last executing test programs:

23.664564547s ago: executing program 4 (id=37):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000000c0)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000001c0), 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b800294429118927"], 0xfdef)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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")
r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12)
write(r7, &(0x7f0000000a00)="c7", 0x1)
sendfile(r7, r6, 0x0, 0x3ffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x5, [@func={0x3, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x2}]}]}, {0x0, [0x0, 0x0, 0x61]}}, 0x0, 0x3d, 0x0, 0x1}, 0x28)
sendfile(r7, r6, 0x0, 0x7ffff000)
r8 = getpid()
syz_pidfd_open(r8, 0x0)
r9 = syz_clone(0x1b200000, 0x0, 0x0, 0x0, 0x0, 0x0)
tkill(r9, 0x4)
getsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)

22.618766818s ago: executing program 4 (id=50):
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50)
close(r1)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a0000005b2f25f0f37b5cb20400000000000000992724d8a9dab40c5d2704e58b39c6b9aba2496c03e883a1618456488fa497a9d6d31d53cd6bf8e5b0134eb37ccd6c19ebe4baeca61fda06ce529e1f5fa87672d510f35e3fe3237d55f541b3314bda8005ac71281b6471d7c5a2808d670f35fc22e956b107c7cc11c09a400694db7853d0d2f9d761fda58054fcb5c3a762d0b93913", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x61ba1c06989fc72, '\x00', 0x0, 0x2}, 0x94)
socket$pppl2tp(0x18, 0x1, 0x1)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000146000/0x4000)=nil)
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000759, &(0x7f0000000580)={[{@jqfmt_vfsold}, {@noblock_validity}, {@nobh}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xff}, 0x0}, {@noauto_da_alloc}, {@max_batch_time={'max_batch_time', 0x3d, 0xc}}, {@jqfmt_vfsv1}, {@nombcache}, {@lazytime}, {@resuid}, {@dax_always}, {@test_dummy_encryption_v1}, {@auto_da_alloc}, {@nodioread_nolock}, {@data_writeback}, {@grpid}], [], 0x2c}, 0x0, 0x51b, &(0x7f0000001300)="$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")
setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0)
setsockopt$MRT_TABLE(0xffffffffffffffff, 0x0, 0xcf, 0x0, 0x0)
setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a)
syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r4)
r5 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r5, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400196338834b80040d8c560a066f02b805b97300000000000058000b4824ca945f64009400ff0325010ebc000000000000000100f0effeffe809005300fff5dd00000010000100080c10000000007b72000000", 0x68}], 0x1)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000880)={'syztnl2\x00', &(0x7f00000007c0)={'erspan0\x00', <r6=>0x0, 0x8010, 0x0, 0xfc7c, 0x80000001, {{0x20, 0x4, 0x0, 0x16, 0x80, 0x64, 0x0, 0x5, 0x29, 0x0, @remote, @broadcast, {[@ssrr={0x89, 0xf, 0xe4, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x3f}]}, @lsrr={0x83, 0xb, 0xc4, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0x24, 0x48, 0x1, 0x7, [{@private=0xa010102, 0x5}, {@rand_addr=0x64010101, 0x3b9f}, {@local, 0x8}, {@dev={0xac, 0x14, 0x14, 0x25}}]}, @timestamp_addr={0x44, 0x2c, 0xb0, 0x1, 0xb, [{@loopback, 0x2e}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@loopback, 0xaa}, {@loopback, 0x7fffffff}, {@private=0xa010102, 0x7}]}, @noop, @noop]}}}}})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c00)={r3, 0xe0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000009c0)=[0x0, 0x0], <r7=>0x0, 0xe2, &(0x7f0000000a00)=[{}, {}], 0x10, 0x10, &(0x7f0000000a40), &(0x7f0000000a80), 0x8, 0x4d, 0x8, 0x8, &(0x7f0000000ac0)}}, 0x10)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c40)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4}, 0x50)
ioctl$HIDIOCGNAME(r4, 0x80404806, &(0x7f0000000f80))
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000e00)={{r4, <r9=>0xffffffffffffffff}, &(0x7f0000000cc0), &(0x7f0000000dc0)='%-5lx  \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x5, 0x19, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8e9, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000}}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='syzkaller\x00', 0x1, 0x9a, &(0x7f00000004c0)=""/154, 0x40f00, 0x14, '\x00', r6, @fallback=0x18, r4, 0x8, &(0x7f00000008c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000900)={0x4, 0x4, 0x3, 0xba}, 0x10, r7, r4, 0x2, &(0x7f0000000e40)=[r8, r9], &(0x7f0000000e80)=[{0x0, 0x2, 0x10, 0x9}, {0x1, 0x5, 0xc, 0x1}], 0x10, 0x12000000}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r2}, &(0x7f0000000d00), &(0x7f0000000d40)='%-5lx  \x00'}, 0x20)
socket$kcm(0x10, 0x2, 0x0)
mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2})
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000300edff000000000040000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000050000009500000000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r10, r1}, 0xc)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r11)
r12 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x28264, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r0, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r12, 0x2405, r12)

22.351000783s ago: executing program 4 (id=52):
socket$netlink(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0xb5, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={&(0x7f00000034c0), 0x7}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x4, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000001, 0xffffffffffffffff, 0x8)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000e80)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x2, 0x0, 0xfe, 0x11, 0x0, @local, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0)

22.312622945s ago: executing program 4 (id=53):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$unix(0x1, 0x1, 0x0)
close(r1)
socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20000000)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000140)={[{@jqfmt_vfsv1}, {}, {@quota}, {@noauto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}, {@orlov}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0xa0028010})
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x79, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7ffffe, 0x1}, 0x1a110, 0x1, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0)
fcntl$lock(r4, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x200008, 0x6, r3})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180002000000100000008000540efffffff0500010001"], 0x24}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x31}, 0x20000888)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000203030100000000000000000400000a0800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x0)
ioctl(0xffffffffffffffff, 0xb48, &(0x7f0000000000)="5b2088991e57a65a9fae7d0e4ec04e594cbc21")
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_queued\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_LEAVE_IBSS(r6, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="040023fe9431672ce32c80b4aa80"], 0x14}, 0x1, 0x0, 0x0, 0x4c040}, 0x41)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000203010100000000000000000400001a"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010)
listen(r0, 0x32d5)
sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000000103b13a00000000000000000000000a"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x10)
r8 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r8, 0x0, 0x1)
socket$nl_route(0x10, 0x3, 0x0)

21.931901857s ago: executing program 4 (id=55):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000200)={0xfffffffb, 0x8, 0x5, 0x999, 0x80, 0x5})
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x88002, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02003574b2a641a197a1", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x100000000000006, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x8312, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x200000400000000, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = dup(r3)
write$UHID_INPUT(r4, &(0x7f0000000e00)={0xc, {"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", 0x1000}}, 0x1006)
creat(&(0x7f0000000180)='./file0\x00', 0xa)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={<r6=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r6, 0x4734}}, 0x10)
close_range(r5, r5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="1802000063f9ffff0000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="00000000000000004a152c65f176ef2b00900000ec940000e8000000a83dab922d3939"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

20.354671919s ago: executing program 4 (id=74):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000200)={0xfffffffb, 0x8, 0x5, 0x999, 0x80, 0x5})
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x88002, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02003574b2a641a197a100"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x100000000000006, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x8312, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x200000400000000, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, 0x0)
dup(0xffffffffffffffff)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x4734}}, 0x10)
close_range(r2, r2, 0x0)

20.32834811s ago: executing program 32 (id=74):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000200)={0xfffffffb, 0x8, 0x5, 0x999, 0x80, 0x5})
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x88002, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02003574b2a641a197a100"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x100000000000006, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x8312, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x200000400000000, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, 0x0)
dup(0xffffffffffffffff)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x4734}}, 0x10)
close_range(r2, r2, 0x0)

11.294415455s ago: executing program 2 (id=175):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r0, &(0x7f0000000080), 0x12)
bind$x25(r0, &(0x7f0000000000), 0x12)
ioctl$SIOCX25SCUDMATCHLEN(r0, 0x89e7, &(0x7f0000000040)={0x45})
syz_init_net_socket$x25(0x9, 0x5, 0x0) (async)
bind$x25(r0, &(0x7f0000000080), 0x12) (async)
bind$x25(r0, &(0x7f0000000000), 0x12) (async)
ioctl$SIOCX25SCUDMATCHLEN(r0, 0x89e7, &(0x7f0000000040)={0x45}) (async)

10.966952153s ago: executing program 2 (id=178):
r0 = socket$inet(0x2, 0x2, 0x1)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000100008400000000000000000200000000000005000000000000000604"], 0x0, 0x3e, 0x0, 0x1}, 0x28)
sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x10000000000001cd, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f000001000000000020"], 0x40}, 0xfffe)

10.966656673s ago: executing program 2 (id=179):
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f0000"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0xd81, &(0x7f0000002640)=ANY=[], 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00')
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00')
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="8272616e733d6a642c7266646e6f3d2f64d8f29a569a4c5a9f4248f6d0b3f5f744c7bd33f3dba3274f46c297bb86d33f0414afd56176c80ad08c4162f60c0665ace2674a50556c062187ffdbc78d3ec1255d3fd23c97d682c396a0300d86e18aa59fbf7d10a71d9589fcb6521c703b2b141ccffc3ad4920a8d348238a20326882953c1498b940e5376d1412b4fd1d450d11385cc1a", @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',\x00'])
r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xa)
process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0)
write$binfmt_elf64(r0, &(0x7f0000002600)=ANY=[], 0x1820)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={0xffffffffffffffff, r2, 0x30, 0x0, @val=@netfilter={0xa, 0x1, 0x80000001}}, 0x20)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000004000000000000080"], 0x50)
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]})
r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000001c0)=0xf)
close_range(r8, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x3b6, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x20010, r7, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608ffff0000100018000000000000000000000000000a009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78)

10.962901813s ago: executing program 2 (id=182):
syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000000c0)={[{@grpquota}, {@nogrpid}, {@quota}, {@nobh}]}, 0xff, 0x511, &(0x7f0000000ac0)="$eJzs3c9vI2cZAOB3nDhxsmmTlh4AQbu0hQWt1km8bVT1AOWEEKqE6BGkbUi8URQ7jmKnNGEP2zNXJCpxgiN/AOeeuHNBcOOyHJD4EYE2SByMZjzOerN2Ntps7BA/jzSa+ebz+n2/tWa+zJt4JoCxdT0i7kfEVER8GBHz+f4kX+K9zpK+7uHhvbWjw3trSbTbH/wjyfrTfdHzb1LX8vcsRcQPvhPx4+TJuM39g63VWq26m7cXW/Wdxeb+wa3N+upGdaO6XamsLK8svXP77cpzG+tr9al868sPfn//Gz9N05rL9/SO41kknSH32x8RxeM4qcmI+N55gl0iE/l4pkadCM+kEBEvR8Tr2fE/HxPZpwkAXGXt9ny053vbAMBVV8hqYEmhnNcC5qJQKJc7NbxXYrZQazRbN+829rbXO7WyhSgW7m7Wqkt5rXAhiknaXs62H7UrnfZ0t307Il6KiJ9Pz2Tt8lqjtj7KH3wAYIxdOzH//3u6M/8DAFdcadQJAABDZ/4HgPFj/geA8WP+B4Dx05n/Z0adBgAwRKde/7sfEABcSer/ADBWvv/+++nSPsrvf73+0f7eVuOjW+vV5la5vrdWXmvs7pQ3Go2N7J499ae9X63R2Fl+K/Y+XvjmTrO12Nw/uFNv7G237mT39b5TLWav6nurbABgSF567bM/JemM/O5MtkTPsxyKI80MuGiFUScAjMzEqBMARsZf98D4Osc1vvIAXBF9HtH7mFK/Lwi12+32xaUEXLAbX1D/h3HVU//3V8AwZtT/YXyp/8P4areTsz7zP876QgDgclPjBwb8/v/lfP2b/JcDP1o/+YpPLzIrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuNy6z/8t588Cn4tCoVyOeCEiFqKY3N2sVZci4sWI+ON0cTptL484ZwDgvAp/TfLnf92Yf3Pusa5Xrx1vTkXET375wS8+Xm21dv8QMZX8c7q7v/Vpvr8y/OwBgNOl1/rdeTpb91zIPzy8t9ZdhpnT374dEaVO/KPDqTg6jj8Zk9m6FMWImP1Xkrc7kp7axXnc/yQiPt9v/EnMZTWQzpNPT8ZPY78w1PiFx+IXsr7OOv2/+NxzyAXGzWfp+ee9fsdfIa5n6/7Hfyk7Q51ffv5L32rtKDsHPorfPf9NDDj/XT9rjLd+993O1syTfZ9EfHEyohv7qOf8042fDIj/5hnj//lLr74+qK/9q4gb0T9+b6zFVn1nsbl/cGuzvrpR3ahuVyoryytL79x+u7KY1agXB88Gf3/35ouD+tLxzw6IX3rK+L96xvH/+r8f/vArp8T/+hv94hfilVPip3Pi184Yf3X2t6VBfWn89QHjf9rnf/OM8R/85eCJx4YDAKPT3D/YWq3Vqrv/7xtzxc6ALks+Ni5iI/2EL0EafTe+NaxYU9G/62dvdA6BE13t9jPFGnTGeB5VN+AyOD7oI+I/o04GAAAAAAAAAAAAAADoaxjfWBr1GAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALi6/hcAAP//leLMXA==")
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa00008, &(0x7f0000000000), 0x1, 0x7c8, &(0x7f0000001280)="$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")
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0)
quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000280)={0x401, 0x3, 0x80007b, 0x1, 0x6, 0x7, 0x1000, 0xf63, 0xfffffffc})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x10000000002008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r0 = syz_clone(0x80008000, 0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0)
move_pages(r0, 0xffffffffffffff3d, 0x0, &(0x7f0000000000), 0x0, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)

10.962522363s ago: executing program 2 (id=183):
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce2200182f00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa35f088be"], 0xfdef)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd634936f2})
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2000000000000137, &(0x7f0000000040)=ANY=[@ANYRES8=r1, @ANYRESOCT=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x80)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8910, &(0x7f0000000080))
r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x82, 0x0)
close(r4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x800, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
write$cgroup_subtree(r0, 0x0, 0x66)

5.944059255s ago: executing program 2 (id=235):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
bpf$MAP_CREATE_CONST_STR(0x406, 0x0, 0x48)

5.911743096s ago: executing program 33 (id=235):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
bpf$MAP_CREATE_CONST_STR(0x406, 0x0, 0x48)

4.108442791s ago: executing program 1 (id=247):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
ptrace$peekuser(0x3, 0x0, 0x5)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_emit_ethernet(0x3a, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[], 0x48)
r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341)
ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)

3.227931042s ago: executing program 1 (id=251):
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f0000"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0xd81, &(0x7f0000002640)=ANY=[], 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00')
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00')
r5 = syz_open_procfs(0x0, 0x0)
mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="8272616e733d6a642c7266646e6f3d2f64d8f29a569a4c5a9f4248f6d0b3f5f744c7bd33f3dba3274f46c297bb86d33f0414afd56176c80ad08c4162f60c0665ace2674a50556c062187ffdbc78d3ec1255d3fd23c97d682c396a0300d86e18aa59fbf7d10a71d9589fcb6521c703b2b141ccffc3ad4920a8d348238a20326882953c1498b940e5376d1412b4fd1d450d11385cc1a", @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',\x00'])
r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xa)
process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0)
write$binfmt_elf64(r0, &(0x7f0000002600)=ANY=[], 0x1820)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={0xffffffffffffffff, r2, 0x30, 0x0, @val=@netfilter={0xa, 0x1, 0x80000001}}, 0x20)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000004000000000000080"], 0x50)
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]})
r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000001c0)=0xf)
close_range(r8, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x3b6, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x20010, r7, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608ffff0000100018000000000000000000000000000a009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78)

3.026242964s ago: executing program 1 (id=254):
r0 = syz_io_uring_setup(0x110c, 0x0, &(0x7f0000000180)=<r1=>0x0, 0x0)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x2c)
quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000802, 0x0, &(0x7f0000000380)={0xf812, 0xfffffffffffffffa, 0x1, 0x800, 0x9, 0x8, 0x1, 0x200, 0x7f})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYRESDEC=r2], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000300)=ANY=[], 0x1b0)
ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[], 0x13c}}, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, 0x0, 0x0, 0x4)
syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b})
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x32b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x3, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x0, 0x1}}}}}]}}]}}, 0x0)
io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0)
r6 = openat(0xffffffffffffff9c, 0x0, 0x183042, 0x15)
write$UHID_INPUT(r6, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fallocate(r6, 0x20, 0x0, 0x8000)
getpeername$tipc(r6, 0x0, 0x0)

2.863672813s ago: executing program 3 (id=255):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
r0 = syz_io_uring_setup(0x8d6, &(0x7f00000000c0)={0x0, 0x0, 0x400, 0x0, 0x379}, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0)
epoll_pwait(0xffffffffffffffff, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x5, &(0x7f0000000300)={[0x1]}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a0000000200000006100000ff00000042000000", @ANYRES32, @ANYBLOB="0000000000000001000400bb88ba04d0909fc8e1", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"], 0x50)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r0, 0x47ba, 0x3e82, 0x60, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1e00000003000000000000600100010001000000", @ANYRES32, @ANYBLOB="fbffffffff000000000000000000000800000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400000004000000000000000600"/28], 0x50)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r6)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="1709000000000000000001000000050007000000000008000900fffffffe060002000000000008000a000100000008001800ac1414aa08001900e000000214001b0017"], 0x58}}, 0x0)
sendmsg$IPSET_CMD_DEL(r5, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000000a0601020000000000000000070000030900020073797a3000000000"], 0x20}, 0x1, 0x0, 0x0, 0xdeed27a3577f2f9c}, 0x4)

2.306136355s ago: executing program 5 (id=259):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
ptrace$peekuser(0x3, 0x0, 0x5)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_emit_ethernet(0x3a, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x48)
r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341)
ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)

2.061616929s ago: executing program 1 (id=260):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000000c0)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000001c0), 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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")
r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12)
write(r7, &(0x7f0000000a00)="c7", 0x1)
sendfile(r7, r6, 0x0, 0x3ffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x5, [@func={0x3, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x2}]}]}, {0x0, [0x0, 0x0, 0x61]}}, 0x0, 0x3d, 0x0, 0x1}, 0x28)
sendfile(r7, r6, 0x0, 0x7ffff000)
r8 = getpid()
syz_pidfd_open(r8, 0x0)
r9 = syz_clone(0x1b200000, 0x0, 0x0, 0x0, 0x0, 0x0)
tkill(r9, 0x4)
getsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$ITER_CREATE(0x21, 0x0, 0x0)

2.06128913s ago: executing program 3 (id=261):
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e00000004000000040000000a"], 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYBLOB], 0x50)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r0}, 0x4)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)
r1 = creat(0x0, 0xd931d3864d39dcdb)
close(r1)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
capset(0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x208802, 0x0)
r2 = fcntl$getown(r1, 0x9)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x8, 0x9658, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f0000000ec0), 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x8f17, 0xb, 0x0, 0x0, 0x0, 0x100000020000006}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000940)={[{@jqfmt_vfsold}, {@debug}, {@noblock_validity}, {@noload}, {@nombcache}, {@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xfa, 0x47c, &(0x7f0000001f80)="$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")
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48041, 0x0)

1.376973639s ago: executing program 5 (id=262):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='c 75:*'], 0xa)
bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x1b, 0x1, &(0x7f00000004c0)=@raw=[@ldst={0x2, 0x1, 0x6, 0xa, 0x1, 0x6, 0x10}], &(0x7f0000000500)='syzkaller\x00', 0x9, 0x22, &(0x7f0000000540)=""/34, 0x41100, 0x60, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000006c0)={0x0, 0xf, 0x3, 0xffffff7f}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000b00), &(0x7f0000000b40), 0x10, 0x2e765820}, 0x94)

