last executing test programs:

1m40.424417376s ago: executing program 3 (id=111):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000006c0)=@newsa={0x184, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@remote, 0x0, 0xfff7, 0x2000, 0x1, 0x0, 0x0, 0x0, 0x3b}, {@in=@rand_addr=0x64010102, 0x4d6, 0x6c}, @in=@broadcast, {0x0, 0x0, 0xfffffffffffffffd, 0x20, 0x7}, {0x0, 0x5, 0x40000000}, {}, 0x0, 0x0, 0x2, 0x0, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'vmac(aes-arm64)\x00'}, 0x0, 0x200}}]}, 0x184}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000)

1m40.395587138s ago: executing program 3 (id=112):
r0 = syz_io_uring_setup(0xac9, &(0x7f00000002c0)={0x0, 0x3594, 0x2, 0x1103, 0x21e}, &(0x7f0000000240)=<r1=>0x0, &(0x7f0000000340)=<r2=>0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x0, 0x0})
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
r3 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f640d967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c8348100"/4195, @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0)
pwritev2(r4, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0)
r5 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x50)
sendfile(r5, r5, 0x0, 0x800000009)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x0, 0x3938700}, 0x1, 0x8})
io_uring_enter(r0, 0x6efc, 0x3900, 0xb, 0x0, 0x0)
r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffefffffff7ffffc]}, 0x8, 0x800)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001840}, 0x40000)
pwritev2(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x1, 0xfffffffb, 0x1a)
r8 = syz_io_uring_setup(0xbd7, &(0x7f0000000040)={0x0, 0xe152, 0x8, 0x5, 0x4000032c, 0x0, r5}, &(0x7f0000000000)=<r9=>0x0, &(0x7f00000001c0)=<r10=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r9, r10, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd=r6, 0xa, &(0x7f0000000100)=[{&(0x7f0000000400)=""/203, 0xcb}], 0x1})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x8b19, &(0x7f0000000000))
io_uring_enter(r8, 0x847ba, 0x0, 0xe, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x3, 0x300)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f00000000c0)={0x1, 0xffffffffffffffff, 0x35, {0x5, 0x1}, 0x1}, 0x1)
ptrace$ARCH_SHSTK_LOCK(0x1e, r3, 0x1, 0x5003)

1m39.780691264s ago: executing program 3 (id=118):
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000140)="4ba295b810d1a372ab0a3315520b9a7a7a71fa20aa2f4762ae0912add1935a02cd6794838ad469ff814a1774da4baf844b6eaea25d36ed3fd8c22c41e4e14370c4ee7115df0bb6258f35af31776131e9af986cfa1cb2b6b9cacb4cbc33d02b1109ae6c0eb92a090ae69a18a9ebe6bca8", 0x70)
write$P9_RVERSION(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="1500000065ffff89"], 0x15)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x0)
syz_open_dev$vcsa(&(0x7f0000000040), 0xfffffffffffffff8, 0x80001)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x13, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x100, 0x58, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94)
creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async)
write(r0, &(0x7f0000000140)="4ba295b810d1a372ab0a3315520b9a7a7a71fa20aa2f4762ae0912add1935a02cd6794838ad469ff814a1774da4baf844b6eaea25d36ed3fd8c22c41e4e14370c4ee7115df0bb6258f35af31776131e9af986cfa1cb2b6b9cacb4cbc33d02b1109ae6c0eb92a090ae69a18a9ebe6bca8", 0x70) (async)
write$P9_RVERSION(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="1500000065ffff89"], 0x15) (async)
open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x0) (async)
syz_open_dev$vcsa(&(0x7f0000000040), 0xfffffffffffffff8, 0x80001) (async)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x13, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x100, 0x58, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) (async)

1m39.6755533s ago: executing program 3 (id=121):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280), 0xff, 0x25e, &(0x7f0000000e80)="$eJzs3U1IHGcYB/BnZndr1aXY9lIo/YBSSiuIvRV6sZcWhCJSSqEtWErppUULVulNe8olh+QYkuApFwm5xeQYvEguCYGcTOLBXAKJ5BDJIQnZsDsr+JVo3HUnZH4/WOfDd97nHWb+74g4GEBh9UXEUESUIqI/IioRkWxu8HH26WtuznUvjUXUaj/cTxrtsu3MxnG9ETEbEV9FxGKaxF/liOmFX1YfLn/32dGpyqdnFn7u7uhJNq2trny/fnrkyPnhL6evXr87ksRQVLecV/slu+wrJxHvHEaxV0RSznsE7Mfof+du1HP/bkR80sh/JdLILt6xyTcWK/HFqecde/zetfc7OVag/Wq1Sv0ZOFsDCieNiGok6UBEZOtpOjCQ/Qx/s9ST/j0x+W//nxNT43/kPVMB7VKNWPn2YteF3m35v1PK8g+8prJfSq38ODp/q76yXsp7QEBHfJAt6s///t9mPg/5h8KRfygu+Yfikn8oLvmH4pJ/KC75h4J42vxjv0275B+KS/6huA6c/xNPDm9QQEdszj8AUCy1rgO9Ndzel5CBXOQ9/wAAAAAAAAAAAAAAAAAAADvNdS+NbXza02N5zxaXT0asfZM13Vm/1Ph/xBFvNr72PEi29Jjsq8KL/fpRix206GzOb1+/dTvf+lc+zLf+zHjE7P8RMVgu77z/kub9d3Bv7/H9yu8tFnhJybbtr3/qbP3tHs/nW394OeJSff4Z3G3+SeO9xnL3+adav34t1v/nUYsdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0DHPAgAA///B2nXP")
r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r3 = syz_io_uring_setup(0x10d3, &(0x7f0000000000)={0x0, 0x7f36, 0x0, 0x1, 0x34f}, &(0x7f00000000c0)=<r4=>0x0, &(0x7f0000000100)=<r5=>0x0)
r6 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82)
syz_open_dev$sg(&(0x7f00000008c0), 0x0, 0x482)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x4000)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8})
io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f00000001c0)={0x79c, r2, 0x32, {0xb, 0x100004000}, 0x2}, 0x1)
setrlimit(0x7, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x107b42, 0x32)
ftruncate(r8, 0x6000000)
pwrite64(r8, &(0x7f0000000140)='2', 0x1, 0x7ff)
fallocate(r0, 0x24, 0x3960, 0x2000402)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x2, [{0x6, 0x3}, {0xb, 0x2}, {0xa, 0x3}, {}]}]}}, &(0x7f0000002080)=""/4089, 0x46, 0xff9, 0xa, 0x1}, 0x28)
r10 = dup(r9)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000040)={'netdevsim0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x4, 0x0, 0x8000000000000001})

1m39.022902358s ago: executing program 3 (id=128):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000240)=@ccm_128={{0x303}, "764e2ea6b064c601", "09005d1a459f592c619d5ffb00000400", "fb995619", "0df206dff66e9903"}, 0x9b)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000feffffff00000000000000006301e2000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x94)
r2 = fsmount(r0, 0x0, 0x82)
connect$netlink(r2, &(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfc, 0x20000}, 0xc)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000000000000000000d385700000000000001000006"], 0x0, 0x3c, 0x0, 0x6, 0xfffffffa}, 0x28)
fchdir(r2)
r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0)
write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b)

1m37.124661839s ago: executing program 3 (id=141):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040)=<r4=>0xffffffffffffffff, 0x0, 0x0, {0x33}, 0x0, 0x0, 0x0, 0x0}, 0x58)
capset(&(0x7f0000000380)={0x19980330}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000bc0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="05072bbd7000ffdbdf254500"], 0x14}, 0x1, 0x0, 0x0, 0x40048c1}, 0x40048d4)
process_madvise(r4, 0x0, 0x0, 0xa, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r7=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1715}, [@IFLA_MASTER={0x8, 0xa, r7}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004844}, 0x8000002)
io_getevents(0x0, 0x7, 0x0, 0x0, 0x0)
r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r9}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000340)={'vcan0\x00', <r10=>0x0})
r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000680), 0x4)
pipe(&(0x7f0000000080)={<r12=>0xffffffffffffffff})
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r13=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r12, @ANYBLOB=',wfdno=', @ANYRESHEX=r13])
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)=ANY=[@ANYRES32=r13], 0x20)
r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x2}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x20, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffff4344}, [@jmp={0x5, 0x0, 0x0, 0x2, 0x6, 0xfffffffffffffffc, 0xffffffffffffffff}, @map_idx={0x18, 0xf, 0x5, 0x0, 0xd}, @call={0x85, 0x0, 0x0, 0x8d}, @ldst={0x3, 0x0, 0x6, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x3e}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5a}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}]}, &(0x7f0000000140)='syzkaller\x00', 0x4, 0x5d, &(0x7f00000003c0)=""/93, 0x40f00, 0x20, '\x00', r10, 0x25, r11, 0x8, &(0x7f00000006c0)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000700)={0x4, 0x3, 0xd48, 0x6}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000007c0)=[r13, r14], &(0x7f0000000800)=[{0x1, 0x2, 0xd, 0x7}, {0x1, 0x4, 0xb, 0xb}], 0x10, 0x80000001}, 0x94)

1m37.124368609s ago: executing program 32 (id=141):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040)=<r4=>0xffffffffffffffff, 0x0, 0x0, {0x33}, 0x0, 0x0, 0x0, 0x0}, 0x58)
capset(&(0x7f0000000380)={0x19980330}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000bc0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="05072bbd7000ffdbdf254500"], 0x14}, 0x1, 0x0, 0x0, 0x40048c1}, 0x40048d4)
process_madvise(r4, 0x0, 0x0, 0xa, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r7=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1715}, [@IFLA_MASTER={0x8, 0xa, r7}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004844}, 0x8000002)
io_getevents(0x0, 0x7, 0x0, 0x0, 0x0)
r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r9}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000340)={'vcan0\x00', <r10=>0x0})
r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000680), 0x4)
pipe(&(0x7f0000000080)={<r12=>0xffffffffffffffff})
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r13=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r12, @ANYBLOB=',wfdno=', @ANYRESHEX=r13])
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)=ANY=[@ANYRES32=r13], 0x20)
r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x2}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x20, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffff4344}, [@jmp={0x5, 0x0, 0x0, 0x2, 0x6, 0xfffffffffffffffc, 0xffffffffffffffff}, @map_idx={0x18, 0xf, 0x5, 0x0, 0xd}, @call={0x85, 0x0, 0x0, 0x8d}, @ldst={0x3, 0x0, 0x6, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x3e}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5a}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}]}, &(0x7f0000000140)='syzkaller\x00', 0x4, 0x5d, &(0x7f00000003c0)=""/93, 0x40f00, 0x20, '\x00', r10, 0x25, r11, 0x8, &(0x7f00000006c0)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000700)={0x4, 0x3, 0xd48, 0x6}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000007c0)=[r13, r14], &(0x7f0000000800)=[{0x1, 0x2, 0xd, 0x7}, {0x1, 0x4, 0xb, 0xb}], 0x10, 0x80000001}, 0x94)

1m31.495995776s ago: executing program 0 (id=231):
socket$nl_rdma(0x10, 0x3, 0x14)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0xa, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x3ff, 0x1}, 0x100c2, 0xa7, 0x2, 0x5, 0xa5, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x1)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[], 0x48)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r1, 0x0)
r2 = gettid()
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write$P9_RGETLOCK(r3, &(0x7f00000002c0)=ANY=[], 0x200002e6)
fcntl$setpipe(r3, 0x407, 0x7000000)
process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r5, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
syz_open_dev$loop(&(0x7f00000002c0), 0x46e41772, 0x40)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080)={[{@discard}, {@max_batch_time={'max_batch_time', 0x3d, 0xaf33}}, {@noinit_itable}, {@noquota}, {@noblock_validity}, {}, {@stripe={'stripe', 0x3d, 0x51}}, {@acl}, {@resgid}, {@i_version}], [], 0x3d}, 0x1, 0x521, &(0x7f00000007c0)="$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")

1m30.702982613s ago: executing program 0 (id=241):
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x53a1bd79, 0x7, 0x9, 0x86, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0xeb51a8ffd4e6d429, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, r3, 0x201, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x1a, &(0x7f0000000380)=@framed={{}, [@map_fd={0x18, 0x7}, @printk={@x}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x50000000}}, @call={0x85, 0x0, 0x0, 0x8c}, @initr0={0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x2400}, @exit]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r4}, 0xc)
syz_open_procfs(0x0, &(0x7f00000010c0)='net/ip_mr_vif\x00')
r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(r5, 0xc0286687, &(0x7f0000000200)={0x3, 0x9, 0x2f, &(0x7f00000001c0)=""/47})
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010028bd70000000000008000000180001801400020073797a5f74756e0000000000000000001c00028018000380100001800800010009000000040003"], 0x48}}, 0x0)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r6)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r6, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r8, 0x10, 0x70bd27, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x801)

1m30.550010722s ago: executing program 0 (id=243):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = memfd_create(&(0x7f0000000300)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9kL\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb8<X\xfa\xdd\x8a6\xa1\x82\xf7r\xd8z\x85\x8do\xa5\xed\xd4\xbc8\xfb\x16\x8e\x8b-W\xd4\xc9\xbc\x94CR[Du8U^\xf2tl8\xfe\xd0\x94\xfe\xf5\x1c+\x00U\te\xfa6\xca\xb9\xb4Q\xd9\xee\r6\x861h{\xc7z\'F\xc7\x91\x06x\xe1`\xf1\x00\x00\x00\x00\x00\x00\x00\x03\x06\x90\x90\x9b\x1d\xcaa\xf7\x8f\x9e\x80\x93\xafT\xdfl\xec\xc6\x8e\x96=\x8c\x99\x06', 0x1)
lseek(r1, 0xff7ffffffffffff8, 0x1)
ioctl$SIOCSIFHWADDR(r0, 0x8931, &(0x7f0000000080)={'syz_tun\x00'})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x20000000}, 0x5}}, @TCA_MPLS_TTL={0x5, 0x7, 0xc}, @TCA_MPLS_LABEL={0x8, 0x5, 0xb2d1}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x4000850)

1m30.525744953s ago: executing program 0 (id=244):
syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@link_local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @multicast1}, @address_request}}}}, 0x0)
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x208a022, 0x0, 0x1, 0x0, &(0x7f0000000000))
mount(0x0, &(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
chroot(&(0x7f0000000000)='./file0/../file0\x00')
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='./file0/../file0\x00')
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x34, r2, 0x1, 0x0, 0x0, {0x54}, [@nsim={{0x1f}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x40010)
setsockopt$sock_attach_bpf(r0, 0x1, 0x12, &(0x7f0000000f00), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000003000000000000000000000085000000a0000000850000001a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x0)
fchdir(r4)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
lseek(r5, 0x9, 0x1)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="70000000100001002abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="ad21000000000000140003006e657464657673696d30000000000000080004000e04000034"], 0x70}, 0x1, 0x0, 0x0, 0x4048000}, 0x800)

1m30.40144845s ago: executing program 0 (id=246):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
close(0xffffffffffffffff)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000020000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c001680", @ANYRES64=r0], 0x38}, 0x1, 0x2000000}, 0x10)

1m29.778919087s ago: executing program 0 (id=256):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000006"], 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r1=>r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'/28], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r5, <r6=>0xffffffffffffffff}, &(0x7f0000000280), &(0x7f0000000040)=r2}, 0x20)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4)
sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=<r10=>r9, @ANYBLOB="3183000000010000000019000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000801000000181100ab48a8fb5ceee815338f5d2ab06ae26b", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r12=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, r12, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x14)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f00000003c0)=0x6121, 0x4)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="02011400012918000e1a80009f0001140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d206", @ANYRES16=<r13=>0xffffffffffffffff, @ANYBLOB="887f318e60836ab46228ae6901ddbf5474dc42e3f65c618d10afb2200696281db003dc4472c119b67036b22c0d20e263996d466fd4"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000007}, 0x4000)
connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000006c0)=ANY=[@ANYRES64=r6, @ANYRES16=r10, @ANYRESHEX=r13, @ANYRES32=r9, @ANYRES64=r1, @ANYBLOB="afda748c5d42ead7574aa74f96d4a76c6ec82bc15a457b9e5e0020d065eea2f3bc5c3de7a428eeade77abbf62437ceb2966da701515add6e9a70a8328573e948a185236f412aef761de31603feeb0b7624dc469577384746cc1e7900e4475e065e5646254a2c76924d0ee66f1f73e8b5b2da77d78d1561a4fd45de673ea7b07de3c34437032d28f6344e93ae5db74fd5b67fab46e8f24fe9825f22747384be93dfe5a3f7c009b6b6deffeea72fd31d1d30236653c30cb5402c7af9e9e6548be9ad32091dc1e0b1d7f241026428fb170c5ba23fe22dc3b1949c98d1d6692571d4b72d76b8815c319bb281d1c61cbd14"], 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket(0x28, 0x5, 0x0)
syz_open_procfs(0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa097}, {0xa, 0x4e21, 0x9, @local, 0x9}, 0xffffffffffffffff, 0x8001}}, 0x48)

1m29.74007736s ago: executing program 33 (id=256):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000006"], 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r1=>r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'/28], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r5, <r6=>0xffffffffffffffff}, &(0x7f0000000280), &(0x7f0000000040)=r2}, 0x20)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4)
sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=<r10=>r9, @ANYBLOB="3183000000010000000019000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000801000000181100ab48a8fb5ceee815338f5d2ab06ae26b", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r12=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, r12, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x14)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f00000003c0)=0x6121, 0x4)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="02011400012918000e1a80009f0001140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d206", @ANYRES16=<r13=>0xffffffffffffffff, @ANYBLOB="887f318e60836ab46228ae6901ddbf5474dc42e3f65c618d10afb2200696281db003dc4472c119b67036b22c0d20e263996d466fd4"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000007}, 0x4000)
connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000006c0)=ANY=[@ANYRES64=r6, @ANYRES16=r10, @ANYRESHEX=r13, @ANYRES32=r9, @ANYRES64=r1, @ANYBLOB="afda748c5d42ead7574aa74f96d4a76c6ec82bc15a457b9e5e0020d065eea2f3bc5c3de7a428eeade77abbf62437ceb2966da701515add6e9a70a8328573e948a185236f412aef761de31603feeb0b7624dc469577384746cc1e7900e4475e065e5646254a2c76924d0ee66f1f73e8b5b2da77d78d1561a4fd45de673ea7b07de3c34437032d28f6344e93ae5db74fd5b67fab46e8f24fe9825f22747384be93dfe5a3f7c009b6b6deffeea72fd31d1d30236653c30cb5402c7af9e9e6548be9ad32091dc1e0b1d7f241026428fb170c5ba23fe22dc3b1949c98d1d6692571d4b72d76b8815c319bb281d1c61cbd14"], 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket(0x28, 0x5, 0x0)
syz_open_procfs(0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa097}, {0xa, 0x4e21, 0x9, @local, 0x9}, 0xffffffffffffffff, 0x8001}}, 0x48)

2.845886164s ago: executing program 2 (id=1478):
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
r5 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=")
ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40e8662e, &(0x7f0000000000)={0x9, 0x4000009, 0x7fffffffffffffff, 0x3, 0xffffffff, 0xa})
rt_sigqueueinfo(0x0, 0x21, &(0x7f0000000180)={0x33, 0x40000020, 0xfffffffb})
r6 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)

2.654752175s ago: executing program 1 (id=1481):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="2100000000000000000000000000100000"], 0x48)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13)

2.620162387s ago: executing program 1 (id=1482):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
mkdir(0x0, 0x0)
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)
r1 = socket$packet(0x11, 0x3, 0x300)
lseek(r0, 0xc33, 0x4)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x78, 0x6}, 0x4)
setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000002040)=[{0x4, 0x8, 0x8, 0x6}]}, 0x10)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, 0x0, 0x0)
r3 = io_uring_setup(0x7f2c, &(0x7f00000001c0)={0x0, 0x6750, 0x2, 0x2, 0x310})
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
read$msr(r4, &(0x7f0000000d40)=""/43, 0x2b)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r5=>0x0})
bind$xdp(r4, &(0x7f00000000c0)={0x2c, 0x8, r5, 0x6}, 0x10)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newsa={0x180, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x714, 0x4e23, 0x9, 0x2, 0x0, 0x0, 0x3a}, {@in=@rand_addr=0x64010101, 0x4d4, 0x6c}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {0x0, 0x193, 0x6, 0x10003, 0x1666, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffc}, {0x2, 0xffebfffc}, 0x70bd2a, 0x3503, 0xa, 0x4, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_crypt={0x48, 0x2, {{'ecb(arc4)-generic\x00'}}}]}, 0x180}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000003000/0x800000)=nil, 0x800000, 0x7, 0x20010, r3, 0x8000000)
r7 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r7, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0)
recvfrom$inet6(r7, 0x0, 0x0, 0x2002, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40000, 0xa4)

