call+0x1e39/0x3020
[  410.999207][T14712]  do_syscall_64+0x12c/0x370
[  410.999229][T14712]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  410.999270][T14712] RIP: 0033:0x7f74e2dbcfce
[  410.999287][T14712] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  410.999303][T14712] RSP: 002b:00007f74e1856f18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  410.999376][T14712] RAX: ffffffffffffffda RBX: 00007f74e18576c0 RCX: 00007f74e2dbcfce
[  410.999391][T14712] RDX: 0000000000000000 RSI: 00007f74e2e92270 RDI: ffffffffffffff9c
[  410.999406][T14712] RBP: 00007f74e1857090 R08: 0000000000000000 R09: 0000000000000000
[  410.999420][T14712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  410.999436][T14712] R13: 00007f74e3076038 R14: 00007f74e3075fa0 R15: 00007ffe7a987b48
[  410.999452][T14712]  </TASK>
[  411.273870][T14659] lo speed is unknown, defaulting to 1000
[  411.317784][T14054] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  411.358277][   T28] audit: type=1400 audit(1773018891.011:3392): avc:  denied  { write } for  pid=14719 comm="syz.9.2982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  411.530946][   T28] audit: type=1400 audit(1773018891.181:3393): avc:  denied  { setattr } for  pid=14744 comm="syz.9.2985" name="XDP" dev="sockfs" ino=41654 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  411.679617][T14753] loop2: detected capacity change from 0 to 512
[  411.701878][T14753] EXT4-fs (loop2): 1 orphan inode deleted
[  411.708975][T14753] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  411.722490][ T4457] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  411.733337][T14753] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  411.779768][ T4457] EXT4-fs error (device loop2): ext4_release_dquot:7037: comm kworker/u8:13: Failed to release dquot type 1
[  412.084328][T14659] chnl_net:caif_netlink_parms(): no params data found
[  412.481454][T14659] bridge0: port 1(bridge_slave_0) entered blocking state
[  412.520479][T14659] bridge0: port 1(bridge_slave_0) entered disabled state
[  412.571218][T14783] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14783 comm=syz.0.2988
[  412.618025][T14659] bridge_slave_0: entered allmulticast mode
[  412.624676][T14659] bridge_slave_0: entered promiscuous mode
[  412.667261][T14659] bridge0: port 2(bridge_slave_1) entered blocking state
[  412.683376][T14792] loop9: detected capacity change from 0 to 512
[  412.690041][T14659] bridge0: port 2(bridge_slave_1) entered disabled state
[  412.715807][T14659] bridge_slave_1: entered allmulticast mode
[  412.723316][T14792] EXT4-fs (loop9): 1 truncate cleaned up
[  412.729245][T14792] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  412.742421][T14659] bridge_slave_1: entered promiscuous mode
[  412.765294][T14792] FAULT_INJECTION: forcing a failure.
[  412.765294][T14792] name failslab, interval 1, probability 0, space 0, times 0
[  412.778151][T14792] CPU: 0 UID: 0 PID: 14792 Comm: syz.9.2991 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  412.778178][T14792] Tainted: [W]=WARN
[  412.778259][T14792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  412.778270][T14792] Call Trace:
[  412.778277][T14792]  <TASK>
[  412.778285][T14792]  __dump_stack+0x1d/0x30
[  412.778307][T14792]  dump_stack_lvl+0x95/0xd0
[  412.778329][T14792]  dump_stack+0x15/0x1b
[  412.778466][T14792]  should_fail_ex+0x263/0x280
[  412.778495][T14792]  should_failslab+0x8c/0xb0
[  412.778565][T14792]  kmem_cache_alloc_noprof+0x66/0x400
[  412.778588][T14792]  ? __es_insert_extent+0x508/0xee0
[  412.778617][T14792]  __es_insert_extent+0x508/0xee0
[  412.778653][T14792]  ext4_es_insert_extent+0x46f/0x1c90
[  412.778737][T14792]  ext4_punch_hole+0x5ae/0x7a0
[  412.778756][T14792]  ext4_fallocate+0x2d7/0x2f0
[  412.778811][T14792]  vfs_fallocate+0x3b6/0x450
[  412.778834][T14792]  __x64_sys_fallocate+0x7a/0xd0
[  412.778855][T14792]  x64_sys_call+0x298e/0x3020
[  412.778889][T14792]  do_syscall_64+0x12c/0x370
[  412.778908][T14792]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  412.778926][T14792] RIP: 0033:0x7f74e2dfc799
[  412.778940][T14792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  412.778968][T14792] RSP: 002b:00007f74e1857028 EFLAGS: 00000246 ORIG_RAX: 000000000000011d
[  412.778989][T14792] RAX: ffffffffffffffda RBX: 00007f74e3075fa0 RCX: 00007f74e2dfc799
[  412.779005][T14792] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 0000000000000004
[  412.779016][T14792] RBP: 00007f74e1857090 R08: 0000000000000000 R09: 0000000000000000
[  412.779028][T14792] R10: 0000000008000c61 R11: 0000000000000246 R12: 0000000000000001
[  412.779113][T14792] R13: 00007f74e3076038 R14: 00007f74e3075fa0 R15: 00007ffe7a987b48
[  412.779185][T14792]  </TASK>
[  412.982730][T12941] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  412.994222][T14659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  413.017431][T14659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  413.036895][T14659] team0: Port device team_slave_0 added
[  413.044258][T14659] team0: Port device team_slave_1 added
[  413.062153][T14659] batman_adv: batadv0: Adding interface: batadv_slave_0
[  413.069145][T14659] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  413.097136][T14659] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  413.145029][T14659] batman_adv: batadv0: Adding interface: batadv_slave_1
[  413.153761][T14659] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  413.179879][T14659] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  413.247104][ T4448] gretap0 (unregistering): left promiscuous mode
[  413.263340][ T4448] bond4 (unregistering): (slave gretap1): Releasing active interface
[  413.483383][T14813] loop9: detected capacity change from 0 to 512
[  413.502868][T14813] EXT4-fs (loop9): 1 truncate cleaned up
[  413.508962][T14813] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  413.537950][T14054] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  413.562750][T12941] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  413.583791][T14815] loop5: detected capacity change from 0 to 1024
[  413.621898][T14815] EXT4-fs: Ignoring removed orlov option
[  413.657541][T14815] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  413.684709][   T28] audit: type=1400 audit(1773018893.331:3394): avc:  denied  { setattr } for  pid=14814 comm="syz.5.2993" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  413.737247][T14820] loop9: detected capacity change from 0 to 512
[  413.750698][T14334] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  413.763100][ T4448] bond1 (unregistering): Released all slaves
[  413.785712][ T4448] bond2 (unregistering): (slave batadv1): Releasing active interface
[  413.800504][T14820] loop9: detected capacity change from 0 to 128
[  413.808120][ T4448] bond2 (unregistering): Released all slaves
[  413.839872][ T4448] bond3 (unregistering): Released all slaves
[  413.848668][ T4448] bond4 (unregistering): Released all slaves
[  413.857632][ T4448] bond5 (unregistering): Released all slaves
[  413.866993][ T4448] bond6 (unregistering): Released all slaves
[  413.877202][ T4448] bond7 (unregistering): Released all slaves
[  413.926091][T14837] FAT-fs (loop9): error, corrupted file size (i_pos 548, 512)
[  413.927097][T14831] lo speed is unknown, defaulting to 1000
[  413.945098][T14659] hsr_slave_0: entered promiscuous mode
[  413.961647][T14659] hsr_slave_1: entered promiscuous mode
[  413.967482][T14659] debugfs: 'hsr0' already exists in 'hsr'
[  413.973599][T14837] FAT-fs (loop9): Filesystem has been set read-only
[  414.010997][T14659] Cannot create hsr debugfs directory
[  414.028031][ T4448] tipc: Disabling bearer <udp:syz2>
[  414.053300][ T4448] tipc: Left network mode
[  414.264091][ T4448] hsr_slave_0: left promiscuous mode
[  414.273945][ T4448] batman_adv: batadv0: Removing interface: macsec1
[  414.285592][ T4448] team0 (unregistering): Port device batadv2 removed
[  414.682361][T14897] netlink: 116 bytes leftover after parsing attributes in process `syz.0.3007'.
[  414.713011][   T28] audit: type=1400 audit(1773018894.371:3395): avc:  denied  { shutdown } for  pid=14902 comm="syz.9.3010" laddr=127.0.0.1 lport=255 faddr=127.0.0.1 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  414.905038][T14911] lo speed is unknown, defaulting to 1000
[  415.052448][ T4448] IPVS: stop unused estimator thread 0...
[  415.111051][T14918] loop9: detected capacity change from 0 to 1024
[  415.139916][T14918] EXT4-fs: Ignoring removed orlov option
[  415.327247][T14659] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  415.355171][T14659] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  415.380197][T14659] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  415.407978][T14659] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  415.525863][T14659] 8021q: adding VLAN 0 to HW filter on device bond0
[  415.536363][T14659] 8021q: adding VLAN 0 to HW filter on device team0
[  415.553723][T14659] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  415.564725][T14659] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  415.615158][ T4457] bridge0: port 1(bridge_slave_0) entered blocking state
[  415.622294][ T4457] bridge0: port 1(bridge_slave_0) entered forwarding state
[  415.636578][T14918] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  415.651337][ T4457] bridge0: port 2(bridge_slave_1) entered blocking state
[  415.658502][ T4457] bridge0: port 2(bridge_slave_1) entered forwarding state
[  415.712241][T14659] 8021q: adding VLAN 0 to HW filter on device batadv0
[  415.792249][T14659] veth0_vlan: entered promiscuous mode
[  415.800302][T14659] veth1_vlan: entered promiscuous mode
[  415.818891][T14659] veth0_macvtap: entered promiscuous mode
[  415.826852][T14659] veth1_macvtap: entered promiscuous mode
[  415.837924][T14659] batman_adv: batadv0: Interface activated: batadv_slave_0
[  415.850073][T14659] batman_adv: batadv0: Interface activated: batadv_slave_1
[  415.862830][ T4457] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  415.881753][ T4457] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  415.896500][ T4457] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  415.928198][ T4457] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  416.055484][T12941] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  416.244005][   T28] audit: type=1400 audit(1773018895.891:3396): avc:  denied  { getopt } for  pid=14962 comm="syz.0.3019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  416.470070][T14991] loop1: detected capacity change from 0 to 1024
[  416.497163][T14991] EXT4-fs: Ignoring removed orlov option
[  416.523410][T14991] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  416.563485][   T28] audit: type=1400 audit(1773018896.221:3397): avc:  denied  { view } for  pid=15013 comm="syz.5.3032" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  416.590782][T15016] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3033'.
[  416.726896][T15043] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3039'.
[  416.878508][T15060] loop2: detected capacity change from 0 to 1024
[  416.893756][T15060] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  416.911816][T15058] loop5: detected capacity change from 0 to 512
[  416.944268][T15060] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4222: comm syz.2.3042: Allocating blocks 497-513 which overlap fs metadata
[  416.959004][T15060] EXT4-fs (loop2): Remounting filesystem read-only
[  416.960922][T15058] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  416.984776][T15058] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[  416.986547][T15060] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15060 comm=syz.2.3042
[  417.011461][T15058] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  417.013111][T15060] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.3042' sets config #1
[  417.028654][T15058] System zones: 0-2, 18-18, 34-35
[  417.036799][T15058] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  417.053321][T15059] EXT4-fs (loop2): pa ffff888108664e70: logic 304, phys. 433, len 5
[  417.113021][T14054] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  417.173621][T15073] loop2: detected capacity change from 0 to 512
[  417.195427][T15075] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3045'.
[  417.200865][   T28] audit: type=1400 audit(1773018896.851:3398): avc:  denied  { bind } for  pid=15074 comm="syz.0.3045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  417.240720][T15073] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -13
[  417.266234][T15073] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #13: comm syz.2.3044: iget: bad i_size value: 12154757448730
[  417.297550][T15073] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  417.300857][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  417.316603][    C1] EXT4-fs (loop2): initial error at time 1773018896: ext4_orphan_get:1391: inode 13
[  417.324263][   T28] audit: type=1400 audit(1773018896.981:3399): avc:  denied  { connect } for  pid=15083 comm="syz.9.3049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  417.326277][    C1] EXT4-fs (loop2): last error at time 1773018896: ext4_orphan_get:1391: inode 13
[  417.346641][T15073] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.3044: couldn't read orphan inode 13 (err -117)
[  417.369359][T14659] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  417.381323][T15088] netlink: 27 bytes leftover after parsing attributes in process `syz.0.3051'.
