last executing test programs:

1m25.738822367s ago: executing program 3 (id=773):
syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$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")
open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1813000007000000eab4040000000000001000"], 0x50)
r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5)
r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r2, 0x58, &(0x7f00000002c0)}, 0x10)
lremovexattr(&(0x7f0000000100)='./file1\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="c3a647f0"])

1m25.407448249s ago: executing program 3 (id=779):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket(0x2c, 0x3, 0x0)
setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000280)=0x497, 0x4)
r2 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100))
ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$kcm(0x10, 0x2, 0x0)
r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000000)={0x0, 0x800ce90, 0x10, 0x3, 0x40004333}, &(0x7f00000006c0)=<r5=>0x0, &(0x7f00000000c0)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
r7 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x4452]}, 0x8, 0x800)
r8 = signalfd4(r7, &(0x7f0000000140)={[0xfffffffffffffff9]}, 0x8, 0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x2, @private2, 0x401, 0x4}, 0x0, 0x0, 0x1})
getitimer(0x2, 0x0)
io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0xeffd)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r9, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
brk(0x800000)
r10 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETSW2(r10, 0x402c542c, &(0x7f00000000c0)={0x9, 0x0, 0x100d0, 0x4002, 0x5, "0c411be01fbcd2b7cb366b0200", 0x1004, 0xffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xa, 0x3, 0xfffffffc, 0x2, 0x401, r8, 0x899, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x5}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)

1m25.201001593s ago: executing program 3 (id=786):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000300000006"], 0x34c}}, 0x0)

1m25.18291487s ago: executing program 3 (id=788):
r0 = socket(0x11, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x10000, 0x1, 0x100, 0x100, 0x100, 0x0, 0x4}, 0x1c)
sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f00000004c0)=@qipcrtr={0x2a, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000040)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x80, 0x0}}], 0x2, 0x4044c50)
r1 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, "0093170666befb26a200"}}}]}, 0x48}}, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00444, &(0x7f0000000080)={[{@grpquota}, {@noblock_validity}]}, 0x1, 0xbbb, &(0x7f0000001800)="$eJzs3M9rHOUbAPBnJpvf+TbpF1FbBANSFcVt2pQKPbWeRQU9eGxMNiVk+8Mkggk9pPWuHkQ8FKR/guDdXjwJHupB619QxCJFL20PK7M/0jWb3cR0s2PTzwfezPvOO9nneTLZzDuwkwCeWJPZlzTiUEScTSLG6/vTiBio9oYi1mvH3b97eTZrSVQq7/6RRBIR9+5enm28VlLfjtYHQxFx840k/v9Ja9zl1bXFmXK5tFQfH105f+no8uraawvnZ86VzpUunJh+/cT0yenpLtZ6+9IHXz3301svXr3+6dTbXx74IYnTMVafa66jWyZjcuNn0qwQETPdDpaTvno9zXUmhRwTAgCgo7RpDfd0jEdfPFy8jcf3P+eaHAAAANAVlb6ICgAAALDPJe7/AQAAYJ9rfA7g3t3Ls42W7ycSeuvOmYiYqNXfeL65NlOI9ep2KPojYuTPJJofa01q3/bIJrNI3/5Yylps9xzycBcCbrJ+JSKe3er8J9X6J6pPcbfWn0bEVBfiT24a9/r371HqP92F+HnXD8CT6caZ2oWs9fqX1tY/g7XR5utfYYtr127kff1rrP/ut6z/0o31X1+b9d87O4xx+MErN9vNNa//3v/s17ksfrZ9pKL+hTtXIg4Xtqo/2ag/aVP/2R3GGJ29fa3dXFZ/Vm+j9br+yvWII9XVXGv9DUmn/090dH6hXJqqfd3i9VdPdo7ffP6zlsVv3Av0Qnb+R2J35//SDmNMPPP7oXZz29ef/jaQvFftDdT3fDyzsrJ0LGIgebN1//HOuTSOabxGVv/LL3R+/29Vf/Y3Yb3+c8h+e67Ut9n46qaYo0eOf7P7+vdWVv/cLs//5zuM8fV31z7ctGvjzZV3/QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8HtKIGIskLW7007RYjBiNiKdiJC1fXF55df7iRxfmsrmIiehP5xfKpamIGK+Nk2x8rNp/OD6+aTwdEQcj4ovx4eq4OHuxPJd38QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGwYjYixSNJiRKQR8dd4mhaLeWcFAAAAdN1E3gkAAAAAe879PwAAAOx/Lff/hX+MhnqZCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPvSwedv3EoiYv3UcLVlBupz/blmBuy1dGeHjex1HkDv9eWdAJCbQlO/UqlUckwF6DH3+ECyzfxQ25nBrucCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwH/XS4du3EoiYv3UcLVlBupz/blmBuy1NO8EgNz0dZpMtt0BPMYKeScA5MY9PlBb2T+o1LTOD7X9zsGH3fXdRQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg8TFWbUlajIi02k/TYjHifxExEf3J/ELEVEQciIhfxvsH5xfKpWN5Jw0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDXLa+uLc6Uy6UlHR2dLnaGo2exhutv5jbHDLaf6tDJ+Q8TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC5WF5dW5wpl0tLy3lnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAORteXVtcaZcLi3tYSfvGgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyM/fAQAA///+hAlq")
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.parent_freezing\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3000046, &(0x7f00000000c0), 0x1, 0x55c, &(0x7f00000003c0)="$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")
r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./bus\x00', 0x0, 0x63d014, 0x0)
r7 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r7, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0xc0185879, &(0x7f0000000080)={@desc={0x1, 0x0, @desc3}})
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r8=>0x0, <r9=>0x0}, 0x6000)
setresuid(0xee01, r8, r8)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4, {<r10=>r8, r9}}, './file0\x00'})
fsetxattr$system_posix_acl(r4, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="02000000010007000000000002000200", @ANYRES32=r8, @ANYBLOB="02000000", @ANYRES32=r8, @ANYBLOB="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", @ANYRES32=r10, @ANYBLOB="02000000", @ANYRES32=r8, @ANYBLOB="040005000000000010000100000000002000070000000000"], 0x44, 0xeac7550f9dac4e0e)
setreuid(0xffffffffffffffff, 0xee01)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x2000, 0x1)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000058000000050a01020000000000000000010020000c00024000000000000000010900010073797a310000000020000480140003"], 0xf4}}, 0x10)

1m24.852481392s ago: executing program 3 (id=794):
r0 = socket$inet(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c000180140003"], 0x98}}, 0x0) (async)
unshare(0x24020400) (async)
r2 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x3c00, 0x3, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000140))
ppoll(&(0x7f00000000c0)=[{r2}], 0x1, &(0x7f0000000200), 0x0, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x20040800}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r3=>0x0}) (async)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
r4 = inotify_init1(0x80000)
inotify_add_watch(r4, &(0x7f0000000040)='./file1\x00', 0x7f7)
link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') (async)
r5 = socket$nl_route(0x10, 0x3, 0x0) (async)
r6 = socket(0x10, 0x803, 0x0) (async)
bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) (async)
io_uring_register$IORING_REGISTER_PBUF_STATUS(0xffffffffffffffff, 0x1a, &(0x7f00000000c0)={0x2}, 0x1)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000400)={0x2, &(0x7f0000000180)=[{0x7, 0x2, 0x5, 0x8}, {0x1000, 0x3, 0xfb, 0x8}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000440)={<r8=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r7, 0xc0182101, &(0x7f00000004c0)={r8, 0x3, 0xff})
getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r9, @ANYRES32, @ANYBLOB="01000000000000002400128009000100016f6e640000000014000280050001000600000008000b00a1b9fea5802c10e5e10b324e7d67b2d2a1753a174bb945ebaed2b29c01b072fcc1b2b986ba8b810305ed8799d5616673c6036ea74f709bd3287008819791dd25", @ANYRES32=r3], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x20004000)
socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x1, 0x803, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async)
socket$inet_udplite(0x2, 0x2, 0x88)
r11 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8002)
ioctl$SG_IO(r11, 0x2285, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x381, 0x0, 0x0, 0x9e25}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) (async)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r10, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000640)=ANY=[@ANYBLOB="24000000071400022dbd7000fbdb09000000000000007a3000000000050054000100000003c3d2697ac7c8d32a2f485eafc1cbc596210373d02f4c5d2af33585a7018318a8a6383af6e6d959fdf53f18bb03478280156538e8bf633329a0ca6604a71b1b294b4afd4d65eee2fb63338d1b22bf7909ad0e1276f0e4a33cfd7d7fc7d07fb339f05d"], 0x24}, 0x1, 0x0, 0x0, 0x2000890}, 0x2400c0d5)

1m24.44290519s ago: executing program 3 (id=797):
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) (async)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x200, 0xffffffffffffffff}, 0x102802, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
ioprio_set$uid(0x0, r1, 0x4004) (async)
truncate(&(0x7f00000001c0)='./file0\x00', 0xfffffffeffffffff) (async)
syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) (async)
ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000140)) (async)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x1, 0x81, 0xdb}) (async)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', <r6=>0x0}) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@bridge_newneigh={0x30, 0x1c, 0x1, 0x70bd29, 0x25dfdbff, {0xa, 0x0, 0x0, r6, 0x80, 0x0, 0x6}, [@NDA_DST_IPV6={0x14, 0x1, @private1}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) (async)
r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000800000004000000000000070000000003000000000000080100000000000000000000090200000000002e2e5f"], 0x0, 0x44}, 0x20) (async)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r10 = socket$kcm(0x2, 0x1000000000000005, 0x0)
sendmsg$inet(r10, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x0, @rand_addr=0x20}, 0x140, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1100000000000000004003001100000000000000000000001c00000000000000000f00fdffff0700", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c0000000000000000078f020c000000", @ANYRES32=0x0, @ANYBLOB="a005000000000000000000002400000000000000840000000700000094040000441000000000000000050000000000000000000011000000000000000000011601000000000000000000000003cfaff1a411936940e815b82c26205472b6847265849d913aac5ebe"], 0x98}, 0x4dc) (async)
sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffa}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0xc010}, 0x0) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7fff, '\x00', 0x0, r8, 0x0, 0x1}, 0x50) (async)
sendmsg$TIPC_NL_BEARER_ADD(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x18, r4, 0x4c1dad3e3d6a7499, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000080}, 0x2400c000) (async)
r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000001f0000007b000400000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xb, &(0x7f0000000080)=""/11, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x5a, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x24) (async)
listen(r11, 0x7) (async)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffc, 0x0, "0062ba7d82000000000000000000f7ffffff00"})
r12 = syz_open_pts(r2, 0x636403)
ioctl$TIOCSTI(r12, 0x540c, 0x0)

1m24.432614309s ago: executing program 32 (id=797):
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) (async)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x200, 0xffffffffffffffff}, 0x102802, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
ioprio_set$uid(0x0, r1, 0x4004) (async)
truncate(&(0x7f00000001c0)='./file0\x00', 0xfffffffeffffffff) (async)
syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) (async)
ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000140)) (async)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x1, 0x81, 0xdb}) (async)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', <r6=>0x0}) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@bridge_newneigh={0x30, 0x1c, 0x1, 0x70bd29, 0x25dfdbff, {0xa, 0x0, 0x0, r6, 0x80, 0x0, 0x6}, [@NDA_DST_IPV6={0x14, 0x1, @private1}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) (async)
r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000800000004000000000000070000000003000000000000080100000000000000000000090200000000002e2e5f"], 0x0, 0x44}, 0x20) (async)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r10 = socket$kcm(0x2, 0x1000000000000005, 0x0)
sendmsg$inet(r10, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x0, @rand_addr=0x20}, 0x140, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1100000000000000004003001100000000000000000000001c00000000000000000f00fdffff0700", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c0000000000000000078f020c000000", @ANYRES32=0x0, @ANYBLOB="a005000000000000000000002400000000000000840000000700000094040000441000000000000000050000000000000000000011000000000000000000011601000000000000000000000003cfaff1a411936940e815b82c26205472b6847265849d913aac5ebe"], 0x98}, 0x4dc) (async)
sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffa}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0xc010}, 0x0) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7fff, '\x00', 0x0, r8, 0x0, 0x1}, 0x50) (async)
sendmsg$TIPC_NL_BEARER_ADD(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x18, r4, 0x4c1dad3e3d6a7499, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000080}, 0x2400c000) (async)
r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000001f0000007b000400000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xb, &(0x7f0000000080)=""/11, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x5a, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x24) (async)
listen(r11, 0x7) (async)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffc, 0x0, "0062ba7d82000000000000000000f7ffffff00"})
r12 = syz_open_pts(r2, 0x636403)
ioctl$TIOCSTI(r12, 0x540c, 0x0)

5.405328254s ago: executing program 4 (id=1477):
socket(0x10, 0x803, 0x0) (async)
r0 = socket$netlink(0x10, 0x3, 0x10) (async)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x1405, 0x1, 0x70bd29, 0x25dfdbfd, "", [{{0x8}, {0x8}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044000}, 0x800) (async, rerun: 64)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)={'team0\x00', <r3=>0x0}) (async)
r4 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) (async)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0)

5.068425275s ago: executing program 4 (id=1484):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x5, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x5, 0x8, 0x20005, 0x7, 0x0, 0x0, 0x0, 0x20004006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000170000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009b00000095"], 0x0, 0xffffffff}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0xeb, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @mcast1, @rand_addr=' \x01\x00', [], "1e520b4c951ee12e"}}}}}}}, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20020085, 0x0, 0x31)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="400000001000370400000000fcdbdf2500000000", @ANYRES32=r4, @ANYBLOB="890c04000000000020001280080001006774700014000280050005"], 0x40}}, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000040)=0x12, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x8001}]}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='dctcp', 0x5)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)

3.900663381s ago: executing program 4 (id=1498):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64)
openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000240)={0x10300, 0x80, 0x2a}, 0x18) (async, rerun: 64)
getpid() (async)
syz_emit_ethernet(0x4e, &(0x7f00000000c0)=ANY=[@ANYBLOB="e331105e00d8c6c46218841f1bfdaaaaaaaaaa0086dd6004000000183afffc0000000008000673eb8c3cedc6041cdb3d000000000000000001fe8000000000000000000000000000aa8800907868655a9d2c5a3f76000000000000000000000001"], 0x0) (async)
setxattr$incfs_size(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)=0x6, 0x8, 0x2) (async, rerun: 64)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid() (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000000000000800000000000000", @ANYRES32, @ANYBLOB="feffffff00000000000000000000bd0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500"/28], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000200b7030000ffffff90850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
sched_setscheduler(r1, 0x0, &(0x7f0000000200)=0x8) (async, rerun: 32)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x4000010, 0xffffffffffffffff, 0x17440000) (rerun: 32)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) (async)
recvmmsg(r5, &(0x7f00000000c0), 0x0, 0x2, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x13, 0x2000000000000216, &(0x7f0000000740)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x20, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x63, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64)
r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x100000000000009, 0x80000000, 0x3}, 0x0, 0xffffffffffffffff, r0, 0x8) (rerun: 64)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r8)
sendmsg$DEVLINK_CMD_RATE_GET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="00002100120e7f3142e01c1a5069673915c2b83af3a43dfeae635d89ac85bb505f5dbcdda1beb7da64c92a8eea338a5084745275de54db2480ce921e23b3c3573b6993a5b8bf76bd9698457058b7bdf777ac6f1c70cdee433277c96dbcbd6c2c57731519d76809167fc5903b92d5014e20", @ANYRES16=r9, @ANYRESOCT=r6], 0x14}, 0x1, 0x0, 0x0, 0x40014}, 0x0) (async)
mprotect(&(0x7f0000a98000/0x2000)=nil, 0x2000, 0x2)
r10 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r10, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42, 0xffffffff}}}, 0x10) (async)
r11 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r11, 0x10f, 0x87, &(0x7f0000000440)={0x100042, 0x3, 0x2}, 0x10) (async)
socket$tipc(0x1e, 0x5, 0x0)

3.83241499s ago: executing program 4 (id=1499):
mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x1000, 0x1)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa002, 0xc)
r1 = inotify_init()
inotify_add_watch(r1, &(0x7f0000000200)='.\x00', 0x4000423)
write$P9_RREADDIR(r0, &(0x7f0000000340)={0xb, 0x29, 0x2, {0x8}}, 0xb)
r2 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1800040, &(0x7f0000000200)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@block_validity}, {@nodioread_nolock}, {@nodelalloc}, {@bh}]}, 0x1, 0x59c, &(0x7f0000001840)="$eJzs3U9oHGUbAPBnZrNN/+T70g++Dz6lh6JChdJN0j9aPbVXsVDoQfCiYbMNJZtsySbahIDpvYg9iEov9aYHj4oHD+LFo1cvimeh2KDQ9KArm51N03S3bmI2W7O/H0z2fWdm93nfmX3e7AwzTAB962j9TxrxVERcTCKGNywbiGzh0cZ6qytLxfsrS8UkarVLvySRRMS9laVic/0kez0UEcsR8f+I+CYfcTxd/8h9zUJ1YXFqvFwuzWb1kbnpqyPVhcUTV6bHJ0uTpZlTL7505uzpM2MnxzY2935tYy2/tb7e+PHmuze+e+X2zU8/O7JcfH88iXMxlC3b2I+d1Ngm+Ti3af7pbgTroaTXDWBbclme11PpfzEcuSzrW6ltHBwGd6V5QBfVBiNq6zYUgT6QSHroU83fAfXj3+a0m78/7pxvHIDU466uLBXfiWb8gca5idi/dmxy8NfkoSOT+vHm4d1sKHvS8vWIGB0YePT7n2Tfv+0b3YkG0lVfn2/sqEf3f7o+/kSL8Weoee70b2qOf6vZ+LfaIn6uzfh3scMYv7/+00dt418fjKdbxk/W4yct4qcR8WaH8W+99uXZdstqH0cci9bxm5LHnx8euXylXBpt/G0Z46tjR15u3/+Ig23iN87Z7l9ryMb+78valHbY/y++/fyZ5cfEf/7Zx+//Vtv/QES812H8/9z75NV2y+5cT+7WfwVsdf8nkY/bHcZ/4dzRH7Kis4YAAAAAAAAAALCD0rVr2ZK0sF5O00KhcQ/vf+NgWq5U545frszPTDSueTsc+bR5pdVwo57U62PZ9bjN+slN9VO5LGDuwFq9UKyUJ3rcdwAAAAAAAAAAAAAAAAAAAHhSHNp0//9vubX7/zc/rhrYq9o/8hvY6+Q/9K+H8z/pWTuA3ef/P/StmvyH/iX/oX/Jf+hf8h/6l/yH/iX/oX/JfwAAAAAAAAAAAAAAAAAAAAAAAAAA6IqLFy7Up9r9laVivT4xsDA/VXnrxESpOlWYni8WipXZq4XJSmWyXCoUK9N/9XlJpXJ1NGbmr43MlapzI9WFxTemK/MzzWeKlvJd7xEAAAAAAAAAAAAAAAAAAAD88wytTUlaiMg36mlaKET8KyIOJ5FcvlIujUbEvyPi+1x+sF4f63WjAQAAAAAAAAAAAAAAAAAAYI+pLixOjZfLpdnuFQayUF0M0XlhYCsrR8Tyzjaj/olbflc+24A93nR7o5B7Mr6HT36hh4MSAAAAAAAAAAAAAAAAAAD0qQc3/Xb6jj+62yAAAAAAAAAAAAAAAAAAAADoS+nPSUTUp2PDzw1tXrovWc2tvUbE27cufXBtfG5udqw+/+76/LkPs/kne9F+oFPNPE0jop7HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwAPVhcWp8XK5NLvNwmAH6/S6jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADb8WcAAAD//y4WzlE=")
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0)
socket(0x26, 0x4, 0xc)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace$getregset(0x4204, r4, 0x2, &(0x7f0000000140)={&(0x7f0000000100)=""/24, 0x18})
write$binfmt_aout(r3, &(0x7f00000003c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000040)={0x0, 0x40000000, 0x0, 0x0, 0x83, "00000000000000000000ffff00"})
r5 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="54000000100037040400"/20, @ANYRES32=0x0, @ANYBLOB="87000100841c0500200012800f000100626f6e645f736c61766500000c000580160d061054be0005000100000014003500626f6e645f736c6176655f3000000000"], 0x54}, 0x1, 0x0, 0x0, 0x9005}, 0x4000)
r6 = syz_open_pts(r3, 0x0)
poll(&(0x7f0000000140)=[{r6, 0x212e}], 0x1, 0x9e)
r7 = dup3(r6, r3, 0x0)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r7, 0x18, &(0x7f0000000380)={0x10001, r2, 0x1b, {0x100000001}, 0x9}, 0x1)
ioctl$TCSETSW2(r7, 0x402c542c, &(0x7f0000000bc0)={0x7, 0xd808, 0x8, 0xfffffff7, 0x2, "4dd5d26bd8b1eb227705ecfba7158d29559dba", 0x5, 0xa6})
ioctl$TCSETSF(r6, 0x5404, &(0x7f0000000080)={0x8001, 0x9, 0x0, 0x9, 0xa, "8dfe4035d8366218bc2601cf81e7870019fb27"})
mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil)
r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f00000083c0)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r8, 0x40505412, &(0x7f00000000c0)={0x4, 0x8})
readv(r8, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4087, 0xff7}], 0x1)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r9, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private, 'veth1_macvtap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9)

3.209141641s ago: executing program 2 (id=1506):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfff5}}, {{&(0x7f0000001bc0)={0xa, 0x4e22, 0x7, @rand_addr=' \x01\x00', 0x47e8}, 0x1c, 0x0, 0x0, &(0x7f0000001d00)=[@rthdrdstopts={{0x18, 0x29, 0x37, {0x62}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x2}}], 0x30}}], 0x2, 0x84)

