last executing test programs:

26.128125117s ago: executing program 1 (id=139):
perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb905b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7ffff}, 0xb093, 0x800000, 0x2, 0x2, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1000003}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x3)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
syz_open_dev$usbfs(0x0, 0xf, 0x240000)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10221, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0xf}, 0x116414, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @perf_bp={0x0}, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @local, 0xe}, 0x1c)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)
open(&(0x7f0000000280)='.\x00', 0x90800, 0x20)
fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x3)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x605, 0x3000000, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x800}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x800)

26.109126078s ago: executing program 3 (id=141):
syz_usbip_server_init(0x7ffffffe)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/../file0\x00', 0x177)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/usb/devices/usb1/power/autosuspend_delay_ms\x00', 0x1, 0x0)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10)
write(r0, &(0x7f0000000180)='0', 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./proc/thread-self/fail-nth\x00', 0xc4)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r4, &(0x7f0000000000)='3', 0x4e)
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
getsockopt$inet_pktinfo(r4, 0x0, 0x8, 0x0, 0x0)
r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000200), r0)
sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="a0800000", @ANYRES16=r6, @ANYBLOB="20002bbd7000fedbdf25010000000900030073797a31000000000900010073797a31000000000900010073797a3200000000140002007663616e3000000000000000000000001400020076657468315f766c616e000000000000140002006272696467655f736c6176655f3000000900030073797a320000000014000200726f73653000000000000000000000000900010073797a3000000000"], 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000000000)={0xb, {{0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x3ff}}}, 0x88)
r7 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000580)={'tunl0\x00', &(0x7f0000000480)={'gretap0\x00', 0x0, 0x8000, 0x1, 0x2, 0x3, {{0x5, 0x4, 0x3, 0x2a, 0x14, 0x67, 0x0, 0x90, 0x29, 0x0, @broadcast, @remote}}}})
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x9, 0x0, 0x0, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x5c}}, 0x0)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000240)={0x3, {{0xa, 0x0, 0x0, @mcast1, 0xfffffffc}}, {{0xa, 0x4e25, 0x7fff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x7}}}, 0x108)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f00000005c0)={0x0, <r9=>0x0})
fcntl$lock(r2, 0x26, &(0x7f0000000640)={0x2, 0x3, 0x5, 0x5, r9})
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000fcdbdf25030000001800763f8f56a2a8018064fd020064766d7270300000000000000000"], 0x2c}}, 0x24000084)

25.599281512s ago: executing program 1 (id=148):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x200000, &(0x7f0000000380)={[{@block_validity}, {}, {@sysvgroups}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$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")
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4, 0xe}, 0x0, 0x7, 0x11000, 0x5, 0x8, 0x90000011, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040))
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_LIST_KEY(r1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50a, &(0x7f0000001f40)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty=0xe0000001}, {0x0, 0x4e20, 0x8}}}}}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)

25.470240128s ago: executing program 3 (id=153):
unshare(0x100000)
r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
r2 = socket$inet6(0xa, 0x1, 0x0)
recvmmsg(r2, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x61, 0x0)
connect$can_bcm(r1, &(0x7f00000005c0), 0x10)
sendmsg$can_bcm(r1, &(0x7f0000000600)={&(0x7f0000000140), 0x10, &(0x7f0000000580)={&(0x7f0000000500)={0x4, 0x0, 0x25ce1832, {}, {}, {0x2, 0x1, 0x1}, 0x1, @can={{0x1, 0x1, 0x1}, 0x2, 0x3, 0x0, 0x0, "125f627744144f70"}}, 0x48}, 0x1, 0x0, 0x0, 0x20004000}, 0x4048840)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="700000001000030528bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000500012800b000100697036677265000040000280060003009e000000080005000000600006000f0004000000080004000200000006000200ff01000004001200060002"], 0x70}}, 0x0)
unshare(0x100000) (async)
fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) (async)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async)
socket$can_bcm(0x1d, 0x2, 0x2) (async)
socket$inet6(0xa, 0x1, 0x0) (async)
recvmmsg(r2, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x61, 0x0) (async)
connect$can_bcm(r1, &(0x7f00000005c0), 0x10) (async)
sendmsg$can_bcm(r1, &(0x7f0000000600)={&(0x7f0000000140), 0x10, &(0x7f0000000580)={&(0x7f0000000500)={0x4, 0x0, 0x25ce1832, {}, {}, {0x2, 0x1, 0x1}, 0x1, @can={{0x1, 0x1, 0x1}, 0x2, 0x3, 0x0, 0x0, "125f627744144f70"}}, 0x48}, 0x1, 0x0, 0x0, 0x20004000}, 0x4048840) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="700000001000030528bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000500012800b000100697036677265000040000280060003009e000000080005000000600006000f0004000000080004000200000006000200ff01000004001200060002"], 0x70}}, 0x0) (async)

25.284754457s ago: executing program 3 (id=155):
r0 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e24, @empty}}, 0x24)

25.283804097s ago: executing program 3 (id=156):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f00000000c0)={[{@inode_readahead_blks}, {@norecovery}, {@dioread_nolock}, {@norecovery}]}, 0x5, 0x4f3, &(0x7f00000005c0)="$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")
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
socket$packet(0x11, 0x2, 0x300)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f0000000280))
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f00000001c0))
ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f0000000040))
io_uring_enter(r0, 0x7111, 0xb2e2, 0x8, &(0x7f0000000140)={[0xffffffffffffffff]}, 0x8)
timer_create(0x1, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r2, &(0x7f0000000a00)=[{{&(0x7f0000000140)={0xa, 0xfffc, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000001900)=[{&(0x7f0000000280)="ad", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x79, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c, &(0x7f0000000880)=[{&(0x7f0000000200)="ec", 0x1}], 0x1}}], 0x2, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x4)
writev(r3, &(0x7f0000000080)=[{&(0x7f0000000e40)="480000001400190d09004beafd0d36020a8447000b4e230f00034e20a2bc560119d7004f19dfb7f393d7359031033f817f00000000000000000101ff05c00e030002000000ffff01", 0x48}], 0x1)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r4 = fsopen(&(0x7f0000000380)='configfs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)='(!\xef(.(\\-]\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000200)='^](*\r\\!\x00', &(0x7f0000000500)='{:\'@-\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000680)='\xec\xd2=(L\x9f\x1c&\xb7\x98\f\x87\xcf\xdb\xb4\xdc.\xc1\xec\xa3\x04\xa2\xb8H\xdc#\x06\npr:\x95\xb9\xbf7\xe6Z\x8aX\xbc\x1d\xd5\x15\x93\xd1\xadC\x18V\xbaO~\xfc\xaf\xce\x88+t\xb0\xf1\x8d;\xbd8(\xca\xc6%\xfcB\xea\x04<\x10#,\x05\xd4\xc9;\x17.\xc3\x13*]\x1crij', &(0x7f0000000540)="82", 0x1)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000d00)='V,/\x00@!\\\x1c2\x91G\xd2\xbe\xe5\x8b\xfbHp\x06\x9a\t\x03Mh\xb6\x8a\x1c\xfd\x97\xe2\xc0\xed\x91\x85\x91\x10\xf1f-{A-\xf81s\xc3\xa5r\x8a\x06\x11m\x82jHfh81\x9c\xfa}\x03\xe2%\xd7q\xd6\'\x82@$7\x1c\'\xcc}\x12hC\xc9g\xdb\x11\xbcWS\x12\xfb\xff\x98b!\x97`#\x96\x85\xe1\xa1\xaa\x06\xc3\xa9-\x17upm\xa9\n\x00\xc4L\x1f`\xe8\xbf\xe9\xb4\xb6@\xc4h\xf49\x9bx\x90l\xe3\xee^k\xd7\xecd\xde\xc8\x7f\xd3\xa4.\xa1p\xdf\xd3\x12-\x8cY\xef\xb0\x93UiK\x82\xb51\x81\x96,\xcf\x8a)t\x1e4\xa7x\x85\xa4?f\xef\x15\x89\xe5\xd1\xbfP\xbd\x8d\xe2\xbbr\xa2C\xb0\x9a\xd1\xa4\xf2\x88t\xdd\xfe)\xcb\x9e7\xe2\xa67\xa6U\x80\x97>\x10L\xab5\xb3\x04(\b\xcd0H-i\x8d\f\xb5\x1f1=\x87$C\xc2\xbb\x92\x0e\x06\xcb\xd4\x83a-\x82\x90\x93\x95\x00Q4\xff!\xfc\xb7\xcaG@\x96\x04\xed\x9f\xe9\x9e\xf9\xfb\xe4)\xc5\xa4\xca\xc1`x\xf4\xf6zX\x1b\xb3\x13\xa4W[E\x8a\x7f\x06\n\xd2\x1b\xce\xe2\xbd4\x93\xff \xb06\"\xbf\x1d\xfda\x00Z\xfb\xfe_I\xb8\xfc1\xdf\x82a\x93tx3\xda\xdeY\xc1\xdd\xdd\x84D\x1dy:\x9a%<\xd3X\xd9s\xe5r\xbdA9\x7f\b\x8fL\xa6=nJ\x16\x82\xd8\xb4X`\x03vY\xe3}\xae\t=pX\xc4\xb3\x8aTdv\x1a\a\xa1\xaeP\x8f\xfd\x03\xc5b\x80\xae\xdc\x99\xa4z\xbc\xe3Pz\xf5\xcf\x99u#\"[\'\xa3G\xf1\x18ls\x89D\xce\xd5\xbc\xff\x8b\x05\x1f\x14\xcf\x96Vu\xb93\x9d\x8bX\x16o !\xb8\xc9I\x8f\x9ei\xf5\xc1\xed\x97x\x01?\xa6~\x9c\xb5u\xe0r1I\xa67Q\xc9\a\x84\xe6\x1b\xebo\x85\x98\x9cib\xa7\x80U\xc8%\xa7\x11=\xa3\x02\x15\xe6\x85\xbf\x03vQ\xfe&\xf3\xb7\xdc3\b\xc0\'\x03\x97\xf9\xbf1\x03\x93\xff\x16\xb0\xf6\x97\x97\x80JO\x81\x97\x0f\x96\x93n\x95!\xff\xa52\"\nf\xe0h\xf6+5\xb6\x12\x14\xce\xdb?\x1a\xa5\x93\xca\xa0b\'\x04\xac\xc9*-;-\t(\xfd\x9e\xd8J9\xfa\xf8\xe3\x1a\xe9\x8f\xe5\xda\xc8\xed\xc7\x88\xc2\xa0\x02]noRVv\xc8\x81\x94\xb3\x10\xa6\x8b\xd0q\xddZ\x95\x16\x94\x94@\x0f\"\xc7\xde\x87\x16;\xd0\xc1\x04=\t\xba\xe5', &(0x7f0000000a80)='\x1e\x04\x00\x00\x00\x00\x00\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000001c0)='\x1c@]\x00\a\xf5\v\xd5]\xd4W\xe1\xc7\xb6W\x9d\xfd\xd9v6\v\x81 Qx\x0eA\x05\x93\xc5y\x9fy', &(0x7f00000002c0)='\x00', 0x0)
close(r4)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0)
read(r5, &(0x7f00000091c0)=""/16384, 0x4000)
setns(0xc9, 0x0)
socket(0xa, 0x5, 0x0)

25.121126025s ago: executing program 3 (id=158):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40)=@newtaction={0x70, 0x13, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0x5c, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x64, 0xf2, 0x3, 0x7}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814)

25.022271439s ago: executing program 1 (id=161):
syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000280)='./file0\x00', 0x1200040, &(0x7f0000000380)=ANY=[], 0xfe, 0x2aa, &(0x7f0000001580)="$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")
r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x84)
preadv2(r0, 0x0, 0x0, 0x6839, 0xa4dc, 0xa)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1)
sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x20, r3, 0xb32365a32362e9cb, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_RULES={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10000001}, 0x4010)
pipe(&(0x7f00000000c0)={<r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000880)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYRES16, @ANYBLOB="000429bd7000fbdbdf253f00000008000300", @ANYRES32=r5, @ANYBLOB="3c005e8008000200b50a000008000200ce090000080006000004000008000700e003000008000200080000000800050020000000080002000000000004005e8020005e80080006000200000014000100000000000d060000800000000800000078005e8008000100670000002000010009000000080000000900000001000000000001000700000003000000080009000200000008000300020000001c00010048060000e8090000050000000d890000080000000800000008000300b0970000080002001000000008000200090000000800020001000000"], 0xf4}, 0x1, 0x0, 0x0, 0x4000000}, 0x800)
sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r3, 0x2, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xc2, 0x38}}}}, ["", "", "", ""]}, 0x28}}, 0x40850)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000200))
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x800, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x13, 0x12}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x10}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000)

24.952236392s ago: executing program 3 (id=162):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x2ff, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="38000000550001002bbd70000200000007000000", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="0002020000000000000000000000ffffac1414bb86dd"], 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x40080c0)

24.952027783s ago: executing program 32 (id=162):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x2ff, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="38000000550001002bbd70000200000007000000", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="0002020000000000000000000000ffffac1414bb86dd"], 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x40080c0)

24.950112912s ago: executing program 1 (id=164):
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f00000009c0)=ANY=[], 0x3, 0x2c2, &(0x7f00000006c0)="$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")
creat(&(0x7f0000000040)='./bus\x00', 0x1b7)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1042, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x81e, &(0x7f00000001c0), 0x3, 0x4d7, &(0x7f0000000540)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc4}})
renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x2)
r1 = open(&(0x7f00000000c0)='./bus\x00', 0x107000, 0x0)
read$msr(r1, &(0x7f0000000600)=""/175, 0xfffffe51)
syz_emit_ethernet(0x26, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @local}, 'N!N '}}}}, 0x0)

24.856065967s ago: executing program 1 (id=165):
r0 = socket$phonet_pipe(0x23, 0x805, 0x2)
setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000600)=0x1, 0x4)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x8000}, 0x0, 0x2, 0xfffffffe, 0x0, 0x1, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r2=>0x0})
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r3=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r3, 0x1, &(0x7f0000000040), 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c)
pipe(&(0x7f00000002c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
splice(r5, 0x0, r4, 0x0, 0xffffffffffff8000, 0x0)
close(r6)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x89}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2}, 0x94)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c00b810", @ANYRES16=r7, @ANYBLOB="f5af27bd7000000000000e00000008000300", @ANYRES32=r2, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x700)
r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r9, &(0x7f0000002080)={0x1f, 0x80, @any, 0x0, 0x1}, 0xe)
connect$bt_l2cap(r9, &(0x7f00000000c0)={0x1f, 0x80, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x5}, 0x0, 0x2}, 0xe)
r10 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SDTEFACILITIES(r10, 0x89eb, &(0x7f0000000040)={0x401, 0x1cc4, 0x0, 0x4, 0x7f, 0xf, 0xb, "6432ca0fe25a89daab1532b7b75ab63d027e8721", "5d6b020000007b66cf4baa59b5006200"})
r11 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@cgroup, 0x35, 0x0, 0x2, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000200)=[0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r12=>0x0}, 0x40)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={0x1, <r13=>0xffffffffffffffff}, 0xfffffcd9)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)={@map=r13, r8, 0x7, 0xa, r11, @void, @value=r8, @void, @void, r12}, 0x20)
connect$phonet_pipe(r0, &(0x7f0000000700)={0x23, 0x0, 0x6}, 0x10)

24.585302s ago: executing program 1 (id=170):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000280)="61df718305a35997984d4763fcac", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

24.560606201s ago: executing program 33 (id=170):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000280)="61df718305a35997984d4763fcac", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

7.557582113s ago: executing program 2 (id=345):
mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0x2}, 0x2802, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x58, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$usbfs(0x0, 0x800000001fe, 0x2)
socket$packet(0x11, 0x3, 0x300)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000804, &(0x7f0000006300)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@grpid}, {@bh}, {@grpid}, {@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@init_itable}, {@usrjquota}, {@nolazytime}, {@norecovery}, {@resgid}]}, 0xfe, 0x495, &(0x7f0000000e40)="$eJzs3M9vFFUcAPDvzO6WgmIr4g8QpIpG4o+Wlh9y8KLRhIMmJnrAeKptIZVCDa2JEKLVAx4NiXfjf2E86cWoF0286t2QEMMF1Mua2Zltl2W33dIfS9vPJ5n2zczrvvedmTf75r3tBrBlDWQ/koj7I+KPiOjLV2/PMJD/unXj8tg/Ny6PJVGtvv13Ust388blsXrW+t/dl69Uq8X6thblXnkvYnRqauJCsT40e+7DoZmLl16cPDd6ZuLMxPmREyeOHtnfc3zk2KrEmcV1c+8n0/v2nHz36ptjp66+/3NSjjzuaIpjtQzkR7elZ1a7sC7b2ZCuHdh5B35dSLe6EuimUkRkp6tSa/99UYrt8/v64vXPm/P3rncFgTVTrVari9yV56rAJpbE0nl6izsFsJkUjwC159/6so7dj667/kr+AJTFfatY8j3lSPPEgUrT8+1qGoiIU3P/fp0tsUbjEAAAjb7P+j8vtOr/pfFInujJfjxQzKH0R8SDEbErIh6KiN0R8XBELe+jEfHYMstvniG5s/+TXrvr4DqQ9f9eLua2bu//pfUs/aVibWct/kpyenJq4nBxTA5FZdvpyWRieJEyfnjt9y/b7Wvs/2VLVn69L1jU49r2plH38dHZ0RUF3eD6ZxF7yxG3KtEUfxL1aZwkIvZExN67LGPyuXLbfUvHv4j2L9ux6jcRz+bnfy6a4q9L2s5PDr90fOTYUG9MTRweql8Vd/rltytvNW0q1RMrin8VZOd/R8vrfz7+/qQ3YubipbO1+dqZ5Zdx5c8v2j7TdHL9lxcGqE/uLK7/nuSd2oaeYsfHo7OzF4YjepI37tw+svBq9fV6/iz+Qwdbt/9dsXAkHo+IfRGxPyKeyB4Ki7o/GRFPRcTBReL/6dWnP1h+/OszV5rFP77U+Y/G87/8ROnsj98tHX92j2t3/o/WUoeKLZ3c/zqt4EqOHQAAAGwUae0z8Ek6mJSLdJoODuaf4d8dO9Kp6ZnZ509Pf3R+PP+sfH9U0vpIV1/DeOhwMTbc3/Da/Q37jxTjxl+VttfWB8emp8a7GDeQt/Na+5+/F+TtP/NXqdu1A9ZcPo+WdrsaQBeswjw6sEFp/7A1JYu2/8q61gVYf97/Yetq1f4/bZt78Ns1rQywrrz/w9bVQfufy3+17xUAG5P3f9i6tH/Yktr+b3zadld2u1jBtwGsTeK/4vsM75X6bP5EpPdENTZcIoll/lW54y+zWEai2pe3/2zLttbNHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYFP4PwAA//+dU9wM")
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000e80)=ANY=[@ANYBLOB="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"], 0x218}, 0x1, 0x0, 0x0, 0x440d0}, 0x4040026)