[  417.390767][   T28] audit: type=1400 audit(1773018897.041:3400): avc:  denied  { read } for  pid=15083 comm="syz.9.3049" path="socket:[43515]" dev="sockfs" ino=43515 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  417.391727][T15073] loop2: lost filesystem error report for type 5 error -117
[  417.435156][T15073] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  417.436822][T15085] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15085 comm=syz.9.3049
[  417.480655][T15085] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15085 comm=syz.9.3049
[  417.494026][T15085] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15085 comm=syz.9.3049
[  417.507065][T15085] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15085 comm=syz.9.3049
[  417.530576][T15085] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15085 comm=syz.9.3049
[  417.530742][T14054] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  417.546104][T15085] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15085 comm=syz.9.3049
[  417.568057][T15085] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15085 comm=syz.9.3049
[  417.581205][T15085] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15085 comm=syz.9.3049
[  417.594255][T15085] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15085 comm=syz.9.3049
[  417.637200][T15085] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15085 comm=syz.9.3049
[  417.667481][T15085] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15085 comm=syz.9.3049
[  417.681820][T15085] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15085 comm=syz.9.3049
[  417.695016][T15085] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15085 comm=syz.9.3049
[  417.710199][T15085] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15085 comm=syz.9.3049
[  417.730807][T15085] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15085 comm=syz.9.3049
[  417.755164][   T28] audit: type=1400 audit(1773018897.411:3401): avc:  denied  { mount } for  pid=15103 comm="syz.2.3057" name="/" dev="configfs" ino=2086 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  417.778292][T15085] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15085 comm=syz.9.3049
[  417.791486][T15085] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15085 comm=syz.9.3049
[  417.804885][   T28] audit: type=1400 audit(1773018897.411:3402): avc:  denied  { search } for  pid=15103 comm="syz.2.3057" name="/" dev="configfs" ino=2086 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  417.828324][   T28] audit: type=1400 audit(1773018897.411:3403): avc:  denied  { setattr } for  pid=15103 comm="syz.2.3057" name="/" dev="configfs" ino=2086 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  417.869463][T15114] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3058'.
[  417.885173][T15114] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3058'.
[  417.903192][T15114] netlink: 'syz.9.3058': attribute type 6 has an invalid length.
[  417.997806][T15115] loop2: detected capacity change from 0 to 8192
[  417.997894][T15119] loop9: detected capacity change from 0 to 512
[  418.034833][T15119] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -13
[  418.043287][T15119] EXT4-fs error (device loop9): ext4_orphan_get:1391: inode #13: comm syz.9.3060: iget: bad i_size value: 12154757448730
[  418.056137][T15119] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  418.060850][    C1] EXT4-fs (loop9): error count since last fsck: 1
[  418.065700][T15115]  loop2: p1 < > p2 p4 < p5 >
[  418.070001][    C1] EXT4-fs (loop9): initial error at time 1773018897: ext4_orphan_get:1391: inode 13
[  418.083963][T15115] loop2: partition table partially beyond EOD, 
[  418.090496][    C1] EXT4-fs (loop9): last error at time 1773018897: ext4_orphan_get:1391: inode 13
[  418.090659][T15119] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.3060: couldn't read orphan inode 13 (err -117)
[  418.098705][T15115] truncated
[  418.106255][T15119] loop9: lost filesystem error report for type 5 error -117
[  418.118353][T15115] loop2: p1 start 134217728 is beyond EOD, truncated
[  418.135487][T15115] loop2: p2 size 591360 extends beyond EOD, truncated
[  418.136039][T15119] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  418.157422][T15115] loop2: p5 size 591360 extends beyond EOD, truncated
[  418.180728][T12941] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  418.233914][T15123] loop9: detected capacity change from 0 to 4096
[  418.255283][T15123] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  418.314590][T12941] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  418.343128][T15128] FAULT_INJECTION: forcing a failure.
[  418.343128][T15128] name failslab, interval 1, probability 0, space 0, times 0
[  418.350945][   T28] audit: type=1400 audit(1773018898.001:3404): avc:  denied  { getopt } for  pid=15125 comm="syz.0.3062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  418.369528][T15128] CPU: 1 UID: 0 PID: 15128 Comm: syz.1.3064 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  418.369560][T15128] Tainted: [W]=WARN
[  418.369627][T15128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  418.369639][T15128] Call Trace:
[  418.369647][T15128]  <TASK>
[  418.369655][T15128]  __dump_stack+0x1d/0x30
[  418.369681][T15128]  dump_stack_lvl+0x95/0xd0
[  418.369703][T15128]  dump_stack+0x15/0x1b
[  418.369765][T15128]  should_fail_ex+0x263/0x280
[  418.369788][T15128]  ? call_usermodehelper_setup+0x72/0x190
[  418.369863][T15128]  should_failslab+0x8c/0xb0
[  418.369883][T15128]  ? __pfx_free_modprobe_argv+0x10/0x10
[  418.369912][T15128]  __kmalloc_cache_noprof+0x5f/0x410
[  418.369937][T15128]  ? __pfx_free_modprobe_argv+0x10/0x10
[  418.369960][T15128]  call_usermodehelper_setup+0x72/0x190
[  418.369987][T15128]  __request_module+0x264/0x3f0
[  418.370065][T15128]  ? capable+0x7b/0xb0
[  418.370087][T15128]  ? security_capable+0x7b/0x90
[  418.370110][T15128]  dev_load+0x61/0xc0
[  418.370191][T15128]  dev_ioctl+0x776/0x960
[  418.370217][T15128]  sock_ioctl+0x593/0x610
[  418.370327][T15128]  ? __pfx_sock_ioctl+0x10/0x10
[  418.370386][T15128]  __se_sys_ioctl+0xce/0x140
[  418.370404][T15128]  __x64_sys_ioctl+0x43/0x50
[  418.370487][T15128]  x64_sys_call+0x1563/0x3020
[  418.370508][T15128]  do_syscall_64+0x12c/0x370
[  418.370601][T15128]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  418.370623][T15128] RIP: 0033:0x7fdbf5fac799
[  418.370639][T15128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  418.370656][T15128] RSP: 002b:00007fdbf4a07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  418.370730][T15128] RAX: ffffffffffffffda RBX: 00007fdbf6225fa0 RCX: 00007fdbf5fac799
[  418.370744][T15128] RDX: 0000200000007280 RSI: 00000000000089f0 RDI: 0000000000000003
[  418.370757][T15128] RBP: 00007fdbf4a07090 R08: 0000000000000000 R09: 0000000000000000
[  418.370770][T15128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  418.370782][T15128] R13: 00007fdbf6226038 R14: 00007fdbf6225fa0 R15: 00007ffcf3b94d78
[  418.370805][T15128]  </TASK>
[  418.571972][T15136] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  418.578553][   T28] audit: type=1400 audit(1773018898.161:3405): avc:  denied  { write } for  pid=15125 comm="syz.0.3062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  418.619446][   T28] audit: type=1400 audit(1773018898.181:3406): avc:  denied  { read write } for  pid=15131 comm="syz.1.3065" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  418.656988][T15136] EXT4-fs (loop1): 1 truncate cleaned up
[  418.671334][T15136] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  418.921146][T14659] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  418.940559][T15156] set_capacity_and_notify: 1 callbacks suppressed
[  418.940578][T15156] loop2: detected capacity change from 0 to 512
[  418.959519][T15142] lo speed is unknown, defaulting to 1000
[  418.973800][T15156] EXT4-fs: inline encryption not supported
[  418.988052][T15156] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  419.021325][T15156] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e842e02c, mo2=0002]
[  419.049702][T15156] System zones: 1-12
[  419.056742][T15156] EXT4-fs (loop2): orphan cleanup on readonly fs
[  419.070898][T15156] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.3070: bad orphan inode 267
[  419.090920][T15156] loop2: lost filesystem error report for type 5 error -117
[  419.100146][T15156] EXT4-fs (loop2): Remounting filesystem read-only
[  419.107480][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  419.107497][    C0] EXT4-fs (loop2): initial error at time 1773018898: ext4_orphan_get:1417
[  419.107526][    C0] EXT4-fs (loop2): last error at time 1773018898: ext4_orphan_get:1417
[  419.165060][T15156] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  419.191978][T14054] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  419.298794][   T30] vlan0: left allmulticast mode
[  419.303892][T15169] loop1: detected capacity change from 0 to 128
[  419.328707][   T30] bond0: left allmulticast mode
[  419.331959][T15169] vfat: Unknown parameter '�ÿÿÿÿÿÿÿÿ00000000000000000000004g]£i†‘¸½öã
Õ“ áÚ [rN'
[  419.344407][   T30] macvlan0: left allmulticast mode
[  419.349542][   T30] vlan0: left promiscuous mode
[  419.380951][   T30] bond0: left promiscuous mode
[  419.410222][   T30] macvlan0: left promiscuous mode
[  419.419149][T15175] loop2: detected capacity change from 0 to 512
[  419.426770][   T30] bridge0: port 1(vlan0) entered disabled state
[  419.458949][T15169] can: request_module (can-proto-5) failed.
[  419.481903][T15175] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  419.559243][T15175] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz.2.3073: iget: checksum invalid
[  419.598690][   T30] bond4 (unregistering): (slave gretap1): Releasing active interface
[  419.642340][   T30] bond2 (unregistering): (slave geneve2): Releasing active interface
[  420.034815][T14334] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  420.061855][   T30] bond0 (unregistering): (slave macvlan0): Releasing backup interface
[  420.105152][T15198] ip6t_REJECT: ECHOREPLY is not supported
[  420.115589][   T30] bond0 (unregistering): Released all slaves
[  420.141529][   T30] bond1 (unregistering): (slave vxcan3): Releasing backup interface
[  420.171172][   T30] bond1 (unregistering): Released all slaves
[  420.188364][T15201] xt_hashlimit: size too large, truncated to 1048576
[  420.197423][   T30] bond2 (unregistering): Released all slaves
[  420.228179][   T30] bond3 (unregistering): Released all slaves
[  420.238173][   T30] bond4 (unregistering): Released all slaves
[  420.276309][T15172] lo speed is unknown, defaulting to 1000
[  420.295853][   T30] tipc: Left network mode
[  420.326038][T15142] chnl_net:caif_netlink_parms(): no params data found
[  420.428567][   T30] hsr_slave_0: left promiscuous mode
[  420.575687][ T4457] smc: removing ib device syU×
[  420.581381][T15142] bridge0: port 1(bridge_slave_0) entered blocking state
[  420.605012][T15142] bridge0: port 1(bridge_slave_0) entered disabled state
[  420.621034][T15142] bridge_slave_0: entered allmulticast mode
[  420.635354][T15142] bridge_slave_0: entered promiscuous mode
[  420.652062][T15142] bridge0: port 2(bridge_slave_1) entered blocking state
[  420.659171][T15142] bridge0: port 2(bridge_slave_1) entered disabled state
[  420.681005][T15142] bridge_slave_1: entered allmulticast mode
[  420.697933][T15142] bridge_slave_1: entered promiscuous mode
[  420.714845][T15214] bridge0: port 2(bridge_slave_1) entered disabled state
[  420.722079][T15214] bridge0: port 1(bridge_slave_0) entered disabled state
[  420.809767][T15142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  420.859104][T15142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  420.909487][T15142] team0: Port device team_slave_0 added
[  420.921551][T15142] team0: Port device team_slave_1 added
[  420.953424][T15142] batman_adv: batadv0: Adding interface: batadv_slave_0
[  420.970596][T15142] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  421.001626][T15142] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  421.016868][T15142] batman_adv: batadv0: Adding interface: batadv_slave_1
[  421.024002][T15142] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  421.050241][T15142] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  421.067592][   T30] IPVS: stop unused estimator thread 0...
[  421.102354][T14054] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  421.121819][T15223] ip6gre1: entered promiscuous mode
[  421.127608][T15223] ip6gre1: entered allmulticast mode
[  421.210769][T15142] hsr_slave_0: entered promiscuous mode
[  421.217800][T15142] hsr_slave_1: entered promiscuous mode
[  421.224683][T15142] debugfs: 'hsr0' already exists in 'hsr'
[  421.230486][T15142] Cannot create hsr debugfs directory
[  421.503347][T15235] binfmt_misc: register: failed to install interpreter file ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  421.584790][T15237] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3085'.
[  421.596333][T15237] vlan2: entered promiscuous mode
[  421.601425][T15237] syz_tun: entered promiscuous mode
[  421.737915][T15241] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3086'.
[  421.775171][T15241] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3086'.
[  422.078154][T15248] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3089'.
[  422.087365][T15248] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3089'.
[  422.124883][T15250] sch_fq: defrate 4294967295 ignored.
[  422.130948][T15250] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3090'.