2.495655814s ago: executing program 4 (id=1484):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'gretap0\x00', &(0x7f0000000340)={'syztnl0\x00', <r2=>0x0, 0x8000, 0x80, 0xd, 0x7ff, {{0x2f, 0x4, 0x3, 0x1, 0xbc, 0x68, 0x0, 0xa, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x36}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0xc5, 0xb, "0af49430a5ea048994"}, @lsrr={0x83, 0x7, 0x6f, [@loopback]}, @ra={0x94, 0x4}, @noop, @timestamp_prespec={0x44, 0x3c, 0xcd, 0x3, 0x5, [{@remote, 0xb}, {@rand_addr=0x64010100, 0x1}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x800}, {@rand_addr=0x64010102}, {@private=0xa010102, 0x706}, {@broadcast, 0xf}, {@loopback, 0xc3}]}, @cipso={0x86, 0xd, 0x3, [{0x0, 0x7, "482b568b26"}]}, @generic={0x82, 0xf, "940b9a53b3b33471ad602297b0"}, @timestamp_prespec={0x44, 0x24, 0xbc, 0x3, 0x7, [{@loopback, 0x40}, {@local, 0xffff}, {@loopback, 0x4}, {@loopback}]}, @timestamp_prespec={0x44, 0x14, 0x3b, 0x3, 0x1, [{@dev={0xac, 0x14, 0x14, 0x3a}, 0x5}, {@rand_addr=0x64010101, 0xd8}]}]}}}}})
bind$xdp(0xffffffffffffffff, &(0x7f00000000c0)={0x2c, 0x2, r2, 0x1e}, 0x10)
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x1, @perf_bp={0x0, 0x7}, 0x102b28, 0x7, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shutdown(0xffffffffffffffff, 0x1)
r3 = open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x8001)
r4 = socket(0x10, 0x3, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000280), &(0x7f0000000040)=@udp=r4, 0x2}, 0x20)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$BTRFS_IOC_DEFRAG(r3, 0x50009402, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0xd, 0xb}, {}, {0x10, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x8, 0x0, 0xa}, 0x1}}]}, {0xfffffffffffffd78}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0xb3adf0918d059af8}, 0x0)

2.047482651s ago: executing program 4 (id=1488):
ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, 0x0)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b85, 0x2, @perf_config_ext={0x0, 0x3fff8080}, 0x88, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00')
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN")
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffefff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xad8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={0x0, 0x0, 0x2a}, 0x28)
bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000001000)=@base={0x10, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x0, 0x1}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r5)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x20020}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xd}]}}}]}, 0x3c}}, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0)

1.902938249s ago: executing program 2 (id=1489):
prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x4)
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x7de70cffef05e421, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0x5, 0x2}, 0x0, 0x10000, 0x1000000, 0x9, 0x5, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
write$tun(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0001090004f50000a60c6eec00be00442ffffe8000000000000000000000000000aaff020000000000000000000000000001042088be0038668d0fee0746d90086dd88a888be000000021609660501000000000088a8080022eb00020000000000000200049403080065580000000200000000000000"], 0x7a)
r3 = socket(0x1, 0x803, 0x0)
socket$kcm(0x10, 0x2, 0x4)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x110cc0, 0x91d, 0xf, 0x0, 0x6, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b00000005000000010001000a00000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r4, &(0x7f00000000c0)="b8a41064e8978f3170f0bd902918822f1d41d6c584fb70c0e441d53ddcbbe8978bbab55392b79f06b19bdf114dd70e1a001f9baa64629a964ec892df72e9032b7d4bfdab4cc5774d781540f44dc08559d9ed4ff96d", &(0x7f00000002c0)=""/235, 0x2499138fd760cd49}, 0x20)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x5, 0x0, 0x0, 0xa, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xac, 0xfff, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffff}, {0x2, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x4d2, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x49}]}]}, 0xfc}}, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = io_uring_setup(0x539a, &(0x7f00000001c0)={0x0, 0x37db, 0x1000, 0x2, 0x33b})
io_uring_register$IORING_UNREGISTER_BUFFERS(r6, 0x1, 0x0, 0x0)
sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0xdd86, 0x2c}, 0x80, 0x0}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000400)='multiq\x00')
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r3)

1.857154711s ago: executing program 4 (id=1492):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r1, 0x5412, 0x0)

1.755672678s ago: executing program 4 (id=1493):
socket$inet6(0xa, 0x6, 0xfffffffe)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c)
listen(r0, 0x6)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r1 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0xa, 0x20002f7})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x2, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0x2, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x24040010)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)

1.754996737s ago: executing program 1 (id=1495):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c0000000206010800000000000000000a000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574"], 0x5c}}, 0x20084884)

1.730234309s ago: executing program 2 (id=1496):
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfc}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1)
futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f00000000c0)={0x0, 0x4, 0xfffc, 0x20, 0xfff3, 0x20})
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r5, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004)
write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r2], 0x4)

1.71258471s ago: executing program 5 (id=1497):
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33)
sendfile(r0, r1, &(0x7f0000000080)=0xaf36, 0x7fffffff)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002)
r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
readv(r2, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/117, 0x75}], 0x1)
write$evdev(r2, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)

1.647697123s ago: executing program 1 (id=1498):
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=<r0=>0x0)
r1 = syz_pidfd_open(r0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x10, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x181000, 0x21)
io_setup(0xca, &(0x7f0000000080)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000680)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x6e, r2, &(0x7f0000000400)='3', 0x1, 0x2}])
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x2, 0x2)
bind$vsock_stream(r5, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r5, 0x0)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r6, &(0x7f0000000200)={0x28, 0x0, 0x2710, @local}, 0x10)
r7 = accept4(r5, 0x0, 0x0, 0x0)
sendto(r7, &(0x7f0000000000)="00c881d76049ac562e4e5094890b55e5ea113389145c57e7b3479bf3f2cf8ac5d94a71e37b8bc9f4e71c8b097042535f04d39b07b6e29be0a2734c7332f8", 0x3e, 0x80, 0x0, 0x0)
recvfrom(r6, &(0x7f00000001c0)=""/62, 0x3e, 0x10120, 0x0, 0x0)
fcntl$setownex(r4, 0xf, &(0x7f0000000100)={0x2})
r8 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_int(r8, 0x11e, 0x1, 0x0, 0x0)
ioctl$AUTOFS_IOC_READY(r8, 0x9360, 0xfffffffffffff000)
ioctl$EXT4_IOC_MIGRATE(r1, 0xff08)

1.416735167s ago: executing program 5 (id=1500):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7a, 0x0, @perf_config_ext={0x8001, 0xf}, 0x0, 0x2e, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
r3 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000000c0)={0x42, 0x9, 0xf5ffffff}, 0x10)

1.37283582s ago: executing program 2 (id=1501):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x1000410, &(0x7f0000000100), 0x6, 0x507, &(0x7f0000000500)="$eJzs3c9vI1cdAPDvzMab7NbbbKEHQECXUljQss6PbaOqHNheQKiqhKiQkDhsQ+JGUex1FCelCTlkj9yRqMQJ/gRuHJB64sCNG9y4lAPSAhGoQeIwaMbTxE3sdegmcdf+fKTxzHvj+Puenfee5znOC2Bs3YiIvYi4HBFvRsR0mZ+UW9ztbPn9PtjfXTrY311KIsve+EdSnM/zoutnck+VjzkVEd//TsSPk5Nx29s7a4uNRn2jTM9sNtdn2ts7t1fTMmd+YW5h9uU7L82fWV2fa/7m4bdXX/vB7377hff/uPf1n+bFqv7sWnGuux5nqVP1SlS78iYi4rXzCDYkE+XvD0+evLV9KiKeL9r/dFwqXk0AYJRl2XRk091pAGDU5df/1UjSWjkXUI00rdU6c3jPxtW00Wpv3ppubd1fjmIO63pU0rdWG/XZcq7welSSPD1XHB+l54+l70TEMxHx88krRbq21GosD/ONDwCMsaeOjf//nuyM/wDAiJsadgEAgAtn/AeA8WP8B4Dx83+M/74dCAAjwvU/AIwf4z8AjJ+B4/+DiykHAHAhvvf66/mWHZT//3r57e2tb1bfvr1cb6/VmltLtaXWxnptpdVaadRrS1k26PEardb63IuHyfb2zr1ma+v+5r3V5uJK/V69cs71AQAGe+a59/6cRMTeK1eKLbrWcjBWw2hLP5LqsVAPMLIuDbsAwND4Pg+Mr1Nc45sGgBE36Mq/758IvWvxV3hS3fys+X8YV+mwCwAMzceb///WmZcDuHjm/2F8ZVlizX8AGDPm+IGP8/n/D6P8/B8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADGVLXYkrRWrAW+l9+mtVrEtYi4HpXkrdVGfTYino6IP01WJvP03LALDQA8pvRvSbn+183pF6rHz15O/jNZ7CPiJ7984xfvLG5ubszl+f88zN98t8yfvzyMCgAA3e6ezOqM0+W+60L+g/3dpQ+3iyziw1c7i4vmcQ/KrXNmIiaK/VRUIuLqv5Iy3ZG/X7l0BvH3HkTEZ47q/05XhGoxB9JZ+fR4/Dz2tXOIf/T8J5FlWXYUP/1I/LQoW76vFM/Fp8+gLDBu3nu100/m7e7K/m7exMr2l8aNYt+7/U8VPdTj+7D/OzjR/6WH/d+lE/GTos3fOEw/uiQPX/z9d09kZtOdcw8iPjfRK35yGD/p0/++cMo6/uXzX3y+37nsVxE3o3f8jmbRzc5sNtdn2ts7t1ebiyv1lfr9+fmFuYXZl++8ND9TzFF3bv/QK8bfX7n1dL/4ef2v9ok/NaD+Xzll/X/93zd/9KVHxP/al3u//s8+In4+Jn71lPEXr97ttXz3YfzlPvUf9PrfOmX89/+6s3zKuwIAF6C9vbO22GjUNwYc5O81B93HwZN5EHsRPU+l5xb0G1MRn4i6O+h3MOyeCThvR41+2CUBAAAAAAAAAAAAAAD6aW/vrE3G+X6daNh1BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYHT9LwAA//9agtBN")
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1b459d, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xd071000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x20368000)
open(&(0x7f0000000240)='./file1\x00', 0x105342, 0x20)

1.37260424s ago: executing program 1 (id=1502):
r0 = syz_socket_connect_nvme_tcp()
recvmsg$inet_nvme(r0, 0x0, 0x40000121)
r1 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0)
process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = syz_io_uring_setup(0xd2, 0x0, 0x0, 0x0)
io_uring_enter(r2, 0x47bd, 0x636d, 0x0, 0x0, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r4)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r5, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r6, 0x0, 0x0)
r7 = accept(r4, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1)
close_range(r3, 0xffffffffffffffff, 0x0)

1.168089242s ago: executing program 5 (id=1505):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x2, 0x0, 0x1f00, 0x1}, 0x76e0})

1.167800562s ago: executing program 5 (id=1506):
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5nGdGaOSX8/eHPe97wn8zxPTmfOe2BOA3hqTWc/0ohDEXE2iZis708jYqjaG4nYrB13/+7l+awlUam8/VsSSUTcu3t5vvFaSX07Xh+MRMTN15L490etcVfXN5bnyuXSSn18dO38paOr6xuvLJ2fO1c6V7pwYvbVE7MnZ2e7WOvtS+998cwPbzx/9frHM29+fuC7JE7HRH2uuY5umY7prb9Js0JEzHU7WE4G6vU015kUckwIAICO0qY13H9jMgbi4eJtMr79MdfkAAAAgK6oDERUAAAAgH0ucf8PAAAA+1zjewD37l6eb7R8v5HQX3fORMRUrf7G8821mUJsVrcjMRgRY78n0fxYa1L7tSc2nUX6+vtS1qJHzyF3snklIv6/3flPqvVPVZ/ibq0/jYiZLsSffmS8l+o/3YX4edcPwNPpxpnahaz1+pdurX9im+tfYZtr127kff1rrP/ut6z/HtY/0Gb999YOYxx+8NLNdnPN6793P/l5IYufbZ+oqL/hzpWIw4Xt6k+26k/a1H92hzHG529fazeX1Z/V22j9rr9yPeJIdTXXWn9D0un/Jzq6uFQuzdR+bvP66yc7x28+/1nL4jfuBfohO/9jsbvzf2mHMab+9+uhdnOPrz/9ZSh5p9obqu/5cG5tbeVYxFDyeuv+451zaRzTeI2s/hef6/z+367+7DNhs/53yP71XKlvs/HVR2KOHzn+1e7r762s/oVdnv9Pdxjjy2+uvd9uLu/6AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgb0oiYiCQtbvXTtFiMGI+I/8RYWr64uvby4sUPLixkcxFTMZguLpVLMxExWRsn2fhYtf9wfPyR8WxEHIyIzyZHq+Pi/MXyQt7FAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsGU8IiYiSYsRkUbEH5NpWizmnRUAAADQdVN5JwAAAAD0nPt/AAAA2P9a7v8LfxmN9DMXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9qWDz964lUTE5qnRassM1ecGc80M6LV0Z4eN9ToPoP8G8k4AyE2hqV+pVCo5pgL0mXt8IHnM/EjbmeGu5wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP9cLh27cSiJi89RotWWG6nODuWYG9FqadwJAbgY6TSaP3QHsYYW8EwBy4x4fqK3sH1RqWudH2v7m8BNHBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDvmKi2JC1GRFrtp2mxGPGviJiKwWRxqVyaiYgDEfHT5OBwNj6Wd9IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB03er6xvJcuVxa0dHR6WJnNPoWa7T+Zm5zzHD7qQ6dnD+YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIxer6xvJcuVxaWc07EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACBvq+sby3Plcmmlh528awQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID9/BgAA///GyAmy")
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000100)="85", 0x140000}], 0x65, 0x7800, 0x0, 0x2)
unshare(0xe000480)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x2, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x8}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0xa0000000}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x58}, 0x1, 0x7}, 0x0) (async)
syz_emit_ethernet(0xc6, &(0x7f0000000080)=ANY=[@ANYRESDEC=r1], 0x0)

981.418592ms ago: executing program 5 (id=1508):
r0 = syz_socket_connect_nvme_tcp()
recvmsg$inet_nvme(r0, &(0x7f00000005c0)={&(0x7f0000000780)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, 0x0}, 0x40000121)
process_vm_writev(0x0, &(0x7f0000001c80), 0x0, 0x0, 0x0, 0x0)
r1 = syz_io_uring_setup(0xd2, 0x0, &(0x7f0000000080), 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
io_uring_enter(r1, 0x47bd, 0x636d, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000000580)=[{0x3, 0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)=""/240, 0xf0}, {&(0x7f0000000140)=""/224, 0xe0}, {&(0x7f0000000240)=""/54, 0x36}], &(0x7f00000002c0)=[0x2, 0x18, 0x17f, 0xd5e, 0x4, 0x3]}, {0x3, 0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000300)=""/100, 0x64}, {&(0x7f0000000380)=""/103, 0x67}, {&(0x7f0000000400)=""/45, 0x2d}], &(0x7f0000000540)=[0x6, 0x1]}], 0x2)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r3)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r4, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r6 = accept(r3, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1)
close_range(r2, 0xffffffffffffffff, 0x0)

883.964468ms ago: executing program 4 (id=1509):
perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0xa, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x80, 0xa7, 0x2, 0x5, 0xa5, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f00000017c0)='./file1\x00', 0x0, &(0x7f0000000000), 0x1, 0xb80, &(0x7f0000000c40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
truncate(&(0x7f0000000900)='./file1\x00', 0x3000000)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x100000000000000)

729.904347ms ago: executing program 6 (id=1510):
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x3000, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000ffff00000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0)

669.021981ms ago: executing program 6 (id=1511):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000f5ff00000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0)

599.696884ms ago: executing program 4 (id=1512):
prlimit64(0x0, 0xb, &(0x7f0000000000)={0x0, 0x200000000}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="120000000500000004000000028ec41650890b84", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000130001002bbd7000f8dbdf2504004f80080033"], 0x3c}], 0x1, 0x0, 0x0, 0x8000}, 0x8880)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4401e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
process_vm_writev(0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000400)=""/150, 0x96}], 0x2, 0x0, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = io_uring_setup(0x56ab, &(0x7f0000000100)={0x0, 0x36d, 0x40, 0x100000, 0xa0002f5})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)
rt_sigprocmask(0x1, &(0x7f0000000000)={[0xfffffffffffffff9]}, 0x0, 0x8)
r2 = gettid()
r3 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r4, 0x6628)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
splice(r5, 0x0, r6, 0x0, 0xf3a, 0x0)
tkill(r2, 0x12)
tkill(r3, 0x14)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0xfffe, 0x70c, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x0, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc, 0x9}, 0x83, 0x3505, 0x2, 0x5, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x844)
execveat(r6, &(0x7f0000000180)='./file0\x00', &(0x7f0000000540)={[&(0x7f00000001c0)='\x00', &(0x7f0000000280)='):\x8c\'^-,\xaa&)]:-,!${^\'\x00', &(0x7f00000002c0)='syzkaller\x00', &(0x7f0000000300)='(\x00', &(0x7f0000000340)='}$\x00', &(0x7f00000003c0)=']\x00', &(0x7f00000004c0)='{&![\x00', &(0x7f0000000500)='&]%\x00']}, &(0x7f00000008c0)={[&(0x7f00000005c0)='.,\x00', &(0x7f0000000600)='syzkaller\x00', &(0x7f0000000640)='/\\,-^]\x00', &(0x7f0000000700)='\x00', &(0x7f0000000880)='\x00']}, 0x800)
sendmsg$nl_route_sched(r7, &(0x7f0000003b40)={0x0, 0x0, &(0x7f0000003b00)={&(0x7f0000000080)=@gettaction={0x70, 0x32, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x8}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x70}}, 0x10008004)

599.327275ms ago: executing program 2 (id=1513):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="ac020000", @ANYRES16=r1, @ANYBLOB="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"], 0x2ac}}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e000000040000000400000001"], 0x50)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f00000005c0)={[{@nojournal_checksum}, {@noblock_validity}, {@nobarrier}, {@mblk_io_submit}, {@nobh}, {@sb={'sb', 0x3d, 0x7d5}}, {@errors_remount}, {@test_dummy_encryption}, {@dax}, {@grpjquota_path={'grpjquota', 0x3d, './file0/file0'}}]}, 0x3, 0x513, &(0x7f0000000b00)="$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")
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r2, &(0x7f0000000040), 0x0}, 0x20)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETOFFLOAD(r3, 0x400454ce, 0x4)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x40902, 0x0)
ioctl$PTP_SYS_OFFSET(r5, 0x43403d05, &(0x7f0000000280)={0x17})

599.045665ms ago: executing program 6 (id=1514):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x5, 0x0)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0)

494.931261ms ago: executing program 6 (id=1515):
r0 = syz_io_uring_setup(0x110, &(0x7f0000000140), &(0x7f0000000240)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x40, 0x1, {0x0, r3}})
io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1)