1.307424504s ago: executing program 0 (id=263):
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f0000"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0xd81, &(0x7f0000002640)=ANY=[], 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00')
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00')
r5 = syz_open_procfs(0x0, 0x0)
mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="8272616e733d6a642c7266646e6f3d2f64d8f29a569a4c5a9f4248f6d0b3f5f744c7bd33f3dba3274f46c297bb86d33f0414afd56176c80ad08c4162f60c0665ace2674a50556c062187ffdbc78d3ec1255d3fd23c97d682c396a0300d86e18aa59fbf7d10a71d9589fcb6521c703b2b141ccffc3ad4920a8d348238a20326882953c1498b940e5376d1412b4fd1d450d11385cc1a", @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',\x00'])
r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xa)
process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0)
write$binfmt_elf64(r0, &(0x7f0000002600)=ANY=[], 0x1820)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={0xffffffffffffffff, r2, 0x30, 0x0, @val=@netfilter={0xa, 0x1, 0x80000001}}, 0x20)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000004000000000000080"], 0x50)
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]})
r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000001c0)=0xf)
close_range(r8, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x3b6, &(0x7f00000003c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb86dd60122d9203803afffe8000000000000000000000000000bbff020000000005e94248000000000001860090780000000000070000000000001f0aa78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af260201010000000500000000260004001818fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978021d06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc833f863674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000220b17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003060000000000000000000000000200000000000000000000000000008879e66485201a0015ca8374000000000000000000000000000000000000145e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c0305d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce6"], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x20010, r7, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608ffff0000100018000000000000000000000000000a009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78)

1.19705125s ago: executing program 0 (id=264):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xa6bde06c7f7587af, 0x0)
ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x7, 0x0, 0x3, 0xfffffff8}, {0x7fff, 0x2e, 0x8, 0x80000000}]})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x80, 0x30, 0xb, 0x5, 0x0, {}, [{0x6c, 0x1, [@m_ct={0x68, 0x1, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x5, 0x7}, @TCA_CT_PARMS={0x18, 0x1, {0x3873, 0x2, 0x6, 0x452, 0x8}}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x1}, @TCA_CT_LABELS={0x13, 0x7, "ecac453c8b581c2a7fd3f798141b120c"}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x8890}, 0x4014850)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080)

1.19408724s ago: executing program 1 (id=265):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x2008002, &(0x7f0000000080)={[{@errors_remount}]}, 0x4, 0x54e, &(0x7f0000000fc0)="$eJzs3c9vHFcdAPDvjH82TesEeoAKSIBCQFF2400bVb20uYBQVQlRcUAcUmNvLJNdr/GuS20s1f0bQAKJE/AfcEDigNQTB24ckTggpHJACmCBYiSQFs3s2Nk6a7y117ut9/ORJjPvvZ35vmdn/N6+tecFMLauRsRORExHxBsRMVfkJ8UWr3S27HUPd7cX93a3F5Not1//e5KXZ3nRdU7myeKasxHxja9GfCd5PG5zc+v+Qq1WXS/S5VZ9rdzc3LqxUl9Yri5XVyuV2/O3b75464XKwNp6pf7LB19ZefWbv/n1p9/7/c6Xf5BV62JR1t2OQeo0feogTmYyIl49i2AjMFHsp0dcD04mjYiPRcTn8vt/Liby/50AwHnWbs9Fe647DQCcd2k+B5akpYhI02IQUOrM4T0TF9Jao9m6fq+xsbrUmSu7FFPpvZVa9eblmT9+L3/xVJKl5/OyvDxPVw6lb0XE5Yj40cwTebq02KgtjWbIAwBj78nu/j8i/jWTpqVSX6f2+FQPAPjImB11BQCAodP/A8D40f8DwPjpo/8vPuzfOfO6AADD4f0/AIwf/T8AjB/9PwCMla+/9lq2tfeK518vvbm5cb/x5o2lavN+qb6xWFpsrK+VlhuN5fyZPfXjrldrNNbmn4+Nt8qtarNVbm5u3a03NlZbd/Pnet+tTg2lVQDA/3P5yrt/SCJi56Un8i261nLQV8P5lo66AsDITJzmZAME+EjrtdrXL0ZQD2D4+urC80HC7868LsBo9HyY92zPw/f7yQcI4veM4EPl2if7n/+3xjOcL+b/YXydbP7/5YHXAxi+XvP/wHhot5PDa/5PHxQBAOfSKX6Fr/32oAYhwEgdt5j3QD7/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHPmYkR8N5K0lK8Fnmb/pqVSxFMRcSmmknsrterNiHg6rkTE1EyWnh91pQGAU0r/mhTrf12be+7i4dLp5N8z+T4ivv/T13/81kKrtT6f5f/jIH9mf/mwyqPzTrGuIAAwYHn/XSn2XW/kH+5uL+5vw6zPgzvx32Ip4sW93e18y/KLvLcjZvOxxIV/JjFZnDMbEc9GxMQA4u+8ExGf6NX+JJ8buVSsfNodP4rYTw01fvq++Gle1tlng6+PD6AuMG7evRMRr/S6/9K4mu973/9Z7uQA4j+407nY/s++va74k0WkiR7xs3v+ar8xnv/t1x7LbM91yt6JeHayV/zkIH5yRPzn+oz/p0995ocvH1HW/lnEtegdvztWuVVfKzc3t26s1BeWq8vV1Url9vztmy/eeqFSzueoy/sz1Y/720vXnz6qbln7L3TF318XP4s627P90wfnfqHP9v/8P298+7OPkjOH43/p872//8/0jN+R9Ylf7DP+woVfHbl8dxZ/6Yiv/3Hf/+t9xn/vL1tLfb4UABiC5ubW/YVarbr+gQ6y3r87J3sXepLrHHuQVbG/F+8PF08X9M9xFq044cHUWX1Vz/xg8mCsONgrfyu74pCbkw68Fac6eDisWKP7mQQMx6ObftQ1AQAAAAAAAAAAAAAAjjKMP10adRsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4v/4XAAD//xnx1GQ=")
r0 = socket$l2tp(0x2, 0x2, 0x73)
r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000040)=0x7fc00000)
perf_event_open(0x0, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x2)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1)
sendto$l2tp(r0, &(0x7f0000000000)="1b211065a86bd5278dc9b4b383d78bf8eb8f69c0", 0x14, 0xede29bde9f7e18f9, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x6, &(0x7f0000000200)={0x15, {{0x29, 0x0, 0x3e000000, @private0, 0x5}}}, 0x88)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2a8}, 0x1, 0x0, 0x0, 0x4}, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020660b, &(0x7f0000000480)={0x47, 0xffbf, 0x4, 0x9})

1.135991003s ago: executing program 5 (id=266):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000330001072cbd7000fedbdf2502"], 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x24044094)
r1 = creat(&(0x7f0000000200)='./file1\x00', 0x12e)
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r3 = dup3(r2, r1, 0x0)
getsockname$packet(r3, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r4, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast1}}}], 0x20}, 0x4008804)
sendmsg$inet(r4, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r3, 0x0, 0x1c, 0x0, &(0x7f0000000000)="25bf09e34efa6be8a7ad455dab2921353ec41292615aef7d122e96d0", &(0x7f0000000040), 0x4, 0x0, 0x12, 0x1000, &(0x7f0000000080)="20ed21e86bec2a651c9d5ab75d32ec9d89b4", &(0x7f00000001c0)="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", 0x0, 0x0, 0x1}, 0x50)

1.132337583s ago: executing program 0 (id=267):
r0 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040), 0x10)
listen(r0, 0x0)
r1 = socket(0x28, 0x80005, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080), 0x10)
openat$nvram(0xffffffffffffff9c, 0x0, 0x20100, 0x0)
sendmmsg(r1, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(ctr-camellia-aesni,rmd128)\x00'}, 0x80, &(0x7f0000000380), 0x0, &(0x7f00000004c0)=[{0x50, 0x3a, 0x4, "18bc97544c75ac7920983b75b9febc48cbe81483e0ccfe9f7ac3ba52d7eae2e05e1347364f0d3f75402a1a83f627fce73f749570f5b67d367c974f"}, {0xe0, 0x11, 0x7fff, "49d4a08ac95ea680b2afabc6ad00660ac8a43f20bc6cc18a08527e202c2e08aa36771a685960a1a9f0ed74bd3a8a2c907d461b18a998bd6d0beb752262d0cd379b67d70f9c418da68341938de2ca4331cd8a8b4ec674c0dcd1680b64de7b674701879783629db95458c712d6846e7587a324097ba7e48a3ad98334d0fdfc191e32fdec807fe5ccd6dd40e1a12561c0040ce4e1d085193b45f63bc1b701a2c52bd7c774ff81d6d6981d3d94b25fd777e7e5ecdc995e33c0cfc693f7c0c1a70f60cd0f5c14a6c0b7987a8f64"}, {0x20, 0xff, 0x4, "6ef8346876c998d442fb"}, {0x30, 0x116, 0x8e03, "e1b73ce90a13d415780b627e1abca104df5b5684fdd28603100571c2"}, {0x50, 0x88, 0x3, "fceaff5245c54211416a3c00739202b00f5a53d2adc63013f224e65637a2001f437a6fa12ee79bc65e7dcabc7a0fe6b64cc59b603115c8d80000000000"}], 0x1d0}}], 0x2, 0x24008094)
socket$can_bcm(0x1d, 0x2, 0x2)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000340)={0x5}, 0x8)

1.089242656s ago: executing program 0 (id=268):
r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@barrier_val={'barrier', 0x3d, 0xa8}}, {}, {@nombcache}, {@inode_readahead_blks}, {@bh}, {@orlov}, {@nogrpid}, {@dax_always}, {@grpjquota}]}, 0x13, 0x57b, &(0x7f0000000d80)="$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")
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x8, 0x200)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x1, 0x20, 0x4, "94137f5f655c06bc1f349dd754e1519f92ced5b06f7de75b84d30a8ff59a420e97f0abba799dfc7cd0c2555fc2a141de271de7dc706622c5867893d515f18a52", "d32c006a730bf886c6fff959bdfeb3c6201dbf14e242133c9a41d8f80cc051b5d8775cc31bae48389a0df6361391c85780f793e861708840d2a7785a879c9fbd", "2121bd82cc42503dd5339b716267b362d9190f1a5d230bf8f128cc2be8288907", [0x401, 0x1]})
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x20, &(0x7f00000002c0)={&(0x7f0000000280)=""/41, 0x29, <r2=>0x0, &(0x7f00000003c0)=""/193, 0xc1}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff}, 0x94)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x23, &(0x7f0000000040), &(0x7f0000000200)=0x38)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000064008188040f80ec59acbc0413a1f848290000005e140602000000000e00f6f775e453b1800000121f00", 0x2e}], 0x1}, 0x40000)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000000)={0x200d})
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0)
creat(&(0x7f0000000240)='./file1\x00', 0x84)
unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0)

1.073515377s ago: executing program 5 (id=269):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xfffffffffffffd4f}}, 0x1)
getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/hibernate_compression_threads', 0x60a02, 0x0)
sendfile(r5, r5, 0x0, 0x3)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000110f00000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="04010000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYRES32=r6, @ANYRES32=r8, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)

1.02742815s ago: executing program 3 (id=270):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4)
setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4)
bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10)
listen(r1, 0x0)
r2 = socket(0x1, 0x2, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
r4 = socket$packet(0x11, 0x3, 0x300)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
bind$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14)
setresuid(0x0, r3, r3)
r5 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4)
setsockopt$sock_int(r5, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4)
bind$inet(r5, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r0, 0x0, 0x0)
fchdir(r6)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9902)
fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40a, 0x103)

850.88695ms ago: executing program 5 (id=271):
r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x8007ca, &(0x7f0000000680)={[{@delalloc}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x483, &(0x7f0000001040)="$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")
r1 = add_key$keyring(&(0x7f0000000340), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$restrict_keyring(0xa, r1, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000400)='ex:\xac\xd1\xeb\xf4\xd8&w\xef\x9f`T3%\xfa\xbf\xef\xeb\x8e1w\xfd')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x59b801, 0x1ce)
r3 = fsopen(&(0x7f00000000c0)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000040)='{ource', &(0x7f0000002280)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b//\\\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b<M\n\xc0`[\x82\xf6$\xa4\xbe\x1e\xd3\xe4\xd9L\x14\xed\xcfK\xcc\xeb,\x1a1\xa6\xf3e\xc2F\xc3V\x9c\x8c\xf8\xf7\xe2\xd5\x8bE\xee5\x00\xaa\xd5\xfc\x1b$\x06\x1a\xb0W#\xf4\xde6\x04c\xc0\xeec\xa0l\xd5d\xe5\xcd\xb2\xc10\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8pO\xeb]\xc2\x98C\xffK\xa0\xb3\\\x99{\xcdR\x92\x94\xf7\x1d\x01Q\x1a\xbd\x15b\x15h\xe2!\x00\xb9z)\x19\x00\xee\xd2)[p`\xb3\x03\xa7p\'X\xec\xcdoX\x05\xff\xff/o\xb2\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xe1lw\xec\xac\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\x9cc\xc5ke_\xa7\x11\"\x04\xd8.\xa0\x15\x83\xf1\x92\xdby\xe9\xdc@.\xc1g\xc6\fc\xa26\xd8\xdf\xec\x9es\xee\xcc\x8am\x8b7\xcf\xc5\xa6\xf4\f\xabj%Y\xa9\xdd\x0e9e\xb5\xec\x99@\xd2\t\n\xb1o\x00\x00\x00\x00\x00\x00\x00\x00_\tN\xfd\xa2\xc2SPu\xe7\xc0+SL\xa1', 0x0)
r4 = add_key$user(&(0x7f0000001580), &(0x7f00000015c0)={'syz', 0x2}, &(0x7f0000001600)="406d0427dae884bc4585b1b3f0ab35a4416494fb7a5ec3b3e046485960af9d468616a7c1830ad2bad1fb48462374a672066a9ffca2017e76f3cac71cfb0e1986cc985c05408a536fe6dc49c4756f4e8d96c08625c2bb01750041a26da8fa2aa36fa813478610fa3cf5", 0x69, r1)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, 0x0)
r5 = getpgrp(0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r6 = syz_pidfd_open(r5, 0x0)
fsetxattr$trusted_overlay_nlink(r6, &(0x7f00000018c0), 0x0, 0x0, 0x1)
fremovexattr(r6, &(0x7f0000000280)=@known='trusted.overlay.nlink\x00')
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2)
syz_io_uring_setup(0x2a4d, &(0x7f0000000200)={0x0, 0xb2a6, 0x2, 0x2, 0xa9}, &(0x7f0000000140), &(0x7f00000003c0))
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001900)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r7, @ANYBLOB="000425bd0a5fbfe73c7000ffdbdf25390000", @ANYRES64=r4, @ANYBLOB="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"/428], 0x1c8}}, 0x20000000)
r8 = msgget$private(0x0, 0xb706e0b50f1fe843)
msgctl$MSG_STAT_ANY(r8, 0xd, &(0x7f0000001680)=""/208)
sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="0a012a20", @ANYRES16=0x0, @ANYBLOB="e60f000901008b00005d33cdc96be58bd5b3274e000f", @ANYRES32, @ANYBLOB="0c001a804800030001"], 0x2c}}, 0x1)
r9 = socket(0x10, 0x3, 0x0)
write(r9, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae)
r10 = socket(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESDEC], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0)
recvmmsg$unix(r10, &(0x7f0000001800)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000004740)=""/199, 0xc7}, {&(0x7f0000004940)=""/255, 0xff}, {&(0x7f0000004b00)=""/191, 0xbf}, {&(0x7f0000000580)=""/4072, 0xfe8}, {&(0x7f0000005c00)=""/253, 0xfd}, {&(0x7f0000005d00)=""/215, 0xd7}], 0x6}}], 0x1, 0x0, 0x0)
write(r10, &(0x7f00000017c0)="1400000052004f7fb3e4bf80a000080000000000", 0x14)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000e, 0x6c2f2, 0xffffffffffffffff, 0x0)
move_pages(0x0, 0x2, &(0x7f0000000380)=[&(0x7f00005e4000/0x3000)=nil, &(0x7f00005d4000/0x3000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0)
ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, 0x0)

833.455821ms ago: executing program 1 (id=272):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000000c0)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000001c0), 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b800294429118927"], 0xfdef)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$eJzs3E1rE10UwPGTNEnTlHayeHhEQXrRjW6GNu7FIC2IAUttxBcQp81EQ8akZEIlIrZduXEhfggXpcvuCtov0I07V27cdSO4sAtxJDOTl7aJrWnSWPv/QZlD7j0z9+Y24dyBzPbdN0/zWVvPGmUJRpUERER2ROISlJqAfwy6cUSaLcvl4W+fzt++d/9mMpWanFFqKjl7JaGUGh17/+zFkN9tY1C24g+3vya+bP2/dXb75+yTnK1ytioUy8pQc8XPZWPOMlUmZ+d1paYt07BNlSvYZslrd5ZELFNlreLCQkUZhcxIbKFk2rYyChWVNyuqXFTlUkUZj41cQem6rkZigoOkV2dmjGSHyfNdHgx6pFRKGgMiMrSvJb3alwEBAIC+8uv/erUfrJb0ndT/oZb1/9qFzfLwnfVRv/7fiFTrf5Gm+v9R41ymygTr9X9URBr1f9HbH3S7/t9fEZ1sr3cvjjhOPYy06n+k+h8nRLX+j/mfX9fKg7VxN6D+BwAAAAAAAAAAAAAAAAAAAADgJNhxHM1xHM07DvivOtqgiETdX5B47X0eJnpk9/o3/lj/06Hx4I7QqIj1ajG9mPaOfodNEbHElHHR5If7/+CrxpFl5XZSVXH5YC35+UuLae+7JJmVnJs/IZrE9+Y7ztSN1OSE8uzOD0usOT8hmvzXOj+xNz9cPUbk0sWmfF00+TgvRbEk4/8yrpb/ckKp67dSe64/5PYDAAAAAOBfoKu6+v59sLld39/u7Y+9dm9/HZLW9we8/fV4y/19SM6F+jVrAAAAAABOF7vyPG9YllnqUbAiIj2+RJugNsPDZtUekNumT0AC7Zq6ENQu3ll6dWxdG0/4UO9YsKOhjkX+cFFaBrXbRu36yHQnZ3Y0kaO+h2fevvv++z7enTGRw5zw6nr0gJl2GkQOmmn42L6AAAAAABybRtFfe+VafwcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMApdByP4uv3HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/xa8AAAD//46ZAFE=")
r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12)
write(r6, &(0x7f0000000a00)="c7", 0x1)
sendfile(r6, r5, 0x0, 0x3ffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x5, [@func={0x3, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x2}]}]}, {0x0, [0x0, 0x0, 0x61]}}, 0x0, 0x3d, 0x0, 0x1}, 0x28)
sendfile(r6, r5, 0x0, 0x7ffff000)
r7 = getpid()
syz_pidfd_open(r7, 0x0)
r8 = syz_clone(0x1b200000, 0x0, 0x0, 0x0, 0x0, 0x0)
tkill(r8, 0x4)
getsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$ITER_CREATE(0x21, 0x0, 0x0)

787.247264ms ago: executing program 3 (id=273):
r0 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040), 0x10)
capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x10000, 0x6})
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x1, 0x4)
listen(r0, 0x5)
r1 = socket(0x28, 0x5, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x437, 0x40000000, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x54583}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x100000}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
setrlimit(0x40000000000008, &(0x7f0000000000))
connect$vsock_stream(r1, &(0x7f0000000080), 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x450, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x11d9, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000004180)=@newtaction={0x14, 0x30, 0x2, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4004885}, 0x40004)
setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f00000000c0)={0x1, 0x79e}, 0x8)
socket$rxrpc(0x21, 0x2, 0x2)
sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094)