7.239367538s ago: executing program 2 (id=350):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', <r2=>0x0})
r3 = socket$inet(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1})
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
fsopen(0x0, 0x1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x68a}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r2, {0xfff8}, {0x0, 0xffff}, {0x300, 0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x20000000, 0x0, 0x3}, @loopback, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x5}, 0x0)
write$tun(r0, &(0x7f0000000500)=ANY=[], 0x20)

7.106347394s ago: executing program 2 (id=351):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000040)={0x5, 0x2d, 0xfa00, {0x0}}, 0x18)

7.040250458s ago: executing program 2 (id=352):
socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x777)
openat(0xffffffffffffffff, 0x0, 0x802, 0x130)
perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
unshare(0xc040480)
mkdir(&(0x7f0000000000)='proc_dir\x00', 0x1ff)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x0, 0x7fff0000}]})
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x841e, &(0x7f00000001c0)={[{@nojournal_checksum}, {@jqfmt_vfsold}, {@lazytime}, {@usrquota}, {@usrquota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000003c0)={<r1=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000440)={0x4, 0x8, 0xfa00, {r1, 0x71}}, 0x10)
ioprio_set$pid(0x3, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000003c0)='./bus\x00', 0xc6f40, 0x19b)
r2 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/events/sched/sched_switch/filter\x00', 0x1, 0x0)
write(r3, 0x0, 0x0)
setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f00006dbffc), 0x4)
bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @broadcast}, 0x10)
sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000d00)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}, {&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}], 0x3, 0x0, 0x0, 0x40088c5}, 0x0)
setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40)
recvmmsg(r2, &(0x7f0000006fc0)=[{{0x0, 0x0, 0x0}, 0x400002}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=""/72, 0x48}, 0x81}], 0x2, 0x20000020, 0x0)

6.176215078s ago: executing program 2 (id=355):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e1f, @broadcast}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8008, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r1, 0x0)
r2 = socket$inet(0x2, 0x3, 0x2)
sendto$inet(r2, 0x0, 0x0, 0x800, &(0x7f00000021c0)={0x2, 0x4e26, @multicast1}, 0x10)
mlock2(&(0x7f00005d3000/0x3000)=nil, 0x3000, 0x1)
mlock(&(0x7f000049d000/0x3000)=nil, 0x3000)
mlock2(&(0x7f00001c3000/0x2000)=nil, 0x2000, 0x1)
connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)

5.9265642s ago: executing program 2 (id=358):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180", 0x28}], 0x1}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff0000600054000000000080006"], 0x6c}}, 0x0)
r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0xffffffff}, 0x8}, 0x94)
r2 = fsmount(r1, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x40600, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000000040)={'lo\x00', @random="000400"})
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x3}, 0x4000, 0x2, 0x6, 0x0, 0x0, 0xb, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x8004745a, 0xf0ff1f00000000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r5 = openat$cgroup_devices(r4, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="909cfa8dc0edd98d3300"], 0xa)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x3a}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xa, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="c3b13e87150d1dee2ac3040445afb4e8d72e485d852ce7ec280a710b6702aadac69ea19fcbf034efcaa89fb0d50455ed1d4529c7379a067856081b0bdc5c701e8626c3b4315dd7e93b3e04e1f7cbbd5339bd32f750a88241d6af6b974c7eefd9a15eaa6b65f90e41addb3c849f7dd7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x1, 0x0, 0xfc, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
write$cgroup_devices(r5, &(0x7f0000001140)=ANY=[@ANYBLOB='a *:* rm#'], 0x9)
r6 = openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5)
write$cgroup_subtree(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="2b637075f9c41504140348056a90dd48a287e8f420"], 0x5)

5.899170971s ago: executing program 34 (id=358):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180", 0x28}], 0x1}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff0000600054000000000080006"], 0x6c}}, 0x0)
r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0xffffffff}, 0x8}, 0x94)
r2 = fsmount(r1, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x40600, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000000040)={'lo\x00', @random="000400"})
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x3}, 0x4000, 0x2, 0x6, 0x0, 0x0, 0xb, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x8004745a, 0xf0ff1f00000000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r5 = openat$cgroup_devices(r4, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="909cfa8dc0edd98d3300"], 0xa)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x3a}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xa, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="c3b13e87150d1dee2ac3040445afb4e8d72e485d852ce7ec280a710b6702aadac69ea19fcbf034efcaa89fb0d50455ed1d4529c7379a067856081b0bdc5c701e8626c3b4315dd7e93b3e04e1f7cbbd5339bd32f750a88241d6af6b974c7eefd9a15eaa6b65f90e41addb3c849f7dd7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x1, 0x0, 0xfc, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
write$cgroup_devices(r5, &(0x7f0000001140)=ANY=[@ANYBLOB='a *:* rm#'], 0x9)
r6 = openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5)
write$cgroup_subtree(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="2b637075f9c41504140348056a90dd48a287e8f420"], 0x5)

5.400067435s ago: executing program 0 (id=363):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0)
connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/675], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xfffffe94, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42)

4.366858984s ago: executing program 6 (id=365):
socket$kcm(0x10, 0x2, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8983, &(0x7f0000000080))
r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0xffff, 0xc}, 0x10000, 0x0, 0x4, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000000040)={0x9, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19280, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff, 0x200000000000006}, 0x10486a, 0x3, 0x0, 0x9, 0x0, 0x9, 0x0, 0x0, 0x7ffe}, 0x0, 0xffffffffffffffff, r4, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x9, 0x3, 0x1c8, 0x98, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x130, 0xffffffff, 0xffffffff, 0x130, 0xffffffff, 0x3, &(0x7f0000000200), {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x1, 0x5}, {0x1, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x228)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0x1}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ac0)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}, 0x800)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffffffffffff, 0xbf5}, 0x0, 0x2, 0x0, 0x3, 0x1, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r5 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000100000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106)
recvmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = syz_clone(0x8000600, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0xa0423, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x75, 0x1ef7}, 0x320, 0x4, 0x98, 0x3, 0x2, 0x9, 0xfffd, 0x0, 0x1, 0x0, 0x20}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0)

4.355676335s ago: executing program 0 (id=366):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x3, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0)
setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
readlink(0x0, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f0000000040)=0x1, 0x80, 0x1, &(0x7f0000000080)={0x77359400}, 0x0, 0x1)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = socket$kcm(0x29, 0x2, 0x0)
write$cgroup_pressure(r4, &(0x7f0000000140)={'full'}, 0xfffffdef)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=<r5=>0x0)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r7, 0x84, 0x12, &(0x7f0000000200), &(0x7f0000000280)=0x4)
bind$netlink(r6, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbfe, 0x40}, 0xc)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8)
sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r5], 0x1c}}, 0x0)

3.302460664s ago: executing program 6 (id=372):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c000000150001002dbd7000fcdbdf25020040ff", @ANYRES32=r2, @ANYBLOB="14000300776c616e300000000000000020"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x48084) (fail_nth: 4)

3.282632095s ago: executing program 6 (id=373):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="18000000150001002dbd7000fcdbdf25020040ff", @ANYRES32=r2, @ANYBLOB="14000300776c616e300000000000000020"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x48084)

3.202676709s ago: executing program 6 (id=374):
io_submit(0x0, 0x1, &(0x7f0000001300)=[0x0])
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAP(r0, 0x4b52, &(0x7f0000000100)={0xfffffffffffffcf0, 0x0})
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
r1 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x124)
write$P9_RREADDIR(r1, &(0x7f00000001c0)={0x2a, 0x29, 0x3, {0x5, [{{0x10, 0x9, 0x5}, 0x7, 0x7, 0xf45b3bccc711007a, './file0'}]}}, 0xfffffceb)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0xa27b734c1a0bc97)
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x4, 0x40004, 0x0, "ef350600000000000000f1ce5d29c3ee5e5c3676345a41499db7aac63a01010000000000004faa2a00000000d90000000000007700000c00", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100173400ffffff00f7ffffff000000f3e7f20000000200000000000600", "b732673e181c208227fffff2e500000f0000000e000200", [0x40000000004]})
rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00')
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r3, 0x6, 0x17, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {}, {@user_xattr}, {@bh}, {@barrier}, {@orlov}, {@usrquota}, {@grpquota}, {@norecovery}]}, 0x3, 0x575, &(0x7f0000000ec0)="$eJzs3c1qG1cbAOB3ZDv/3xcHQmi7KIYsmpJGju3+pFBIuixtaCDdp8JWTLAcBUsOsRtIsmg2pVBCoZQGSi+g+y5Db6BX0UUDoQTTLrpxGXkmViwrthURK53ngbHPmRnp6GjOe/SORkIBFNZY+qcU8WpEfJNEHG7bNhzZxrG1/VYe35xOlyRWVy/+mUSSrcv3T7L/B7PKKxHx65cRJ0ud7TaWlucqtVp1IauPN+evjTeWlk9dma/MVmerVyenps68MzX5/nvv9q2vb174+/tPH3x05qvjK9/9/PDIvSTOxaFsW3s/nsPt9spYjGXPyUic27DjRB8aGyTJVjtsMgbYfUNZnI9EOgccjqEs6oH/vlsRsbojeYaws1sBgygRyVBQeR6Qn9v36Tz4pfHow7UToPb+f91KcYbX3huJfa1zowMryVNnRun57mgf2k/b+OWP+/fSJbZ4H+JWH9oDyN2+ExGnh4c75/8km/96d3ob7/qNtWbXdUV7/YHd9CDNf97aLP8rPcl/YpP852B+7eg5bbyPzvgvPexDM12l+d8Hm+a/T6au0aGs9r9WzjeSXL5Sq56OiP9HxIkY2ZvWe72e057/pUvafp4LZo/j4fDep28zU2lWemyuw6M7Ea+t579JdMz/+1q57sbjnz4fF7bZxrHq/de7bdu6/+36nwGv/hTxxqbHf/2KVvLs65PjrfEwno+KTn/dPfZbt/Z31v/+S4//gWf3fzRpv17b2HkbP+77p9ptW6/jf0/yWau8J1t3o9JsLkxE7Ek+6Vw/uX7bvJ7vn/b/xPFnz3+bjf/9EfH5Nvt/92j3NGgQjv/Mjo7/zgu/f/zFD93a397xf7tVOpGt2c78t90H+DzPHQAAAAAAAAyaUkQciqRUflIulcrltc93HI0DpVq90Tx5ub54dSZa35UdjZFSfqX7cNvnISayz8Pm9ckN9amIOBIR3w7tb9XL0/XazG53HgAAAAAAAAAAAAAAAAAAAAbEwS7f//crwFAQgh2Ka8v478cvPQEDyes/FJf4h+IS/1Bc4h+KS/xDcYl/KKqL4h8KTPwDAAAAAAAAAAAAAAAAAAAAAAAAAABAX104fz5dVlce35xO6zPXlxbn6tdPzVQbc+X5xenydH3hWnm2Xp+tVcvT9fmt7q9Wr1+bmIzFG+PNaqM53lhavjRfX7zavHRlvjJbvVQdeSG9AgAAAAAAAAAAAAAAAAAAgJdLY2l5rlKrVRcUuhbOxkA8jJ4LyVZH+Ww2GHpqYvjFdmfIoH0xhV2emAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgzb8BAAD//2YpJk4=")
openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x201, 0xe7e, 0x0, 0x3, 0x800000, 0xb6e, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x1000, 0x800}, 0x20)
setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000100)=0x2, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000140)=0x2, 0x4)
setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000180)=0x2, 0x4)
setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4)
bind$xdp(r4, &(0x7f0000000200)={0x2c, 0x0, 0x1, 0x0, 0x0}, 0x10)
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000000180)=0x2, 0x4)

2.577279919s ago: executing program 5 (id=381):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x1}, 0x9d9, 0x0, 0x34e86660, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000007480), 0x1, 0x0)
getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x3, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendto(r1, &(0x7f0000000080)="4400000030000504010000000000000000000000300001802c0001800900010067617465000000001c0002801800020000000022e27ff515919cff2867fa540000000000", 0x44, 0x0, 0x0, 0x0)
getsockname(r0, &(0x7f00000000c0)=@ethernet={0x0, @multicast}, &(0x7f0000000200)=0x80)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
r2 = syz_io_uring_setup(0x141c, &(0x7f0000000200)={0x0, 0x2af2, 0x1, 0x0, 0x139}, &(0x7f0000000100), &(0x7f0000000080)=<r3=>0x0, &(0x7f00000001c0))
io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, 0x0, 0x1)
syz_emit_ethernet(0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500200006f780000"], 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40000040)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x13, 0xffffffffffffffff, 0xffffc000)
futex(0x0, 0xb, 0x1, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0)
mknod$loop(&(0x7f0000000180)='./bus\x00', 0x6000, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341)
ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, 0x0)
statx(r4, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES32=r3], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480400001800a0001006d6174636800000030000280080002400000000118000300c6a41d10c6a41df1fffffffffef50000070000000a0001006f776e657200000010000180080001006f736600040002800900010073797a30000000000900020073797a32"], 0xa8}}, 0x4048010)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000300)='./bus\x00', 0x21081e, &(0x7f0000000380)={[{@grpquota}, {@nogrpid}, {@quota}, {@nobh}]}, 0x1, 0x51b, &(0x7f0000001000)="$eJzs3c9vI1cdAPDveOPEyaZNWnoABO3SFha0WufHtqtqD1BOCKFKiB5B2obEG0Wx4yh2ShP2sD1zRaISJzjyB3DuiTsXBDcu5YDEjwjUICExaMbj1Ju1s9FmY2fjz0cazXvzHH+/L9bMi1/seQGMrWsR8SAiJiPivYiYK44nxRZvd7bscZ8e3F89PLi/mkSavvuPJG/PjkXPz2SuFs9ZiYgffCfix8mjcVt7+5sr9Xptp6gvtBvbC629/ZsbjZX12nptK/vh24tv3Xpz+an19ZXGZFH68ie/f/CNn2ZpzRZHevvxJJJOl/sdj4jyUZzMRER87yzBLpArRX8mR50IT6QUES9GxKv5+T8XV/JXEwC4zNJ0LtK53joAcNmV8jmwpFQt5gJmo1SqVjtzeC/FTKnebLVv3Gvubq11/kyYj3Lp3ka9tljMFc5HOcnqS3n5s/pypz7Vrd+KiBci4udT03m9utqsr43yDx8AGGNXj43//57qjP8AwCVXGXUCAMDQGf8BYPwY/wFg/Bj/AWD8dMb/6VGnAQAM0Ynv/90PCAAuJfP/ADBWvv/OO9mWHhb3v157f293s/n+zbVaa7Pa2F2trjZ3tqvrzeZ6fs+exuOer95sbi+9EbsfzH9zu9VeaO3t3200d7fad/P7et+tlfNH9b1VNgAwJC+88vGfkmxEvjOdb9GzlkN5pJkB56006gSAkbky6gSAkTnTp3sqPhsEz7IzvMc3PQCXRJ8leh9S6fcFoTRN007pf+k55QWcn+tfMP8P46pn/t+ngGHMmP+H8WUGH8ZXmianXfM/TvtAAOBiM8cPDPj//4vF/jfFPwd+tHb8ER+dZ1YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwsXXX/60Wa4HPRqlUrUY8FxHzUU7ubdRrixHxfET8cao8ldWXRpwzAHBWpb8mxfpf1+den32o6eWrR8XJiPjJL9/9xQcr7fbOHyImk39OdY+3PyqOLw8/ewDgZNl7/e44ne973sh/enB/tbsNM6e/fTsiKp34hweTcXgUfyIm8n0lyhEx86+kqHckPXMXZ/Hgw4j4fL/+JzGbz4F0Vj49Hj+L/dxQ45ceil/K2zr77HfxuaeQC4ybj7Prz9v9zr9SXMv3/c//Sn6FOrvi+pc91ephfg38LH73+ndlwPXv2mljvPG773ZK04+2fRjxxYmIbuzDnutPN34yIP7rp4z/5y+9/OqgtvRXEdfjTt/4vbEW2o3thdbe/s2Nxsp6bb22tbx8e+n24lu33lxeyOeoFwaPBn+/c+P5QW1Z/2eif/8rj+n/V0/Z/1//970ffuWE+F9/rV/8Urx0QvxsTPzaKeOvzPy2Mqgti782oP+Pe/1vnDL+J3/Zf2TZcABgdFp7+5sr9Xpt51kvzJY7Hboo+SicRyF7hS9AGn0L3xpWrMno3/Sz1zqnwLGmNH2iWIOuGE9j1g24CI5O+oj4z6iTAQAAAAAAAAAAAAAA+hrGN5ZG3UcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAur/8HAAD//5enzt4=")