[  423.072459][T15203] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  423.131701][T15142] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  423.202151][T15142] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  423.241841][   T28] kauditd_printk_skb: 6 callbacks suppressed
[  423.241917][   T28] audit: type=1326 audit(1773018902.901:3413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15263 comm="syz.1.3095" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdbf5fac799 code=0x0
[  423.277333][T15142] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  423.895718][T15142] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  424.038955][T15277] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3098'.
[  424.086919][   T28] audit: type=1400 audit(1773018903.741:3414): avc:  denied  { create } for  pid=15290 comm="syz.2.3100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  424.153890][   T28] audit: type=1400 audit(1773018903.741:3415): avc:  denied  { setopt } for  pid=15290 comm="syz.2.3100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  424.262712][T15142] 8021q: adding VLAN 0 to HW filter on device bond0
[  424.288608][T15298] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  424.334566][T15142] 8021q: adding VLAN 0 to HW filter on device team0
[  424.355534][   T30] bridge0: port 1(bridge_slave_0) entered blocking state
[  424.362627][   T30] bridge0: port 1(bridge_slave_0) entered forwarding state
[  424.392966][   T28] audit: type=1326 audit(1773018904.041:3416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15319 comm="syz.5.3110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f77ae73c799 code=0x7ffc0000
[  424.428111][ T4448] bridge0: port 2(bridge_slave_1) entered blocking state
[  424.435215][ T4448] bridge0: port 2(bridge_slave_1) entered forwarding state
[  424.445578][   T28] audit: type=1326 audit(1773018904.041:3417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15319 comm="syz.5.3110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f77ae73c799 code=0x7ffc0000
[  424.481908][T15142] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  424.502906][T15142] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  424.513463][   T28] audit: type=1326 audit(1773018904.041:3418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15319 comm="syz.5.3110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f77ae73c799 code=0x7ffc0000
[  424.567039][T15343] loop5: detected capacity change from 0 to 512
[  424.605711][T15343] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  424.625506][T15353] loop1: detected capacity change from 0 to 128
[  424.652475][   T28] audit: type=1326 audit(1773018904.041:3419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15319 comm="syz.5.3110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f77ae73c799 code=0x7ffc0000
[  424.678587][T15343] ext4 filesystem being mounted at /25/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  424.692306][T15353] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  424.704195][   T28] audit: type=1326 audit(1773018904.041:3420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15319 comm="syz.5.3110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f77ae73c799 code=0x7ffc0000
[  424.712159][T15343] FAULT_INJECTION: forcing a failure.
[  424.712159][T15343] name failslab, interval 1, probability 0, space 0, times 0
[  424.735448][   T28] audit: type=1326 audit(1773018904.051:3421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15319 comm="syz.5.3110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f77ae73c799 code=0x7ffc0000
[  424.759648][T15142] 8021q: adding VLAN 0 to HW filter on device batadv0
[  424.764366][   T28] audit: type=1326 audit(1773018904.051:3422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15319 comm="syz.5.3110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f77ae73c799 code=0x7ffc0000
[  424.802950][T15361] batadv_slave_1: entered promiscuous mode
[  424.815266][T15343] CPU: 0 UID: 0 PID: 15343 Comm: syz.5.3116 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  424.815293][T15343] Tainted: [W]=WARN
[  424.815329][T15343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  424.815341][T15343] Call Trace:
[  424.815347][T15343]  <TASK>
[  424.815355][T15343]  __dump_stack+0x1d/0x30
[  424.815380][T15343]  dump_stack_lvl+0x95/0xd0
[  424.815403][T15343]  dump_stack+0x15/0x1b
[  424.815423][T15343]  should_fail_ex+0x263/0x280
[  424.815500][T15343]  should_failslab+0x8c/0xb0
[  424.815520][T15343]  __kmalloc_noprof+0xb8/0x4e0
[  424.815581][T15343]  ? ext4_find_extent+0x17a/0x790
[  424.815608][T15343]  ext4_find_extent+0x17a/0x790
[  424.815698][T15343]  ext4_ext_map_blocks+0x10d/0x2fb0
[  424.815723][T15343]  ? xas_load+0x413/0x430
[  424.815754][T15343]  ? xa_load+0xb1/0xe0
[  424.815828][T15343]  ? obj_cgroup_charge_account+0x122/0x1a0
[  424.815853][T15343]  ext4_map_query_blocks+0xb2/0x550
[  424.815891][T15343]  ? ext4_es_lookup_extent+0x3ae/0x570
[  424.815936][T15343]  ext4_map_blocks+0x306/0x970
[  424.816034][T15343]  ext4_getblk+0x128/0x530
[  424.816059][T15343]  ext4_bread_batch+0x5c/0x320
[  424.816087][T15343]  __ext4_find_entry+0x852/0xdf0
[  424.816171][T15343]  ? kmem_cache_alloc_lru_noprof+0x1eb/0x410
[  424.816193][T15343]  ? __d_alloc+0x37/0x340
[  424.816220][T15343]  ext4_lookup+0xcd/0x3a0
[  424.816263][T15343]  lookup_one_qstr_excl+0xcb/0x250
[  424.816327][T15343]  filename_create+0x155/0x220
[  424.816357][T15343]  filename_symlinkat+0x94/0x2b0
[  424.816383][T15343]  __se_sys_symlink+0x42/0x1b0
[  424.816450][T15343]  __x64_sys_symlink+0x31/0x40
[  424.816470][T15343]  x64_sys_call+0x2465/0x3020
[  424.816546][T15343]  do_syscall_64+0x12c/0x370
[  424.816564][T15343]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  424.816585][T15343] RIP: 0033:0x7f77ae73c799
[  424.816601][T15343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  424.816663][T15343] RSP: 002b:00007f77ad197028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058
[  424.816680][T15343] RAX: ffffffffffffffda RBX: 00007f77ae9b5fa0 RCX: 00007f77ae73c799
[  424.816694][T15343] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 00002000000005c0
[  424.816710][T15343] RBP: 00007f77ad197090 R08: 0000000000000000 R09: 0000000000000000
[  424.816723][T15343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  424.816736][T15343] R13: 00007f77ae9b6038 R14: 00007f77ae9b5fa0 R15: 00007fff6217d1f8
[  424.816756][T15343]  </TASK>
[  424.818279][T15353] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  424.908149][T15359] batman_adv: batadv0: Adding interface: dummy0
[  425.086117][T15359] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  425.111717][T15359] batman_adv: batadv0: Interface activated: dummy0
[  425.124821][T14334] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  425.127002][T15353] SELinux: security_context_str_to_sid (ô�a`yv©—-”|J+0lè8G[økT—ƒ_È×|nœÉUÓ5
[  425.127002][T15353] M9) failed with errno=-22
[  425.167426][T15357] batadv_slave_1: left promiscuous mode
[  425.219777][T15383] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22
[  425.240608][T15142] veth0_vlan: entered promiscuous mode
[  425.251323][T15385] loop5: detected capacity change from 0 to 512
[  425.263584][T15142] veth1_vlan: entered promiscuous mode
[  425.302361][T15386] vhci_hcd vhci_hcd.4: invalid port number 255
[  425.336785][T15385] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -13
[  425.339370][T15386] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub
[  425.352911][T15142] veth0_macvtap: entered promiscuous mode
[  425.360684][T15385] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #13: comm syz.5.3120: iget: bad i_size value: 12154757448730
[  425.375630][T15142] veth1_macvtap: entered promiscuous mode
[  425.381883][T15385] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  425.385909][T15385] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.3120: couldn't read orphan inode 13 (err -117)
[  425.395078][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  425.395117][    C0] EXT4-fs (loop5): initial error at time 1773018905: ext4_orphan_get:1391: inode 13
[  425.395148][    C0] EXT4-fs (loop5): last error at time 1773018905: ext4_orphan_get:1391: inode 13
[  425.426978][T15142] batman_adv: batadv0: Interface activated: batadv_slave_0
[  425.432342][T15385] loop5: lost filesystem error report for type 5 error -117
[  425.451321][T15385] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  425.478437][T15142] batman_adv: batadv0: Interface activated: batadv_slave_1
[  425.509011][   T41] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  425.518633][   T41] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  425.565647][   T41] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  425.575923][T14334] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  425.585385][   T41] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  425.805428][ T4448] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  425.918857][T15426] batadv_slave_0: entered promiscuous mode
[  425.940605][T15426] batman_adv: batadv0: Adding interface: macsec1
[  425.947392][T15426] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  425.978920][T15426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  425.990567][T15426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  426.001992][T15426] batman_adv: batadv0: Interface activated: macsec1
[  426.060763][T15440] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  426.076127][T15440] batadv_slave_0: entered promiscuous mode
[  426.085765][T15445] loop0: detected capacity change from 0 to 128
[  426.113665][T15445] vfat: Unknown parameter 'ÿÿ01777777777777777777777µ‚³zXDb„�&·™Så!²|:]¼ŽÍdN'
[  426.161934][T15447] loop1: detected capacity change from 0 to 512
[  426.194277][T15447] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -13
[  426.234225][T15450] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3134'.
[  426.251999][T15447] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #13: comm syz.1.3132: iget: bad i_size value: 12154757448730
[  426.273779][T15447] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  426.274003][T15447] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.3132: couldn't read orphan inode 13 (err -117)
[  426.283165][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  426.283187][    C0] EXT4-fs (loop1): initial error at time 1773018905: ext4_orphan_get:1391: inode 13
[  426.283220][    C0] EXT4-fs (loop1): last error at time 1773018905: ext4_orphan_get:1391: inode 13
[  426.327295][T15450] lo speed is unknown, defaulting to 1000
[  426.341220][T15450] lo speed is unknown, defaulting to 1000
[  426.387166][T15457] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3137'.
[  426.411403][T15447] loop1: lost filesystem error report for type 5 error -117
[  426.411913][T15447] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  426.444531][T15450] lo speed is unknown, defaulting to 1000
[  426.462793][T15450] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  426.538588][T14659] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  426.552327][T15455] bridge1: the hash_elasticity option has been deprecated and is always 16
[  426.582682][T15450] lo speed is unknown, defaulting to 1000
[  426.601841][T15450] lo speed is unknown, defaulting to 1000
[  426.622967][T15450] lo speed is unknown, defaulting to 1000
[  426.638071][T15450] lo speed is unknown, defaulting to 1000
[  426.646561][T15468] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3140'.
[  426.656358][T15468] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3140'.
[  426.673103][T15468] raw_sendmsg: syz.1.3140 forgot to set AF_INET. Fix it!
[  426.680236][T15450] lo speed is unknown, defaulting to 1000
[  426.750567][T15484] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3143'.
[  426.960866][T15499] netlink: 'syz.1.3148': attribute type 32 has an invalid length.
[  427.013470][T15502] loop1: detected capacity change from 0 to 128
[  427.034184][T15502] msdos: Unknown parameter 'ˆ'
[  427.499789][T15507] loop2: detected capacity change from 0 to 8192
[  427.824069][T15512] loop0: detected capacity change from 0 to 512
[  427.847191][T15512] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -13
[  427.870926][T15512] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #13: comm syz.0.3151: iget: bad i_size value: 12154757448730
[  427.887582][T15512] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  427.887735][T15512] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.3151: couldn't read orphan inode 13 (err -117)
[  427.897012][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  427.897039][    C0] EXT4-fs (loop0): initial error at time 1773018907: ext4_orphan_get:1391: inode 13
[  427.897089][    C0] EXT4-fs (loop0): last error at time 1773018907: ext4_orphan_get:1391: inode 13
[  427.934163][T15512] loop0: lost filesystem error report for type 5 error -117
[  427.940599][T15512] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  428.555074][T15549] loop5: detected capacity change from 0 to 512
[  428.562666][T15549] FAT-fs (loop5): IO charset utf�Ѿ¹Éh$Û‚‰œ#wî•w9Á‹C=Yæ’³�t¤•áÁEÅ’&y3‹_òÀ©„@¥rRh¢BÀ&5dùˆÓÁxpOêø¤ß�‚upˆ‚êš@HÆäX¡ð[ƒòæ›–[ò²â°î7VGø†¥1‰˜ yª{´îþvŽìX±œõªñ)P1uô&-÷@=õ6 not found
[  428.878760][T15506] syz.2.3150 (15506) used greatest stack depth: 5432 bytes left
[  429.104538][T15142] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  429.393211][T15561] loop2: detected capacity change from 0 to 512
[  429.414168][T15561] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  429.415539][T15587] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3163'.