555.402477ms ago: executing program 0 (id=274):
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f0000"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0xd81, &(0x7f0000002640)=ANY=[], 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00')
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00')
r5 = syz_open_procfs(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="8272616e733d6a642c7266646e6f3d2f64d8f29a569a4c5a9f4248f6d0b3f5f744c7bd33f3dba3274f46c297bb86d33f0414afd56176c80ad08c4162f60c0665ace2674a50556c062187ffdbc78d3ec1255d3fd23c97d682c396a0300d86e18aa59fbf7d10a71d9589fcb6521c703b2b141ccffc3ad4920a8d348238a20326882953c1498b940e5376d1412b4fd1d450d11385cc1a", @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',\x00'])
r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xa)
process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0)
write$binfmt_elf64(r0, &(0x7f0000002600)=ANY=[], 0x1820)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={0xffffffffffffffff, r2, 0x30, 0x0, @val=@netfilter={0xa, 0x1, 0x80000001}}, 0x20)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000004000000000000080"], 0x50)
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]})
r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000001c0)=0xf)
close_range(r8, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x3b6, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x20010, r7, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608ffff0000100018000000000000000000000000000a009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78)

411.088716ms ago: executing program 0 (id=275):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000000c0)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000001c0), 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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")
r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12)
write(r7, &(0x7f0000000a00)="c7", 0x1)
sendfile(r7, r6, 0x0, 0x3ffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x5, [@func={0x3, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x2}]}]}, {0x0, [0x0, 0x0, 0x61]}}, 0x0, 0x3d, 0x0, 0x1}, 0x28)
sendfile(r7, r6, 0x0, 0x7ffff000)
r8 = getpid()
syz_pidfd_open(r8, 0x0)
r9 = syz_clone(0x1b200000, 0x0, 0x0, 0x0, 0x0, 0x0)
tkill(r9, 0x4)
getsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$ITER_CREATE(0x21, 0x0, 0x0)

410.802286ms ago: executing program 3 (id=276):
unshare(0x28000600)
ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, 0x0)

363.066588ms ago: executing program 3 (id=277):
unshare(0x28020480)
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$netlink(r0, 0x10e, 0xa, 0x0, &(0x7f0000000100))
r1 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10)
sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x34, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1a6ff}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x800)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x18000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
writev(r3, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x1c, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000000080008500000017000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40efd, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r4, 0xfca804a0, 0xe, 0x0, &(0x7f0000000500)="b8000005000000005baf2312bbc2", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
r5 = socket$inet6_sctp(0xa, 0x801, 0x84)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x4000, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x4810c, 0x108}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_INGRESS_QOS={0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x50}}, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
getsockopt$bt_hci(r5, 0x84, 0x85, &(0x7f0000002380)=""/4107, &(0x7f00000000c0)=0x1012)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0xfff8, 0xffff, 0x81, 0x4, 0x80, <r7=>0x0})
sched_setattr(r7, &(0x7f0000000200)={0x38, 0x0, 0x5c, 0x3, 0xbd0, 0x7fffffff, 0x8, 0xd95, 0x4, 0xb}, 0x0)

0s ago: executing program 5 (id=278):
r0 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040), 0x10)
listen(r0, 0x0)
r1 = socket(0x28, 0x80005, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080), 0x10)
openat$nvram(0xffffffffffffff9c, 0x0, 0x20100, 0x0)
sendmmsg(r1, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(ctr-camellia-aesni,rmd128)\x00'}, 0x80, &(0x7f0000000380), 0x0, &(0x7f00000004c0)=[{0x50, 0x3a, 0x4, "18bc97544c75ac7920983b75b9febc48cbe81483e0ccfe9f7ac3ba52d7eae2e05e1347364f0d3f75402a1a83f627fce73f749570f5b67d367c974f"}, {0xe0, 0x11, 0x7fff, "49d4a08ac95ea680b2afabc6ad00660ac8a43f20bc6cc18a08527e202c2e08aa36771a685960a1a9f0ed74bd3a8a2c907d461b18a998bd6d0beb752262d0cd379b67d70f9c418da68341938de2ca4331cd8a8b4ec674c0dcd1680b64de7b674701879783629db95458c712d6846e7587a324097ba7e48a3ad98334d0fdfc191e32fdec807fe5ccd6dd40e1a12561c0040ce4e1d085193b45f63bc1b701a2c52bd7c774ff81d6d6981d3d94b25fd777e7e5ecdc995e33c0cfc693f7c0c1a70f60cd0f5c14a6c0b7987a8f64"}, {0x20, 0xff, 0x4, "6ef8346876c998d442"}, {0x30, 0x116, 0x8e03, "e1b73ce90a13d415780b627e1abca104df5b5684fdd28603100571c2"}, {0x50, 0x88, 0x3, "fceaff5245c54211416a3c00739202b00f5a53d2adc63013f224e65637a2001f437a6fa12ee79bc65e7dcabc7a0fe6b64cc59b603115c8d80000000000"}], 0x1d0}}], 0x2, 0x24008094)
socket$can_bcm(0x1d, 0x2, 0x2)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000340)={0x5}, 0x8)

kernel console output (not intermixed with test programs):