468.787602ms ago: executing program 6 (id=1516):
r0 = syz_io_uring_setup(0x110, &(0x7f0000000140), &(0x7f0000000240)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x1, 0x441e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0xffff}, 0x0, 0x10000, 0x8, 0x0, 0x5, 0x2060005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000004a00010200000000000000000a"], 0x164}}, 0x0)
r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
close(r4)
perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x44, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4050, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_config_ext={0xe, 0xfffffffffffffffe}, 0x0, 0x40000000, 0xd2, 0x9, 0x103fb, 0x1ff, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0x9)
execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x40, 0x1, {0x0, r5}})
io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x5ed4, &(0x7f00000001c0)={0x0, 0x69e0, 0x400, 0x3, 0xc, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000280)=<r6=>0x0)
r7 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x2, @perf_config_ext={0x800000, 0x6}, 0x110140, 0x32, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x10012, &(0x7f0000000c80)={[{@name={'name', 0x3d, 'lox-/\xd6\x8cb\x00'}}]})
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8)
syz_io_uring_submit(r1, r6, &(0x7f0000000300)=@IORING_OP_FILES_UPDATE={0x14, 0x5f, 0x0, 0x0, 0x3ff, &(0x7f00000002c0)=[r8, r0, r0, r0, r0, r0, r0], 0x7, 0x0, 0x1})
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000))
socket$packet(0x11, 0x3, 0x300)
r9 = socket$nl_route(0x10, 0x3, 0x0)
recvmsg(r9, &(0x7f0000000800)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000580)=[{&(0x7f0000000640)=""/124, 0x7c}], 0x1, &(0x7f00000006c0)=""/194, 0xc2}, 0x40000004)
r10 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
set_mempolicy(0x4000, &(0x7f0000000340)=0x3, 0x2)
sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x20006, 0x8, 0x0, 0xd99d}}]}]}}}]}, 0x70}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)

399.575317ms ago: executing program 2 (id=1517):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='illinois', 0x8)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
sendto$inet(r0, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x74120, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000006, 0x1, @perf_config_ext={0x80, 0x7fff}, 0x10008, 0x10003, 0x80000001, 0x3, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000000))
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00', @ANYRES16=r3, @ANYBLOB="796100000000fedbdf257e0000000c0099000400000017020000c1a1bdc677b8d0733f416881a9ed407a05e2071894b9d5b07a231f1a891b1adb6a8efb34700d2fe0368d2371888d42b781ec00fdf90249c0f33e6ccec85443edae1a3887ad8a6917cdb5689dd5eb51bbcd68168e1239a046e08ebd52db897faf3a858845ea809a85834f927ca32a1871352d1561107fc54c2965a0879fe8f52639713c0861bd305699ec08922807047dc353fa5847dec63ddd2994"], 0x20}, 0x1, 0x0, 0x0, 0x8004800}, 0x80c)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="640100001900010000000000040000001d0100001500040001000080fe02000031171e44b2b50e8f040000001e0106000000fd", @ANYRES64=r4], 0x164}}, 0x4010)

399.040507ms ago: executing program 1 (id=1518):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800)

219.874567ms ago: executing program 5 (id=1519):
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @mcast2={0xff, 0x5}, 0x1ff}, 0x1c)
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x4, &(0x7f0000000040)=0x2, 0x4)
connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0xc3f37cc}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
listen(r2, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000240)=0x2, 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x304}, "32f058ec27d46898", "d40f86fd02541c95afec379bdb3cc0d5646e20975202603a18fe7474dc4c3d7b", '\"\vEX', "010000000100"}, 0x38)
ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x8)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1)
r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000740)=@newtclass={0x24, 0x28, 0x20, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xa, 0x9}, {0x4, 0xffff}, {0xffff, 0xfff2}}}, 0x24}}, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
setgroups(0x0, 0x0)

130.577272ms ago: executing program 34 (id=1519):
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @mcast2={0xff, 0x5}, 0x1ff}, 0x1c)
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x4, &(0x7f0000000040)=0x2, 0x4)
connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0xc3f37cc}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
listen(r2, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000240)=0x2, 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x304}, "32f058ec27d46898", "d40f86fd02541c95afec379bdb3cc0d5646e20975202603a18fe7474dc4c3d7b", '\"\vEX', "010000000100"}, 0x38)
ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x8)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1)
r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000740)=@newtclass={0x24, 0x28, 0x20, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xa, 0x9}, {0x4, 0xffff}, {0xffff, 0xfff2}}}, 0x24}}, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
setgroups(0x0, 0x0)

0s ago: executing program 6 (id=1521):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x6, 0x8604, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, @perf_bp={0x0, 0x3}, 0x8000, 0xfffc, 0x0, 0x4, 0x6916, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x10, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x7c, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0x1}}}, 0xb0}}, 0x40)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="700000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0580040000000000500012800b00010067656e657665000040000280050008000000002005000d000100000005000d000200000008000b4000001e82060005004e210000140007"], 0x70}}, 0x4)

kernel console output (not intermixed with test programs):