2.316130991s ago: executing program 6 (id=383):
r0 = socket$netlink(0x10, 0x3, 0x4)
syz_emit_ethernet(0x3e, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa3c0800450000300000000000019038ac1e0001ac1414aa2b009078e04000e045000000006e0005025e0000ac1414aa640101024a9107568140f8fa1c518f9315f4026518efd6d21ff1b9e669957d17a7e0aeef92de8a899bd0cfd240d6da2fd84e70df6e4cce2ecb03336bf557cbb8b758527b6bbd84ecf4e631227d31490b2baa575feed0e9c675a5757d8a4752ea742409d10cd5e3efeb11565c61f728848bab18cefba76f912c162c32f4724ec4e224d4f891e9028fa76180879605e0497cfeedd9d8227087c45f5fd198382268a11387063813"], 0x0)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000001d00010000000000000000000a00806e08000000", @ANYRES32=0x0, @ANYBLOB="040001"], 0x20}, 0x1, 0x0, 0x0, 0x4050}, 0x0)

2.249514514s ago: executing program 5 (id=384):
r0 = socket(0xa, 0x3, 0xff)
setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4)
syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0)
recvmmsg(r0, &(0x7f0000003a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/4, 0x4}, 0x6}], 0x1, 0x10042, 0x0)

2.248201914s ago: executing program 5 (id=385):
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="71756965742c646f74732c6572726f72733d636f6e74696e75652c6e6f646f74732c636865636b3d72656c617865642c646f733178666c6f7070792c6e66732c646f74732c6e6f646f74732c0052bbde30ad1b84bbd4c68ac5df60afc617ca0829fb9a153080d7fe1db0f2c220c8"], 0xfd, 0x255, &(0x7f0000000580)="$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")
creat(&(0x7f0000000000)='./bus\x00', 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1042, 0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4600, 0xe898d2275f586838)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000540000000e0002006e657464657673696d0000000f0002"], 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x0)
preadv2(r0, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0xffffffa4}], 0x1, 0x8000, 0x9, 0x1b)

2.180172837s ago: executing program 6 (id=386):
mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0x2}, 0x2802, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x58, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$usbfs(0x0, 0x800000001fe, 0x2)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000804, &(0x7f0000006300)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@grpid}, {@bh}, {@grpid}, {@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@init_itable}, {@usrjquota}, {@nolazytime}, {@norecovery}, {@resgid}]}, 0xfe, 0x495, &(0x7f0000000e40)="$eJzs3M9vFFUcAPDvzO6WgmIr4g8QpIpG4o+Wlh9y8KLRhIMmJnrAeKptIZVCDa2JEKLVAx4NiXfjf2E86cWoF0286t2QEMMF1Mua2Zltl2W33dIfS9vPJ5n2zczrvvedmTf75r3tBrBlDWQ/koj7I+KPiOjLV2/PMJD/unXj8tg/Ny6PJVGtvv13Ust388blsXrW+t/dl69Uq8X6thblXnkvYnRqauJCsT40e+7DoZmLl16cPDd6ZuLMxPmREyeOHtnfc3zk2KrEmcV1c+8n0/v2nHz36ptjp66+/3NSjjzuaIpjtQzkR7elZ1a7sC7b2ZCuHdh5B35dSLe6EuimUkRkp6tSa/99UYrt8/v64vXPm/P3rncFgTVTrVari9yV56rAJpbE0nl6izsFsJkUjwC159/6so7dj667/kr+AJTFfatY8j3lSPPEgUrT8+1qGoiIU3P/fp0tsUbjEAAAjb7P+j8vtOr/pfFInujJfjxQzKH0R8SDEbErIh6KiN0R8XBELe+jEfHYMstvniG5s/+TXrvr4DqQ9f9eLua2bu//pfUs/aVibWct/kpyenJq4nBxTA5FZdvpyWRieJEyfnjt9y/b7Wvs/2VLVn69L1jU49r2plH38dHZ0RUF3eD6ZxF7yxG3KtEUfxL1aZwkIvZExN67LGPyuXLbfUvHv4j2L9ux6jcRz+bnfy6a4q9L2s5PDr90fOTYUG9MTRweql8Vd/rltytvNW0q1RMrin8VZOd/R8vrfz7+/qQ3YubipbO1+dqZ5Zdx5c8v2j7TdHL9lxcGqE/uLK7/nuSd2oaeYsfHo7OzF4YjepI37tw+svBq9fV6/iz+Qwdbt/9dsXAkHo+IfRGxPyKeyB4Ki7o/GRFPRcTBReL/6dWnP1h+/OszV5rFP77U+Y/G87/8ROnsj98tHX92j2t3/o/WUoeKLZ3c/zqt4EqOHQAAAGwUae0z8Ek6mJSLdJoODuaf4d8dO9Kp6ZnZ509Pf3R+PP+sfH9U0vpIV1/DeOhwMTbc3/Da/Q37jxTjxl+VttfWB8emp8a7GDeQt/Na+5+/F+TtP/NXqdu1A9ZcPo+WdrsaQBeswjw6sEFp/7A1JYu2/8q61gVYf97/Yetq1f4/bZt78Ns1rQywrrz/w9bVQfufy3+17xUAG5P3f9i6tH/Yktr+b3zadld2u1jBtwGsTeK/4vsM75X6bP5EpPdENTZcIoll/lW54y+zWEai2pe3/2zLttbNHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYFP4PwAA//+dU9wM")
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000e80)=ANY=[@ANYBLOB="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"], 0x218}, 0x1, 0x0, 0x0, 0x440d0}, 0x4040026)

2.179988417s ago: executing program 35 (id=386):
mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0x2}, 0x2802, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x58, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$usbfs(0x0, 0x800000001fe, 0x2)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000804, &(0x7f0000006300)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@grpid}, {@bh}, {@grpid}, {@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@init_itable}, {@usrjquota}, {@nolazytime}, {@norecovery}, {@resgid}]}, 0xfe, 0x495, &(0x7f0000000e40)="$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")
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000e80)=ANY=[@ANYBLOB="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"], 0x218}, 0x1, 0x0, 0x0, 0x440d0}, 0x4040026)

1.300195879s ago: executing program 5 (id=389):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xc}, 0x201, 0x9, 0x0, 0x3, 0x800000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, 0x0, 0x0)
connect$inet6(r1, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff)
syz_emit_ethernet(0xfe, &(0x7f0000001340)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @random="86082b9827c1", @val={@val={0x88a8, 0x6, 0x1, 0x4}, {0x8100, 0x2, 0x0, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb3e02", 0xc0, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x3, 0x1, 0x0, 0x7c, '\x00', {0x1, 0x6, "c4d892", 0x9d, 0x1, 0x1, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3c, 0x0, 0x7, 0x1, 0x0, 0xe, 0x67}, @dstopts={0x87, 0x0, '\x00', [@enc_lim]}, @srh={0x2f, 0xe, 0x4, 0x7, 0xe1, 0x18, 0x5, [@dev={0xfe, 0x80, '\x00', 0xe}, @mcast2, @empty, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}]}}}}}}}, 0x0)
syz_emit_ethernet(0x1ce, &(0x7f0000000800)={@local, @link_local={0x17, 0x80, 0xc2, 0x2, 0x9, 0x3}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "001958", 0x198, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x83000000, [{0x3, 0x9, "a78ce540aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0a0b000000be27df3e34066d42c60a5c15b37ada6eb0d2a053d25628546e3026b0fbc15084dbaf736b41d5"}, {0x0, 0x1, "ffffffffffffff8026000400"}, {0x6}, {0x18, 0xa, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743474671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68f2d2c6393a9f3becd1a9f51a948"}, {0x21, 0x2, "fcc1876d4ec1876d4e6fa3ce2dfdb4"}, {0x5, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1eb91a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d96967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c000000000000000000"}, {0x1f, 0x4, "090000000900000036da018dff16a70b8b1400001600e18e88605aa6be1a"}]}}}}}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=ANY=[], 0x14}}, 0x4)
socket(0x3a, 0x1, 0x7ff)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount$nfs4(&(0x7f0000000300)='127.0.0.1:/root\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='addr=127.0.0.1,soft,eo=1,retrans=1,sec=krb5'])
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="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", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x68}, {&(0x7f00000007c0)="f2e659", 0x3}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000900)="11e09017", 0xfffffec4}], 0x2}}], 0x4, 0x4000000)
setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4)
rmdir(0x0)

1.206802233s ago: executing program 4 (id=390):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000840)=ANY=[@ANYBLOB="9feb010018005f00000000004800000048000000070000000300000000000004050000000000000001000004a6010000040000000300000040000000030000000000000803000000000000000000000d000000000600000000000010080000000061615f"], 0x0, 0x67, 0x0, 0x1, 0x1}, 0x28)

1.205988943s ago: executing program 0 (id=391):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000fdffffff000000001ac300008500000036000000850000000500000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x42}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r0, r2, 0x25, 0x2, @val=@kprobe_multi=@syms={0x1, 0x0, 0x0, 0x0, 0x49}}, 0x30)
syz_emit_ethernet(0x66, &(0x7f0000000d40)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c8edff", 0x30, 0x3a, 0x0, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7fff, {0x9, 0x6, "c7bdf9", 0x1, 0x3a, 0x1, @mcast2, @local}}}}}}}, 0x0)
r3 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x7fff, @empty, 0x19f4d29}], 0x1c)
sendmsg$inet_sctp(r3, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000300)="b2", 0x1}], 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000008400070000007f000001000000005ef63cccfc405222a89fe206695489b3305dd871a5bbad3d44cde0713d1a1787c67b8984270058e50030bcfffffffffffffffff4e10305503c7311"], 0x18}, 0x8050)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040))
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000070000070000000000", @ANYRES32=0x0, @ANYBLOB="1546010007ef0000540012800c0001006d6163766c616e004400028006000200010000000800090001efa80008000300030000000800070005000000080001001000000006000200", @ANYRES16], 0x84}}, 0x20008040)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101042, 0xd8)
pwrite64(r6, &(0x7f00000000c0)='/', 0x1, 0x2f70000)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x105042, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0x3000, 0x2, 0x11, r7, 0x0)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0x11000000)
ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000140)={'vlan0\x00', 0x1000})
r8 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast})
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4a24, @remote}, {0x2, 0x4e25, @multicast2}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2})
write$tun(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./bus\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0x7b, 0x120b, &(0x7f0000004440)="$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")
r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1c1002, 0x12)
write(r10, &(0x7f00000000c0)="11ecc9b6d7", 0x5)
sendfile(r10, r9, 0x0, 0x3ffff)

1.156698595s ago: executing program 4 (id=392):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r1, 0x0)
r2 = socket$inet(0x2, 0x3, 0x2)
sendto$inet(r2, 0x0, 0x0, 0x800, &(0x7f00000021c0)={0x2, 0x4e26, @multicast1}, 0x10)
mlock2(&(0x7f00005d3000/0x3000)=nil, 0x3000, 0x1)
mlock(&(0x7f000049d000/0x3000)=nil, 0x3000)
mlock2(&(0x7f00001c3000/0x2000)=nil, 0x2000, 0x1)
connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)

838.672241ms ago: executing program 4 (id=393):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0xb}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYRESHEX=0x0], 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/tty/ttyS0/console\x00', 0x2, 0x0) (async)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/tty/ttyS0/console\x00', 0x2, 0x0)
syz_open_dev$loop(&(0x7f0000000140), 0xbd03, 0x18882) (async)
syz_open_dev$loop(&(0x7f0000000140), 0xbd03, 0x18882)
write$eventfd(r0, &(0x7f0000000040)=0x779, 0x8) (async)
write$eventfd(r0, &(0x7f0000000040)=0x779, 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x9, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x20004080)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20400, 0x0) (async)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20400, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000240)={0x8001, 0x88, 0x2, 0x3, 0x4c, "5d1c94639465a59bf300002000000000000100"})
syz_open_pts(r2, 0x141401) (async)
r3 = syz_open_pts(r2, 0x141401)
fcntl$setstatus(r3, 0x4, 0x2000) (async)
fcntl$setstatus(r3, 0x4, 0x2000)
write(r2, &(0x7f0000000000)="d5", 0x1)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x3) (async)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x3)
add_key$keyring(&(0x7f0000000180), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) (async)
r4 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000380)=@chain={'key_or_keyring:', r4}) (async)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000380)=@chain={'key_or_keyring:', r4})
add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, 0x0, 0x0, r1)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e"], 0x50}}, 0x0) (async)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e"], 0x50}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080003006400000008000200c8"], 0x2c}}, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x8ab00, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5})
r8 = socket(0x10, 0x3, 0x0)
write(r8, &(0x7f0000000080)="240000001a007f0214f9f407000904080a000000000000050002000008000f40a600000e", 0x24)
close_range(r7, r7, 0x0)

443.040059ms ago: executing program 4 (id=394):
setns(0xc9, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xac5)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x800)
poll(&(0x7f0000000080)=[{r1, 0x400}, {r1, 0x12}], 0x2, 0x73)
syz_io_uring_complete(0x0, 0x0)
syz_clone3(0x0, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x2, 0x7f}, 0x200, 0x0, 0x0, 0x0, 0x4, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b80000001d0001000000000000000100e0"], 0xb8}, 0x1, 0x0, 0x0, 0x94}, 0x20000810)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bind$bt_l2cap(r3, 0x0, 0x0)
socket$kcm(0x2d, 0xd, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000000906"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4)

315.054535ms ago: executing program 0 (id=395):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, 0x0, 0xfffffffffffffe4c)

301.976846ms ago: executing program 5 (id=396):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084)
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0x7, 0x4, 0xfffb, 0x40000007, 0x4000000, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0xc, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x66, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x40000007, 0xc, 0x7, 0x1, 0xfffffffd, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x7, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff067, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x80000000, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x0, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x0, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x4, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x800, 0x7, 0x0, 0x4, 0x2, 0x9, 0x7, 0x7, 0x1, 0x3, 0x98, 0x12, 0x8, 0x40, 0x9, 0x202}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x0)

196.155271ms ago: executing program 0 (id=397):
setns(0xc9, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$kcm(0x21, 0x2, 0xa)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x129942, 0x18)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x4, 0x521, &(0x7f0000000640)="$eJzs3d9rK1kdAPDvTJtue2/XZlXkuuDu4q7cu+hN2q2rVWR3BdGnBXV9v9Y2LaVpU5p0vS2LdvEPEERU8A/wRfDBR0H2TxDhgr6LiiJ6rz7qHZlkqv2RtLFNm2v6+cBpzsmZOd9zhmaSmTnMBHBtvRARb0TEWES8HBEzxftpkWK/k/LlHj18ZylPSWTZW39NIineO2grL49HxM1itcmI+OqXIr6RnIzb3N1bX6zXa9tFudra2Ko2d/furm0srtZWa5vz83M/j4hXF2azwoXGWY6I177wxx989ydffO2Xn/jm7+79+c638m597kOdfkfE0oUC9NBpu9TeFgfybbR9GcGGJB9PaWzYvQAAoB/5b/z3R8RH27//Z2Ks/WsOAAAAGCXZ69PxzyQiAwAAAEZWGhHTkaSVYi7AdKRppdKZw/vBuJHWG83Wx1caO5vLeV1EOUrpylq9NlvMFS5HKcnLc8Uc24PyK8fK8xHxTER8f2aqXa4sNerLwz75AQAAANfEzeePHv//YyZt5wEAAIARU+5ZAAAAAEaFQ34AAAAYfY7/AQAAYKR9+c0385QdPMd7+e3dnfXG23eXa831ysbOUmWpsb1VWW00Vtv37Ns4q716o7H1ydjcuV9t1ZqtanN3795GY2ezdW/tyCOwAQAAgCv0zPPv/TaJiP3PTrVTFPcBBDjiD8PuADBIY8PuADA048PuADA0pTOXsIeAUZecUX9y8k7nXGH86nL6AwAADN7tD5+8/j9R1J19bgD4f2auDwBcP0ev7k0NrR/A1SuddwbgrUH3BBiW93VenupV3/PmHX1c/++cY8iyc3UMAAAYmOl2StJKcQwwHWlaqUQ8HY+zcpSSlbV6bbao+81M6am8PNdeMzlzzjAAAAAAAAAAAAAAAAAAAAAAAAAA0JFlSWQAAADASItI/5S07+YfcXvmpemjZweOPfXrx2/98P5iq7U9FzGR/G0mf2siIlo/Kt5/JfNIAAAAABiuqfxP5zi9eJ0bdpcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDWPHr6zdJCuMu5fPh8R5W7xx2Oy/ToZpYi48fckxg+tl0TE2ADi778bEbe6xU/icZZl5aIX3eJPXXL8cnvTdI+fRsTNAcSH6+y9fP/zRrfPXxovtF+7f/7Gi3RRvfd/6X/2f2M99j9PHyv38uyDn1V7xn834tnx7vufg/hJJ/6REHnhxT7H+PWv7e11rTjUZLf4h2NVWxtb1ebu3t21jcXV2mptc35+7lMLn154dWG2urJWrxV/u4b53kd+8fi08d/oEb98dPwntv9LfY0+i389uP/wA51CqVv8Oy92//691SN+Wnz3fazI5/W3D/L7nfxhz/3018+dNv7lHuOfPGP8d/oaf3zm5a985/dda05sDQDgKjR399YX6/Xa9imZyT6W+Z8yERdt5/WB9udJyMTZy0w+IV29jEz27c7/48XaueDqJzLZRVYfjwF0Y+LE53QszttgErGft9XnPyQAADBi/vuj/7QrSAAAAAAAAAAAAAAAAAAAAMBlOudtySYjou+Fj8fcH85QAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABO9e8AAAD//zDU0hs=")
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = gettid()
rt_sigtimedwait(&(0x7f0000000000)={[0xe]}, 0x0, 0x0, 0x8)
tkill(r1, 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0)

195.448881ms ago: executing program 4 (id=398):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=r0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRES32, @ANYBLOB="0a0600"], 0x74}}, 0x0)