3.195324928s ago: executing program 2 (id=1507):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = epoll_create1(0x0)
clock_gettime(0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x25, 0x0)
fcntl$lock(0xffffffffffffffff, 0x24, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x5, 0x0}, 0x800, 0x1, 0x3, 0x9, 0x1}, 0x20)
setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="27bd7000fedbe34842ae99dd280b9adf25000000004181a32b0f8b", @ANYRES32=0x0, @ANYBLOB="150c000000000000140012800a000100767863616e0000000400028008002800bc2f0000"], 0x3c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000)
sendmmsg(r1, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @empty}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES64=r1], 0x108}}], 0x1, 0xc040)
fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, <r3=>0x0})
kcmp$KCMP_EPOLL_TFD(0x0, r3, 0x7, r0, &(0x7f0000000080)={r0, r0, 0xd56})
ppoll(&(0x7f00000000c0)=[{r0, 0x4}], 0x1, 0x0, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
io_uring_setup(0x2f35, 0x0)
set_mempolicy(0x3, &(0x7f0000000100)=0x3, 0x9)
socket$netlink(0x10, 0x3, 0xc)
syz_read_part_table(0x5c7, &(0x7f0000000600)="$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")
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0)
set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0)

3.021164118s ago: executing program 4 (id=1510):
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000106fcffffff808dff0000000000", @ANYRES32=0x0, @ANYBLOB="30200208000000001c0012800b0001006d616373656300000c000280050003000f"], 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)

2.723939136s ago: executing program 4 (id=1512):
r0 = socket$igmp(0x2, 0x3, 0x2)
sendmmsg$inet(r0, &(0x7f0000000500)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @empty}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@ip_retopts={{0x74, 0x0, 0x7, {[@generic={0x0, 0xa, "1459684d9c217c96"}, @cipso={0x86, 0x40, 0x3, [{0x0, 0x9, "991c3f2a18bb7f"}, {0x7, 0x5, "a9dbcd"}, {0x0, 0x8, "e2b052165194"}, {0x0, 0x7, "fb8180da71"}, {0x0, 0x5, "ef24a5"}, {0x1, 0x9, "5c09e906c0714c"}, {0x1, 0x5, "c874fa"}, {0x7, 0xa, "090c00c5bd8bb713"}]}, @cipso={0x86, 0xe, 0x2, [{0x6, 0x8, "78959052474b"}]}, @lsrr={0x83, 0xb, 0x24, [@private=0xa010102, @multicast1]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}], 0xa8}}], 0x1, 0x8000)

2.721994166s ago: executing program 33 (id=1512):
r0 = socket$igmp(0x2, 0x3, 0x2)
sendmmsg$inet(r0, &(0x7f0000000500)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @empty}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@ip_retopts={{0x74, 0x0, 0x7, {[@generic={0x0, 0xa, "1459684d9c217c96"}, @cipso={0x86, 0x40, 0x3, [{0x0, 0x9, "991c3f2a18bb7f"}, {0x7, 0x5, "a9dbcd"}, {0x0, 0x8, "e2b052165194"}, {0x0, 0x7, "fb8180da71"}, {0x0, 0x5, "ef24a5"}, {0x1, 0x9, "5c09e906c0714c"}, {0x1, 0x5, "c874fa"}, {0x7, 0xa, "090c00c5bd8bb713"}]}, @cipso={0x86, 0xe, 0x2, [{0x6, 0x8, "78959052474b"}]}, @lsrr={0x83, 0xb, 0x24, [@private=0xa010102, @multicast1]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}], 0xa8}}], 0x1, 0x8000)

2.705723163s ago: executing program 5 (id=1514):
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010030000000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="0000000000100000240012800b0001006d61637365630000140002"], 0x44}}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000d80)={<r4=>0x0, @in6={{0xa, 0x4e21, 0xfff, @remote}}, 0x74, 0xaf, 0x2, 0xb, 0x4a, 0x1432, 0x4}, &(0x7f0000000100)=0x9c)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000e40)={r4, 0x6}, &(0x7f0000000e80)=0x8)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e23, 0x101, @empty, 0xffff}, 0xfffffffffffffee9)
r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002940)={0x14, 0x1a, 0x1, 0x0, 0x3, {0xa}}, 0x14}}, 0x0)
r7 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x124a, 0x80, 0x0, 0x52}, &(0x7f00000008c0), &(0x7f0000000900))
io_uring_enter(r7, 0x47f8, 0x0, 0x0, 0x0, 0x0)
r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@o_path={0x0, 0x0, 0x14, r7}, 0x18)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001c80)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, <r9=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000940)={r9, 0x3, 0x1, [0x7fffffffffffffff, 0x7, 0xffffffffffffffff, 0x6, 0x7d], [0xf, 0x3, 0x4, 0x81cc, 0x0, 0xffff, 0x1, 0xd0, 0x3, 0xde6e, 0xff, 0x3, 0x9, 0x8, 0x10001, 0x401, 0x88, 0x81, 0x8, 0x5, 0x200, 0xe2, 0xeb7, 0x73, 0x9, 0xbc5, 0x8000000000000000, 0x8, 0x2, 0x9, 0x8, 0x8001, 0x80, 0x4, 0x8, 0xfffffffffffffeff, 0x7, 0x80000000, 0x2, 0x9, 0x67, 0xd4a9, 0x5, 0xfffffffffffffbff, 0x0, 0x5, 0x70, 0x6, 0x5, 0x5, 0x1, 0xfffffffffffffff8, 0x7, 0xe3, 0x0, 0x1, 0x7ff, 0x9, 0x81, 0xfffffffffffffff7, 0x10, 0x80000001, 0x600000, 0x8000, 0x7, 0xa, 0xffffffffffffffff, 0x5, 0x0, 0x13, 0xcf3, 0x5, 0x6, 0x1, 0xffffffffffff7fff, 0x1, 0x2, 0x3, 0x341, 0x7, 0x1, 0x6, 0x2, 0x2, 0x5f8, 0x10001, 0x6, 0x0, 0x100, 0x0, 0x1, 0x4, 0xd47d, 0x8, 0x1, 0x5, 0x401, 0x0, 0xb9, 0x31b, 0x3, 0xff, 0xf149, 0x3, 0xb, 0x7, 0x4cd, 0xffffffffffffffff, 0x80000001, 0x0, 0x9, 0x7, 0x6, 0x10000, 0x231, 0x6, 0x3, 0x2, 0x8, 0x1, 0x8001]})
ioctl$BTRFS_IOC_GET_DEV_STATS(r6, 0xc4089434, &(0x7f0000001640)={r9, 0x5, 0x1, [0x2, 0x1, 0x0, 0x41c5], [0xfffffffffffffffb, 0xf, 0x6, 0x19, 0xfffffffffffffffd, 0x7, 0x9, 0x8, 0x100, 0xede, 0x2, 0x2, 0xf, 0x8, 0x2, 0x787, 0x3, 0x9, 0x55, 0x80000001, 0x0, 0x400, 0x0, 0x6, 0x40, 0xffffffffffff8000, 0x200, 0x80, 0xff, 0x75, 0x3, 0x5, 0x9, 0x8, 0x7, 0x2, 0x66, 0xb5, 0x6, 0x7, 0xd, 0x1000, 0x7, 0x4, 0x10001, 0x2, 0x3, 0x8, 0x1, 0x7, 0x4, 0x6, 0x7fffffffffffffff, 0x9, 0x200, 0xfff, 0x7, 0x2, 0x1, 0x5, 0xac04, 0x99, 0x7, 0x6, 0x7, 0x0, 0x5, 0x67, 0xffff, 0x2, 0x1, 0x3, 0x4, 0x0, 0x1c, 0x1, 0x6403, 0x9, 0xdb, 0x2, 0x101, 0x6, 0x3, 0x6, 0x2, 0x0, 0xdd6, 0x9, 0x1, 0x2, 0x9, 0x4, 0x80000001, 0x7, 0x2, 0x1, 0xf0, 0x0, 0xffff, 0x1000, 0x5, 0x4, 0x5, 0xffffffffffffff00, 0xd0, 0x5, 0xfffffffffffffff7, 0x5, 0x4, 0x1ff, 0x7, 0x1, 0x3, 0x387fe123, 0x8, 0x0, 0x1, 0x3, 0x2, 0x8]})
r10 = open$dir(&(0x7f0000000ec0)='./file0\x00', 0x10000, 0x120)
name_to_handle_at(r10, &(0x7f0000000f00)='./file0\x00', &(0x7f0000000f40)=@xfs={0x1c, 0x81, {0x6, 0x6af8, 0x6, 0xfffffffd}}, &(0x7f0000000f80), 0x1000)
ioctl$BTRFS_IOC_DEV_REPLACE(r5, 0xca289435, &(0x7f00000001c0)={0x2, 0x2, @start={r9, 0x0, "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", "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"}, [0x1, 0x18000, 0x12000000, 0x0, 0xd5b, 0xca, 0x1c, 0x0, 0x80000000, 0x4, 0x4, 0x5, 0x6, 0x6, 0x8000000000000000, 0x2, 0xd240, 0x1, 0x8, 0x7, 0x2, 0x3, 0x5, 0x2, 0x4, 0x3, 0x7, 0x3ff, 0x2dfc5001, 0x4, 0x40e, 0x9, 0x1, 0x68e0, 0x7fff, 0x3, 0xf85, 0x4, 0x8, 0x352, 0x9, 0x9, 0x7, 0x1, 0x6, 0x0, 0xfffffffffffffffa, 0x4, 0x399, 0x5, 0xa, 0x9, 0x100000001, 0x7, 0x3afc, 0x6, 0x9, 0xc828, 0x3, 0xd, 0x817, 0x5, 0xfffffffeffffffff, 0x6]})
times(&(0x7f0000000180))

2.670861566s ago: executing program 5 (id=1515):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb", 0x30}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000500)="23355c484a99f50fe80290dad71777c07547ba6775a98ce83fd6c7031048db3f6cc0829e59806f8b94c170faf06472d63b65d24f52ef895f5bfb0b98cebbd1a6d72b1b", 0x43}, {&(0x7f0000000600)="9e1d7cffeebcc56f4a1cd2cebf23c21f5951c799bf8c8d62efca81f675745d0f6114880da308a45e71eb6d09080cd8a7a6afc5912915b9a1575c0ba983d07725aa072d2ad688e93c6073c1", 0x4b}, {&(0x7f0000000780)="1c5f4bb563d6ef2ffbb46cb2b02454214c50a988a9cd0d8b4ec20810aca4b2efa0acccf7f1ae615e5a985b570424d4421f111a30122bedb13152a3959b7caf873e0846e5744ee93fd80558d6dad07296391225706724c9f8b6f7fd1f816cb091f9d30d12a020b173b105ac383f1af7be39825720221707da95194aae3a2e49", 0x7f}, {&(0x7f0000000840)="55b2f45a82e979ee13cfa93f385d876f372e49b02d643c72db8e0e97739ef4a3fd8e6104505786b8afbd549b2e9adbcf0d17b0f665810f5d862724a67e881efcad7b931b40cffd764f7d3c4467c1f6016b9297758569e5cc6f100909bb06f333ef7c5b855debc260fbe4375e24d564bf3138fc11868e1e5ed62f056da9857b6aae08339f0090cd", 0x87}, {&(0x7f0000000940)="d361df209d9688a550cc85099cada97bd2fa7d9612b994fa0f7103b8281c97bd23fdc09c0b961e0a54ab8d2368153f3acfe3efc15ec04c622970c18164a407d78445ac3ba27d9843cec9a2628e9b7a683f992b78d051d2faaecfd1631ecdbdee8e01ae5c0a489920ee529c42b2966098a220adbea6572c0871f247cd8df7b1ccf6b9", 0x82}], 0x6}}], 0x2, 0x2090)
setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000040)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

2.587603142s ago: executing program 5 (id=1516):
io_setup(0x81, &(0x7f0000001440)=<r0=>0x0)
r1 = syz_io_uring_setup(0x2afc, &(0x7f00000002c0)={0x0, 0x59cd, 0x13090, 0x0, 0x72}, &(0x7f0000000100), &(0x7f0000000080))
prlimit64(0xffffffffffffffff, 0xd, &(0x7f0000000040)={0x7, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000008580)=[{{0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000400)=""/92, 0x5c}, 0x7}, {{&(0x7f0000000740)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000000980)=[{&(0x7f00000008c0)=""/163, 0xa3}], 0x1, &(0x7f0000000a80)=""/238, 0xee}, 0x2c}, {{&(0x7f00000009c0)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000c00)=""/236, 0xec}], 0x1, &(0x7f0000000d40)=""/166, 0xa6}, 0x401}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000e00)=""/143, 0x8f}, {&(0x7f0000000ec0)=""/17, 0x11}], 0x2, &(0x7f0000000f80)=""/118, 0x76}, 0x7fff}, {{&(0x7f0000001000)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000001240)=[{&(0x7f0000001080)=""/87, 0x57}, {0x0}, {&(0x7f00000011c0)=""/114, 0x72}, {0x0}], 0x4, &(0x7f00000012c0)=""/253, 0xfd}, 0x5}, {{0x0, 0x0, &(0x7f0000005ac0)=[{&(0x7f00000013c0)=""/77, 0x4d}, {&(0x7f0000001480)=""/214, 0xd6}, {0xfffffffffffffffe}, {&(0x7f0000001600)=""/6, 0x6}, {&(0x7f0000003900)=""/4096, 0x1000}, {&(0x7f0000004a00)=""/174, 0xae}, {&(0x7f0000004ac0)=""/4096, 0x1000}], 0x7, &(0x7f0000005b40)=""/106, 0x6a}, 0x80000001}, {{&(0x7f0000005bc0)=@generic, 0x80, &(0x7f0000007040)=[{&(0x7f0000005c40)=""/4096, 0x1000}, {&(0x7f0000006c40)=""/10, 0xa}, {&(0x7f0000006c80)=""/150, 0x96}, {&(0x7f0000006d40)=""/153, 0x99}, {0x0}, {&(0x7f0000006f00)=""/14, 0xe}, {&(0x7f0000006f40)=""/253, 0xfd}], 0x7, &(0x7f00000070c0)=""/4096, 0x1000}, 0xb140}, {{&(0x7f00000080c0)=@generic, 0x80, &(0x7f0000008440)=[{&(0x7f0000008140)=""/211, 0xd3}, {&(0x7f0000008240)=""/46, 0x2e}, {&(0x7f0000008280)=""/33, 0x21}, {&(0x7f00000082c0)=""/138, 0x8a}, {&(0x7f0000008380)=""/163, 0xa3}], 0x5, &(0x7f00000084c0)=""/131, 0x83}, 0x200}], 0x8, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4)
openat(0xffffffffffffffff, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x40141, 0xc)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x208, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x9}, 0x100e64, 0xc77}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
io_submit(r0, 0x1, &(0x7f0000000800)=[&(0x7f00000000c0)={0x0, 0x0, 0x2000000, 0x5, 0x7e2, r1, 0x0}])

2.587030652s ago: executing program 1 (id=1517):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000000c0)={0x5, 0x897, 0x200, 0x0, 0xf})
sendmsg$nl_xfrm(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f00000147c0)={&(0x7f0000000480)=@allocspi={0x140, 0x16, 0x1, 0x70bd2c, 0x25df9bff, {{{@in6=@dev={0xfe, 0x80, '\x00', 0x14}, @in=@multicast1, 0x4e24, 0x0, 0x4e22, 0x3, 0x2, 0x80, 0x110, 0x3a}, {@in=@loopback, 0x4d2, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x2a}, {0x1, 0x10, 0x4, 0x408001, 0x8, 0x880000000, 0xaaf0, 0x1}, {0x500002, 0x4, 0x2000004, 0x2}, {0x6, 0x2127268a, 0x8}, 0x70bd28, 0x350a, 0xa, 0x0, 0x0, 0x28}, 0x0, 0x80000002}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x140}, 0x1, 0x0, 0x0, 0x63a0f7cf031481fc}, 0x48080)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="bc0900001900010025bd700001000000fe8800000000000000000000000001010000000000000000000000000000000000000000000000000200000000000000518426ca2f8d0d592deb38", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000020000000000000000010000000000040105007f000001000000000000000000000000000004d33300000000000000640101000000000000000000000000000000000000000000000000000000000040000000fe8000000000000000000000000000bb000020003c00000002000000fe8000000000000000000000000000000000000000010000000000000000000000000000ac141443000000000000000000000000000000003300000000000000ac1414bb0000000000000000000000000000000000000000000000000000000000000000ac1414bb000000000000000000000000000004d2330000004c640000fe8000000000000000000000000000bb0000000005000100"/372], 0x1bc}, 0x1, 0x0, 0x0, 0x1}, 0x4000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@ipv6_newrule={0x24, 0x1a, 0x1, 0x70bd2d, 0x0, {0x81, 0x80, 0x80}, [@FIB_RULE_POLICY=@FRA_TABLE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008004}, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x22000011, &(0x7f0000000000)={[{@commit}, {@noblock_validity}, {@user_xattr}]}, 0x86, 0x498, &(0x7f0000001680)="$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")
creat(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x93)

2.3449425s ago: executing program 2 (id=1518):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x100}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0)

2.282153408s ago: executing program 2 (id=1519):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f, 0x8}, 0x114905, 0x4, 0x9, 0x3, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="02030009160000002cbd7000fbdbdf250300090080000000af0000000000b1000000000000000000030006000000000002004e22ac1414bb000000000000000002000100ffffffff0000070201000000030005000000000002004e21ac1e010100000000000000000900180013053c"], 0xb0}, 0x1, 0x7}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x30, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
r5 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x240048c1)
sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x93c6}, 0x94)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={<r7=>0x0, <r8=>0x0})
close(r7)
setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5a2119bf86ff29ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x3, 0x3, 0x5}, 0x10}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={<r10=>0x0, <r11=>0x0})
close(r10)
setsockopt$sock_attach_bpf(r11, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r6)
r12 = socket$nl_rdma(0x10, 0x3, 0x14)
r13 = gettid()
fstat(r11, 0x0)
fstat(r10, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, <r14=>0x0})
r15 = socket$rxrpc(0x21, 0x2, 0x2)
sendmsg$unix(r7, &(0x7f0000000880)={&(0x7f0000000380)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000000c0)=[{0x0}], 0x1, &(0x7f0000000f80)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r12, @ANYRES32=r10, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r6, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r6, @ANYBLOB="000000001000000000000000010000000100000034000000000000000100000001000000", @ANYRES32=r10, @ANYRES32=r7, @ANYRES32=r12, @ANYRES32=r0, @ANYRES32=r9, @ANYRES32=r6, @ANYRES32=r11, @ANYRES32=r12, @ANYRES32=r8, @ANYBLOB="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", @ANYRES32=r13, @ANYRES32=0x0, @ANYRES32=r14, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r0, @ANYRES32=r4, @ANYRES32=r0, @ANYRES32=r15, @ANYRES32, @ANYRES32=r5, @ANYBLOB="1400000000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0x118, 0x20000000}, 0x80)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x60}, 0x1, 0x0, 0x0, 0x408d1}, 0x4000)
r16 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r16, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x601, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x22030, 0x9}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x9}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)

2.11884558s ago: executing program 1 (id=1521):
pipe(0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r0, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r3 = accept(r0, 0x0, 0x0)
sendmsg$AUDIT_USER_AVC(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[], 0x454}}, 0x0)
shutdown(r3, 0x1)
recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x0, 0x0, 0x0)

2.06007404s ago: executing program 2 (id=1522):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = epoll_create1(0x0)
clock_gettime(0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x25, 0x0)
fcntl$lock(0xffffffffffffffff, 0x24, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x5, 0x0}, 0x800, 0x1, 0x3, 0x9, 0x1}, 0x20)
setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc15}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x2fbc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000)
sendmmsg(r1, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @empty}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES64=r1], 0x108}}], 0x1, 0xc040)
fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, <r3=>0x0})
kcmp$KCMP_EPOLL_TFD(0x0, r3, 0x7, r0, &(0x7f0000000080)={r0, r0, 0xd56})
ppoll(&(0x7f00000000c0)=[{r0, 0x4}], 0x1, 0x0, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0)
set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x2000000)

1.939610639s ago: executing program 0 (id=1525):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb", 0x30}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000500)="23355c484a99f50fe80290dad71777c07547ba6775a98ce83fd6c7031048db3f6cc0829e59806f8b94c170faf06472d63b65d24f52ef895f5bfb0b98cebbd1a6d72b1b", 0x43}, {&(0x7f0000000600)="9e1d7cffeebcc56f4a1cd2cebf23c21f5951c799bf8c8d62efca81f675745d0f6114880da308a45e71eb6d09080cd8a7a6afc5912915b9a1575c0ba983d07725aa072d2ad688e93c6073c1", 0x4b}, {&(0x7f0000000780)="1c5f4bb563d6ef2ffbb46cb2b02454214c50a988a9cd0d8b4ec20810aca4b2efa0acccf7f1ae615e5a985b570424d4421f111a30122bedb13152a3959b7caf873e0846e5744ee93fd80558d6dad07296391225706724c9f8b6f7fd1f816cb091f9d30d12a020b173b105ac383f1af7be39825720221707da95194aae3a2e49", 0x7f}, {&(0x7f0000000840)="55b2f45a82e979ee13cfa93f385d876f372e49b02d643c72db8e0e97739ef4a3fd8e6104505786b8afbd549b2e9adbcf0d17b0f665810f5d862724a67e881efcad7b931b40cffd764f7d3c4467c1f6016b9297758569e5cc6f100909bb06f333ef7c5b855debc260fbe4375e24d564bf3138fc11868e1e5ed62f056da9857b6aae08339f0090cd", 0x87}, {&(0x7f0000000940)="d361df209d9688a550cc85099cada97bd2fa7d9612b994fa0f7103b8281c97bd23fdc09c0b961e0a54ab8d2368153f3acfe3efc15ec04c622970c18164a407d78445ac3ba27d9843cec9a2628e9b7a683f992b78d051d2faaecfd1631ecdbdee8e01ae5c0a489920ee529c42b2966098a220adbea6572c0871f247cd8df7b1ccf6b9", 0x82}], 0x6}}], 0x2, 0x2090)
setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000040)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