477] EXT4-fs (loop2): Remounting filesystem read-only
[   39.642339][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.643559][ T3477] EXT4-fs (loop2): 1 truncate cleaned up
[   39.663426][ T3477] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   39.682002][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.694491][ T3454] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.703562][ T3454] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.718088][ T3454] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.727384][ T3454] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.741204][ T3454] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.759308][ T3454] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.781845][ T3454] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.798101][ T3454] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   40.017200][ T3494] netlink: 'syz.3.6': attribute type 12 has an invalid length.
[   40.111321][ T3503] hub 8-0:1.0: USB hub found
[   40.116106][ T3503] hub 8-0:1.0: 8 ports detected
[   40.159051][ T3505] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   40.210281][ T3506] loop3: detected capacity change from 0 to 512
[   40.219485][ T3506] EXT4-fs: Ignoring removed bh option
[   40.234276][ T3506] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[   40.259723][ T3506] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   40.298608][ T3506] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.10: bg 0: block 248: padding at end of block bitmap is not set
[   40.321482][ T3510] 9p: Bad value for 'rfdno'
[   40.330163][ T3506] loop3: lost filesystem error report for type 5 error -117
[   40.330424][ T3506] EXT4-fs error (device loop3): ext4_acquire_dquot:6998: comm syz.3.10: Failed to acquire dquot type 1
[   40.392407][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.411131][ T3506] loop3: lost filesystem error report for type 5 error -117
[   40.411649][ T3506] EXT4-fs (loop3): 1 truncate cleaned up
[   40.459410][ T3506] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[   40.485434][ T3513] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7 sclass=netlink_route_socket pid=3513 comm=syz.0.13
[   40.544633][ T3506] EXT4-fs error (device loop3): ext4_lookup:1789: inode #2: comm syz.3.10: deleted inode referenced: 12
[   40.560006][ T3515] loop2: detected capacity change from 0 to 512
[   40.591477][ T3515] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   40.615520][ T3515] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   40.649909][ T3515] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #2: block 3: comm syz.2.12: lblock 8 mapped to illegal pblock 3 (length 25)
[   40.664317][ T3515] EXT4-fs (loop2): Remounting filesystem read-only
[   40.673441][ T3505] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   40.691458][ T3522] loop1: detected capacity change from 0 to 128
[   40.724597][ T3522] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   40.739928][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.749300][ T3522] ext4 filesystem being mounted at /2/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   40.782171][ T3525] loop2: detected capacity change from 0 to 512
[   40.807682][ T3525] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   40.854572][ T3525] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   40.907051][ T3525] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #2: block 3: comm syz.2.16: lblock 8 mapped to illegal pblock 3 (length 25)
[   40.925021][ T3525] EXT4-fs (loop2): Remounting filesystem read-only
[   40.972237][ T3531] loop0: detected capacity change from 0 to 256
[   40.982766][ T3505] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   40.993505][ T3506] syz.3.10 (3506) used greatest stack depth: 9160 bytes left
[   41.015621][ T3531] FAT-fs (loop0): Directory bread(block 64) failed
[   41.020394][ T3306] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   41.022861][ T3531] FAT-fs (loop0): Directory bread(block 65) failed
[   41.042935][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.043336][ T3531] FAT-fs (loop0): Directory bread(block 66) failed
[   41.082904][ T3531] FAT-fs (loop0): Directory bread(block 67) failed
[   41.093633][ T3531] FAT-fs (loop0): Directory bread(block 68) failed
[   41.100853][ T3531] FAT-fs (loop0): Directory bread(block 69) failed
[   41.107707][ T3531] FAT-fs (loop0): Directory bread(block 70) failed
[   41.116990][ T3531] FAT-fs (loop0): Directory bread(block 71) failed
[   41.136625][ T3531] FAT-fs (loop0): Directory bread(block 72) failed
[   41.143202][ T3531] FAT-fs (loop0): Directory bread(block 73) failed
[   41.179188][ T3505] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   41.335577][ T3539] loop6: detected capacity change from 0 to 8
[   41.376920][    C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1
[   41.387615][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[   41.443166][    C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1
[   41.453839][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[   41.461727][ T3539]  loop6: unable to read partition table
[   41.467602][ T3539] loop_reread_partitions: partition scan of loop6 (ÄNùh*h‘…ÿìžÝ×pਸ਼ "ýo§æ?<í¯ÊºöÙXDˆÚ
bÔÌp0ìO{š¸›>.) failed (rc=-5)
[   41.551788][ T3539] loop1: detected capacity change from 0 to 512
[   41.551993][ T3539] =======================================================
[   41.551993][ T3539] WARNING: The mand mount option has been deprecated and
[   41.551993][ T3539]          and is ignored by this kernel. Remove the mand
[   41.551993][ T3539]          option from the mount to silence this warning.
[   41.551993][ T3539] =======================================================
[   41.554631][ T3539] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   41.554652][ T3539] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   41.617841][    C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   41.617881][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[   41.619151][    C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   41.619206][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[   41.619237][ T3295]  loop6: unable to read partition table
[   41.632053][ T3546] Zero length message leads to an empty skb
[   41.634271][ T3546] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[   41.634590][ T3546] capability: warning: `syz.0.17' uses 32-bit capabilities (legacy support in use)
[   41.691297][    C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1
[   41.691331][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[   41.691468][    C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1
[   41.691491][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[   41.691511][ T3541]  loop6: unable to read partition table
[   41.691534][ T3541] loop_reread_partitions: partition scan of loop6 (ÄNùh*h‘…ÿìžÝ×pਸ਼ "ýo§æ?<í¯ÊºöÙXDˆÚ
bÔÌp0ìO{š¸›>.) failed (rc=-5)
[   41.722909][    C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   41.722952][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[   41.724765][    C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   41.724804][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[   41.724954][    C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   41.724999][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[   41.725113][    C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   41.725151][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[   41.733853][ T3539] EXT4-fs (loop1): 1 truncate cleaned up
[   41.734221][ T3539] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   41.958322][   T30] kworker/u8:1: attempt to access beyond end of device
[   41.958322][   T30] loop0: rw=1, sector=1192, nr_sectors = 576 limit=256
[   41.984061][   T30] kworker/u8:1: attempt to access beyond end of device
[   41.984061][   T30] loop0: rw=1, sector=1800, nr_sectors = 128 limit=256
[   42.087799][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.101179][ T3550] loop2: detected capacity change from 0 to 512
[   42.127634][   T30] kworker/u8:1: attempt to access beyond end of device
[   42.127634][   T30] loop0: rw=1, sector=1960, nr_sectors = 31840 limit=256
[   42.160064][ T3550] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.243788][ T3554] loop1: detected capacity change from 0 to 512
[   42.268366][ T3559] hub 8-0:1.0: USB hub found
[   42.274072][ T3559] hub 8-0:1.0: 8 ports detected
[   42.292210][ T3554] EXT4-fs: Ignoring removed orlov option
[   42.299601][ T3550] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   42.424349][ T3554] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[   42.489330][ T3554] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[   42.522376][ T3554] EXT4-fs error (device loop1): ext4_iget_extra_inode:5073: inode #15: comm syz.1.25: corrupted in-inode xattr: e_value size too large
[   42.589240][ T3554] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   42.590301][ T3554] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.25: couldn't read orphan inode 15 (err -117)
[   42.706514][ T3554] loop1: lost filesystem error report for type 5 error -117
[   42.709405][ T3554] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   42.749330][ T3563] netlink: 68 bytes leftover after parsing attributes in process `syz.0.23'.
[   42.788676][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.864482][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.912954][ T3568] netlink: 'syz.2.28': attribute type 12 has an invalid length.
[   43.008252][ T3573] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   43.013920][ T3576] EXT4-fs: Ignoring removed orlov option
[   43.027816][ T3576] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[   43.042300][ T3576] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[   43.068412][ T3579] EXT4-fs: Ignoring removed bh option
[   43.086099][ T3576] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.31: corrupted in-inode xattr: e_value size too large
[   43.106365][ T3579] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[   43.119157][ T3576] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   43.119362][ T3576] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.31: couldn't read orphan inode 15 (err -117)
[   43.141499][ T3576] loop2: lost filesystem error report for type 5 error -117
[   43.142300][ T3576] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   43.165962][ T3573] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   43.177048][ T3577] EXT4-fs (loop4): revision level too high, forcing read-only mode
[   43.186136][ T3577] EXT4-fs (loop4): orphan cleanup on readonly fs
[   43.194915][ T3579] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   43.211571][ T3579] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.30: bg 0: block 248: padding at end of block bitmap is not set
[   43.226996][ T3577] EXT4-fs error (device loop4): ext4_acquire_dquot:6998: comm syz.4.32: Failed to acquire dquot type 1
[   43.238565][ T3577] loop4: lost filesystem error report for type 5 error -117
[   43.239480][ T3577] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.32: corrupted inode contents
[   43.260512][ T3579] loop1: lost filesystem error report for type 5 error -117
[   43.260981][ T3579] EXT4-fs error (device loop1): ext4_acquire_dquot:6998: comm syz.1.30: Failed to acquire dquot type 1
[   43.280048][ T3577] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   43.280261][ T3577] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #16: comm syz.4.32: mark_inode_dirty error
[   43.286594][ T3579] loop1: lost filesystem error report for type 5 error -117
[   43.290284][ T3577] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   43.309218][ T3577] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.32: corrupted inode contents
[   43.333698][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.335179][ T3579] EXT4-fs (loop1): 1 truncate cleaned up
[   43.343196][ T3577] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   43.358103][ T3573] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   43.380248][ T3577] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.32: mark_inode_dirty error
[   43.392453][ T3577] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   43.392820][ T3577] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.32: corrupted inode contents
[   43.414028][ T3577] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   43.414267][ T3577] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem
[   43.432991][ T3579] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[   43.453929][ T3579] EXT4-fs error (device loop1): ext4_lookup:1789: inode #2: comm syz.1.30: deleted inode referenced: 12
[   43.476173][ T3577] loop4: lost filesystem error report for type 5 error -117
[   43.476426][ T3577] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.32: corrupted inode contents
[   43.521546][ T3577] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   43.521708][ T3577] EXT4-fs error (device loop4): ext4_truncate:4635: inode #16: comm syz.4.32: mark_inode_dirty error
[   43.549792][ T3577] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   43.593615][ T3585] syz.2.34 uses obsolete (PF_INET,SOCK_PACKET)
[   43.610352][ T3577] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem
[   43.613468][ T3573] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   43.629683][ T3577] loop4: lost filesystem error report for type 5 error -117
[   43.631398][ T3577] EXT4-fs (loop4): 1 truncate cleaned up
[   43.645534][ T3577] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-0000002a0000 ro without journal. Quota mode: writeback.
[   43.685052][   T30] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   43.727391][   T30] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   43.747378][   T30] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   43.756215][   T30] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   43.757037][ T3590] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   43.780617][ T3590] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   43.800017][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[   43.827445][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-0000002a0000.
[   43.982975][ T3590] netlink: 20 bytes leftover after parsing attributes in process `syz.0.35'.
[   44.047866][ T3590] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[   44.080073][ T3599] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #2: block 3: comm syz.0.35: lblock 8 mapped to illegal pblock 3 (length 25)
[   44.108245][ T3599] EXT4-fs (loop0): Remounting filesystem read-only
[   44.125365][ T3601] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   44.147750][   T28] kauditd_printk_skb: 268 callbacks suppressed
[   44.147769][   T28] audit: type=1400 audit(1770973167.062:361): avc:  denied  { getopt } for  pid=3594 comm="syz.4.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   44.181007][   T28] audit: type=1400 audit(1770973167.092:362): avc:  denied  { unmount } for  pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   44.201813][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.202186][ T3601] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   44.222137][   T28] audit: type=1400 audit(1770973167.112:363): avc:  denied  { mount } for  pid=3600 comm="syz.1.38" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   44.315512][   T28] audit: type=1400 audit(1770973167.222:364): avc:  denied  { create } for  pid=3600 comm="syz.1.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   44.346122][   T28] audit: type=1400 audit(1770973167.252:365): avc:  denied  { tracepoint } for  pid=3600 comm="syz.1.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   44.366597][   T28] audit: type=1400 audit(1770973167.252:366): avc:  denied  { create } for  pid=3606 comm="syz.0.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   44.386291][   T28] audit: type=1400 audit(1770973167.282:367): avc:  denied  { ioctl } for  pid=3606 comm="syz.0.39" path="socket:[5024]" dev="sockfs" ino=5024 ioctlcmd=0x6608 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   44.422339][   T28] audit: type=1400 audit(1770973167.282:368): avc:  denied  { map_create } for  pid=3606 comm="syz.0.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   44.447308][ T3608] netlink: 20 bytes leftover after parsing attributes in process `syz.1.38'.
[   44.460591][   T28] audit: type=1400 audit(1770973167.322:369): avc:  denied  { write } for  pid=3606 comm="syz.0.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   44.460628][   T28] audit: type=1400 audit(1770973167.352:370): avc:  denied  { create } for  pid=3600 comm="syz.1.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   44.480323][ T3608] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[   44.483620][ T3601] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #2: block 3: comm syz.1.38: lblock 8 mapped to illegal pblock 3 (length 25)
[   44.483948][ T3601] EXT4-fs (loop1): Remounting filesystem read-only
[   44.578191][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.739846][ T3615] netlink: 'syz.0.42': attribute type 12 has an invalid length.
[   44.864470][ T3627] FAULT_INJECTION: forcing a failure.
[   44.864470][ T3627] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   44.877931][ T3627] CPU: 0 UID: 0 PID: 3627 Comm: syz.0.48 Not tainted syzkaller #0 PREEMPT(full) 
[   44.877965][ T3627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[   44.878018][ T3627] Call Trace:
[   44.878028][ T3627]  <TASK>
[   44.878038][ T3627]  __dump_stack+0x1d/0x30
[   44.878071][ T3627]  dump_stack_lvl+0x95/0xd0
[   44.878094][ T3627]  dump_stack+0x15/0x1b
[   44.878122][ T3627]  should_fail_ex+0x263/0x280
[   44.878230][ T3627]  should_fail+0xb/0x20
[   44.878266][ T3627]  should_fail_usercopy+0x1a/0x20
[   44.878361][ T3627]  _copy_from_iter+0xcf/0xea0
[   44.878398][ T3627]  ? __alloc_skb+0x4f6/0x690
[   44.878422][ T3627]  ? __alloc_skb+0x200/0x690
[   44.878484][ T3627]  netlink_sendmsg+0x4ae/0x6f0
[   44.878537][ T3627]  ? __pfx_netlink_sendmsg+0x10/0x10
[   44.878561][ T3627]  ____sys_sendmsg+0x5af/0x600
[   44.878592][ T3627]  ___sys_sendmsg+0x195/0x1e0
[   44.878636][ T3627]  __x64_sys_sendmsg+0xd4/0x160
[   44.878736][ T3627]  x64_sys_call+0x194c/0x3020
[   44.878766][ T3627]  do_syscall_64+0x12c/0x370
[   44.878803][ T3627]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   44.878828][ T3627] RIP: 0033:0x7f162d47bf79
[   44.878849][ T3627] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   44.878942][ T3627] RSP: 002b:00007f162becf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   44.878974][ T3627] RAX: ffffffffffffffda RBX: 00007f162d6f5fa0 RCX: 00007f162d47bf79
[   44.879010][ T3627] RDX: 0000000000008044 RSI: 0000200000000440 RDI: 0000000000000003
[   44.879023][ T3627] RBP: 00007f162becf090 R08: 0000000000000000 R09: 0000000000000000
[   44.879036][ T3627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   44.879048][ T3627] R13: 00007f162d6f6038 R14: 00007f162d6f5fa0 R15: 00007ffecec85928
[   44.879073][ T3627]  </TASK>
[   45.256742][ T3638] set_capacity_and_notify: 7 callbacks suppressed
[   45.256764][ T3638] loop4: detected capacity change from 0 to 1024
[   45.272628][ T3638] EXT4-fs: Ignoring removed orlov option
[   45.309032][ T3638] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled
[   45.353161][ T3638] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.473567][ T3638] netlink: 12 bytes leftover after parsing attributes in process `syz.4.53'.
[   45.524726][ T3305] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2858: Unable to expand inode 11. Delete some EAs or run e2fsck.
[   45.624005][ T3305] EXT4-fs error (device loop4): ext4_read_inline_dir:1486: inode #12: block 7: comm syz-executor: path /9/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[   45.669553][ T3305] EXT4-fs error (device loop4): ext4_read_inline_dir:1486: inode #12: block 7: comm syz-executor: path /9/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[   45.703519][ T3305] EXT4-fs error (device loop4): empty_inline_dir:1770: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[   45.724366][ T3305] EXT4-fs warning (device loop4): empty_inline_dir:1777: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   45.739074][ T3305] EXT4-fs error (device loop4): ext4_read_inline_dir:1486: inode #12: block 7: comm syz-executor: path /9/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[   45.800213][ T3305] EXT4-fs error (device loop4): ext4_read_inline_dir:1486: inode #12: block 7: comm syz-executor: path /9/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[   45.824083][ T3305] EXT4-fs error (device loop4): empty_inline_dir:1770: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[   45.844787][ T3305] EXT4-fs warning (device loop4): empty_inline_dir:1777: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   45.859597][ T3305] EXT4-fs error (device loop4): ext4_read_inline_dir:1486: inode #12: block 7: comm syz-executor: path /9/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[   45.886770][ T3305] EXT4-fs error (device loop4): ext4_read_inline_dir:1486: inode #12: block 7: comm syz-executor: path /9/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[   45.888888][ T3661] loop2: detected capacity change from 0 to 512
[   45.910582][ T3305] EXT4-fs error (device loop4): empty_inline_dir:1770: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[   45.937921][ T3305] EXT4-fs warning (device loop4): empty_inline_dir:1777: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   45.950698][ T3663] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   45.953301][ T3305] EXT4-fs error (device loop4): ext4_read_inline_dir:1486: inode #12: block 7: comm syz-executor: path /9/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[   45.993845][ T3305] EXT4-fs warning (device loop4): empty_inline_dir:1777: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   46.023078][ T3305] EXT4-fs warning (device loop4): empty_inline_dir:1777: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   46.024897][ T3661] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   46.065476][ T3661] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   46.073974][ T3669] netlink: 28 bytes leftover after parsing attributes in process `syz.0.63'.
[   46.089524][ T3305] EXT4-fs warning (device loop4): empty_inline_dir:1777: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   46.115189][ T3670] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   46.137842][ T3305] EXT4-fs warning (device loop4): empty_inline_dir:1777: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   46.162322][ T3305] EXT4-fs warning (device loop4): empty_inline_dir:1777: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   46.164071][ T3661] netlink: 20 bytes leftover after parsing attributes in process `syz.2.61'.
[   46.183494][ T3305] EXT4-fs warning (device loop4): empty_inline_dir:1777: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   46.195615][ T3661] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[   46.215202][ T3673] loop1: detected capacity change from 0 to 512
[   46.224555][ T3670] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   46.230620][ T3661] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #2: block 3: comm syz.2.61: lblock 8 mapped to illegal pblock 3 (length 25)
[   46.238699][ T3673] EXT4-fs: Ignoring removed bh option
[   46.257037][ T3661] EXT4-fs (loop2): Remounting filesystem read-only
[   46.292921][ T3673] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[   46.303789][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.340610][ T3675] netlink: 31 bytes leftover after parsing attributes in process `syz.2.66'.
[   46.358521][ T3673] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   46.369533][ T3675] netlink: 'syz.2.66': attribute type 11 has an invalid length.
[   46.382975][ T3673] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.64: bg 0: block 248: padding at end of block bitmap is not set
[   46.383302][ T3675] netlink: 140 bytes leftover after parsing attributes in process `syz.2.66'.
[   46.408401][ T3670] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   46.419659][ T3673] loop1: lost filesystem error report for type 5 error -117