114.303684ms ago: executing program 5 (id=399):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x321081a, &(0x7f00000005c0)={[{@acl}, {@errors_remount}]}, 0x1, 0x445, &(0x7f0000000b00)="$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")
r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)
ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000040))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x101042, 0x15)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
syz_clone(0x94011800, &(0x7f0000000080)="d7b004fb3e290fc7446489cbefa6987f26d73dc2f3b34d767ad6019cd68d71f99b4b57d66b7a7e6d23df827b835b5acded404898374c94ce883758d6d244cf7d2eb61b8027d4d000863ac788207450e307046e7d7b9d86303e58cdf4ab861471035d46d3212c6073a94d51a580e1f4b72e1a1105", 0x74, &(0x7f0000000100), &(0x7f0000000140), &(0x7f00000001c0)="946a3a13e0cbe750d7d43ea1ffca788c0782dc813a5f5b277c6b3071ffe1d0f4eed1f40500510202b173605d2bca9bf3853a6d410b1fb86b4c0a54836dc3c4a8e51fb5c69706b4d156a8e088c1fe99fdce2aa43775616165b37586ee3bf49015eaf1293d8899be203546b8342cf9cfefde604e0be92e6520295cfbb34de5a86f2348725ebc253384cc17aba0e8a9a24fec035d8dfb3375cdd1732fd64470d6bca8ab9c0c82fa1a493a501223cbade05e9a2f7178af907a1e9ff86f62b570ce7e3ddf56")
exit(0x0)
tkill(r2, 0x12)
ptrace(0x4206, r2)
waitid(0x1, r2, 0x0, 0x8100000e, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

106.363505ms ago: executing program 4 (id=400):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x3, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0)
setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
readlink(0x0, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f0000000040)=0x1, 0x80, 0x1, &(0x7f0000000080)={0x77359400}, 0x0, 0x1)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = socket$kcm(0x29, 0x2, 0x0)
write$cgroup_pressure(r4, &(0x7f0000000140)={'full'}, 0xfffffdef)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0))
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f0000000200), &(0x7f0000000280)=0x4)
bind$netlink(r5, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbfe, 0x40}, 0xc)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7)
write$nci(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="610306"], 0x10)

0s ago: executing program 0 (id=401):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r1, 0x0)
r2 = socket$inet(0x2, 0x3, 0x2)
sendto$inet(r2, 0x0, 0x0, 0x800, &(0x7f00000021c0)={0x2, 0x4e26, @multicast1}, 0x10)
mlock2(&(0x7f00005d3000/0x3000)=nil, 0x3000, 0x1)
mlock(&(0x7f000049d000/0x3000)=nil, 0x3000)
mlock2(&(0x7f00001c3000/0x2000)=nil, 0x2000, 0x1)
connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)

kernel console output (not intermixed with test programs):