[  102.532451][ T6616] loop6: p2 start 2531787010 is beyond EOD, truncated
[  102.532629][ T6617] ext4 filesystem being mounted at /172/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  102.539248][ T6616] loop6: p3 size 100663552 extends beyond EOD, truncated
[  102.551776][ T6623] syz.2.891: attempt to access beyond end of device
[  102.551776][ T6623] loop2: rw=2049, sector=161, nr_sectors = 8 limit=128
[  102.551832][ T6623] syz.2.891: attempt to access beyond end of device
[  102.551832][ T6623] loop2: rw=2049, sector=177, nr_sectors = 24 limit=128
[  102.551882][ T6623] syz.2.891: attempt to access beyond end of device
[  102.551882][ T6623] loop2: rw=2049, sector=209, nr_sectors = 8 limit=128
[  102.552002][ T6623] syz.2.891: attempt to access beyond end of device
[  102.552002][ T6623] loop2: rw=2049, sector=225, nr_sectors = 8 limit=128
[  102.552046][ T6623] syz.2.891: attempt to access beyond end of device
[  102.552046][ T6623] loop2: rw=2049, sector=241, nr_sectors = 8 limit=128
[  102.552178][ T6623] syz.2.891: attempt to access beyond end of device
[  102.552178][ T6623] loop2: rw=2049, sector=257, nr_sectors = 8 limit=128
[  102.552284][ T6623] syz.2.891: attempt to access beyond end of device
[  102.552284][ T6623] loop2: rw=2049, sector=273, nr_sectors = 8 limit=128
[  102.552325][ T6623] syz.2.891: attempt to access beyond end of device
[  102.552325][ T6623] loop2: rw=2049, sector=289, nr_sectors = 9 limit=128
[  102.561627][ T6616] loop6: p4 size 50331648 extends beyond EOD, 
[  102.579492][ T6628] syz.2.891: attempt to access beyond end of device
[  102.579492][ T6628] loop2: rw=0, sector=97, nr_sectors = 32 limit=128
[  102.587381][ T6616] truncated
[  102.638708][ T3000]  loop6: p1 p2 p3 p4
[  102.694349][ T3000] loop6: p1 size 262144 extends beyond EOD, truncated
[  102.701775][ T3000] loop6: p2 start 2531787010 is beyond EOD, truncated
[  102.708558][ T3000] loop6: p3 size 100663552 extends beyond EOD, truncated
[  102.725306][ T3000] loop6: p4 size 50331648 extends beyond EOD, truncated
[  102.761684][ T3981] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.773718][ T6633] 8021q: VLANs not supported on ip6gre0
[  102.782627][ T6633] 8021q: VLANs not supported on caif0
[  102.810441][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory
[  102.821584][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory
[  102.832329][ T3505] udevd[3505]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory
[  102.913261][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory
[  102.924595][ T3505] udevd[3505]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory
[  102.946167][ T3504] udevd[3504]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory
[  102.965551][ T3309] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  103.063563][ T6651] loop4: detected capacity change from 0 to 512
[  103.213077][ T6652] loop1: detected capacity change from 0 to 512
[  104.029173][ T3398] hid_parser_main: 12 callbacks suppressed
[  104.029193][ T3398] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  104.052489][ T3418] hid-generic 0004:0001:0007.0005: unknown main item tag 0x0
[  104.059969][ T3418] hid-generic 0004:0001:0007.0005: unknown main item tag 0x0
[  104.067369][ T3418] hid-generic 0004:0001:0007.0005: unknown main item tag 0x0
[  104.074816][ T3418] hid-generic 0004:0001:0007.0005: unknown main item tag 0x0
[  104.082320][ T3418] hid-generic 0004:0001:0007.0005: unknown main item tag 0x0
[  104.089746][ T3418] hid-generic 0004:0001:0007.0005: unknown main item tag 0x0
[  104.097141][ T3418] hid-generic 0004:0001:0007.0005: unknown main item tag 0x0
[  104.104594][ T3418] hid-generic 0004:0001:0007.0005: unknown main item tag 0x0
[  104.111996][ T3418] hid-generic 0004:0001:0007.0005: unknown main item tag 0x0
[  104.192436][ T3398] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  104.218138][ T6673] __nla_validate_parse: 3 callbacks suppressed
[  104.218153][ T6673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.905'.
[  104.271476][ T3418] hid-generic 0004:0001:0007.0005: hidraw1: <UNKNOWN> HID v1.00 Device [syz0] on syz0
[  104.292257][ T6679] 8021q: VLANs not supported on ip6gre0
[  104.317371][ T6679] netlink: 8 bytes leftover after parsing attributes in process `syz.2.906'.
[  104.343302][ T6679] 8021q: VLANs not supported on caif0
[  104.353665][ T6683] loop4: detected capacity change from 0 to 1024
[  104.375125][ T6685] 8021q: VLANs not supported on ip6gre0
[  104.387823][ T6683] EXT4-fs: Ignoring removed mblk_io_submit option
[  104.424483][ T6683] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  104.469742][ T6683] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  104.493253][ T6666] hid-generic 0000:0000:0000.0004: pid 6666 passed too short report
[  104.508499][ T6683] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #11: comm syz.4.904: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  104.540271][ T6683] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.904: couldn't read orphan inode 11 (err -117)
[  104.573956][ T6683] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  104.726061][ T6718] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  104.759756][ T6718] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  104.779032][ T6718] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  104.802528][ T6718] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.810732][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.851666][ T6707] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  104.878099][ T6740] netlink: 20 bytes leftover after parsing attributes in process `syz.4.912'.
[  104.909490][ T6707] ext4 filesystem being mounted at /168/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  104.924441][ T6740] netlink: 20 bytes leftover after parsing attributes in process `syz.4.912'.
[  105.594827][ T3310] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  105.639094][ T6781] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  105.842749][ T6785] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  105.895478][ T6785] ext4 filesystem being mounted at /169/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  105.961822][ T6804] netlink: 24 bytes leftover after parsing attributes in process `syz.4.923'.
[  105.986942][ T6802] netlink: 8 bytes leftover after parsing attributes in process `syz.1.922'.
[  106.031084][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.056767][ T6811] netlink: 4 bytes leftover after parsing attributes in process `syz.2.926'.
[  106.068216][ T6812] set_capacity_and_notify: 7 callbacks suppressed
[  106.068228][ T6812] loop1: detected capacity change from 0 to 128
[  106.091120][ T6811] wireguard4: entered promiscuous mode
[  106.096622][ T6811] wireguard4: entered allmulticast mode
[  106.211809][ T6824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.929'.
[  106.228048][   T29] kauditd_printk_skb: 79 callbacks suppressed
[  106.228062][   T29] audit: type=1400 audit(1803721923.895:1930): avc:  denied  { write } for  pid=6821 comm="syz.2.929" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  106.301285][   T29] audit: type=1400 audit(1803721923.965:1931): avc:  denied  { nlmsg_tty_audit } for  pid=6829 comm="syz.4.930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[  106.325927][   T29] audit: type=1400 audit(1803721923.995:1932): avc:  denied  { ioctl } for  pid=6821 comm="syz.2.929" path="socket:[16497]" dev="sockfs" ino=16497 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  106.363720][ T6824] netlink: 24 bytes leftover after parsing attributes in process `syz.2.929'.
[  106.420898][   T29] audit: type=1326 audit(1803721924.075:1933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6833 comm="syz.2.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bc902aeb9 code=0x7ffc0000
[  106.427370][ T6837] netlink: 52 bytes leftover after parsing attributes in process `syz.2.933'.
[  106.444545][   T29] audit: type=1326 audit(1803721924.075:1934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6833 comm="syz.2.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4bc902aeb9 code=0x7ffc0000
[  106.476625][   T29] audit: type=1326 audit(1803721924.075:1935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6833 comm="syz.2.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bc902aeb9 code=0x7ffc0000
[  106.500062][   T29] audit: type=1326 audit(1803721924.075:1936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6833 comm="syz.2.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f4bc902aeb9 code=0x7ffc0000
[  106.523442][   T29] audit: type=1326 audit(1803721924.075:1937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6833 comm="syz.2.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bc902aeb9 code=0x7ffc0000
[  106.525302][ T6835] loop1: detected capacity change from 0 to 512
[  106.546772][   T29] audit: type=1326 audit(1803721924.075:1938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6833 comm="syz.2.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4bc902aeb9 code=0x7ffc0000
[  106.576434][   T29] audit: type=1326 audit(1803721924.075:1939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6833 comm="syz.2.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bc902aeb9 code=0x7ffc0000
[  106.635718][ T6842] 8021q: VLANs not supported on ip6gre0
[  106.765156][ T6852] loop2: detected capacity change from 0 to 512
[  106.900169][ T6852] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  106.950607][ T6852] ext4 filesystem being mounted at /174/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  107.191479][ T6867] loop5: detected capacity change from 0 to 128
[  107.212989][ T6866] 8021q: VLANs not supported on caif0
[  107.316437][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.367784][ T6876] 8021q: VLANs not supported on ip6gre0
[  107.467397][ T6884] pim6reg1: tun_chr_ioctl cmd 1074025677
[  107.499517][ T6884] pim6reg1: linktype set to 776
[  107.666574][ T6892] 8021q: VLANs not supported on ip6gre0
[  107.698857][ T6894] netlink: 'syz.5.951': attribute type 3 has an invalid length.
[  107.799117][ T6892] 8021q: VLANs not supported on nlmon0
[  108.016713][ T6910] loop5: detected capacity change from 0 to 512
[  108.896767][ T6916] loop5: detected capacity change from 0 to 4096
[  108.938663][ T6916] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  109.036437][ T6929] loop4: detected capacity change from 0 to 128
[  109.068870][ T6929] bio_check_eod: 75 callbacks suppressed
[  109.068886][ T6929] syz.4.961: attempt to access beyond end of device
[  109.068886][ T6929] loop4: rw=2049, sector=145, nr_sectors = 8 limit=128
[  109.098075][ T6929] syz.4.961: attempt to access beyond end of device
[  109.098075][ T6929] loop4: rw=2049, sector=161, nr_sectors = 8 limit=128
[  109.123526][ T6933] syz.4.961: attempt to access beyond end of device
[  109.123526][ T6933] loop4: rw=2049, sector=185, nr_sectors = 16 limit=128
[  109.137111][ T6933] syz.4.961: attempt to access beyond end of device
[  109.137111][ T6933] loop4: rw=2049, sector=209, nr_sectors = 8 limit=128
[  109.150646][ T6933] syz.4.961: attempt to access beyond end of device
[  109.150646][ T6933] loop4: rw=2049, sector=225, nr_sectors = 8 limit=128
[  109.163979][ T6933] syz.4.961: attempt to access beyond end of device
[  109.163979][ T6933] loop4: rw=2049, sector=241, nr_sectors = 8 limit=128
[  109.177311][ T6933] syz.4.961: attempt to access beyond end of device
[  109.177311][ T6933] loop4: rw=2049, sector=257, nr_sectors = 8 limit=128
[  109.190735][ T6933] syz.4.961: attempt to access beyond end of device
[  109.190735][ T6933] loop4: rw=2049, sector=273, nr_sectors = 8 limit=128
[  109.204099][ T6933] syz.4.961: attempt to access beyond end of device
[  109.204099][ T6933] loop4: rw=2049, sector=289, nr_sectors = 8 limit=128
[  109.329773][ T6929] syz.4.961: attempt to access beyond end of device
[  109.329773][ T6929] loop4: rw=2049, sector=177, nr_sectors = 8 limit=128
[  109.931967][ T3981] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.945645][ T6939] netlink: 'syz.1.963': attribute type 3 has an invalid length.
[  109.953323][ T6939] __nla_validate_parse: 7 callbacks suppressed
[  109.953334][ T6939] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.963'.
[  110.044438][ T6945] netlink: 75 bytes leftover after parsing attributes in process `syz.5.965'.
[  110.068803][ T6949] loop4: detected capacity change from 0 to 512
[  110.211582][ T6951] netlink: 12 bytes leftover after parsing attributes in process `syz.5.965'.
[  110.354213][ T6959] netlink: 16 bytes leftover after parsing attributes in process `syz.6.970'.
[  110.778881][ T6963] loop2: detected capacity change from 0 to 512
[  110.844884][ T6963] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  110.944281][ T6963] ext4 filesystem being mounted at /180/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  111.005189][ T6978] loop1: detected capacity change from 0 to 128
[  111.295879][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.366790][ T6988] 8021q: VLANs not supported on ip6gre0
[  111.372674][ T6989] syz.1.977: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0
[  111.387225][ T6989] CPU: 1 UID: 0 PID: 6989 Comm: syz.1.977 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  111.387248][ T6989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  111.387314][ T6989] Call Trace:
[  111.387319][ T6989]  <TASK>
[  111.387326][ T6989]  __dump_stack+0x1d/0x30
[  111.387348][ T6989]  dump_stack_lvl+0x95/0xd0
[  111.387369][ T6989]  dump_stack+0x15/0x1b
[  111.387414][ T6989]  warn_alloc+0x145/0x1c0
[  111.387444][ T6989]  __vmalloc_node_range_noprof+0xa0/0x12b0
[  111.387474][ T6989]  ? __futex_wait+0x1fd/0x260
[  111.387501][ T6989]  ? __pfx_futex_wake_mark+0x10/0x10
[  111.387526][ T6989]  ? __rcu_read_unlock+0x4e/0x70
[  111.387593][ T6989]  ? avc_has_perm_noaudit+0xab/0x130
[  111.387623][ T6989]  ? should_fail_ex+0x30/0x280
[  111.387713][ T6989]  ? should_failslab+0x8c/0xb0
[  111.387738][ T6989]  vmalloc_user_noprof+0x7d/0xb0
[  111.387764][ T6989]  ? xskq_create+0x80/0xe0
[  111.387792][ T6989]  xskq_create+0x80/0xe0
[  111.387894][ T6989]  xsk_init_queue+0x91/0xe0
[  111.387922][ T6989]  xsk_setsockopt+0x3f5/0x640
[  111.387949][ T6989]  ? __pfx_xsk_setsockopt+0x10/0x10
[  111.387991][ T6989]  __sys_setsockopt+0x184/0x200
[  111.388093][ T6989]  __x64_sys_setsockopt+0x64/0x80
[  111.388135][ T6989]  x64_sys_call+0x21d5/0x3000
[  111.388208][ T6989]  do_syscall_64+0xc0/0x2a0
[  111.388236][ T6989]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.388256][ T6989] RIP: 0033:0x7f9d7bd7aeb9
[  111.388325][ T6989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  111.388421][ T6989] RSP: 002b:00007f9d7a7b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  111.388439][ T6989] RAX: ffffffffffffffda RBX: 00007f9d7bff6090 RCX: 00007f9d7bd7aeb9
[  111.388452][ T6989] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006
[  111.388515][ T6989] RBP: 00007f9d7bde8c1f R08: 0000000000000004 R09: 0000000000000000
[  111.388527][ T6989] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  111.388539][ T6989] R13: 00007f9d7bff6128 R14: 00007f9d7bff6090 R15: 00007ffe49548b68
[  111.388557][ T6989]  </TASK>
[  111.388565][ T6989] Mem-Info:
[  111.453323][ T6991] loop1: detected capacity change from 0 to 1024
[  111.458231][ T6989] active_anon:33439 inactive_anon:2 isolated_anon:0
[  111.458231][ T6989]  active_file:26428 inactive_file:2505 isolated_file:0
[  111.458231][ T6989]  unevictable:0 dirty:334 writeback:0
[  111.458231][ T6989]  slab_reclaimable:3589 slab_unreclaimable:19111
[  111.458231][ T6989]  mapped:39803 shmem:24361 pagetables:1448
[  111.458231][ T6989]  sec_pagetables:0 bounce:0
[  111.458231][ T6989]  kernel_misc_reclaimable:0
[  111.458231][ T6989]  free:1842608 free_pcp:15925 free_cma:0
[  111.491653][ T6991] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.977: bad orphan inode 134217728
[  111.495945][ T6989] Node 0 active_anon:134568kB inactive_anon:8kB active_file:105712kB inactive_file:10020kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:159212kB dirty:1336kB writeback:0kB shmem:98024kB kernel_stack:4240kB pagetables:5792kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  111.501716][ T6991] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  111.505836][ T6989] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  111.518578][   T29] kauditd_printk_skb: 30 callbacks suppressed
[  111.518654][   T29] audit: type=1400 audit(1803721929.185:1970): avc:  denied  { read open } for  pid=6981 comm="syz.1.977" path="/188/bus/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  111.521054][ T6989] lowmem_reserve[]: 0
[  111.525472][   T29] audit: type=1400 audit(1803721929.185:1971): avc:  denied  { write } for  pid=6981 comm="syz.1.977" name="bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  111.545225][ T6989]  2879 7858 7858
[  111.545252][ T6989] Node 0 DMA32 free:2944848kB boost:0kB min:4128kB low:7056kB high:9984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948376kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:0kB free_cma:0kB
[  111.663293][ T6988] netlink: 8 bytes leftover after parsing attributes in process `syz.5.976'.
[  111.689654][ T6989] lowmem_reserve[]: 0 0 4978 4978
[  111.829353][ T6989] Node 0 Normal free:4416364kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:130668kB inactive_anon:8kB active_file:105712kB inactive_file:9972kB unevictable:0kB writepending:1280kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:56764kB local_pcp:29732kB free_cma:0kB
[  111.829427][ T6989] lowmem_reserve[]: 0 0 0 0
[  111.829460][ T6989] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  111.829755][ T6989] Node 0 DMA32: 2*4kB (M) 3*8kB (M) 3*16kB (M) 2*32kB (M) 3*64kB (M) 4*128kB (M) 4*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944848kB
[  111.830274][ T6989] Node 0 Normal: 914*4kB (UME) 954*8kB (UME) 210*16kB (UME) 167*32kB (UME) 11*64kB (UE) 22*128kB (UME) 214*256kB (UME) 105*512kB (UME) 30*1024kB (UME) 21*2048kB (UME) 1028*4096kB (UME) = 4416472kB
[  111.830625][ T6989] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[  111.830644][ T6989] 52522 total pagecache pages
[  111.830652][ T6989] 2 pages in swap cache
[  111.830660][ T6989] Free swap  = 124988kB
[  111.830667][ T6989] Total swap = 124996kB
[  111.830675][ T6989] 2097051 pages RAM
[  111.830682][ T6989] 0 pages HighMem/MovableOnly
[  111.830690][ T6989] 81557 pages reserved
[  111.847509][   T29] audit: type=1400 audit(1803721929.225:1972): avc:  denied  { ioctl } for  pid=6981 comm="syz.1.977" path="/188/bus/bus" dev="loop1" ino=18 ioctlcmd=0x457f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  111.852104][ T6988] 8021q: VLANs not supported on caif0
[  111.870285][ T6999] netlink: 4 bytes leftover after parsing attributes in process `syz.4.981'.
[  111.996377][ T6986] loop2: detected capacity change from 0 to 512
[  112.012870][ T6999] wireguard5: entered promiscuous mode
[  112.075032][ T6999] wireguard5: entered allmulticast mode
[  112.120705][ T7009] loop5: detected capacity change from 0 to 512
[  112.157270][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.189296][ T7011] netlink: 'syz.1.985': attribute type 3 has an invalid length.
[  112.197229][ T7011] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.985'.
[  112.240001][ T6986] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[  112.296760][ T6986] EXT4-fs (loop2): orphan cleanup on readonly fs
[  112.370783][ T6986] EXT4-fs error (device loop2): __ext4_iget:5426: inode #11: block 8: comm syz.2.978: invalid block
[  112.433794][ T6986] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.978: couldn't read orphan inode 11 (err -117)
[  112.455760][ T6986] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  112.499065][ T6986] EXT4-fs (loop2): ext4_remount: Checksum for group 0 failed (57259!=33349)
[  112.584033][ T7019] loop4: detected capacity change from 0 to 1024
[  112.611120][ T7019] EXT4-fs: Ignoring removed oldalloc option
[  112.617091][ T7019] EXT4-fs: Ignoring removed bh option
[  112.663671][ T7019] EXT4-fs (loop4): invalid inodes per group: 204800
[  112.663671][ T7019] 
[  112.908410][ T7021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.988'.
[  112.919674][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.978328][ T7025] netlink: 4 bytes leftover after parsing attributes in process `syz.5.990'.
[  113.025339][   T29] audit: type=1326 audit(1803721930.695:1973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7034 comm="syz.5.992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50dcc0aeb9 code=0x7ffc0000
[  113.048744][   T29] audit: type=1326 audit(1803721930.695:1974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7034 comm="syz.5.992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50dcc0aeb9 code=0x7ffc0000
[  113.072256][   T29] audit: type=1326 audit(1803721930.695:1975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7034 comm="syz.5.992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f50dcc0aeb9 code=0x7ffc0000
[  113.095790][   T29] audit: type=1326 audit(1803721930.695:1976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7034 comm="syz.5.992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50dcc0aeb9 code=0x7ffc0000
[  113.119384][   T29] audit: type=1326 audit(1803721930.695:1977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7034 comm="syz.5.992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50dcc0aeb9 code=0x7ffc0000
[  113.165278][ T7038] loop6: detected capacity change from 0 to 128
[  113.189596][   T29] audit: type=1400 audit(1803721930.715:1978): avc:  denied  { setattr } for  pid=7028 comm="syz.2.989" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  113.208804][   T29] audit: type=1326 audit(1803721930.815:1979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7034 comm="syz.5.992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f50dcc0aeb9 code=0x7ffc0000
[  113.293455][ T7044] netlink: 12 bytes leftover after parsing attributes in process `syz.1.994'.
[  113.312751][ T7044] 8021q: VLANs not supported on caif0
[  113.342010][ T7045] loop5: detected capacity change from 0 to 1024
[  113.413684][ T7048] loop1: detected capacity change from 0 to 1024
[  113.547306][ T7050] loop2: detected capacity change from 0 to 512
[  113.671167][ T7045] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.995: bad orphan inode 134217728
[  113.682291][ T7045] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  113.696442][ T7048] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  113.716225][ T7050] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  113.751852][ T7038] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  113.765023][ T7050] ext4 filesystem being mounted at /183/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  113.778537][ T7038] ext4 filesystem being mounted at /123/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  114.059827][ T4434] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  114.107498][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.130147][ T3981] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.201535][ T7065] 8021q: VLANs not supported on ip6gre0
[  114.226744][ T7065] 8021q: VLANs not supported on caif0
[  114.343085][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.447772][ T7080] 8021q: VLANs not supported on caif0
[  114.477057][ T7084] loop1: detected capacity change from 0 to 512
[  114.500091][ T7084] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  114.538991][ T7084] ext4 filesystem being mounted at /194/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  114.727048][ T7090] loop4: detected capacity change from 0 to 512
[  114.741037][ T7090] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  114.805915][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.906056][ T7090] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  114.914058][ T7090] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002]
[  114.923131][ T7090] EXT4-fs (loop4): orphan cleanup on readonly fs