[   46.420997][ T3675] netlink: 20 bytes leftover after parsing attributes in process `syz.2.66'.
[   46.436324][ T3673] EXT4-fs error (device loop1): ext4_acquire_dquot:6998: comm syz.1.64: Failed to acquire dquot type 1
[   46.458765][ T3673] loop1: lost filesystem error report for type 5 error -117
[   46.462107][ T3673] EXT4-fs (loop1): 1 truncate cleaned up
[   46.477937][ T3673] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[   46.493267][ T3681] loop0: detected capacity change from 0 to 128
[   46.515851][ T3670] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   46.531467][ T3673] EXT4-fs error (device loop1): ext4_lookup:1789: inode #2: comm syz.1.64: deleted inode referenced: 12
[   46.544740][ T3681] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   46.559646][ T3681] ext4 filesystem being mounted at /16/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   46.613724][ T3303] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   46.660988][ T3690] 9pnet_fd: Insufficient options for proto=fd
[   46.667771][ T3688] 9pnet_fd: Insufficient options for proto=fd
[   46.710583][ T3694] netlink: 8 bytes leftover after parsing attributes in process `syz.0.72'.
[   46.765169][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.784296][   T30] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   46.808665][ T3698] hub 8-0:1.0: USB hub found
[   46.814260][ T3698] hub 8-0:1.0: 8 ports detected
[   46.859436][   T30] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   46.918869][   T30] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   46.979076][   T30] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   47.079421][   T30] bridge_slave_1: left allmulticast mode
[   47.092439][   T30] bridge_slave_1: left promiscuous mode
[   47.104486][   T30] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.117520][   T30] bridge_slave_0: left allmulticast mode
[   47.129493][   T30] bridge_slave_0: left promiscuous mode
[   47.152893][   T30] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.263087][   T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   47.287414][   T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   47.304370][   T30] bond0 (unregistering): Released all slaves
[   47.318057][ T3714] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   47.333711][ T3720] loop0: detected capacity change from 0 to 512
[   47.344641][ T3720] EXT4-fs: Ignoring removed bh option
[   47.359378][ T3454] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.382727][ T3720] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[   47.386055][ T3454] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.404438][ T3454] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.421625][ T3720] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   47.423298][   T30] hsr_slave_0: left promiscuous mode
[   47.441984][   T30] hsr_slave_1: left promiscuous mode
[   47.447991][   T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   47.449096][ T3720] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.77: bg 0: block 248: padding at end of block bitmap is not set
[   47.455570][   T30] batman_adv: batadv0: Removing interface: batadv_slave_0
[   47.476939][ T3720] loop0: lost filesystem error report for type 5 error -117
[   47.478309][   T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   47.483645][ T3720] EXT4-fs error (device loop0): ext4_acquire_dquot:6998: comm syz.0.77: Failed to acquire dquot type 1
[   47.485742][   T30] batman_adv: batadv0: Removing interface: batadv_slave_1
[   47.515496][ T3720] loop0: lost filesystem error report for type 5 error -117
[   47.516470][ T3720] EXT4-fs (loop0): 1 truncate cleaned up
[   47.532255][ T3720] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[   47.550334][   T30] veth1_macvtap: left promiscuous mode
[   47.556184][ T3720] EXT4-fs error (device loop0): ext4_lookup:1789: inode #2: comm syz.0.77: deleted inode referenced: 12
[   47.567721][   T30] veth0_macvtap: left promiscuous mode
[   47.573351][   T30] veth1_vlan: left promiscuous mode
[   47.579107][   T30] veth0_vlan: left promiscuous mode
[   47.596534][    C1] hrtimer: interrupt took 68524 ns
[   47.625096][ T3729] loop2: detected capacity change from 0 to 128
[   47.648094][ T3729] FAT-fs (loop2): bogus number of reserved sectors
[   47.667989][ T3729] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[   47.678969][ T3729] FAT-fs (loop2): Can't find a valid FAT filesystem
[   47.688210][   T30] team0 (unregistering): Port device team_slave_1 removed
[   47.704842][   T30] team0 (unregistering): Port device team_slave_0 removed
[   47.759683][ T3714] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   47.773102][  T402] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.808574][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[   47.827458][ T3735] netlink: 'syz.2.78': attribute type 3 has an invalid length.
[   47.839077][ T3735] netlink: 12 bytes leftover after parsing attributes in process `syz.2.78'.
[   47.856819][ T3714] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   47.903822][ T3735] loop2: detected capacity change from 0 to 512
[   47.923916][ T3735] EXT4-fs: Ignoring removed nobh option
[   47.945315][ T3714] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   47.959896][ T3735] EXT4-fs: Invalid want_extra_isize 0
[   47.968903][ T3749] loop3: detected capacity change from 0 to 128
[   47.996365][ T3749] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   48.029447][ T3749] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   48.096108][ T3310] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   48.122367][ T3716] chnl_net:caif_netlink_parms(): no params data found
[   48.142946][   T50] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.155414][ T3758] FAULT_INJECTION: forcing a failure.
[   48.155414][ T3758] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   48.171021][ T3758] CPU: 1 UID: 0 PID: 3758 Comm: syz.2.82 Not tainted syzkaller #0 PREEMPT(full) 
[   48.171056][ T3758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[   48.171080][ T3758] Call Trace:
[   48.171089][ T3758]  <TASK>
[   48.171097][ T3758]  __dump_stack+0x1d/0x30
[   48.171191][ T3758]  dump_stack_lvl+0x95/0xd0
[   48.171218][ T3758]  dump_stack+0x15/0x1b
[   48.171263][ T3758]  should_fail_ex+0x263/0x280
[   48.171328][ T3758]  should_fail+0xb/0x20
[   48.171361][ T3758]  should_fail_usercopy+0x1a/0x20
[   48.171432][ T3758]  _copy_to_iter+0x251/0xea0
[   48.171475][ T3758]  ? __pfx_simple_copy_to_iter+0x10/0x10
[   48.171510][ T3758]  __skb_datagram_iter+0xc6/0x680
[   48.171596][ T3758]  ? __pfx_simple_copy_to_iter+0x10/0x10
[   48.171629][ T3758]  skb_copy_datagram_iter+0x3d/0x100
[   48.171715][ T3758]  netlink_recvmsg+0x1a8/0x550
[   48.171750][ T3758]  ? __pfx_netlink_recvmsg+0x10/0x10
[   48.171780][ T3758]  sock_recvmsg+0x139/0x160
[   48.171862][ T3758]  ____sys_recvmsg+0xf5/0x280
[   48.171908][ T3758]  ___sys_recvmsg+0x11f/0x3b0
[   48.171952][ T3758]  do_recvmmsg+0x1ef/0x560
[   48.171996][ T3758]  ? get_timespec64+0xd2/0x100
[   48.172037][ T3758]  __x64_sys_recvmmsg+0xfb/0x170
[   48.172068][ T3758]  x64_sys_call+0x80f/0x3020
[   48.172170][ T3758]  do_syscall_64+0x12c/0x370
[   48.172203][ T3758]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   48.172225][ T3758] RIP: 0033:0x7f0ed183bf79
[   48.172315][ T3758] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   48.172335][ T3758] RSP: 002b:00007f0ed028f028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[   48.172421][ T3758] RAX: ffffffffffffffda RBX: 00007f0ed1ab5fa0 RCX: 00007f0ed183bf79
[   48.172437][ T3758] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003
[   48.172451][ T3758] RBP: 00007f0ed028f090 R08: 0000200000003700 R09: 0000000000000000
[   48.172497][ T3758] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000001
[   48.172510][ T3758] R13: 00007f0ed1ab6038 R14: 00007f0ed1ab5fa0 R15: 00007ffea7cfe108
[   48.172531][ T3758]  </TASK>
[   48.185819][   T50] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.394778][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[   48.419105][   T50] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.433066][   T50] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.484733][ T3774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.83'.
[   48.498656][ T3716] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.498910][ T3716] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.513541][ T3716] bridge_slave_0: entered allmulticast mode
[   48.520952][ T3716] bridge_slave_0: entered promiscuous mode
[   48.528177][ T3716] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.535301][ T3716] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.543009][ T3716] bridge_slave_1: entered allmulticast mode
[   48.550387][ T3716] bridge_slave_1: entered promiscuous mode
[   48.593078][ T3781] FAULT_INJECTION: forcing a failure.
[   48.593078][ T3781] name failslab, interval 1, probability 0, space 0, times 1
[   48.593244][ T3781] CPU: 1 UID: 0 PID: 3781 Comm: syz.0.86 Not tainted syzkaller #0 PREEMPT(full) 
[   48.593303][ T3781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[   48.593364][ T3781] Call Trace:
[   48.593464][ T3781]  <TASK>
[   48.593495][ T3781]  __dump_stack+0x1d/0x30
[   48.593666][ T3781]  dump_stack_lvl+0x95/0xd0
[   48.593767][ T3781]  dump_stack+0x15/0x1b
[   48.593833][ T3781]  should_fail_ex+0x263/0x280
[   48.593971][ T3781]  should_failslab+0x8c/0xb0
[   48.594073][ T3781]  kmem_cache_alloc_node_noprof+0x6d/0x460
[   48.594178][ T3781]  ? __alloc_skb+0x2d6/0x690
[   48.594244][ T3781]  __alloc_skb+0x2d6/0x690
[   48.594337][ T3781]  ? tcp_skb_entail+0x1a0/0x390
[   48.594510][ T3781]  tcp_stream_alloc_skb+0x30/0x320
[   48.594670][ T3781]  tcp_sendmsg_locked+0xd1a/0x2e00
[   48.594890][ T3781]  ? __pfx_tcp_sendmsg+0x10/0x10
[   48.595013][ T3781]  tcp_sendmsg+0x2f/0x50
[   48.595110][ T3781]  inet_sendmsg+0x76/0xd0
[   48.595208][ T3781]  __sys_sendto+0x3f4/0x4d0
[   48.595307][ T3781]  __x64_sys_sendto+0x76/0x90
[   48.595336][ T3781]  x64_sys_call+0x2d35/0x3020
[   48.595422][ T3781]  do_syscall_64+0x12c/0x370
[   48.595518][ T3781]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   48.595617][ T3781] RIP: 0033:0x7f162d47bf79
[   48.595684][ T3781] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   48.595748][ T3781] RSP: 002b:00007f162becf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[   48.595813][ T3781] RAX: ffffffffffffffda RBX: 00007f162d6f5fa0 RCX: 00007f162d47bf79
[   48.595864][ T3781] RDX: 000000000000059a RSI: 0000200000000580 RDI: 0000000000000003
[   48.595906][ T3781] RBP: 00007f162becf090 R08: 0000000000000000 R09: 0000000000000000
[   48.595959][ T3781] R10: 0000000010008095 R11: 0000000000000246 R12: 0000000000000001
[   48.596002][ T3781] R13: 00007f162d6f6038 R14: 00007f162d6f5fa0 R15: 00007ffecec85928
[   48.596068][ T3781]  </TASK>
[   48.604449][ T3716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   48.815555][ T3716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   48.833028][ T3716] team0: Port device team_slave_0 added
[   48.833990][ T3716] team0: Port device team_slave_1 added
[   48.859285][   T30] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.876166][ T3716] batman_adv: batadv0: Adding interface: batadv_slave_0
[   48.876184][ T3716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   48.876219][ T3716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   48.877012][ T3716] batman_adv: batadv0: Adding interface: batadv_slave_1
[   48.877026][ T3716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   48.877188][ T3716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   48.926139][ T3454] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.926943][ T3454] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.932274][ T3454] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.955192][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[   48.966409][ T3716] hsr_slave_0: entered promiscuous mode
[   49.056896][ T3716] hsr_slave_1: entered promiscuous mode
[   49.087419][ T3716] debugfs: 'hsr0' already exists in 'hsr'
[   49.094799][ T3716] Cannot create hsr debugfs directory
[   49.150483][ T3800] netlink: 12 bytes leftover after parsing attributes in process `syz.3.90'.
[   49.160907][   T28] kauditd_printk_skb: 243 callbacks suppressed
[   49.160922][   T28] audit: type=1326 audit(1770973172.072:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3803 comm="syz.1.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb17af8bf79 code=0x7ffc0000
[   49.192669][   T28] audit: type=1326 audit(1770973172.072:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3803 comm="syz.1.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fb17af8bf79 code=0x7ffc0000
[   49.220116][   T28] audit: type=1326 audit(1770973172.072:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3803 comm="syz.1.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb17af8bf79 code=0x7ffc0000
[   49.246812][ T3808] 9p: Bad value for 'rfdno'
[   49.248977][ T3800] vlan2: entered promiscuous mode
[   49.267717][ T3800] team0: entered promiscuous mode
[   49.276234][ T3800] team_slave_0: entered promiscuous mode
[   49.279860][   T28] audit: type=1326 audit(1770973172.072:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3803 comm="syz.1.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7fb17af8bf79 code=0x7ffc0000
[   49.282797][ T3800] team_slave_1: entered promiscuous mode
[   49.322864][   T28] audit: type=1326 audit(1770973172.072:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3803 comm="syz.1.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb17af8bf79 code=0x7ffc0000
[   49.349443][   T28] audit: type=1326 audit(1770973172.072:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3803 comm="syz.1.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb17af4c84e code=0x7ffc0000
[   49.374585][   T28] audit: type=1326 audit(1770973172.072:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3803 comm="syz.1.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb17af8bf79 code=0x7ffc0000
[   49.455425][   T28] audit: type=1326 audit(1770973172.072:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3803 comm="syz.1.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb17af8bf79 code=0x7ffc0000
[   49.531707][   T28] audit: type=1326 audit(1770973172.072:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3803 comm="syz.1.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb17af8bf79 code=0x7ffc0000
[   49.576964][   T28] audit: type=1326 audit(1770973172.102:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3803 comm="syz.1.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fb17af8bf79 code=0x7ffc0000
[   49.587451][ T3716] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   49.619447][ T3824] FAULT_INJECTION: forcing a failure.
[   49.619447][ T3824] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[   49.635980][ T3834] loop2: detected capacity change from 0 to 512
[   49.642653][ T3834] EXT4-fs: Ignoring removed bh option
[   49.656176][ T3834] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[   49.668392][ T3824] CPU: 0 UID: 0 PID: 3824 Comm: syz.0.96 Not tainted syzkaller #0 PREEMPT(full) 
[   49.668478][ T3824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[   49.668504][ T3824] Call Trace:
[   49.668513][ T3824]  <TASK>
[   49.668521][ T3824]  __dump_stack+0x1d/0x30
[   49.668549][ T3824]  dump_stack_lvl+0x95/0xd0
[   49.668573][ T3824]  dump_stack+0x15/0x1b
[   49.668618][ T3824]  should_fail_ex+0x263/0x280
[   49.668662][ T3824]  should_fail_alloc_page+0xf2/0x100
[   49.668695][ T3824]  __alloc_frozen_pages_noprof+0x108/0x350
[   49.668721][ T3824]  alloc_pages_mpol+0xb3/0x260
[   49.668750][ T3824]  alloc_migration_target_by_mpol+0x11b/0x280
[   49.668781][ T3824]  migrate_pages_batch+0x399/0x2400
[   49.668820][ T3824]  ? __pfx_alloc_migration_target_by_mpol+0x10/0x10
[   49.668892][ T3824]  ? __walk_page_range+0x324/0x340
[   49.668926][ T3824]  ? find_vma+0x6c/0xa0
[   49.668948][ T3824]  migrate_pages+0x1079/0x18c0
[   49.669037][ T3824]  ? __pfx_alloc_migration_target_by_mpol+0x10/0x10
[   49.669073][ T3824]  __se_sys_mbind+0xc9c/0xde0
[   49.669118][ T3824]  __x64_sys_mbind+0x78/0x90
[   49.669197][ T3824]  x64_sys_call+0x2b72/0x3020
[   49.669289][ T3824]  do_syscall_64+0x12c/0x370
[   49.669319][ T3824]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   49.669386][ T3824] RIP: 0033:0x7f162d47bf79
[   49.669403][ T3824] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   49.669423][ T3824] RSP: 002b:00007f162becf028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed
[   49.669506][ T3824] RAX: ffffffffffffffda RBX: 00007f162d6f5fa0 RCX: 00007f162d47bf79
[   49.669521][ T3824] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000200000400000
[   49.669586][ T3824] RBP: 00007f162becf090 R08: 0000000000000000 R09: 0000000000000002
[   49.669599][ T3824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   49.669612][ T3824] R13: 00007f162d6f6038 R14: 00007f162d6f5fa0 R15: 00007ffecec85928
[   49.669633][ T3824]  </TASK>
[   49.878224][ T3834] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   49.895556][ T3832] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   49.916518][ T3834] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.98: bg 0: block 248: padding at end of block bitmap is not set
[   49.930693][ T3834] loop2: lost filesystem error report for type 5 error -117
[   49.936360][ T3834] EXT4-fs error (device loop2): ext4_acquire_dquot:6998: comm syz.2.98: Failed to acquire dquot type 1
[   49.955045][ T3834] loop2: lost filesystem error report for type 5 error -117
[   49.957740][ T3834] EXT4-fs (loop2): 1 truncate cleaned up
[   49.972133][ T3834] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[   49.989051][ T3834] EXT4-fs error (device loop2): ext4_lookup:1789: inode #2: comm syz.2.98: deleted inode referenced: 12
[   50.063418][ T3716] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   50.090951][ T3832] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.114535][ T3716] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   50.123542][ T3845] loop1: detected capacity change from 0 to 512
[   50.132675][ T3716] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   50.140160][ T3845] EXT4-fs: Ignoring removed orlov option
[   50.147419][ T3845] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[   50.159677][ T3832] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.170025][ T3845] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[   50.170641][ T3845] EXT4-fs error (device loop1): ext4_iget_extra_inode:5073: inode #15: comm syz.1.103: corrupted in-inode xattr: e_value size too large
[   50.193214][ T3845] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   50.193506][ T3845] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.103: couldn't read orphan inode 15 (err -117)
[   50.214655][ T3845] loop1: lost filesystem error report for type 5 error -117
[   50.215218][ T3845] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   50.239717][ T3832] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.262839][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.311953][ T3857] hub 8-0:1.0: USB hub found
[   50.316931][ T3857] hub 8-0:1.0: 8 ports detected
[   50.351818][ T3716] 8021q: adding VLAN 0 to HW filter on device bond0
[   50.399877][   T50] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   50.419528][ T3716] 8021q: adding VLAN 0 to HW filter on device team0
[   50.440240][   T50] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.447385][   T50] bridge0: port 1(bridge_slave_0) entered forwarding state
[   50.478386][   T50] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.485531][   T50] bridge0: port 2(bridge_slave_1) entered forwarding state
[   50.499353][ T2149] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   50.515185][   T50] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   50.547613][   T50] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   50.610855][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[   50.645038][ T3877] FAULT_INJECTION: forcing a failure.
[   50.645038][ T3877] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   50.684729][ T3877] CPU: 0 UID: 0 PID: 3877 Comm: syz.3.110 Not tainted syzkaller #0 PREEMPT(full) 
[   50.684758][ T3877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[   50.684778][ T3877] Call Trace:
[   50.684785][ T3877]  <TASK>
[   50.684794][ T3877]  __dump_stack+0x1d/0x30
[   50.684824][ T3877]  dump_stack_lvl+0x95/0xd0
[   50.684852][ T3877]  dump_stack+0x15/0x1b
[   50.684878][ T3877]  should_fail_ex+0x263/0x280
[   50.684991][ T3877]  should_fail+0xb/0x20
[   50.685027][ T3877]  should_fail_usercopy+0x1a/0x20
[   50.685093][ T3877]  _copy_to_iter+0x251/0xea0
[   50.685129][ T3877]  ? __pfx_simple_copy_to_iter+0x10/0x10
[   50.685161][ T3877]  __skb_datagram_iter+0xc6/0x680
[   50.685295][ T3877]  ? __pfx_simple_copy_to_iter+0x10/0x10
[   50.685330][ T3877]  skb_copy_datagram_iter+0x3d/0x100
[   50.685356][ T3877]  netlink_recvmsg+0x1a8/0x550
[   50.685392][ T3877]  ? __pfx_netlink_recvmsg+0x10/0x10
[   50.685431][ T3877]  sock_recvmsg+0x139/0x160
[   50.685472][ T3877]  ____sys_recvmsg+0xf5/0x280
[   50.685511][ T3877]  ___sys_recvmsg+0x11f/0x3b0
[   50.685563][ T3877]  do_recvmmsg+0x1ef/0x560
[   50.685595][ T3877]  ? get_timespec64+0xd2/0x100
[   50.685631][ T3877]  __x64_sys_recvmmsg+0xfb/0x170
[   50.685682][ T3877]  x64_sys_call+0x80f/0x3020
[   50.685715][ T3877]  do_syscall_64+0x12c/0x370
[   50.685820][ T3877]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   50.685849][ T3877] RIP: 0033:0x7fabdda9bf79
[   50.685870][ T3877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   50.685891][ T3877] RSP: 002b:00007fabdc4f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[   50.685944][ T3877] RAX: ffffffffffffffda RBX: 00007fabddd15fa0 RCX: 00007fabdda9bf79
[   50.685963][ T3877] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003
[   50.685981][ T3877] RBP: 00007fabdc4f7090 R08: 0000200000003700 R09: 0000000000000000
[   50.685996][ T3877] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000001
[   50.686012][ T3877] R13: 00007fabddd16038 R14: 00007fabddd15fa0 R15: 00007ffd40ecc2f8
[   50.686086][ T3877]  </TASK>
[   50.786150][ T3716] 8021q: adding VLAN 0 to HW filter on device batadv0
[   51.053938][ T3897] 9p: Bad value for 'rfdno'
[   51.075310][ T3716] veth0_vlan: entered promiscuous mode
[   51.084630][ T3716] veth1_vlan: entered promiscuous mode
[   51.093716][ T3902] loop3: detected capacity change from 0 to 512
[   51.117111][ T3902] EXT4-fs: Ignoring removed orlov option
[   51.143730][ T3902] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[   51.152819][ T3906] FAULT_INJECTION: forcing a failure.
[   51.152819][ T3906] name failslab, interval 1, probability 0, space 0, times 0
[   51.170414][ T3873] loop1: detected capacity change from 0 to 1024
[   51.183470][ T3716] veth0_macvtap: entered promiscuous mode
[   51.190014][ T3902] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[   51.195973][ T3906] CPU: 1 UID: 0 PID: 3906 Comm: syz.2.115 Not tainted syzkaller #0 PREEMPT(full) 
[   51.196068][ T3906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[   51.196110][ T3906] Call Trace:
[   51.196132][ T3906]  <TASK>
[   51.196162][ T3906]  __dump_stack+0x1d/0x30
[   51.196247][ T3906]  dump_stack_lvl+0x95/0xd0
[   51.196375][ T3906]  dump_stack+0x15/0x1b
[   51.196455][ T3906]  should_fail_ex+0x263/0x280
[   51.196550][ T3906]  should_failslab+0x8c/0xb0
[   51.196696][ T3906]  kmem_cache_alloc_noprof+0x66/0x400
[   51.196810][ T3906]  ? skb_clone+0x151/0x1f0
[   51.196905][ T3906]  skb_clone+0x151/0x1f0
[   51.196987][ T3906]  __netlink_deliver_tap+0x2c9/0x500
[   51.197083][ T3906]  netlink_unicast+0x66b/0x690
[   51.197143][ T3906]  netlink_sendmsg+0x5c8/0x6f0
[   51.197169][ T3906]  ? __pfx_netlink_sendmsg+0x10/0x10
[   51.197306][ T3906]  ____sys_sendmsg+0x5af/0x600
[   51.197395][ T3906]  ___sys_sendmsg+0x195/0x1e0
[   51.197531][ T3906]  ? path_openat+0x1b01/0x2050
[   51.197654][ T3906]  __sys_sendmmsg+0x185/0x320
[   51.197769][ T3906]  __x64_sys_sendmmsg+0x57/0x70