1.840663252s ago: executing program 2 (id=1526):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bind$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x3}}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r4, 0x1, 0xffffffa1, 0x100000, {{}, {}, {0x14, 0x19, {0x1, 0x1, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x24000001}, 0x1004)
syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff)

1.519193885s ago: executing program 5 (id=1527):
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0xfffffffffffffffc}, 0x0, 0xd, 0x26, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
clock_gettime(0xfffffffffffffff6, 0x0)
syz_emit_ethernet(0x56, &(0x7f0000000440)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0xd, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x34}, {[@timestamp_addr={0x44, 0x14, 0x9, 0x3, 0x0, [{@empty}, {@local}]}, @ssrr={0x89, 0x7, 0xce, [@broadcast]}, @generic={0x83, 0x2}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x1}}}}}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x80)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="9800000010001ffffcffffff8000400000000000", @ANYRES32=<r1=>0x0, @ANYBLOB="00030000003f000008000a00", @ANYRES32], 0x98}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f00000010c0)=0x8)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000100)=ANY=[@ANYRES8=r1], 0x14)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={r4, 0xb}, &(0x7f0000000080)=0x8)

1.229975995s ago: executing program 1 (id=1528):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x100}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0)

1.097744272s ago: executing program 1 (id=1529):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r1 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
fchdir(r2)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x48)
getdents(r3, &(0x7f0000000080)=""/39, 0x27)
mknod(&(0x7f00000000c0)='./file0\x00', 0x200, 0x2)
sendmmsg$inet(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be689", 0x24}, {&(0x7f0000000680)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d271d30d1a5fff9d3b1ce90b597992b2a4d54161", 0x95}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2090)
sendto$inet(r0, &(0x7f0000000580)="17", 0x1, 0x84, 0x0, 0x0)

999.967895ms ago: executing program 0 (id=1530):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e24, 0x1, @private0, 0x20}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="280000000000000029000000050000002f02028600000000fe55c20000000000000000020000bb4800e3a5"], 0x70}, 0x810)

999.167335ms ago: executing program 1 (id=1531):
socket$inet_udp(0x2, 0x2, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000f00)={0x184, r2, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xe1, 0x37}}}}, [@NL80211_ATTR_IE={0x39, 0x2a, [@gcr_ga={0xbd, 0x6, @broadcast}, @supported_rates={0x1, 0x1, [{0x60}]}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x2, 0xc5, @broadcast, 0x8, @value, 0xf3b7, 0x1, @broadcast, 0xa6}}]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x8}, @NL80211_ATTR_SCAN_SUPP_RATES={0x104, 0x7d, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xfd, 0x3, "39137d5e299a3feeb3ad815479c5ba229651cf55ec54e41eee97933e0d8cfed95e56896262e9e8f977fd3e176516321ff174ba9d2c3a3f409c657900fd9c60a08576cd0ed1c319b66aee93e2c322619593e5a6b378fa7e8a62902c74d9624892e8f6e14db2dee2f0f795f4edafaf6578ce74260c5fb7de67fe85350308ccc05a5ad5cddedeb11405e0d93d489b624315c0cd13e57a4cf1faeb84abe1a37a89949334caee2401fb2b50c2c0ef5c5f9dbfb3c3e0150a1ca4da37a2cc264159935c679881917ac749ff1d64b7b5ec713b46a1956fafff1eec7450e8bd5f1da860ea7f15d712512715f25a43ea52ec009fd847742d951ed0e2bb3c"}]}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x184}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000000)
syz_emit_ethernet(0xb6, &(0x7f0000000300)={@local, @local, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x7c, 0x2b, 0x0, @local, @local, {[@hopopts={0x3c}, @dstopts={0x2b, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x10}, @enc_lim={0x4, 0x1, 0x8}]}], {{0x0, 0xfffd, 0x41424344, 0x41424344, 0x0, 0x0, 0x19, 0x2, 0x0, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @md5sig={0x13, 0x12, "0249c9e007342bd348b2f57a13834b13"}, @exp_smc={0xfe, 0x6}, @sack={0x5, 0x12, [0x4, 0xc, 0xe0000000, 0xffffffa3]}, @md5sig={0x13, 0x12, "bfb66967f7907b3cf24edefecbe7fcc0"}, @md5sig={0x13, 0x12, "62b763bd8aa5e356e388f1484e69f8d6"}]}}}}}}}}, 0x0)
r4 = socket(0x40000000015, 0x5, 0x0)
setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4)
recvmmsg(r4, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000012c0)=""/31, 0x1f}, 0x1}], 0x1, 0x60010060, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.events\x00', 0x26e1, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000300)={[{@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@orlov}, {@noload}, {@delalloc}, {@mblk_io_submit}, {@commit}, {@noblock_validity}, {@lazytime}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x477, &(0x7f0000001380)="$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")
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9)
fcntl$dupfd(r7, 0x0, 0xffffffffffffffff)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
mknod$loop(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1)
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000001900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB="400000000101010100000000000000000a001c002000018006000340000000001400018008c301007f000001080002007f0000010c00198008000100", @ANYRES32=r5], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
lsetxattr$security_evm(&(0x7f0000000440)='./file0\x00', &(0x7f0000000500), &(0x7f0000000540)=@v1={0x2, "cdd2738f200782"}, 0x8, 0x3)
sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
r10 = accept$packet(r9, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r11, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000031c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r11, 0x312, 0x8804}, [@IFLA_ADDRESS={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42)

998.878084ms ago: executing program 0 (id=1532):
r0 = perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
mknod(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, 0x480)
r2 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r2, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)

998.617554ms ago: executing program 0 (id=1533):
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000118000280080002002000000004000100080004"], 0x44}}, 0x0)

915.01459ms ago: executing program 0 (id=1534):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000c40)={0x0, 0x7}, &(0x7f0000000c80)=0x8)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
creat(&(0x7f0000000080)='./bus\x00', 0x0)
mount(&(0x7f0000000240)=@filename='./bus\x00', 0x0, &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,')
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000015}, 0x44000)
r4 = syz_open_dev$sg(0x0, 0x0, 0x401)
ioctl$BLKTRACESTOP(r4, 0x1275, 0x0)
r5 = socket(0x2b, 0x80801, 0x1)
listen(r5, 0x10)
ioctl$sock_inet_tcp_SIOCATMARK(r5, 0x8905, 0x0)
openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x800005, 0x32, 0xffffffffffffffff, 0x852ac000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x14, 0x0, &(0x7f0000000080)='GPL\x00', 0x9, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x3}, 0x94)
r6 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r6, &(0x7f00000003c0)=@abs={0x1}, 0x2)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000580)='/sys/power/image_size', 0x1a1081, 0x18)

573.22021ms ago: executing program 5 (id=1535):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xffffffffffffffff, 0xb214}, 0x6018, 0x0, 0x2, 0x6, 0x3fe, 0x7ffffffc, 0x400, 0x0, 0x0, 0x0, 0xea4}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@fallback, 0xffffffffffffffff, 0x24, 0x3}, 0x20)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, 0x0, 0x0)
sendmmsg$unix(r1, 0x0, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800084000000000140005"], 0x5c}}, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), &(0x7f00000016c0)=ANY=[@ANYBLOB="00fb150005592023da92c13cbec174113a3693c45796fbd4a1b5e370c547409729b2ff1f6550b762f30b1f6232916c7993d84290b644bc4ff8b66aac4e7a9125413abd4daffd7cc839c13acd6a5a35531034cead5155c261266d112e0c7b4a4981e8d7f358d7ce5701f06fced801bf21a949a9180c86f8472a3b37da8b0711cd76b99d49b48476d951457edbe0ad848af7c2d0169396c41c3c69569714c7938102142e6e5b12d9da74cc45404706a105838b9ac35092eb8f805840a6459e6ff462af9bed34d173a05ac707c81ec02279ab6b78ddfa7c661bbe349b6bc94f0f5ae38085117e666cda637fd125c9b92d7bd17eb5edf7b6ab31e24482476664dad8a767dfc2f67390fdb2ce4a8ffdba3bb44393d91cb8d7e5971e007d2efaa7631bbeecbf64facec673d6ddbfc29185633b01cea2ae1c7431d49eb42cec1c3b253703f2cce823f4af22f228ddbc16cb10c46e38aabe01137607c8c05858732d1574dcd11d1ecd3cfb8deea654c504e77d12385154e7ff40b8f69db5100c561a124a0ed5c2b7e3de82283152df8c037e0a0069f929fbcd31f75f1e4874dccb9c535ba6246c154c06a1629680c029086632ff34503a4f98208839bbbb5908de17dbc38b4dd1c90efb02d92b26994edb18c5015850a579b2c32da5ecbc7035263c234f62189d758ca41d884febf207340b9d09195dfa5791b620b447b35bfc812de22ca51bd94f6275b6e15fff6afbc49a316a29cd86612a894c435181c572034610cda455b292f2ef672b8cf5251be5b933f5a889c7655eea3d345a8e34ebd451f7cea1313d0b98a2858bc426f8df24a4077bf647357e964d374390fcb467696ed115b63f91cae1dba538438681cc69ae64a8393495f5b5c8109c43d117190d457ea6c43771ba38b7a3ab01bc18429ec393a522516578fb9f2e7bde9bff2d0695a44c3b2747d9f84afa30215815df3701f0638f75d2be6b0e68c8cfa8afcda553b0b4e80b439327677789292a8a320a9e39840d3565dd4f06432d1463002555ede53cbaf59a5afe289d7eeb6a9750e3abc71b11332e300c50c15af2a68206cfc78c9f1e48cb566a6a9094808df4a202233266b83fde29e14e04363a9fa5b099338e9319c5babb329e2aa70b594ae43226bfbc381c32ac0f590a255f2761ee6bf41416752e9a45cbcbc4a1b32cb3fea401cdc84d561f35c244d367d0466d5f44fe7daee2d50a2bf1264aea12db8cb122a42215a88f5b4aa1c773c438c1b47b74cdc92295f89990c47c3ce67a0393a89f70807f7567e68d2e698b41602da9347dc3fa9797ef39896cabc220a4bc5715f817591385e5e648ec6f51c2f179b0880c4c75cd35ad949ffa669c566f246db4b42265e8053cf343d3df5e143e3a36e04c1ce84759d0ec48bcd22e7480f3f003a360ed4f36e4f1688bf588bbc65f4663ed36076d3f7e497b37adb258dbb3cf8b6d02c7c0f058986476f2a44c50da95d2b9dee7beb38909ec25e427305cd3ed81c85f34e7e4be3e6c7e5f4316637b8f7021567522d4d692be502ce25a10512e95f908fe2d7470862bfbec7f0c540e28352b862e72e427a682aa782632663a4132f97569a77b683634b53e6a9c6cd74d90f73271c66a5b224e3a09f2ffb95ddd9a35a7c271ac5c5df87b01b19674afee67f9963f22b1b2737f2fb4f45067580dcdd9843ef1decd6ecfd6a4ef521d5823c183ca2d105216cba349680a02df27863e7af932c92a1f77f72bfb778b5fd0577cd5a3e0c20b98be48e8e7ea4d0d107f20f79948ad28767dbde9b28526a914dc3e7d64de9a97e2123cb4899f7582008a8075de1db6afcc34ecbfcced7cce76db0ca070f262f5f4186758f369113b945df8436ead9cefdd7e193c951cde2f80fbcc731ce971875503079e0e1287d5009358fe5d86a71c7540c6f0958c81009948b12b585eede6b1c25187d0afaf60d10cebdb668708836c362469d2dfe575f6b6bc80b6b7eeaae39c0731a8452e52271a4c498f49be38a046a229c33fa264c328ad9269c75f8d78d1e735c3021bc596d5b751cc563321c6e8f95ff6208e012daa094565a6dfd5a0ae61518f9756e057feeebae7ff948ba79b5b67c6a4f17de2bb2eddeb79b23f9106ff070000000000008bfa989e775afad247b494a90af1c96894190ef25b320d5cc6aa5904471722c5654bc9daabcf4476b1361b25f5e5a76e3e34974305bcecc077bf9f2b01ba08adbb58bc593abbc5e060232b22de912f85609ca35bfcd2d3cee6a4321dd7a58ec75eb9a92356b1059e7f3e4cc16a6288d01fc500244698750ea43ce239d8d2da2f1b6b09401da070baaf776cf7e00b34bf8db33b9b6fec42aaa3a3c916f649f18526ded62bd9c380755a585e8a9f3fa355b045518d7732a826729d16434cf773eb5dd919973943b41f5392aeea358200d808b1c635feaf8afd1daf9e60bcfad97b3a0177d76c4931c2fc9b5a8197103e34982361aa7140e70594d669773b652cd12228742a9b64f2048534db89d820449b47647fd78f562868a21e5984fc2749ed2918e33b02ae49bd24ea3c0299908a68e09cbdbf88ad9ae8c019401d051d6be5e93767616d2533e4eb72362a8ad21184825f397f64d37a0dc9480d782fee114f7cfae55183735091b8992a58c6ec81cd44c29744bb39c3425308ddc2446bec0945fde2b6cc61cd712a5e084eade6cf8b5e6b3511b9d713a2e17e3374682d03fb61d78b4c6b5be738bfa8457644bdf843c748b22ec78814696be55fa0d3fc530ecbf9aaec726f1608299743e5402416b638067deb0606a723415e4a078eebb46e39cfb96ae5ae67f08f84d6b2b096fcf0b8668250e538f3a4e089d3be2b8b7d276c1fe21287892f58160cdcfe8ed9648befd4b71435d93a4937f64e6df5fcec14bbb2f9563f21c8983ee7852ad253328fbec211a25caa0eb38193e3f08e7822c89c514a3049f64f87bd319be8d89ac3d4b11aa0ff2c370a80f9ef15184c9d7f1bfdb0d95fa6c2c25df2186af957a5688bec418391d0163b119e716fe9b1e6190e9d4313ffb075796e2ed3a7ecd92b3edd41e872c0d344216c9c2b1910fb693f8ce59927fbf219fa3ec5bf1062f9c9caa6565daa5e1a52ff1956974dd43da376a2671df9b7cd46c6612bd547e870f2c15432129120fb17abf942026a1e145b9020f755a7eda6b57e131b21697fc61b9eef0aa8bcfb158951300785cdc738d774d31b912a02c64091512f80c97714dbd1cfb5e3528b38fa27459b62034fe979b8dd0b29186c33896ce9346c794e46fdadb34ab96183535cd167f8fbe25fa60c54aa662b0b42645946693519a32125279c84720e923235ddccb9fef997c7b9fac338ff4d7e9304b16be509d00f5ab49402fef28d0701c848e01be2ee40b4e680be4bc7efefcc4ef40078133702fa519182d6cd26f1aee8708eba8c33f013d2c362a53faf0da5a4bfb7589727fe2b957dc8780b4a6ca109bb6208b7f4ae21b276c3aff7dad0faf0d2ec29711d83cea282650ee62257bcfa204fa423704034f1b6f0a40a07255d82c888d5584a501705e4e6ee8b2d6660c4b9585f914e96d2acca17ffc695f52756fcc211d84dfc1184311a3b1bcec0f28bdbaafc368f209d7468e99dc85fd0c4fa4f0250dcdf47437400a3eb84a0141e72dbacae477f73073afa6ce68303244731bb4d60ebceae92f5a2fd0d11e87bf17b58fe27f309d8ceada24e08a4552019bb6535e3c5dbf726a11d86b30db662b46c3efba3dc583d0556a1a9bdb0ece3462391e01f0367191207190f7c0ed9914c775da7820bf728917273591f2818563ba437f74ceb271bc8ad969714c0e0ae3addaf3fb047ad404bc91498c629e5a91264cb19552121ee05c71a01b0f17b6ca0102be48a9be10635b5bc900252fa220731738e7d77cb5c1a5f2f93318d7dc7f9a1a3352501725a4c804570cc87b328587abf1ea1b08f9c76706e5d70f40f79561518a8252239b5fbd4815915868d38513cd5d27e77918f35bc1caf5a80cbdba549445246fd5c9e04209a402b8ebad4f0eec7cfb1fe3a23d9ea768f3ffe39d083eb54e5b896e76a6975199e3beb42320da92da7bd81edaa7e7204ecf6e05913e3aad145c82ae012549baadc2522963dd9282f0f56a784030354f477126f37a2f4f8d91ae5c7bf1f5cc376a8191cf6a6bdc7dd9bae184db80ff8cc2dbb4a8c1871f0f64583eed4c370ce96613f73b2eb499549815607f4e0cb128b5330e7725a44e6fb4361d6d5868566c99fe148bb9511a3f8c29edb57c738935e2944a90a77c02d1ab167de2eddc2d5d3e19a236cb858fbcd4c009eefca49bd7c16f4553113dcc8af12cdc36205602668482e6be4e2658087352cf4c4bb1a0abba4b0d180ad88f6604613b268477fdac724d5b70294647ba18fa35e024085f3acc8a68c53742c4f80166583aa043ad8b10b846655369295c4a1e1ca1a1885a491e75e2d761ddc09e0bcc85af555941b3a63bdbadaa8163487b08d0c9fe1b63f1f4af0449571ea8770ae835de17e6fead7f79b5aa1f2f054e3a8c977bc611c69d45e240b974fa4e4bae6747cc6f007189c214dd406f14e54b6d13daa8ff24a23db4dc3f3e0f1e7ec72a2be5b5d958a88c37736760a033b64ea635c74deee950274a2312dbf183d93aeefea304ecb2157bc767f7f4d426f0d1941cc308cc575d696b390d4001bf709437b8d4c6703630fe762c006b9fd2d31e9d100d28a7d071018e4b5ce7b10c7f01b683b62aa814c1d5db5c6b703f33b056d2ba22d1298dbb16744ebce59a6ca8a7d14eaefde47b1517a5ff1ff06136c4a6e22c6f5202175a93621ff94e0ab4bab3deac41b7f16ed07fea66deb66c85ab2db5e345ae92b12b0ca94e4899680f15b87cdaeeaaba40150804bd9aa18855fb25621adbd81ba68e67a17f6d52a25dd443a9c3eb0e125d7c8563508104a663da4f8d28c7867612744620b049201a6e8e99b1f9a7ffc1ebce48df400016f5931b91a17fcc849435f61ea7effd5e76e19fffc147ecf2a1c933ab20cab8ebe27d37ce01a2f5d0838e85dc3ed8477c00c98bf3365539d2fa1f3fd930b38d52643c04ab1418a9982812c3216ef6318493261fee428754ba7d65910e4d0b0f92c70648cb4bfb2ba449329e314ab46a15ed02fc32155b6d50ad10bd56eaf9202675886b2a198d77db2daba28052d686eb52213e3db1b5c3be529fb8048def2648de476462bd3e06adf88d79a21a8abae78ee98eebebaf8ee119ca26905dad4a04ce61efbfc93ea2a2cb02b3097ad1927d72c1f45d5e0c8bca558c2bc9319f1fe7e4b0bbdbaa2e61c6759c967ca691d673ec0841aaed88f55d25cb7bb5f9d6fc24ddc4fff1d22d0288b9cff7224ac3ff04604ca1b408ac67f262bc1ce4bc1769b2f88600954e0bd4846e67eb0a4876acf9a567678619b01a3dace29f0755f0ed24bc7fde714e9379047bf933d216f58fcc80634a83623e349f5e016b6bad9669a8f54369d62ce8cd2bf85c4ef135973e127eb89a12063af9dea935f4a3bd021c620ac129ed13a978305969780ac046223d768737ebbe41364c919dd1d38ed8f28756f204015c5ec5d0e70a7039161c2a73308f43d36473c1bcc8a0923b87e5d71657be2d4f42be59b1c24357e1a6d1ec06ea68ce88579a7d51a0bf8dc82120d0a26de3f8b9044028fb2c57a3865c93bf1935ef75768f78caa38e670b66ec8108b53a589decc8a37c3afbb87ca6c2a32534be45c415aa4f07e12364000c3a4f8189b5e8a2ace97ab733da7e62ab4c5d96c705aad3e4e8f7cfb00"/4115], 0x1015, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_BIND_MAP(0x23, 0x0, 0x0)
r4 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e00)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x0, 0x10000000, 0xfffffffc, 0x3ff}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
r5 = socket$netlink(0x10, 0x3, 0x10)
mq_notify(r5, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}})
socket$kcm(0x2, 0x3, 0x2)
r6 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r6, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x0, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41)
setsockopt$sock_attach_bpf(r6, 0x84, 0x1e, &(0x7f0000000000), 0x4)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
r7 = socket$kcm(0x2, 0x3, 0x2)
socket$kcm(0x10, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8916, &(0x7f0000000040)={'caif0\x00', @random="0200ac7f7f00"})
socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)

120.043691ms ago: executing program 1 (id=1536):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
close_range(r0, 0xffffffffffffffff, 0x200000000000000)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0}, 0x48)

36.737687ms ago: executing program 5 (id=1537):
pipe(0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r0, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r3 = accept(r0, 0x0, 0x0)
sendmsg$AUDIT_USER_AVC(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[], 0x454}}, 0x0)
shutdown(r3, 0x1)
recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x0, 0x0, 0x0)