[  114.929846][ T7090] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  114.944455][ T7090] EXT4-fs (loop4): Cannot turn on quotas: error -22
[  115.027913][ T7090] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1009: bg 0: block 40: padding at end of block bitmap is not set
[  115.085136][ T7098] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  115.095311][ T7093] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  115.150255][ T7090] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6689: Corrupt filesystem
[  115.186829][ T7093] ext4 filesystem being mounted at /187/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  115.223019][ T7090] EXT4-fs (loop4): 1 truncate cleaned up
[  115.260031][ T7090] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  115.309948][ T7090] __nla_validate_parse: 6 callbacks suppressed
[  115.309960][ T7090] netlink: 404 bytes leftover after parsing attributes in process `syz.4.1009'.
[  115.325279][ T7090] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1009'.
[  115.334267][ T7090] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1009'.
[  115.343358][ T7090] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1009'.
[  115.478715][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.507015][ T7120] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1019'.
[  115.520907][ T7119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1018'.
[  115.569875][ T7120] wireguard6: entered promiscuous mode
[  115.575413][ T7120] wireguard6: entered allmulticast mode
[  115.661186][ T7135] netlink: 'syz.4.1020': attribute type 11 has an invalid length.
[  115.708874][ T7138] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  115.718064][ T7138] EXT4-fs (loop1): filesystem is read-only
[  115.781498][ T7138] EXT4-fs (loop1): failed to initialize system zone (-117)
[  115.820418][ T7138] EXT4-fs (loop1): mount failed
[  115.855963][ T3310] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  115.891296][ T7157] tipc: Started in network mode
[  115.896288][ T7157] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711
[  115.905184][ T7157] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  116.059476][ T7175] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1031'.
[  116.079118][ T7176] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.1028: bad orphan inode 134217728
[  116.100130][ T7176] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  116.112697][ T7175] wireguard1: entered promiscuous mode
[  116.118194][ T7175] wireguard1: entered allmulticast mode
[  116.147991][ T7182] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1032'.
[  116.389699][ T7191] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  116.415585][ T7191] EXT4-fs (loop6): 1 truncate cleaned up
[  116.427394][ T7191] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  116.492616][ T7200] set_capacity_and_notify: 6 callbacks suppressed
[  116.492640][ T7200] loop5: detected capacity change from 0 to 1024
[  116.506133][ T7200] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  116.598477][ T7210] bridge_slave_0 (unregistering): left allmulticast mode
[  116.605685][ T7210] bridge_slave_0 (unregistering): left promiscuous mode
[  116.612737][ T7210] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.654290][ T7215] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1037'.
[  116.679345][   T29] kauditd_printk_skb: 276 callbacks suppressed
[  116.679359][   T29] audit: type=1400 audit(1803721934.345:2255): avc:  denied  { create } for  pid=7201 comm="syz.1.1037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  116.715901][   T29] audit: type=1400 audit(1803721934.385:2256): avc:  denied  { write } for  pid=7201 comm="syz.1.1037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  116.853700][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.899357][ T7240] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1041'.
[  116.917198][ T7240] pim6reg: entered allmulticast mode
[  116.923125][ T7240] pim6reg: left allmulticast mode
[  117.231800][ T7247] loop2: detected capacity change from 0 to 128
[  117.243938][ T4434] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.247392][ T7247] msdos: Unknown parameter '0xffffffffffffffff0000000000000000000000000000000000000000000ÿÿÿÿ'
[  117.278415][ T7249] FAULT_INJECTION: forcing a failure.
[  117.278415][ T7249] name failslab, interval 1, probability 0, space 0, times 0
[  117.291094][ T7249] CPU: 1 UID: 0 PID: 7249 Comm: syz.4.1044 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  117.291122][ T7249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  117.291140][ T7249] Call Trace:
[  117.291145][ T7249]  <TASK>
[  117.291152][ T7249]  __dump_stack+0x1d/0x30
[  117.291177][ T7249]  dump_stack_lvl+0x95/0xd0
[  117.291203][ T7249]  dump_stack+0x15/0x1b
[  117.291274][ T7249]  should_fail_ex+0x263/0x280
[  117.291307][ T7249]  should_failslab+0x8c/0xb0
[  117.291382][ T7249]  kmem_cache_alloc_noprof+0x68/0x490
[  117.291411][ T7249]  ? skb_clone+0x151/0x1f0
[  117.291498][ T7249]  skb_clone+0x151/0x1f0
[  117.291520][ T7249]  __netlink_deliver_tap+0x2c9/0x500
[  117.291666][ T7249]  netlink_unicast+0x66b/0x690
[  117.291707][ T7249]  netlink_sendmsg+0x5c8/0x6f0
[  117.291730][ T7249]  ? __pfx_netlink_sendmsg+0x10/0x10
[  117.291750][ T7249]  ____sys_sendmsg+0x5af/0x600
[  117.291776][ T7249]  ___sys_sendmsg+0x195/0x1e0
[  117.291837][ T7249]  __x64_sys_sendmsg+0xd4/0x160
[  117.291858][ T7249]  x64_sys_call+0x17ba/0x3000
[  117.291879][ T7249]  do_syscall_64+0xc0/0x2a0
[  117.291916][ T7249]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  117.291934][ T7249] RIP: 0033:0x7f87ca4aaeb9
[  117.291972][ T7249] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  117.291988][ T7249] RSP: 002b:00007f87c8f07028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  117.292019][ T7249] RAX: ffffffffffffffda RBX: 00007f87ca725fa0 RCX: 00007f87ca4aaeb9
[  117.292054][ T7249] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003
[  117.292069][ T7249] RBP: 00007f87c8f07090 R08: 0000000000000000 R09: 0000000000000000
[  117.292085][ T7249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  117.292100][ T7249] R13: 00007f87ca726038 R14: 00007f87ca725fa0 R15: 00007fff04212d68
[  117.292118][ T7249]  </TASK>
[  117.304554][   T29] audit: type=1326 audit(1803721934.975:2257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7250 comm="syz.6.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3941aaaeb9 code=0x7ffc0000
[  117.511174][   T29] audit: type=1326 audit(1803721934.975:2258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7250 comm="syz.6.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3941aaaeb9 code=0x7ffc0000
[  117.534653][   T29] audit: type=1326 audit(1803721934.975:2259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7250 comm="syz.6.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3941aaaeb9 code=0x7ffc0000
[  117.558079][   T29] audit: type=1326 audit(1803721934.975:2260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7250 comm="syz.6.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3941aaaeb9 code=0x7ffc0000
[  117.610410][ T7259] loop5: detected capacity change from 0 to 1024
[  117.631623][   T29] audit: type=1326 audit(1803721935.055:2261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7250 comm="syz.6.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f3941aaaeb9 code=0x7ffc0000
[  117.655183][   T29] audit: type=1326 audit(1803721935.055:2262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7250 comm="syz.6.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3941aaaeb9 code=0x7ffc0000
[  117.678614][   T29] audit: type=1326 audit(1803721935.055:2263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7250 comm="syz.6.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3941aaaeb9 code=0x7ffc0000
[  117.702045][   T29] audit: type=1326 audit(1803721935.055:2264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7250 comm="syz.6.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3941aaaeb9 code=0x7ffc0000
[  117.735474][ T7262] 8021q: VLANs not supported on ip6gre0
[  117.743114][ T7262] 8021q: VLANs not supported on caif0
[  117.809623][ T7269] team0: entered promiscuous mode
[  117.814764][ T7269] team0: entered allmulticast mode
[  117.820564][ T7269] team1 (uninitialized): Failed to send options change via netlink (err -105)
[  117.834418][ T7269] team1: entered promiscuous mode
[  117.839463][ T7269] team1: entered allmulticast mode
[  117.897169][ T7274] loop1: detected capacity change from 0 to 512
[  117.921226][ T7269] loop4: detected capacity change from 0 to 1024
[  117.939921][ T7269] EXT4-fs: test_dummy_encryption option not supported
[  118.119021][ T7305] loop6: detected capacity change from 0 to 512
[  118.230607][ T7324] 8021q: VLANs not supported on caif0
[  118.258372][ T7305] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  118.292508][ T7305] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  118.643659][ T7368] loop4: detected capacity change from 0 to 1024
[  118.709309][ T7373] loop2: detected capacity change from 0 to 4096
[  118.728842][ T4434] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.739862][ T7368] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  118.832415][ T7373] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  118.862982][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.872192][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.962870][ T7400] wireguard5: entered promiscuous mode
[  118.968380][ T7400] wireguard5: entered allmulticast mode
[  119.087494][ T7419] loop2: detected capacity change from 0 to 512
[  119.130565][ T7419] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  119.156212][ T7419] ext4 filesystem being mounted at /201/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  119.182870][ T7424] loop5: detected capacity change from 0 to 512
[  119.221926][ T7428] FAULT_INJECTION: forcing a failure.
[  119.221926][ T7428] name failslab, interval 1, probability 0, space 0, times 0
[  119.234744][ T7428] CPU: 0 UID: 0 PID: 7428 Comm: syz.6.1083 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  119.234769][ T7428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  119.234783][ T7428] Call Trace:
[  119.234790][ T7428]  <TASK>
[  119.234799][ T7428]  __dump_stack+0x1d/0x30
[  119.234861][ T7428]  dump_stack_lvl+0x95/0xd0
[  119.234886][ T7428]  dump_stack+0x15/0x1b
[  119.234909][ T7428]  should_fail_ex+0x263/0x280
[  119.234980][ T7428]  should_failslab+0x8c/0xb0
[  119.235056][ T7428]  kmem_cache_alloc_noprof+0x68/0x490
[  119.235084][ T7428]  ? security_inode_alloc+0x37/0x100
[  119.235181][ T7428]  security_inode_alloc+0x37/0x100
[  119.235209][ T7428]  inode_init_always_gfp+0x4b7/0x500
[  119.235229][ T7428]  ? __pfx_rpc_alloc_inode+0x10/0x10
[  119.235312][ T7428]  alloc_inode+0x58/0x170
[  119.235408][ T7428]  new_inode+0x1d/0xe0
[  119.235434][ T7428]  rpc_fill_super+0xd8/0x2c0
[  119.235458][ T7428]  ? __pfx_rpc_fill_super+0x10/0x10
[  119.235557][ T7428]  get_tree_keyed+0x9e/0x120
[  119.235579][ T7428]  rpc_fs_get_tree+0x9e/0xd0
[  119.235603][ T7428]  vfs_get_tree+0x57/0x1d0
[  119.235625][ T7428]  vfs_cmd_create+0x8a/0x140
[  119.235661][ T7428]  vfs_fsconfig_locked+0x6f/0x210
[  119.235693][ T7428]  __se_sys_fsconfig+0x758/0x8a0
[  119.235729][ T7428]  __x64_sys_fsconfig+0x67/0x80
[  119.235780][ T7428]  x64_sys_call+0x2aa4/0x3000
[  119.235844][ T7428]  do_syscall_64+0xc0/0x2a0
[  119.235946][ T7428]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.235967][ T7428] RIP: 0033:0x7f3941aaaeb9
[  119.235984][ T7428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  119.236006][ T7428] RSP: 002b:00007f3940507028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af
[  119.236077][ T7428] RAX: ffffffffffffffda RBX: 00007f3941d25fa0 RCX: 00007f3941aaaeb9
[  119.236093][ T7428] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006
[  119.236107][ T7428] RBP: 00007f3940507090 R08: 0000000000000000 R09: 0000000000000000
[  119.236133][ T7428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  119.236145][ T7428] R13: 00007f3941d26038 R14: 00007f3941d25fa0 R15: 00007ffd67d1acd8
[  119.236167][ T7428]  </TASK>
[  119.459955][ T7424] FAT-fs (loop5): codepage cp949 not found
[  119.518672][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.745274][ T7438] 8021q: adding VLAN 0 to HW filter on device bond2
[  119.761681][ T7438] bond2: (slave dummy0): Enslaving as an active interface with an up link
[  119.770539][ T7436] pimreg: tun_chr_ioctl cmd 21731
[  119.790818][ T7022] bio_check_eod: 38 callbacks suppressed
[  119.790832][ T7022] kworker/u8:8: attempt to access beyond end of device
[  119.790832][ T7022] loop6: rw=1, sector=145, nr_sectors = 896 limit=128
[  119.811332][ T7438] bond2: entered promiscuous mode
[  119.838585][ T7438] dummy0: entered promiscuous mode
[  119.844517][ T7437] bond2: left promiscuous mode
[  119.855148][ T7437] dummy0: left promiscuous mode
[  119.992076][ T7450] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.063552][ T7450] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.100938][ T7459] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  120.133299][ T7450] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.186709][ T7463] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  120.209030][ T7463] ext4 filesystem being mounted at /215/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  120.409648][ T7450] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.497220][   T31] kworker/u8:1: attempt to access beyond end of device
[  120.497220][   T31] loop4: rw=1, sector=145, nr_sectors = 896 limit=128
[  120.528522][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  120.583569][ T7022] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  120.601427][ T7474] __nla_validate_parse: 16 callbacks suppressed
[  120.601454][ T7474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1099'.
[  120.628610][ T7022] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  120.637851][ T7476] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  120.672552][ T7478] netlink: 'syz.4.1101': attribute type 3 has an invalid length.
[  120.680374][ T7478] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1101'.
[  120.689926][ T7022] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  120.711649][ T7474] wireguard2: entered promiscuous mode
[  120.717152][ T7474] wireguard2: entered allmulticast mode
[  120.748244][ T7022] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  120.787955][ T7483] 8021q: VLANs not supported on ip6gre0
[  120.795743][ T7483] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1102'.
[  120.804938][ T7483] 8021q: VLANs not supported on caif0
[  120.906391][ T7494] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.1105: bad orphan inode 134217728
[  120.917845][ T7494] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  120.992516][ T7491] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  121.201627][ T7491] ext4 filesystem being mounted at /205/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  121.273861][ T7518] Unsupported ieee802154 address type: 0
[  121.330881][  T896] kworker/u8:5: attempt to access beyond end of device
[  121.330881][  T896] loop5: rw=1, sector=145, nr_sectors = 896 limit=128
[  121.368295][ T7524] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1114'.
[  121.388696][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.414447][ T7524] wireguard3: entered promiscuous mode
[  121.419982][ T7524] wireguard3: entered allmulticast mode
[  121.494015][ T7534] 8021q: VLANs not supported on ip6gre0
[  121.538426][ T7534] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1116'.
[  121.579758][ T7534] 8021q: VLANs not supported on caif0
[  121.661865][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.683684][   T29] kauditd_printk_skb: 189 callbacks suppressed
[  121.683699][   T29] audit: type=1326 audit(1803721939.355:2454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7554 comm="syz.5.1120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50dcc0aeb9 code=0x7ffc0000
[  121.713473][   T29] audit: type=1326 audit(1803721939.355:2455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7554 comm="syz.5.1120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f50dcc0aeb9 code=0x7ffc0000
[  121.715961][ T7558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1119'.
[  121.737249][   T29] audit: type=1326 audit(1803721939.355:2456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7554 comm="syz.5.1120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50dcc0aeb9 code=0x7ffc0000
[  121.769314][   T29] audit: type=1326 audit(1803721939.355:2457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7554 comm="syz.5.1120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f50dcc0aeb9 code=0x7ffc0000
[  121.792878][   T29] audit: type=1326 audit(1803721939.355:2458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7554 comm="syz.5.1120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50dcc0aeb9 code=0x7ffc0000
[  121.816362][   T29] audit: type=1326 audit(1803721939.355:2459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7554 comm="syz.5.1120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50dcc0aeb9 code=0x7ffc0000
[  121.843644][   T29] audit: type=1326 audit(1803721939.475:2460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7560 comm="syz.4.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ca4aaeb9 code=0x7ffc0000
[  121.867244][   T29] audit: type=1326 audit(1803721939.475:2461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7560 comm="syz.4.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87ca4aaeb9 code=0x7ffc0000
[  121.890689][   T29] audit: type=1326 audit(1803721939.475:2462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7560 comm="syz.4.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ca4aaeb9 code=0x7ffc0000
[  121.891536][ T7564] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7564 comm=syz.1.1121
[  121.914132][   T29] audit: type=1326 audit(1803721939.475:2463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7560 comm="syz.4.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f87ca4aaeb9 code=0x7ffc0000
[  122.091802][ T7590] set_capacity_and_notify: 8 callbacks suppressed
[  122.091819][ T7590] loop5: detected capacity change from 0 to 1024
[  122.123260][ T7590] EXT4-fs error (device loop5): ext4_generic_delete_entry:2666: inode #12: block 7: comm syz.5.1125: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0
[  122.145214][ T7590] EXT4-fs (loop5): Remounting filesystem read-only
[  122.229148][ T7605] netlink: 'syz.5.1127': attribute type 3 has an invalid length.
[  122.236947][ T7605] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.1127'.
[  122.260668][ T7599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1126'.
[  122.347034][ T7599] gre2: entered promiscuous mode
[  122.353557][ T7599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1126'.
[  122.373520][ T7599] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check.
[  122.389193][ T7599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1126'.
[  122.400996][ T7599] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check.
[  122.417807][ T7599] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check.
[  122.433849][ T7599] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check.
[  122.449348][ T7599] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check.
[  122.495056][ T7599] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check.
[  122.528682][ T7599] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check.
[  122.564301][ T7622] sctp: [Deprecated]: syz.6.1130 (pid 7622) Use of int in maxseg socket option.
[  122.564301][ T7622] Use struct sctp_assoc_value instead
[  122.565215][ T7599] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check.
[  122.649836][ T7624] 8021q: VLANs not supported on ip6gre0
[  122.665912][ T7599] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check.
[  122.693996][ T7624] 8021q: VLANs not supported on caif0
[  122.699867][ T7599] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check.
[  122.778751][   T23] IPVS: starting estimator thread 0...
[  122.922074][ T7635] IPVS: using max 2544 ests per chain, 127200 per kthread
[  122.954888][ T7650] vlan2: entered promiscuous mode
[  122.991753][ T7652] loop2: detected capacity change from 0 to 512
[  122.998738][ T7652] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  123.036365][ T7652] EXT4-fs (loop2): 1 truncate cleaned up
[  123.053269][ T7648] loop5: detected capacity change from 0 to 1024
[  123.064225][ T7656] 8021q: VLANs not supported on caif0
[  123.208961][ T7671] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7671 comm=syz.1.1145
[  123.385962][ T7686] capability: warning: `syz.1.1151' uses 32-bit capabilities (legacy support in use)
[  123.469683][ T7689] Invalid logical block size (4)
[  123.483754][ T7695] loop5: detected capacity change from 0 to 128
[  123.764723][ T7022] kworker/u8:8: attempt to access beyond end of device
[  123.764723][ T7022] loop5: rw=1, sector=145, nr_sectors = 896 limit=128
[  123.801131][ T7703] 8021q: VLANs not supported on ip6gre0
[  123.808570][ T7703] 8021q: VLANs not supported on caif0
[  123.926154][ T7713] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  123.933403][ T7713] IPv6: NLM_F_CREATE should be set when creating new route
[  124.060103][ T7722] warn_alloc: 3 callbacks suppressed
[  124.060132][ T7722] syz.5.1165: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0
[  124.080050][ T7722] CPU: 1 UID: 0 PID: 7722 Comm: syz.5.1165 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  124.080134][ T7722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  124.080146][ T7722] Call Trace:
[  124.080152][ T7722]  <TASK>
[  124.080160][ T7722]  __dump_stack+0x1d/0x30
[  124.080197][ T7722]  dump_stack_lvl+0x95/0xd0
[  124.080216][ T7722]  dump_stack+0x15/0x1b
[  124.080233][ T7722]  warn_alloc+0x145/0x1c0
[  124.080283][ T7722]  __vmalloc_node_range_noprof+0xa0/0x12b0
[  124.080316][ T7722]  ? __futex_wait+0x1fd/0x260
[  124.080350][ T7722]  ? __pfx_futex_wake_mark+0x10/0x10
[  124.080417][ T7722]  ? __rcu_read_unlock+0x4e/0x70
[  124.080446][ T7722]  ? avc_has_perm_noaudit+0xab/0x130
[  124.080539][ T7722]  ? should_fail_ex+0x30/0x280
[  124.080576][ T7722]  ? should_failslab+0x8c/0xb0
[  124.080602][ T7722]  vmalloc_user_noprof+0x7d/0xb0
[  124.080703][ T7722]  ? xskq_create+0x80/0xe0
[  124.080730][ T7722]  xskq_create+0x80/0xe0
[  124.080764][ T7722]  xsk_init_queue+0x91/0xe0
[  124.080874][ T7722]  xsk_setsockopt+0x3f5/0x640
[  124.080905][ T7722]  ? __pfx_xsk_setsockopt+0x10/0x10
[  124.080948][ T7722]  __sys_setsockopt+0x184/0x200
[  124.080988][ T7722]  __x64_sys_setsockopt+0x64/0x80
[  124.081075][ T7722]  x64_sys_call+0x21d5/0x3000
[  124.081173][ T7722]  do_syscall_64+0xc0/0x2a0
[  124.081260][ T7722]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.081285][ T7722] RIP: 0033:0x7f50dcc0aeb9
[  124.081312][ T7722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  124.081332][ T7722] RSP: 002b:00007f50db646028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  124.081419][ T7722] RAX: ffffffffffffffda RBX: 00007f50dce86090 RCX: 00007f50dcc0aeb9
[  124.081435][ T7722] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006
[  124.081449][ T7722] RBP: 00007f50dcc78c1f R08: 0000000000000004 R09: 0000000000000000
[  124.081464][ T7722] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  124.081478][ T7722] R13: 00007f50dce86128 R14: 00007f50dce86090 R15: 00007ffef754cd18
[  124.081531][ T7722]  </TASK>
[  124.081539][ T7722] Mem-Info:
[  124.131223][ T7723] loop5: detected capacity change from 0 to 1024
[  124.135612][ T7722] active_anon:13285 inactive_anon:2 isolated_anon:0
[  124.135612][ T7722]  active_file:26812 inactive_file:2519 isolated_file:0
[  124.135612][ T7722]  unevictable:0 dirty:158 writeback:0
[  124.135612][ T7722]  slab_reclaimable:3613 slab_unreclaimable:19643