[   51.197853][ T3906]  x64_sys_call+0x27aa/0x3020
[   51.197992][ T3906]  do_syscall_64+0x12c/0x370
[   51.198028][ T3906]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   51.198183][ T3906] RIP: 0033:0x7f0ed183bf79
[   51.198250][ T3906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   51.198317][ T3906] RSP: 002b:00007f0ed028f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[   51.198389][ T3906] RAX: ffffffffffffffda RBX: 00007f0ed1ab5fa0 RCX: 00007f0ed183bf79
[   51.198435][ T3906] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000003
[   51.198485][ T3906] RBP: 00007f0ed028f090 R08: 0000000000000000 R09: 0000000000000000
[   51.198528][ T3906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   51.198620][ T3906] R13: 00007f0ed1ab6038 R14: 00007f0ed1ab5fa0 R15: 00007ffea7cfe108
[   51.198693][ T3906]  </TASK>
[   51.213207][ T3716] veth1_macvtap: entered promiscuous mode
[   51.308533][ T3902] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #15: comm syz.3.114: corrupted in-inode xattr: e_value size too large
[   51.414965][ T3716] batman_adv: batadv0: Interface activated: batadv_slave_0
[   51.430643][ T3902] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   51.437320][ T3902] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.114: couldn't read orphan inode 15 (err -117)
[   51.440481][ T3716] batman_adv: batadv0: Interface activated: batadv_slave_1
[   51.475858][ T3902] loop3: lost filesystem error report for type 5 error -117
[   51.476526][ T3902] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   51.512072][   T30] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   51.527426][ T3873] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   51.557274][ T3873] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   51.580271][   T30] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   51.603470][   T30] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   51.615526][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.625073][   T30] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   51.690489][ T3873] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.108: bg 0: block 112: padding at end of block bitmap is not set
[   51.745538][ T3873] syz.1.108 (3873) used greatest stack depth: 9096 bytes left
[   51.758630][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   51.773185][ T3922] x_tables: duplicate underflow at hook 1
[   51.794757][ T3923] loop3: detected capacity change from 0 to 512
[   51.801958][ T3923] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities
[   51.940825][ T3931] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   51.986838][ T3931] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   51.999519][ T3936] loop0: detected capacity change from 0 to 512
[   52.006476][ T3936] EXT4-fs: Ignoring removed bh option
[   52.042540][ T3936] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[   52.079749][ T3931] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.128999][ T3936] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   52.145443][ T3936] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.121: bg 0: block 248: padding at end of block bitmap is not set
[   52.168254][ T3936] loop0: lost filesystem error report for type 5 error -117
[   52.168555][ T3936] EXT4-fs error (device loop0): ext4_acquire_dquot:6998: comm syz.0.121: Failed to acquire dquot type 1
[   52.206883][ T3936] loop0: lost filesystem error report for type 5 error -117
[   52.207483][ T3936] EXT4-fs (loop0): 1 truncate cleaned up
[   52.224610][ T3936] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[   52.241040][ T3936] EXT4-fs error (device loop0): ext4_lookup:1789: inode #2: comm syz.0.121: deleted inode referenced: 12
[   52.257035][ T3931] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.329984][ T3951] FAULT_INJECTION: forcing a failure.
[   52.329984][ T3951] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[   52.350581][ T3951] CPU: 1 UID: 0 PID: 3951 Comm: syz.1.128 Not tainted syzkaller #0 PREEMPT(full) 
[   52.350611][ T3951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[   52.350628][ T3951] Call Trace:
[   52.350637][ T3951]  <TASK>
[   52.350650][ T3951]  __dump_stack+0x1d/0x30
[   52.350683][ T3951]  dump_stack_lvl+0x95/0xd0
[   52.350755][ T3951]  dump_stack+0x15/0x1b
[   52.350783][ T3951]  should_fail_ex+0x263/0x280
[   52.350885][ T3951]  should_fail_alloc_page+0xf2/0x100
[   52.350927][ T3951]  __alloc_frozen_pages_noprof+0x108/0x350
[   52.350961][ T3951]  alloc_pages_mpol+0xb3/0x260
[   52.350992][ T3951]  alloc_pages_noprof+0x8f/0x130
[   52.351073][ T3951]  __pud_alloc+0x47/0x4a0
[   52.351100][ T3951]  handle_mm_fault+0x1d62/0x3030
[   52.351133][ T3951]  ? mt_find+0x291/0x3b0
[   52.351170][ T3951]  ? lock_mm_and_find_vma+0x88/0x400
[   52.351281][ T3951]  do_user_addr_fault+0x3fd/0x1050
[   52.351343][ T3951]  exc_page_fault+0x62/0xa0
[   52.351365][ T3951]  asm_exc_page_fault+0x26/0x30
[   52.351386][ T3951] RIP: 0010:rep_movs_alternative+0xf/0x90
[   52.351421][ T3951] Code: c4 10 c3 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e
[   52.351446][ T3951] RSP: 0018:ffffc90011977d08 EFLAGS: 00050202
[   52.351475][ T3951] RAX: ffff888102713b28 RBX: 0000000000000001 RCX: 0000000000000001
[   52.351494][ T3951] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffc90011977d70
[   52.351511][ T3951] RBP: 0000000000000000 R08: 00000000000002fc R09: 0000000000000000
[   52.351523][ T3951] R10: 0001c90011977d70 R11: 0001c90011977d70 R12: 0000000000000008
[   52.351537][ T3951] R13: ffff8881044da500 R14: ffffc90011977d70 R15: 0000200000000000
[   52.351558][ T3951]  _copy_from_user+0x6f/0xb0
[   52.351652][ T3951]  do_ip_setsockopt+0x380/0x2290
[   52.351756][ T3951]  ip_setsockopt+0x58/0x110
[   52.351798][ T3951]  tcp_setsockopt+0x98/0xb0
[   52.351827][ T3951]  sock_common_setsockopt+0x69/0x80
[   52.351928][ T3951]  ? __pfx_sock_common_setsockopt+0x10/0x10
[   52.351964][ T3951]  __sys_setsockopt+0x184/0x200
[   52.352011][ T3951]  __x64_sys_setsockopt+0x64/0x80
[   52.352037][ T3951]  x64_sys_call+0x2327/0x3020
[   52.352063][ T3951]  do_syscall_64+0x12c/0x370
[   52.352094][ T3951]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   52.352167][ T3951] RIP: 0033:0x7fb17af8bf79
[   52.352187][ T3951] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   52.352211][ T3951] RSP: 002b:00007fb1799df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   52.352237][ T3951] RAX: ffffffffffffffda RBX: 00007fb17b205fa0 RCX: 00007fb17af8bf79
[   52.352251][ T3951] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000003
[   52.352263][ T3951] RBP: 00007fb1799df090 R08: 0000000000000001 R09: 0000000000000000
[   52.352310][ T3951] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001
[   52.352334][ T3951] R13: 00007fb17b206038 R14: 00007fb17b205fa0 R15: 00007ffed44ac368
[   52.352381][ T3951]  </TASK>
[   52.674114][   T50] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   52.683929][ T3955] 9p: Bad value for 'rfdno'
[   52.702697][   T50] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   52.721497][   T50] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   52.732970][   T50] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   52.765407][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[   52.834201][ T3957] loop5: detected capacity change from 0 to 1024
[   52.869330][ T3970] hub 8-0:1.0: USB hub found
[   52.902823][ T3970] hub 8-0:1.0: 8 ports detected
[   52.929012][ T3957] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   52.947623][ T3981] FAULT_INJECTION: forcing a failure.
[   52.947623][ T3981] name failslab, interval 1, probability 0, space 0, times 0
[   52.970821][ T3981] CPU: 0 UID: 0 PID: 3981 Comm: syz.0.138 Not tainted syzkaller #0 PREEMPT(full) 
[   52.970868][ T3981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[   52.970886][ T3981] Call Trace:
[   52.970895][ T3981]  <TASK>
[   52.970904][ T3981]  __dump_stack+0x1d/0x30
[   52.970930][ T3981]  dump_stack_lvl+0x95/0xd0
[   52.970957][ T3981]  dump_stack+0x15/0x1b
[   52.971007][ T3981]  should_fail_ex+0x263/0x280
[   52.971054][ T3981]  should_failslab+0x8c/0xb0
[   52.971141][ T3981]  kmem_cache_alloc_noprof+0x66/0x400
[   52.971180][ T3981]  ? skb_clone+0x151/0x1f0
[   52.971212][ T3981]  skb_clone+0x151/0x1f0
[   52.971240][ T3981]  __netlink_deliver_tap+0x2c9/0x500
[   52.971295][ T3981]  netlink_unicast+0x66b/0x690
[   52.971369][ T3981]  netlink_sendmsg+0x5c8/0x6f0
[   52.971397][ T3981]  ? __pfx_netlink_sendmsg+0x10/0x10
[   52.971426][ T3981]  ____sys_sendmsg+0x5af/0x600
[   52.971484][ T3981]  ___sys_sendmsg+0x195/0x1e0
[   52.971556][ T3981]  __x64_sys_sendmsg+0xd4/0x160
[   52.971586][ T3981]  x64_sys_call+0x194c/0x3020
[   52.971618][ T3981]  do_syscall_64+0x12c/0x370
[   52.971656][ T3981]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   52.971756][ T3981] RIP: 0033:0x7f162d47bf79
[   52.971773][ T3981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   52.971856][ T3981] RSP: 002b:00007f162becf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   52.971882][ T3981] RAX: ffffffffffffffda RBX: 00007f162d6f5fa0 RCX: 00007f162d47bf79
[   52.971915][ T3981] RDX: 0000000020000060 RSI: 0000200000000000 RDI: 0000000000000003
[   52.971928][ T3981] RBP: 00007f162becf090 R08: 0000000000000000 R09: 0000000000000000
[   52.971983][ T3981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   52.972000][ T3981] R13: 00007f162d6f6038 R14: 00007f162d6f5fa0 R15: 00007ffecec85928
[   52.972027][ T3981]  </TASK>
[   52.972088][ T3981] netlink: 'syz.0.138': attribute type 10 has an invalid length.
[   53.095921][ T3957] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   53.202115][ T3957] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.131: bg 0: block 112: padding at end of block bitmap is not set
[   53.219210][ T3981] hsr0: entered promiscuous mode
[   53.226764][ T3981] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[   53.245837][ T3981] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[   53.275517][ T3981] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[   53.325566][ T3716] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   53.415259][ T3988] 9p: Bad value for 'rfdno'
[   53.462427][ T3990] syzkaller0: entered promiscuous mode
[   53.468159][ T3990] syzkaller0: entered allmulticast mode
[   53.477948][ T3994] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.541903][ T3992] loop3: detected capacity change from 0 to 512
[   53.563523][ T3992] EXT4-fs: Ignoring removed bh option
[   53.610247][ T3992] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[   53.625283][ T3994] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.646450][ T3992] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   53.697487][ T3999] FAULT_INJECTION: forcing a failure.
[   53.697487][ T3999] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   53.717757][ T4006] loop0: detected capacity change from 0 to 512
[   53.724376][ T3992] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.143: bg 0: block 248: padding at end of block bitmap is not set
[   53.744829][ T4006] EXT4-fs: Ignoring removed orlov option
[   53.765473][ T3999] CPU: 0 UID: 0 PID: 3999 Comm: syz.2.145 Not tainted syzkaller #0 PREEMPT(full) 
[   53.765511][ T3999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[   53.765529][ T3999] Call Trace:
[   53.765538][ T3999]  <TASK>
[   53.765547][ T3999]  __dump_stack+0x1d/0x30
[   53.765574][ T3999]  dump_stack_lvl+0x95/0xd0
[   53.765665][ T3999]  dump_stack+0x15/0x1b
[   53.765693][ T3999]  should_fail_ex+0x263/0x280
[   53.765734][ T3999]  should_fail+0xb/0x20
[   53.765831][ T3999]  should_fail_usercopy+0x1a/0x20
[   53.765867][ T3999]  _copy_to_iter+0xd2/0xea0
[   53.765972][ T3999]  ? sysvec_apic_timer_interrupt+0x44/0x80
[   53.766088][ T3999]  copy_page_to_iter+0x18f/0x2d0
[   53.766123][ T3999]  anon_pipe_read+0x236/0x750
[   53.766199][ T3999]  ? __pfx_autoremove_wake_function+0x10/0x10
[   53.766243][ T3999]  do_iter_readv_writev+0x4fd/0x5a0
[   53.766300][ T3999]  vfs_readv+0x1f4/0x6e0
[   53.766349][ T3999]  do_readv+0xe9/0x210
[   53.766383][ T3999]  __x64_sys_readv+0x45/0x50
[   53.766417][ T3999]  x64_sys_call+0x27c0/0x3020
[   53.766476][ T3999]  do_syscall_64+0x12c/0x370
[   53.766510][ T3999]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   53.766532][ T3999] RIP: 0033:0x7f0ed183bf79
[   53.766607][ T3999] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   53.766626][ T3999] RSP: 002b:00007f0ed028f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013
[   53.766646][ T3999] RAX: ffffffffffffffda RBX: 00007f0ed1ab5fa0 RCX: 00007f0ed183bf79
[   53.766660][ T3999] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000003
[   53.766721][ T3999] RBP: 00007f0ed028f090 R08: 0000000000000000 R09: 0000000000000000
[   53.766738][ T3999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   53.766755][ T3999] R13: 00007f0ed1ab6038 R14: 00007f0ed1ab5fa0 R15: 00007ffea7cfe108
[   53.766848][ T3999]  </TASK>
[   53.957834][ T3992] loop3: lost filesystem error report for type 5 error -117
[   53.963393][ T3992] EXT4-fs error (device loop3): ext4_acquire_dquot:6998: comm syz.3.143: Failed to acquire dquot type 1
[   53.983038][ T4006] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[   53.992490][ T3992] loop3: lost filesystem error report for type 5 error -117
[   53.993255][ T3992] EXT4-fs (loop3): 1 truncate cleaned up
[   54.007181][ T4006] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[   54.015526][ T4006] EXT4-fs error (device loop0): ext4_iget_extra_inode:5073: inode #15: comm syz.0.147: corrupted in-inode xattr: e_value size too large
[   54.030236][ T3992] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[   54.042910][ T4006] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   54.043245][ T4006] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.147: couldn't read orphan inode 15 (err -117)
[   54.057108][ T3994] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.075047][ T4006] loop0: lost filesystem error report for type 5 error -117
[   54.078940][ T4006] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   54.090153][ T4010] loop1: detected capacity change from 0 to 512
[   54.105910][ T3992] EXT4-fs error (device loop3): ext4_lookup:1789: inode #2: comm syz.3.143: deleted inode referenced: 12
[   54.134889][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.146129][ T3994] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.234194][ T2149] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   54.268788][ T2149] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   54.311762][ T3938] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   54.321501][ T4020] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.336830][ T2149] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   54.359483][ T4022] loop0: detected capacity change from 0 to 512
[   54.366962][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[   54.369000][ T4022] EXT4-fs: Ignoring removed bh option
[   54.379113][ T4013] loop1: detected capacity change from 0 to 1024
[   54.389370][ T4013] EXT4-fs: Ignoring removed orlov option
[   54.402443][ T4022] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[   54.415040][ T4020] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.434841][ T4013] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   54.441726][ T4022] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   54.462466][ T4013] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.478116][ T4022] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.151: bg 0: block 248: padding at end of block bitmap is not set
[   54.498617][   T28] kauditd_printk_skb: 95 callbacks suppressed
[   54.498636][   T28] audit: type=1400 audit(1770973177.412:709): avc:  denied  { execute } for  pid=4009 comm="syz.1.148" path="/29/file1" dev="tmpfs" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   54.533399][ T4022] loop0: lost filesystem error report for type 5 error -117
[   54.535868][ T4022] Quota error (device loop0): write_blk: dquota write failed
[   54.578132][ T4022] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[   54.588662][ T4022] EXT4-fs error (device loop0): ext4_acquire_dquot:6998: comm syz.0.151: Failed to acquire dquot type 1
[   54.600294][ T4022] loop0: lost filesystem error report for type 5 error -117
[   54.601032][ T4020] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.623914][   T28] audit: type=1400 audit(1770973177.532:710): avc:  denied  { write } for  pid=4031 comm="syz.3.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   54.644026][ T4022] EXT4-fs (loop0): 1 truncate cleaned up
[   54.653235][ T4032] netlink: 20 bytes leftover after parsing attributes in process `syz.3.154'.
[   54.654966][   T28] audit: type=1400 audit(1770973177.532:711): avc:  denied  { create } for  pid=4029 comm="syz.2.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   54.670267][ T4032] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[   54.683192][   T28] audit: type=1400 audit(1770973177.532:712): avc:  denied  { write } for  pid=4029 comm="syz.2.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   54.707832][ T4022] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[   54.731212][   T28] audit: type=1400 audit(1770973177.532:713): avc:  denied  { read } for  pid=4029 comm="syz.2.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   54.754887][   T28] audit: type=1400 audit(1770973177.562:714): avc:  denied  { create } for  pid=4031 comm="syz.3.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   54.777054][   T28] audit: type=1400 audit(1770973177.562:715): avc:  denied  { write } for  pid=4031 comm="syz.3.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   54.797692][   T28] audit: type=1400 audit(1770973177.602:716): avc:  denied  { read write } for  pid=3716 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   54.825387][ T4022] EXT4-fs error (device loop0): ext4_lookup:1789: inode #2: comm syz.0.151: deleted inode referenced: 12
[   54.867626][ T4020] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.899358][ T4042] netlink: 8 bytes leftover after parsing attributes in process `syz.5.157'.
[   54.986426][ T4046] FAULT_INJECTION: forcing a failure.
[   54.986426][ T4046] name failslab, interval 1, probability 0, space 0, times 0
[   55.016274][ T4046] CPU: 1 UID: 0 PID: 4046 Comm: syz.2.158 Not tainted syzkaller #0 PREEMPT(full) 
[   55.016367][ T4046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[   55.016384][ T4046] Call Trace:
[   55.016394][ T4046]  <TASK>
[   55.016403][ T4046]  __dump_stack+0x1d/0x30
[   55.016483][ T4046]  dump_stack_lvl+0x95/0xd0
[   55.016508][ T4046]  dump_stack+0x15/0x1b
[   55.016529][ T4046]  should_fail_ex+0x263/0x280
[   55.016563][ T4046]  should_failslab+0x8c/0xb0
[   55.016666][ T4046]  __kmalloc_noprof+0xb8/0x4e0
[   55.016700][ T4046]  ? sk_prot_alloc+0xa8/0x180
[   55.016721][ T4046]  ? should_failslab+0x8c/0xb0
[   55.016785][ T4046]  sk_prot_alloc+0xa8/0x180
[   55.016809][ T4046]  sk_alloc+0x35/0x3e0
[   55.016832][ T4046]  bpf_prog_test_run_skb+0x31b/0xef0
[   55.016881][ T4046]  ? __fget_files+0x184/0x1c0
[   55.016919][ T4046]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[   55.017009][ T4046]  bpf_prog_test_run+0x204/0x340
[   55.017044][ T4046]  __sys_bpf+0x52e/0x7e0
[   55.017087][ T4046]  __x64_sys_bpf+0x41/0x50
[   55.017119][ T4046]  x64_sys_call+0x10cb/0x3020
[   55.017154][ T4046]  do_syscall_64+0x12c/0x370
[   55.017188][ T4046]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   55.017334][ T4046] RIP: 0033:0x7f0ed183bf79
[   55.017351][ T4046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   55.017374][ T4046] RSP: 002b:00007f0ed028f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   55.017401][ T4046] RAX: ffffffffffffffda RBX: 00007f0ed1ab5fa0 RCX: 00007f0ed183bf79
[   55.017419][ T4046] RDX: 0000000000000050 RSI: 0000200000000d80 RDI: 000000000000000a
[   55.017472][ T4046] RBP: 00007f0ed028f090 R08: 0000000000000000 R09: 0000000000000000
[   55.017486][ T4046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   55.017502][ T4046] R13: 00007f0ed1ab6038 R14: 00007f0ed1ab5fa0 R15: 00007ffea7cfe108
[   55.017530][ T4046]  </TASK>
[   55.290583][ T4050] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #3: comm syz.1.159: corrupted inode contents
[   55.290614][ T4050] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   55.290809][ T4050] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #3: comm syz.1.159: mark_inode_dirty error
[   55.329625][ T4050] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   55.346045][ T4050] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #3: comm syz.1.159: corrupted inode contents
[   55.385897][ T4050] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   55.415959][ T4050] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.159: mark_inode_dirty error
[   55.441722][ T4050] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   55.447932][ T4040] ip6gretap0: entered allmulticast mode
[   55.464846][ T4050] EXT4-fs error (device loop1): ext4_acquire_dquot:6998: comm syz.1.159: Failed to acquire dquot type 0
[   55.489853][ T4050] loop1: lost filesystem error report for type 5 error -117
[   55.490388][ T4050] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.159: corrupted inode contents
[   55.530937][ T4050] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   55.531171][ T4050] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #16: comm syz.1.159: mark_inode_dirty error
[   55.552240][ T4050] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   55.552468][ T4050] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.159: corrupted inode contents
[   55.574186][ T4050] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   55.574757][ T4050] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.159: mark_inode_dirty error
[   55.578103][ T4059] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   55.585146][ T4050] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   55.611163][ T4050] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.159: corrupted inode contents
[   55.632926][ T4050] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   55.633089][ T4050] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem
[   55.649941][ T4060] EXT4-fs: Ignoring removed bh option
[   55.671655][ T4050] loop1: lost filesystem error report for type 5 error -117
[   55.671876][ T4050] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.159: corrupted inode contents
[   55.692317][ T4050] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   55.692665][ T4050] EXT4-fs error (device loop1): ext4_truncate:4635: inode #16: comm syz.1.159: mark_inode_dirty error
[   55.702550][ T4060] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[   55.714382][ T4050] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem
[   55.731741][ T4050] EXT4-fs (loop1): 1 truncate cleaned up
[   55.738134][ T4050] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   55.750985][ T4050] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   55.762354][ T4059] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   55.784589][ T4060] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   55.807027][ T4060] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.162: bg 0: block 248: padding at end of block bitmap is not set
[   55.840792][ T4067] 9p: Bad value for 'rfdno'
[   55.849223][ T4060] EXT4-fs error (device loop2): ext4_acquire_dquot:6998: comm syz.2.162: Failed to acquire dquot type 1
[   55.866092][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.888980][ T4059] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   55.920194][ T4060] EXT4-fs (loop2): 1 truncate cleaned up
[   55.926495][ T4060] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[   55.954898][ T4060] EXT4-fs error (device loop2): ext4_lookup:1789: inode #2: comm syz.2.162: deleted inode referenced: 12
[   55.980035][ T4075] netlink: 20 bytes leftover after parsing attributes in process `syz.1.167'.