dm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   31.720189][   T29] audit: type=1400 audit(1789433125.103:232): avc:  denied  { nlmsg_write } for  pid=3673 comm="syz.3.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   31.813480][ T3680] FAULT_INJECTION: forcing a failure.
[   31.813480][ T3680] name failslab, interval 1, probability 0, space 0, times 0
[   31.813556][ T3680] CPU: 0 UID: 0 PID: 3680 Comm: syz.3.18 Not tainted syzkaller #0 PREEMPT(lazy) 
[   31.813624][ T3680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   31.813710][ T3680] Call Trace:
[   31.813740][ T3680]  <TASK>
[   31.813749][ T3680]  __dump_stack+0x1d/0x30
[   31.813782][ T3680]  dump_stack_lvl+0x95/0xd0
[   31.813804][ T3680]  dump_stack+0x15/0x1b
[   31.813829][ T3680]  should_fail_ex+0x262/0x280
[   31.813943][ T3680]  ? prepare_creds+0x38/0x550
[   31.813973][ T3680]  should_failslab+0x8c/0xb0
[   31.814073][ T3680]  kmem_cache_alloc_noprof+0x7c/0x3f0
[   31.814153][ T3680]  ? prepare_creds+0x38/0x550
[   31.814182][ T3680]  prepare_creds+0x38/0x550
[   31.814210][ T3680]  __sys_setresgid+0x46c/0x570
[   31.814309][ T3680]  __x64_sys_setresgid+0x3f/0x50
[   31.814345][ T3680]  x64_sys_call+0x14f8/0x2550
[   31.814384][ T3680]  do_syscall_64+0x112/0x360
[   31.814442][ T3680]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   31.814468][ T3680] RIP: 0033:0x7fadc4e9e159
[   31.814542][ T3680] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   31.814578][ T3680] RSP: 002b:00007fadc38d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000077
[   31.814681][ T3680] RAX: ffffffffffffffda RBX: 00007fadc5126090 RCX: 00007fadc4e9e159
[   31.814696][ T3680] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee00
[   31.814709][ T3680] RBP: 00007fadc4f3503b R08: 0000000000000000 R09: 0000000000000000
[   31.814724][ T3680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   31.814737][ T3680] R13: 00007fadc5126128 R14: 00007fadc5126090 R15: 00007ffcdf6f0948
[   31.814779][ T3680]  </TASK>
[   31.850698][ T3680] loop3: detected capacity change from 0 to 512
[   31.861534][ T3680] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   31.861552][ T3680] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   31.871577][ T3680] EXT4-fs (loop3): 1 truncate cleaned up
[   31.872042][ T3680] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   31.881018][   T29] audit: type=1400 audit(1789433125.263:233): avc:  denied  { write } for  pid=3673 comm="syz.3.18" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   31.881042][   T29] audit: type=1400 audit(1789433125.263:234): avc:  denied  { add_name } for  pid=3673 comm="syz.3.18" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   31.881137][   T29] audit: type=1400 audit(1789433125.263:235): avc:  denied  { create } for  pid=3673 comm="syz.3.18" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   31.881159][   T29] audit: type=1400 audit(1789433125.263:236): avc:  denied  { read write } for  pid=3673 comm="syz.3.18" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   31.881181][   T29] audit: type=1400 audit(1789433125.263:237): avc:  denied  { open } for  pid=3673 comm="syz.3.18" path="/2/file2/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   31.882486][   T29] audit: type=1400 audit(1789433125.263:238): avc:  denied  { create } for  pid=3673 comm="syz.3.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   31.908358][ T3682] loop1: detected capacity change from 0 to 4096
[   31.915045][ T3682] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   31.918948][   T29] audit: type=1400 audit(1789433125.303:239): avc:  denied  { write } for  pid=3681 comm="syz.1.20" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   31.923917][ T3682] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #15: comm syz.1.20: corrupted inode contents
[   31.924061][ T3682] EXT4-fs error (device loop1): ext4_dirty_inode:6736: inode #15: comm syz.1.20: mark_inode_dirty error
[   31.924184][ T3682] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #15: comm syz.1.20: corrupted inode contents
[   31.924320][ T3682] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #15: comm syz.1.20: mark_inode_dirty error
[   31.924533][ T3682] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #15: comm syz.1.20: corrupted inode contents
[   31.924629][ T3682] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #15: comm syz.1.20: mark_inode_dirty error
[   31.924764][ T3682] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #15: comm syz.1.20: corrupted inode contents
[   31.924871][ T3682] EXT4-fs error (device loop1): ext4_truncate:4721: inode #15: comm syz.1.20: mark_inode_dirty error
[   31.925041][ T3682] EXT4-fs error (device loop1) in ext4_setattr:6247: Corrupt filesystem
[   31.927929][ T3682] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #15: comm syz.1.20: corrupted inode contents
[   31.933358][   T29] audit: type=1400 audit(1789433125.313:240): avc:  denied  { read write } for  pid=3681 comm="syz.1.20" name="uhid" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   31.935927][ T3390] lg-g15 0003:046D:0A07.0001: hidraw0: USB HID v0.00 Device [syz0] on syz0
[   31.936337][ T3390] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.0001/input/input5
[   31.973599][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   31.984138][ T3685] fido_id[3685]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   32.134901][ T3693] loop1: detected capacity change from 0 to 256
[   33.065140][ T3695] mmap: syz.2.23 (3695) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   33.262753][ T3649] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   33.357032][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   33.395814][ T3700] loop4: detected capacity change from 0 to 128
[   33.416980][ T3702] netlink: 24 bytes leftover after parsing attributes in process `syz.3.24'.
[   33.417035][ T3702] bond0: ARP target 8.4.0.0 is already present
[   33.417061][ T3702] bond0: option arp_ip_target: invalid value (1032)
[   33.472650][ T3704] netlink: 12 bytes leftover after parsing attributes in process `syz.1.26'.
[   33.517436][ T3702] loop3: detected capacity change from 0 to 512
[   33.559966][ T3712] Zero length message leads to an empty skb
[   33.561580][ T3702] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   33.562060][ T3702] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   33.737119][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   33.770614][ T3729] loop2: detected capacity change from 0 to 512
[   33.771786][ T3729] =======================================================
[   33.771786][ T3729] WARNING: The mand mount option has been deprecated and
[   33.771786][ T3729]          and is ignored by this kernel. Remove the mand
[   33.771786][ T3729]          option from the mount to silence this warning.
[   33.771786][ T3729] =======================================================
[   33.780026][ T3729] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   33.789356][ T3729] EXT4-fs (loop2): 1 truncate cleaned up
[   33.789767][ T3729] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   33.822879][ T3735] scsi_strcpy_devinfo: vendor string '��M��ꇋ8KH,P�}�/(a��&�WCa�8(���Au��������6c�1�كX��Pwe���$XP���K���5�����'R�X7R.�]O\��k�ek���өo�p��ґ0�[�{��q6��?U�q9�mߣ�7`�`�0I3��ŵ�' is too long
[   33.862475][ T3738] netlink: 'syz.3.34': attribute type 21 has an invalid length.
[   33.862862][ T3738] netlink: 'syz.3.34': attribute type 1 has an invalid length.
[   33.862882][ T3738] netlink: 132 bytes leftover after parsing attributes in process `syz.3.34'.
[   33.878726][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   33.913091][ T3742] SELinux:  policydb version 0 does not match my version range 15-35
[   33.913117][ T3742] SELinux: failed to load policy
[   33.958801][ T3744] loop4: detected capacity change from 0 to 164
[   33.960928][ T3744] iso9660: Unknown parameter 'ut'
[   34.061412][ T3738] loop3: detected capacity change from 0 to 2048
[   34.066178][ T3738] EXT4-fs: test_dummy_encryption option not supported
[   34.079853][ T3752] loop2: detected capacity change from 0 to 512
[   34.087518][ T3752] EXT4-fs: journaled quota format not specified
[   34.151706][ T3758] capability: warning: `syz.2.42' uses deprecated v2 capabilities in a way that may be insecure
[   34.243515][ T3769] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   34.256016][ T3771] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   34.271685][ T3769] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   34.289990][ T3776] nfs4: Unknown parameter 'eo'
[   34.302568][ T3771] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   34.317267][ T3781] loop2: detected capacity change from 0 to 1024
[   34.318460][ T3781] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   34.320672][ T3781] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 2: comm syz.2.51: lblock 2 mapped to illegal pblock 2 (length 1)
[   34.320708][ T3781] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   34.320851][ T3781] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 48: comm syz.2.51: lblock 0 mapped to illegal pblock 48 (length 1)
[   34.320908][ T3781] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   34.321075][ T3781] EXT4-fs error (device loop2): ext4_acquire_dquot:7069: comm syz.2.51: Failed to acquire dquot type 0
[   34.321102][ T3781] loop2: lost filesystem error report for type 5 error -117
[   34.321226][ T3781] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6522: Corrupt filesystem
[   34.321244][ T3781] loop2: lost filesystem error report for type 5 error -117
[   34.321356][ T3781] EXT4-fs error (device loop2): ext4_evict_inode:269: inode #11: comm syz.2.51: mark_inode_dirty error
[   34.321380][ T3781] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   34.321501][ T3781] EXT4-fs warning (device loop2): ext4_evict_inode:272: couldn't mark inode dirty (err -117)
[   34.321527][ T3781] EXT4-fs (loop2): 1 orphan inode deleted
[   34.322313][ T3781] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   34.323510][ T3548] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:40: lblock 1 mapped to illegal pblock 1 (length 1)
[   34.332098][ T3548] EXT4-fs error (device loop2): ext4_release_dquot:7105: comm kworker/u8:40: Failed to release dquot type 0
[   34.336860][ T3781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.337813][ T3769] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   34.346509][ T3781] EXT4-fs error (device loop2): __ext4_get_inode_loc:4916: comm syz.2.51: Invalid inode table block 1 in block_group 0
[   34.346537][ T3781] loop2: lost filesystem error report for type 5 error -117
[   34.352011][ T3781] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6522: Corrupt filesystem
[   34.352029][ T3781] loop2: lost filesystem error report for type 5 error -117
[   34.353639][ T3781] EXT4-fs error (device loop2): ext4_quota_off:7353: inode #3: comm syz.2.51: mark_inode_dirty error
[   34.353662][ T3781] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   34.356117][ T3781] EXT4-fs error (device loop2): __ext4_get_inode_loc:4916: comm syz.2.51: Invalid inode table block 1 in block_group 0
[   34.356144][ T3781] loop2: lost filesystem error report for type 5 error -117
[   34.389558][ T3769] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   34.425567][ T3771] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   34.501997][ T3771] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   34.530688][ T3786] netlink: 'syz.2.54': attribute type 21 has an invalid length.
[   34.561943][ T3786] netlink: 'syz.2.54': attribute type 1 has an invalid length.
[   34.561974][ T3786] netlink: 132 bytes leftover after parsing attributes in process `syz.2.54'.
[   34.563698][ T3545] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   34.564097][ T3545] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   34.564132][ T3545] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   34.642971][ T3547] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   34.656985][ T3547] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   34.721145][ T3545] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   34.741964][ T3548] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   34.763758][ T3548] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   34.955688][ T3795] Process accounting resumed
[   34.998660][ T3786] loop2: detected capacity change from 0 to 2048
[   35.002778][ T3786] EXT4-fs: test_dummy_encryption option not supported
[   35.023893][ T3810] loop4: detected capacity change from 0 to 1024
[   35.027474][ T3810] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[   35.028011][ T3810] JBD2: no valid journal superblock found
[   35.028035][ T3810] EXT4-fs (loop4): Could not load journal inode
[   35.031239][ T3812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   35.031403][ T3812] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   35.038767][ T3813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   35.038835][ T3813] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   35.313875][ T3812] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   35.313894][ T3812] batman_adv: batadv0: Removing interface: batadv_slave_0
[   35.374007][ T3812] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   35.374023][ T3812] batman_adv: batadv0: Removing interface: batadv_slave_1
[   35.410602][ T3827] SELinux:  Context system_u:object_r:crack_db_t:s0 is not valid (left unmapped).
[   36.099402][ T3858] loop2: detected capacity change from 0 to 1024
[   36.109255][ T3858] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[   36.109768][ T3858] JBD2: no valid journal superblock found
[   36.109777][ T3858] EXT4-fs (loop2): Could not load journal inode
[   36.261206][ T3858] raw_sendmsg: syz.2.77 forgot to set AF_INET. Fix it!
[   36.329874][ T3869] xt_hashlimit: size too large, truncated to 1048576
[   36.332145][ T3868] netlink: 48 bytes leftover after parsing attributes in process `syz.1.80'.
[   36.744082][ T3399] hid (null): global environment stack underflow
[   36.745049][ T3399] logitech-hidpp-device 0003:046D:C082.0002: global environment stack underflow
[   36.745069][ T3399] logitech-hidpp-device 0003:046D:C082.0002: item 0 0 1 11 parsing failed
[   36.745901][ T3399] logitech-hidpp-device 0003:046D:C082.0002: hidpp_probe:parse failed
[   36.745939][ T3399] logitech-hidpp-device 0003:046D:C082.0002: probe with driver logitech-hidpp-device failed with error -22
[   36.763151][ T3555] IPVS: starting estimator thread 0...
[   36.763415][ T3888] IPVS: ovf: FWM 3 0x00000003 - no destination available
[   36.830285][ T3892] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge0
[   36.830576][ T3892] netlink: 72 bytes leftover after parsing attributes in process `syz.1.89'.
[   36.830591][ T3892] netlink: 32 bytes leftover after parsing attributes in process `syz.1.89'.
[   36.830604][ T3892] netlink: 72 bytes leftover after parsing attributes in process `syz.1.89'.
[   36.863983][ T3890] IPVS: using max 2592 ests per chain, 129600 per kthread
[   36.867244][ T3894] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.867424][ T3894] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.867566][ T3894] bridge0: entered allmulticast mode
[   36.870411][ T3894] bridge_slave_1: left allmulticast mode
[   36.870437][ T3894] bridge_slave_1: left promiscuous mode
[   36.870577][ T3894] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.872726][ T3894] bridge_slave_0: left allmulticast mode
[   36.872742][ T3894] bridge_slave_0: left promiscuous mode
[   36.872897][ T3894] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.988185][ T3902] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[   37.004782][ T3902] JBD2: no valid journal superblock found
[   37.004794][ T3902] EXT4-fs (loop1): Could not load journal inode
[   37.013670][   T29] kauditd_printk_skb: 78 callbacks suppressed
[   37.013739][   T29] audit: type=1400 audit(1789433130.393:316): avc:  denied  { write } for  pid=3896 comm="syz.0.91" name="mcfilter" dev="proc" ino=4026532775 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   37.202409][   T29] audit: type=1400 audit(1789433130.583:317): avc:  denied  { search } for  pid=3871 comm="syz.4.82" name="/" dev="configfs" ino=26 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   37.202519][   T29] audit: type=1400 audit(1789433130.583:318): avc:  denied  { search } for  pid=3871 comm="syz.4.82" name="usb_gadget" dev="configfs" ino=1137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   37.202620][   T29] audit: type=1400 audit(1789433130.583:319): avc:  denied  { write search } for  pid=3871 comm="syz.4.82" name="usb_gadget" dev="configfs" ino=1137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   37.202665][   T29] audit: type=1400 audit(1789433130.583:320): avc:  denied  { add_name } for  pid=3871 comm="syz.4.82" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   37.202739][   T29] audit: type=1400 audit(1789433130.583:321): avc:  denied  { create } for  pid=3871 comm="syz.4.82" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1
[   37.202844][   T29] audit: type=1400 audit(1789433130.583:322): avc:  denied  { search } for  pid=3871 comm="syz.4.82" name="/" dev="configfs" ino=26 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   37.202938][   T29] audit: type=1400 audit(1789433130.583:323): avc:  denied  { search } for  pid=3871 comm="syz.4.82" name="usb_gadget" dev="configfs" ino=1137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   37.202997][   T29] audit: type=1400 audit(1789433130.583:324): avc:  denied  { search } for  pid=3871 comm="syz.4.82" name="g1" dev="configfs" ino=6291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   37.203096][   T29] audit: type=1400 audit(1789433130.583:325): avc:  denied  { search } for  pid=3871 comm="syz.4.82" name="functions" dev="configfs" ino=6292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   37.682434][ T3918] FAULT_INJECTION: forcing a failure.
[   37.682434][ T3918] name failslab, interval 1, probability 0, space 0, times 0
[   37.682482][ T3918] CPU: 0 UID: 0 PID: 3918 Comm: syz.1.98 Not tainted syzkaller #0 PREEMPT(lazy) 
[   37.682512][ T3918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   37.682603][ T3918] Call Trace:
[   37.682610][ T3918]  <TASK>
[   37.682619][ T3918]  __dump_stack+0x1d/0x30
[   37.682643][ T3918]  dump_stack_lvl+0x95/0xd0
[   37.682726][ T3918]  dump_stack+0x15/0x1b
[   37.682746][ T3918]  should_fail_ex+0x262/0x280
[   37.682769][ T3918]  ? do_fcntl_add_lease+0x48/0x2b0
[   37.682805][ T3918]  should_failslab+0x8c/0xb0
[   37.682909][ T3918]  kmem_cache_alloc_noprof+0x7c/0x3f0
[   37.682937][ T3918]  ? do_fcntl_add_lease+0x48/0x2b0
[   37.682969][ T3918]  do_fcntl_add_lease+0x48/0x2b0
[   37.682999][ T3918]  fcntl_setlease+0x14c/0x210
[   37.683081][ T3918]  do_fcntl+0x5d9/0xf80
[   37.683166][ T3918]  __se_sys_fcntl+0xb1/0x120
[   37.683259][ T3918]  __x64_sys_fcntl+0x43/0x50
[   37.683289][ T3918]  x64_sys_call+0x1a43/0x2550
[   37.683315][ T3918]  do_syscall_64+0x112/0x360
[   37.683362][ T3918]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   37.683387][ T3918] RIP: 0033:0x7fe1c0c0e159
[   37.683406][ T3918] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   37.683425][ T3918] RSP: 002b:00007fe1bf667028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048
[   37.683444][ T3918] RAX: ffffffffffffffda RBX: 00007fe1c0e95fa0 RCX: 00007fe1c0c0e159
[   37.683458][ T3918] RDX: 0000000000000000 RSI: 0000000000000400 RDI: 000000000000000a
[   37.683483][ T3918] RBP: 00007fe1c0ca503b R08: 0000000000000000 R09: 0000000000000000
[   37.683570][ T3918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   37.683582][ T3918] R13: 00007fe1c0e96038 R14: 00007fe1c0e95fa0 R15: 00007fff8655eeb8
[   37.683601][ T3918]  </TASK>
[   37.871155][ T3912] capability: warning: `syz.2.96' uses 32-bit capabilities (legacy support in use)
[   38.242802][ T3941] 9p: Bad value for 'rfdno'
[   38.403358][ T3941] syz.2.103: attempt to access beyond end of device
[   38.403358][ T3941] loop2: rw=2049, sector=512, nr_sectors = 12 limit=512
[   39.030826][ T3965] set_capacity_and_notify: 2 callbacks suppressed
[   39.030884][ T3965] loop1: detected capacity change from 0 to 512
[   39.062179][ T3965] EXT4-fs (loop1): failed to open journal device unknown-block(0,0) -ENXIO
[   39.137312][ T3965] loop1: detected capacity change from 0 to 164
[   39.151831][ T3965] ip_tables: iptables: counters copy to user failed while replacing table
[   39.206699][ T3980] loop1: detected capacity change from 0 to 164
[   39.210728][ T3980] iso9660: Unknown parameter '18446744073709551615�017777777777777777777770xffffffffffffffff������������0000000000000000000000018446744073709551615��	�j�X�b&㯳�������c�4/����A%~��+��ټ�<������/�F���'
[   39.564313][ T3984] loop3: detected capacity change from 0 to 1024
[   39.565131][ T3984] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[   39.565624][ T3984] JBD2: no valid journal superblock found
[   39.565635][ T3984] EXT4-fs (loop3): Could not load journal inode
[   39.868386][ T3991] /dev/md0: Can't lookup blockdev
[   39.870615][ T3991] netlink: 56 bytes leftover after parsing attributes in process `syz.3.120'.
[   39.992895][ T3998] loop4: detected capacity change from 0 to 2048
[   40.280348][ T4009] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   40.589237][ T4023] sg_write: data in/out 417792/136 bytes for SCSI command 0x0-- guessing data in;
[   40.589237][ T4023]    program syz.2.127 not setting count and/or reply_len properly
[   40.760633][ T4029] FAULT_INJECTION: forcing a failure.
[   40.760633][ T4029] name failslab, interval 1, probability 0, space 0, times 0
[   40.760722][ T4029] CPU: 0 UID: 0 PID: 4029 Comm: syz.2.135 Not tainted syzkaller #0 PREEMPT(lazy) 
[   40.760749][ T4029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   40.760761][ T4029] Call Trace:
[   40.760767][ T4029]  <TASK>
[   40.760775][ T4029]  __dump_stack+0x1d/0x30
[   40.760798][ T4029]  dump_stack_lvl+0x95/0xd0
[   40.760838][ T4029]  dump_stack+0x15/0x1b
[   40.760861][ T4029]  should_fail_ex+0x262/0x280
[   40.760955][ T4029]  ? bpf_prog_alloc_no_stats+0xc4/0x390
[   40.760977][ T4029]  should_failslab+0x8c/0xb0
[   40.761009][ T4029]  __kmalloc_cache_noprof+0x7a/0x400
[   40.761095][ T4029]  ? bpf_prog_alloc_no_stats+0x47/0x390
[   40.761150][ T4029]  ? bpf_prog_alloc_no_stats+0xc4/0x390
[   40.761175][ T4029]  bpf_prog_alloc_no_stats+0xc4/0x390
[   40.761203][ T4029]  bpf_prog_alloc+0x3c/0x150
[   40.761227][ T4029]  bpf_prog_load+0x54b/0x1060
[   40.761263][ T4029]  ? avc_has_perm_noaudit+0xa3/0x120
[   40.761324][ T4029]  __sys_bpf+0xbae/0xc30
[   40.761353][ T4029]  ? do_futex+0x3c0/0x460
[   40.761425][ T4029]  __x64_sys_bpf+0x69/0x80
[   40.761447][ T4029]  x64_sys_call+0xf26/0x2550
[   40.761472][ T4029]  do_syscall_64+0x112/0x360