0s ago: executing program 0 (id=1538):
syz_mount_image$ext4(&(0x7f0000001680)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10042, &(0x7f00000016c0), 0xfe, 0x270, &(0x7f0000002b00)="$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")
creat(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
unshare(0x22020400)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044095}, 0x8042)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r5, 0x0, 0x80)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20041081}, 0x4000000)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04002bbd7000fedbf673f3df3765c0769773db29ba5b9cf70ad89c2516151e9db856ed8ba60daa01de83c52d2cd75d330bc7a3780baedfb5536b6214a056cf21bd480d60217db756a7914758fef9a64d463b1dc5efdbc01dcfa15100638aacd5974cd78262b496fee7cbebad90537413e3d3a89a4069c47646f4ef14e2f54857dd9371ab1895140c435353db525359967884d6f0e61e6fb4b63a825262875c08"], 0x14}, 0x1, 0x0, 0x0, 0x4044020}, 0x4000000)

kernel console output (not intermixed with test programs):

multicast mode
[   93.461739][ T5770] program syz.3.757 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   93.598216][ T5783] loop3: detected capacity change from 0 to 8192
[   93.639517][ T5789] loop2: detected capacity change from 0 to 512
[   93.654964][ T3295]  loop3: p1 p2 p3 p4
[   93.656433][ T5789] EXT4-fs warning (device loop2): ext4_enable_quotas:7236: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix.
[   93.660340][ T3295] loop3: p3 start 117772289 is beyond EOD, truncated
[   93.674817][ T5789] EXT4-fs (loop2): mount failed
[   93.680732][ T3295] loop3: p4 size 262144 extends beyond EOD, truncated
[   93.696686][ T5783]  loop3: p1 p2 p3 p4
[   93.707395][ T5783] loop3: p3 start 117772289 is beyond EOD, truncated
[   93.714874][ T5783] loop3: p4 size 262144 extends beyond EOD, truncated
[   93.825901][ T5804] vlan2: entered allmulticast mode
[   93.828680][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[   93.832668][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[   93.842489][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[   93.852231][ T5804] veth0_to_bond: entered allmulticast mode
[   93.928436][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[   93.941100][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[   93.952833][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[   93.964850][ T5815] bridge1: entered promiscuous mode
[   93.973760][ T5815] bridge1: entered allmulticast mode
[   93.981711][ T5813] loop3: detected capacity change from 0 to 4096
[   93.991081][ T5818] team0: entered promiscuous mode
[   93.997565][ T5818] team_slave_0: entered promiscuous mode
[   94.003400][ T5818] team_slave_1: entered promiscuous mode
[   94.004616][ T5813] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   94.010451][ T5818] macvlan1: entered promiscuous mode
[   94.029938][ T5818] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   94.050787][ T5813] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.773: corrupted inode contents
[   94.064160][ T5813] EXT4-fs error (device loop3): ext4_dirty_inode:6450: inode #15: comm syz.3.773: mark_inode_dirty error
[   94.076965][ T5813] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.773: corrupted inode contents
[   94.090206][ T5813] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #15: comm syz.3.773: mark_inode_dirty error
[   94.103169][ T5813] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.773: corrupted inode contents
[   94.116546][ T5813] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #15: comm syz.3.773: mark_inode_dirty error
[   94.129533][ T5813] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.773: corrupted inode contents
[   94.134015][ T5823] loop1: detected capacity change from 0 to 8192
[   94.148080][ T5813] EXT4-fs error (device loop3): ext4_truncate:4587: inode #15: comm syz.3.773: mark_inode_dirty error
[   94.160526][ T5813] EXT4-fs error (device loop3) in ext4_setattr:5983: Corrupt filesystem
[   94.169763][ T5824] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.773: corrupted inode contents
[   94.196375][ T5823]  loop1: p1 p2 p3 p4
[   94.214741][ T5823] loop1: p3 start 117772289 is beyond EOD, truncated
[   94.222812][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   94.224236][ T5823] loop1: p4 size 262144 extends beyond EOD, truncated
[   94.279906][   T50] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x13
[   94.369226][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[   94.370965][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[   94.395334][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[   94.528312][ T5859] loop3: detected capacity change from 0 to 4096
[   94.540684][ T5859] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   94.654780][   T28] kauditd_printk_skb: 11 callbacks suppressed
[   94.654812][   T28] audit: type=1400 audit(1772818916.204:629): avc:  denied  { write } for  pid=5858 comm="syz.3.788" path="/187/file0/bus" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   94.693701][   T28] audit: type=1400 audit(1772818916.234:630): avc:  denied  { mounton } for  pid=5858 comm="syz.3.788" path="/187/file0/bus" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   94.716527][   T28] audit: type=1400 audit(1772818916.234:631): avc:  denied  { ioctl } for  pid=5858 comm="syz.3.788" path="/187/file0/bus" dev="loop3" ino=19 ioctlcmd=0x5879 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   94.768476][ T3321] EXT4-fs error (device loop3): __ext4_iget:5378: inode #11: block 127754: comm syz-executor: invalid block
[   94.793711][ T3321] EXT4-fs error (device loop3): __ext4_iget:5378: inode #11: block 127754: comm syz-executor: invalid block
[   95.045720][ T5829] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   95.102268][ T4211] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   95.118513][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   95.141691][ T4211] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.207725][ T4211] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   95.235659][ T4211] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.352173][ T4211] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   95.396836][ T4211] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.514161][ T4211] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   95.543846][ T4211] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.659511][   T28] audit: type=1400 audit(1772818917.204:632): avc:  denied  { read } for  pid=3037 comm="dhcpcd" name="n26" dev="tmpfs" ino=5304 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   95.688408][ T4211] bridge0: port 3(batadv0) entered disabled state
[   95.699102][ T4211] bridge_slave_1: left allmulticast mode
[   95.710771][ T4211] bridge_slave_1: left promiscuous mode
[   95.716998][ T4211] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.725193][   T28] audit: type=1400 audit(1772818917.204:633): avc:  denied  { open } for  pid=3037 comm="dhcpcd" path="/run/udev/data/n26" dev="tmpfs" ino=5304 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   95.925763][   T28] audit: type=1400 audit(1772818917.204:634): avc:  denied  { getattr } for  pid=3037 comm="dhcpcd" path="/run/udev/data/n26" dev="tmpfs" ino=5304 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   96.436747][ T5902] loop0: detected capacity change from 0 to 764
[   96.451137][ T5902] iso9660: Unknown parameter 'iocharsturkish'
[   96.608096][ T4211] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   96.671466][ T4211] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   96.738662][ T4211] bond0 (unregistering): Released all slaves
[   96.747920][ T4211] bond1 (unregistering): Released all slaves
[   96.862949][ T5920] validate_nla: 5 callbacks suppressed
[   96.862988][ T5920] netlink: 'syz.0.807': attribute type 36 has an invalid length.
[   96.907711][ T5921] unsupported nlmsg_type 40
[   96.915934][ T5922] netlink: 'syz.0.807': attribute type 10 has an invalid length.
[   96.970983][   T28] audit: type=1400 audit(1772818918.514:635): avc:  denied  { write } for  pid=5913 comm="syz.0.807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[   97.016736][ T5920] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   97.027891][ T5920] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   97.043334][ T5922] macvlan1: entered allmulticast mode
[   97.050434][ T5922] veth1_vlan: entered allmulticast mode
[   97.059081][ T5922] team0: Port device macvlan1 added
[   97.173530][ T4211] hsr_slave_0: left promiscuous mode
[   97.208756][ T4211] hsr_slave_1: left promiscuous mode
[   97.266228][ T4211] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   97.366041][ T4211] batman_adv: batadv0: Removing interface: batadv_slave_0
[   97.431138][ T4211] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   97.446895][ T4211] batman_adv: batadv0: Removing interface: batadv_slave_1
[   97.470598][   T28] audit: type=1400 audit(1772818919.014:636): avc:  denied  { create } for  pid=5917 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   97.498885][ T4211] veth1_macvtap: left promiscuous mode
[   97.516779][ T4211] veth0_macvtap: left promiscuous mode
[   97.533172][   T28] audit: type=1400 audit(1772818919.014:637): avc:  denied  { write } for  pid=5917 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=5352 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   97.540478][ T4211] veth1_vlan: left promiscuous mode
[   97.604888][   T28] audit: type=1400 audit(1772818919.014:638): avc:  denied  { append } for  pid=5917 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=5352 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   97.668199][ T4211] veth0_vlan: left promiscuous mode
[   97.713301][ T5943] __nla_validate_parse: 12 callbacks suppressed
[   97.713336][ T5943] netlink: 60 bytes leftover after parsing attributes in process `syz.2.810'.
[   97.796900][ T5951] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[   97.848733][ T4211] team0 (unregistering): Port device team_slave_1 removed
[   97.879494][ T4211] team0 (unregistering): Port device team_slave_0 removed
[   98.025093][ T5943] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[   98.044136][ T5943] bridge3: entered promiscuous mode
[   98.046537][ T5965] loop0: detected capacity change from 0 to 128
[   98.050571][ T5943] bridge3: entered allmulticast mode
[   98.163436][ T5967] netlink: 60 bytes leftover after parsing attributes in process `syz.4.819'.
[   98.260358][ T5958] netlink: 'syz.1.816': attribute type 29 has an invalid length.
[   98.268742][ T5961] netlink: 'syz.1.816': attribute type 29 has an invalid length.
[   98.572124][ T5986] loop2: detected capacity change from 0 to 1024
[   98.592753][ T5986] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   98.606876][ T5986] forcing mempool usage for bio_alloc_bioset+0x453/0x9a0
[   98.631918][ T5967] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[   98.644605][ T5967] bridge2: entered promiscuous mode
[   98.650429][ T5967] bridge2: entered allmulticast mode
[   98.682855][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.792095][ T5883] chnl_net:caif_netlink_parms(): no params data found
[   98.816456][ T6001] netlink: 'syz.2.829': attribute type 29 has an invalid length.
[   98.839777][ T6010] loop1: detected capacity change from 0 to 128
[   98.855364][ T6001] netlink: 'syz.2.829': attribute type 29 has an invalid length.
[   98.865368][ T6010] FAT-fs (loop1): bogus number of reserved sectors
[   98.873666][ T6010] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[   98.891481][ T6001] netlink: 500 bytes leftover after parsing attributes in process `syz.2.829'.
[   98.905549][ T6010] FAT-fs (loop1): Can't find a valid FAT filesystem
[   98.932439][ T6019] selection: kmalloc() failed
[   98.951417][ T4211] IPVS: stop unused estimator thread 0...
[   98.962840][ T5883] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.991294][ T6026] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[   98.997851][ T6026] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   99.011844][ T6026] vhci_hcd vhci_hcd.0: Device attached
[   99.013861][ T5883] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.020345][ T6027] vhci_hcd: connection closed
[   99.026775][   T12] vhci_hcd vhci_hcd.2: stop threads
[   99.048922][ T5883] bridge_slave_0: entered allmulticast mode
[   99.056843][ T5883] bridge_slave_0: entered promiscuous mode
[   99.064032][ T5883] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.071329][ T5883] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.079449][ T5883] bridge_slave_1: entered allmulticast mode
[   99.086415][ T5883] bridge_slave_1: entered promiscuous mode
[   99.105275][ T5883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   99.117318][ T5883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   99.139004][ T5883] team0: Port device team_slave_0 added
[   99.155879][   T12] vhci_hcd vhci_hcd.2: release socket
[   99.163637][   T12] vhci_hcd vhci_hcd.2: disconnect device
[   99.205606][ T5883] team0: Port device team_slave_1 added
[   99.214734][   T23] vhci_hcd vhci_hcd.2: vhci_device speed not set
[   99.239788][ T5883] batman_adv: batadv0: Adding interface: batadv_slave_0
[   99.353602][ T5883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   99.381160][ T5883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   99.393502][ T6059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.838'.
[   99.403244][ T5883] batman_adv: batadv0: Adding interface: batadv_slave_1
[   99.411662][ T5883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   99.437893][ T5883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   99.488553][ T5883] hsr_slave_0: entered promiscuous mode
[   99.512662][ T5883] hsr_slave_1: entered promiscuous mode
[   99.532761][ T5883] debugfs: 'hsr0' already exists in 'hsr'
[   99.552387][ T5883] Cannot create hsr debugfs directory
[   99.659454][ T6072] netlink: 'syz.2.840': attribute type 4 has an invalid length.
[   99.867341][ T5883] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   99.890155][ T5883] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   99.901563][ T6082] netlink: 'syz.2.842': attribute type 29 has an invalid length.
[   99.913864][ T5883] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   99.935057][ T6082] netlink: 'syz.2.842': attribute type 29 has an invalid length.
[   99.943412][ T5883] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   99.950729][ T6082] netlink: 500 bytes leftover after parsing attributes in process `syz.2.842'.
[  100.018618][ T5883] 8021q: adding VLAN 0 to HW filter on device bond0
[  100.034696][ T5883] 8021q: adding VLAN 0 to HW filter on device team0
[  100.051855][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.059400][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  100.097926][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.105274][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  100.325897][ T6114] loop0: detected capacity change from 0 to 128
[  100.345493][ T6114] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  100.370286][ T6114] ext4 filesystem being mounted at /139/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  100.427445][ T6120] loop1: detected capacity change from 0 to 128
[  100.440115][ T6120] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  100.457257][ T6120] ext4 filesystem being mounted at /182/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  100.503688][ T6123] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5)
[  100.510245][ T6123] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  100.518345][ T6123] vhci_hcd vhci_hcd.0: Device attached
[  100.523763][ T5883] 8021q: adding VLAN 0 to HW filter on device batadv0
[  100.532243][ T6125] vhci_hcd: connection closed
[  100.532434][ T4209] vhci_hcd vhci_hcd.4: stop threads
[  100.543964][ T4209] vhci_hcd vhci_hcd.4: release socket
[  100.549371][ T4209] vhci_hcd vhci_hcd.4: disconnect device
[  100.971665][ T6120] netlink: 136 bytes leftover after parsing attributes in process `syz.1.851'.
[  101.197990][ T6145] netlink: 'syz.4.854': attribute type 29 has an invalid length.
[  101.228982][ T5883] veth0_vlan: entered promiscuous mode
[  101.234699][ T6145] netlink: 500 bytes leftover after parsing attributes in process `syz.4.854'.
[  101.257475][ T5883] veth1_vlan: entered promiscuous mode
[  101.310858][ T5883] veth0_macvtap: entered promiscuous mode
[  101.337125][ T5883] veth1_macvtap: entered promiscuous mode
[  101.381524][ T5883] batman_adv: batadv0: Interface activated: batadv_slave_0
[  101.409576][ T5883] batman_adv: batadv0: Interface activated: batadv_slave_1
[  101.435983][ T4192] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  101.528895][ T3311] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  101.546762][ T4192] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  101.572318][ T6155] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[  101.579018][ T6155] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  101.587932][ T4192] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  101.627562][   T28] kauditd_printk_skb: 103 callbacks suppressed
[  101.627578][   T28] audit: type=1400 audit(1772818923.164:742): avc:  denied  { mounton } for  pid=5883 comm="syz-executor" path="/root/syzkaller.oBvSOz/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=14165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[  101.668456][ T4192] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  101.687877][ T6155] vhci_hcd vhci_hcd.0: Device attached
[  101.721523][ T6156] vhci_hcd: connection closed
[  101.727993][ T4192] vhci_hcd vhci_hcd.2: stop threads
[  101.783072][ T4192] vhci_hcd vhci_hcd.2: release socket
[  101.807862][ T4192] vhci_hcd vhci_hcd.2: disconnect device
[  101.873670][ T3382] vhci_hcd vhci_hcd.2: vhci_device speed not set
[  102.279861][ T6172] loop5: detected capacity change from 0 to 8192
[  102.365935][ T6172]  loop5: p1 p2 p3 p4
[  102.371307][ T6172] loop5: p3 start 117772289 is beyond EOD, truncated
[  102.388052][ T3310] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  102.438663][ T6172] loop5: p4 size 262144 extends beyond EOD, truncated
[  102.557463][ T6182] netlink: 60 bytes leftover after parsing attributes in process `syz.0.862'.
[  102.656684][ T6186] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[  102.663310][ T6186] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  102.693798][ T6186] vhci_hcd vhci_hcd.0: Device attached
[  102.716079][ T6182] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  102.729711][ T6188] vhci_hcd: connection closed
[  102.729995][   T12] vhci_hcd vhci_hcd.2: stop threads
[  102.737406][ T6182] bridge3: entered promiscuous mode
[  102.746946][   T12] vhci_hcd vhci_hcd.2: release socket
[  102.746973][   T12] vhci_hcd vhci_hcd.2: disconnect device
[  102.762846][ T6182] bridge3: entered allmulticast mode
[  102.943613][ T3382] vhci_hcd vhci_hcd.2: vhci_device speed not set
[  102.986263][ T6196] validate_nla: 1 callbacks suppressed
[  102.986281][ T6196] netlink: 'syz.4.866': attribute type 29 has an invalid length.
[  103.006704][ T6196] netlink: 'syz.4.866': attribute type 29 has an invalid length.
[  103.025364][ T6196] netlink: 500 bytes leftover after parsing attributes in process `syz.4.866'.
[  103.090867][ T6202] loop1: detected capacity change from 0 to 512
[  103.100255][ T6202] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002]
[  103.109605][ T6202] System zones: 1-12
[  103.115079][ T6202] EXT4-fs (loop1): orphan cleanup on readonly fs
[  103.121585][ T6202] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.870: invalid indirect mapped block 8 (level 2)
[  103.135826][ T6202] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  103.143608][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  103.159215][    C1] EXT4-fs (loop1): initial error at time 1772818924: ext4_free_branches:1023: inode 11
[  103.169024][    C1] EXT4-fs (loop1): last error at time 1772818924: ext4_free_branches:1023: inode 11
[  103.183156][ T6202] EXT4-fs (loop1): 1 truncate cleaned up
[  103.190807][ T6202] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  103.368567][ T6224] loop0: detected capacity change from 0 to 128
[  103.484880][ T6228] netlink: 'syz.4.882': attribute type 29 has an invalid length.
[  103.498317][ T6228] netlink: 'syz.4.882': attribute type 29 has an invalid length.
[  103.518532][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.521483][ T6212] loop5: detected capacity change from 0 to 512
[  103.529382][ T6228] netlink: 500 bytes leftover after parsing attributes in process `syz.4.882'.
[  103.718004][ T6212] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  103.818848][ T6246] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5)
[  103.825411][ T6246] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  103.858503][ T6246] vhci_hcd vhci_hcd.0: Device attached
[  103.865411][ T6212] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  103.887394][ T6247] vhci_hcd: connection closed
[  103.889737][   T12] vhci_hcd vhci_hcd.1: stop threads
[  103.901555][   T12] vhci_hcd vhci_hcd.1: release socket
[  103.908085][   T12] vhci_hcd vhci_hcd.1: disconnect device
[  103.938914][ T6255] loop2: detected capacity change from 0 to 164
[  103.964647][ T6254] netlink: 60 bytes leftover after parsing attributes in process `syz.0.889'.
[  104.037493][ T6254] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  104.049824][ T6212] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  104.063006][ T6254] bridge3: entered promiscuous mode
[  104.091635][ T6255] ISOFS: unable to read i-node block
[  104.091649][ T6255] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  104.092196][   T28] audit: type=1400 audit(1772818925.634:743): avc:  denied  { mount } for  pid=6253 comm="syz.2.890" name="/" dev="loop2" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1
[  104.098653][ T6255] iso9660: Corrupted directory entry in block 2 of inode 1920
[  104.099821][ T6255] ISOFS: unable to read i-node block
[  104.175912][ T6260] netlink: 12 bytes leftover after parsing attributes in process `syz.4.891'.
[  104.175980][ T6260] netlink: 24 bytes leftover after parsing attributes in process `syz.4.891'.
[  104.218336][ T6254] bridge3: entered allmulticast mode
[  104.235283][ T6259] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  104.244017][   T28] audit: type=1400 audit(1772818925.794:744): avc:  denied  { unmount } for  pid=3318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1
[  104.487544][ T5883] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.549120][ T6273] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5)
[  104.555769][ T6273] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  104.564846][ T6273] vhci_hcd vhci_hcd.0: Device attached
[  104.576306][ T6274] vhci_hcd: connection closed
[  104.580177][   T50] vhci_hcd vhci_hcd.1: stop threads
[  104.628735][   T50] vhci_hcd vhci_hcd.1: release socket
[  104.636216][   T50] vhci_hcd vhci_hcd.1: disconnect device
[  104.879124][ T6282] netlink: 'syz.4.896': attribute type 29 has an invalid length.
[  104.930995][   T28] audit: type=1326 audit(1772818926.464:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6279 comm="syz.0.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94de82c799 code=0x7ffc0000
[  105.013137][ T6284] netlink: 'syz.4.896': attribute type 29 has an invalid length.
[  105.021320][ T6283] loop0: detected capacity change from 0 to 1024
[  105.036541][ T6282] netlink: 500 bytes leftover after parsing attributes in process `syz.4.896'.
[  105.047150][   T28] audit: type=1326 audit(1772818926.474:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6279 comm="syz.0.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94de82c799 code=0x7ffc0000
[  105.072731][   T28] audit: type=1326 audit(1772818926.474:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6279 comm="syz.0.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f94de82c799 code=0x7ffc0000