[  124.135612][ T7722]  mapped:32746 shmem:4201 pagetables:1459
[  124.135612][ T7722]  sec_pagetables:0 bounce:0
[  124.135612][ T7722]  kernel_misc_reclaimable:0
[  124.135612][ T7722]  free:1858766 free_pcp:19427 free_cma:0
[  124.182343][ T7723] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.1165: bad orphan inode 134217728
[  124.183945][ T7722] Node 0 active_anon:53140kB inactive_anon:8kB active_file:107248kB inactive_file:10076kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:127040kB dirty:632kB writeback:0kB shmem:16804kB kernel_stack:4272kB pagetables:5836kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  124.382359][ T7722] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  124.412168][ T7722] lowmem_reserve[]: 0 2879 7858 7858
[  124.417506][ T7722] Node 0 DMA32 free:2944848kB boost:0kB min:4128kB low:7056kB high:9984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948376kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:0kB free_cma:0kB
[  124.448628][ T7722] lowmem_reserve[]: 0 0 4978 4978
[  124.453762][ T7722] Node 0 Normal free:4474856kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:53140kB inactive_anon:8kB active_file:107248kB inactive_file:10076kB unevictable:0kB writepending:632kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:73800kB local_pcp:34124kB free_cma:0kB
[  124.486904][ T7722] lowmem_reserve[]: 0 0 0 0
[  124.491622][ T7722] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  124.504456][ T7722] Node 0 DMA32: 2*4kB (M) 3*8kB (M) 3*16kB (M) 2*32kB (M) 3*64kB (M) 4*128kB (M) 4*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944848kB
[  124.520682][ T7722] Node 0 Normal: 1506*4kB (UME) 1474*8kB (UME) 968*16kB (UM) 438*32kB (UM) 284*64kB (UM) 186*128kB (UM) 235*256kB (UME) 117*512kB (UME) 47*1024kB (UM) 33*2048kB (UM) 1014*4096kB (UM) = 4478424kB
[  124.539977][ T7722] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[  124.549265][ T7722] 33566 total pagecache pages
[  124.554003][ T7722] 2 pages in swap cache
[  124.558336][ T7722] Free swap  = 124988kB
[  124.562674][ T7722] Total swap = 124996kB
[  124.566856][ T7722] 2097051 pages RAM
[  124.570690][ T7722] 0 pages HighMem/MovableOnly
[  124.575367][ T7722] 81557 pages reserved
[  124.640944][ T7729] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0)
[  124.649641][ T7729] SELinux: failed to load policy
[  124.677845][ T7735] netlink: 'syz.6.1172': attribute type 3 has an invalid length.
[  124.692209][ T7733] loop1: detected capacity change from 0 to 128
[  124.723693][ T7732] loop4: detected capacity change from 0 to 1024
[  124.731932][ T7732] EXT4-fs: Ignoring removed oldalloc option
[  124.737943][ T7732] EXT4-fs: Ignoring removed bh option
[  124.965186][ T7022] kworker/u8:8: attempt to access beyond end of device
[  124.965186][ T7022] loop1: rw=1, sector=145, nr_sectors = 896 limit=128
[  124.993315][ T7744] loop5: detected capacity change from 0 to 256
[  125.006357][ T7744] vfat: Unknown parameter '00000000000000000000003'
[  125.145928][ T7754] wireguard1: entered promiscuous mode
[  125.151524][ T7754] wireguard1: entered allmulticast mode
[  125.184553][ T7757] vlan2: entered promiscuous mode
[  125.478320][ T7769] netlink: 'syz.6.1184': attribute type 3 has an invalid length.
[  125.795689][ T7784] loop1: detected capacity change from 0 to 256
[  125.820859][ T7784] vfat: Unknown parameter 'ÿÿÿÿ'
[  125.925893][ T7791] loop6: detected capacity change from 0 to 1024
[  125.933634][ T7791] EXT4-fs: Ignoring removed oldalloc option
[  125.939617][ T7791] EXT4-fs: Ignoring removed bh option
[  125.961431][ T7790] __nla_validate_parse: 75 callbacks suppressed
[  125.961446][ T7790] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1194'.
[  126.000716][ T7790] vlan3: entered promiscuous mode
[  126.032619][ T7797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1195'.
[  126.192219][ T7816] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1202'.
[  126.220223][ T7819] tipc: Enabled bearer <eth:ip6_vti0>, priority 10
[  126.246731][ T7816] wireguard2: entered promiscuous mode
[  126.252282][ T7816] wireguard2: entered allmulticast mode
[  126.272362][ T7819] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.1203: error while reading EA inode 32 err=-116
[  126.287477][ T7819] EXT4-fs (loop6): Remounting filesystem read-only
[  126.296699][ T7819] EXT4-fs (loop6): 1 orphan inode deleted
[  126.337655][ T7818] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1196'.
[  126.509674][ T7840] FAULT_INJECTION: forcing a failure.
[  126.509674][ T7840] name failslab, interval 1, probability 0, space 0, times 0
[  126.522416][ T7840] CPU: 0 UID: 0 PID: 7840 Comm: syz.2.1208 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  126.522512][ T7840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  126.522560][ T7840] Call Trace:
[  126.522567][ T7840]  <TASK>
[  126.522575][ T7840]  __dump_stack+0x1d/0x30
[  126.522600][ T7840]  dump_stack_lvl+0x95/0xd0
[  126.522652][ T7840]  dump_stack+0x15/0x1b
[  126.522669][ T7840]  should_fail_ex+0x263/0x280
[  126.522696][ T7840]  should_failslab+0x8c/0xb0
[  126.522797][ T7840]  kmem_cache_alloc_noprof+0x68/0x490
[  126.522819][ T7840]  ? skb_clone+0x151/0x1f0
[  126.522853][ T7840]  skb_clone+0x151/0x1f0
[  126.522932][ T7840]  __netlink_deliver_tap+0x2c9/0x500
[  126.522964][ T7840]  ? netlink_attachskb+0x2e2/0x660
[  126.522992][ T7840]  netlink_sendskb+0x126/0x150
[  126.523046][ T7840]  netlink_unicast+0x2a2/0x690
[  126.523073][ T7840]  netlink_ack+0x4c8/0x500
[  126.523248][ T7840]  netlink_rcv_skb+0x192/0x220
[  126.523278][ T7840]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  126.523316][ T7840]  rtnetlink_rcv+0x1c/0x30
[  126.523340][ T7840]  netlink_unicast+0x5c0/0x690
[  126.523371][ T7840]  netlink_sendmsg+0x5c8/0x6f0
[  126.523390][ T7840]  ? __pfx_netlink_sendmsg+0x10/0x10
[  126.523411][ T7840]  sock_write_iter+0x32a/0x360
[  126.523441][ T7840]  ? __pfx_sock_write_iter+0x10/0x10
[  126.523515][ T7840]  vfs_write+0x5a6/0x9f0
[  126.523541][ T7840]  ksys_write+0xdc/0x1a0
[  126.523560][ T7840]  __x64_sys_write+0x40/0x50
[  126.523580][ T7840]  x64_sys_call+0x2847/0x3000
[  126.523729][ T7840]  do_syscall_64+0xc0/0x2a0
[  126.523761][ T7840]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  126.523898][ T7840] RIP: 0033:0x7f4bc902aeb9
[  126.523916][ T7840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  126.523937][ T7840] RSP: 002b:00007f4bc7a87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  126.523954][ T7840] RAX: ffffffffffffffda RBX: 00007f4bc92a5fa0 RCX: 00007f4bc902aeb9
[  126.524006][ T7840] RDX: 0000000000000024 RSI: 0000200000000000 RDI: 0000000000000007
[  126.524019][ T7840] RBP: 00007f4bc7a87090 R08: 0000000000000000 R09: 0000000000000000
[  126.524110][ T7840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  126.524124][ T7840] R13: 00007f4bc92a6038 R14: 00007f4bc92a5fa0 R15: 00007ffe6bebbf48
[  126.524180][ T7840]  </TASK>
[  126.808531][ T7842] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1209'.
[  126.848869][ T7842] vlan3: entered promiscuous mode
[  126.861825][ T7845] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1210'.
[  127.008679][ T7858] netlink: 'syz.2.1215': attribute type 3 has an invalid length.
[  127.016575][ T7858] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1215'.
[  127.096963][ T7866] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.1216: bad orphan inode 134217728
[  127.222469][   T29] kauditd_printk_skb: 14309 callbacks suppressed
[  127.222485][   T29] audit: type=1400 audit(1803721944.755:16773): avc:  denied  { write } for  pid=7862 comm="syz.2.1218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  127.339743][   T23] tipc: Node number set to 4278190081
[  127.357211][ T7874] set_capacity_and_notify: 3 callbacks suppressed
[  127.357223][ T7874] loop4: detected capacity change from 0 to 128
[  127.448038][   T29] audit: type=1400 audit(1803721945.105:16774): avc:  denied  { getopt } for  pid=7877 comm="syz.2.1221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  127.468431][ T7878] xt_hashlimit: size too large, truncated to 1048576
[  127.789437][   T29] audit: type=1326 audit(1803721945.455:16775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7884 comm="syz.6.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3941aaaeb9 code=0x7ffc0000
[  127.815279][   T29] audit: type=1326 audit(1803721945.465:16776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7884 comm="syz.6.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3941aaaeb9 code=0x7ffc0000
[  127.838967][   T29] audit: type=1326 audit(1803721945.465:16777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7884 comm="syz.6.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3941aaaeb9 code=0x7ffc0000
[  127.862625][   T29] audit: type=1326 audit(1803721945.465:16778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7884 comm="syz.6.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3941aaaeb9 code=0x7ffc0000
[  127.886171][   T29] audit: type=1326 audit(1803721945.485:16779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7884 comm="syz.6.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f3941aaaeb9 code=0x7ffc0000
[  127.909763][   T29] audit: type=1326 audit(1803721945.485:16780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7884 comm="syz.6.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3941aaaeb9 code=0x7ffc0000
[  127.933258][   T29] audit: type=1326 audit(1803721945.485:16781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7884 comm="syz.6.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3941aaaeb9 code=0x7ffc0000
[  127.956830][   T29] audit: type=1326 audit(1803721945.485:16782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7884 comm="syz.6.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3941aaaeb9 code=0x7ffc0000
[  128.019182][ T7898] loop5: detected capacity change from 0 to 512
[  128.028538][ T7899] loop6: detected capacity change from 0 to 512
[  128.039937][ T7898] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  128.143123][ T7902] netlink: 'syz.1.1228': attribute type 3 has an invalid length.
[  128.150919][ T7902] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1228'.
[  128.162923][ T7898] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002]
[  128.176562][ T7898] System zones: 1-12
[  128.185689][ T7898] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #17: comm syz.5.1226: casefold flag without casefold feature
[  128.205819][ T7899] EXT4-fs mount: 18 callbacks suppressed
[  128.205830][ T7899] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  128.229402][ T7898] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.1226: couldn't read orphan inode 17 (err -117)
[  128.246145][ T7899] ext4 filesystem being mounted at /169/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  128.262465][ T7898] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  128.306074][ T3981] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.329316][ T4434] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.550417][ T7918] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1234'.
[  128.593116][ T7918] wireguard2: entered promiscuous mode
[  128.598607][ T7918] wireguard2: entered allmulticast mode
[  128.720444][ T7929] loop2: detected capacity change from 0 to 1024
[  128.740137][ T7929] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.1237: bad orphan inode 134217728
[  128.751205][ T7929] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  128.785086][ T7931] program syz.6.1236 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  128.800011][ T7933] loop5: detected capacity change from 0 to 1024
[  128.831547][ T7933] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  128.853393][ T7933] veth1_to_bond: entered allmulticast mode
[  129.085615][ T7937] EXT4-fs error (device loop5): mb_free_blocks:2037: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt.
[  129.107226][ T7943] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1242'.
[  129.120533][ T7943] 8021q: VLANs not supported on caif0
[  129.213748][ T7946] loop1: detected capacity change from 0 to 512
[  129.242045][ T7946] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  129.262939][ T7946] ext4 filesystem being mounted at /255/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  129.300596][ T7946] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #2: comm syz.1.1243: corrupted inode contents
[  129.391532][ T7946] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #2: comm syz.1.1243: mark_inode_dirty error
[  129.412359][ T7946] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #2: comm syz.1.1243: corrupted inode contents
[  129.432172][ T7876] Bluetooth: hci0: command 0x1003 tx timeout
[  129.438298][ T3599] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  129.460147][ T7946] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.1243: mark_inode_dirty error
[  129.508409][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.597886][ T7953] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7953 comm=syz.2.1244
[  129.603128][ T7933] syz.5.1239 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000
[  129.624628][ T7933] CPU: 0 UID: 0 PID: 7933 Comm: syz.5.1239 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  129.624692][ T7933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  129.624704][ T7933] Call Trace:
[  129.624712][ T7933]  <TASK>
[  129.624721][ T7933]  __dump_stack+0x1d/0x30
[  129.624795][ T7933]  dump_stack_lvl+0x95/0xd0
[  129.624823][ T7933]  dump_stack+0x15/0x1b
[  129.624850][ T7933]  dump_header+0x80/0x240
[  129.624876][ T7933]  oom_kill_process+0x295/0x350
[  129.624903][ T7933]  out_of_memory+0x97d/0xb80
[  129.624930][ T7933]  try_charge_memcg+0x62e/0xa10
[  129.624964][ T7933]  obj_cgroup_charge_pages+0x23/0xc0
[  129.625060][ T7933]  __memcg_kmem_charge_page+0x9e/0x170
[  129.625093][ T7933]  __alloc_frozen_pages_noprof+0x18a/0x350
[  129.625152][ T7933]  alloc_pages_mpol+0xb3/0x260
[  129.625257][ T7933]  alloc_pages_noprof+0x8f/0x130
[  129.625303][ T7933]  __vmalloc_node_range_noprof+0xa46/0x12b0
[  129.625352][ T7933]  __kvmalloc_node_noprof+0x471/0x680
[  129.625401][ T7933]  ? ip_set_alloc+0x24/0x30
[  129.625442][ T7933]  ? ip_set_alloc+0x24/0x30
[  129.625477][ T7933]  ? __kmalloc_cache_noprof+0x3cd/0x4a0
[  129.625505][ T7933]  ip_set_alloc+0x24/0x30
[  129.625586][ T7933]  hash_netiface_create+0x282/0x740
[  129.625629][ T7933]  ? __pfx_hash_netiface_create+0x10/0x10
[  129.625663][ T7933]  ip_set_create+0x3cf/0x970
[  129.625746][ T7933]  ? __nla_parse+0x40/0x60
[  129.625766][ T7933]  nfnetlink_rcv_msg+0x509/0x5d0
[  129.625818][ T7933]  netlink_rcv_skb+0x123/0x220
[  129.625872][ T7933]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  129.625981][ T7933]  nfnetlink_rcv+0x167/0x1720
[  129.626007][ T7933]  ? __kfree_skb+0x109/0x150
[  129.626055][ T7933]  ? nlmon_xmit+0x4f/0x60
[  129.626107][ T7933]  ? consume_skb+0x49/0x140
[  129.626158][ T7933]  ? nlmon_xmit+0x4f/0x60
[  129.626197][ T7933]  ? dev_hard_start_xmit+0x3a8/0x3e0
[  129.626267][ T7933]  ? __dev_queue_xmit+0x139a/0x1f20
[  129.626373][ T7933]  ? __dev_queue_xmit+0x148/0x1f20
[  129.626406][ T7933]  ? ref_tracker_free+0x37d/0x3e0
[  129.626438][ T7933]  ? __netlink_deliver_tap+0x4dc/0x500
[  129.626485][ T7933]  netlink_unicast+0x5c0/0x690
[  129.626523][ T7933]  netlink_sendmsg+0x5c8/0x6f0
[  129.626549][ T7933]  ? __pfx_netlink_sendmsg+0x10/0x10
[  129.626572][ T7933]  ____sys_sendmsg+0x5af/0x600
[  129.626660][ T7933]  ___sys_sendmsg+0x195/0x1e0
[  129.626699][ T7933]  __x64_sys_sendmsg+0xd4/0x160
[  129.626747][ T7933]  x64_sys_call+0x17ba/0x3000
[  129.626774][ T7933]  do_syscall_64+0xc0/0x2a0
[  129.626811][ T7933]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  129.626895][ T7933] RIP: 0033:0x7f50dcc0aeb9
[  129.626914][ T7933] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  129.626936][ T7933] RSP: 002b:00007f50db667028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  129.626976][ T7933] RAX: ffffffffffffffda RBX: 00007f50dce85fa0 RCX: 00007f50dcc0aeb9
[  129.626994][ T7933] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 000000000000000e
[  129.627081][ T7933] RBP: 00007f50dcc78c1f R08: 0000000000000000 R09: 0000000000000000
[  129.627097][ T7933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  129.627112][ T7933] R13: 00007f50dce86038 R14: 00007f50dce85fa0 R15: 00007ffef754cd18
[  129.627137][ T7933]  </TASK>
[  129.627145][ T7933] memory: usage 307200kB, limit 307200kB, failcnt 365
[  129.951768][ T7933] memory+swap: usage 308376kB, limit 9007199254740988kB, failcnt 0
[  129.959699][ T7933] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0
[  129.966988][ T7933] Memory cgroup stats for /syz5:
[  129.967405][ T7933] cache 20480
[  129.975648][ T7933] rss 0
[  129.978483][ T7933] shmem 0
[  129.981469][ T7933] mapped_file 0
[  129.984931][ T7933] dirty 0
[  129.987910][ T7933] writeback 0
[  129.991235][ T7933] workingset_refault_anon 117
[  129.995980][ T7933] workingset_refault_file 2
[  130.000595][ T7933] swap 1204224
[  130.004055][ T7933] swapcached 0
[  130.007477][ T7933] pgpgin 182182
[  130.011024][ T7933] pgpgout 182177
[  130.014579][ T7933] pgfault 97581
[  130.018067][ T7933] pgmajfault 49
[  130.021621][ T7933] inactive_anon 0
[  130.025260][ T7933] active_anon 0
[  130.028722][ T7933] inactive_file 12288
[  130.032753][ T7933] active_file 8192
[  130.036477][ T7933] unevictable 0
[  130.039998][ T7933] hierarchical_memory_limit 314572800
[  130.045385][ T7933] hierarchical_memsw_limit 9223372036854771712
[  130.051632][ T7933] total_cache 20480
[  130.055450][ T7933] total_rss 0
[  130.058743][ T7933] total_shmem 0
[  130.062286][ T7933] total_mapped_file 0
[  130.066277][ T7933] total_dirty 0
[  130.069799][ T7933] total_writeback 0
[  130.073631][ T7933] total_workingset_refault_anon 117
[  130.078930][ T7933] total_workingset_refault_file 2
[  130.083975][ T7933] total_swap 1204224
[  130.087937][ T7933] total_swapcached 0
[  130.091863][ T7933] total_pgpgin 182182
[  130.095854][ T7933] total_pgpgout 182177
[  130.099949][ T7933] total_pgfault 97581
[  130.103929][ T7933] total_pgmajfault 49
[  130.107932][ T7933] total_inactive_anon 0
[  130.112172][ T7933] total_active_anon 0
[  130.116235][ T7933] total_inactive_file 12288
[  130.120806][ T7933] total_active_file 8192
[  130.125054][ T7933] total_unevictable 0
[  130.129037][ T7933] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.1239,pid=7932,uid=0
[  130.143769][ T7933] Memory cgroup out of memory: Killed process 7932 (syz.5.1239) total-vm:94144kB, anon-rss:1204kB, file-rss:22540kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[  130.342254][ T7933] veth1_to_bond: left allmulticast mode
[  130.343151][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.381321][ T7933] syz.5.1239 (7933) used greatest stack depth: 7096 bytes left
[  130.474400][ T3981] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.657586][ T7990] 8021q: VLANs not supported on caif0
[  131.073590][ T7966] loop1: detected capacity change from 0 to 1024
[  131.095555][ T7966] EXT4-fs: Ignoring removed mblk_io_submit option
[  131.122648][ T7966] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  131.158250][ T7966] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  131.204294][ T7966] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #11: comm syz.1.1248: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  131.240096][ T7966] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1248: couldn't read orphan inode 11 (err -117)
[  131.261320][ T7966] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  131.282999][ T8035] loop5: detected capacity change from 0 to 2048
[  131.429442][ T8044] netlink: 'syz.2.1263': attribute type 3 has an invalid length.
[  131.437387][ T8044] __nla_validate_parse: 4 callbacks suppressed
[  131.437401][ T8044] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1263'.
[  131.445080][ T8048] netlink: 292 bytes leftover after parsing attributes in process `syz.4.1262'.
[  131.489705][ T8035] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  131.531334][ T8048] tunl0: Caught tx_queue_len zero misconfig
[  131.560842][ T8055] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1262'.
[  131.632759][ T8035] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  131.679308][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.705183][ T8063] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1266'.
[  131.714189][ T8063] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1266'.
[  131.739851][ T8063] vlan2: entered promiscuous mode
[  131.744917][ T8063] batadv0: entered promiscuous mode
[  131.800751][ T8072] loop1: detected capacity change from 0 to 128
[  131.878560][ T3981] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.953045][ T8077] loop4: detected capacity change from 0 to 1024
[  131.980683][ T8077] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.1269: bad orphan inode 134217728
[  131.991997][ T8077] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  132.011271][ T8077] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1269'.
[  132.020387][ T8077] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1269'.
[  132.029514][ T8077] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1269'.
[  132.153471][   T41] kworker/u8:2: attempt to access beyond end of device
[  132.153471][   T41] loop1: rw=1, sector=145, nr_sectors = 896 limit=128
[  132.210256][ T8092] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1272'.
[  132.219244][ T8092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1272'.
[  132.248254][   T29] kauditd_printk_skb: 98 callbacks suppressed
[  132.248269][   T29] audit: type=1326 audit(1803721949.915:16881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8093 comm="syz.6.1273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3941aaaeb9 code=0x7ffc0000
[  132.304742][ T8092] 8021q: VLANs not supported on caif0
[  132.353041][   T29] audit: type=1326 audit(1803721949.915:16882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8093 comm="syz.6.1273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3941aaaeb9 code=0x7ffc0000
[  132.373875][ T8104] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.1268: bad orphan inode 134217728
[  132.376723][   T29] audit: type=1326 audit(1803721949.915:16883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8093 comm="syz.6.1273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3941aaaeb9 code=0x7ffc0000
[  132.388603][ T8104] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  132.410717][   T29] audit: type=1326 audit(1803721949.915:16884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8093 comm="syz.6.1273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f3941aaaeb9 code=0x7ffc0000
[  132.410756][   T29] audit: type=1326 audit(1803721949.915:16885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8093 comm="syz.6.1273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3941aaaeb9 code=0x7ffc0000
[  132.470257][   T29] audit: type=1326 audit(1803721949.925:16886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8093 comm="syz.6.1273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f3941aaaeb9 code=0x7ffc0000
[  132.494078][   T29] audit: type=1326 audit(1803721949.925:16887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8093 comm="syz.6.1273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3941aaaeb9 code=0x7ffc0000
[  132.517645][   T29] audit: type=1326 audit(1803721949.925:16888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8093 comm="syz.6.1273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f3941aaaeb9 code=0x7ffc0000
[  132.541174][   T29] audit: type=1326 audit(1803721949.925:16889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8093 comm="syz.6.1273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3941aaaeb9 code=0x7ffc0000
[  132.564668][   T29] audit: type=1326 audit(1803721949.925:16890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8093 comm="syz.6.1273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3941aaaeb9 code=0x7ffc0000