[   40.761534][ T4029]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   40.761561][ T4029] RIP: 0033:0x7f42d98fe159
[   40.761579][ T4029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   40.761661][ T4029] RSP: 002b:00007f42d8357028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   40.761679][ T4029] RAX: ffffffffffffffda RBX: 00007f42d9b85fa0 RCX: 00007f42d98fe159
[   40.761692][ T4029] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005
[   40.761705][ T4029] RBP: 00007f42d999503b R08: 0000000000000000 R09: 0000000000000000
[   40.761717][ T4029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   40.761730][ T4029] R13: 00007f42d9b86038 R14: 00007f42d9b85fa0 R15: 00007ffd26d82678
[   40.761751][ T4029]  </TASK>
[   40.809642][ T4033] loop3: detected capacity change from 0 to 512
[   40.810188][ T4033] EXT4-fs (loop3): invalid inodes per group: 0
[   40.951266][ T4043] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[   41.021308][ T4045] block device autoloading is deprecated and will be removed.
[   41.032273][ T4020] loop4: detected capacity change from 0 to 512
[   41.092861][ T4020] EXT4-fs: Ignoring removed bh option
[   41.153477][ T4020] EXT4-fs error (device loop4): ext4_iget_extra_inode:5210: inode #15: comm syz.4.131: corrupted in-inode xattr: e_value size too large
[   41.153776][ T4020] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   41.157706][ T4020] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.131: couldn't read orphan inode 15 (err -117)
[   41.158124][ T4020] loop4: lost filesystem error report for type 5 error -117
[   41.181886][ T4020] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   41.217017][ T4020] netlink: 100 bytes leftover after parsing attributes in process `syz.4.131'.
[   41.217569][ T4020] netlink: 36 bytes leftover after parsing attributes in process `syz.4.131'.
[   41.217610][ T4020] netlink: 8 bytes leftover after parsing attributes in process `syz.4.131'.
[   41.257391][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.344343][ T4051] loop0: detected capacity change from 0 to 1024
[   41.345493][ T4051] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities
[   41.423734][ T4061] loop1: detected capacity change from 0 to 1024
[   41.425757][ T4061] EXT4-fs: Ignoring removed orlov option
[   41.438874][ T4061] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   41.604939][ T4079] netlink: 8 bytes leftover after parsing attributes in process `syz.3.153'.
[   41.624650][ T4073] bond0: (slave bond_slave_0): Releasing backup interface
[   41.637880][ T4073] bond0: (slave bond_slave_1): Releasing backup interface
[   41.646795][ T4073] team0: Port device team_slave_0 removed
[   41.650171][ T4073] team0: Port device team_slave_1 removed
[   41.650988][ T4073] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   41.651004][ T4073] batman_adv: batadv0: Removing interface: batadv_slave_0
[   41.658327][ T4085] netlink: 8 bytes leftover after parsing attributes in process `syz.3.153'.
[   41.661640][ T4073] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   41.661657][ T4073] batman_adv: batadv0: Removing interface: batadv_slave_1
[   41.668788][ T4073] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   41.749895][ T4096] loop3: detected capacity change from 0 to 512
[   41.764261][ T4081] EXT4-fs: Ignoring removed bh option
[   41.765242][ T4096] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   41.765351][ T4096] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   41.779942][ T4081] EXT4-fs error (device loop2): ext4_iget_extra_inode:5210: inode #15: comm syz.2.154: corrupted in-inode xattr: e_value size too large
[   41.780042][ T4081] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   41.780554][ T4081] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.154: couldn't read orphan inode 15 (err -117)
[   41.780743][ T4081] loop2: lost filesystem error report for type 5 error -117
[   41.791155][ T4081] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   41.807631][ T4081] netlink: 100 bytes leftover after parsing attributes in process `syz.2.154'.
[   41.824482][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.855665][ T3296] EXT4-fs error (device loop3): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39
[   41.855864][ T3296] EXT4-fs error (device loop3): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39
[   41.999926][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.013293][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.016139][ T3547] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   42.058932][ T3547] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   42.060962][   T29] kauditd_printk_skb: 82 callbacks suppressed
[   42.060977][   T29] audit: type=1400 audit(1789433135.443:408): avc:  denied  { bind } for  pid=4106 comm="syz.2.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   42.079640][ T3547] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   42.122272][ T4117] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   42.125894][ T3547] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   42.136989][   T29] audit: type=1400 audit(1789433135.523:409): avc:  denied  { mounton } for  pid=4116 comm="syz.1.164" path="/32/file0/bus" dev="loop1" ino=130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1
[   42.158799][ T3294] FAT-fs (loop1): error, corrupted directory (invalid entries)
[   42.158819][ T3294] FAT-fs (loop1): Filesystem has been set read-only
[   42.158939][ T3294] FAT-fs (loop1): error, corrupted directory (invalid entries)
[   42.325448][   T29] audit: type=1400 audit(1789433135.713:410): avc:  denied  { wake_alarm } for  pid=4139 comm="syz.4.167" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   42.328651][ T3547] bridge_slave_1: left allmulticast mode
[   42.328675][ T3547] bridge_slave_1: left promiscuous mode
[   42.328891][ T3547] bridge0: port 2(bridge_slave_1) entered disabled state
[   42.342526][ T3547] bridge_slave_0: left allmulticast mode
[   42.342548][ T3547] bridge_slave_0: left promiscuous mode
[   42.342659][ T3547] bridge0: port 1(bridge_slave_0) entered disabled state
[   42.345306][   T29] audit: type=1400 audit(1789433135.733:411): avc:  denied  { write } for  pid=4128 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   42.345335][   T29] audit: type=1400 audit(1789433135.733:412): avc:  denied  { create } for  pid=4128 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   42.345397][   T29] audit: type=1400 audit(1789433135.733:413): avc:  denied  { write } for  pid=4128 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=1619 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   42.346233][   T29] audit: type=1400 audit(1789433135.733:414): avc:  denied  { append } for  pid=4128 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=1619 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   42.388986][   T29] audit: type=1400 audit(1789433135.773:415): avc:  denied  { write } for  pid=4145 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   42.389021][   T29] audit: type=1400 audit(1789433135.773:416): avc:  denied  { unlink } for  pid=4145 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=1619 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   42.416677][ T4148] __nla_validate_parse: 2 callbacks suppressed
[   42.416693][ T4148] netlink: 12 bytes leftover after parsing attributes in process `syz.4.169'.
[   42.418885][ T4142] netlink: 100 bytes leftover after parsing attributes in process `syz.2.168'.
[   42.418946][ T4142] netlink: 36 bytes leftover after parsing attributes in process `syz.2.168'.
[   42.419004][ T4142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.168'.
[   42.421507][ T4148] netlink: 4 bytes leftover after parsing attributes in process `syz.4.169'.
[   42.455949][ T3547] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   42.458844][ T3547] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   42.460358][ T3547] bond0 (unregistering): Released all slaves
[   42.472147][ T3021] 8021q: adding VLAN 0 to HW filter on device eth1
[   42.587789][ T3547] hsr_slave_0: left promiscuous mode
[   42.589633][ T3547] hsr_slave_1: left promiscuous mode
[   42.597764][ T3547] veth1_macvtap: left promiscuous mode
[   42.597790][ T3547] veth0_macvtap: left promiscuous mode
[   42.597912][ T3547] veth1_vlan: left promiscuous mode
[   42.597947][ T3547] veth0_vlan: left promiscuous mode
[   42.646417][   T29] audit: type=1400 audit(1789433136.033:417): avc:  denied  { write } for  pid=4151 comm="syz.2.171" path="socket:[6987]" dev="sockfs" ino=6987 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[   42.799744][ T3547] team0 (unregistering): Port device team_slave_1 removed
[   42.812028][ T3547] team0 (unregistering): Port device team_slave_0 removed
[   42.916111][ T3021] 8021q: adding VLAN 0 to HW filter on device eth2
[   43.132322][ T3547] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   43.178261][ T3547] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   43.248624][ T3547] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   43.266696][ T4119] bridge0: port 1(bridge_slave_0) entered blocking state
[   43.266734][ T4119] bridge0: port 1(bridge_slave_0) entered disabled state
[   43.266814][ T4119] bridge_slave_0: entered allmulticast mode
[   43.267453][ T4119] bridge_slave_0: entered promiscuous mode
[   43.300325][ T3547] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   43.314936][ T4119] bridge0: port 2(bridge_slave_1) entered blocking state
[   43.314971][ T4119] bridge0: port 2(bridge_slave_1) entered disabled state
[   43.315077][ T4119] bridge_slave_1: entered allmulticast mode
[   43.315586][ T4119] bridge_slave_1: entered promiscuous mode
[   43.352907][ T4149] iso9660: Bad value for 'gid'
[   43.353017][ T4149] iso9660: Bad value for 'gid'
[   43.410265][ T4119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   43.411525][ T4119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   43.455445][ T4199] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   43.455569][ T4199] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   43.478374][ T4199] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #15: comm syz.4.174: corrupted xattr block 33: invalid ea_ino
[   43.478898][ T4199] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[   43.478932][ T4199] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #15: comm syz.4.174: corrupted xattr block 33: invalid ea_ino
[   43.479114][ T4199] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[   43.479270][ T4199] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #15: comm syz.4.174: corrupted xattr block 33: invalid ea_ino
[   43.479546][ T4199] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[   43.493173][ T4119] team0: Port device team_slave_0 added
[   43.605167][ T3547] bond0 (unregistering): Released all slaves
[   43.629467][ T4119] team0: Port device team_slave_1 added
[   43.676158][ T4149] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   43.682479][ T4119] batman_adv: batadv0: Adding interface: batadv_slave_0
[   43.682494][ T4119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   43.682520][ T4119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   43.683549][ T4119] batman_adv: batadv0: Adding interface: batadv_slave_1
[   43.683559][ T4119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   43.683583][ T4119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   43.808924][ T4159] bridge0: port 1(bridge_slave_0) entered blocking state
[   43.808954][ T4159] bridge0: port 1(bridge_slave_0) entered disabled state
[   43.809069][ T4159] bridge_slave_0: entered allmulticast mode
[   43.809712][ T4159] bridge_slave_0: entered promiscuous mode
[   43.810451][ T4159] bridge0: port 2(bridge_slave_1) entered blocking state
[   43.810481][ T4159] bridge0: port 2(bridge_slave_1) entered disabled state
[   43.810531][ T4159] bridge_slave_1: entered allmulticast mode
[   43.811206][ T4159] bridge_slave_1: entered promiscuous mode
[   43.841472][ T4119] hsr_slave_0: entered promiscuous mode
[   43.841897][ T4119] hsr_slave_1: entered promiscuous mode
[   43.843263][ T4159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   43.844583][ T4159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   43.899356][ T3547] hsr_slave_0: left promiscuous mode
[   43.901092][ T3547] hsr_slave_1: left promiscuous mode
[   43.915099][ T3547] veth1_macvtap: left promiscuous mode
[   43.915126][ T3547] veth0_macvtap: left promiscuous mode
[   43.915180][ T3547] veth1_vlan: left promiscuous mode
[   43.915249][ T3547] veth0_vlan: left promiscuous mode
[   44.021553][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.036068][ T4159] team0: Port device team_slave_0 added
[   44.061911][ T4159] team0: Port device team_slave_1 added
[   44.084295][ T4159] batman_adv: batadv0: Adding interface: batadv_slave_0
[   44.084308][ T4159] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   44.084410][ T4159] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   44.084954][ T4159] batman_adv: batadv0: Adding interface: batadv_slave_1
[   44.084965][ T4159] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   44.084995][ T4159] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   44.119582][ T4159] hsr_slave_0: entered promiscuous mode
[   44.120175][ T4159] hsr_slave_1: entered promiscuous mode
[   44.120559][ T4159] debugfs: 'hsr0' already exists in 'hsr'
[   44.120572][ T4159] Cannot create hsr debugfs directory
[   44.301726][ T3547] IPVS: stop unused estimator thread 0...
[   44.372891][ T4219] set_capacity_and_notify: 6 callbacks suppressed
[   44.372908][ T4219] loop4: detected capacity change from 0 to 256
[   44.990751][ T4224] netlink: 100 bytes leftover after parsing attributes in process `syz.0.181'.
[   44.990773][ T4224] netlink: 36 bytes leftover after parsing attributes in process `syz.0.181'.
[   44.990788][ T4224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.181'.
[   45.010269][ T4226] xt_LOG: level 115 >= 8
[   45.014016][ T4227] loop0: detected capacity change from 0 to 256
[   45.014527][ T4227] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   45.015040][ T4227] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   45.084908][ T4226] SET target dimension over the limit!
[   45.473002][ T4153] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   45.474783][ T4119] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   45.486234][ T4119] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   45.486708][ T4119] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   45.493192][ T4119] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   45.493759][ T4159] netdevsim netdevsim6 netdevsim0: renamed from eth0
[   45.498339][ T4159] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   45.501872][ T4159] netdevsim netdevsim6 netdevsim1: renamed from eth1
[   45.509361][ T4159] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   45.510127][ T4119] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   45.517789][ T4119] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   45.520182][ T4119] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   45.528598][ T4119] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   45.563899][ T4240] loop4: detected capacity change from 0 to 1024
[   45.575230][ T4240] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[   45.575884][ T4240] JBD2: no valid journal superblock found
[   45.575892][ T4240] EXT4-fs (loop4): Could not load journal inode
[   45.577177][ T4159] netdevsim netdevsim6 netdevsim2: renamed from eth2
[   45.584481][ T4159] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   45.588574][ T4159] netdevsim netdevsim6 netdevsim3: renamed from eth3
[   45.597522][ T4159] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   45.647851][ T4119] 8021q: adding VLAN 0 to HW filter on device bond0
[   45.651536][ T4119] 8021q: adding VLAN 0 to HW filter on device team0
[   45.660156][ T3547] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.660189][ T3547] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.666570][ T3547] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.666602][ T3547] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.762214][ T4253] netlink: 20 bytes leftover after parsing attributes in process `syz.2.185'.
[   45.799268][ T4159] 8021q: adding VLAN 0 to HW filter on device bond0
[   45.812630][ T4159] 8021q: adding VLAN 0 to HW filter on device team0
[   45.814812][ T4267] syzkaller1: entered promiscuous mode
[   45.814831][ T4267] syzkaller1: entered allmulticast mode
[   45.850901][ T3547] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.850932][ T3547] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.851989][ T3021] 8021q: adding VLAN 0 to HW filter on device eth3
[   45.856823][ T3547] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.856854][ T3547] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.921617][ T4159] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   45.921659][ T4159] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   46.086424][ T4119] 8021q: adding VLAN 0 to HW filter on device batadv0
[   46.087111][ T4294] netlink: 100 bytes leftover after parsing attributes in process `syz.2.190'.
[   46.124395][ T4159] 8021q: adding VLAN 0 to HW filter on device batadv0
[   46.169947][ T3021] 8021q: adding VLAN 0 to HW filter on device eth4
[   46.263265][ T4329] FAULT_INJECTION: forcing a failure.
[   46.263265][ T4329] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   46.263312][ T4329] CPU: 1 UID: 0 PID: 4329 Comm: syz.0.189 Not tainted syzkaller #0 PREEMPT(lazy) 
[   46.263339][ T4329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   46.263351][ T4329] Call Trace:
[   46.263426][ T4329]  <TASK>
[   46.263435][ T4329]  __dump_stack+0x1d/0x30
[   46.263466][ T4329]  dump_stack_lvl+0x95/0xd0
[   46.263493][ T4329]  dump_stack+0x15/0x1b
[   46.263601][ T4329]  should_fail_ex+0x262/0x280
[   46.263626][ T4329]  should_fail+0xb/0x20
[   46.263647][ T4329]  should_fail_usercopy+0x1a/0x20
[   46.263715][ T4329]  _copy_from_user+0x1c/0xb0
[   46.263742][ T4329]  bpf_vlog_reverse_ubuf+0xed/0x360
[   46.263768][ T4329]  bpf_vlog_finalize+0x11a/0x200
[   46.263790][ T4329]  bpf_log_attr_finalize+0x33/0x100
[   46.263815][ T4329]  btf_new_fd+0x34a/0x670
[   46.263895][ T4329]  bpf_btf_load+0x116/0x130
[   46.263978][ T4329]  __sys_bpf+0xbce/0xc30
[   46.264008][ T4329]  ? do_futex+0x3c0/0x460
[   46.264044][ T4329]  __x64_sys_bpf+0x69/0x80
[   46.264144][ T4329]  x64_sys_call+0xf26/0x2550
[   46.264197][ T4329]  do_syscall_64+0x112/0x360
[   46.264245][ T4329]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   46.264317][ T4329] RIP: 0033:0x7f1ac05ce159
[   46.264335][ T4329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   46.264353][ T4329] RSP: 002b:00007f1abebc2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   46.264453][ T4329] RAX: ffffffffffffffda RBX: 00007f1ac0856270 RCX: 00007f1ac05ce159
[   46.264470][ T4329] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012
[   46.264485][ T4329] RBP: 00007f1ac066503b R08: 0000000000000000 R09: 0000000000000000
[   46.264501][ T4329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   46.264516][ T4329] R13: 00007f1ac0856308 R14: 00007f1ac0856270 R15: 00007ffde59cc5e8
[   46.264537][ T4329]  </TASK>
[   46.332967][ T4288] loop4: detected capacity change from 0 to 128
[   46.357551][ T4327] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   46.368449][ T4288] msdos: Unknown parameter '000000000000000000000x00000000000000000x0000000000000025'
[   46.496237][ T4311] Cannot find set identified by id 0 to match
[   46.499148][ T4327] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   46.523280][ T4159] veth0_vlan: entered promiscuous mode
[   46.531914][ T4159] veth1_vlan: entered promiscuous mode
[   46.559594][ T4327] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   46.589916][ T3021] 8021q: adding VLAN 0 to HW filter on device eth5
[   46.596423][ T4159] veth0_macvtap: entered promiscuous mode
[   46.601922][ T4119] veth0_vlan: entered promiscuous mode
[   46.603042][ T4159] veth1_macvtap: entered promiscuous mode
[   46.610366][ T4119] veth1_vlan: entered promiscuous mode
[   46.622296][ T4159] batman_adv: batadv0: Interface activated: batadv_slave_0
[   46.637422][ T4159] batman_adv: batadv0: Interface activated: batadv_slave_1
[   46.642768][ T4119] veth0_macvtap: entered promiscuous mode
[   46.659163][ T4327] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   46.669976][ T4119] veth1_macvtap: entered promiscuous mode
[   46.684094][ T3548] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   46.684210][ T3548] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   46.684314][ T3548] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   46.684348][ T3548] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   46.699005][ T4119] batman_adv: batadv0: Interface activated: batadv_slave_0
[   46.735249][ T4119] batman_adv: batadv0: Interface activated: batadv_slave_1
[   46.755965][ T3546] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   46.799154][ T3545] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   46.850052][ T3548] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   46.854101][ T3547] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   46.854711][ T3547] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   46.855125][ T3547] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   46.869754][ T4367] loop6: detected capacity change from 0 to 4096
[   46.884639][ T4367] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   46.913524][ T3545] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   46.913908][ T3545] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   46.933888][ T3349] lg-g15 0003:046D:0A07.0003: item fetching failed at offset 11/12
[   46.934159][ T3349] lg-g15 0003:046D:0A07.0003: probe with driver lg-g15 failed with error -22
[   46.986252][ T4159] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.012378][ T3021] 8021q: adding VLAN 0 to HW filter on device eth6
[   47.034934][ T4385] loop6: detected capacity change from 0 to 512
[   47.039834][ T4385] EXT4-fs (loop6): revision level too high, forcing read-only mode
[   47.039935][ T4385] EXT4-fs (loop6): orphan cleanup on readonly fs
[   47.039952][ T4385] EXT4-fs error (device loop6): ext4_orphan_get:1429: comm syz.6.194: bad orphan inode 15
[   47.039973][ T4385] loop6: lost filesystem error report for type 5 error -117
[   47.040056][ T4385] ext4_test_bit(bit=14, block=5) = 0
[   47.040483][ T4385] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[   47.043278][ T4385] syz.6.194 (4385): /proc/4384/oom_adj is deprecated, please use /proc/4384/oom_score_adj instead.
[   47.059618][ T4159] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.114916][   T29] kauditd_printk_skb: 51 callbacks suppressed