[  105.106902][ T6283] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  105.124926][   T28] audit: type=1326 audit(1772818926.474:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6279 comm="syz.0.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f94de82c502 code=0x7ffc0000
[  105.148669][   T28] audit: type=1326 audit(1772818926.514:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6279 comm="syz.0.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f94de7ecfce code=0x7ffc0000
[  105.172439][   T28] audit: type=1326 audit(1772818926.564:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6279 comm="syz.0.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f94de82c5c7 code=0x7ffc0000
[  105.195944][   T28] audit: type=1326 audit(1772818926.564:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6279 comm="syz.0.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f94de7ecfce code=0x7ffc0000
[  105.234900][ T6290] loop1: detected capacity change from 0 to 128
[  105.267968][ T6290] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  105.280983][ T6290] ext4 filesystem being mounted at /193/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  105.441447][ T6292] loop4: detected capacity change from 0 to 8192
[  105.644208][ T3295]  loop4: p1 < > p2 p4 < p5 >
[  105.655453][ T3295] loop4: partition table partially beyond EOD, truncated
[  105.736018][ T3295] loop4: p1 start 134217728 is beyond EOD, truncated
[  105.793318][ T3295] loop4: p2 size 591360 extends beyond EOD, truncated
[  105.864416][ T3295] loop4: p5 size 591360 extends beyond EOD, truncated
[  106.440018][ T6292]  loop4: p1 < > p2 p4 < p5 >
[  106.444990][ T6292] loop4: partition table partially beyond EOD, truncated
[  106.462372][ T6292] loop4: p1 start 134217728 is beyond EOD, truncated
[  106.479604][ T6292] loop4: p2 size 591360 extends beyond EOD, truncated
[  106.524422][ T6292] loop4: p5 size 591360 extends beyond EOD, truncated
[  106.597029][ T6310] loop2: detected capacity change from 0 to 128
[  106.686527][ T6310] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  106.728574][ T6309] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.736038][ T6309] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.755926][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.779916][ T6310] ext4 filesystem being mounted at /178/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  107.101230][ T6309] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  107.183142][ T6309] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  107.290053][ T6321] FAULT_INJECTION: forcing a failure.
[  107.290053][ T6321] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  107.326296][ T3311] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  107.349171][ T6321] CPU: 1 UID: 0 PID: 6321 Comm: syz.4.906 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  107.349209][ T6321] Tainted: [W]=WARN
[  107.349217][ T6321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  107.349230][ T6321] Call Trace:
[  107.349237][ T6321]  <TASK>
[  107.349279][ T6321]  __dump_stack+0x1d/0x30
[  107.349309][ T6321]  dump_stack_lvl+0x95/0xd0
[  107.349405][ T6321]  dump_stack+0x15/0x1b
[  107.349481][ T6321]  should_fail_ex+0x263/0x280
[  107.349507][ T6321]  should_fail+0xb/0x20
[  107.349528][ T6321]  should_fail_usercopy+0x1a/0x20
[  107.349555][ T6321]  _copy_to_user+0x20/0xa0
[  107.349652][ T6321]  simple_read_from_buffer+0xb5/0x130
[  107.349677][ T6321]  proc_fail_nth_read+0x10e/0x150
[  107.349710][ T6321]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  107.349774][ T6321]  vfs_read+0x1ab/0x7f0
[  107.349807][ T6321]  ? __rcu_read_unlock+0x4e/0x70
[  107.349830][ T6321]  ? __fget_files+0x184/0x1c0
[  107.349855][ T6321]  ? mutex_lock+0x57/0x90
[  107.349948][ T6321]  ksys_read+0xdc/0x1a0
[  107.349995][ T6321]  __x64_sys_read+0x40/0x50
[  107.350056][ T6321]  x64_sys_call+0x2886/0x3020
[  107.350094][ T6321]  do_syscall_64+0x12c/0x370
[  107.350116][ T6321]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  107.350140][ T6321] RIP: 0033:0x7fc32b0ecfce
[  107.350158][ T6321] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  107.350202][ T6321] RSP: 002b:00007fc329b7efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  107.350225][ T6321] RAX: ffffffffffffffda RBX: 00007fc329b7f6c0 RCX: 00007fc32b0ecfce
[  107.350240][ T6321] RDX: 000000000000000f RSI: 00007fc329b7f0a0 RDI: 0000000000000004
[  107.350255][ T6321] RBP: 00007fc329b7f090 R08: 0000000000000000 R09: 0000000000000000
[  107.350337][ T6321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  107.350351][ T6321] R13: 00007fc32b3a6038 R14: 00007fc32b3a5fa0 R15: 00007ffd17321328
[  107.350372][ T6321]  </TASK>
[  107.627389][ T6322] netlink: 136 bytes leftover after parsing attributes in process `syz.2.903'.
[  107.672223][ T6324] netlink: 60 bytes leftover after parsing attributes in process `syz.1.907'.
[  107.691249][ T6317] loop0: detected capacity change from 0 to 512
[  107.735352][ T6317] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  107.747243][ T6317] EXT4-fs (loop0): 1 truncate cleaned up
[  107.754414][ T6317] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  107.904134][   T12] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  107.913302][   T12] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  107.924538][   T12] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  107.936225][ T3318] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  108.057409][ T6324] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  108.070412][ T6324] bridge2: entered promiscuous mode
[  108.078709][ T6324] bridge2: entered allmulticast mode
[  108.123153][ T6337] netlink: 596 bytes leftover after parsing attributes in process `syz.5.909'.
[  108.150968][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.247496][   T12] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  108.263882][ T6331] netlink: 'syz.5.909': attribute type 29 has an invalid length.
[  108.282251][ T6335] netlink: 'syz.5.909': attribute type 29 has an invalid length.
[  108.429462][   T28] kauditd_printk_skb: 13 callbacks suppressed
[  108.429487][   T28] audit: type=1400 audit(1772818929.974:765): avc:  denied  { write } for  pid=6346 comm="syz.5.913" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  108.466440][ T6347] netlink: 'syz.5.913': attribute type 63 has an invalid length.
[  108.477990][ T6347] netlink: 'syz.5.913': attribute type 27 has an invalid length.
[  108.568616][ T6352] delete_channel: no stack
[  108.696156][ T6367] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  108.696156][ T6367] The task syz.1.916 (6367) triggered the difference, watch for misbehavior.
[  108.902590][ T6377] loop4: detected capacity change from 0 to 512
[  108.913354][ T6377] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  108.926606][ T6377] EXT4-fs (loop4): 1 truncate cleaned up
[  108.932905][ T6377] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  108.946945][ T6383] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[  108.953483][ T6383] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  108.961960][ T6383] vhci_hcd vhci_hcd.0: Device attached
[  108.970575][ T6384] vhci_hcd: connection closed
[  108.970809][   T50] vhci_hcd vhci_hcd.2: stop threads
[  108.980870][   T50] vhci_hcd vhci_hcd.2: release socket
[  108.987200][   T50] vhci_hcd vhci_hcd.2: disconnect device
[  109.112516][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.488202][ T6394] FAULT_INJECTION: forcing a failure.
[  109.488202][ T6394] name failslab, interval 1, probability 0, space 0, times 0
[  109.509246][ T6397] netlink: 4 bytes leftover after parsing attributes in process `syz.1.929'.
[  109.510512][ T6390] loop0: detected capacity change from 0 to 512
[  109.518489][ T6397] batman_adv: batadv0: Removing interface: batadv_slave_0
[  109.520453][ T6394] CPU: 0 UID: 0 PID: 6394 Comm: syz.2.928 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  109.520557][ T6394] Tainted: [W]=WARN
[  109.520564][ T6394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  109.520577][ T6394] Call Trace:
[  109.520583][ T6394]  <TASK>
[  109.520591][ T6394]  __dump_stack+0x1d/0x30
[  109.520619][ T6394]  dump_stack_lvl+0x95/0xd0
[  109.520711][ T6394]  dump_stack+0x15/0x1b
[  109.520732][ T6394]  should_fail_ex+0x263/0x280
[  109.520758][ T6394]  should_failslab+0x8c/0xb0
[  109.520780][ T6394]  __kmalloc_noprof+0xb8/0x4e0
[  109.520803][ T6394]  ? nf_tables_newrule+0xd77/0x16e0
[  109.520833][ T6394]  nf_tables_newrule+0xd77/0x16e0
[  109.520883][ T6394]  nfnetlink_rcv+0xc1e/0x1720
[  109.520928][ T6394]  netlink_unicast+0x5c0/0x690
[  109.520956][ T6394]  netlink_sendmsg+0x5c8/0x6f0
[  109.521048][ T6394]  ? __pfx_netlink_sendmsg+0x10/0x10
[  109.521087][ T6394]  ____sys_sendmsg+0x563/0x5b0
[  109.521176][ T6394]  ___sys_sendmsg+0x195/0x1e0
[  109.521214][ T6394]  __x64_sys_sendmsg+0xd4/0x160
[  109.521245][ T6394]  x64_sys_call+0x194c/0x3020
[  109.521327][ T6394]  do_syscall_64+0x12c/0x370
[  109.521349][ T6394]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.521371][ T6394] RIP: 0033:0x7fd7ccb4c799
[  109.521459][ T6394] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  109.521515][ T6394] RSP: 002b:00007fd7cb5a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  109.521537][ T6394] RAX: ffffffffffffffda RBX: 00007fd7ccdc5fa0 RCX: 00007fd7ccb4c799
[  109.521618][ T6394] RDX: 0000000020004010 RSI: 0000200000000040 RDI: 0000000000000003
[  109.521632][ T6394] RBP: 00007fd7cb5a7090 R08: 0000000000000000 R09: 0000000000000000
[  109.521645][ T6394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  109.521658][ T6394] R13: 00007fd7ccdc6038 R14: 00007fd7ccdc5fa0 R15: 00007ffe324577b8
[  109.521679][ T6394]  </TASK>
[  109.580948][ T6371] delete_channel: no stack
[  109.580996][ T6371] delete_channel: no stack
[  109.716357][ T6407] loop4: detected capacity change from 0 to 512
[  109.728087][ T6407] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  109.731135][   T28] audit: type=1400 audit(1772818931.234:766): avc:  denied  { audit_write } for  pid=6404 comm="syz.4.931" capability=29  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  110.023587][ T6397] batman_adv: batadv0: Removing interface: batadv_slave_1
[  110.133496][ T3312] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000.
[  110.144505][ T6397] bridge0: port 1(batadv0) entered disabled state
[  110.207340][ T6411] netlink: 'syz.4.933': attribute type 13 has an invalid length.
[  110.522991][ T6413] loop5: detected capacity change from 0 to 164
[  110.534592][ T6413] iso9660: Unknown parameter '017777777777777777777770x000000000000ee000xffffffffffffffff'
[  110.635659][ T6416] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1544 sclass=netlink_route_socket pid=6416 comm=syz.2.934
[  110.851621][ T6390] EXT4-fs (loop0): 1 orphan inode deleted
[  110.883061][ T6390] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  110.943620][   T28] audit: type=1400 audit(1772818932.484:767): avc:  denied  { create } for  pid=6423 comm="syz.4.938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[  111.018001][   T28] audit: type=1400 audit(1772818932.524:768): avc:  denied  { sys_admin } for  pid=6423 comm="syz.4.938" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[  111.497421][ T6448] netlink: 12 bytes leftover after parsing attributes in process `syz.1.940'.
[  111.610371][   T28] audit: type=1326 audit(1772818933.154:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6452 comm="syz.1.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bb9b7c799 code=0x7ffc0000
[  111.730532][   T28] audit: type=1326 audit(1772818933.184:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6452 comm="syz.1.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7f0bb9b7c799 code=0x7ffc0000
[  111.853610][   T28] audit: type=1326 audit(1772818933.184:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6452 comm="syz.1.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bb9b7c799 code=0x7ffc0000
[  111.919010][   T28] audit: type=1326 audit(1772818933.194:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6452 comm="syz.1.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bb9b7c799 code=0x7ffc0000
[  112.038799][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.051848][ T6478] netlink: 26 bytes leftover after parsing attributes in process `syz.1.944'.
[  112.179701][ T6492] netlink: 16 bytes leftover after parsing attributes in process `syz.5.948'.
[  112.221797][   T28] audit: type=1400 audit(1772819189.769:773): avc:  denied  { getopt } for  pid=6490 comm="syz.5.948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  112.266698][ T6499] SET target dimension over the limit!
[  112.404674][   T28] audit: type=1400 audit(1772819189.939:774): avc:  denied  { listen } for  pid=6508 comm="syz.1.953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  112.469685][ T6512] FAULT_INJECTION: forcing a failure.
[  112.469685][ T6512] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  112.507413][ T6515] loop5: detected capacity change from 0 to 128
[  112.523185][ T6512] CPU: 0 UID: 0 PID: 6512 Comm: syz.1.955 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  112.523220][ T6512] Tainted: [W]=WARN
[  112.523228][ T6512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  112.523241][ T6512] Call Trace:
[  112.523294][ T6512]  <TASK>
[  112.523302][ T6512]  __dump_stack+0x1d/0x30
[  112.523331][ T6512]  dump_stack_lvl+0x95/0xd0
[  112.523366][ T6512]  dump_stack+0x15/0x1b
[  112.523389][ T6512]  should_fail_ex+0x263/0x280
[  112.523418][ T6512]  should_fail+0xb/0x20
[  112.523441][ T6512]  should_fail_usercopy+0x1a/0x20
[  112.523540][ T6512]  _copy_from_user+0x1c/0xb0
[  112.523681][ T6512]  ___sys_sendmsg+0xc1/0x1e0
[  112.523751][ T6512]  __x64_sys_sendmsg+0xd4/0x160
[  112.523839][ T6512]  x64_sys_call+0x194c/0x3020
[  112.523871][ T6512]  do_syscall_64+0x12c/0x370
[  112.523894][ T6512]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  112.523984][ T6512] RIP: 0033:0x7f0bb9b7c799
[  112.524005][ T6512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  112.524067][ T6512] RSP: 002b:00007f0bb85d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  112.524208][ T6512] RAX: ffffffffffffffda RBX: 00007f0bb9df5fa0 RCX: 00007f0bb9b7c799
[  112.524268][ T6512] RDX: 0000000000000040 RSI: 0000200000000180 RDI: 0000000000000003
[  112.524282][ T6512] RBP: 00007f0bb85d7090 R08: 0000000000000000 R09: 0000000000000000
[  112.524305][ T6512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  112.524317][ T6512] R13: 00007f0bb9df6038 R14: 00007f0bb9df5fa0 R15: 00007ffdf86d3938
[  112.524392][ T6512]  </TASK>
[  112.703995][ T6517] loop0: detected capacity change from 0 to 128
[  112.724914][ T6517] FAULT_INJECTION: forcing a failure.
[  112.724914][ T6517] name failslab, interval 1, probability 0, space 0, times 0
[  112.760411][ T6517] CPU: 1 UID: 0 PID: 6517 Comm: syz.0.957 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  112.760459][ T6517] Tainted: [W]=WARN
[  112.760465][ T6517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  112.760477][ T6517] Call Trace:
[  112.760483][ T6517]  <TASK>
[  112.760527][ T6517]  __dump_stack+0x1d/0x30
[  112.760553][ T6517]  dump_stack_lvl+0x95/0xd0
[  112.760633][ T6517]  dump_stack+0x15/0x1b
[  112.760654][ T6517]  should_fail_ex+0x263/0x280
[  112.760676][ T6517]  should_failslab+0x8c/0xb0
[  112.760781][ T6517]  kmem_cache_alloc_lru_noprof+0x6c/0x410
[  112.760860][ T6517]  ? __d_alloc+0x37/0x340
[  112.760887][ T6517]  __d_alloc+0x37/0x340
[  112.760916][ T6517]  ? __rcu_read_unlock+0x4e/0x70
[  112.760982][ T6517]  d_alloc_parallel+0x54/0xce0
[  112.761027][ T6517]  ? __d_lookup_rcu_op_compare+0x234/0x270
[  112.761061][ T6517]  ? avc_has_perm_noaudit+0xab/0x130
[  112.761168][ T6517]  ? lockref_get_not_dead+0x120/0x1c0
[  112.761278][ T6517]  ? selinux_inode_permission+0x6d1/0x7d0
[  112.761315][ T6517]  ? __rcu_read_unlock+0x4e/0x70
[  112.761346][ T6517]  ? try_to_unlazy+0x39d/0x580
[  112.761378][ T6517]  __lookup_slow+0x96/0x260
[  112.761475][ T6517]  lookup_slow+0x3c/0x60
[  112.761499][ T6517]  link_path_walk+0x946/0xe30
[  112.761602][ T6517]  __filename_parentat+0x1a4/0x450
[  112.761639][ T6517]  filename_renameat2+0x14f/0x6e0
[  112.761665][ T6517]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  112.761692][ T6517]  ? should_fail_ex+0xd9/0x280
[  112.761783][ T6517]  ? should_fail_ex+0xd9/0x280
[  112.761813][ T6517]  __se_sys_renameat2+0x4f/0x1c0
[  112.761841][ T6517]  __x64_sys_renameat2+0x67/0x80
[  112.761892][ T6517]  x64_sys_call+0x2a12/0x3020
[  112.761916][ T6517]  do_syscall_64+0x12c/0x370
[  112.761938][ T6517]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  112.761960][ T6517] RIP: 0033:0x7f94de82c799
[  112.762013][ T6517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  112.762034][ T6517] RSP: 002b:00007f94dd27f028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c
[  112.762057][ T6517] RAX: ffffffffffffffda RBX: 00007f94deaa5fa0 RCX: 00007f94de82c799
[  112.762073][ T6517] RDX: ffffffffffffff9c RSI: 0000200000000200 RDI: ffffffffffffff9c
[  112.762159][ T6517] RBP: 00007f94dd27f090 R08: 0000000000000002 R09: 0000000000000000
[  112.762174][ T6517] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001
[  112.762252][ T6517] R13: 00007f94deaa6038 R14: 00007f94deaa5fa0 R15: 00007fff9c5ea5f8
[  112.762274][ T6517]  </TASK>
[  113.077901][ T6526] netlink: 16628 bytes leftover after parsing attributes in process `syz.0.961'.
[  113.123109][ T6524] bond2: entered promiscuous mode
[  113.272738][ T6550] loop0: detected capacity change from 0 to 128
[  113.321849][ T6550] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  113.335643][ T6550] ext4 filesystem being mounted at /156/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  113.503040][ T6568] netlink: 'syz.4.969': attribute type 15 has an invalid length.
[  113.943168][ T6571] loop2: detected capacity change from 0 to 8192
[  113.966505][ T6573] netlink: 4 bytes leftover after parsing attributes in process `syz.4.971'.
[  113.982133][ T6574] netlink: 28 bytes leftover after parsing attributes in process `syz.2.970'.
[  114.021767][ T3295]  loop2: p1 p2 p3 p4
[  114.141847][ T3295] loop2: p1 size 196608 extends beyond EOD, truncated
[  114.149520][ T6573] netlink: 12 bytes leftover after parsing attributes in process `syz.4.971'.
[  114.192385][ T3295] loop2: p2 size 150994944 extends beyond EOD, truncated
[  114.200504][ T3295] loop2: p3 size 66846464 extends beyond EOD, truncated
[  114.259670][ T6571] loop_reread_partitions: partition scan of loop2 () failed (rc=-16)
[  114.305254][ T6574] netlink: 24 bytes leftover after parsing attributes in process `syz.2.970'.
[  114.351587][ T6579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.971'.
[  114.365928][ T6578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.970'.
[  114.462918][   T28] kauditd_printk_skb: 3 callbacks suppressed
[  114.462934][   T28] audit: type=1400 audit(1772819192.024:778): avc:  denied  { map } for  pid=6580 comm="syz.4.972" path="socket:[14996]" dev="sockfs" ino=14996 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  114.497589][ T2998]  loop2: p1 p2 p3 p4
[  114.512859][ T2998] loop2: p1 size 196608 extends beyond EOD, truncated
[  114.594909][ T2998] loop2: p2 size 150994944 extends beyond EOD, truncated
[  114.612652][ T2998] loop2: p3 size 66846464 extends beyond EOD, truncated
[  114.628536][   T28] audit: type=1400 audit(1772819192.105:779): avc:  denied  { read accept } for  pid=6580 comm="syz.4.972" path="socket:[14996]" dev="sockfs" ino=14996 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  114.779260][   T28] audit: type=1400 audit(1772819192.266:780): avc:  denied  { create } for  pid=6582 comm="syz.4.973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1
[  114.802803][ T6561] loop5: detected capacity change from 0 to 1024
[  114.880243][ T6590] netlink: 'syz.4.974': attribute type 29 has an invalid length.
[  114.938031][ T6590] netlink: 'syz.4.974': attribute type 29 has an invalid length.
[  114.957692][ T6590] netlink: 500 bytes leftover after parsing attributes in process `syz.4.974'.
[  114.976432][ T6561] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  115.068817][ T6593] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5)
[  115.075361][ T6593] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  115.087238][ T3310] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  115.103980][ T6561] System zones: 0-1, 3-36
[  115.113172][   T28] audit: type=1400 audit(1772819192.669:781): avc:  denied  { unlink } for  pid=3318 comm="syz-executor" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 dev="tmpfs" ino=991 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  115.164566][ T6593] vhci_hcd vhci_hcd.0: Device attached
[  115.164613][ T6594] vhci_hcd: connection closed
[  115.171124][   T50] vhci_hcd vhci_hcd.4: stop threads
[  115.176088][ T6561] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.967: bad orphan inode 134217728
[  115.176225][ T6561] loop5: lost filesystem error report for type 5 error -117
[  115.182608][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  115.206638][    C0] EXT4-fs (loop5): initial error at time 1772819192: ext4_orphan_get:1417
[  115.215179][    C0] EXT4-fs (loop5): last error at time 1772819192: ext4_orphan_get:1417
[  115.233389][   T50] vhci_hcd vhci_hcd.4: release socket
[  115.238869][   T50] vhci_hcd vhci_hcd.4: disconnect device
[  115.252848][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  115.254747][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[  115.263840][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  115.275264][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[  115.297701][ T6561] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  115.319778][ T6603] netlink: 24 bytes leftover after parsing attributes in process `syz.2.977'.
[  115.372838][ T6607] netlink: 28 bytes leftover after parsing attributes in process `syz.1.979'.
[  115.377402][ T6608] netlink: 4 bytes leftover after parsing attributes in process `syz.5.967'.
[  115.395665][ T6605] loop0: detected capacity change from 0 to 1024
[  115.411329][ T6605] EXT4-fs: Ignoring removed bh option
[  115.435772][ T6605] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  115.463099][ T6605] EXT4-fs error (device loop0): __ext4_remount:6804: comm syz.0.978: Abort forced by user
[  115.493933][ T6605] EXT4-fs (loop0): Remounting filesystem read-only
[  115.502571][ T5883] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.510183][ T6605] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  115.589446][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.768846][   T28] audit: type=1400 audit(1772819193.344:782): avc:  denied  { unmount } for  pid=6619 comm="syz.5.982" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  116.220021][ T6636] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  116.227810][ T6636] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  116.422771][   T28] audit: type=1400 audit(1772819193.969:783): avc:  denied  { read } for  pid=6631 comm="syz.4.985" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  116.521421][   T28] audit: type=1400 audit(1772819193.969:784): avc:  denied  { open } for  pid=6631 comm="syz.4.985" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  116.616410][ T6656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  116.638703][ T6656] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  116.726783][ T6658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  116.737312][ T6658] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  117.241072][ T6662] loop4: detected capacity change from 0 to 256
[  117.303772][ T6662] FAT-fs (loop4): codepage cp864 not found