[  429.438155][T15594] EXT4-fs: Ignoring removed orlov option
[  429.471126][T15561] EXT4-fs (loop2): 1 truncate cleaned up
[  429.481355][T15594] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  429.494244][T15561] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  429.516815][T15587] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (24670!=35945)
[  429.534570][   T28] kauditd_printk_skb: 29 callbacks suppressed
[  429.534586][   T28] audit: type=1400 audit(1773018909.191:3452): avc:  denied  { quotaon } for  pid=15558 comm="syz.2.3156" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  429.547652][T15587] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  429.583204][T15587] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  429.621159][   T28] audit: type=1400 audit(1773018909.261:3453): avc:  denied  { setattr } for  pid=15599 comm="syz.0.3167" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:sshd_exec_t:s0"
[  429.648374][T15587] EXT4-fs (loop1): Can't support bigalloc feature without extents feature
[  429.648374][T15587] 
[  429.670815][T15587] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features
[  429.712698][T15587] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  429.766451][T15607] set_capacity_and_notify: 2 callbacks suppressed
[  429.766469][T15607] loop0: detected capacity change from 0 to 512
[  429.808491][T14659] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  429.823540][T15607] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -13
[  429.838093][T15607] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #13: comm syz.0.3169: iget: bad i_size value: 12154757448730
[  429.856659][T15607] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  429.856846][T15607] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.3169: couldn't read orphan inode 13 (err -117)
[  429.866039][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  429.866058][    C0] EXT4-fs (loop0): initial error at time 1773018909: ext4_orphan_get:1391: inode 13
[  429.866087][    C0] EXT4-fs (loop0): last error at time 1773018909: ext4_orphan_get:1391: inode 13
[  429.889055][T15610] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3170'.
[  429.893925][T15607] loop0: lost filesystem error report for type 5 error -117
[  429.914683][T15607] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  429.954136][T15142] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  429.981661][T15610] siw: device registration error -23
[  430.001352][T14054] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  430.075295][T15614] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3171'.
[  430.077884][T15615] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3172'.
[  430.092020][T15614] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3171'.
[  430.160123][T14054] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  430.174634][T15610] bridge1: the hash_elasticity option has been deprecated and is always 16
[  430.195058][T14054] CPU: 1 UID: 0 PID: 14054 Comm: syz-executor Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  430.195092][T14054] Tainted: [W]=WARN
[  430.195099][T14054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  430.195111][T14054] Call Trace:
[  430.195118][T14054]  <TASK>
[  430.195127][T14054]  __dump_stack+0x1d/0x30
[  430.195170][T14054]  dump_stack_lvl+0x95/0xd0
[  430.195192][T14054]  dump_stack+0x15/0x1b
[  430.195208][T14054]  dump_header+0x80/0x240
[  430.195288][T14054]  oom_kill_process+0x295/0x350
[  430.195310][T14054]  out_of_memory+0x97d/0xb80
[  430.195332][T14054]  try_charge_memcg+0x62e/0xa10
[  430.195375][T14054]  mem_cgroup_swapin_charge_folio+0x103/0x1f0
[  430.195406][T14054]  __swap_cache_prepare_and_add+0x386/0x530
[  430.195445][T14054]  swap_cache_alloc_folio+0xa2/0x120
[  430.195472][T14054]  swap_cluster_readahead+0x36b/0x3d0
[  430.195608][T14054]  swapin_readahead+0xde/0x840
[  430.195724][T14054]  ? __rcu_read_unlock+0x4e/0x70
[  430.195747][T14054]  ? __perf_event_task_sched_in+0xa65/0xad0
[  430.195815][T14054]  ? __list_add_valid_or_report+0x38/0xe0
[  430.195890][T14054]  ? __rcu_read_unlock+0x4e/0x70
[  430.195907][T14054]  ? swap_cache_get_folio+0x26f/0x280
[  430.195983][T14054]  do_swap_page+0x30d/0x2220
[  430.196012][T14054]  ? __schedule+0x93c/0xd40
[  430.196034][T14054]  ? __rcu_read_lock+0x36/0x50
[  430.196055][T14054]  ? pte_offset_map_rw_nolock+0x19e/0x200
[  430.196107][T14054]  handle_mm_fault+0xb40/0x3020
[  430.196137][T14054]  ? vma_start_read+0x1c7/0x2c0
[  430.196165][T14054]  do_user_addr_fault+0x62f/0x1050
[  430.196218][T14054]  ? trace_page_fault_user+0x1f/0xe0
[  430.196246][T14054]  exc_page_fault+0x62/0xa0
[  430.196342][T14054]  asm_exc_page_fault+0x26/0x30
[  430.196361][T14054] RIP: 0033:0x7f92fd747917
[  430.196375][T14054] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  430.196391][T14054] RSP: 002b:00007ffd8e1b05b0 EFLAGS: 00010202
[  430.196405][T14054] RAX: 0000000000000000 RBX: 000055557bcfb500 RCX: 00007f92fd747917
[  430.196453][T14054] RDX: 00007ffd8e1b05f0 RSI: 0000000000000000 RDI: 0000000000000000
[  430.196468][T14054] RBP: 00007ffd8e1b065c R08: 0000000000000000 R09: 0000000000000000
[  430.196592][T14054] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388
[  430.196606][T14054] R13: 00000000000927c0 R14: 000000000006917e R15: 00007ffd8e1b06b0
[  430.196673][T14054]  </TASK>
[  430.200479][T14054] memory: usage 307200kB, limit 307200kB, failcnt 308
[  430.236508][T15614] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0
[  430.276268][T14054] memory+swap: usage 265528kB, limit 9007199254740988kB, failcnt 0
[  430.473001][T14334] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  430.591270][T14054] kmem: usage 708kB, limit 9007199254740988kB, failcnt 0
[  430.606584][T14054] Memory cgroup stats for /syz2:
[  430.606770][T14054] cache 0
[  430.614696][T14054] rss 0
[  430.617454][T14054] shmem 0
[  430.620390][T14054] mapped_file 208896
[  430.718293][T14054] dirty 0
[  430.721302][T14054] writeback 0
[  430.724764][T14054] workingset_refault_anon 92
[  430.729492][T14054] workingset_refault_file 0
[  430.734077][T14054] swap 192512
[  430.737527][T14054] swapcached 12779520
[  430.741597][T14054] pgpgin 23968
[  430.745073][T14054] pgpgout 23968
[  430.748714][T14054] pgfault 28759
[  430.752276][T14054] pgmajfault 40
[  430.755723][T14054] inactive_anon 0
[  430.759395][T14054] active_anon 0
[  430.762861][T14054] inactive_file 0
[  430.766482][T14054] active_file 0
[  430.770020][T14054] unevictable 0
[  430.773524][T14054] hierarchical_memory_limit 314572800
[  430.778883][T14054] hierarchical_memsw_limit 9223372036854771712
[  430.785039][T14054] total_cache 0
[  430.788486][T14054] total_rss 0
[  430.791822][T14054] total_shmem 0
[  430.795268][T14054] total_mapped_file 208896
[  430.799676][T14054] total_dirty 0
[  430.804488][T14054] total_writeback 0
[  430.808306][T14054] total_workingset_refault_anon 92
[  430.813485][T14054] total_workingset_refault_file 0
[  430.818630][T14054] total_swap 192512
[  430.841285][T14054] total_swapcached 12779520
[  430.845805][T14054] total_pgpgin 23968
[  430.857962][T14054] total_pgpgout 23968
[  430.862320][T14054] total_pgfault 28759
[  430.866299][T14054] total_pgmajfault 40
[  430.870274][T14054] total_inactive_anon 0
[  430.874656][T14054] total_active_anon 0
[  430.878716][T14054] total_inactive_file 0
[  430.883123][T14054] total_active_file 0
[  430.897289][T15647] loop0: detected capacity change from 0 to 512
[  430.903643][T14054] total_unevictable 0
[  430.907619][T14054] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.3172,pid=15612,uid=0
[  430.928441][T14054] Memory cgroup out of memory: Killed process 15612 (syz.2.3172) total-vm:94364kB, anon-rss:1228kB, file-rss:22552kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[  430.960062][T15647] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -13
[  430.968520][T15647] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #13: comm syz.0.3181: iget: bad i_size value: 12154757448730
[  430.982243][T15647] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  430.990925][    C1] EXT4-fs (loop0): error count since last fsck: 1
[  431.001222][T15647] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.3181: couldn't read orphan inode 13 (err -117)
[  431.006515][    C1] EXT4-fs (loop0): initial error at time 1773018910: ext4_orphan_get:1391: inode 13
[  431.027784][    C1] EXT4-fs (loop0): last error at time 1773018910: ext4_orphan_get:1391: inode 13
[  431.028906][T15649] loop1: detected capacity change from 0 to 128
[  431.065444][T15647] loop0: lost filesystem error report for type 5 error -117
[  431.066051][T15647] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  431.105936][   T28] audit: type=1400 audit(1773018910.761:3454): avc:  denied  { bind } for  pid=15652 comm="syz.2.3183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  431.172089][   T28] audit: type=1400 audit(1773018910.821:3455): avc:  denied  { write } for  pid=15652 comm="syz.2.3183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  431.187860][T15649] netlink: 'syz.1.3182': attribute type 10 has an invalid length.
[  431.209186][T15142] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  431.227077][   T28] audit: type=1400 audit(1773018910.881:3456): avc:  denied  { setopt } for  pid=15652 comm="syz.2.3183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  431.250353][T15649] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3182'.
[  431.365522][T15657] loop0: detected capacity change from 0 to 512
[  431.395388][T15657] EXT4-fs (loop0): 1 truncate cleaned up
[  431.405159][T15657] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  431.431951][   T28] audit: type=1400 audit(1773018911.091:3457): avc:  denied  { rename } for  pid=15656 comm="syz.0.3184" name="file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  431.455617][T15657] tipc: Failed to remove unknown binding: 66,0,0/0:3744185671/3744185672
[  431.471915][T15649] bond0: entered promiscuous mode
[  431.474474][T15142] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  431.548982][    C1] IPv4: Oversized IP packet from 127.0.0.1
[  431.549517][T15649] bond_slave_0: entered promiscuous mode
[  431.715395][T15649] bond_slave_1: entered promiscuous mode
[  431.776281][T15649] bridge0: port 3(bond0) entered blocking state
[  431.786596][T15649] bridge0: port 3(bond0) entered disabled state
[  431.806154][T15649] bond0: entered allmulticast mode
[  431.812239][T15649] bond_slave_0: entered allmulticast mode
[  431.818929][T15649] bond_slave_1: entered allmulticast mode
[  432.091523][T15684] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3193'.
[  432.767386][T15688] loop5: detected capacity change from 0 to 512
[  433.823452][T15688] EXT4-fs (loop5): 1 orphan inode deleted
[  433.829657][T15688] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  433.842364][T15688] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  433.887201][   T30] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  433.940883][   T30] EXT4-fs error (device loop5): ext4_release_dquot:7037: comm kworker/u8:1: Failed to release dquot type 1
[  434.084995][T15705] loop1: detected capacity change from 0 to 1024
[  434.123261][T15705] EXT4-fs: Ignoring removed orlov option
[  434.148394][T15708] loop0: detected capacity change from 0 to 1024
[  434.168248][T15708] EXT4-fs: Ignoring removed orlov option
[  434.175257][T15709] netlink: 'syz.9.3201': attribute type 10 has an invalid length.
[  434.183810][T15708] EXT4-fs (loop0): stripe (9) is not aligned with cluster size (16), stripe is disabled
[  434.194726][T14334] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  434.211459][T15705] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  434.239658][T15708] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  434.263217][T15717] SELinux:  policydb version -1130963766 does not match my version range 15-35
[  434.272554][T15717] SELinux: failed to load policy
[  434.280561][   T28] audit: type=1400 audit(1773018913.941:3458): avc:  denied  { create } for  pid=15716 comm="syz.5.3203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  434.303854][   T28] audit: type=1400 audit(1773018913.941:3459): avc:  denied  { lock } for  pid=15716 comm="syz.5.3203" path="socket:[46344]" dev="sockfs" ino=46344 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  434.420660][T15726] loop5: detected capacity change from 0 to 512
[  434.433278][T15142] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  434.445531][T15726] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  434.465329][T15726] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  434.597221][T15726] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3206: bg 0: block 248: padding at end of block bitmap is not set
[  434.637182][T15726] loop5: lost filesystem error report for type 5 error -117
[  434.637451][T15726] Quota error (device loop5): write_blk: dquota write failed
[  434.645110][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  434.645134][    C1] EXT4-fs (loop5): last error at time 1773018914: ext4_validate_block_bitmap:441
[  434.707963][T15734] loop2: detected capacity change from 0 to 1024
[  434.742391][T15726] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  434.759354][T15726] EXT4-fs error (device loop5): ext4_acquire_dquot:7001: comm syz.5.3206: Failed to acquire dquot type 1
[  434.768947][T15734] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  434.771494][T15726] loop5: lost filesystem error report for type 5 error -117
[  434.784421][T15726] EXT4-fs (loop5): 1 truncate cleaned up
[  434.798317][T15726] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  434.801974][T15734] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.3199: Invalid block bitmap block 0 in block_group 0
[  434.828355][T15734] loop2: lost filesystem error report for type 5 error -117
[  434.830176][T15734] Quota error (device loop2): write_blk: dquota write failed
[  434.837908][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  434.838076][    C0] EXT4-fs (loop2): initial error at time 1773018914: ext4_read_block_bitmap_nowait:483
[  434.838216][    C0] EXT4-fs (loop2): last error at time 1773018914: ext4_read_block_bitmap_nowait:483
[  434.879979][T15734] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  434.891309][T15734] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.3199: Failed to acquire dquot type 0
[  434.914864][T14659] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  434.918719][T15734] loop2: lost filesystem error report for type 5 error -117
[  434.946345][T15734] EXT4-fs error (device loop2): ext4_free_blocks:6724: comm syz.2.3199: Freeing blocks not in datazone - block = 0, count = 4096
[  434.979149][T14334] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  435.007689][T15746] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3211'.