[   47.114929][   T29] audit: type=1400 audit(1789433140.493:469): avc:  denied  { setopt } for  pid=4392 comm="syz.5.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   47.310272][   T29] audit: type=1400 audit(1789433140.693:470): avc:  denied  { execute } for  pid=4406 comm="syz.6.199" path="/file1" dev="ramfs" ino=9370 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1
[   47.418081][   T29] audit: type=1400 audit(1789433140.803:471): avc:  denied  { write } for  pid=4401 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   47.482347][   T29] audit: type=1400 audit(1789433140.863:472): avc:  denied  { write } for  pid=4417 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   47.507362][ T3021] 8021q: adding VLAN 0 to HW filter on device eth7
[   47.807780][ T4425] loop5: detected capacity change from 0 to 128
[   47.841416][ T4423] loop6: detected capacity change from 0 to 512
[   47.856218][ T4423] EXT4-fs: Ignoring removed bh option
[   47.882023][ T4423] EXT4-fs error (device loop6): ext4_iget_extra_inode:5210: inode #15: comm syz.6.200: corrupted in-inode xattr: e_value size too large
[   47.882090][ T4423] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   47.883633][    C1] EXT4-fs (loop6): error count since last fsck: 1
[   47.883673][    C1] EXT4-fs (loop6): initial error at time 1789433141: ext4_iget_extra_inode:5210: inode 15
[   47.883705][    C1] EXT4-fs (loop6): last error at time 1789433141: ext4_iget_extra_inode:5210: inode 15
[   47.891623][ T4425] syz.5.201: attempt to access beyond end of device
[   47.891623][ T4425] loop5: rw=2049, sector=138, nr_sectors = 48 limit=128
[   47.895900][ T4425] syz.5.201: attempt to access beyond end of device
[   47.895900][ T4425] loop5: rw=2049, sector=202, nr_sectors = 2 limit=128
[   47.899779][ T4425] syz.5.201: attempt to access beyond end of device
[   47.899779][ T4425] loop5: rw=2049, sector=202, nr_sectors = 8 limit=128
[   47.903006][ T4425] syz.5.201: attempt to access beyond end of device
[   47.903006][ T4425] loop5: rw=2049, sector=210, nr_sectors = 2 limit=128
[   47.916447][ T4425] syz.5.201: attempt to access beyond end of device
[   47.916447][ T4425] loop5: rw=2049, sector=210, nr_sectors = 8 limit=128
[   47.918192][ T4425] syz.5.201: attempt to access beyond end of device
[   47.918192][ T4425] loop5: rw=2049, sector=218, nr_sectors = 2 limit=128
[   47.919384][ T4425] syz.5.201: attempt to access beyond end of device
[   47.919384][ T4425] loop5: rw=2049, sector=218, nr_sectors = 8 limit=128
[   47.921063][ T4425] syz.5.201: attempt to access beyond end of device
[   47.921063][ T4425] loop5: rw=2049, sector=226, nr_sectors = 2 limit=128
[   47.924553][ T4425] syz.5.201: attempt to access beyond end of device
[   47.924553][ T4425] loop5: rw=2049, sector=226, nr_sectors = 8 limit=128
[   47.926489][ T4425] syz.5.201: attempt to access beyond end of device
[   47.926489][ T4425] loop5: rw=2049, sector=234, nr_sectors = 2 limit=128
[   47.955401][ T4423] EXT4-fs error (device loop6): ext4_orphan_get:1408: comm syz.6.200: couldn't read orphan inode 15 (err -117)
[   47.955511][ T4423] loop6: lost filesystem error report for type 5 error -117
[   47.959906][ T4423] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   48.004716][ T4423] __nla_validate_parse: 3 callbacks suppressed
[   48.004739][ T4423] netlink: 100 bytes leftover after parsing attributes in process `syz.6.200'.
[   48.004862][ T4423] netlink: 36 bytes leftover after parsing attributes in process `syz.6.200'.
[   48.004914][ T4423] netlink: 8 bytes leftover after parsing attributes in process `syz.6.200'.
[   48.081895][ T4159] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.215503][ T4432] FAULT_INJECTION: forcing a failure.
[   48.215503][ T4432] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   48.215536][ T4432] CPU: 0 UID: 0 PID: 4432 Comm: syz.6.204 Not tainted syzkaller #0 PREEMPT(lazy) 
[   48.215560][ T4432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   48.215571][ T4432] Call Trace:
[   48.215653][ T4432]  <TASK>
[   48.215661][ T4432]  __dump_stack+0x1d/0x30
[   48.215684][ T4432]  dump_stack_lvl+0x95/0xd0
[   48.215740][ T4432]  dump_stack+0x15/0x1b
[   48.215764][ T4432]  should_fail_ex+0x262/0x280
[   48.215843][ T4432]  should_fail+0xb/0x20
[   48.215856][ T4432]  should_fail_usercopy+0x1a/0x20
[   48.215951][ T4432]  _copy_from_user+0x1c/0xb0
[   48.215967][ T4432]  ____sys_sendmsg+0x1c1/0x580
[   48.216038][ T4432]  ___sys_sendmsg+0x195/0x1e0
[   48.216140][ T4432]  __sys_sendmmsg+0x185/0x320
[   48.216155][ T4432]  __x64_sys_sendmmsg+0x57/0x70
[   48.216243][ T4432]  x64_sys_call+0x1fb4/0x2550
[   48.216258][ T4432]  do_syscall_64+0x112/0x360
[   48.216342][ T4432]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   48.216356][ T4432] RIP: 0033:0x7fb9f8f5e159
[   48.216366][ T4432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   48.216376][ T4432] RSP: 002b:00007fb9f79b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[   48.216389][ T4432] RAX: ffffffffffffffda RBX: 00007fb9f91e5fa0 RCX: 00007fb9f8f5e159
[   48.216404][ T4432] RDX: 04924924924924d0 RSI: 0000200000000080 RDI: 0000000000000003
[   48.216412][ T4432] RBP: 00007fb9f79b7090 R08: 0000000000000000 R09: 0000000000000000
[   48.216420][ T4432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   48.216431][ T4432] R13: 00007fb9f91e6038 R14: 00007fb9f91e5fa0 R15: 00007ffdb4074438
[   48.216442][ T4432]  </TASK>
[   48.279826][ T3547] IPVS: starting estimator thread 0...
[   48.281650][ T4434] loop6: detected capacity change from 0 to 4096
[   48.301953][ T4434] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   48.328286][ T4437] lg-g15 0003:046D:0A07.0004: item fetching failed at offset 11/12
[   48.328435][ T4437] lg-g15 0003:046D:0A07.0004: probe with driver lg-g15 failed with error -22
[   48.379075][ T4159] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.393689][ T4435] IPVS: using max 2544 ests per chain, 127200 per kthread
[   48.425296][ T4441] loop6: detected capacity change from 0 to 512
[   48.447505][   T29] audit: type=1400 audit(1789433141.823:473): avc:  denied  { write } for  pid=4438 comm="syz.0.203" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1
[   48.456797][ T4441] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   48.456864][ T4441] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   48.470172][   T29] audit: type=1326 audit(1789433141.853:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4440 comm="syz.6.206" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9f8f5e159 code=0x7ffc0000
[   48.470206][   T29] audit: type=1326 audit(1789433141.853:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4440 comm="syz.6.206" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9f8f5e159 code=0x7ffc0000
[   48.475754][ T4441] EXT4-fs error (device loop6): ext4_xattr_block_get:608: inode #15: comm syz.6.206: corrupted xattr block 33: invalid ea_ino
[   48.475963][ T4441] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop6 ino=15
[   48.475991][ T4441] EXT4-fs error (device loop6): ext4_xattr_block_get:608: inode #15: comm syz.6.206: corrupted xattr block 33: invalid ea_ino
[   48.476112][ T4441] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop6 ino=15
[   48.476133][ T4441] EXT4-fs error (device loop6): ext4_xattr_block_get:608: inode #15: comm syz.6.206: corrupted xattr block 33: invalid ea_ino
[   48.476350][ T4441] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop6 ino=15
[   48.493419][   T29] audit: type=1326 audit(1789433141.853:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4440 comm="syz.6.206" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb9f8f5e159 code=0x7ffc0000
[   48.493490][   T29] audit: type=1326 audit(1789433141.853:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4440 comm="syz.6.206" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9f8f5e159 code=0x7ffc0000
[   48.493515][   T29] audit: type=1326 audit(1789433141.853:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4440 comm="syz.6.206" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9f8f5e159 code=0x7ffc0000
[   48.514983][ T4445] EXT4-fs: Ignoring removed nomblk_io_submit option
[   48.515028][ T4445] EXT4-fs: Ignoring removed nomblk_io_submit option
[   48.521898][ T4445] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   48.524185][ T4445] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   48.580844][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.620196][ T4448] hub 1-0:1.0: USB hub found
[   48.621951][ T4448] hub 1-0:1.0: 8 ports detected
[   48.678640][ T4450] EXT4-fs: Ignoring removed nomblk_io_submit option
[   48.678678][ T4450] EXT4-fs: Ignoring removed nomblk_io_submit option
[   48.678945][ T4450] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   48.680655][ T4450] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   48.746224][ T4450] FAULT_INJECTION: forcing a failure.
[   48.746224][ T4450] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   48.746269][ T4450] CPU: 0 UID: 0 PID: 4450 Comm: syz.0.209 Not tainted syzkaller #0 PREEMPT(lazy) 
[   48.746296][ T4450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   48.746333][ T4450] Call Trace:
[   48.746340][ T4450]  <TASK>
[   48.746348][ T4450]  __dump_stack+0x1d/0x30
[   48.746375][ T4450]  dump_stack_lvl+0x95/0xd0
[   48.746475][ T4450]  dump_stack+0x15/0x1b
[   48.746564][ T4450]  should_fail_ex+0x262/0x280
[   48.746590][ T4450]  should_fail+0xb/0x20
[   48.746621][ T4450]  should_fail_usercopy+0x1a/0x20
[   48.746648][ T4450]  _copy_from_user+0x1c/0xb0
[   48.746756][ T4450]  sock_do_ioctl+0xe5/0x230
[   48.746785][ T4450]  sock_ioctl+0x439/0x610
[   48.746811][ T4450]  ? __pfx_sock_ioctl+0x10/0x10
[   48.746836][ T4450]  __se_sys_ioctl+0xce/0x140
[   48.746936][ T4450]  __x64_sys_ioctl+0x43/0x50
[   48.746967][ T4450]  x64_sys_call+0x239d/0x2550
[   48.747039][ T4450]  do_syscall_64+0x112/0x360
[   48.747077][ T4450]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   48.747101][ T4450] RIP: 0033:0x7f1ac05ce159
[   48.747117][ T4450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   48.747136][ T4450] RSP: 002b:00007f1abf027028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   48.747164][ T4450] RAX: ffffffffffffffda RBX: 00007f1ac0855fa0 RCX: 00007f1ac05ce159
[   48.747179][ T4450] RDX: 0000200000000180 RSI: 0000000000008946 RDI: 000000000000000b
[   48.747193][ T4450] RBP: 00007f1abf027090 R08: 0000000000000000 R09: 0000000000000000
[   48.747207][ T4450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   48.747220][ T4450] R13: 00007f1ac0856038 R14: 00007f1ac0855fa0 R15: 00007ffde59cc5e8
[   48.747384][ T4450]  </TASK>
[   48.776773][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.814989][ T4453] EXT4-fs: Ignoring removed nomblk_io_submit option
[   48.815034][ T4453] EXT4-fs: Ignoring removed nomblk_io_submit option
[   48.815464][ T4453] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   48.817435][ T4453] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   48.859654][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.886600][ T4459] netlink: 'syz.0.211': attribute type 27 has an invalid length.
[   48.905689][ T4456] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   48.993264][ T4159] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.202469][ T4463] EXT4-fs: Ignoring removed bh option
[   49.217379][ T4463] EXT4-fs error (device loop6): ext4_iget_extra_inode:5210: inode #15: comm syz.6.212: corrupted in-inode xattr: e_value size too large
[   49.217450][ T4463] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   49.217836][ T4463] EXT4-fs error (device loop6): ext4_orphan_get:1408: comm syz.6.212: couldn't read orphan inode 15 (err -117)
[   49.217909][ T4463] loop6: lost filesystem error report for type 5 error -117
[   49.220992][ T4463] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   49.289967][ T4463] netlink: 100 bytes leftover after parsing attributes in process `syz.6.212'.
[   49.290137][ T4463] netlink: 36 bytes leftover after parsing attributes in process `syz.6.212'.
[   49.290157][ T4463] netlink: 8 bytes leftover after parsing attributes in process `syz.6.212'.
[   49.347221][ T4159] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.385336][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.387567][ T4474] set_capacity_and_notify: 5 callbacks suppressed
[   49.387704][ T4474] loop6: detected capacity change from 0 to 512
[   49.442857][ T4486] netlink: 20 bytes leftover after parsing attributes in process `syz.2.218'.
[   49.442911][ T4486] macsec0: entered promiscuous mode
[   49.473850][ T4490] netlink: 72 bytes leftover after parsing attributes in process `syz.0.219'.
[   49.552210][ T4498] loop0: detected capacity change from 0 to 2048
[   49.614025][ T4504] loop6: detected capacity change from 0 to 164
[   49.624116][ T4504] netlink: 8 bytes leftover after parsing attributes in process `syz.6.222'.
[   49.624749][ T4504] netlink: 8 bytes leftover after parsing attributes in process `syz.6.222'.
[   49.666814][ T4504] lo: entered promiscuous mode
[   49.668237][ T4504] tunl0: entered promiscuous mode
[   49.669313][ T4504] gre0: entered promiscuous mode
[   49.672707][ T4504] gretap0: entered promiscuous mode
[   49.679336][ T4504] erspan0: entered promiscuous mode
[   49.681232][ T4504] ip_vti0: entered promiscuous mode
[   49.682245][ T4504] ip6_vti0: entered promiscuous mode
[   49.685785][ T4504] sit0: entered promiscuous mode
[   49.687937][ T4504] ip6tnl0: entered promiscuous mode
[   49.689509][ T4504] ip6gre0: entered promiscuous mode
[   49.694739][ T4504] syz_tun: entered promiscuous mode
[   49.700024][ T4504] ip6gretap0: entered promiscuous mode
[   49.701344][ T4504] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.701503][ T4504] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.701822][ T4504] bridge0: entered promiscuous mode
[   49.703392][ T4504] vcan0: entered promiscuous mode
[   49.705326][ T4504] bond0: entered promiscuous mode
[   49.705343][ T4504] bond_slave_0: entered promiscuous mode
[   49.705418][ T4504] bond_slave_1: entered promiscuous mode
[   49.706886][ T4504] team0: entered promiscuous mode
[   49.706902][ T4504] team_slave_0: entered promiscuous mode
[   49.707026][ T4504] team_slave_1: entered promiscuous mode
[   49.708621][ T4504] dummy0: entered promiscuous mode
[   49.711626][ T4504] nlmon0: entered promiscuous mode
[   49.712726][ T4504] batadv0: entered promiscuous mode
[   49.715532][ T4504] vxcan0: entered promiscuous mode
[   49.716091][ T4504] vxcan1: entered promiscuous mode
[   49.716747][ T4504] veth0: entered promiscuous mode
[   49.717911][ T4504] veth1: entered promiscuous mode
[   49.721981][ T4504] wg0: entered promiscuous mode
[   49.727321][ T4504] wg1: entered promiscuous mode
[   49.732774][ T4504] wg2: entered promiscuous mode
[   49.733596][ T4504] veth0_to_bridge: entered promiscuous mode
[   49.736675][ T4504] veth1_to_bridge: entered promiscuous mode
[   49.739434][ T4504] veth0_to_bond: entered promiscuous mode
[   49.741320][ T4504] veth1_to_bond: entered promiscuous mode
[   49.743160][ T4504] veth0_to_team: entered promiscuous mode
[   49.746201][ T4504] veth1_to_team: entered promiscuous mode
[   49.751196][ T4504] veth0_to_batadv: entered promiscuous mode
[   49.754560][ T4504] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   49.754666][ T4504] batadv_slave_0: entered promiscuous mode
[   49.755670][ T4504] veth1_to_batadv: entered promiscuous mode
[   49.759918][ T4504] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   49.759943][ T4504] batadv_slave_1: entered promiscuous mode
[   49.761244][ T4504] xfrm0: entered promiscuous mode
[   49.762443][ T4504] veth0_to_hsr: entered promiscuous mode
[   49.764949][ T4504] veth1_to_hsr: entered promiscuous mode
[   49.767141][ T4504] hsr0: entered promiscuous mode
[   49.768194][ T4504] veth1_virt_wifi: entered promiscuous mode
[   49.769386][ T4504] veth0_virt_wifi: entered promiscuous mode
[   49.772934][ T4504] vlan0: entered promiscuous mode
[   49.774893][ T4504] vlan1: entered promiscuous mode
[   49.780578][ T4504] macvlan0: entered promiscuous mode
[   49.785809][ T4504] macvlan1: entered promiscuous mode
[   49.786631][ T4504] ipvlan0: entered promiscuous mode
[   49.787711][ T4504] ipvlan1: entered promiscuous mode
[   49.797093][ T4504] macvtap0: entered promiscuous mode
[   49.797872][ T4504] macsec0: entered promiscuous mode
[   49.798844][ T4504] geneve0: entered promiscuous mode
[   49.799689][ T4504] geneve1: entered promiscuous mode
[   49.802997][ T4504] netdevsim netdevsim6 netdevsim0: entered promiscuous mode
[   49.809253][ T4504] netdevsim netdevsim6 netdevsim1: entered promiscuous mode
[   49.814031][ T4504] netdevsim netdevsim6 netdevsim2: entered promiscuous mode
[   49.819474][ T4504] netdevsim netdevsim6 netdevsim3: entered promiscuous mode
[   49.857463][ T3548] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   49.858125][ T3548] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   49.858213][ T3548] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   49.858316][ T3548] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   49.932869][ T4376] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   49.950066][ T4508] FAULT_INJECTION: forcing a failure.
[   49.950066][ T4508] name fail_futex, interval 1, probability 0, space 0, times 1
[   49.950109][ T4508] CPU: 0 UID: 0 PID: 4508 Comm: syz.6.223 Not tainted syzkaller #0 PREEMPT(lazy) 
[   49.950137][ T4508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   49.950169][ T4508] Call Trace:
[   49.950177][ T4508]  <TASK>
[   49.950185][ T4508]  __dump_stack+0x1d/0x30
[   49.950293][ T4508]  dump_stack_lvl+0x95/0xd0
[   49.950317][ T4508]  dump_stack+0x15/0x1b
[   49.950402][ T4508]  should_fail_ex+0x262/0x280
[   49.950428][ T4508]  should_fail+0xb/0x20
[   49.950450][ T4508]  get_futex_key+0x12d/0xb10
[   49.950486][ T4508]  futex_wait_setup+0x49/0x3e0
[   49.950508][ T4508]  ? __pfx_min_vruntime_cb_rotate+0x10/0x10
[   49.950545][ T4508]  ? hrtimer_active+0xe4/0x110
[   49.950567][ T4508]  __futex_wait+0xa9/0x260
[   49.950588][ T4508]  ? __pfx_futex_wake_mark+0x10/0x10
[   49.950687][ T4508]  futex_wait+0x98/0x1c0
[   49.950749][ T4508]  do_futex+0x391/0x460
[   49.950810][ T4508]  __se_sys_futex+0x2f6/0x370
[   49.950839][ T4508]  ? xfd_validate_state+0x45/0xf0
[   49.950937][ T4508]  __x64_sys_futex+0x78/0x90
[   49.950968][ T4508]  x64_sys_call+0x22e2/0x2550
[   49.951057][ T4508]  do_syscall_64+0x112/0x360
[   49.951094][ T4508]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   49.951197][ T4508] RIP: 0033:0x7fb9f8f5e159
[   49.951214][ T4508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   49.951233][ T4508] RSP: 002b:00007fb9f79960e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[   49.951255][ T4508] RAX: ffffffffffffffda RBX: 00007fb9f91e6098 RCX: 00007fb9f8f5e159
[   49.951270][ T4508] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb9f91e6098
[   49.951338][ T4508] RBP: 00007fb9f91e6090 R08: 0000000000000000 R09: 0000000000000000
[   49.951352][ T4508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   49.951365][ T4508] R13: 00007fb9f91e6128 R14: 00007ffdb4074350 R15: 00007ffdb4074438
[   49.951385][ T4508]  </TASK>
[   50.212309][ T4519] loop5: detected capacity change from 0 to 512
[   50.221041][ T4519] EXT4-fs (loop5): fragment/cluster size (4096) != block size (2048)
[   50.332078][ T4528] device-mapper: ioctl: Invalid ioctl structure: uuid -, name , dev f
[   50.377359][ T3021] 8021q: adding VLAN 0 to HW filter on device eth8
[   50.551768][ T4516] loop4: detected capacity change from 0 to 512
[   50.568912][ T4550] loop2: detected capacity change from 0 to 512
[   50.571943][ T4516] EXT4-fs: Ignoring removed bh option
[   50.608828][ T4516] EXT4-fs error (device loop4): ext4_iget_extra_inode:5210: inode #15: comm syz.4.225: corrupted in-inode xattr: e_value size too large
[   50.609038][ T4516] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   50.609503][ T4516] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.225: couldn't read orphan inode 15 (err -117)
[   50.609572][ T4516] loop4: lost filesystem error report for type 5 error -117
[   50.610607][ T4516] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   50.649932][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.870150][ T4589] loop5: detected capacity change from 0 to 512
[   50.897559][ T4589] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   50.897747][ T4589] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   50.898352][ T4589] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.044611][ T4597] loop0: detected capacity change from 0 to 128
[   51.060061][ T4597] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   51.063182][ T4597] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   51.200709][ T3310] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   51.482289][ T4588] loop6: detected capacity change from 0 to 2048
[   51.528642][ T4588] ext4: Unknown parameter 'obj_user'
[   51.688455][ T4626] loop5: detected capacity change from 0 to 512
[   51.700627][ T4626] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   51.896049][ T4625] EXT4-fs: Ignoring removed bh option
[   51.910592][ T4625] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled
[   51.927857][ T4625] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   51.931365][ T4625] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   51.973133][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.988113][ T4641] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41123 sclass=netlink_route_socket pid=4641 comm=syz.0.255
[   51.991333][ T4641] Invalid ELF header magic: != ELF
[   52.703461][ T4119] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.757069][ T4646] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   52.814710][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.975548][ T4651] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   52.976749][   T29] kauditd_printk_skb: 79 callbacks suppressed
[   52.976770][   T29] audit: type=1400 audit(1789433146.363:558): avc:  denied  { write } for  pid=4649 comm="syz.5.256" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   52.977187][   T29] audit: type=1400 audit(1789433146.363:559): avc:  denied  { map } for  pid=4649 comm="syz.5.256" path="/15/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   52.977215][   T29] audit: type=1400 audit(1789433146.363:560): avc:  denied  { execute } for  pid=4649 comm="syz.5.256" path="/15/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   53.021200][ T4119] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.022005][   T29] audit: type=1400 audit(1789433146.403:561): avc:  denied  { listen } for  pid=4648 comm="syz.0.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[   53.066294][ T4654] EXT4-fs: quotafile must be on filesystem root