[  117.345690][   T28] audit: type=1400 audit(1772819194.926:785): avc:  denied  { execute } for  pid=6668 comm="syz.2.999" name="file0" dev="tmpfs" ino=1035 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  120.793947][ T6719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  120.906357][ T6719] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  120.922738][ T6724] vxcan0: tx drop: invalid sa for name 0x0000000000000002
[  121.406955][   T28] audit: type=1400 audit(1772819199.014:786): avc:  denied  { execute } for  pid=6704 comm="syz.1.1000" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  122.209260][   T10] IPVS: starting estimator thread 0...
[  122.312810][ T6743] IPVS: using max 2736 ests per chain, 136800 per kthread
[  123.637221][   T28] audit: type=1400 audit(1772819201.259:787): avc:  denied  { write } for  pid=6770 comm="syz.4.1033" path="socket:[15332]" dev="sockfs" ino=15332 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  124.238108][ T3412] IPVS: starting estimator thread 0...
[  124.874888][ T6787] IPVS: using max 2736 ests per chain, 136800 per kthread
[  124.882226][   T28] audit: type=1400 audit(1772819202.477:788): avc:  denied  { accept } for  pid=6790 comm="syz.4.1039" lport=47839 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  124.942001][   T28] audit: type=1400 audit(1772819202.477:789): avc:  denied  { setopt } for  pid=6790 comm="syz.4.1039" lport=47839 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  127.099510][ T6854] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1055'.
[  127.468030][ T6859] loop0: detected capacity change from 0 to 128
[  127.490987][ T6862] loop4: detected capacity change from 0 to 512
[  127.509197][ T6859] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  127.527478][ T6859] ext4 filesystem being mounted at /178/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  128.092410][ T6862] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  128.113444][ T6862] ext4 filesystem being mounted at /220/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  128.350154][ T3310] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  128.546150][ T6881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  128.573772][ T6881] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  128.791950][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.847604][   T28] audit: type=1400 audit(1772819206.502:790): avc:  denied  { mounton } for  pid=6884 comm="syz.1.1063" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[  129.456452][ T6904] netlink: 'syz.4.1067': attribute type 4 has an invalid length.
[  129.488391][ T6907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  129.498205][ T6907] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  129.590002][   T35] IPVS: starting estimator thread 0...
[  129.742089][   T28] audit: type=1400 audit(1772819207.408:791): avc:  denied  { read } for  pid=6921 comm="syz.1.1074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  130.142602][ T6920] IPVS: using max 2160 ests per chain, 108000 per kthread
[  130.279061][ T6936] loop0: detected capacity change from 0 to 256
[  130.296551][ T6936] FAT-fs (loop0): codepage cp866 not found
[  131.071675][ T6954] loop4: detected capacity change from 0 to 256
[  131.104465][ T6954] loop4: detected capacity change from 0 to 764
[  131.152902][ T6956] loop0: detected capacity change from 0 to 512
[  131.168697][   T28] audit: type=1400 audit(1772819208.836:792): avc:  denied  { mounton } for  pid=6953 comm="syz.4.1084" path="/227/file1/file0" dev="loop4" ino=1862 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=file permissive=1
[  131.258581][ T6956] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  131.274336][   T28] audit: type=1400 audit(1772819208.876:793): avc:  denied  { mounton } for  pid=6953 comm="syz.4.1084" path="/proc/599/task" dev="proc" ino=16647 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  131.320627][ T6956] ext4 filesystem being mounted at /183/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  131.360407][   T28] audit: type=1400 audit(1772819209.037:794): avc:  denied  { write } for  pid=6955 comm="syz.0.1085" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  131.426548][ T6966] loop4: detected capacity change from 0 to 1024
[  131.433047][   T28] audit: type=1400 audit(1772819209.067:795): avc:  denied  { open } for  pid=6955 comm="syz.0.1085" path="/183/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  131.478502][ T6966] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback.
[  131.497428][   T28] audit: type=1400 audit(1772819209.067:796): avc:  denied  { setattr } for  pid=6955 comm="syz.0.1085" path="/183/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  131.529628][ T6966] ext4 filesystem being mounted at /230/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  131.565501][ T6966] EXT4-fs error (device loop4): ext4_map_blocks:818: inode #15: comm syz.4.1088: lblock 0 mapped to illegal pblock 0 (length 1)
[  131.586103][   T28] audit: type=1400 audit(1772819209.238:797): avc:  denied  { read } for  pid=6965 comm="syz.4.1088" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  131.621671][ T6966] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  131.635745][ T6966] EXT4-fs (loop4): This should not happen!! Data will be lost
[  131.635745][ T6966] 
[  131.647423][   T28] audit: type=1400 audit(1772819209.238:798): avc:  denied  { map } for  pid=6965 comm="syz.4.1088" path="/230/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  131.672506][   T28] audit: type=1400 audit(1772819209.248:799): avc:  denied  { ioctl } for  pid=6965 comm="syz.4.1088" path="/230/file1/file1" dev="loop4" ino=15 ioctlcmd=0x662a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  131.728239][   T12] EXT4-fs error (device loop4): ext4_map_blocks:818: inode #15: comm kworker/u8:0: lblock 0 mapped to illegal pblock 0 (length 1)
[  131.744458][   T12] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  131.758809][   T12] EXT4-fs (loop4): This should not happen!! Data will be lost
[  131.758809][   T12] 
[  131.819805][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.831472][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  131.948735][ T6975] netlink: 'syz.5.1092': attribute type 4 has an invalid length.
[  132.749628][ T6986] loop4: detected capacity change from 0 to 8192
[  132.957274][ T6999] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1096'.
[  133.004252][ T7003] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1104'.
[  133.634366][ T7020] loop1: detected capacity change from 0 to 1024
[  133.726362][ T7020] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  133.762914][ T7029] tipc: Failed to remove unknown binding: 66,0,0/0:3753770580/3753770581
[  133.776258][ T7029] tipc: Failed to remove unknown binding: 66,0,0/0:3753770580/3753770581
[  133.807582][ T7031] loop4: detected capacity change from 0 to 164
[  133.824556][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.836551][ T7031] rock: directory entry would overflow storage
[  133.843044][ T7031] rock: sig=0x66, size=4, remaining=3
[  133.910475][ T7031] rock: directory entry would overflow storage
[  133.922970][ T7035] loop1: detected capacity change from 0 to 1024
[  133.933037][ T7031] rock: sig=0x66, size=4, remaining=3
[  133.985099][ T7035] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback.
[  134.117145][ T7046] loop0: detected capacity change from 0 to 256
[  134.124203][ T7035] ext4 filesystem being mounted at /229/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  134.148222][   T12] EXT4-fs error (device loop1): ext4_map_blocks:818: inode #15: comm kworker/u8:0: lblock 0 mapped to illegal pblock 0 (length 1)
[  134.671605][   T12] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  134.736965][   T28] kauditd_printk_skb: 2 callbacks suppressed
[  134.736984][   T28] audit: type=1400 audit(1772819212.436:802): avc:  denied  { ioctl } for  pid=7053 comm="syz.0.1118" path="socket:[16850]" dev="sockfs" ino=16850 ioctlcmd=0x8924 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  134.768318][   T12] EXT4-fs (loop1): This should not happen!! Data will be lost
[  134.768318][   T12] 
[  134.798937][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  134.921128][ T7064] loop1: detected capacity change from 0 to 512
[  135.621506][ T7073] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  135.883459][ T7077] loop1: detected capacity change from 0 to 128
[  135.928956][ T7077] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  135.988470][ T7077] ext4 filesystem being mounted at /231/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  136.043533][ T7084] loop0: detected capacity change from 0 to 1024
[  136.116537][ T7084] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback.
[  136.142299][ T7086] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1129'.
[  136.153126][ T7084] ext4 filesystem being mounted at /191/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  136.357274][ T4209] EXT4-fs error (device loop0): ext4_map_blocks:818: inode #15: comm kworker/u8:24: lblock 0 mapped to illegal pblock 0 (length 1)
[  136.411143][ T4209] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  136.522598][ T4209] EXT4-fs (loop0): This should not happen!! Data will be lost
[  136.522598][ T4209] 
[  136.588297][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  137.015799][ T7101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  137.034774][ T7101] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  137.057630][ T7102] Cannot find add_set index 0 as target
[  137.068397][   T28] audit: type=1400 audit(1772819214.759:803): avc:  denied  { ioctl } for  pid=7100 comm="syz.4.1134" path="socket:[16951]" dev="sockfs" ino=16951 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  137.154481][ T7086] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  137.173042][ T7086] bridge3: entered promiscuous mode
[  137.178689][ T7086] bridge3: entered allmulticast mode
[  137.453563][ T7110] loop2: detected capacity change from 0 to 128
[  137.495426][ T7110] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  137.532201][ T7110] ext4 filesystem being mounted at /216/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  137.722865][ T3311] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  137.743223][ T7103] bridge0: port 3(batadv0) entered disabled state
[  137.749889][ T7103] bridge0: port 2(bridge_slave_1) entered disabled state
[  138.230467][ T7132] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5)
[  138.237349][ T7132] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  138.360646][ T7132] vhci_hcd vhci_hcd.0: Device attached
[  138.384614][ T7133] vhci_hcd: connection closed
[  138.390766][ T7103] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  138.414524][ T4195] vhci_hcd vhci_hcd.0: stop threads
[  138.430139][ T4195] vhci_hcd vhci_hcd.0: release socket
[  138.442943][ T4195] vhci_hcd vhci_hcd.0: disconnect device
[  138.479482][ T7103] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  139.117134][ T7142] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1145'.
[  139.516230][ T3318] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  139.542417][ T7146] loop1: detected capacity change from 0 to 128
[  139.560930][ T7142] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  139.573498][ T7142] bridge3: entered promiscuous mode
[  139.577985][ T7146] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  139.579527][ T7142] bridge3: entered allmulticast mode
[  139.638945][ T7146] ext4 filesystem being mounted at /234/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  139.742748][   T28] audit: type=1400 audit(1772819217.463:804): avc:  denied  { setopt } for  pid=7148 comm="syz.2.1146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  139.773615][ T7139] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  139.774588][ T4195] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  139.965184][ T4195] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  140.022382][ T4195] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  140.169804][ T4195] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  140.821636][ T7181] loop4: detected capacity change from 0 to 128
[  140.869874][ T7181] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  140.902418][ T7181] ext4 filesystem being mounted at /242/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  140.930605][ T7187] netlink: 'syz.2.1159': attribute type 29 has an invalid length.
[  141.077674][ T7187] netlink: 'syz.2.1159': attribute type 29 has an invalid length.
[  141.086352][ T7187] netlink: 500 bytes leftover after parsing attributes in process `syz.2.1159'.
[  141.662744][ T3311] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  141.938864][ T7193] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5)
[  141.945527][ T7193] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  142.011641][ T7193] vhci_hcd vhci_hcd.0: Device attached
[  142.018629][ T7196] vhci_hcd: connection closed
[  142.029093][ T4195] vhci_hcd vhci_hcd.0: stop threads
[  142.040246][ T4195] vhci_hcd vhci_hcd.0: release socket
[  142.045697][ T4195] vhci_hcd vhci_hcd.0: disconnect device
[  142.088693][ T7206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  142.101586][ T7206] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  142.397665][ T7195] netlink: 'syz.5.1163': attribute type 10 has an invalid length.
[  142.405532][ T7195] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1163'.
[  142.415769][ T7195] batadv0: entered promiscuous mode
[  142.420977][ T7195] batadv0: entered allmulticast mode
[  142.427597][ T7195] bridge0: port 3(batadv0) entered blocking state
[  142.434041][ T7195] bridge0: port 3(batadv0) entered disabled state
[  143.067787][   T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  143.077244][   T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  143.190338][ T7208] loop1: detected capacity change from 0 to 512
[  143.215695][ T7208] EXT4-fs: Ignoring removed oldalloc option
[  143.241794][ T7210] bridge0: port 3(batadv0) entered disabled state
[  143.248812][ T7210] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.255981][ T7210] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.316930][ T7210] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  143.328550][ T7210] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  143.353109][ T3312] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  143.364683][ T7210] veth1_vlan: left allmulticast mode
[  143.377771][ T7208] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  143.389763][ T7208] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.1165: bad orphan inode 131083
[  143.402384][ T7208] loop1: lost filesystem error report for type 5 error -117
[  143.411538][ T7208] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  143.436537][ T4207] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  143.445543][ T4207] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  143.454788][ T4207] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  143.463863][ T4207] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  143.666091][ T7224] loop4: detected capacity change from 0 to 128
[  143.704848][ T7224] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  143.722019][ T7224] ext4 filesystem being mounted at /244/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  143.850100][ T7208] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  143.891691][ T7232] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1175'.
[  144.308261][ T7232] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  144.361468][ T7232] bridge1: entered promiscuous mode
[  144.405959][ T7232] bridge1: entered allmulticast mode
[  144.982100][ T7247] bond1: entered allmulticast mode
[  145.231798][ T7250] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1180'.
[  145.242825][ T7250] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1180'.
[  145.251934][ T7250] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1180'.
[  145.279380][   T28] audit: type=1400 audit(1772819223.020:805): avc:  denied  { recv } for  pid=3318 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.0.167 dest=42536 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  145.326401][ T3312] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  145.420397][ T7264] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5)
[  145.427013][ T7264] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  145.454159][ T7264] vhci_hcd vhci_hcd.0: Device attached
[  145.466315][ T7276] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1190'.
[  145.484870][ T7266] vhci_hcd: connection closed
[  145.593370][ T4207] vhci_hcd vhci_hcd.4: stop threads
[  145.613210][ T4207] vhci_hcd vhci_hcd.4: release socket
[  145.618888][ T4207] vhci_hcd vhci_hcd.4: disconnect device
[  145.697910][ T7276] loop0: detected capacity change from 0 to 512
[  145.825186][ T7276] EXT4-fs (loop0): 1 truncate cleaned up
[  145.922756][ T7276] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  145.983939][   T23] vhci_hcd vhci_hcd.4: vhci_device speed not set
[  146.135090][   T28] audit: type=1400 audit(1772819223.743:806): avc:  denied  { rename } for  pid=7275 comm="syz.0.1190" name="file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  146.167461][   T28] audit: type=1400 audit(1772819223.914:807): avc:  denied  { unlink } for  pid=7275 comm="syz.0.1190" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  147.169430][ T7298] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 2, id = 0
[  148.002635][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  148.923635][ T7309] loop1: detected capacity change from 0 to 2048
[  148.936588][   T28] audit: type=1400 audit(1772819226.697:808): avc:  denied  { create } for  pid=7306 comm="syz.5.1200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  148.969563][   T28] audit: type=1400 audit(1772819226.737:809): avc:  denied  { open } for  pid=7306 comm="syz.5.1200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  149.006609][ T7309] 9p: Bad value for 'rfdno'
[  149.089231][   T28] audit: type=1400 audit(1772819226.737:810): avc:  denied  { kernel } for  pid=7306 comm="syz.5.1200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  149.113920][   T28] audit: type=1400 audit(1772819226.878:811): avc:  denied  { ioctl } for  pid=7308 comm="syz.1.1199" path="socket:[17787]" dev="sockfs" ino=17787 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  149.183916][ T7315] loop4: detected capacity change from 0 to 512
[  149.186631][   T28] audit: type=1400 audit(1772819226.908:812): avc:  denied  { write } for  pid=7308 comm="syz.1.1199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  149.367266][ T7321] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1205'.
[  149.400630][   T28] audit: type=1400 audit(1772819227.119:813): avc:  denied  { write } for  pid=7320 comm="syz.5.1205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  149.907671][ T7330] loop0: detected capacity change from 0 to 8192
[  149.916938][ T7315] EXT4-fs (loop4): 1 orphan inode deleted
[  150.073543][   T28] audit: type=1400 audit(1772819227.832:814): avc:  denied  { mounton } for  pid=7328 comm="syz.0.1207" path="/207/file0/file0" dev="loop0" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1
[  150.076988][ T7329] 9p: Bad value for 'rfdno'
[  150.241059][ T7315] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  150.529831][ T7340] loop0: detected capacity change from 0 to 512
[  150.570236][ T7340] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  150.587867][ T7337] EXT4-fs (loop0): Couldn't remount RDWR because of unprocessed orphan inode list.  Please umount/remount instead
[  150.878860][   T28] audit: type=1400 audit(1772819228.655:815): avc:  denied  { tracepoint } for  pid=7350 comm="syz.5.1214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  151.270589][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.310622][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.406728][ T7359] loop0: detected capacity change from 0 to 128
[  151.455340][ T7359] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  151.496980][ T7359] ext4 filesystem being mounted at /209/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  151.514345][   T28] audit: type=1400 audit(1772819229.278:816): avc:  denied  { create } for  pid=7360 comm="syz.4.1218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  151.556158][ T7364] loop4: detected capacity change from 0 to 128
[  151.575862][   T28] audit: type=1400 audit(1772819229.348:817): avc:  denied  { read } for  pid=7360 comm="syz.4.1218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  151.656667][   T28] audit: type=1326 audit(1772819229.439:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7360 comm="syz.4.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc32b12c799 code=0x7ffc0000
[  151.701171][   T28] audit: type=1326 audit(1772819229.439:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7360 comm="syz.4.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7fc32b12c799 code=0x7ffc0000
[  151.735142][   T28] audit: type=1326 audit(1772819229.459:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7360 comm="syz.4.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc32b12c799 code=0x7ffc0000
[  151.762744][   T28] audit: type=1326 audit(1772819229.459:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7360 comm="syz.4.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc32b12c799 code=0x7ffc0000
[  151.788977][   T28] audit: type=1326 audit(1772819229.459:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7360 comm="syz.4.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc32b12c799 code=0x7ffc0000
[  151.857192][   T28] audit: type=1326 audit(1772819229.459:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7360 comm="syz.4.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc32b12c799 code=0x7ffc0000
[  151.916286][   T28] audit: type=1326 audit(1772819229.459:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7360 comm="syz.4.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc32b12c799 code=0x7ffc0000
[  151.924008][ T7373] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1217'.
[  152.315343][ T7390] loop2: detected capacity change from 0 to 8192
[  152.491763][ T3295]  loop2: p1 p2 p3 p4
[  152.497663][ T3295] loop2: p3 start 117772289 is beyond EOD, truncated
[  152.538849][ T3295] loop2: p4 size 262144 extends beyond EOD, truncated
[  152.857316][ T7386] netlink: 45 bytes leftover after parsing attributes in process `syz.1.1225'.
[  152.925716][ T7403] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1229'.
[  152.996647][ T7390]  loop2: p1 p2 p3 p4
[  153.014387][ T7390] loop2: p3 start 117772289 is beyond EOD, truncated
[  153.026412][ T7390] loop2: p4 size 262144 extends beyond EOD, truncated
[  153.100426][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[  153.113265][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[  153.126332][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  153.229318][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  153.229705][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[  153.254628][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[  153.409755][ T7403] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  153.422588][ T7403] bridge1: entered promiscuous mode
[  153.429699][ T7403] bridge1: entered allmulticast mode
[  153.668276][ T7427] loop4: detected capacity change from 0 to 1024
[  153.676817][ T7427] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  153.690386][ T7427] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869)
[  153.712812][ T7427] EXT4-fs (loop4): invalid journal inode
[  153.731313][ T7427] EXT4-fs (loop4): can't get journal size
[  153.772480][ T7427] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  153.801973][ T7427] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1237'.
[  153.860442][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  153.869886][ T7435] loop1: detected capacity change from 0 to 8192