[  435.019364][T15734] loop2: lost filesystem error report for type 5 error -117
[  435.028762][T15745] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3212'.
[  435.029934][T15734] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.3199: Invalid inode bitmap blk 0 in block_group 0
[  435.051848][ T4488] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-7
[  435.094629][T15734] loop2: lost filesystem error report for type 5 error -117
[  435.095585][T15734] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem
[  435.097016][T15748] loop1: detected capacity change from 0 to 512
[  435.103778][T15734] loop2: lost filesystem error report for type 5 error -117
[  435.119220][T15734] EXT4-fs (loop2): 1 orphan inode deleted
[  435.131172][ T4488] EXT4-fs error (device loop2): ext4_release_dquot:7037: comm kworker/u8:23: Failed to release dquot type 0
[  435.174805][T15748] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (33541!=33280)
[  435.184544][ T4488] loop2: lost filesystem error report for type 5 error -117
[  435.196726][T15748] EXT4-fs (loop1): orphan cleanup on readonly fs
[  435.224954][T15748] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13
[  435.227756][T15734] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  435.241852][T15748] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.3213: bad orphan inode 1549
[  435.256144][T15748] loop1: lost filesystem error report for type 5 error -117
[  435.259502][T15748] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  435.297007][T15748] EXT4-fs (loop1): ext4_remount: Checksum for group 0 failed (33541!=33280)
[  435.315839][T14659] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  435.607973][T15761] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3218'.
[  435.861340][T15770] loop0: detected capacity change from 0 to 1024
[  435.892439][T15770] EXT4-fs: Ignoring removed orlov option
[  435.933084][T15770] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  436.130611][T15775] netlink: 'syz.5.3222': attribute type 1 has an invalid length.
[  436.145903][T15775] netlink: 'syz.5.3222': attribute type 2 has an invalid length.
[  436.161961][T15775] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3222'.
[  436.181982][T15776] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3222'.
[  436.308143][T15779] loop5: detected capacity change from 0 to 512
[  436.332760][T15779] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  436.377234][T15779] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  436.431116][T15779] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3223: bg 0: block 248: padding at end of block bitmap is not set
[  436.470907][T15779] loop5: lost filesystem error report for type 5 error -117
[  436.471126][T15779] Quota error (device loop5): write_blk: dquota write failed
[  436.486048][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  436.486084][    C1] EXT4-fs (loop5): last error at time 1773018916: ext4_validate_block_bitmap:441
[  436.487940][T15757] syz.9.3217 (15757) used greatest stack depth: 4472 bytes left
[  436.541247][T15779] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  436.570947][T15779] EXT4-fs error (device loop5): ext4_acquire_dquot:7001: comm syz.5.3223: Failed to acquire dquot type 1
[  436.603449][T15779] loop5: lost filesystem error report for type 5 error -117
[  436.610976][T15779] EXT4-fs (loop5): 1 truncate cleaned up
[  436.631406][T15779] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  436.661994][T15778] FAULT_INJECTION: forcing a failure.
[  436.661994][T15778] name failslab, interval 1, probability 0, space 0, times 0
[  436.690947][T15778] CPU: 0 UID: 0 PID: 15778 Comm: syz.5.3223 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  436.690982][T15778] Tainted: [W]=WARN
[  436.690989][T15778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  436.691077][T15778] Call Trace:
[  436.691084][T15778]  <TASK>
[  436.691091][T15778]  __dump_stack+0x1d/0x30
[  436.691118][T15778]  dump_stack_lvl+0x95/0xd0
[  436.691137][T15778]  dump_stack+0x15/0x1b
[  436.691196][T15778]  should_fail_ex+0x263/0x280
[  436.691220][T15778]  should_failslab+0x8c/0xb0
[  436.691308][T15778]  __kmalloc_noprof+0xb8/0x4e0
[  436.691328][T15778]  ? security_sk_alloc+0x52/0x120
[  436.691360][T15778]  security_sk_alloc+0x52/0x120
[  436.691386][T15778]  sk_prot_alloc+0xc2/0x180
[  436.691462][T15778]  sk_alloc+0x35/0x3e0
[  436.691499][T15778]  unix_create1+0xa5/0x400
[  436.691523][T15778]  ? inode_init_always_gfp+0x4cd/0x500
[  436.691546][T15778]  unix_create+0x11f/0x150
[  436.691605][T15778]  __sock_create+0x2e4/0x580
[  436.691639][T15778]  __sys_socketpair+0x16f/0x420
[  436.691700][T15778]  ? ksys_write+0x194/0x1a0
[  436.691715][T15778]  __x64_sys_socketpair+0x52/0x60
[  436.691737][T15778]  x64_sys_call+0x2de5/0x3020
[  436.691760][T15778]  do_syscall_64+0x12c/0x370
[  436.691838][T15778]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  436.691860][T15778] RIP: 0033:0x7f77ae73c799
[  436.691930][T15778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  436.691952][T15778] RSP: 002b:00007f77ad197028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035
[  436.691973][T15778] RAX: ffffffffffffffda RBX: 00007f77ae9b5fa0 RCX: 00007f77ae73c799
[  436.691989][T15778] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000001
[  436.692002][T15778] RBP: 00007f77ad197090 R08: 0000000000000000 R09: 0000000000000000
[  436.692015][T15778] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001
[  436.692026][T15778] R13: 00007f77ae9b6038 R14: 00007f77ae9b5fa0 R15: 00007fff6217d1f8
[  436.692109][T15778]  </TASK>
[  436.937040][T15142] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  436.946480][T14334] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  436.989873][T15787] loop5: detected capacity change from 0 to 128
[  437.007368][T15787] msdos: Unknown parameter 'ˆ'
[  437.288915][T14054] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  437.868053][T15812] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3234'.
[  438.840374][T15827] loop0: detected capacity change from 0 to 512
[  438.859449][T15827] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  438.905851][T15827] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.3240: bg 0: block 104: invalid block bitmap
[  438.959187][T15825] loop2: detected capacity change from 0 to 512
[  438.967157][T15827] loop0: lost filesystem error report for type 5 error -117
[  438.967305][T15827] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6685: Corrupt filesystem
[  438.975114][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  438.975145][    C0] EXT4-fs (loop0): initial error at time 1773018918: ext4_validate_block_bitmap:432
[  438.975172][    C0] EXT4-fs (loop0): last error at time 1773018918: ext4_validate_block_bitmap:432
[  439.155343][T15825] EXT4-fs (loop2): 1 orphan inode deleted
[  439.162083][T15827] loop0: lost filesystem error report for type 5 error -117
[  439.162315][T15827] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.3240: invalid indirect mapped block 1 (level 1)
[  439.239995][T15825] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  439.266608][T15827] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  439.267342][T15827] EXT4-fs (loop0): 1 truncate cleaned up
[  439.299438][T15827] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  439.324645][   T28] audit: type=1400 audit(1773018918.981:3460): avc:  denied  { watch watch_reads } for  pid=15826 comm="syz.0.3240" path="/33/file1/file1" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  439.379182][T15142] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  439.447081][T15844] loop0: detected capacity change from 0 to 512
[  439.491440][T15844] EXT4-fs error (device loop0): ext4_init_orphan_info:583: comm syz.0.3244: inode #0: comm syz.0.3244: iget: illegal inode #
[  439.514932][T15844] loop0: lost filesystem error report for type 5 error -117
[  439.515142][T15844] EXT4-fs (loop0): get orphan inode failed
[  439.522826][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  439.522848][    C0] EXT4-fs (loop0): initial error at time 1773018919: ext4_init_orphan_info:583
[  439.522867][    C0] EXT4-fs (loop0): last error at time 1773018919: ext4_init_orphan_info:583
[  439.553426][T15844] EXT4-fs (loop0): mount failed
[  439.563525][   T28] audit: type=1400 audit(1773018919.221:3461): avc:  denied  { read } for  pid=15843 comm="syz.0.3244" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  439.720216][T15856] selinux_netlink_send: 17 callbacks suppressed
[  439.720234][T15856] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15856 comm=syz.9.3245
[  439.915655][T15858] loop5: detected capacity change from 0 to 512
[  440.045706][T15858] EXT4-fs (loop5): 1 orphan inode deleted
[  440.061865][T15858] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  440.077034][T15858] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  440.121375][ T4460] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  440.136421][ T4460] EXT4-fs error (device loop5): ext4_release_dquot:7037: comm kworker/u8:14: Failed to release dquot type 1
[  440.303801][   T30] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  440.889911][   T30] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  440.970490][   T30] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  440.994836][T15874] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3252'.
[  441.027219][T15874] lo speed is unknown, defaulting to 1000
[  441.044738][T15874] lo speed is unknown, defaulting to 1000
[  441.056830][   T30] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  441.083100][   T28] audit: type=1400 audit(1773018920.731:3462): avc:  denied  { ioctl } for  pid=15867 comm="syz.9.3252" path="socket:[45927]" dev="sockfs" ino=45927 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  441.116459][T15874] lo speed is unknown, defaulting to 1000
[  441.154286][T14054] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  441.189143][T15884] netlink: 'syz.2.3253': attribute type 4 has an invalid length.
[  441.232057][T15884] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3253'.
[  441.246945][T15869] lo speed is unknown, defaulting to 1000
[  441.310206][T15874] infiniband syU×: set down
[  441.315237][T13857] lo speed is unknown, defaulting to 1000
[  441.328797][T15874] infiniband syU×: added lo
[  441.382889][   T30] bridge_slave_1: left allmulticast mode
[  441.388834][   T30] bridge_slave_1: left promiscuous mode
[  441.394886][   T30] bridge0: port 2(bridge_slave_1) entered disabled state
[  441.402919][   T30] bridge_slave_0: left allmulticast mode
[  441.408616][   T30] bridge_slave_0: left promiscuous mode
[  441.414840][   T30] bridge0: port 1(bridge_slave_0) entered disabled state
[  441.437417][T15874] RDS/IB: syU×: added
[  441.455514][T15874] smc: adding ib device syU× with port count 1
[  441.476874][T15874] smc:    ib device syU× port 1 has no pnetid
[  441.585712][T15895] loop2: detected capacity change from 0 to 8192
[  441.669871][   T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  441.714065][   T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  441.732331][T14334] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  441.752140][   T30] bond0 (unregistering): Released all slaves
[  441.793614][ T3415] lo speed is unknown, defaulting to 1000
[  441.802498][T15874] lo speed is unknown, defaulting to 1000
[  441.856906][T15869] chnl_net:caif_netlink_parms(): no params data found
[  441.980899][T15907] loop1: detected capacity change from 0 to 8192
[  442.031188][T15869] bridge0: port 1(bridge_slave_0) entered blocking state
[  442.053670][T15869] bridge0: port 1(bridge_slave_0) entered disabled state
[  442.081017][T15869] bridge_slave_0: entered allmulticast mode
[  442.090145][T14797]  loop1: p2 p3 p4 < >
[  442.098434][T15869] bridge_slave_0: entered promiscuous mode
[  442.100232][T14797] loop1: partition table partially beyond EOD, truncated
[  442.120814][T15874] lo speed is unknown, defaulting to 1000
[  442.122434][T14797] loop1: p2 size 590592 extends beyond EOD, 
[  442.136005][T15869] bridge0: port 2(bridge_slave_1) entered blocking state
[  442.149302][T14797] truncated
[  442.163272][T14797] loop1: p3 start 4294967295 is beyond EOD, truncated
[  442.170252][T14797] loop1: p4 start 117440516 is beyond EOD, truncated
[  442.188537][T15869] bridge0: port 2(bridge_slave_1) entered disabled state
[  442.196226][T15869] bridge_slave_1: entered allmulticast mode
[  442.196599][T15907]  loop1: p2 p3 p4 < >
[  442.203202][T15869] bridge_slave_1: entered promiscuous mode
[  442.212394][T15907] loop1: partition table partially beyond EOD, truncated
[  442.251501][T15907] loop1: p2 size 590592 extends beyond EOD, truncated
[  442.256301][T15869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  442.269987][T15907] loop1: p3 start 4294967295 is beyond EOD, truncated
[  442.295230][T15907] loop1: p4 start 117440516 is beyond EOD, truncated
[  442.308033][T15869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  442.332181][T15874] lo speed is unknown, defaulting to 1000
[  442.393571][T15869] team0: Port device team_slave_0 added
[  442.415683][T15869] team0: Port device team_slave_1 added
[  442.428197][T14797] udevd[14797]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[  442.440915][T15930] loop5: detected capacity change from 0 to 1024
[  442.468191][T15930] EXT4-fs: Ignoring removed orlov option
[  442.474342][T15869] batman_adv: batadv0: Adding interface: batadv_slave_0
[  442.483687][T14797] udevd[14797]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[  442.495902][T15869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  442.543810][T15930] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  442.547055][T15869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  442.567214][T15874] lo speed is unknown, defaulting to 1000
[  442.575973][T15869] batman_adv: batadv0: Adding interface: batadv_slave_1
[  442.590560][T15944] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3264'.