[   56.002045][ T4075] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[   56.016870][ T4059] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   56.084892][ T3938] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.110188][   T30] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.133385][ T3938] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.188618][ T3938] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.244981][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[   56.356770][ T4107] 9p: Bad value for 'rfdno'
[   56.418672][ T4116] set_capacity_and_notify: 2 callbacks suppressed
[   56.418692][ T4116] loop2: detected capacity change from 0 to 512
[   56.432685][ T4116] EXT4-fs: Ignoring removed nobh option
[   56.460749][ T4116] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   56.460866][ T4116] ext4 filesystem being mounted at /47/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   56.501631][ T4114] netlink: 8 bytes leftover after parsing attributes in process `syz.5.181'.
[   56.515025][ T4114] syzkaller0: entered promiscuous mode
[   56.521331][ T4114] syzkaller0: entered allmulticast mode
[   56.524721][ T3308] EXT4-fs error (device loop2): ext4_readdir:265: inode #2: block 3: comm syz-executor: path /47/bus: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0
[   56.547472][ T4114] loop5: detected capacity change from 0 to 512
[   56.556003][ T4114] msdos: Unknown parameter 'do'
[   56.609631][ T3308] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816
[   56.610056][ T3308] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816
[   57.038072][ T4131] loop3: detected capacity change from 0 to 1024
[   57.045558][ T4131] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   57.058146][ T4131] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #3: block 5: comm syz.3.185: lblock 5 mapped to illegal pblock 5 (length 1)
[   57.073153][ T4131] EXT4-fs error (device loop3): ext4_acquire_dquot:6998: comm syz.3.185: Failed to acquire dquot type 0
[   57.086395][ T4131] fserror_report: 3 callbacks suppressed
[   57.086413][ T4131] loop3: lost filesystem error report for type 5 error -117
[   57.092397][ T4131] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 5: comm syz.3.185: lblock 5 mapped to illegal pblock 5 (length 1)
[   57.114079][ T4131] EXT4-fs error (device loop3): ext4_acquire_dquot:6998: comm syz.3.185: Failed to acquire dquot type 0
[   57.125370][ T4131] loop3: lost filesystem error report for type 5 error -117
[   57.125851][ T4131] EXT4-fs error (device loop3): ext4_free_blocks:6727: comm syz.3.185: Freeing blocks not in datazone - block = 0, count = 4096
[   57.146457][ T4131] loop3: lost filesystem error report for type 5 error -117
[   57.146815][ T4131] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 5: comm syz.3.185: lblock 5 mapped to illegal pblock 5 (length 1)
[   57.169375][ T4131] EXT4-fs error (device loop3): ext4_acquire_dquot:6998: comm syz.3.185: Failed to acquire dquot type 0
[   57.180822][ T4131] loop3: lost filesystem error report for type 5 error -117
[   57.180951][ T4131] EXT4-fs (loop3): 1 orphan inode deleted
[   57.194616][ T4131] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   57.214764][ T4131] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   57.251197][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   57.256595][   T50] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.311895][   T50] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.324015][   T50] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.342503][   T50] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.358186][ T4144] loop1: detected capacity change from 0 to 1024
[   57.368379][ T4144] EXT4-fs: Ignoring removed orlov option
[   57.387049][ T4144] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled
[   57.416317][ T4148] loop0: detected capacity change from 0 to 1024
[   57.426191][ T4148] EXT4-fs: Ignoring removed oldalloc option
[   57.430969][ T4146] FAULT_INJECTION: forcing a failure.
[   57.430969][ T4146] name failslab, interval 1, probability 0, space 0, times 0
[   57.432242][ T4148] EXT4-fs: Ignoring removed bh option
[   57.454288][ T4146] CPU: 0 UID: 0 PID: 4146 Comm: syz.3.190 Not tainted syzkaller #0 PREEMPT(full) 
[   57.454322][ T4146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[   57.454338][ T4146] Call Trace:
[   57.454347][ T4146]  <TASK>
[   57.454419][ T4146]  __dump_stack+0x1d/0x30
[   57.454452][ T4146]  dump_stack_lvl+0x95/0xd0
[   57.454476][ T4146]  dump_stack+0x15/0x1b
[   57.454496][ T4146]  should_fail_ex+0x263/0x280
[   57.454549][ T4146]  should_failslab+0x8c/0xb0
[   57.454578][ T4146]  kmem_cache_alloc_lru_noprof+0x6c/0x400
[   57.454609][ T4146]  ? __d_alloc+0x37/0x340
[   57.454636][ T4146]  __d_alloc+0x37/0x340
[   57.454732][ T4146]  ? default_pointer+0xf2/0x5e0
[   57.454755][ T4146]  ? xas_load+0x413/0x430
[   57.454783][ T4146]  d_alloc+0x2e/0x100
[   57.454809][ T4146]  lookup_one_qstr_excl+0x99/0x250
[   57.454834][ T4146]  start_dirop+0x3e/0x70
[   57.454885][ T4146]  simple_start_creating+0xa2/0xd0
[   57.454926][ T4146]  debugfs_start_creating+0xda/0x150
[   57.454962][ T4146]  __debugfs_create_file+0x70/0x2b0
[   57.455061][ T4146]  debugfs_create_file_full+0x3f/0x60
[   57.455095][ T4146]  ? __pfx_ip6gre_tunnel_setup+0x10/0x10
[   57.455196][ T4146]  ref_tracker_dir_debugfs+0x10e/0x220
[   57.455304][ T4146]  alloc_netdev_mqs+0x1a7/0xa40
[   57.455330][ T4146]  ? sized_strscpy+0x121/0x1a0
[   57.455359][ T4146]  ip6gre_tunnel_locate+0x1d8/0x510
[   57.455389][ T4146]  ? should_fail_ex+0xd9/0x280
[   57.455419][ T4146]  ? gre_flags_to_tnl_flags+0x1c1/0x1f0
[   57.455442][ T4146]  ip6gre_tunnel_siocdevprivate+0x704/0x950
[   57.455475][ T4146]  dev_ifsioc+0x923/0xf60
[   57.455573][ T4146]  dev_ioctl+0x78c/0x960
[   57.455617][ T4146]  sock_ioctl+0x593/0x610
[   57.455656][ T4146]  ? __pfx_sock_ioctl+0x10/0x10
[   57.455756][ T4146]  __se_sys_ioctl+0xce/0x140
[   57.455786][ T4146]  __x64_sys_ioctl+0x43/0x50
[   57.455813][ T4146]  x64_sys_call+0x1563/0x3020
[   57.455841][ T4146]  do_syscall_64+0x12c/0x370
[   57.455928][ T4146]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   57.455954][ T4146] RIP: 0033:0x7fabdda9bf79
[   57.455971][ T4146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   57.455991][ T4146] RSP: 002b:00007fabdc4f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   57.456012][ T4146] RAX: ffffffffffffffda RBX: 00007fabddd15fa0 RCX: 00007fabdda9bf79
[   57.456074][ T4146] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000007
[   57.456088][ T4146] RBP: 00007fabdc4f7090 R08: 0000000000000000 R09: 0000000000000000
[   57.456102][ T4146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   57.456115][ T4146] R13: 00007fabddd16038 R14: 00007fabddd15fa0 R15: 00007ffd40ecc2f8
[   57.456135][ T4146]  </TASK>
[   57.777610][ T4158] loop1: detected capacity change from 0 to 128
[   57.804772][ T4158] xt_ecn: cannot match TCP bits for non-tcp packets
[   57.813245][ T4160] loop0: detected capacity change from 0 to 1024
[   57.823972][ T4160] EXT4-fs: Ignoring removed oldalloc option
[   57.831632][ T4160] EXT4-fs: Ignoring removed bh option
[   57.890126][ T4160] FAULT_INJECTION: forcing a failure.
[   57.890126][ T4160] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   57.941402][ T4160] CPU: 1 UID: 0 PID: 4160 Comm: syz.0.193 Not tainted syzkaller #0 PREEMPT(full) 
[   57.941442][ T4160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[   57.941458][ T4160] Call Trace:
[   57.941466][ T4160]  <TASK>
[   57.941476][ T4160]  __dump_stack+0x1d/0x30
[   57.941510][ T4160]  dump_stack_lvl+0x95/0xd0
[   57.941562][ T4160]  dump_stack+0x15/0x1b
[   57.941669][ T4160]  should_fail_ex+0x263/0x280
[   57.941707][ T4160]  should_fail+0xb/0x20
[   57.941762][ T4160]  should_fail_usercopy+0x1a/0x20
[   57.941802][ T4160]  _copy_to_user+0x20/0xa0
[   57.941894][ T4160]  simple_read_from_buffer+0xb5/0x130
[   57.941952][ T4160]  proc_fail_nth_read+0x10e/0x150
[   57.941983][ T4160]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   57.942013][ T4160]  vfs_read+0x1ab/0x7f0
[   57.942046][ T4160]  ? __rcu_read_unlock+0x4e/0x70
[   57.942162][ T4160]  ? __fget_files+0x184/0x1c0
[   57.942206][ T4160]  ? mutex_lock+0x57/0x90
[   57.942231][ T4160]  ksys_read+0xdc/0x1a0
[   57.942345][ T4160]  __x64_sys_read+0x40/0x50
[   57.942380][ T4160]  x64_sys_call+0x2886/0x3020
[   57.942482][ T4160]  do_syscall_64+0x12c/0x370
[   57.942518][ T4160]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   57.942545][ T4160] RIP: 0033:0x7f162d43c84e
[   57.942566][ T4160] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   57.942587][ T4160] RSP: 002b:00007f162becefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   57.942632][ T4160] RAX: ffffffffffffffda RBX: 00007f162becf6c0 RCX: 00007f162d43c84e
[   57.942696][ T4160] RDX: 000000000000000f RSI: 00007f162becf0a0 RDI: 0000000000000004
[   57.942712][ T4160] RBP: 00007f162becf090 R08: 0000000000000000 R09: 0000000000000000
[   57.942728][ T4160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   57.942742][ T4160] R13: 00007f162d6f6038 R14: 00007f162d6f5fa0 R15: 00007ffecec85928
[   57.942787][ T4160]  </TASK>
[   57.943914][ T4170] hub 8-0:1.0: USB hub found
[   57.980546][ T4172] tipc: Started in network mode
[   57.983105][ T4170] hub 8-0:1.0: 8 ports detected
[   58.026034][ T4172] tipc: Node identity 8a5cfb16a5df, cluster identity 4711
[   58.159171][ T4172] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   58.186182][ T4173] syzkaller0: entered promiscuous mode
[   58.205740][ T4173] syzkaller0: entered allmulticast mode
[   58.222629][ T4172] tipc: Resetting bearer <eth:syzkaller0>
[   58.243761][ T4176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   58.244451][ T4183] netlink: 328 bytes leftover after parsing attributes in process `syz.1.201'.
[   58.263373][ T4171] tipc: Resetting bearer <eth:syzkaller0>
[   58.269326][ T4183] process 'syz.1.201' launched './file0' with NULL argv: empty string added
[   58.271278][ T4176] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   58.283431][ T4183] netlink: 20 bytes leftover after parsing attributes in process `syz.1.201'.
[   58.304079][ T4171] tipc: Disabling bearer <eth:syzkaller0>
[   58.329331][ T4185] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   58.367054][ T4188] loop3: detected capacity change from 0 to 512
[   58.373873][ T4188] EXT4-fs: Ignoring removed bh option
[   58.396746][ T4188] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[   58.402317][ T4185] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   58.442505][ T4188] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   58.468346][ T4188] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.202: bg 0: block 248: padding at end of block bitmap is not set
[   58.483087][ T4188] loop3: lost filesystem error report for type 5 error -117
[   58.483322][ T4188] EXT4-fs error (device loop3): ext4_acquire_dquot:6998: comm syz.3.202: Failed to acquire dquot type 1
[   58.545034][ T4188] loop3: lost filesystem error report for type 5 error -117
[   58.546051][ T4185] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   58.572883][ T4197] loop1: detected capacity change from 0 to 512
[   58.579948][ T4197] EXT4-fs: Ignoring removed orlov option
[   58.604335][ T4197] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[   58.613757][ T4188] EXT4-fs (loop3): 1 truncate cleaned up
[   58.621221][ T4197] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[   58.631841][ T4185] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   58.642641][ T4197] EXT4-fs error (device loop1): ext4_iget_extra_inode:5073: inode #15: comm syz.1.206: corrupted in-inode xattr: e_value size too large
[   58.657111][ T4197] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.206: couldn't read orphan inode 15 (err -117)
[   58.670564][ T4188] EXT4-fs error (device loop3): ext4_lookup:1789: inode #2: comm syz.3.202: deleted inode referenced: 12
[   58.682334][ T4197] loop1: lost filesystem error report for type 5 error -117
[   58.732996][ T3938] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.767880][   T36] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.785820][   T36] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.801631][   T36] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.810358][ T4207] 9p: Bad value for 'rfdno'
[   58.850032][ T4209] Cannot find add_set index 0 as target
[   58.925298][ T4217] loop3: detected capacity change from 0 to 512
[   58.983102][ T4217] EXT4-fs: Ignoring removed oldalloc option
[   59.131944][ T4217] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.213: Parent and EA inode have the same ino 15
[   59.153369][ T4220] FAULT_INJECTION: forcing a failure.
[   59.153369][ T4220] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   59.167377][ T4217] loop3: lost filesystem error report for type 5 error -117
[   59.167534][ T4220] CPU: 1 UID: 0 PID: 4220 Comm: syz.0.215 Not tainted syzkaller #0 PREEMPT(full) 
[   59.167568][ T4220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[   59.167585][ T4220] Call Trace:
[   59.167593][ T4220]  <TASK>
[   59.167677][ T4220]  __dump_stack+0x1d/0x30
[   59.167709][ T4220]  dump_stack_lvl+0x95/0xd0
[   59.167739][ T4220]  dump_stack+0x15/0x1b
[   59.167767][ T4220]  should_fail_ex+0x263/0x280
[   59.167827][ T4220]  should_fail+0xb/0x20
[   59.167862][ T4220]  should_fail_usercopy+0x1a/0x20
[   59.167903][ T4220]  _copy_to_user+0x20/0xa0
[   59.167946][ T4220]  bpf_test_finish+0x157/0x500
[   59.168047][ T4220]  bpf_prog_test_run_flow_dissector+0x2c9/0x360
[   59.168089][ T4220]  ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10
[   59.168118][ T4220]  bpf_prog_test_run+0x204/0x340
[   59.168194][ T4220]  __sys_bpf+0x52e/0x7e0
[   59.168244][ T4220]  __x64_sys_bpf+0x41/0x50
[   59.168281][ T4220]  x64_sys_call+0x10cb/0x3020
[   59.168375][ T4220]  do_syscall_64+0x12c/0x370
[   59.168413][ T4220]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   59.168443][ T4220] RIP: 0033:0x7f162d47bf79
[   59.168461][ T4220] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   59.168561][ T4220] RSP: 002b:00007f162becf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   59.168589][ T4220] RAX: ffffffffffffffda RBX: 00007f162d6f5fa0 RCX: 00007f162d47bf79
[   59.168609][ T4220] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a
[   59.168653][ T4220] RBP: 00007f162becf090 R08: 0000000000000000 R09: 0000000000000000
[   59.168671][ T4220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   59.168688][ T4220] R13: 00007f162d6f6038 R14: 00007f162d6f5fa0 R15: 00007ffecec85928
[   59.168710][ T4220]  </TASK>
[   59.194652][ T4217] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.213: Parent and EA inode have the same ino 15
[   59.379728][ T4217] loop3: lost filesystem error report for type 5 error -117
[   59.386123][ T4217] EXT4-fs (loop3): 1 orphan inode deleted
[   59.576390][ T4233] EXT4-fs: Ignoring removed orlov option
[   59.591320][ T4233] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[   59.626436][ T4233] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[   59.662538][ T4233] EXT4-fs error (device loop5): ext4_iget_extra_inode:5073: inode #15: comm syz.5.218: corrupted in-inode xattr: e_value size too large
[   59.711048][ T4233] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.218: couldn't read orphan inode 15 (err -117)
[   59.730599][ T4233] loop5: lost filesystem error report for type 5 error -117
[   59.829871][ T4247] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.843405][ T4249] 9p: Bad value for 'rfdno'
[   59.878998][ T4251] EXT4-fs: Ignoring removed bh option
[   59.915004][ T4251] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[   59.935561][ T4247] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.973691][ T4251] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   60.030269][ T4251] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.222: bg 0: block 248: padding at end of block bitmap is not set
[   60.069474][ T4247] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.081615][ T4251] __quota_error: 193 callbacks suppressed
[   60.081632][ T4251] Quota error (device loop5): write_blk: dquota write failed
[   60.098206][ T4251] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[   60.108396][ T4251] EXT4-fs error (device loop5): ext4_acquire_dquot:6998: comm syz.5.222: Failed to acquire dquot type 1
[   60.124400][   T28] audit: type=1400 audit(1770973183.032:897): avc:  denied  { read } for  pid=4260 comm="syz.0.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   60.144166][ T4251] EXT4-fs (loop5): 1 truncate cleaned up
[   60.156731][ T4251] EXT4-fs error (device loop5): ext4_lookup:1789: inode #2: comm syz.5.222: deleted inode referenced: 12
[   60.194040][ T4247] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.300842][   T28] audit: type=1400 audit(1770973183.142:898): avc:  denied  { write } for  pid=4260 comm="syz.0.227" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[   60.422150][   T50] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.447565][   T30] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.461931][   T30] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.471485][  T402] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.695826][   T28] audit: type=1400 audit(1770973183.602:899): avc:  denied  { write } for  pid=4274 comm="syz.0.230" name="netlink" dev="proc" ino=4026532397 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   61.015455][ T3938] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.079588][ T3938] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.189117][ T3938] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.249657][ T3938] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.375942][   T28] audit: type=1400 audit(1770973184.242:900): avc:  denied  { read } for  pid=3031 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[   61.397894][   T28] audit: type=1400 audit(1770973184.272:901): avc:  denied  { search } for  pid=3031 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   61.459264][   T28] audit: type=1400 audit(1770973184.272:902): avc:  denied  { search } for  pid=3031 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   61.481499][   T28] audit: type=1400 audit(1770973184.272:903): avc:  denied  { search } for  pid=3031 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   61.503492][   T28] audit: type=1400 audit(1770973184.272:904): avc:  denied  { read } for  pid=3031 comm="dhcpcd" name="n29" dev="tmpfs" ino=2338 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   61.538270][ T3938] bridge_slave_1: left allmulticast mode
[   61.544146][ T3938] bridge_slave_1: left promiscuous mode
[   61.562333][ T3938] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.573673][ T4284] set_capacity_and_notify: 5 callbacks suppressed
[   61.573693][ T4284] loop5: detected capacity change from 0 to 512
[   61.601127][ T3938] bridge_slave_0: left allmulticast mode
[   61.607913][ T3938] bridge_slave_0: left promiscuous mode
[   61.613821][ T3938] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.661396][ T4284] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   61.684098][ T4289] netlink: 8 bytes leftover after parsing attributes in process `syz.0.232'.
[   61.740040][ T4284] netlink: 20 bytes leftover after parsing attributes in process `syz.5.233'.
[   61.774274][ T4284] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[   61.797595][ T4303] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #2: block 3: comm syz.5.233: lblock 8 mapped to illegal pblock 3 (length 25)
[   61.826861][ T4303] EXT4-fs (loop5): Remounting filesystem read-only
[   61.860431][ T3938] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   61.878431][ T3938] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   61.890217][ T3938] bond0 (unregistering): Released all slaves
[   61.904346][ T4302] syzkaller0: entered promiscuous mode
[   61.942963][ T4302] syzkaller0: entered allmulticast mode
[   61.944234][ T4289] loop0: detected capacity change from 0 to 512
[   62.006309][ T3938] hsr_slave_0: left promiscuous mode
[   62.025301][ T3938] hsr_slave_1: left promiscuous mode
[   62.036282][ T4289] msdos: Unknown parameter 'do'
[   62.050900][ T3938] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   62.058665][ T3938] batman_adv: batadv0: Removing interface: batadv_slave_0
[   62.075923][ T3938] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   62.083935][ T3938] batman_adv: batadv0: Removing interface: batadv_slave_1
[   62.099734][ T3938] veth1_macvtap: left promiscuous mode
[   62.105599][ T3938] veth0_macvtap: left promiscuous mode
[   62.112572][ T3938] veth1_vlan: left promiscuous mode
[   62.118195][ T3938] veth0_vlan: left promiscuous mode
[   62.301100][ T3938] team0 (unregistering): Port device team_slave_1 removed
[   62.316869][ T3938] team0 (unregistering): Port device team_slave_0 removed
[   62.614428][ T4338] loop1: detected capacity change from 0 to 512
[   62.653498][ T4338] EXT4-fs: Ignoring removed orlov option
[   62.673656][ T4338] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[   62.702456][ T4299] chnl_net:caif_netlink_parms(): no params data found
[   62.714439][ T4338] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[   62.723162][ T4338] EXT4-fs error (device loop1): ext4_iget_extra_inode:5073: inode #15: comm syz.1.238: corrupted in-inode xattr: e_value size too large
[   62.737709][ T4338] fserror_report: 6 callbacks suppressed
[   62.737723][ T4338] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   62.761660][ T4338] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.238: couldn't read orphan inode 15 (err -117)
[   62.783019][ T4338] fserror_report: 2 callbacks suppressed
[   62.783038][ T4338] loop1: lost filesystem error report for type 5 error -117
[   62.873312][ T4361] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[   62.937522][ T4299] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.966240][ T4299] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.973778][ T4299] bridge_slave_0: entered allmulticast mode
[   62.996307][ T4299] bridge_slave_0: entered promiscuous mode
[   63.007003][ T4299] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.015763][ T4299] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.023107][ T4299] bridge_slave_1: entered allmulticast mode
[   63.036521][ T4299] bridge_slave_1: entered promiscuous mode
[   63.102770][ T4299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.124722][ T4299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.136545][ T4377] FAULT_INJECTION: forcing a failure.
[   63.136545][ T4377] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   63.164520][ T4377] CPU: 0 UID: 0 PID: 4377 Comm: syz.1.246 Not tainted syzkaller #0 PREEMPT(full) 
[   63.164560][ T4377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[   63.164575][ T4377] Call Trace:
[   63.164582][ T4377]  <TASK>
[   63.164590][ T4377]  __dump_stack+0x1d/0x30
[   63.164674][ T4377]  dump_stack_lvl+0x95/0xd0
[   63.164735][ T4377]  dump_stack+0x15/0x1b
[   63.164759][ T4377]  should_fail_ex+0x263/0x280
[   63.164794][ T4377]  should_fail+0xb/0x20
[   63.164823][ T4377]  should_fail_usercopy+0x1a/0x20
[   63.164932][ T4377]  core_sys_select+0x4f2/0x730
[   63.164983][ T4377]  ? set_user_sigmask+0x8b/0x140
[   63.165026][ T4377]  __se_sys_pselect6+0x23c/0x2a0
[   63.165120][ T4377]  __x64_sys_pselect6+0x78/0x90
[   63.165162][ T4377]  x64_sys_call+0x8d5/0x3020
[   63.165196][ T4377]  do_syscall_64+0x12c/0x370
[   63.165285][ T4377]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   63.165311][ T4377] RIP: 0033:0x7fb17af8bf79
[   63.165330][ T4377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   63.165352][ T4377] RSP: 002b:00007fb1799df028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e
[   63.165376][ T4377] RAX: ffffffffffffffda RBX: 00007fb17b205fa0 RCX: 00007fb17af8bf79
[   63.165404][ T4377] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000040
[   63.165436][ T4377] RBP: 00007fb1799df090 R08: 0000200000000280 R09: 0000000000000000
[   63.165452][ T4377] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001
[   63.165472][ T4377] R13: 00007fb17b206038 R14: 00007fb17b205fa0 R15: 00007ffed44ac368
[   63.165498][ T4377]  </TASK>
[   63.362822][ T4372] loop5: detected capacity change from 0 to 128
[   63.385891][ T4299] team0: Port device team_slave_0 added