[  153.909676][ T3295]  loop1: p1 p2 p3 p4
[  153.917152][ T3295] loop1: p3 start 117772289 is beyond EOD, truncated
[  153.931573][ T3295] loop1: p4 size 262144 extends beyond EOD, truncated
[  153.956475][ T7435]  loop1: p1 p2 p3 p4
[  153.975553][ T7435] loop1: p3 start 117772289 is beyond EOD, truncated
[  153.999593][ T7435] loop1: p4 size 262144 extends beyond EOD, truncated
[  154.125507][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  154.126155][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[  154.138846][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  154.209366][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  154.255784][ T7453] loop4: detected capacity change from 0 to 512
[  154.313323][ T7453] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  154.351447][ T7453] ext4 filesystem being mounted at /259/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  154.412549][ T7453] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1247'.
[  154.431755][ T7457] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1248'.
[  154.580388][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  154.730519][ T4207] Bluetooth: hci0: Frame reassembly failed (-84)
[  154.740380][ T7463] loop2: detected capacity change from 0 to 256
[  154.911431][ T7457] bridge1: entered promiscuous mode
[  154.945996][ T7457] bridge1: entered allmulticast mode
[  155.281433][ T3310] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  155.531105][ T7493] FAULT_INJECTION: forcing a failure.
[  155.531105][ T7493] name failslab, interval 1, probability 0, space 0, times 0
[  155.543796][ T7493] CPU: 1 UID: 0 PID: 7493 Comm: syz.0.1261 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  155.543887][ T7493] Tainted: [W]=WARN
[  155.543894][ T7493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  155.543907][ T7493] Call Trace:
[  155.543915][ T7493]  <TASK>
[  155.543924][ T7493]  __dump_stack+0x1d/0x30
[  155.543953][ T7493]  dump_stack_lvl+0x95/0xd0
[  155.543978][ T7493]  dump_stack+0x15/0x1b
[  155.544045][ T7493]  should_fail_ex+0x263/0x280
[  155.544072][ T7493]  should_failslab+0x8c/0xb0
[  155.544094][ T7493]  kmem_cache_alloc_noprof+0x66/0x400
[  155.544118][ T7493]  ? do_getname+0x2e/0x1c0
[  155.544142][ T7493]  ? mutex_lock+0x57/0x90
[  155.544204][ T7493]  do_getname+0x2e/0x1c0
[  155.544228][ T7493]  __se_sys_symlinkat+0x23/0x1b0
[  155.544260][ T7493]  __x64_sys_symlinkat+0x43/0x50
[  155.544285][ T7493]  x64_sys_call+0x2b7d/0x3020
[  155.544312][ T7493]  do_syscall_64+0x12c/0x370
[  155.544349][ T7493]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  155.544425][ T7493] RIP: 0033:0x7f94de82c799
[  155.544484][ T7493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  155.544504][ T7493] RSP: 002b:00007f94dd27f028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a
[  155.544528][ T7493] RAX: ffffffffffffffda RBX: 00007f94deaa5fa0 RCX: 00007f94de82c799
[  155.544608][ T7493] RDX: 00002000000000c0 RSI: 0000000000000007 RDI: 0000200000000100
[  155.544623][ T7493] RBP: 00007f94dd27f090 R08: 0000000000000000 R09: 0000000000000000
[  155.544675][ T7493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  155.544690][ T7493] R13: 00007f94deaa6038 R14: 00007f94deaa5fa0 R15: 00007fff9c5ea5f8
[  155.544710][ T7493]  </TASK>
[  155.735815][ T7496] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1262'.
[  155.746032][ T7496] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1262'.
[  155.830124][ T7508] loop4: detected capacity change from 0 to 128
[  156.837414][ T3630] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  156.866660][   T28] kauditd_printk_skb: 108 callbacks suppressed
[  156.866684][   T28] audit: type=1400 audit(2000000002.830:933): avc:  denied  { checkpoint_restore } for  pid=7531 comm="syz.5.1274" capability=40  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  157.254257][ T7543] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[  157.260828][ T7543] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  157.271059][ T7546] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5)
[  157.277634][ T7546] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  157.300137][ T7543] vhci_hcd vhci_hcd.0: Device attached
[  157.300417][ T7547] vhci_hcd: connection closed
[  157.310489][ T7546] vhci_hcd vhci_hcd.0: Device attached
[  157.318928][   T12] vhci_hcd vhci_hcd.2: stop threads
[  157.345013][ T7548] vhci_hcd: connection closed
[  157.355261][   T12] vhci_hcd vhci_hcd.2: release socket
[  157.374938][   T12] vhci_hcd vhci_hcd.2: disconnect device
[  157.380670][   T12] vhci_hcd vhci_hcd.1: stop threads
[  157.387033][   T12] vhci_hcd vhci_hcd.1: release socket
[  157.396532][   T12] vhci_hcd vhci_hcd.1: disconnect device
[  157.410510][ T7557] loop0: detected capacity change from 0 to 512
[  157.460102][ T7557] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.1281: error while reading EA inode 32 err=-116
[  157.473910][ T7557] loop0: lost filesystem error report for type 5 error -117
[  157.474168][ T7557] EXT4-fs (loop0): Remounting filesystem read-only
[  157.488068][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  157.488086][    C0] EXT4-fs (loop0): initial error at time 2000000003: ext4_xattr_inode_iget:446
[  157.488134][    C0] EXT4-fs (loop0): last error at time 2000000003: ext4_xattr_inode_iget:446
[  157.512820][ T7557] EXT4-fs warning (device loop0): ext4_evict_inode:258: couldn't mark inode dirty (err -30)
[  157.524437][ T7557] EXT4-fs (loop0): 1 orphan inode deleted
[  157.531192][ T7557] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  157.743052][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  157.809879][ T7576] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1285'.
[  158.018267][ T7588] loop1: detected capacity change from 0 to 512
[  158.025003][ T7590] FAULT_INJECTION: forcing a failure.
[  158.025003][ T7590] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  158.045661][ T7588] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  158.049241][ T7590] CPU: 0 UID: 0 PID: 7590 Comm: syz.2.1291 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  158.049352][ T7590] Tainted: [W]=WARN
[  158.049359][ T7590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  158.049421][ T7590] Call Trace:
[  158.049427][ T7590]  <TASK>
[  158.049436][ T7590]  __dump_stack+0x1d/0x30
[  158.049463][ T7590]  dump_stack_lvl+0x95/0xd0
[  158.049487][ T7590]  dump_stack+0x15/0x1b
[  158.049515][ T7590]  should_fail_ex+0x263/0x280
[  158.049539][ T7590]  should_fail+0xb/0x20
[  158.049559][ T7590]  should_fail_usercopy+0x1a/0x20
[  158.049583][ T7590]  _copy_from_user+0x1c/0xb0
[  158.049611][ T7590]  __copy_msghdr+0x244/0x300
[  158.049703][ T7590]  ___sys_sendmsg+0x10c/0x1e0
[  158.049728][ T7590]  ? path_openat+0x1b01/0x2050
[  158.049769][ T7590]  __sys_sendmmsg+0x185/0x320
[  158.049804][ T7590]  __x64_sys_sendmmsg+0x57/0x70
[  158.049841][ T7590]  x64_sys_call+0x27aa/0x3020
[  158.049866][ T7590]  do_syscall_64+0x12c/0x370
[  158.049903][ T7590]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  158.049926][ T7590] RIP: 0033:0x7fd7ccb4c799
[  158.049944][ T7590] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  158.050032][ T7590] RSP: 002b:00007fd7cb5a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  158.050054][ T7590] RAX: ffffffffffffffda RBX: 00007fd7ccdc5fa0 RCX: 00007fd7ccb4c799
[  158.050080][ T7590] RDX: 0000000000000001 RSI: 0000200000000500 RDI: 0000000000000003
[  158.050094][ T7590] RBP: 00007fd7cb5a7090 R08: 0000000000000000 R09: 0000000000000000
[  158.050107][ T7590] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000001
[  158.050120][ T7590] R13: 00007fd7ccdc6038 R14: 00007fd7ccdc5fa0 R15: 00007ffe324577b8
[  158.050140][ T7590]  </TASK>
[  158.256521][ T7588] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  158.273766][ T7588] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  158.281881][ T7588] System zones: 0-2, 18-18, 34-34
[  158.291681][ T7588] EXT4-fs error (device loop1): ext4_orphan_get:1391: comm syz.1.1292: inode #15: comm syz.1.1292: iget: illegal inode #
[  158.315862][ T7588] loop1: lost filesystem error report for type 5 error -117
[  158.316006][ T7588] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1292: couldn't read orphan inode 15 (err -117)
[  158.335238][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  158.335261][    C1] EXT4-fs (loop1): initial error at time 2000000004: ext4_orphan_get:1391
[  158.335282][    C1] EXT4-fs (loop1): last error at time 2000000004: ext4_orphan_get:1391
[  158.368636][ T7588] loop1: lost filesystem error report for type 5 error -117
[  158.387105][ T7588] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  158.454713][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.519983][ T7605] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  158.531203][ T7605] SELinux:  Context system_u:object is not valid (left unmapped).
[  158.539285][   T28] audit: type=1400 audit(2000000004.490:934): avc:  denied  { mac_admin } for  pid=7603 comm="syz.4.1298" capability=33  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  158.562448][   T28] audit: type=1400 audit(2000000004.520:935): avc:  denied  { relabelto } for  pid=7603 comm="syz.4.1298" name="cgroup.procs" dev="cgroup" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object"
[  158.602988][ T7605] bond3: entered promiscuous mode
[  158.609212][   T28] audit: type=1400 audit(2000000004.520:936): avc:  denied  { associate } for  pid=7603 comm="syz.4.1298" name="cgroup.procs" dev="cgroup" ino=249 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object"
[  158.609579][ T7608] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5)
[  158.640086][ T7605] 8021q: adding VLAN 0 to HW filter on device bond3
[  158.642172][ T7608] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  158.667640][ T7608] vhci_hcd vhci_hcd.0: Device attached
[  158.676069][ T7609] vhci_hcd: connection closed
[  158.676292][   T50] vhci_hcd vhci_hcd.1: stop threads
[  158.687460][   T50] vhci_hcd vhci_hcd.1: release socket
[  158.692888][   T50] vhci_hcd vhci_hcd.1: disconnect device
[  159.350797][ T7633] syzkaller0: entered promiscuous mode
[  159.358256][   T28] audit: type=1400 audit(2000000005.310:937): avc:  denied  { getopt } for  pid=7632 comm="syz.4.1308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  159.393403][ T7633] syzkaller0: entered allmulticast mode
[  159.696745][ T7645] hub 9-0:1.0: USB hub found
[  159.715506][   T28] audit: type=1400 audit(2000000005.670:938): avc:  denied  { getopt } for  pid=7628 comm="syz.1.1306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  159.740460][ T7645] hub 9-0:1.0: 8 ports detected
[  159.819155][   T28] audit: type=1326 audit(2000000005.780:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7649 comm="syz.0.1314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94de82c799 code=0x7ffc0000
[  159.856042][ T7650] loop0: detected capacity change from 0 to 1024
[  159.889459][ T7650] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  159.915614][ T7650] FAULT_INJECTION: forcing a failure.
[  159.915614][ T7650] name failslab, interval 1, probability 0, space 0, times 0
[  159.917091][   T28] audit: type=1326 audit(2000000005.810:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7649 comm="syz.0.1314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f94de82c799 code=0x7ffc0000
[  159.929400][ T7650] CPU: 1 UID: 0 PID: 7650 Comm: syz.0.1314 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  159.929439][ T7650] Tainted: [W]=WARN
[  159.929522][ T7650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  159.929534][ T7650] Call Trace:
[  159.929541][ T7650]  <TASK>
[  159.929550][ T7650]  __dump_stack+0x1d/0x30
[  159.929576][ T7650]  dump_stack_lvl+0x95/0xd0
[  159.929600][ T7650]  dump_stack+0x15/0x1b
[  159.929687][ T7650]  should_fail_ex+0x263/0x280
[  159.929711][ T7650]  should_failslab+0x8c/0xb0
[  159.929867][ T7650]  kmem_cache_alloc_noprof+0x66/0x400
[  159.929909][ T7650]  ? __es_insert_extent+0x508/0xee0
[  159.929941][ T7650]  __es_insert_extent+0x508/0xee0
[  159.930108][ T7650]  ? perf_trace_kmalloc+0xeb/0x130
[  159.930131][ T7650]  ext4_es_cache_extent+0x37e/0x5d0
[  159.930161][ T7650]  ? __es_find_extent_range+0x17d/0x310
[  159.930232][ T7650]  ext4_ext_map_blocks+0x13e8/0x2fb0
[  159.930262][ T7650]  ? bdev_getblk+0x35a/0x3f0
[  159.930348][ T7650]  ? ext4_get_group_desc+0x16b/0x190
[  159.930384][ T7650]  ext4_map_query_blocks+0xb2/0x550
[  159.930422][ T7650]  ? ext4_es_lookup_extent+0x3ae/0x570
[  159.930503][ T7650]  ext4_map_blocks+0x306/0x970
[  159.930535][ T7650]  ext4_xattr_inode_lookup_create+0x7e8/0xeb0
[  159.930596][ T7650]  ext4_xattr_ibody_set+0x136/0x3c0
[  159.930628][ T7650]  ext4_xattr_set_handle+0xc1d/0xf80
[  159.930746][ T7650]  ext4_xattr_set+0x18e/0x240
[  159.930820][ T7650]  ext4_xattr_trusted_set+0x3c/0x50
[  159.930841][ T7650]  ? __pfx_ext4_xattr_trusted_set+0x10/0x10
[  159.930863][ T7650]  __vfs_setxattr+0x2e6/0x310
[  159.930888][ T7650]  __vfs_setxattr_noperm+0xe8/0x410
[  159.930913][ T7650]  __vfs_setxattr_locked+0x105/0x220
[  159.931001][ T7650]  vfs_setxattr+0x12c/0x2a0
[  159.931025][ T7650]  filename_setxattr+0x1c4/0x410
[  159.931052][ T7650]  path_setxattrat+0x2be/0x310
[  159.931111][ T7650]  __x64_sys_lsetxattr+0x71/0x90
[  159.931148][ T7650]  x64_sys_call+0x1300/0x3020
[  159.931174][ T7650]  do_syscall_64+0x12c/0x370
[  159.931196][ T7650]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  159.931218][ T7650] RIP: 0033:0x7f94de82c799
[  159.931284][ T7650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  159.931304][ T7650] RSP: 002b:00007f94dd27f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd
[  159.931326][ T7650] RAX: ffffffffffffffda RBX: 00007f94deaa5fa0 RCX: 00007f94de82c799
[  159.931341][ T7650] RDX: 0000200000001d00 RSI: 0000200000000240 RDI: 00002000000000c0
[  159.931355][ T7650] RBP: 00007f94dd27f090 R08: 0000000000000000 R09: 0000000000000000
[  159.931425][ T7650] R10: 0000000000000381 R11: 0000000000000246 R12: 0000000000000002
[  159.931500][ T7650] R13: 00007f94deaa6038 R14: 00007f94deaa5fa0 R15: 00007fff9c5ea5f8
[  159.931520][ T7650]  </TASK>
[  160.252245][ T7640] loop2: detected capacity change from 0 to 164
[  160.286753][   T28] audit: type=1326 audit(2000000005.810:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7649 comm="syz.0.1314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f94de82c502 code=0x7ffc0000
[  160.287589][ T7662] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5)
[  160.313781][   T28] audit: type=1326 audit(2000000005.810:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7649 comm="syz.0.1314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f94de7ecfce code=0x7ffc0000
[  160.316721][ T7662] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  160.340122][ T7662] vhci_hcd vhci_hcd.0: Device attached
[  160.382230][ T7663] vhci_hcd: connection closed
[  160.382528][ T4211] vhci_hcd vhci_hcd.4: stop threads
[  160.393318][ T4211] vhci_hcd vhci_hcd.4: release socket
[  160.401116][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.410188][ T4211] vhci_hcd vhci_hcd.4: disconnect device
[  160.431873][ T7640] iso9660: Corrupted directory entry in block 4 of inode 1792
[  160.480754][ T7676] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1322'.
[  160.500777][ T7676] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1322'.
[  160.503907][ T7678] loop0: detected capacity change from 0 to 128
[  160.521745][ T7678] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  160.538835][ T7678] ext4 filesystem being mounted at /225/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  161.126585][ T7694] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1327'.
[  161.160283][ T7694] syz_tun: refused to change device tx_queue_len
[  161.306371][ T7698] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1329'.
[  161.316433][ T7698] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1329'.
[  161.840390][ T7712] netlink: 'syz.4.1335': attribute type 4 has an invalid length.
[  161.886124][ T7714] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1336'.
[  161.923451][ T7714] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  162.018204][ T7708] loop2: detected capacity change from 0 to 512
[  162.111096][ T7708] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 3)!
[  162.123454][ T7720] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  162.131541][ T7720] syzkaller0: entered promiscuous mode
[  162.141680][ T7708] EXT4-fs (loop2): group descriptors corrupted!
[  162.149861][ T7720] syzkaller0: entered allmulticast mode
[  162.159608][ T7720] tipc: Resetting bearer <eth:syzkaller0>
[  162.166308][ T7719] tipc: Resetting bearer <eth:syzkaller0>
[  162.172746][ T7719] tipc: Disabling bearer <eth:syzkaller0>
[  162.419501][ T3310] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  162.567175][ T7725] loop1: detected capacity change from 0 to 65536
[  163.753095][ T7765] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5)
[  163.759668][ T7765] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  163.795338][ T7765] vhci_hcd vhci_hcd.0: Device attached
[  163.811869][ T7766] vhci_hcd: connection closed
[  163.812067][ T4209] vhci_hcd vhci_hcd.0: stop threads
[  163.832232][ T4209] vhci_hcd vhci_hcd.0: release socket
[  163.842335][ T4209] vhci_hcd vhci_hcd.0: disconnect device
[  164.459003][ T7781] loop0: detected capacity change from 0 to 8192
[  164.615233][ T7787] loop4: detected capacity change from 0 to 1024
[  165.491180][ T7787] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  165.502610][ T7787] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  165.513269][ T7787] JBD2: no valid journal superblock found
[  165.519040][ T7787] EXT4-fs (loop4): Could not load journal inode
[  165.594053][ T7785] netlink: 388 bytes leftover after parsing attributes in process `syz.4.1362'.
[  167.171859][ T7786] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1361'.
[  167.182604][ T7786] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1361'.
[  167.226559][   T28] kauditd_printk_skb: 24 callbacks suppressed
[  167.226576][   T28] audit: type=1326 audit(2000000013.190:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7796 comm="syz.2.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7ccb4c799 code=0x7ffc0000
[  167.421332][   T28] audit: type=1326 audit(2000000013.220:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7796 comm="syz.2.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7ccb4c799 code=0x7ffc0000
[  167.519964][   T28] audit: type=1326 audit(2000000013.220:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7796 comm="syz.2.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7ccb4c799 code=0x7ffc0000
[  167.559620][ T7787] loop4: detected capacity change from 0 to 8192
[  167.645170][   T28] audit: type=1326 audit(2000000013.220:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7796 comm="syz.2.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd7ccb4c799 code=0x7ffc0000
[  167.679414][   T28] audit: type=1326 audit(2000000013.220:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7796 comm="syz.2.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7ccb4c799 code=0x7ffc0000
[  167.704382][   T28] audit: type=1326 audit(2000000013.220:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7796 comm="syz.2.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7ccb4c799 code=0x7ffc0000
[  167.732002][   T28] audit: type=1326 audit(2000000013.220:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7796 comm="syz.2.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7ccb4c799 code=0x7ffc0000
[  167.782785][   T28] audit: type=1326 audit(2000000013.220:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7796 comm="syz.2.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7ccb4c799 code=0x7ffc0000
[  167.797934][ T7820] 9p: Bad value for 'rfdno'
[  167.809195][   T28] audit: type=1326 audit(2000000013.220:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7796 comm="syz.2.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7ccb4c799 code=0x7ffc0000
[  167.837219][   T28] audit: type=1326 audit(2000000013.220:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7796 comm="syz.2.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd7ccb4c799 code=0x7ffc0000
[  167.899039][ T7831] loop2: detected capacity change from 0 to 512
[  167.911672][ T7831] EXT4-fs: Ignoring removed orlov option
[  167.925717][ T7831] ext3: Bad value for 'sb'
[  168.031318][ T7845] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4)
[  168.037972][ T7845] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  168.046338][ T7845] vhci_hcd vhci_hcd.0: Device attached
[  168.058599][ T7846] vhci_hcd: connection closed
[  168.059804][   T50] vhci_hcd vhci_hcd.1: stop threads
[  168.070945][   T50] vhci_hcd vhci_hcd.1: release socket
[  168.077047][   T50] vhci_hcd vhci_hcd.1: disconnect device
[  169.276466][ T7885] syzkaller0: entered promiscuous mode
[  169.502371][ T7898] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1401'.
[  169.639410][ T7903] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1403'.
[  169.657812][ T7903] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1403'.
[  169.785821][ T7913] loop4: detected capacity change from 0 to 512
[  169.970869][ T7913] EXT4-fs (loop4): 1 orphan inode deleted
[  170.117805][ T7913] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  170.694615][ T7947] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5)
[  170.701297][ T7947] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  170.709871][ T7947] vhci_hcd vhci_hcd.0: Device attached
[  170.719587][ T7951] netlink: 'syz.5.1418': attribute type 13 has an invalid length.
[  170.742191][ T7948] vhci_hcd: connection closed
[  170.742398][   T12] vhci_hcd vhci_hcd.1: stop threads
[  170.757842][   T12] vhci_hcd vhci_hcd.1: release socket
[  170.767859][   T12] vhci_hcd vhci_hcd.1: disconnect device
[  170.927009][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.032759][ T7965] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1425'.
[  171.059447][ T7955] netlink: 'syz.5.1422': attribute type 10 has an invalid length.
[  171.069038][ T7955] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1422'.
[  171.080103][ T7955] bridge0: port 3(batadv0) entered disabled state
[  171.089077][ T7955] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  171.156766][ T7969] loop4: detected capacity change from 0 to 4096
[  171.175762][ T7969] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  171.201762][ T7972] bridge0: port 3(macsec1) entered blocking state
[  171.209616][ T7972] bridge0: port 3(macsec1) entered disabled state
[  171.217121][ T7972] macsec1: entered allmulticast mode
[  171.222449][ T7972] bridge0: entered allmulticast mode
[  171.229304][ T7972] macsec1: left allmulticast mode
[  171.235241][ T7972] bridge0: left allmulticast mode
[  171.309977][ T7969] EXT4-fs error (device loop4): ext4_empty_dir:3094: inode #12: block 80: comm syz.4.1425: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0
[  171.358252][ T7980] loop1: detected capacity change from 0 to 256
[  171.370802][ T7969] EXT4-fs warning (device loop4): ext4_empty_dir:3097: inode #12: comm syz.4.1425: directory missing '..'
[  171.470860][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.730150][ T8007] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1442'.
[  172.023134][ T8016] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1444'.
[  172.036322][ T8016] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1444'.
[  172.049155][ T8016] netlink: 212 bytes leftover after parsing attributes in process `syz.0.1444'.
[  172.633050][ T8032] loop4: detected capacity change from 0 to 512
[  172.655338][ T8032] EXT4-fs: Ignoring removed orlov option
[  172.689276][ T8032] EXT4-fs (loop4): 1 truncate cleaned up