[  442.591892][T15869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  442.634367][T15944] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3264'.
[  442.644568][T15869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  442.655171][T15874] lo speed is unknown, defaulting to 1000
[  442.669497][T15944] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3264'.
[  442.701807][T15869] hsr_slave_0: entered promiscuous mode
[  442.711863][T15869] hsr_slave_1: entered promiscuous mode
[  442.717912][T15869] debugfs: 'hsr0' already exists in 'hsr'
[  442.723731][T15869] Cannot create hsr debugfs directory
[  442.729187][T15874] lo speed is unknown, defaulting to 1000
[  442.747047][T15951] netlink: 'syz.2.3265': attribute type 32 has an invalid length.
[  442.783089][T15954] loop2: detected capacity change from 0 to 512
[  442.789652][T15954] EXT4-fs: Ignoring removed oldalloc option
[  442.809506][T15954] EXT4-fs (loop2): 1 truncate cleaned up
[  442.821525][T15954] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  442.844716][   T28] audit: type=1400 audit(1773018922.501:3463): avc:  denied  { create } for  pid=15956 comm="syz.9.3267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1
[  442.867074][   T30] hsr_slave_0: left promiscuous mode
[  442.876623][   T30] hsr_slave_1: left promiscuous mode
[  442.877059][T15954] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.3266: invalid indirect mapped block 234881024 (level 0)
[  442.882689][   T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  442.903273][   T30] batman_adv: batadv0: Removing interface: batadv_slave_0
[  442.910815][   T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  442.918398][   T30] batman_adv: batadv0: Removing interface: batadv_slave_1
[  442.925976][T15954] EXT4-fs (loop2): Remounting filesystem read-only
[  442.932987][   T30] batman_adv: batadv0: Interface deactivated: macsec1
[  442.939772][   T30] batman_adv: batadv0: Removing interface: macsec1
[  442.949336][   T30] batadv_slave_0: left promiscuous mode
[  442.954982][   T30] veth1_macvtap: left promiscuous mode
[  442.960461][   T30] veth0_macvtap: left promiscuous mode
[  442.965978][   T30] veth1_vlan: left promiscuous mode
[  442.971220][   T30] veth0_vlan: left promiscuous mode
[  443.029921][   T28] audit: type=1400 audit(1773018922.681:3464): avc:  denied  { unlink } for  pid=14054 comm="syz-executor" name="lost+found" dev="loop2" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1
[  443.057287][   T30] team0 (unregistering): Port device team_slave_1 removed
[  443.069757][   T30] team0 (unregistering): Port device team_slave_0 removed
[  443.108098][T15967] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3269'.
[  443.117436][ T3414] lo speed is unknown, defaulting to 1000
[  443.123271][ T3414] infiniband syz2: ib_query_port failed (-19)
[  443.262051][T15961] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  443.275539][T14334] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  443.371536][T16001] loop5: detected capacity change from 0 to 512
[  443.386349][T16001] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  443.424164][T16001] EXT4-fs (loop5): 1 truncate cleaned up
[  443.444714][T16001] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  443.467196][T15869] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  443.489089][T15869] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  443.522903][   T30] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  443.553853][T15869] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  443.575571][T15869] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  443.611398][   T30] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  443.712439][   T30] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  443.748375][T16008] lo speed is unknown, defaulting to 1000
[  443.786779][   T30] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  443.842209][T15869] 8021q: adding VLAN 0 to HW filter on device bond0
[  443.937722][T15869] 8021q: adding VLAN 0 to HW filter on device team0
[  443.979301][ T4460] bridge0: port 1(bridge_slave_0) entered blocking state
[  443.986456][ T4460] bridge0: port 1(bridge_slave_0) entered forwarding state
[  444.036231][   T30] bridge_slave_1: left allmulticast mode
[  444.057614][   T30] bridge_slave_1: left promiscuous mode
[  444.082035][   T28] audit: type=1400 audit(1773018923.741:3465): avc:  denied  { setopt } for  pid=16054 comm="syz.9.3279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  444.086510][   T30] bridge0: port 2(bridge_slave_1) entered disabled state
[  444.140549][   T30] bridge_slave_0: left allmulticast mode
[  444.153048][   T30] bridge_slave_0: left promiscuous mode
[  444.158789][   T30] bridge0: port 1(bridge_slave_0) entered disabled state
[  444.301080][   T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  444.311484][   T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  444.320708][   T30] bond0 (unregistering): Released all slaves
[  444.339196][ T4460] bridge0: port 2(bridge_slave_1) entered blocking state
[  444.346331][ T4460] bridge0: port 2(bridge_slave_1) entered forwarding state
[  444.363007][T14334] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  444.486845][   T30] hsr_slave_0: left promiscuous mode
[  444.502241][   T30] hsr_slave_1: left promiscuous mode
[  444.512569][   T30] batman_adv: batadv0: Removing interface: batadv_slave_0
[  444.520272][   T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  444.527793][   T30] batman_adv: batadv0: Removing interface: batadv_slave_1
[  444.537334][   T30] veth1_macvtap: left promiscuous mode
[  444.548564][   T30] veth0_macvtap: left promiscuous mode
[  444.559164][   T30] veth1_vlan: left promiscuous mode
[  444.568473][   T30] veth0_vlan: left promiscuous mode
[  444.802912][   T30] team0 (unregistering): Port device team_slave_1 removed
[  444.840184][   T30] team0 (unregistering): Port device team_slave_0 removed
[  444.962264][T16091] loop1: detected capacity change from 0 to 1024
[  444.980536][T16008] chnl_net:caif_netlink_parms(): no params data found
[  444.993467][T16091] EXT4-fs: Ignoring removed orlov option
[  445.044613][T16091] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  445.092692][T15869] 8021q: adding VLAN 0 to HW filter on device batadv0
[  445.112292][T16008] bridge0: port 1(bridge_slave_0) entered blocking state
[  445.119785][T16008] bridge0: port 1(bridge_slave_0) entered disabled state
[  445.127216][T16008] bridge_slave_0: entered allmulticast mode
[  445.143424][T16008] bridge_slave_0: entered promiscuous mode
[  445.153624][T16008] bridge0: port 2(bridge_slave_1) entered blocking state
[  445.161158][T16008] bridge0: port 2(bridge_slave_1) entered disabled state
[  445.168295][T16008] bridge_slave_1: entered allmulticast mode
[  445.175153][T16008] bridge_slave_1: entered promiscuous mode
[  445.221387][T16008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  445.233550][T16008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  445.278838][T16008] team0: Port device team_slave_0 added
[  445.312963][T16123] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3286'.
[  445.338744][T16008] team0: Port device team_slave_1 added
[  445.345805][T15869] veth0_vlan: entered promiscuous mode
[  445.364386][   T28] audit: type=1400 audit(1773018925.021:3466): avc:  denied  { map } for  pid=16126 comm="syz.9.3288" path="socket:[47607]" dev="sockfs" ino=47607 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  445.390622][T15869] veth1_vlan: entered promiscuous mode
[  445.397714][   T28] audit: type=1400 audit(1773018925.021:3467): avc:  denied  { read } for  pid=16126 comm="syz.9.3288" path="socket:[47607]" dev="sockfs" ino=47607 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  445.422264][T16008] batman_adv: batadv0: Adding interface: batadv_slave_0
[  445.429294][T16008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  445.457531][T16129] loop5: detected capacity change from 0 to 512
[  445.458099][T16008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  445.479531][T16129] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  445.485153][T16008] batman_adv: batadv0: Adding interface: batadv_slave_1
[  445.496858][T16008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  445.523017][T16008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  445.558555][T16129] EXT4-fs (loop5): 1 truncate cleaned up
[  445.599247][T16008] hsr_slave_0: entered promiscuous mode
[  445.611794][T16129] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  445.627613][T16008] hsr_slave_1: entered promiscuous mode
[  445.634195][T16008] debugfs: 'hsr0' already exists in 'hsr'
[  445.642572][T16008] Cannot create hsr debugfs directory
[  445.674822][T15869] veth0_macvtap: entered promiscuous mode
[  445.752384][T15869] veth1_macvtap: entered promiscuous mode
[  445.793422][T14659] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  445.831899][T15869] batman_adv: batadv0: Interface activated: batadv_slave_0
[  445.874539][T15869] batman_adv: batadv0: Interface activated: batadv_slave_1
[  445.905519][ T4491] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  445.952080][ T4491] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  445.971417][ T4491] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  446.022442][ T4491] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  446.191896][   T28] audit: type=1400 audit(1773018925.851:3468): avc:  denied  { map } for  pid=16166 comm="syz.0.3293" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  446.224540][T16008] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  446.267488][T16008] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  446.309660][T16008] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  446.343808][T16008] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  446.397114][T14334] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  446.425920][T16008] 8021q: adding VLAN 0 to HW filter on device bond0
[  446.466331][T16008] 8021q: adding VLAN 0 to HW filter on device team0
[  446.491217][ T4491] bridge0: port 1(bridge_slave_0) entered blocking state
[  446.498382][ T4491] bridge0: port 1(bridge_slave_0) entered forwarding state
[  446.542043][ T4491] bridge0: port 2(bridge_slave_1) entered blocking state
[  446.549198][ T4491] bridge0: port 2(bridge_slave_1) entered forwarding state
[  446.675566][T16008] 8021q: adding VLAN 0 to HW filter on device batadv0
[  446.826757][T16226] loop1: detected capacity change from 0 to 512
[  446.859777][T16226] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -13
[  446.878387][T16226] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #13: comm syz.1.3296: iget: bad i_size value: 12154757448730
[  446.920226][T16226] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  446.920479][T16226] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.3296: couldn't read orphan inode 13 (err -117)
[  446.929684][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  446.929701][    C0] EXT4-fs (loop1): initial error at time 1773018926: ext4_orphan_get:1391: inode 13
[  446.929731][    C0] EXT4-fs (loop1): last error at time 1773018926: ext4_orphan_get:1391: inode 13
[  447.058312][T16008] veth0_vlan: entered promiscuous mode
[  447.070448][T16008] veth1_vlan: entered promiscuous mode
[  447.079229][T16226] loop1: lost filesystem error report for type 5 error -117
[  447.079932][T16226] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  447.112425][   T28] audit: type=1400 audit(1773018926.761:3469): avc:  denied  { ioctl } for  pid=16249 comm="syz.9.3297" path="socket:[48008]" dev="sockfs" ino=48008 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  447.150501][T16008] veth0_macvtap: entered promiscuous mode
[  447.162103][T16008] veth1_macvtap: entered promiscuous mode
[  447.197875][T16008] batman_adv: batadv0: Interface activated: batadv_slave_0
[  447.221091][T14659] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  447.234000][T16008] batman_adv: batadv0: Interface activated: batadv_slave_1
[  447.266632][ T4448] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  447.290196][ T4448] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  447.341429][ T4448] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  447.393639][ T4448] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  447.422721][T16284] loop0: detected capacity change from 0 to 512
[  447.450306][T16284] EXT4-fs: Ignoring removed nomblk_io_submit option
[  447.493207][T16284] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c018, mo2=0002]
[  447.502642][T16295] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3276'.