[  132.737958][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.863441][ T8142] set_capacity_and_notify: 1 callbacks suppressed
[  132.863454][ T8142] loop2: detected capacity change from 0 to 512
[  132.883827][ T8142] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1282: bg 0: block 127: padding at end of block bitmap is not set
[  132.910910][ T8142] ------------[ cut here ]------------
[  132.916404][ T8142] EA inode 11 i_nlink=2
[  132.916421][ T8142] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#1: syz.2.1282/8142
[  132.931428][ T8142] Modules linked in:
[  132.935403][ T8142] CPU: 1 UID: 0 PID: 8142 Comm: syz.2.1282 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  132.945272][ T8142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  132.955418][ T8142] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350
[  132.962141][ T8142] Code: e4 e5 9a ff 4c 8d 2d 2d 21 3e 05 49 8d 7e 40 e8 f4 cf b6 ff 49 8b 6e 40 4c 89 e7 e8 28 cb b6 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 4f e1 d0 03 66 66 66 66 66 66 2e
[  132.981904][ T8142] RSP: 0018:ffffc900017ff778 EFLAGS: 00010246
[  132.988030][ T8142] RAX: ffff88811dc9bc10 RBX: ffff88811ad8dc18 RCX: ffffffff81be19f8
[  132.996125][ T8142] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff86fc3b10
[  133.004179][ T8142] RBP: 000000000000000b R08: 000188811ad8dbcb R09: 0000000000000000
[  133.012219][ T8142] R10: ffffc900017ff6a8 R11: 0001c900017ff6a8 R12: ffff88811ad8dbc8
[  133.020241][ T8142] R13: ffffffff86fc3b10 R14: ffff88811ad8db80 R15: 0000000000000001
[  133.028224][ T8142] FS:  00007f4bc7a876c0(0000) GS:ffff8882aec57000(0000) knlGS:0000000000000000
[  133.037221][ T8142] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  133.043881][ T8142] CR2: 00007f76459a1000 CR3: 00000001523fe000 CR4: 00000000003506f0
[  133.052002][ T8142] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  133.060014][ T8142] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  133.068035][ T8142] Call Trace:
[  133.071421][ T8142]  <TASK>
[  133.074362][ T8142]  ext4_xattr_inode_dec_ref_all+0x57c/0x880
[  133.080320][ T8142]  ? errseq_check+0x2c/0x50
[  133.084896][ T8142]  ext4_xattr_delete_inode+0x6c1/0x7a0
[  133.090470][ T8142]  ext4_evict_inode+0xa1f/0xd40
[  133.095418][ T8142]  ? __pfx_ext4_evict_inode+0x10/0x10
[  133.100850][ T8142]  evict+0x2af/0x510
[  133.104782][ T8142]  ? __dquot_initialize+0x146/0x7c0
[  133.110065][ T8142]  iput+0x4b9/0x650
[  133.113899][ T8142]  ext4_process_orphan+0x1a9/0x1c0
[  133.119034][ T8142]  ext4_orphan_cleanup+0x6a8/0xa00
[  133.124221][ T8142]  ext4_fill_super+0x3476/0x3800
[  133.129237][ T8142]  ? set_blocksize+0x1a3/0x310
[  133.134060][ T8142]  ? setup_bdev_super+0x30e/0x370
[  133.139114][ T8142]  ? __pfx_ext4_fill_super+0x10/0x10
[  133.144507][ T8142]  get_tree_bdev_flags+0x291/0x300
[  133.149658][ T8142]  ? __pfx_ext4_fill_super+0x10/0x10
[  133.154961][ T8142]  get_tree_bdev+0x1f/0x30
[  133.159477][ T8142]  ext4_get_tree+0x1c/0x30
[  133.163937][ T8142]  vfs_get_tree+0x57/0x1d0
[  133.168368][ T8142]  do_new_mount+0x288/0x700
[  133.172910][ T8142]  path_mount+0x4d0/0xbc0
[  133.177252][ T8142]  ? user_path_at+0xbf/0x130
[  133.181932][ T8142]  __se_sys_mount+0x28c/0x2e0
[  133.186635][ T8142]  __x64_sys_mount+0x67/0x80
[  133.191304][ T8142]  x64_sys_call+0x2cca/0x3000
[  133.196072][ T8142]  do_syscall_64+0xc0/0x2a0
[  133.200637][ T8142]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.206547][ T8142] RIP: 0033:0x7f4bc902c14a
[  133.211006][ T8142] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  133.230690][ T8142] RSP: 002b:00007f4bc7a86e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  133.239132][ T8142] RAX: ffffffffffffffda RBX: 00007f4bc7a86ee0 RCX: 00007f4bc902c14a
[  133.247313][ T8142] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007f4bc7a86ea0
[  133.255432][ T8142] RBP: 00002000000009c0 R08: 00007f4bc7a86ee0 R09: 0000000000800718
[  133.263623][ T8142] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540
[  133.271675][ T8142] R13: 00007f4bc7a86ea0 R14: 000000000000048d R15: 0000200000000200
[  133.279721][ T8142]  </TASK>
[  133.282761][ T8142] ---[ end trace 0000000000000000 ]---
[  133.294035][ T8142] EXT4-fs (loop2): 1 orphan inode deleted
[  133.300329][ T8142] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  133.331117][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.343177][ T8148] loop1: detected capacity change from 0 to 128
[  133.380663][ T3981] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.509819][ T8154] wireguard7: entered promiscuous mode
[  133.515322][ T8154] wireguard7: entered allmulticast mode
[  133.577012][ T8162] vlan2: entered promiscuous mode
[  133.620903][ T3435] kworker/u8:6: attempt to access beyond end of device
[  133.620903][ T3435] loop1: rw=1, sector=145, nr_sectors = 896 limit=128
[  133.749435][ T8176] netlink: 'syz.5.1295': attribute type 3 has an invalid length.
[  133.758852][ T8178] loop2: detected capacity change from 0 to 512
[  133.775998][ T8183] netlink: 'syz.4.1297': attribute type 3 has an invalid length.
[  133.802869][ T8178] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  133.911100][ T8178] ext4 filesystem being mounted at /244/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  134.084022][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.215900][ T8207] FAULT_INJECTION: forcing a failure.
[  134.215900][ T8207] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  134.229100][ T8207] CPU: 1 UID: 0 PID: 8207 Comm: syz.6.1306 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  134.229200][ T8207] Tainted: [W]=WARN
[  134.229208][ T8207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  134.229223][ T8207] Call Trace:
[  134.229229][ T8207]  <TASK>
[  134.229237][ T8207]  __dump_stack+0x1d/0x30
[  134.229259][ T8207]  dump_stack_lvl+0x95/0xd0
[  134.229277][ T8207]  dump_stack+0x15/0x1b
[  134.229317][ T8207]  should_fail_ex+0x263/0x280
[  134.229349][ T8207]  should_fail+0xb/0x20
[  134.229413][ T8207]  should_fail_usercopy+0x1a/0x20
[  134.229556][ T8207]  _copy_from_user+0x1c/0xb0
[  134.229580][ T8207]  __sys_bpf+0x183/0x7b0
[  134.229670][ T8207]  __x64_sys_bpf+0x41/0x50
[  134.229691][ T8207]  x64_sys_call+0x28e1/0x3000
[  134.229713][ T8207]  do_syscall_64+0xc0/0x2a0
[  134.229740][ T8207]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.229822][ T8207] RIP: 0033:0x7f3941aaaeb9
[  134.229897][ T8207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  134.229913][ T8207] RSP: 002b:00007f3940507028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  134.229931][ T8207] RAX: ffffffffffffffda RBX: 00007f3941d25fa0 RCX: 00007f3941aaaeb9
[  134.229943][ T8207] RDX: 0000000000000048 RSI: 00002000000000c0 RDI: 0000000000000000
[  134.229954][ T8207] RBP: 00007f3940507090 R08: 0000000000000000 R09: 0000000000000000
[  134.229968][ T8207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  134.229978][ T8207] R13: 00007f3941d26038 R14: 00007f3941d25fa0 R15: 00007ffd67d1acd8
[  134.230033][ T8207]  </TASK>
[  134.427255][ T8211] loop6: detected capacity change from 0 to 128
[  134.433965][ T8211] vfat: Unknown parameter 'uni_xlat0BqHDUe'
[  134.441339][ T8211] 9p: Bad value for 'rfdno'
[  134.471151][ T8216] random: crng reseeded on system resumption
[  134.480343][ T8215] netlink: 'syz.2.1309': attribute type 3 has an invalid length.
[  134.524994][ T8221] loop2: detected capacity change from 0 to 512
[  134.534711][ T8221] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  134.546777][ T8221] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.1312: bad orphan inode 131083
[  134.558976][ T8221] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  134.573248][ T8221] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 13: comm syz.2.1312: path /247/file1: bad entry in directory: '.' directory cannot be the last in data block - offset=0, inode=2, rec_len=1024, size=1024 fake=1
[  134.637540][ T8228] loop4: detected capacity change from 0 to 512
[  134.644173][ T8228] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  134.664624][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.669702][ T8228] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.1314: invalid indirect mapped block 4294967295 (level 0)
[  134.687868][ T8228] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.1314: invalid indirect mapped block 4294967295 (level 1)
[  134.715744][ T8228] EXT4-fs (loop4): 1 orphan inode deleted
[  134.721713][ T8228] EXT4-fs (loop4): 1 truncate cleaned up
[  134.727806][ T8228] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  134.962396][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.982762][ T8244] netlink: 'syz.4.1318': attribute type 21 has an invalid length.
[  134.990712][ T8244] IPv6: NLM_F_CREATE should be specified when creating new route
[  134.998562][ T8244] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  135.005787][ T8244] IPv6: NLM_F_CREATE should be set when creating new route
[  135.013028][ T8244] IPv6: NLM_F_CREATE should be set when creating new route
[  135.020288][ T8244] IPv6: NLM_F_CREATE should be set when creating new route
[  135.056173][ T8245] loop2: detected capacity change from 0 to 128
[  135.093714][ T8245] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  135.106922][ T8245] ext4 filesystem being mounted at /249/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  135.367604][ T8259] vlan2: entered promiscuous mode
[  135.372752][ T8259] syz_tun: entered promiscuous mode
[  135.384386][ T8256] wireguard3: entered promiscuous mode
[  135.390009][ T8256] wireguard3: entered allmulticast mode
[  135.458827][ T8263] bridge_slave_1: left allmulticast mode
[  135.464751][ T8263] bridge_slave_1: left promiscuous mode
[  135.470721][ T8263] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.480703][ T8265] loop6: detected capacity change from 0 to 512
[  135.550648][ T8269] loop5: detected capacity change from 0 to 128
[  135.579290][ T8263] bridge_slave_0: left allmulticast mode
[  135.585068][ T8263] bridge_slave_0: left promiscuous mode
[  135.590789][ T8263] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.961638][ T3310] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  136.053297][ T8278] loop4: detected capacity change from 0 to 512
[  136.183250][ T8278] EXT4-fs (loop4): 1 orphan inode deleted
[  136.200025][   T60] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:4: Failed to release dquot type 1
[  136.275430][ T8278] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  136.338248][ T8278] ext4 filesystem being mounted at /300/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  136.376296][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.405339][ T8302] wireguard4: entered promiscuous mode
[  136.411017][ T8302] wireguard4: entered allmulticast mode
[  136.426443][ T8306] FAULT_INJECTION: forcing a failure.
[  136.426443][ T8306] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  136.439595][ T8306] CPU: 1 UID: 0 PID: 8306 Comm: syz.4.1335 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  136.439629][ T8306] Tainted: [W]=WARN
[  136.439635][ T8306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  136.439663][ T8306] Call Trace:
[  136.439670][ T8306]  <TASK>
[  136.439677][ T8306]  __dump_stack+0x1d/0x30
[  136.439703][ T8306]  dump_stack_lvl+0x95/0xd0
[  136.439824][ T8306]  dump_stack+0x15/0x1b
[  136.439924][ T8306]  should_fail_ex+0x263/0x280
[  136.439959][ T8306]  should_fail+0xb/0x20
[  136.439991][ T8306]  should_fail_usercopy+0x1a/0x20
[  136.440086][ T8306]  _copy_from_user+0x1c/0xb0
[  136.440110][ T8306]  proc_ioctl_default+0x43/0xa0
[  136.440165][ T8306]  usbdev_ioctl+0xe8d/0x1750
[  136.440200][ T8306]  ? __pfx_usbdev_ioctl+0x10/0x10
[  136.440233][ T8306]  __se_sys_ioctl+0xce/0x140
[  136.440300][ T8306]  __x64_sys_ioctl+0x43/0x50
[  136.440384][ T8306]  x64_sys_call+0x14b0/0x3000
[  136.440413][ T8306]  do_syscall_64+0xc0/0x2a0
[  136.440458][ T8306]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  136.440528][ T8306] RIP: 0033:0x7f87ca4aaeb9
[  136.440547][ T8306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  136.440569][ T8306] RSP: 002b:00007f87c8f07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  136.440593][ T8306] RAX: ffffffffffffffda RBX: 00007f87ca725fa0 RCX: 00007f87ca4aaeb9
[  136.440622][ T8306] RDX: 0000200000000040 RSI: 00000000c0105512 RDI: 0000000000000004
[  136.440683][ T8306] RBP: 00007f87c8f07090 R08: 0000000000000000 R09: 0000000000000000
[  136.440696][ T8306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  136.440709][ T8306] R13: 00007f87ca726038 R14: 00007f87ca725fa0 R15: 00007fff04212d68
[  136.440728][ T8306]  </TASK>
[  136.643931][ T8310] __nla_validate_parse: 14 callbacks suppressed
[  136.643946][ T8310] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1339'.
[  136.659262][ T8310] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1339'.
[  136.668299][ T8310] 8021q: VLANs not supported on caif0
[  136.947145][ T8328] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  137.034970][ T8337] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  137.047877][ T8337] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  137.058760][ T8339] warn_alloc: 4 callbacks suppressed
[  137.058792][ T8339] syz.4.1349: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0
[  137.078646][ T8339] CPU: 1 UID: 0 PID: 8339 Comm: syz.4.1349 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  137.078673][ T8339] Tainted: [W]=WARN
[  137.078758][ T8339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  137.078774][ T8339] Call Trace:
[  137.078783][ T8339]  <TASK>
[  137.078792][ T8339]  __dump_stack+0x1d/0x30
[  137.078821][ T8339]  dump_stack_lvl+0x95/0xd0
[  137.078847][ T8339]  dump_stack+0x15/0x1b
[  137.078871][ T8339]  warn_alloc+0x145/0x1c0
[  137.078973][ T8339]  __vmalloc_node_range_noprof+0xa0/0x12b0
[  137.079062][ T8339]  ? __futex_wait+0x1fd/0x260
[  137.079177][ T8339]  ? __pfx_futex_wake_mark+0x10/0x10
[  137.079210][ T8339]  ? __rcu_read_unlock+0x4e/0x70
[  137.079242][ T8339]  ? avc_has_perm_noaudit+0xab/0x130
[  137.079278][ T8339]  ? should_fail_ex+0x30/0x280
[  137.079313][ T8339]  ? should_failslab+0x8c/0xb0
[  137.079418][ T8339]  vmalloc_user_noprof+0x7d/0xb0
[  137.079452][ T8339]  ? xskq_create+0x80/0xe0
[  137.079489][ T8339]  xskq_create+0x80/0xe0
[  137.079525][ T8339]  xsk_init_queue+0x91/0xe0
[  137.079613][ T8339]  xsk_setsockopt+0x3f5/0x640
[  137.079646][ T8339]  ? __pfx_xsk_setsockopt+0x10/0x10
[  137.079681][ T8339]  __sys_setsockopt+0x184/0x200
[  137.079767][ T8339]  __x64_sys_setsockopt+0x64/0x80
[  137.079807][ T8339]  x64_sys_call+0x21d5/0x3000
[  137.079836][ T8339]  do_syscall_64+0xc0/0x2a0
[  137.079907][ T8339]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  137.079927][ T8339] RIP: 0033:0x7f87ca4aaeb9
[  137.079940][ T8339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  137.079958][ T8339] RSP: 002b:00007f87c8ee6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  137.080056][ T8339] RAX: ffffffffffffffda RBX: 00007f87ca726090 RCX: 00007f87ca4aaeb9
[  137.080073][ T8339] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006
[  137.080089][ T8339] RBP: 00007f87ca518c1f R08: 0000000000000004 R09: 0000000000000000
[  137.080104][ T8339] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  137.080115][ T8339] R13: 00007f87ca726128 R14: 00007f87ca726090 R15: 00007fff04212d68
[  137.080132][ T8339]  </TASK>
[  137.292409][ T8339] Mem-Info:
[  137.295595][ T8339] active_anon:13425 inactive_anon:2 isolated_anon:0
[  137.295595][ T8339]  active_file:24953 inactive_file:2524 isolated_file:0
[  137.295595][ T8339]  unevictable:0 dirty:223 writeback:0
[  137.295595][ T8339]  slab_reclaimable:3619 slab_unreclaimable:20150
[  137.295595][ T8339]  mapped:32703 shmem:4075 pagetables:1484
[  137.295595][ T8339]  sec_pagetables:0 bounce:0
[  137.295595][ T8339]  kernel_misc_reclaimable:0
[  137.295595][ T8339]  free:1841432 free_pcp:38245 free_cma:0
[  137.340704][ T8339] Node 0 active_anon:54048kB inactive_anon:8kB active_file:99812kB inactive_file:10096kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:130812kB dirty:892kB writeback:0kB shmem:16764kB kernel_stack:4448kB pagetables:5936kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  137.368129][ T8339] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  137.397771][ T8339] lowmem_reserve[]: 0 2879 7858 7858
[  137.403153][ T8339] Node 0 DMA32 free:2944848kB boost:0kB min:4128kB low:7056kB high:9984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948376kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:0kB free_cma:0kB
[  137.434302][ T8339] lowmem_reserve[]: 0 0 4978 4978
[  137.439403][ T8339] Node 0 Normal free:4405520kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:54164kB inactive_anon:8kB active_file:99812kB inactive_file:10096kB unevictable:0kB writepending:892kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:148864kB local_pcp:24556kB free_cma:0kB
[  137.472679][ T8339] lowmem_reserve[]: 0 0 0 0
[  137.477225][ T8339] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  137.490050][ T8339] Node 0 DMA32: 2*4kB (M) 3*8kB (M) 3*16kB (M) 2*32kB (M) 3*64kB (M) 4*128kB (M) 4*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944848kB
[  137.506182][ T8339] Node 0 Normal: 2086*4kB (UME) 895*8kB (UME) 994*16kB (UM) 1089*32kB (UME) 613*64kB (UME) 330*128kB (UME) 282*256kB 
[  137.506398][ T8340] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.1349: bad orphan inode 134217728
[  137.506391][ T8339] (UME) 153*512kB (UME) 79*1024kB 
[  137.521964][ T8340] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  137.529742][ T8339] (UM) 
[  137.543394][ T8340] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1349'.
[  137.547025][ T8339] 26*2048kB (UM) 970*4096kB (UM) 
[  137.549953][ T8340] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1349'.
[  137.558829][ T8339] = 4405520kB
[  137.558840][ T8339] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB
[  137.585450][ T8339] 31704 total pagecache pages
[  137.590219][ T8339] 8 pages in swap cache
[  137.594387][ T8339] Free swap  = 124172kB
[  137.598547][ T8339] Total swap = 124996kB
[  137.602727][ T8339] 2097051 pages RAM
[  137.606538][ T8339] 0 pages HighMem/MovableOnly
[  137.611231][ T8339] 81557 pages reserved
[  137.627641][ T8337] syzkaller1: entered promiscuous mode
[  137.633235][ T8337] syzkaller1: entered allmulticast mode
[  137.644109][ T8338] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1350'.
[  137.653120][ T8338] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1350'.
[  137.663839][ T8337] netlink: 'syz.5.1351': attribute type 1 has an invalid length.
[  137.731555][ T8338] 8021q: VLANs not supported on caif0
[  137.751442][ T8335] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  137.807422][ T8335] ext4 filesystem being mounted at /267/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  137.877540][ T8348] iso9660: Corrupted directory entry in block 2 of inode 1920
[  137.920317][ T8353] set_capacity_and_notify: 4 callbacks suppressed
[  137.920329][ T8353] loop5: detected capacity change from 0 to 512
[  137.939806][   T29] kauditd_printk_skb: 73 callbacks suppressed
[  137.939818][   T29] audit: type=1400 audit(1803721955.605:16963): avc:  denied  { unmount } for  pid=4434 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  137.978310][ T8353] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  137.980514][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.018426][ T8353] EXT4-fs (loop5): 1 truncate cleaned up
[  138.025454][ T8353] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  138.039594][   T29] audit: type=1400 audit(1803721955.705:16964): avc:  denied  { append } for  pid=8352 comm="syz.5.1355" name="file2" dev="loop5" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  138.063984][   T29] audit: type=1400 audit(1803721955.735:16965): avc:  denied  { ioctl } for  pid=8352 comm="syz.5.1355" path="/261/file2/file2" dev="loop5" ino=16 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  138.090167][   T29] audit: type=1326 audit(1803721955.765:16966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8344 comm="syz.2.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bc902aeb9 code=0x7ffc0000
[  138.113712][   T29] audit: type=1326 audit(1803721955.765:16967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8344 comm="syz.2.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bc902aeb9 code=0x7ffc0000
[  138.137642][   T29] audit: type=1326 audit(1803721955.805:16968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8344 comm="syz.2.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f4bc902aeb9 code=0x7ffc0000
[  138.161345][   T29] audit: type=1400 audit(1803721955.835:16969): avc:  denied  { mounton } for  pid=8352 comm="syz.5.1355" path="/261/file2" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  138.184480][ T8353] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  138.187596][   T29] audit: type=1400 audit(1803721955.855:16970): avc:  denied  { ioctl } for  pid=8352 comm="syz.5.1355" path="socket:[20184]" dev="sockfs" ino=20184 ioctlcmd=0x48c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  138.372387][   T29] audit: type=1326 audit(1803721956.035:16971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8344 comm="syz.2.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bc902aeb9 code=0x7ffc0000
[  138.396027][   T29] audit: type=1326 audit(1803721956.035:16972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8344 comm="syz.2.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bc902aeb9 code=0x7ffc0000
[  138.451840][ T3981] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.513081][ T3309] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  138.531068][ T8375] netlink: 'syz.2.1362': attribute type 3 has an invalid length.
[  138.538912][ T8375] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1362'.
[  138.571403][ T8379] loop6: detected capacity change from 0 to 128
[  138.616720][ T8379] FAT-fs (loop6): Directory bread(block 32) failed
[  138.617591][ T8383] loop5: detected capacity change from 0 to 256
[  138.630483][ T8385] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1364'.
[  138.639455][ T8385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1364'.
[  138.641234][ T8379] FAT-fs (loop6): Directory bread(block 33) failed
[  138.649005][ T8385] 8021q: VLANs not supported on caif0
[  138.665175][ T8386] loop2: detected capacity change from 0 to 1024
[  138.673742][ T8386] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.1367: bad orphan inode 134217728
[  138.684925][ T8386] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  138.689851][ T8379] FAT-fs (loop6): Directory bread(block 34) failed
[  138.706845][ T8386] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1367'.
[  138.733888][ T8379] FAT-fs (loop6): Directory bread(block 35) failed
[  138.795274][ T8391] net_ratelimit: 416 callbacks suppressed
[  138.795290][ T8391] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  138.816787][ T8379] FAT-fs (loop6): Directory bread(block 36) failed
[  138.823528][ T8379] FAT-fs (loop6): Directory bread(block 37) failed
[  138.830173][ T8379] FAT-fs (loop6): Directory bread(block 38) failed
[  138.836760][ T8379] FAT-fs (loop6): Directory bread(block 39) failed
[  138.863081][ T8379] FAT-fs (loop6): Directory bread(block 40) failed
[  138.878264][ T8379] FAT-fs (loop6): Directory bread(block 41) failed
[  138.996576][ T8405] loop5: detected capacity change from 0 to 128
[  139.154650][ T8415] loop6: detected capacity change from 0 to 512
[  139.171276][ T8415] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.1377: inode has both inline data and extents flags
[  139.186249][ T8418] netlink: 'syz.4.1378': attribute type 3 has an invalid length.
[  139.220072][ T8415] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.1377: couldn't read orphan inode 15 (err -117)