[  172.696654][ T8032] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  172.736114][ T8039] loop2: detected capacity change from 0 to 512
[  172.745642][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.756612][ T8039] EXT4-fs: Ignoring removed bh option
[  172.762158][ T8039] EXT4-fs: inline encryption not supported
[  172.787674][ T8039] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  172.806232][ T8039] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  172.822193][ T8039] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1452: bg 0: block 248: padding at end of block bitmap is not set
[  172.838301][ T8039] loop2: lost filesystem error report for type 5 error -117
[  172.838628][ T8039] __quota_error: 114 callbacks suppressed
[  172.838640][ T8039] Quota error (device loop2): write_blk: dquota write failed
[  172.846013][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  172.846033][    C1] EXT4-fs (loop2): last error at time 2000000018: ext4_validate_block_bitmap:441
[  172.878868][ T8039] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  172.890146][ T8039] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.1452: Failed to acquire dquot type 1
[  172.902814][ T8039] loop2: lost filesystem error report for type 5 error -117
[  172.903467][ T8039] EXT4-fs (loop2): 1 truncate cleaned up
[  172.919574][ T8039] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  173.290293][ T8048] netlink: 320 bytes leftover after parsing attributes in process `syz.5.1455'.
[  173.316040][ T8050] loop1: detected capacity change from 0 to 128
[  173.331959][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  173.502923][ T8068] netlink: 71 bytes leftover after parsing attributes in process `syz.5.1462'.
[  173.997957][   T28] audit: type=1400 audit(2000000019.960:1091): avc:  denied  { name_bind } for  pid=8098 comm="syz.0.1474" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  174.189517][ T8046] syz.4.1453 (8046) used greatest stack depth: 8600 bytes left
[  174.300796][ T8109] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105)
[  174.351816][ T8109] team0 (unregistering): Port device team_slave_0 removed
[  174.388476][ T8109] team0 (unregistering): Failed to send options change via netlink (err -105)
[  174.401616][ T8109] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105)
[  174.424019][ T8109] team0 (unregistering): Port device team_slave_1 removed
[  174.887021][ T8155] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1484'.
[  175.167630][ T8173] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4)
[  175.174311][ T8173] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  175.214960][ T8173] vhci_hcd vhci_hcd.0: Device attached
[  175.344935][ T8174] vhci_hcd: connection closed
[  175.345182][ T4205] vhci_hcd vhci_hcd.1: stop threads
[  175.356984][ T4205] vhci_hcd vhci_hcd.1: release socket
[  175.362988][ T4205] vhci_hcd vhci_hcd.1: disconnect device
[  175.404841][ T3412] vhci_hcd vhci_hcd.1: vhci_device speed not set
[  175.807925][ T8199] loop4: detected capacity change from 0 to 1024
[  175.815381][ T8199] EXT4-fs: Ignoring removed bh option
[  175.842980][ T8199] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  175.864975][ T8199] ext4 filesystem being mounted at /304/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  175.883712][   T28] audit: type=1326 audit(2000000021.840:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8200 comm="syz.5.1500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c9c00c799 code=0x7ffc0000
[  175.910133][   T28] audit: type=1326 audit(2000000021.870:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8200 comm="syz.5.1500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f9c9c00c799 code=0x7ffc0000
[  175.939096][   T28] audit: type=1326 audit(2000000021.870:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8200 comm="syz.5.1500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c9c00c799 code=0x7ffc0000
[  175.964165][   T28] audit: type=1326 audit(2000000021.870:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8200 comm="syz.5.1500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c9c00c799 code=0x7ffc0000
[  175.989948][   T28] audit: type=1400 audit(2000000021.870:1096): avc:  denied  { create } for  pid=8198 comm="syz.4.1499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  176.040299][ T8210] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1499'.
[  176.063128][ T8198] EXT4-fs error (device loop4): ext4_map_blocks:818: inode #15: comm syz.4.1499: lblock 0 mapped to illegal pblock 0 (length 1)
[  176.076826][ T8198] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #15: comm syz.4.1499: lblock 0 mapped to illegal pblock 0 (length 1)
[  176.090490][ T8198] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #15: comm syz.4.1499: lblock 0 mapped to illegal pblock 0 (length 1)
[  176.104129][ T8198] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #15: comm syz.4.1499: lblock 0 mapped to illegal pblock 0 (length 1)
[  176.117842][ T8198] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #15: comm syz.4.1499: lblock 0 mapped to illegal pblock 0 (length 1)
[  176.131671][ T8198] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #15: comm syz.4.1499: lblock 0 mapped to illegal pblock 0 (length 1)
[  176.145374][ T8198] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #15: comm syz.4.1499: lblock 0 mapped to illegal pblock 0 (length 1)
[  176.159898][ T8198] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #15: comm syz.4.1499: lblock 0 mapped to illegal pblock 0 (length 1)
[  176.175385][ T8198] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #15: comm syz.4.1499: lblock 0 mapped to illegal pblock 0 (length 1)
[  176.189094][ T8198] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #15: comm syz.4.1499: lblock 0 mapped to illegal pblock 0 (length 1)
[  176.242698][ T8218] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1504'.
[  176.535767][ T8236] loop2: detected capacity change from 0 to 2048
[  176.565236][ T3304] Alternate GPT is invalid, using primary GPT.
[  176.571661][ T3304]  loop2: p1 p2 p3
[  176.583388][ T8236] Alternate GPT is invalid, using primary GPT.
[  176.589809][ T8236]  loop2: p1 p2 p3
[  176.602000][ T8239] loop0: detected capacity change from 0 to 256
[  176.614014][ T8239] SELinux: security_context_str_to_sid () failed with errno=-22
[  176.912792][ T8207] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  176.963486][ T8244] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1514'.
[  177.026923][ T4205] bridge0: port 3(batadv0) entered disabled state
[  177.043920][ T4205] bridge_slave_1: left allmulticast mode
[  177.061948][ T4205] bridge_slave_1: left promiscuous mode
[  177.073644][ T4205] bridge0: port 2(bridge_slave_1) entered disabled state
[  177.145264][ T8268] loop1: detected capacity change from 0 to 512
[  177.157024][ T8268] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  177.165368][ T8268] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002]
[  177.173499][ T8268] EXT4-fs (loop1): orphan cleanup on readonly fs
[  177.181349][ T8268] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #13: comm syz.1.1517: iget: bad i_size value: 12154761577498
[  177.201029][ T8268] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  177.201285][ T8268] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1517: couldn't read orphan inode 13 (err -117)
[  177.210620][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  177.210659][    C0] EXT4-fs (loop1): initial error at time 2000000023: ext4_orphan_get:1391: inode 13
[  177.210687][    C0] EXT4-fs (loop1): last error at time 2000000023: ext4_orphan_get:1391: inode 13
[  177.259729][ T8268] loop1: lost filesystem error report for type 5 error -117
[  177.260352][ T8268] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  177.280925][ T8268] EXT4-fs warning (device loop1): dx_probe:861: inode #2: comm syz.1.1517: dx entry: limit 65535 != root limit 120
[  177.293277][ T8268] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.1517: Corrupt directory, running e2fsck is recommended
[  177.403016][ T8278] loop0: detected capacity change from 0 to 1024
[  177.410964][ T8278] EXT4-fs: Ignoring removed bh option
[  177.429610][ T4205] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  177.439800][ T4205] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  177.449571][ T4205] bond0 (unregistering): Released all slaves
[  177.457257][ T8278] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  177.457690][ T4205] bond1 (unregistering): Released all slaves
[  177.477771][ T4205] bond2 (unregistering): Released all slaves
[  177.487332][ T4205] bond3 (unregistering): Released all slaves
[  177.496204][ T4205] bond4 (unregistering): Released all slaves
[  177.502373][ T8278] EXT4-fs error (device loop0): __ext4_remount:6804: comm syz.0.1520: Abort forced by user
[  177.512943][ T8278] EXT4-fs (loop0): Remounting filesystem read-only
[  177.519928][ T8278] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  177.532990][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  177.609742][ T4205] hsr_slave_0: left promiscuous mode
[  177.623364][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  177.632486][ T4205] hsr_slave_1: left promiscuous mode
[  177.645837][ T4205] batman_adv: batadv0: Removing interface: batadv_slave_0
[  177.664052][ T4205] batman_adv: batadv0: Removing interface: batadv_slave_1
[  177.949568][ T8245] chnl_net:caif_netlink_parms(): no params data found
[  178.037809][ T8245] bridge0: port 1(bridge_slave_0) entered blocking state
[  178.088060][ T8245] bridge0: port 1(bridge_slave_0) entered disabled state
[  178.095579][ T8245] bridge_slave_0: entered allmulticast mode
[  178.102381][ T8245] bridge_slave_0: entered promiscuous mode
[  178.110327][ T8245] bridge0: port 2(bridge_slave_1) entered blocking state
[  178.119827][ T8245] bridge0: port 2(bridge_slave_1) entered disabled state
[  178.130106][ T8245] bridge_slave_1: entered allmulticast mode
[  178.136920][ T8245] bridge_slave_1: entered promiscuous mode
[  178.170316][ T8245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  178.182706][ T4205] IPVS: stop unused estimator thread 0...
[  178.186571][ T8245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  178.212897][ T8355] netlink: 112 bytes leftover after parsing attributes in process `syz.5.1527'.
[  178.230516][ T8245] team0: Port device team_slave_0 added
[  178.245552][ T8245] team0: Port device team_slave_1 added
[  178.265901][ T8245] batman_adv: batadv0: Adding interface: batadv_slave_0
[  178.279501][ T8245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  178.313047][ T8245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  178.326772][ T8245] batman_adv: batadv0: Adding interface: batadv_slave_1
[  178.334294][ T8245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  178.361674][ T8245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  178.391739][ T8245] hsr_slave_0: entered promiscuous mode
[  178.398057][ T8245] hsr_slave_1: entered promiscuous mode
[  178.404345][ T8245] debugfs: 'hsr0' already exists in 'hsr'
[  178.410344][ T8245] Cannot create hsr debugfs directory
[  178.501063][ T8245] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  178.538355][ T8245] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  178.557985][ T8245] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  178.583561][ T8245] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  178.633561][ T8245] bridge0: port 2(bridge_slave_1) entered blocking state
[  178.640704][ T8245] bridge0: port 2(bridge_slave_1) entered forwarding state
[  178.648108][ T8245] bridge0: port 1(bridge_slave_0) entered blocking state
[  178.655254][ T8245] bridge0: port 1(bridge_slave_0) entered forwarding state
[  178.707402][ T8369] loop1: detected capacity change from 0 to 512
[  178.724101][ T8369] EXT4-fs: Ignoring removed orlov option
[  178.729844][ T8369] EXT4-fs: Ignoring removed mblk_io_submit option
[  178.754180][ T8369] EXT4-fs error (device loop1): ext4_iget_extra_inode:5025: inode #15: comm syz.1.1531: corrupted in-inode xattr: e_value size too large
[  178.774623][ T8245] 8021q: adding VLAN 0 to HW filter on device bond0
[  178.866235][ T8369] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  178.866437][ T8369] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1531: couldn't read orphan inode 15 (err -117)
[  178.875782][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  178.875802][    C1] EXT4-fs (loop1): initial error at time 2000000024: ext4_iget_extra_inode:5025: inode 15
[  178.875828][    C1] EXT4-fs (loop1): last error at time 2000000024: ext4_iget_extra_inode:5025: inode 15
[  178.914183][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  178.914294][ T8369] loop1: lost filesystem error report for type 5 error -117
[  178.921963][ T8369] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  178.941787][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  178.958642][ T8245] 8021q: adding VLAN 0 to HW filter on device team0
[  178.963942][   T28] audit: type=1400 audit(2000000024.920:1097): avc:  denied  { create } for  pid=8367 comm="syz.1.1531" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1
[  178.977497][ T8245] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  179.009965][ T8369] EXT4-fs error (device loop1): ext4_append:79: inode #2: comm syz.1.1531: Logical block already allocated
[  179.062823][   T28] audit: type=1400 audit(2000000024.970:1098): avc:  denied  { rename } for  pid=8367 comm="syz.1.1531" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  179.117729][ T8369] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1531'.
[  179.131569][ T8369] netlink: 'syz.1.1531': attribute type 1 has an invalid length.
[  179.140062][   T28] audit: type=1400 audit(2000000024.990:1099): avc:  denied  { ioctl } for  pid=8387 comm="syz.0.1534" path="socket:[21226]" dev="sockfs" ino=21226 ioctlcmd=0x8905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  179.170691][   T28] audit: type=1400 audit(2000000025.090:1100): avc:  denied  { setattr } for  pid=8367 comm="syz.1.1531" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  179.210017][ T8392] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1535'.
[  179.272952][ T8392] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1535'.
[  179.337385][   T28] audit: type=1400 audit(2000000025.090:1101): avc:  denied  { accept } for  pid=8367 comm="syz.1.1531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  179.469273][ T8245] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  179.481701][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  179.488787][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  179.497693][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  179.504777][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  179.542356][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  179.557918][   T28] audit: type=1400 audit(2000000025.520:1102): avc:  denied  { egress } for  pid=3382 comm="kworker/0:2" daddr=ff02::16 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1
[  179.599177][ T8245] 8021q: adding VLAN 0 to HW filter on device batadv0
[  179.627268][   T28] audit: type=1400 audit(2000000025.520:1103): avc:  denied  { sendto } for  pid=3382 comm="kworker/0:2" daddr=ff02::16 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1
[  179.661190][ T8405] loop0: detected capacity change from 0 to 128
[  179.677416][ T4209] ==================================================================
[  179.685522][ T4209] BUG: KCSAN: data-race in touch_atime / touch_atime
[  179.692203][ T4209] 
[  179.694520][ T4209] write to 0xffff888105717258 of 4 bytes by task 4205 on cpu 0:
[  179.702135][ T4209]  touch_atime+0x1d7/0x330
[  179.706552][ T4209]  shmem_file_read_iter+0x477/0x540
[  179.711774][ T4209]  lo_rw_aio+0x67d/0x730
[  179.716029][ T4209]  loop_process_work+0x56c/0xac0
[  179.721145][ T4209]  loop_workfn+0x31/0x40
[  179.725397][ T4209]  process_scheduled_works+0x4de/0x9e0
[  179.730865][ T4209]  worker_thread+0x581/0x770
[  179.735471][ T4209]  kthread+0x22a/0x280
[  179.739541][ T4209]  ret_from_fork+0x150/0x360
[  179.744141][ T4209]  ret_from_fork_asm+0x1a/0x30
[  179.748912][ T4209] 
[  179.751234][ T4209] read to 0xffff888105717258 of 4 bytes by task 4209 on cpu 1:
[  179.759041][ T4209]  touch_atime+0x16c/0x330
[  179.763478][ T4209]  shmem_file_read_iter+0x477/0x540
[  179.768686][ T4209]  lo_rw_aio+0x67d/0x730
[  179.772945][ T4209]  loop_process_work+0x56c/0xac0
[  179.777976][ T4209]  loop_rootcg_workfn+0x22/0x30
[  179.782922][ T4209]  process_scheduled_works+0x4de/0x9e0
[  179.788408][ T4209]  worker_thread+0x581/0x770
[  179.793021][ T4209]  kthread+0x22a/0x280
[  179.797099][ T4209]  ret_from_fork+0x150/0x360
[  179.801806][ T4209]  ret_from_fork_asm+0x1a/0x30
[  179.806588][ T4209] 
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  179.808915][ T4209] value changed: 0x258e0d9f -> 0x2699eb56
[  179.814634][ T4209] 
[  179.816964][ T4209] Reported by Kernel Concurrency Sanitizer on:
[  179.823115][ T4209] CPU: 1 UID: 0 PID: 4209 Comm: kworker/u8:24 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  179.834407][ T4209] Tainted: [W]=WARN
[  179.838211][ T4209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  179.848449][ T4209] Workqueue: loop0 loop_rootcg_workfn
[  179.853872][ T4209] ==================================================================
[  179.888125][   T28] audit: type=1400 audit(2000000025.850:1104): avc:  denied  { recv } for  pid=3299 comm="syz-executor" saddr=10.128.0.163 src=38360 daddr=10.128.0.167 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  179.966964][ T8405] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  180.050648][ T8405] ext4 filesystem being mounted at /260/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  180.076031][ T8405] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  180.318158][ T4205] bridge_slave_1: left allmulticast mode
[  180.324487][ T4205] bridge_slave_1: left promiscuous mode
[  180.330210][ T4205] bridge0: port 2(bridge_slave_1) entered disabled state
[  180.475496][ T4205] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  180.484906][ T4205] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  180.493991][ T4205] bond0 (unregistering): Released all slaves
[  180.501422][ T4205] bond1 (unregistering): Released all slaves
[  180.566051][ T4205] tipc: Left network mode
[  180.576242][ T4205] hsr_slave_0: left promiscuous mode
[  180.593802][ T4205] hsr_slave_1: left promiscuous mode
[  180.599813][ T4205] dummy0: left allmulticast mode
[  180.613892][ T4205] dummy0: left promiscuous mode
[  180.660134][ T4205] team0 (unregistering): Port device team_slave_1 removed
[  180.670224][ T4205] team0 (unregistering): Port device team_slave_0 removed
[  180.856693][ T4205] IPVS: stop unused estimator thread 0...
[  181.259066][ T4205] bridge_slave_1: left allmulticast mode
[  181.265185][ T4205] bridge_slave_1: left promiscuous mode
[  181.270845][ T4205] bridge0: port 2(bridge_slave_1) entered disabled state
[  181.280103][ T4205] bridge_slave_0: left allmulticast mode
[  181.285913][ T4205] bridge_slave_0: left promiscuous mode
[  181.292908][ T4205] bridge0: port 1(bridge_slave_0) entered disabled state
[  181.303659][ T4205] bridge_slave_1: left allmulticast mode
[  181.309383][ T4205] bridge_slave_1: left promiscuous mode
[  181.315310][ T4205] bridge0: port 2(bridge_slave_1) entered disabled state
[  181.323032][ T4205] bridge_slave_0: left allmulticast mode
[  181.330396][ T4205] bridge_slave_0: left promiscuous mode
[  181.336300][ T4205] bridge0: port 1(bridge_slave_0) entered disabled state
[  181.495417][ T4205] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  181.504540][ T4205] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  181.513830][ T4205] bond0 (unregistering): Released all slaves
[  181.520898][ T4205] bond1 (unregistering): Released all slaves
[  181.528779][ T4205] bond2 (unregistering): Released all slaves
[  181.567186][ T4205] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  181.576450][ T4205] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  181.585694][ T4205] bond0 (unregistering): Released all slaves
[  181.593179][ T4205] bond1 (unregistering): Released all slaves
[  181.617814][ T4205] tipc: Left network mode
[  181.628578][ T4205] IPVS: stopping backup sync thread 7298 ...
[  181.645646][ T4205] hsr_slave_0: left promiscuous mode
[  181.651363][ T4205] hsr_slave_1: left promiscuous mode
[  181.658145][ T4205] batman_adv: batadv0: Removing interface: batadv_slave_0
[  181.666200][ T4205] batman_adv: batadv0: Removing interface: batadv_slave_1
[  181.675210][ T4205] hsr_slave_0: left promiscuous mode
[  181.680865][ T4205] hsr_slave_1: left promiscuous mode
[  181.686670][ T4205] batman_adv: batadv0: Removing interface: batadv_slave_0
[  181.694153][ T4205] batman_adv: batadv0: Removing interface: batadv_slave_1
[  181.702054][ T4205] veth1_vlan: left allmulticast mode
[  181.717428][ T4205] team0 (unregistering): Port device macvlan1 removed
[  181.739788][ T4205] team0 (unregistering): Port device team_slave_1 removed
[  181.749016][ T4205] team0 (unregistering): Port device team_slave_0 removed
[  181.799108][ T4205] team0 (unregistering): Port device team_slave_1 removed
[  181.808225][ T4205] team0 (unregistering): Port device team_slave_0 removed
[  182.251884][ T4205] IPVS: stop unused estimator thread 0...
[  182.259734][ T4205] IPVS: stop unused estimator thread 0...
[  182.711119][ T4205] bridge0: port 3(batadv0) entered disabled state
[  182.718547][ T4205] bridge_slave_1: left allmulticast mode
[  182.724433][ T4205] bridge_slave_1: left promiscuous mode
[  182.730159][ T4205] bridge0: port 2(bridge_slave_1) entered disabled state
[  182.737955][ T4205] bridge_slave_0: left allmulticast mode
[  182.743595][ T4205] bridge_slave_0: left promiscuous mode
[  182.749305][ T4205] bridge0: port 1(bridge_slave_0) entered disabled state
[  182.758582][ T4205] bridge_slave_1: left allmulticast mode
[  182.764267][ T4205] bridge_slave_1: left promiscuous mode
[  182.769965][ T4205] bridge0: port 2(bridge_slave_1) entered disabled state
[  182.777806][ T4205] bridge_slave_0: left allmulticast mode
[  182.783434][ T4205] bridge_slave_0: left promiscuous mode
[  182.789162][ T4205] bridge0: port 1(bridge_slave_0) entered disabled state
[  182.995319][ T4205] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  183.004495][ T4205] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  183.013400][ T4205] bond0 (unregistering): Released all slaves
[  183.076150][ T4205] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  183.085700][ T4205] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  183.095011][ T4205] bond0 (unregistering): Released all slaves
[  183.145891][ T4205] IPVS: stopping master sync thread 4750 ...
[  183.155888][ T4205] hsr_slave_0: left promiscuous mode
[  183.161491][ T4205] hsr_slave_1: left promiscuous mode
[  183.167284][ T4205] batman_adv: batadv0: Removing interface: batadv_slave_0
[  183.174914][ T4205] batman_adv: batadv0: Removing interface: batadv_slave_1
[  183.185886][ T4205] hsr_slave_0: left promiscuous mode
[  183.192762][ T4205] hsr_slave_1: left promiscuous mode
[  183.198682][ T4205] batman_adv: batadv0: Removing interface: batadv_slave_0
[  183.206850][ T4205] batman_adv: batadv0: Removing interface: batadv_slave_1
[  183.245069][ T4205] macvlan1 (unregistering): left promiscuous mode
[  183.251845][ T4205] team0 (unregistering): Port device macvlan1 removed
[  183.276008][ T4205] team_slave_1 (unregistering): left promiscuous mode
[  183.283505][ T4205] team0 (unregistering): Port device team_slave_1 removed
[  183.292056][ T4205] team_slave_0 (unregistering): left promiscuous mode
[  183.299367][ T4205] team0 (unregistering): Port device team_slave_0 removed
[  183.346604][ T4205] team0 (unregistering): Port device team_slave_1 removed
[  183.355940][ T4205] team0 (unregistering): Port device team_slave_0 removed