[  447.517744][T16284] System zones: 1-12
[  447.536315][T16284] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #15: comm syz.0.3305: corrupted inode contents
[  447.541129][T16295] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3276'.
[  447.577314][T16284] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  447.577591][T16284] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem
[  447.586754][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  447.586778][    C0] EXT4-fs (loop0): initial error at time 1773018927: ext4_do_update_inode:5569: inode 15
[  447.586805][    C0] EXT4-fs (loop0): last error at time 1773018927: ext4_do_update_inode:5569: inode 15
[  447.617105][T16295] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3276'.
[  447.658029][T16284] loop0: lost filesystem error report for type 5 error -117
[  447.661025][T16284] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #15: comm syz.0.3305: corrupted inode contents
[  447.693634][T16284] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  447.695157][T16284] EXT4-fs error (device loop0): ext4_evict_inode:303: inode #15: comm syz.0.3305: mark_inode_dirty error
[  447.756201][T16284] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  447.756495][T16284] EXT4-fs (loop0): 1 orphan inode deleted
[  447.810138][T16284] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  447.935542][T16316] netlink: 'syz.0.3305': attribute type 1 has an invalid length.
[  447.966683][T16316] gretap1: entered allmulticast mode
[  447.993387][T16316] bridge0: port 3(gretap1) entered blocking state
[  448.007692][T16316] bridge0: port 3(gretap1) entered disabled state
[  448.029133][T16316] gretap1: entered promiscuous mode
[  448.166235][T16334] sctp: [Deprecated]: syz.9.3308 (pid 16334) Use of struct sctp_assoc_value in delayed_ack socket option.
[  448.166235][T16334] Use struct sctp_sack_info instead
[  448.295108][T15869] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  448.614623][T16396] netlink: 'syz.1.3318': attribute type 4 has an invalid length.
[  448.751436][T16417] loop5: detected capacity change from 0 to 512
[  449.119022][   T28] audit: type=1326 audit(1773018928.771:3470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16460 comm="syz.4.3323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83a84fc799 code=0x7ffc0000
[  449.155974][   T28] audit: type=1326 audit(1773018928.771:3471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16460 comm="syz.4.3323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83a84fc799 code=0x7ffc0000
[  449.187881][   T28] audit: type=1326 audit(1773018928.771:3472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16460 comm="syz.4.3323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83a84fc799 code=0x7ffc0000
[  449.329032][   T28] audit: type=1326 audit(1773018928.771:3473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16460 comm="syz.4.3323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83a84fc799 code=0x7ffc0000
[  449.415628][   T28] audit: type=1326 audit(1773018928.771:3474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16460 comm="syz.4.3323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f83a84fc799 code=0x7ffc0000
[  449.473926][   T28] audit: type=1326 audit(1773018928.831:3475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16460 comm="syz.4.3323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83a84fc799 code=0x7ffc0000
[  449.567396][T16539] loop0: detected capacity change from 0 to 512
[  449.608252][T16539] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -13
[  449.686772][T16539] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #13: comm syz.0.3326: iget: bad i_size value: 12154757448730
[  449.718223][T16539] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  449.719000][T16539] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.3326: couldn't read orphan inode 13 (err -117)
[  449.728283][    C1] EXT4-fs (loop0): error count since last fsck: 1
[  449.728328][    C1] EXT4-fs (loop0): initial error at time 1773018929: ext4_orphan_get:1391: inode 13
[  449.728358][    C1] EXT4-fs (loop0): last error at time 1773018929: ext4_orphan_get:1391: inode 13
[  449.802626][T16539] loop0: lost filesystem error report for type 5 error -117
[  449.803118][T16539] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  449.815392][T16557] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3335'.
[  449.826934][T16565] loop1: detected capacity change from 0 to 512
[  449.848556][T16565] EXT4-fs warning (device loop1): ext4_multi_mount_protect:288: Invalid MMP block in superblock
[  449.866329][T16559] loop4: detected capacity change from 0 to 8192
[  449.895767][T16565] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5)
[  449.902372][T16565] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  449.940555][T16575] vhci_hcd vhci_hcd.4: invalid port number 254
[  449.956000][T16565] vhci_hcd vhci_hcd.0: Device attached
[  449.967185][T16572] vhci_hcd: connection closed
[  449.969164][ T4731] vhci_hcd vhci_hcd.1: stop threads
[  450.001795][ T4731] vhci_hcd vhci_hcd.1: release socket
[  450.010334][ T4731] vhci_hcd vhci_hcd.1: disconnect device
[  450.186174][T16598] netlink: 'syz.5.3343': attribute type 12 has an invalid length.
[  450.194518][T16598] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3343'.
[  450.505303][T16605] loop1: detected capacity change from 0 to 128
[  450.520397][T16605] msdos: Unknown parameter 'ˆ'
[  450.557393][T16551] syz.4.3333 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000
[  450.572841][T16551] CPU: 0 UID: 0 PID: 16551 Comm: syz.4.3333 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  450.572873][T16551] Tainted: [W]=WARN
[  450.572880][T16551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  450.572948][T16551] Call Trace:
[  450.572955][T16551]  <TASK>
[  450.572964][T16551]  __dump_stack+0x1d/0x30
[  450.572990][T16551]  dump_stack_lvl+0x95/0xd0
[  450.573048][T16551]  dump_stack+0x15/0x1b
[  450.573068][T16551]  dump_header+0x80/0x240
[  450.573090][T16551]  oom_kill_process+0x295/0x350
[  450.573111][T16551]  out_of_memory+0x97d/0xb80
[  450.573207][T16551]  try_charge_memcg+0x62e/0xa10
[  450.573330][T16551]  obj_cgroup_charge_pages+0x23/0xc0
[  450.573362][T16551]  __memcg_kmem_charge_page+0x9e/0x170
[  450.573390][T16551]  __alloc_frozen_pages_noprof+0x18a/0x360
[  450.573483][T16551]  alloc_pages_mpol+0xb3/0x260
[  450.573515][T16551]  alloc_pages_noprof+0x8f/0x130
[  450.573560][T16551]  __vmalloc_node_range_noprof+0xa46/0x12b0
[  450.573602][T16551]  __kvmalloc_node_noprof+0x3d4/0x650
[  450.573685][T16551]  ? ip_set_alloc+0x24/0x30
[  450.573720][T16551]  ? ip_set_alloc+0x24/0x30
[  450.573747][T16551]  ? hash_netiface_create+0x21b/0x740
[  450.573774][T16551]  ? __kmalloc_cache_noprof+0x18a/0x410
[  450.573857][T16551]  ip_set_alloc+0x24/0x30
[  450.573880][T16551]  hash_netiface_create+0x282/0x740
[  450.573958][T16551]  ? __pfx_hash_netiface_create+0x10/0x10
[  450.573982][T16551]  ip_set_create+0x3cf/0x970
[  450.574037][T16551]  ? __mutex_lock_slowpath+0xa/0x10
[  450.574071][T16551]  nfnetlink_rcv_msg+0x509/0x5d0
[  450.574110][T16551]  netlink_rcv_skb+0x123/0x220
[  450.574160][T16551]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  450.574193][T16551]  nfnetlink_rcv+0x167/0x1720
[  450.574218][T16551]  ? __kfree_skb+0x109/0x150
[  450.574318][T16551]  ? nlmon_xmit+0x4f/0x60
[  450.574353][T16551]  ? consume_skb+0x4b/0x160
[  450.574378][T16551]  ? nlmon_xmit+0x4f/0x60
[  450.574488][T16551]  ? dev_hard_start_xmit+0x3b9/0x3f0
[  450.574521][T16551]  ? __dev_queue_xmit+0x136c/0x1f20
[  450.574546][T16551]  ? __dev_queue_xmit+0x148/0x1f20
[  450.574649][T16551]  ? ref_tracker_free+0x37d/0x3e0
[  450.574676][T16551]  ? __netlink_deliver_tap+0x4dc/0x500
[  450.574732][T16551]  netlink_unicast+0x5c0/0x690
[  450.574837][T16551]  netlink_sendmsg+0x5c8/0x6f0
[  450.574893][T16551]  ? __pfx_netlink_sendmsg+0x10/0x10
[  450.574957][T16551]  ____sys_sendmsg+0x563/0x5b0
[  450.574986][T16551]  ___sys_sendmsg+0x195/0x1e0
[  450.575028][T16551]  __x64_sys_sendmsg+0xd4/0x160
[  450.575092][T16551]  x64_sys_call+0x194c/0x3020
[  450.575200][T16551]  do_syscall_64+0x12c/0x370
[  450.575223][T16551]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  450.575248][T16551] RIP: 0033:0x7f83a84fc799
[  450.575267][T16551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  450.575287][T16551] RSP: 002b:00007f83a6f57028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  450.575364][T16551] RAX: ffffffffffffffda RBX: 00007f83a8775fa0 RCX: 00007f83a84fc799
[  450.575381][T16551] RDX: 0000000000000880 RSI: 0000200000000040 RDI: 0000000000000005
[  450.575406][T16551] RBP: 00007f83a8592bd9 R08: 0000000000000000 R09: 0000000000000000
[  450.575419][T16551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  450.575431][T16551] R13: 00007f83a8776038 R14: 00007f83a8775fa0 R15: 00007ffc7afd52f8
[  450.575449][T16551]  </TASK>
[  450.575562][T16551] memory: usage 307200kB, limit 307200kB, failcnt 522
[  450.912276][T16551] memory+swap: usage 311496kB, limit 9007199254740988kB, failcnt 0
[  450.920248][T16551] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0
[  450.927605][T16551] Memory cgroup stats for /syz4:
[  450.927780][T16551] cache 0
[  450.935825][T16551] rss 0
[  450.938564][T16551] shmem 0
[  450.941494][T16551] mapped_file 0
[  450.944938][T16551] dirty 0
[  450.947868][T16551] writeback 0
[  450.951186][T16551] workingset_refault_anon 49
[  450.955762][T16551] workingset_refault_file 589
[  450.960440][T16551] swap 4399104
[  450.963854][T16551] swapcached 4399104
[  450.967734][T16551] pgpgin 203818
[  450.971439][T16551] pgpgout 203815
[  450.974990][T16551] pgfault 209644
[  450.978518][T16551] pgmajfault 134
[  450.982101][T16551] inactive_anon 0
[  450.985885][T16551] active_anon 0
[  450.989597][T16551] inactive_file 0
[  450.994888][T16551] active_file 12288
[  451.004521][T16551] unevictable 0
[  451.007994][T16551] hierarchical_memory_limit 314572800
[  451.013462][T16551] hierarchical_memsw_limit 9223372036854771712
[  451.019719][T16551] total_cache 0
[  451.023235][T16551] total_rss 0
[  451.026555][T16551] total_shmem 0
[  451.030071][T16551] total_mapped_file 0
[  451.034083][T16551] total_dirty 0
[  451.037549][T16551] total_writeback 0
[  451.041668][T16551] total_workingset_refault_anon 49
[  451.047040][T16551] total_workingset_refault_file 589
[  451.052762][T16551] total_swap 4399104
[  451.056720][T16551] total_swapcached 4399104
[  451.061247][T16551] total_pgpgin 203818
[  451.065528][T16551] total_pgpgout 203815
[  451.069628][T16551] total_pgfault 209644
[  451.073763][T16551] total_pgmajfault 134
[  451.077953][T16551] total_inactive_anon 0
[  451.082152][T16551] total_active_anon 0
[  451.086168][T16551] total_inactive_file 0
[  451.090406][T16551] total_active_file 12288
[  451.094867][T16551] total_unevictable 0
[  451.098882][T16551] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.3333,pid=16550,uid=0
[  451.113990][T16551] Memory cgroup out of memory: Killed process 16550 (syz.4.3333) total-vm:94220kB, anon-rss:1224kB, file-rss:22276kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000
[  451.633485][   T28] kauditd_printk_skb: 22 callbacks suppressed
[  451.633559][   T28] audit: type=1400 audit(1773018931.291:3498): avc:  denied  { setattr } for  pid=16622 comm="syz.1.3350" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  451.695228][T15869] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  451.712749][T16625] FAULT_INJECTION: forcing a failure.