[   63.395012][ T4299] team0: Port device team_slave_1 added
[   63.442298][ T4299] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.466108][ T4299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   63.513235][ T4392] hub 8-0:1.0: USB hub found
[   63.518160][ T4392] hub 8-0:1.0: 8 ports detected
[   63.578069][ T4299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.622135][ T4299] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.649125][ T4299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   63.745116][ T4299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.806619][ T4402] loop0: detected capacity change from 0 to 512
[   63.871998][ T4402] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.248: bg 0: block 393: padding at end of block bitmap is not set
[   63.920219][ T4299] hsr_slave_0: entered promiscuous mode
[   63.932658][ T4299] hsr_slave_1: entered promiscuous mode
[   63.939329][ T4402] loop0: lost filesystem error report for type 5 error -117
[   63.939669][ T4402] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6688: Corrupt filesystem
[   63.957738][ T4299] debugfs: 'hsr0' already exists in 'hsr'
[   63.963673][ T4299] Cannot create hsr debugfs directory
[   63.970390][ T4402] loop0: lost filesystem error report for type 5 error -117
[   63.970983][ T4402] EXT4-fs (loop0): 2 truncates cleaned up
[   64.172933][ T4299] netdevsim netdevsim6 netdevsim0: renamed from eth0
[   64.183404][ T4299] netdevsim netdevsim6 netdevsim1: renamed from eth1
[   64.240648][ T4412] loop5: detected capacity change from 0 to 512
[   64.248055][ T4402] lo speed is unknown, defaulting to 1000
[   64.254848][ T4402] lo speed is unknown, defaulting to 1000
[   64.264098][ T4299] netdevsim netdevsim6 netdevsim2: renamed from eth2
[   64.291399][ T4299] netdevsim netdevsim6 netdevsim3: renamed from eth3
[   64.304691][ T4420] netlink: 4 bytes leftover after parsing attributes in process `syz.0.248'.
[   64.320212][ T4412] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   64.338008][ T4402] lo speed is unknown, defaulting to 1000
[   64.343953][ T4420] hsr_slave_0: left promiscuous mode
[   64.359343][ T4428] capability: warning: `syz.0.248' uses deprecated v2 capabilities in a way that may be insecure
[   64.389578][ T4402] infiniband syz0: set active
[   64.394524][ T4402] infiniband syz0: added lo
[   64.410240][ T4402] RDS/IB: syz0: added
[   64.414400][ T4402] smc: adding ib device syz0 with port count 1
[   64.420846][ T4402] smc:    ib device syz0 port 1 has no pnetid
[   64.429120][ T4431] FAULT_INJECTION: forcing a failure.
[   64.429120][ T4431] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   64.432305][ T4420] hsr_slave_1: left promiscuous mode
[   64.442470][ T4431] CPU: 0 UID: 0 PID: 4431 Comm: syz.3.253 Not tainted syzkaller #0 PREEMPT(full) 
[   64.442566][ T4431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[   64.442611][ T4431] Call Trace:
[   64.442641][ T4431]  <TASK>
[   64.442699][ T4431]  __dump_stack+0x1d/0x30
[   64.442784][ T4431]  dump_stack_lvl+0x95/0xd0
[   64.442859][ T4431]  dump_stack+0x15/0x1b
[   64.442939][ T4431]  should_fail_ex+0x263/0x280
[   64.443107][ T4431]  should_fail+0xb/0x20
[   64.443193][ T4431]  should_fail_usercopy+0x1a/0x20
[   64.443290][ T4431]  _copy_to_user+0x20/0xa0
[   64.443407][ T4431]  simple_read_from_buffer+0xb5/0x130
[   64.443513][ T4431]  proc_fail_nth_read+0x10e/0x150
[   64.443644][ T4431]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   64.443720][ T4431]  vfs_read+0x1ab/0x7f0
[   64.443903][ T4431]  ? __rcu_read_unlock+0x4e/0x70
[   64.444075][ T4431]  ? __fget_files+0x184/0x1c0
[   64.444185][ T4431]  ? mutex_lock+0x57/0x90
[   64.444252][ T4431]  ksys_read+0xdc/0x1a0
[   64.444459][ T4431]  __x64_sys_read+0x40/0x50
[   64.444546][ T4431]  x64_sys_call+0x2886/0x3020
[   64.444633][ T4431]  do_syscall_64+0x12c/0x370
[   64.444793][ T4431]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   64.444870][ T4431] RIP: 0033:0x7fabdda5c84e
[   64.444918][ T4431] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   64.445011][ T4431] RSP: 002b:00007fabdc4f6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   64.445084][ T4431] RAX: ffffffffffffffda RBX: 00007fabdc4f76c0 RCX: 00007fabdda5c84e
[   64.445152][ T4431] RDX: 000000000000000f RSI: 00007fabdc4f70a0 RDI: 0000000000000003
[   64.445223][ T4431] RBP: 00007fabdc4f7090 R08: 0000000000000000 R09: 0000000000000000
[   64.445237][ T4431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   64.445261][ T4431] R13: 00007fabddd16038 R14: 00007fabddd15fa0 R15: 00007ffd40ecc2f8
[   64.445290][ T4431]  </TASK>
[   64.508604][ T4434] netlink: 20 bytes leftover after parsing attributes in process `syz.5.249'.
[   64.573905][ T4435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   64.592175][ T4432] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #2: block 3: comm syz.5.249: lblock 8 mapped to illegal pblock 3 (length 25)
[   64.659755][ T4434] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[   64.685952][ T4432] EXT4-fs (loop5): Remounting filesystem read-only
[   64.691744][ T4435] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   64.731046][ T1505] lo speed is unknown, defaulting to 1000
[   64.736901][    T9] lo speed is unknown, defaulting to 1000
[   64.743596][ T4402] lo speed is unknown, defaulting to 1000
[   64.834197][ T4451] netlink: 'syz.3.255': attribute type 27 has an invalid length.
[   64.847926][ T4402] lo speed is unknown, defaulting to 1000
[   64.907883][ T4299] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.965875][ T4402] lo speed is unknown, defaulting to 1000
[   64.975351][ T4299] 8021q: adding VLAN 0 to HW filter on device team0
[   65.017067][ T3454] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.024197][ T3454] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.055047][  T402] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.062288][  T402] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.083696][ T4402] lo speed is unknown, defaulting to 1000
[   65.130900][   T28] kauditd_printk_skb: 131 callbacks suppressed
[   65.130918][   T28] audit: type=1400 audit(1770973188.042:1036): avc:  denied  { module_request } for  pid=4299 comm="syz-executor" kmod="netdev-nicvf0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[   65.185555][ T4402] lo speed is unknown, defaulting to 1000
[   65.199033][   T28] audit: type=1400 audit(1770973188.072:1037): avc:  denied  { create } for  pid=4462 comm="syz.5.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   65.245123][   T28] audit: type=1400 audit(1770973188.072:1038): avc:  denied  { write } for  pid=4462 comm="syz.5.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   65.282623][   T28] audit: type=1400 audit(1770973188.072:1039): avc:  denied  { nlmsg_write } for  pid=4462 comm="syz.5.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   65.412065][ T4477] hub 8-0:1.0: USB hub found
[   65.416905][ T4477] hub 8-0:1.0: 8 ports detected
[   65.522944][ T4299] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.811998][ T4482] loop1: detected capacity change from 0 to 128
[   65.958241][ T4480] loop3: detected capacity change from 0 to 512
[   65.984426][   T28] audit: type=1400 audit(1770973188.112:1040): avc:  denied  { sys_module } for  pid=4299 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[   66.005990][   T28] audit: type=1400 audit(1770973188.142:1041): avc:  denied  { read open } for  pid=4468 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=489 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   66.031571][   T28] audit: type=1400 audit(1770973188.272:1042): avc:  denied  { write } for  pid=4467 comm="syz.5.259" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   66.054910][   T28] audit: type=1400 audit(1770973188.402:1043): avc:  denied  { map_read map_write } for  pid=4479 comm="syz.3.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   66.120903][ T4480] EXT4-fs: Ignoring removed orlov option
[   66.128196][   T28] audit: type=1400 audit(1770973188.412:1044): avc:  denied  { read } for  pid=4479 comm="syz.3.261" dev="nsfs" ino=4026532756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   66.149867][   T28] audit: type=1400 audit(1770973188.412:1045): avc:  denied  { open } for  pid=4479 comm="syz.3.261" path="net:[4026532756]" dev="nsfs" ino=4026532756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   66.153172][ T4480] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[   66.212639][ T4480] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[   66.291341][ T4480] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #15: comm syz.3.261: corrupted in-inode xattr: e_value size too large
[   66.318713][ T4509] loop1: detected capacity change from 0 to 512
[   66.327250][ T4480] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   66.337520][ T4480] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.261: couldn't read orphan inode 15 (err -117)
[   66.372912][ T4509] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   66.380252][ T4480] loop3: lost filesystem error report for type 5 error -117
[   66.474650][ T4524] netlink: 12 bytes leftover after parsing attributes in process `syz.5.269'.
[   66.484807][ T4519] loop0: detected capacity change from 0 to 1024
[   66.506740][ T4509] netlink: 20 bytes leftover after parsing attributes in process `syz.1.265'.
[   66.506740][ T4519] EXT4-fs: Ignoring removed bh option
[   66.506944][ T4509] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[   66.557012][ T4529] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #2: block 3: comm syz.1.265: lblock 8 mapped to illegal pblock 3 (length 25)
[   66.587592][ T4519] EXT4-fs: Ignoring removed orlov option
[   66.593353][ T4519] EXT4-fs: dax option not supported
[   66.613115][ T4524] netlink: 8 bytes leftover after parsing attributes in process `syz.5.269'.
[   66.641992][ T4529] EXT4-fs (loop1): Remounting filesystem read-only
[   66.655089][ T4519] netlink: 10 bytes leftover after parsing attributes in process `syz.0.268'.
[   66.697928][ T4540] loop5: detected capacity change from 0 to 512
[   66.721433][ T4299] veth0_vlan: entered promiscuous mode
[   66.744682][ T4299] veth1_vlan: entered promiscuous mode
[   66.759316][ T4299] veth0_macvtap: entered promiscuous mode
[   66.768559][ T4299] veth1_macvtap: entered promiscuous mode
[   66.780238][ T4299] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.791788][ T4540] EXT4-fs warning (device loop5): ext4_xattr_inode_get:560: inode #11: comm syz.5.271: EA inode hash validation failed
[   66.810050][ T4540] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #15: comm syz.5.271: corrupted inode contents
[   66.822619][ T4540] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   66.822836][ T4540] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #15: comm syz.5.271: mark_inode_dirty error
[   66.845112][ T4540] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   66.845287][ T4540] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #15: comm syz.5.271: corrupted inode contents
[   66.872733][ T4540] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   66.872968][ T4540] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3001: inode #15: comm syz.5.271: mark_inode_dirty error
[   66.919928][ T4540] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   66.926083][ T4540] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3004: inode #15: comm syz.5.271: mark inode dirty (error -117)
[   66.953781][ T4540] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   66.954003][ T4540] EXT4-fs warning (device loop5): ext4_evict_inode:273: xattr delete (err -117)
[   66.973249][ T4299] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.004569][ T4546] loop1: detected capacity change from 0 to 128
[   67.042489][   T50] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.051998][ T4540] EXT4-fs (loop5): 1 orphan inode deleted
[   67.074654][   T50] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.116472][ T4540] netlink: 'syz.5.271': attribute type 16 has an invalid length.
[   67.126397][ T4540] netlink: 'syz.5.271': attribute type 3 has an invalid length.
[   67.147909][ T4540] netlink: 64066 bytes leftover after parsing attributes in process `syz.5.271'.
[   67.157859][ T4540] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=4540 comm=syz.5.271
[   67.291351][   T50] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.308899][   T50] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.344970][ T4561] loop0: detected capacity change from 0 to 128
[   67.502137][ T4570] vlan0: entered promiscuous mode
[   67.561468][ T4546] ==================================================================
[   67.569634][ T4546] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark
[   67.576800][ T4546] 
[   67.579157][ T4546] write to 0xffff88811a8bfe14 of 4 bytes by task 4544 on cpu 1:
[   67.586823][ T4546]  xas_set_mark+0x12b/0x140
[   67.591384][ T4546]  __folio_start_writeback+0x17b/0x370
[   67.596903][ T4546]  __block_write_full_folio+0x53a/0x8f0
[   67.602496][ T4546]  block_write_full_folio+0x2c1/0x2e0
[   67.607913][ T4546]  mpage_writepages+0x710/0x1310
[   67.612899][ T4546]  fat_writepages+0x24/0x30
[   67.617436][ T4546]  do_writepages+0x1c6/0x310
[   67.622331][ T4546]  file_write_and_wait_range+0x178/0x2f0
[   67.628016][ T4546]  __generic_file_fsync+0x46/0x160
[   67.633185][ T4546]  fat_file_fsync+0x49/0x100
[   67.637830][ T4546]  vfs_fsync_range+0xc5/0xe0
[   67.642484][ T4546]  generic_file_write_iter+0x1ba/0x310
[   67.647984][ T4546]  iter_file_splice_write+0x6bc/0xa80
[   67.653406][ T4546]  direct_splice_actor+0x156/0x2a0
[   67.658579][ T4546]  splice_direct_to_actor+0x311/0x670
[   67.664013][ T4546]  do_splice_direct+0x119/0x1a0
[   67.668920][ T4546]  do_sendfile+0x382/0x650
[   67.673401][ T4546]  __x64_sys_sendfile64+0x105/0x150
[   67.678669][ T4546]  x64_sys_call+0x2dc4/0x3020
[   67.683403][ T4546]  do_syscall_64+0x12c/0x370
[   67.688058][ T4546]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   67.694011][ T4546] 
[   67.696370][ T4546] read to 0xffff88811a8bfe14 of 4 bytes by task 4546 on cpu 0:
[   67.703948][ T4546]  xas_find_marked+0x5d7/0x620
[   67.708859][ T4546]  filemap_get_folios_tag+0xfa/0x510
[   67.714203][ T4546]  filemap_fdatawait_range+0x88/0x1e0
[   67.719628][ T4546]  __writeback_single_inode+0xdb/0x6e0
[   67.725130][ T4546]  writeback_single_inode+0x16d/0x3f0
[   67.730549][ T4546]  sync_inode_metadata+0x6e/0xa0
[   67.735540][ T4546]  __generic_file_fsync+0x109/0x160
[   67.740807][ T4546]  fat_file_fsync+0x49/0x100
[   67.745453][ T4546]  vfs_fsync_range+0xc5/0xe0
[   67.750092][ T4546]  generic_file_write_iter+0x1ba/0x310
[   67.755607][ T4546]  iter_file_splice_write+0x6bc/0xa80
[   67.761038][ T4546]  direct_splice_actor+0x156/0x2a0
[   67.766204][ T4546]  splice_direct_to_actor+0x311/0x670
[   67.771621][ T4546]  do_splice_direct+0x119/0x1a0
[   67.776514][ T4546]  do_sendfile+0x382/0x650
[   67.780970][ T4546]  __x64_sys_sendfile64+0x105/0x150
[   67.786206][ T4546]  x64_sys_call+0x2dc4/0x3020
[   67.790944][ T4546]  do_syscall_64+0x12c/0x370
[   67.795568][ T4546]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   67.801499][ T4546] 
[   67.803836][ T4546] value changed: 0x0a000021 -> 0x04000021
[   67.809570][ T4546] 
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   67.811924][ T4546] Reported by Kernel Concurrency Sanitizer on:
[   67.818105][ T4546] CPU: 0 UID: 0 PID: 4546 Comm: syz.1.272 Not tainted syzkaller #0 PREEMPT(full) 
[   67.827497][ T4546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[   67.837578][ T4546] ==================================================================
[   68.318370][ T2149] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.397634][ T2149] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.467598][ T2149] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.527435][ T2149] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.588860][ T2149] bridge_slave_1: left allmulticast mode
[   68.594604][ T2149] bridge_slave_1: left promiscuous mode
[   68.600713][ T2149] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.609277][ T2149] bridge_slave_0: left allmulticast mode
[   68.614959][ T2149] bridge_slave_0: left promiscuous mode
[   68.620935][ T2149] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.727852][ T2149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   68.737832][ T2149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   68.747682][ T2149] bond0 (unregistering): Released all slaves
[   68.839320][ T2149] hsr_slave_0: left promiscuous mode
[   68.845194][ T2149] hsr_slave_1: left promiscuous mode
[   68.851788][ T2149] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   68.859277][ T2149] batman_adv: batadv0: Removing interface: batadv_slave_0
[   68.868072][ T2149] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   68.875523][ T2149] batman_adv: batadv0: Removing interface: batadv_slave_1
[   68.889396][ T2149] veth1_macvtap: left promiscuous mode
[   68.895133][ T2149] veth0_macvtap: left promiscuous mode
[   68.900937][ T2149] veth1_vlan: left promiscuous mode
[   68.906436][ T2149] veth0_vlan: left promiscuous mode
[   68.977859][ T2149] team0 (unregistering): Port device team_slave_1 removed
[   68.987806][ T2149] team0 (unregistering): Port device team_slave_0 removed
[   69.260678][ T2149] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.569318][ T2149] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.629141][ T2149] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.692663][ T2149] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.769470][ T2149] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.807283][ T2149] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.857427][ T2149] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.907674][ T2149] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.988028][ T2149] bridge_slave_1: left allmulticast mode
[   69.993731][ T2149] bridge_slave_1: left promiscuous mode
[   69.999897][ T2149] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.008121][ T2149] bridge_slave_0: left allmulticast mode
[   70.013811][ T2149] bridge_slave_0: left promiscuous mode
[   70.019818][ T2149] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.028775][ T2149] bridge_slave_1: left allmulticast mode
[   70.034553][ T2149] bridge_slave_1: left promiscuous mode
[   70.040615][ T2149] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.048962][ T2149] bridge_slave_0: left allmulticast mode
[   70.054667][ T2149] bridge_slave_0: left promiscuous mode
[   70.060737][ T2149] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.148104][ T2149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   70.158119][ T2149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   70.167770][ T2149] bond0 (unregistering): Released all slaves
[   70.209467][ T2149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   70.219774][ T2149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   70.230581][ T2149] bond0 (unregistering): Released all slaves
[   70.319474][ T2149] hsr_slave_0: left promiscuous mode
[   70.325240][ T2149] hsr_slave_1: left promiscuous mode
[   70.333346][ T2149] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   70.343453][ T2149] batman_adv: batadv0: Removing interface: batadv_slave_0
[   70.351271][ T2149] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   70.358858][ T2149] batman_adv: batadv0: Removing interface: batadv_slave_1
[   70.368627][ T2149] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   70.376134][ T2149] batman_adv: batadv0: Removing interface: batadv_slave_0
[   70.383721][ T2149] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   70.391247][ T2149] batman_adv: batadv0: Removing interface: batadv_slave_1
[   70.406109][ T2149] veth1_macvtap: left promiscuous mode
[   70.411777][ T2149] veth0_macvtap: left promiscuous mode
[   70.417449][ T2149] veth1_vlan: left promiscuous mode
[   70.422787][ T2149] veth0_vlan: left promiscuous mode
[   70.428786][ T2149] veth1_macvtap: left promiscuous mode
[   70.434477][ T2149] veth0_macvtap: left promiscuous mode
[   70.440300][ T2149] veth1_vlan: left promiscuous mode
[   70.445558][ T2149] veth0_vlan: left promiscuous mode
[   70.558782][ T2149] team0 (unregistering): Port device team_slave_1 removed
[   70.569018][ T2149] team0 (unregistering): Port device team_slave_0 removed
[   70.628582][ T2149] team0 (unregistering): Port device team_slave_1 removed
[   70.638373][ T2149] team0 (unregistering): Port device team_slave_0 removed
[   70.670959][ T3938] smc: removing ib device syz0
[   70.680129][ T3412] lo speed is unknown, defaulting to 1000
[   70.696963][ T3412] syz0: Port: 1 Link DOWN
[   71.058344][ T2149] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.097577][ T2149] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.147658][ T2149] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.197627][ T2149] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.265898][ T2149] bridge_slave_1: left allmulticast mode
[   71.271601][ T2149] bridge_slave_1: left promiscuous mode
[   71.277662][ T2149] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.286222][ T2149] bridge_slave_0: left allmulticast mode
[   71.291997][ T2149] bridge_slave_0: left promiscuous mode
[   71.298337][ T2149] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.387815][ T2149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   71.397820][ T2149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   71.407517][ T2149] bond0 (unregistering): Released all slaves
[   71.414894][ T2149] bond1 (unregistering): Released all slaves
[   71.438174][ T2149] tipc: Left network mode
[   71.445125][ T2149] hsr_slave_0: left promiscuous mode
[   71.450884][ T2149] hsr_slave_1: left promiscuous mode
[   71.456727][ T2149] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   71.464241][ T2149] batman_adv: batadv0: Removing interface: batadv_slave_0
[   71.471938][ T2149] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   71.479509][ T2149] batman_adv: batadv0: Removing interface: batadv_slave_1
[   71.490979][ T2149] veth1_macvtap: left promiscuous mode
[   71.497006][ T2149] veth0_macvtap: left promiscuous mode
[   71.502559][ T2149] veth1_vlan: left promiscuous mode
[   71.507894][ T2149] veth0_vlan: left promiscuous mode
[   71.591458][ T2149] team0 (unregistering): Port device team_slave_1 removed
[   71.602165][ T2149] team0 (unregistering): Port device team_slave_0 removed
[   75.331730][ T3426] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.367363][ T3426] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.437357][ T3426] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.497354][ T3426] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.576821][ T3426] bridge_slave_1: left allmulticast mode
[   75.582597][ T3426] bridge_slave_1: left promiscuous mode
[   75.588640][ T3426] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.596779][ T3426] bridge_slave_0: left allmulticast mode
[   75.602428][ T3426] bridge_slave_0: left promiscuous mode
[   75.608303][ T3426] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.698077][ T3426] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   75.708124][ T3426] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   75.717878][ T3426] bond0 (unregistering): Released all slaves
[   75.758444][ T3426] hsr_slave_0: left promiscuous mode
[   75.764150][ T3426] hsr_slave_1: left promiscuous mode
[   75.771029][ T3426] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   75.778534][ T3426] batman_adv: batadv0: Removing interface: batadv_slave_0
[   75.786796][ T3426] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   75.794271][ T3426] batman_adv: batadv0: Removing interface: batadv_slave_1
[   75.804993][ T3426] veth1_macvtap: left promiscuous mode
[   75.811841][ T3426] veth0_macvtap: left promiscuous mode
[   75.817598][ T3426] veth1_vlan: left promiscuous mode
[   75.897230][ T3426] team_slave_1 (unregistering): left promiscuous mode
[   75.904594][ T3426] team0 (unregistering): Port device team_slave_1 removed
[   75.914638][ T3426] team_slave_0 (unregistering): left promiscuous mode
[   75.922126][ T3426] team0 (unregistering): Port device team_slave_0 removed