[  139.244806][ T8415] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  139.308646][ T8424] loop4: detected capacity change from 0 to 512
[  139.316718][ T8424] ext4: Unknown parameter 'fsuuid'
[  139.396115][ T8433] 8021q: VLANs not supported on ip6gre0
[  139.533574][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.909623][ T8223] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 256: padding at end of block bitmap is not set
[  139.926954][ T8479] 9pnet_fd: Insufficient options for proto=fd
[  140.444886][ T8483] loop5: detected capacity change from 0 to 512
[  140.568634][ T8487] loop4: detected capacity change from 0 to 512
[  140.577041][ T8487] SELinux: security_context_str_to_sid (root) failed with errno=-22
[  140.677028][ T8497] vlan3: entered promiscuous mode
[  140.705736][ T8498] loop4: detected capacity change from 0 to 1024
[  140.719538][ T8498] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.1397: bad orphan inode 134217728
[  140.731306][ T8498] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  140.965159][ T8512] tmpfs: Bad value for 'mpol'
[  141.335113][ T8563] FAULT_INJECTION: forcing a failure.
[  141.335113][ T8563] name failslab, interval 1, probability 0, space 0, times 0
[  141.347782][ T8563] CPU: 1 UID: 0 PID: 8563 Comm: syz.2.1414 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  141.347859][ T8563] Tainted: [W]=WARN
[  141.347867][ T8563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  141.347882][ T8563] Call Trace:
[  141.347889][ T8563]  <TASK>
[  141.347897][ T8563]  __dump_stack+0x1d/0x30
[  141.347920][ T8563]  dump_stack_lvl+0x95/0xd0
[  141.347976][ T8563]  dump_stack+0x15/0x1b
[  141.348005][ T8563]  should_fail_ex+0x263/0x280
[  141.348034][ T8563]  should_failslab+0x8c/0xb0
[  141.348136][ T8563]  __kvmalloc_node_noprof+0x148/0x680
[  141.348168][ T8563]  ? nf_hook_entries_grow+0x1cb/0x460
[  141.348246][ T8563]  nf_hook_entries_grow+0x1cb/0x460
[  141.348288][ T8563]  __nf_register_net_hook+0x18e/0x480
[  141.348314][ T8563]  nf_register_net_hook+0x88/0x130
[  141.348393][ T8563]  nf_register_net_hooks+0x44/0x150
[  141.348416][ T8563]  nf_ct_netns_do_get+0x188/0x3a0
[  141.348455][ T8563]  nf_ct_netns_get+0xf1/0x2c0
[  141.348534][ T8563]  connmark_tg_check+0x35/0xa0
[  141.348554][ T8563]  xt_check_target+0x28d/0x4c0
[  141.348587][ T8563]  ? xt_find_match+0x1d1/0x210
[  141.348656][ T8563]  ? mutex_unlock+0x4e/0x90
[  141.348683][ T8563]  ? xt_find_target+0x1cd/0x200
[  141.348717][ T8563]  translate_table+0xddf/0x11b0
[  141.348838][ T8563]  do_ip6t_set_ctl+0x6d9/0x8f0
[  141.348868][ T8563]  ? kstrtoull+0x111/0x140
[  141.348955][ T8563]  ? __rcu_read_unlock+0x4e/0x70
[  141.348985][ T8563]  nf_setsockopt+0x199/0x1b0
[  141.349010][ T8563]  ipv6_setsockopt+0x11a/0x130
[  141.349122][ T8563]  tcp_setsockopt+0x98/0xb0
[  141.349158][ T8563]  sock_common_setsockopt+0x69/0x80
[  141.349188][ T8563]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  141.349233][ T8563]  __sys_setsockopt+0x184/0x200
[  141.349322][ T8563]  __x64_sys_setsockopt+0x64/0x80
[  141.349351][ T8563]  x64_sys_call+0x21d5/0x3000
[  141.349411][ T8563]  do_syscall_64+0xc0/0x2a0
[  141.349447][ T8563]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  141.349471][ T8563] RIP: 0033:0x7f4bc902aeb9
[  141.349490][ T8563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  141.349511][ T8563] RSP: 002b:00007f4bc7a87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  141.349579][ T8563] RAX: ffffffffffffffda RBX: 00007f4bc92a5fa0 RCX: 00007f4bc902aeb9
[  141.349595][ T8563] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003
[  141.349608][ T8563] RBP: 00007f4bc7a87090 R08: 0000000000000450 R09: 0000000000000000
[  141.349624][ T8563] R10: 0000200000000980 R11: 0000000000000246 R12: 0000000000000002
[  141.349639][ T8563] R13: 00007f4bc92a6038 R14: 00007f4bc92a5fa0 R15: 00007ffe6bebbf48
[  141.349671][ T8563]  </TASK>
[  141.621943][ T8563] cannot load conntrack support for proto=10
[  141.630612][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  141.661016][ T8571] __nla_validate_parse: 14 callbacks suppressed
[  141.661033][ T8571] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1417'.
[  141.676826][ T8571] 8021q: VLANs not supported on ip6gre0
[  141.928233][ T8604] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1429'.
[  141.937454][ T8604] 8021q: VLANs not supported on ip6gre0
[  141.945655][ T8605] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.1425: bad orphan inode 134217728
[  141.957098][ T8605] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  141.973435][ T8605] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1425'.
[  141.982855][ T8605] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1425'.
[  142.183328][ T8625] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1436'.
[  142.192768][ T8625] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1436'.
[  142.204127][ T4434] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  142.223655][ T8627] netlink: 292 bytes leftover after parsing attributes in process `syz.4.1438'.
[  142.234375][ T8627] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1438'.
[  142.295187][ T8638] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1441'.
[  142.327419][ T8641] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  142.392226][ T8648] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  142.401881][ T8648] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  142.414321][ T8648] ext2 filesystem being mounted at /326/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  142.603959][ T8669] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  142.622117][ T8669] ext4 filesystem being mounted at /284/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  142.696225][ T3309] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  142.716309][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  142.762701][ T3324] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  142.820093][ T8689] netlink: 292 bytes leftover after parsing attributes in process `syz.4.1457'.
[  142.953860][   T29] kauditd_printk_skb: 34 callbacks suppressed
[  142.953873][   T29] audit: type=1400 audit(1803721960.625:17007): avc:  denied  { listen } for  pid=8702 comm="syz.5.1464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  142.984121][ T8705] netlink: 'syz.5.1464': attribute type 1 has an invalid length.
[  142.992578][ T8705] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  143.072194][ T8724] set_capacity_and_notify: 6 callbacks suppressed
[  143.072212][ T8724] loop5: detected capacity change from 0 to 1024
[  143.100254][ T8724] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.1466: bad orphan inode 134217728
[  143.111416][ T8724] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  143.138376][ T8723] sctp: [Deprecated]: syz.1.1471 (pid 8723) Use of struct sctp_assoc_value in delayed_ack socket option.
[  143.138376][ T8723] Use struct sctp_sack_info instead
[  143.268516][ T8737] loop6: detected capacity change from 0 to 128
[  143.317143][ T8743] FAULT_INJECTION: forcing a failure.
[  143.317143][ T8743] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  143.330298][ T8743] CPU: 0 UID: 0 PID: 8743 Comm: syz.2.1476 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  143.330409][ T8743] Tainted: [W]=WARN
[  143.330415][ T8743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  143.330428][ T8743] Call Trace:
[  143.330433][ T8743]  <TASK>
[  143.330439][ T8743]  __dump_stack+0x1d/0x30
[  143.330466][ T8743]  dump_stack_lvl+0x95/0xd0
[  143.330489][ T8743]  dump_stack+0x15/0x1b
[  143.330564][ T8743]  should_fail_ex+0x263/0x280
[  143.330645][ T8743]  should_fail+0xb/0x20
[  143.330676][ T8743]  should_fail_usercopy+0x1a/0x20
[  143.330765][ T8743]  _copy_to_user+0x20/0xa0
[  143.330789][ T8743]  simple_read_from_buffer+0xb5/0x130
[  143.330931][ T8743]  proc_fail_nth_read+0x10e/0x150
[  143.330958][ T8743]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  143.330994][ T8743]  vfs_read+0x1ab/0x7f0
[  143.331035][ T8743]  ? __rcu_read_unlock+0x4e/0x70
[  143.331070][ T8743]  ? __fget_files+0x184/0x1c0
[  143.331093][ T8743]  ? mutex_lock+0x57/0x90
[  143.331114][ T8743]  ksys_read+0xdc/0x1a0
[  143.331131][ T8743]  __x64_sys_read+0x40/0x50
[  143.331222][ T8743]  x64_sys_call+0x2889/0x3000
[  143.331245][ T8743]  do_syscall_64+0xc0/0x2a0
[  143.331290][ T8743]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  143.331309][ T8743] RIP: 0033:0x7f4bc8feb78e
[  143.331326][ T8743] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  143.331347][ T8743] RSP: 002b:00007f4bc7a86fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  143.331439][ T8743] RAX: ffffffffffffffda RBX: 00007f4bc7a876c0 RCX: 00007f4bc8feb78e
[  143.331452][ T8743] RDX: 000000000000000f RSI: 00007f4bc7a870a0 RDI: 0000000000000003
[  143.331467][ T8743] RBP: 00007f4bc7a87090 R08: 0000000000000000 R09: 0000000000000000
[  143.331482][ T8743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  143.331493][ T8743] R13: 00007f4bc92a6038 R14: 00007f4bc92a5fa0 R15: 00007ffe6bebbf48
[  143.331510][ T8743]  </TASK>
[  143.559210][ T8731] loop4: detected capacity change from 0 to 32768
[  143.585816][ T8747] team0: Port device vlan2 added
[  143.602534][ T8731]  loop4: p1 p3 < p5 p6 >
[  143.606918][ T8731] loop4: partition table partially beyond EOD, truncated
[  143.627313][ T8741] syzkaller0: entered promiscuous mode
[  143.632874][ T8741] syzkaller0: entered allmulticast mode
[  143.691274][   T29] audit: type=1400 audit(1803721961.365:17008): avc:  denied  { getopt } for  pid=8754 comm="syz.1.1480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  143.817719][   T29] audit: type=1400 audit(1803721961.485:17009): avc:  denied  { execute } for  pid=8760 comm="syz.1.1482" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=22786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  143.861214][ T3981] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  143.920682][ T8766] loop5: detected capacity change from 0 to 136
[  143.944125][ T8766] Attempt to read inode for relocated directory
[  143.957905][ T8767] loop2: detected capacity change from 0 to 128
[  144.003212][ T8767] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  144.040571][ T8767] ext4 filesystem being mounted at /278/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  144.385133][ T8782] loop4: detected capacity change from 0 to 128
[  144.518407][ T3310] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  144.597667][ T8786] loop5: detected capacity change from 0 to 2048
[  144.659422][ T8796] netlink: 'syz.6.1494': attribute type 2 has an invalid length.
[  144.671869][ T8796] loop6: detected capacity change from 0 to 512
[  144.740015][ T8796] EXT4-fs (loop6): too many log groups per flexible block group
[  144.761080][   T29] audit: type=1326 audit(1803721962.425:17010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8806 comm="syz.5.1497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50dcc0aeb9 code=0x7ffc0000
[  144.784837][   T29] audit: type=1326 audit(1803721962.425:17011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8806 comm="syz.5.1497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50dcc0aeb9 code=0x7ffc0000
[  144.808429][   T29] audit: type=1326 audit(1803721962.425:17012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8806 comm="syz.5.1497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f50dcc0aeb9 code=0x7ffc0000
[  144.834667][ T8796] EXT4-fs (loop6): failed to initialize mballoc (-12)
[  144.841778][ T8796] EXT4-fs (loop6): mount failed
[  144.846798][   T29] audit: type=1326 audit(1803721962.505:17013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8806 comm="syz.5.1497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50dcc0aeb9 code=0x7ffc0000
[  144.870471][   T29] audit: type=1326 audit(1803721962.505:17014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8806 comm="syz.5.1497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50dcc0aeb9 code=0x7ffc0000
[  144.894035][   T29] audit: type=1326 audit(1803721962.505:17015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8806 comm="syz.5.1497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f50dcc0aeb9 code=0x7ffc0000
[  144.917531][   T29] audit: type=1326 audit(1803721962.505:17016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8806 comm="syz.5.1497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50dcc0aeb9 code=0x7ffc0000
[  144.965864][ T8815] 8021q: VLANs not supported on ip6gre0
[  145.036497][ T8819] loop2: detected capacity change from 0 to 512
[  145.112069][ T8819] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  145.124837][ T8819] ext4 filesystem being mounted at /281/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  145.306855][ T8834] loop5: detected capacity change from 0 to 4096
[  145.346827][ T8834] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  145.440857][ T3981] EXT4-fs error (device loop5): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109
[  145.470717][ T3981] EXT4-fs error (device loop5): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109
[  145.733595][ T8844] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  145.788075][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  145.812676][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  145.896253][ T8858] EXT4-fs: Ignoring removed mblk_io_submit option
[  145.902815][ T8858] EXT4-fs: Ignoring removed nobh option
[  145.908970][ T8858] EXT4-fs: test_dummy_encryption option not supported
[  145.966964][ T8862] cgroup: Invalid name
[  146.091175][ T8840] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.128285][ T3435] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.266999][ T3435] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.343496][ T3435] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.453484][ T3435] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.547736][ T3435] bridge_slave_1: left allmulticast mode
[  146.553532][ T3435] bridge_slave_1: left promiscuous mode
[  146.559232][ T3435] bridge0: port 2(bridge_slave_1) entered disabled state
[  146.596248][ T8868] ==================================================================
[  146.604350][ T8868] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping
[  146.612149][ T8868] 
[  146.614460][ T8868] write to 0xffffea00042dee18 of 8 bytes by task 8822 on cpu 0:
[  146.622073][ T8868]  __filemap_remove_folio+0x201/0x300
[  146.627451][ T8868]  filemap_remove_folio+0x6d/0x1d0
[  146.632554][ T8868]  truncate_inode_folio+0x42/0x50
[  146.637586][ T8868]  shmem_undo_range+0x273/0xad0
[  146.642427][ T8868]  shmem_evict_inode+0x12e/0x510
[  146.647363][ T8868]  evict+0x2af/0x510
[  146.651256][ T8868]  iput+0x4b9/0x650
[  146.655056][ T8868]  dentry_unlink_inode+0x24f/0x260
[  146.660166][ T8868]  __dentry_kill+0x13f/0x460
[  146.664772][ T8868]  finish_dput+0x2b/0x200
[  146.669089][ T8868]  dput+0x52/0x60
[  146.672712][ T8868]  __fput+0x444/0x650
[  146.676690][ T8868]  ____fput+0x1c/0x30
[  146.680668][ T8868]  task_work_run+0x130/0x1a0
[  146.685256][ T8868]  do_exit+0x466/0x1590
[  146.689401][ T8868]  do_group_exit+0xfe/0x140
[  146.693916][ T8868]  get_signal+0xe4f/0xf60
[  146.698238][ T8868]  arch_do_signal_or_restart+0x96/0x450
[  146.703777][ T8868]  irqentry_exit+0xf7/0x510
[  146.708276][ T8868]  asm_exc_page_fault+0x26/0x30
[  146.713118][ T8868] 
[  146.715439][ T8868] read to 0xffffea00042dee18 of 8 bytes by task 8868 on cpu 1:
[  146.722971][ T8868]  folio_mapping+0xa1/0xe0
[  146.727381][ T8868]  evict_folios+0xde9/0x35b0
[  146.731965][ T8868]  try_to_shrink_lruvec+0x5f6/0x960
[  146.737155][ T8868]  shrink_lruvec+0x24e/0x1bc0
[  146.741831][ T8868]  shrink_node+0x68e/0x2000
[  146.746327][ T8868]  do_try_to_free_pages+0x404/0xcc0
[  146.751522][ T8868]  try_to_free_mem_cgroup_pages+0x222/0x470
[  146.757418][ T8868]  try_charge_memcg+0x37e/0xa10
[  146.762259][ T8868]  obj_cgroup_charge_pages+0x23/0xc0
[  146.767542][ T8868]  __memcg_kmem_charge_page+0x9e/0x170
[  146.772996][ T8868]  __alloc_frozen_pages_noprof+0x18a/0x350
[  146.778810][ T8868]  alloc_pages_mpol+0xb3/0x260
[  146.783591][ T8868]  alloc_pages_noprof+0x8f/0x130
[  146.788528][ T8868]  __vmalloc_node_range_noprof+0xa46/0x12b0
[  146.794423][ T8868]  __kvmalloc_node_noprof+0x471/0x680
[  146.799792][ T8868]  ip_set_alloc+0x24/0x30
[  146.804118][ T8868]  hash_netiface_create+0x282/0x740
[  146.809325][ T8868]  ip_set_create+0x3cf/0x970
[  146.813913][ T8868]  nfnetlink_rcv_msg+0x509/0x5d0
[  146.818850][ T8868]  netlink_rcv_skb+0x123/0x220
[  146.823611][ T8868]  nfnetlink_rcv+0x167/0x1720
[  146.828281][ T8868]  netlink_unicast+0x5c0/0x690
[  146.833053][ T8868]  netlink_sendmsg+0x5c8/0x6f0
[  146.837805][ T8868]  ____sys_sendmsg+0x5af/0x600
[  146.842556][ T8868]  ___sys_sendmsg+0x195/0x1e0
[  146.847218][ T8868]  __x64_sys_sendmsg+0xd4/0x160
[  146.852057][ T8868]  x64_sys_call+0x17ba/0x3000
[  146.856728][ T8868]  do_syscall_64+0xc0/0x2a0
[  146.861228][ T8868]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.867114][ T8868] 
[  146.869426][ T8868] value changed: 0xffff88811d64b928 -> 0x0000000000000000
[  146.876517][ T8868] 
[  146.878827][ T8868] Reported by Kernel Concurrency Sanitizer on:
[  146.884983][ T8868] CPU: 1 UID: 0 PID: 8868 Comm: syz.1.1518 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  146.896267][ T8868] Tainted: [W]=WARN
[  146.900060][ T8868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  146.910104][ T8868] ==================================================================
[  146.929764][ T3435] bridge_slave_0: left allmulticast mode
[  146.935422][ T3435] bridge_slave_0: left promiscuous mode
[  146.941267][ T3435] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.076310][ T3435] bond2 (unregistering): (slave ip6gretap1): Releasing active interface
[  147.412057][ T3435] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  147.421908][ T3435] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  147.431517][ T3435] bond0 (unregistering): Released all slaves
[  147.439113][ T3435] bond1 (unregistering): Released all slaves
[  147.447318][ T3435] bond2 (unregistering): Released all slaves
[  147.455321][ T3435] bond3 (unregistering): Released all slaves
[  147.488073][ T8854] syz_tun (unregistering): left allmulticast mode
[  147.557745][   T23] syz2: Port: 1 Link DOWN
[  147.570969][ T3435] tipc: Disabling bearer <udp:syz1>
[  147.576210][ T3435] tipc: Left network mode
[  147.638481][ T3435] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  147.645949][ T3435] batman_adv: batadv0: Removing interface: batadv_slave_0
[  147.682490][ T8868] syz.1.1518 (8868) used greatest stack depth: 6360 bytes left
[  147.700242][ T3435] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  147.707628][ T3435] batman_adv: batadv0: Removing interface: batadv_slave_1
[  147.762931][ T3435] veth1_macvtap: left promiscuous mode
[  147.768435][ T3435] veth0_macvtap: left promiscuous mode
[  147.779795][ T3435] veth1_vlan: left promiscuous mode
[  147.785203][ T3435] veth0_vlan: left promiscuous mode
[  147.826275][ T3435] team0 (unregistering): Port device vlan2 removed
[  147.863238][ T3435] team0 (unregistering): Port device team_slave_1 removed
[  147.873538][ T3435] team0 (unregistering): Port device team_slave_0 removed
[  147.889604][  T896] smc: removing ib device syz2
[  148.212434][ T3435] IPVS: stop unused estimator thread 0...
[  148.275969][ T3435] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.312903][ T3435] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.363001][ T3435] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.422702][ T3435] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.510641][ T3435] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.553415][ T3435] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.603019][ T3435] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.655191][ T3435] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.728967][ T3435] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.771457][ T3435] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.824958][ T3435] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.881193][ T3435] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.965110][ T3435] bridge_slave_1: left allmulticast mode
[  148.970875][ T3435] bridge_slave_1: left promiscuous mode
[  148.976522][ T3435] bridge0: port 2(bridge_slave_1) entered disabled state
[  148.984891][ T3435] bridge_slave_0: left allmulticast mode
[  148.990586][ T3435] bridge_slave_0: left promiscuous mode
[  148.996202][ T3435] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.007234][ T3435] tipc: Resetting bearer <eth:ip6_vti0>
[  149.154164][ T3435] tipc: Disabling bearer <eth:ip6_vti0>
[  149.167275][ T3435] team0: Port device geneve1 removed
[  149.331176][ T3435] bond0 (unregistering): Released all slaves
[  149.338648][ T3435] bond1 (unregistering): Released all slaves
[  149.671343][ T3435] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  149.681380][ T3435] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  149.690887][ T3435] bond0 (unregistering): Released all slaves
[  150.171618][ T3435] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  150.180346][ T3435] bond_slave_0: left promiscuous mode
[  150.186856][ T3435] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  150.196055][ T3435] bond_slave_1: left promiscuous mode
[  150.202249][ T3435] bond0 (unregistering): Released all slaves
[  150.209699][ T3435] bond1 (unregistering): Released all slaves
[  150.218681][ T3435] bond2 (unregistering): (slave dummy0): Releasing backup interface
[  150.227748][ T3435] bond2 (unregistering): Released all slaves
[  150.286588][ T3435] tipc: Left network mode
[  150.291241][ T3435] tipc: Left network mode
[  150.300806][ T3435] hsr_slave_0: left promiscuous mode
[  150.306435][ T3435] hsr_slave_1: left promiscuous mode
[  150.314594][ T3435] hsr_slave_0: left promiscuous mode
[  150.321321][ T3435] hsr_slave_1: left promiscuous mode
[  150.326988][ T3435] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  150.334477][ T3435] batman_adv: batadv0: Removing interface: batadv_slave_0
[  150.342258][ T3435] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  150.349743][ T3435] batman_adv: batadv0: Removing interface: batadv_slave_1
[  150.358784][ T3435] hsr_slave_0: left promiscuous mode
[  150.364707][ T3435] hsr_slave_1: left promiscuous mode
[  150.370468][ T3435] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  150.377853][ T3435] batman_adv: batadv0: Removing interface: batadv_slave_0
[  150.386274][ T3435] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  150.393731][ T3435] batman_adv: batadv0: Removing interface: batadv_slave_1
[  150.410178][ T3435] veth1_macvtap: left promiscuous mode
[  150.415656][ T3435] veth0_macvtap: left promiscuous mode
[  150.421232][ T3435] veth1_vlan: left promiscuous mode
[  150.426447][ T3435] veth0_vlan: left promiscuous mode
[  150.432385][ T3435] vlan1: left allmulticast mode
[  150.437237][ T3435] veth0_vlan: left allmulticast mode
[  150.442811][ T3435] veth1_macvtap: left promiscuous mode
[  150.448269][ T3435] veth0_macvtap: left promiscuous mode
[  150.454003][ T3435] veth1_vlan: left promiscuous mode
[  150.459219][ T3435] veth0_vlan: left promiscuous mode
[  150.465162][ T3435] veth1_macvtap: left promiscuous mode
[  150.470730][ T3435] veth0_macvtap: left promiscuous mode
[  150.476306][ T3435] veth1_vlan: left promiscuous mode
[  150.481838][ T3435] veth0_vlan: left promiscuous mode
[  150.593659][ T3435] team0 (unregistering): Port device vlan2 removed
[  150.751081][ T3435] team0 (unregistering): Port device team_slave_1 removed
[  150.761221][ T3435] team0 (unregistering): Port device team_slave_0 removed
[  152.286368][ T3435] IPVS: stop unused estimator thread 0...
[  152.292637][ T3435] IPVS: stop unused estimator thread 0...
[  152.299084][ T3435] IPVS: stop unused estimator thread 0...