[  451.712749][T16625] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  451.727157][T16625] CPU: 0 UID: 0 PID: 16625 Comm: syz.1.3354 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  451.727188][T16625] Tainted: [W]=WARN
[  451.727195][T16625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  451.727207][T16625] Call Trace:
[  451.727256][T16625]  <TASK>
[  451.727304][T16625]  __dump_stack+0x1d/0x30
[  451.727330][T16625]  dump_stack_lvl+0x95/0xd0
[  451.727491][T16625]  dump_stack+0x15/0x1b
[  451.727510][T16625]  should_fail_ex+0x263/0x280
[  451.727532][T16625]  should_fail+0xb/0x20
[  451.727616][T16625]  should_fail_usercopy+0x1a/0x20
[  451.727636][T16625]  _copy_to_user+0x20/0xa0
[  451.727659][T16625]  simple_read_from_buffer+0xb5/0x130
[  451.727686][T16625]  proc_fail_nth_read+0x10e/0x150
[  451.727742][T16625]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  451.727765][T16625]  vfs_read+0x1ab/0x7f0
[  451.727835][T16625]  ? __rcu_read_unlock+0x4e/0x70
[  451.727854][T16625]  ? __fget_files+0x184/0x1c0
[  451.727873][T16625]  ? mutex_lock+0x57/0x90
[  451.727895][T16625]  ksys_read+0xdc/0x1a0
[  451.727949][T16625]  __x64_sys_read+0x40/0x50
[  451.727990][T16625]  x64_sys_call+0x2886/0x3020
[  451.728067][T16625]  do_syscall_64+0x12c/0x370
[  451.728090][T16625]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  451.728108][T16625] RIP: 0033:0x7fdbf5f6cfce
[  451.728122][T16625] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  451.728137][T16625] RSP: 002b:00007fdbf4a06fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  451.728192][T16625] RAX: ffffffffffffffda RBX: 00007fdbf4a076c0 RCX: 00007fdbf5f6cfce
[  451.728204][T16625] RDX: 000000000000000f RSI: 00007fdbf4a070a0 RDI: 0000000000000005
[  451.728283][T16625] RBP: 00007fdbf4a07090 R08: 0000000000000000 R09: 0000000000000000
[  451.728294][T16625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  451.728304][T16625] R13: 00007fdbf6226038 R14: 00007fdbf6225fa0 R15: 00007ffcf3b94d78
[  451.728387][T16625]  </TASK>
[  451.996738][T16638] FAULT_INJECTION: forcing a failure.
[  451.996738][T16638] name failslab, interval 1, probability 0, space 0, times 0
[  452.009435][T16638] CPU: 0 UID: 0 PID: 16638 Comm: syz.1.3357 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  452.009541][T16638] Tainted: [W]=WARN
[  452.009549][T16638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  452.009560][T16638] Call Trace:
[  452.009568][T16638]  <TASK>
[  452.009576][T16638]  __dump_stack+0x1d/0x30
[  452.009598][T16638]  dump_stack_lvl+0x95/0xd0
[  452.009651][T16638]  dump_stack+0x15/0x1b
[  452.009669][T16638]  should_fail_ex+0x263/0x280
[  452.009689][T16638]  should_failslab+0x8c/0xb0
[  452.009710][T16638]  kmem_cache_alloc_node_noprof+0x6d/0x460
[  452.009790][T16638]  ? __alloc_skb+0x2d6/0x690
[  452.009810][T16638]  __alloc_skb+0x2d6/0x690
[  452.009829][T16638]  ? avc_has_perm+0x101/0x190
[  452.009965][T16638]  ? __alloc_skb+0x200/0x690
[  452.010028][T16638]  alloc_skb_with_frags+0x7d/0x470
[  452.010114][T16638]  ? selinux_file_open+0x2e6/0x330
[  452.010187][T16638]  ? should_fail_ex+0xd9/0x280
[  452.010233][T16638]  sock_alloc_send_pskb+0x44d/0x500
[  452.010349][T16638]  tun_get_user+0x62b/0x27c0
[  452.010403][T16638]  ? ref_tracker_alloc+0x1eb/0x2f0
[  452.010431][T16638]  tun_chr_write_iter+0x15e/0x210
[  452.010453][T16638]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  452.010472][T16638]  vfs_write+0x5a6/0x9f0
[  452.010510][T16638]  ksys_write+0xdc/0x1a0
[  452.010582][T16638]  __x64_sys_write+0x40/0x50
[  452.010600][T16638]  x64_sys_call+0x27e1/0x3020
[  452.010693][T16638]  do_syscall_64+0x12c/0x370
[  452.010711][T16638]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  452.010733][T16638] RIP: 0033:0x7fdbf5fac799
[  452.010774][T16638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  452.010839][T16638] RSP: 002b:00007fdbf4a07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  452.010859][T16638] RAX: ffffffffffffffda RBX: 00007fdbf6225fa0 RCX: 00007fdbf5fac799
[  452.010872][T16638] RDX: 000000000000fdef RSI: 00002000000002c0 RDI: 0000000000000005
[  452.010885][T16638] RBP: 00007fdbf4a07090 R08: 0000000000000000 R09: 0000000000000000
[  452.010896][T16638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  452.010907][T16638] R13: 00007fdbf6226038 R14: 00007fdbf6225fa0 R15: 00007ffcf3b94d78
[  452.010924][T16638]  </TASK>
[  452.254405][T16628] loop5: detected capacity change from 0 to 1024
[  452.270255][T16628] EXT4-fs: Ignoring removed orlov option
[  452.309857][T16628] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  452.384093][T16656] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  452.540810][T16663] loop4: detected capacity change from 0 to 8192
[  452.673677][T16678] loop1: detected capacity change from 0 to 4096
[  452.698671][T16678] EXT4-fs: Ignoring removed bh option
[  452.724750][T16678] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  452.753100][T14334] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  452.755319][T16683] FAULT_INJECTION: forcing a failure.
[  452.755319][T16683] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  452.795419][T16683] CPU: 0 UID: 0 PID: 16683 Comm: syz.0.3370 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  452.795449][T16683] Tainted: [W]=WARN
[  452.795526][T16683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  452.795538][T16683] Call Trace:
[  452.795543][T16683]  <TASK>
[  452.795550][T16683]  __dump_stack+0x1d/0x30
[  452.795574][T16683]  dump_stack_lvl+0x95/0xd0
[  452.795595][T16683]  dump_stack+0x15/0x1b
[  452.795617][T16683]  should_fail_ex+0x263/0x280
[  452.795661][T16683]  should_fail+0xb/0x20
[  452.795678][T16683]  should_fail_usercopy+0x1a/0x20
[  452.795700][T16683]  _copy_to_user+0x20/0xa0
[  452.795743][T16683]  simple_read_from_buffer+0xb5/0x130
[  452.795763][T16683]  proc_fail_nth_read+0x10e/0x150
[  452.795869][T16683]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  452.795906][T16683]  vfs_read+0x1ab/0x7f0
[  452.795964][T16683]  ? __rcu_read_unlock+0x4e/0x70
[  452.795986][T16683]  ? __fget_files+0x184/0x1c0
[  452.796006][T16683]  ? mutex_lock+0x57/0x90
[  452.796029][T16683]  ksys_read+0xdc/0x1a0
[  452.796121][T16683]  __x64_sys_read+0x40/0x50
[  452.796135][T16683]  x64_sys_call+0x2886/0x3020
[  452.796157][T16683]  do_syscall_64+0x12c/0x370
[  452.796175][T16683]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  452.796221][T16683] RIP: 0033:0x7f62ad01cfce
[  452.796237][T16683] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  452.796255][T16683] RSP: 002b:00007f62abab6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  452.796274][T16683] RAX: ffffffffffffffda RBX: 00007f62abab76c0 RCX: 00007f62ad01cfce
[  452.796286][T16683] RDX: 000000000000000f RSI: 00007f62abab70a0 RDI: 0000000000000004
[  452.796296][T16683] RBP: 00007f62abab7090 R08: 0000000000000000 R09: 0000000000000000
[  452.796345][T16683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  452.796358][T16683] R13: 00007f62ad2d6038 R14: 00007f62ad2d5fa0 R15: 00007ffd90981bf8
[  452.796378][T16683]  </TASK>
[  453.056648][T16667] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[  453.112071][T14659] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  453.207723][T16690] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2576 sclass=netlink_route_socket pid=16690 comm=syz.1.3373
[  453.229635][T16690] loop1: detected capacity change from 0 to 1024
[  453.230216][T16688] lo speed is unknown, defaulting to 1000
[  453.269174][T16690] SELinux: security_context_str_to_sid (root) failed with errno=-22
[  453.505315][   T28] audit: type=1326 audit(1773018933.161:3499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16691 comm="syz.5.3368" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77ae73c799 code=0x0
[  453.540094][T16711] openvswitch: netlink: Key type 1798 is out of range max 32
[  453.678678][T16697] loop1: detected capacity change from 0 to 1024
[  453.773971][T16697] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  453.783462][T16697] System zones: 0-1, 3-36
[  453.804387][T16697] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.3375: bad orphan inode 134217728
[  453.816011][T16697] loop1: lost filesystem error report for type 5 error -117
[  453.823388][T16697] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  453.871929][   T28] audit: type=1400 audit(1773018933.521:3500): avc:  denied  { read } for  pid=16732 comm="syz.4.3388" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  453.895736][   T28] audit: type=1400 audit(1773018933.521:3501): avc:  denied  { open } for  pid=16732 comm="syz.4.3388" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  453.921034][T16734] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=65534 sclass=netlink_xfrm_socket pid=16734 comm=syz.5.3368
[  453.974117][ T3393] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0
[  453.986102][T16733] loop4: detected capacity change from 0 to 512
[  453.993160][ T3393] hid-generic 0000:0000:0000.0027: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  454.021356][T16742] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3368'.
[  454.021919][T16733] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002]
[  454.045255][T16733] System zones: 1-12
[  454.049501][T16733] EXT4-fs (loop4): orphan cleanup on readonly fs
[  454.057068][T16742] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3368'.
[  454.071607][T16733] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 33261: comm syz.4.3388: invalid block
[  454.096691][T16733] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  454.098797][T16733] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.3388: invalid indirect mapped block 8 (level 2)
[  454.110624][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  454.110643][    C1] EXT4-fs (loop4): initial error at time 1773018933: ext4_get_branch:178: inode 11: block 33261
[  454.110678][    C1] EXT4-fs (loop4): last error at time 1773018933: ext4_get_branch:178: inode 11: block 33261
[  454.245975][T16733] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  454.249906][T16733] EXT4-fs (loop4): 1 truncate cleaned up
[  454.279908][T16733] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  454.305613][T16739] ==================================================================
[  454.313722][T16739] BUG: KCSAN: data-race in filemap_read / filemap_read
[  454.320583][T16739] 
[  454.322920][T16739] write to 0xffff8881a1efe3a8 of 8 bytes by task 16697 on cpu 1:
[  454.330699][T16739]  filemap_read+0x98d/0xa10
[  454.335224][T16739]  generic_file_read_iter+0x79/0x330
[  454.340531][T16739]  ext4_file_read_iter+0x1cc/0x290
[  454.345650][T16739]  copy_splice_read+0x471/0x6c0
[  454.350610][T16739]  splice_direct_to_actor+0x28f/0x670
[  454.356079][T16739]  do_splice_direct+0x119/0x1a0
[  454.360933][T16739]  do_sendfile+0x382/0x650
[  454.365362][T16739]  __x64_sys_sendfile64+0x105/0x150
[  454.370574][T16739]  x64_sys_call+0x2dc4/0x3020
[  454.375266][T16739]  do_syscall_64+0x12c/0x370
[  454.379858][T16739]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  454.385754][T16739] 
[  454.388075][T16739] read to 0xffff8881a1efe3a8 of 8 bytes by task 16739 on cpu 0:
[  454.395971][T16739]  filemap_read+0x6f/0xa10
[  454.400397][T16739]  generic_file_read_iter+0x79/0x330
[  454.405697][T16739]  ext4_file_read_iter+0x1cc/0x290
[  454.410848][T16739]  copy_splice_read+0x471/0x6c0
[  454.415701][T16739]  splice_direct_to_actor+0x28f/0x670
[  454.421073][T16739]  do_splice_direct+0x119/0x1a0
[  454.425924][T16739]  do_sendfile+0x382/0x650
[  454.430351][T16739]  __x64_sys_sendfile64+0x105/0x150
[  454.435901][T16739]  x64_sys_call+0x2dc4/0x3020
[  454.440576][T16739]  do_syscall_64+0x12c/0x370
[  454.445162][T16739]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  454.451049][T16739] 
[  454.453446][T16739] value changed: 0x0000000000000117 -> 0x0000000000000118
[  454.460622][T16739] 
[  454.462932][T16739] Reported by Kernel Concurrency Sanitizer on:
[  454.469074][T16739] CPU: 0 UID: 0 PID: 16739 Comm: syz.1.3375 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  454.480004][T16739] Tainted: [W]=WARN
[  454.483790][T16739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  454.493835][T16739] ==================================================================
[  454.662620][T14659] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  454.892903][T16008] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.