[   53.109964][   T29] audit: type=1400 audit(1789433146.493:562): avc:  denied  { unmount } for  pid=4119 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   53.141105][ T4654] SELinux: mls:  truncated range
[   53.141117][ T4654] SELinux: error reading MLS range of context
[   53.141200][ T4654] SELinux:  invalid ocon
[   53.144758][ T4661] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   53.144942][ T4661] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   53.176925][   T29] audit: type=1400 audit(1789433146.563:563): avc:  denied  { write } for  pid=4660 comm="syz.5.261" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   53.206149][ T4654] SELinux: failed to load policy
[   53.211814][ T4661] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   53.235512][ T4119] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   53.250479][   T29] audit: type=1400 audit(1789433146.623:564): avc:  denied  { setopt } for  pid=4663 comm="syz.5.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   53.250574][   T29] audit: type=1400 audit(1789433146.623:565): avc:  denied  { bind } for  pid=4663 comm="syz.5.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   53.250598][   T29] audit: type=1400 audit(1789433146.623:566): avc:  denied  { name_bind } for  pid=4663 comm="syz.5.262" src=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[   53.250623][   T29] audit: type=1400 audit(1789433146.623:567): avc:  denied  { node_bind } for  pid=4663 comm="syz.5.262" saddr=fe80::b src=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[   53.471640][ T4683] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities
[   53.620156][ T4690] nfs4: Unknown parameter 'eo'
[   53.719542][ T4570] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   53.825124][ T4701] EXT4-fs error (device loop4): ext4_orphan_get:1403: inode #15: comm syz.4.275: iget: bad i_size value: 38620345925642
[   53.825157][ T4701] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   53.825338][ T4701] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.275: couldn't read orphan inode 15 (err -117)
[   53.825374][ T4701] loop4: lost filesystem error report for type 5 error -117
[   53.825841][ T4701] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   53.832832][ T4699] __nla_validate_parse: 73 callbacks suppressed
[   53.832862][ T4699] netlink: 8 bytes leftover after parsing attributes in process `syz.5.273'.
[   53.884092][ T4705] EXT4-fs (loop4): shut down requested (1)
[   53.927181][ T4699] netlink: 16 bytes leftover after parsing attributes in process `syz.5.273'.
[   54.036342][ T4724] ieee802154 phy0 wpan0: encryption failed: -22
[   54.051069][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.117403][ T4729] nfs4: Unknown parameter 'eo'
[   54.137548][ T4733] netlink: 8 bytes leftover after parsing attributes in process `syz.5.285'.
[   54.137719][ T4733] netlink: 68 bytes leftover after parsing attributes in process `syz.5.285'.
[   54.208465][ T4740] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   54.208529][ T4740] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   54.209302][ T4733] geneve2: entered promiscuous mode
[   54.209352][ T4733] geneve2: entered allmulticast mode
[   54.260135][ T4119] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.556030][ T4764] set_capacity_and_notify: 9 callbacks suppressed
[   54.556050][ T4764] loop5: detected capacity change from 0 to 512
[   54.590514][ T4764] EXT4-fs error (device loop5): ext4_ext_check_inode:521: inode #4: comm syz.5.293: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0)
[   54.590573][ T4764] loop5: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117
[   54.590709][ T4764] EXT4-fs error (device loop5): ext4_quota_enable:7263: comm syz.5.293: Bad quota inode: 4, type: 1
[   54.590807][ T4764] loop5: lost filesystem error report for type 5 error -117
[   54.590896][ T4764] EXT4-fs warning (device loop5): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   54.591173][ T4764] EXT4-fs (loop5): mount failed
[   54.593627][    C0] EXT4-fs (loop5): error count since last fsck: 2
[   54.593648][    C0] EXT4-fs (loop5): initial error at time 1789433147: ext4_ext_check_inode:521: inode 4
[   54.593680][    C0] EXT4-fs (loop5): last error at time 1789433147: ext4_quota_enable:7263
[   54.635648][ T4764] netlink: 'syz.5.293': attribute type 1 has an invalid length.
[   54.635666][ T4764] netlink: 8 bytes leftover after parsing attributes in process `syz.5.293'.
[   54.772806][ T4773] netlink: 28 bytes leftover after parsing attributes in process `syz.6.295'.
[   54.984850][ T4780] loop0: detected capacity change from 0 to 1024
[   54.985530][ T4780] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[   54.986090][ T4780] JBD2: no valid journal superblock found
[   54.986100][ T4780] EXT4-fs (loop0): Could not load journal inode
[   55.098081][ T4781] loop2: detected capacity change from 0 to 512
[   55.179926][ T4781] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   55.201134][ T4781] ext4 filesystem being mounted at /62/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   55.215281][ T4781] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #2: comm syz.2.297: corrupted inode contents
[   55.215764][ T4781] EXT4-fs error (device loop2): ext4_dirty_inode:6736: inode #2: comm syz.2.297: mark_inode_dirty error
[   55.216657][ T4781] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #2: comm syz.2.297: corrupted inode contents
[   55.218256][ T4781] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.297: mark_inode_dirty error
[   55.265872][ T4798] loop5: detected capacity change from 0 to 256
[   55.282703][ T4798] netlink: 104 bytes leftover after parsing attributes in process `syz.5.306'.
[   55.282767][ T4798] netlink: 12 bytes leftover after parsing attributes in process `syz.5.306'.
[   55.292943][ T4800] netlink: 132 bytes leftover after parsing attributes in process `syz.0.304'.
[   55.295342][ T4800] FAULT_INJECTION: forcing a failure.
[   55.295342][ T4800] name failslab, interval 1, probability 0, space 0, times 0
[   55.295370][ T4800] CPU: 1 UID: 0 PID: 4800 Comm: syz.0.304 Not tainted syzkaller #0 PREEMPT(lazy) 
[   55.295413][ T4800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   55.295426][ T4800] Call Trace:
[   55.295433][ T4800]  <TASK>
[   55.295441][ T4800]  __dump_stack+0x1d/0x30
[   55.295466][ T4800]  dump_stack_lvl+0x95/0xd0
[   55.295511][ T4800]  dump_stack+0x15/0x1b
[   55.295533][ T4800]  should_fail_ex+0x262/0x280
[   55.295619][ T4800]  ? get_callchain_buffers+0xbe/0x2f0
[   55.295664][ T4800]  should_failslab+0x8c/0xb0
[   55.295721][ T4800]  __kmalloc_noprof+0xd0/0x4d0
[   55.295752][ T4800]  ? get_callchain_buffers+0xbe/0x2f0
[   55.295843][ T4800]  get_callchain_buffers+0xbe/0x2f0
[   55.295871][ T4800]  perf_event_alloc+0x180a/0x19e0
[   55.295910][ T4800]  __se_sys_perf_event_open+0x674/0x1280
[   55.295946][ T4800]  ? do_futex+0x391/0x460
[   55.296040][ T4800]  __x64_sys_perf_event_open+0x67/0x80
[   55.296076][ T4800]  x64_sys_call+0x1f25/0x2550
[   55.296104][ T4800]  do_syscall_64+0x112/0x360
[   55.296198][ T4800]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   55.296223][ T4800] RIP: 0033:0x7f1ac05ce159
[   55.296240][ T4800] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   55.296314][ T4800] RSP: 002b:00007f1abf027028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[   55.296373][ T4800] RAX: ffffffffffffffda RBX: 00007f1ac0855fa0 RCX: 00007f1ac05ce159
[   55.296388][ T4800] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000140
[   55.296402][ T4800] RBP: 00007f1ac066503b R08: 0000000000000008 R09: 0000000000000000
[   55.296427][ T4800] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[   55.296442][ T4800] R13: 00007f1ac0856038 R14: 00007f1ac0855fa0 R15: 00007ffde59cc5e8
[   55.296460][ T4800]  </TASK>
[   55.313401][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.376098][ T4805] loop0: detected capacity change from 0 to 128
[   55.386680][ T4805] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[   55.387707][ T4805] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   55.416313][ T4809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   55.416546][ T4809] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   55.525710][ T3310] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   55.580112][ T4820] nfs4: Unknown parameter 'eo'
[   55.594814][ T4822] loop2: detected capacity change from 0 to 512
[   55.598467][ T4822] EXT4-fs: Ignoring removed bh option
[   55.603513][ T4822] EXT4-fs error (device loop2): ext4_iget_extra_inode:5210: inode #15: comm syz.2.311: corrupted in-inode xattr: e_value size too large
[   55.603591][ T4822] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   55.611578][ T4822] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.311: couldn't read orphan inode 15 (err -117)
[   55.611616][ T4822] loop2: lost filesystem error report for type 5 error -117
[   55.616066][ T4822] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   55.622670][ T4822] netlink: 100 bytes leftover after parsing attributes in process `syz.2.311'.
[   55.659674][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.699337][ T4827] loop2: detected capacity change from 0 to 1024
[   55.708371][ T4827] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[   55.709105][ T4827] JBD2: no valid journal superblock found
[   55.709113][ T4827] EXT4-fs (loop2): Could not load journal inode
[   55.834918][ T4831] xt_connbytes: Forcing CT accounting to be enabled
[   55.835040][ T4831] xt_CT: You must specify a L4 protocol and not use inversions on it
[   55.879862][ T4831] syzkaller0: entered promiscuous mode
[   55.879915][ T4831] syzkaller0: entered allmulticast mode
[   55.959588][ T4833] loop2: detected capacity change from 0 to 512
[   55.968708][ T4833] EXT4-fs error (device loop2): ext4_acquire_dquot:7069: comm syz.2.315: Failed to acquire dquot type 1
[   55.968750][ T4833] loop2: lost filesystem error report for type 5 error -117
[   55.969413][ T4833] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #16: comm syz.2.315: corrupted inode contents
[   55.969438][ T4833] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   55.969562][ T4833] EXT4-fs error (device loop2): ext4_dirty_inode:6736: inode #16: comm syz.2.315: mark_inode_dirty error
[   55.969623][ T4833] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   55.969722][ T4833] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #16: comm syz.2.315: corrupted inode contents
[   55.969823][ T4833] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   55.970100][ T4833] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #16: comm syz.2.315: mark_inode_dirty error
[   55.970154][ T4833] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   55.970266][ T4833] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #16: comm syz.2.315: corrupted inode contents
[   55.970286][ T4833] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   55.970458][ T4833] EXT4-fs error (device loop2) in ext4_orphan_del:304: Corrupt filesystem
[   55.970474][ T4833] loop2: lost filesystem error report for type 5 error -117
[   55.970652][ T4833] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #16: comm syz.2.315: corrupted inode contents
[   55.970676][ T4833] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   55.970780][ T4833] EXT4-fs error (device loop2): ext4_truncate:4721: inode #16: comm syz.2.315: mark_inode_dirty error
[   55.970819][ T4833] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   55.970912][ T4833] EXT4-fs error (device loop2) in ext4_process_orphan:346: Corrupt filesystem
[   55.970929][ T4833] loop2: lost filesystem error report for type 5 error -117
[   55.971337][ T4833] EXT4-fs (loop2): 1 truncate cleaned up
[   55.971724][ T4833] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   55.971810][ T4833] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   56.059283][ T4833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   57.154582][ T4750] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   57.217500][ T4852] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.220682][ T4859] ref_ctr_offset mismatch. inode: 0xab offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0
[   57.220853][ T4855] ref_ctr_offset mismatch. inode: 0xab offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0
[   57.264171][ T4861] loop2: detected capacity change from 0 to 512
[   57.291399][ T4863] FAULT_INJECTION: forcing a failure.
[   57.291399][ T4863] name failslab, interval 1, probability 0, space 0, times 0
[   57.291428][ T4863] CPU: 1 UID: 0 PID: 4863 Comm: syz.4.321 Not tainted syzkaller #0 PREEMPT(lazy) 
[   57.291502][ T4863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   57.291524][ T4863] Call Trace:
[   57.291531][ T4863]  <TASK>
[   57.291540][ T4863]  __dump_stack+0x1d/0x30
[   57.291612][ T4863]  dump_stack_lvl+0x95/0xd0
[   57.291633][ T4863]  dump_stack+0x15/0x1b
[   57.291656][ T4863]  should_fail_ex+0x262/0x280
[   57.291684][ T4863]  should_failslab+0x8c/0xb0
[   57.291785][ T4863]  __kvmalloc_node_noprof+0x168/0x5c0
[   57.291894][ T4863]  ? nf_hook_entries_grow+0x1cb/0x460
[   57.291928][ T4863]  ? nf_hook_entries_grow+0x1cb/0x460
[   57.291969][ T4863]  nf_hook_entries_grow+0x1cb/0x460
[   57.292071][ T4863]  ? call_rcu+0x2be/0x440
[   57.292138][ T4863]  __nf_register_net_hook+0x187/0x480
[   57.292175][ T4863]  nf_register_net_hook+0x88/0x130
[   57.292215][ T4863]  nf_register_net_hooks+0x44/0x150
[   57.292330][ T4863]  ip_vs_register_hooks+0x9b/0xe0
[   57.292429][ T4863]  ip_vs_add_service+0x3e3/0xea0
[   57.292451][ T4863]  ? selinux_capable+0x31/0x40
[   57.292482][ T4863]  ? __ip_vs_service_find+0x397/0x3c0
[   57.292542][ T4863]  do_ip_vs_set_ctl+0x90a/0xab0
[   57.292654][ T4863]  nf_setsockopt+0x199/0x1b0
[   57.292677][ T4863]  ip_setsockopt+0x102/0x110
[   57.292697][ T4863]  tcp_setsockopt+0x98/0xb0
[   57.292722][ T4863]  sock_common_setsockopt+0x69/0x80
[   57.292810][ T4863]  ? __pfx_sock_common_setsockopt+0x10/0x10
[   57.292873][ T4863]  __sys_setsockopt+0x184/0x200
[   57.292963][ T4863]  __x64_sys_setsockopt+0x64/0x80
[   57.293030][ T4863]  x64_sys_call+0x248f/0x2550
[   57.293123][ T4863]  do_syscall_64+0x112/0x360
[   57.293159][ T4863]  ? generic_smp_call_function_single_interrupt+0x13/0x20
[   57.293246][ T4863]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   57.293284][ T4863] RIP: 0033:0x7fce74f9e159
[   57.293427][ T4863] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   57.293448][ T4863] RSP: 002b:00007fce739f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   57.293471][ T4863] RAX: ffffffffffffffda RBX: 00007fce75225fa0 RCX: 00007fce74f9e159
[   57.293486][ T4863] RDX: 0000000000000482 RSI: 0000000000000000 RDI: 0000000000000009
[   57.293501][ T4863] RBP: 00007fce7503503b R08: 000000000000002c R09: 0000000000000000
[   57.293547][ T4863] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000000
[   57.293562][ T4863] R13: 00007fce75226038 R14: 00007fce75225fa0 R15: 00007fff9450b3a8
[   57.293585][ T4863]  </TASK>
[   57.457654][ T3547] IPVS: starting estimator thread 0...
[   57.554926][ T4871] IPVS: using max 2448 ests per chain, 122400 per kthread
[   57.646709][ T4867] ������: renamed from dummy0 (while UP)
[   57.866178][ T4882] nfs4: Unknown parameter 'eo'
[   57.961363][ T4866] loop2: detected capacity change from 0 to 512
[   57.993932][ T4866] EXT4-fs: Ignoring removed bh option
[   57.998761][   T29] kauditd_printk_skb: 82 callbacks suppressed
[   57.998776][   T29] audit: type=1400 audit(1789433151.383:648): avc:  denied  { write } for  pid=4889 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   58.010969][ T4866] EXT4-fs error (device loop2): ext4_iget_extra_inode:5210: inode #15: comm syz.2.323: corrupted in-inode xattr: e_value size too large
[   58.011435][ T4866] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.323: couldn't read orphan inode 15 (err -117)
[   58.011475][ T4866] loop2: lost filesystem error report for type 5 error -117
[   58.016483][ T4866] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   58.119599][   T29] audit: type=1400 audit(1789433151.503:649): avc:  denied  { write } for  pid=4911 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   58.155379][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.326007][   T29] audit: type=1400 audit(1789433151.713:650): avc:  denied  { append } for  pid=4919 comm="syz.5.336" name="vsock" dev="devtmpfs" ino=255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   58.541626][ T4928] Buffer I/O error on dev loop5, logical block 0, async page read
[   58.541658][ T4928] Buffer I/O error on dev loop5, logical block 0, async page read
[   58.541677][ T4928]  loop5: unable to read partition table
[   58.541733][ T4928] loop_reread_partitions: partition scan of loop5 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[   58.547197][ T4928] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[   58.588619][ T3282] Buffer I/O error on dev loop5, logical block 0, async page read
[   58.590431][ T3282] Buffer I/O error on dev loop5, logical block 0, async page read
[   58.590708][ T3282] Buffer I/O error on dev loop5, logical block 0, async page read
[   58.590811][ T3282] Buffer I/O error on dev loop5, logical block 0, async page read
[   58.590938][ T3282] Buffer I/O error on dev loop5, logical block 0, async page read
[   58.591043][ T3282] Buffer I/O error on dev loop5, logical block 0, async page read
[   58.591127][ T3282] Buffer I/O error on dev loop5, logical block 0, async page read
[   58.591225][ T3282] Buffer I/O error on dev loop5, logical block 0, async page read
[   58.855070][   T29] audit: type=1400 audit(1789433152.243:651): avc:  denied  { create } for  pid=4933 comm="syz.2.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[   58.992023][ T4939] __nla_validate_parse: 6 callbacks suppressed
[   58.992039][ T4939] netlink: 4 bytes leftover after parsing attributes in process `syz.5.342'.
[   59.288109][   T29] audit: type=1326 audit(1789433152.673:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4944 comm="syz.4.344" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce74f9e159 code=0x7ffc0000
[   59.288384][   T29] audit: type=1326 audit(1789433152.673:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4944 comm="syz.4.344" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce74f9e159 code=0x7ffc0000
[   59.288534][   T29] audit: type=1326 audit(1789433152.673:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4944 comm="syz.4.344" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce74f9e159 code=0x7ffc0000
[   59.290174][   T29] audit: type=1326 audit(1789433152.673:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4944 comm="syz.4.344" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=469 compat=0 ip=0x7fce74f9e159 code=0x7ffc0000
[   59.290483][   T29] audit: type=1326 audit(1789433152.673:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4944 comm="syz.4.344" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce74f9e159 code=0x7ffc0000
[   59.290602][   T29] audit: type=1326 audit(1789433152.673:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4944 comm="syz.4.344" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce74f9e159 code=0x7ffc0000
[   59.391318][ T2982]  loop5: unable to read partition table
[   59.468533][ T4949] netlink: 252 bytes leftover after parsing attributes in process `syz.5.343'.
[   59.542808][ T4952] ext4: Unknown parameter './debug'
[   59.561996][ T4951] netlink: 40 bytes leftover after parsing attributes in process `syz.5.346'.
[   59.577120][ T4953] set_capacity_and_notify: 3 callbacks suppressed
[   59.577137][ T4953] loop5: detected capacity change from 0 to 512
[   59.577381][ T4953] EXT4-fs: Ignoring removed nobh option
[   59.580787][ T4952] 9p: Could not find request transport: f5�6�I��f}-�^ ;z����N�U�7�o5�����
[   59.605274][ T4953] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal
[   59.694238][ T4955] netlink: 104 bytes leftover after parsing attributes in process `syz.4.347'.
[   59.734684][ T4967] loop2: detected capacity change from 0 to 512
[   59.741515][ T4967] EXT4-fs: Ignoring removed bh option
[   59.750201][ T4967] EXT4-fs error (device loop2): ext4_iget_extra_inode:5210: inode #15: comm syz.2.345: corrupted in-inode xattr: e_value size too large
[   59.750335][ T4967] fserror_report: 1 callbacks suppressed
[   59.750371][ T4967] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   59.750829][ T4967] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.345: couldn't read orphan inode 15 (err -117)
[   59.750868][ T4967] loop2: lost filesystem error report for type 5 error -117
[   59.756090][ T4967] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   59.767925][ T4967] netlink: 100 bytes leftover after parsing attributes in process `syz.2.345'.
[   59.768013][ T4967] netlink: 36 bytes leftover after parsing attributes in process `syz.2.345'.
[   59.768123][ T4967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.345'.
[   59.786027][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   59.862439][ T4973] 0: reclassify loop, rule prio 0, protocol 03
[   59.990786][ T4977] loop2: detected capacity change from 0 to 512
[   60.006032][ T4977] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   60.024978][ T4977] EXT4-fs (loop2): 1 truncate cleaned up
[   60.029729][ T4977] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   60.782521][ T4907] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   60.840883][ T3307] EXT4-fs error (device loop2): mb_free_blocks:2049: group 0, inode 11: block 54:freeing already freed block (bit 53); block bitmap corrupt.
[   60.844331][ T3307] EXT4-fs error (device loop2): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39
[   60.847149][ T3307] EXT4-fs error (device loop2): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39
[   60.929845][ T4990] tipc: Started in network mode
[   60.929876][ T4990] tipc: Node identity 4a7fef289b7c, cluster identity 4711
[   60.929963][ T4990] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   61.021582][ T4990] syzkaller0: entered promiscuous mode
[   61.021666][ T4990] syzkaller0: entered allmulticast mode
[   61.037003][ T4990] tipc: Resetting bearer <eth:syzkaller0>
[   61.043450][ T4991] syzkaller0: entered promiscuous mode
[   61.043467][ T4991] syzkaller0: entered allmulticast mode
[   61.078885][ T3590] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.079701][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   61.135605][ T4988] tipc: Resetting bearer <eth:syzkaller0>
[   61.276616][ T4988] tipc: Disabling bearer <eth:syzkaller0>
[   61.328133][ T3590] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.396740][ T5011] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   61.397168][ T5011] FAULT_INJECTION: forcing a failure.
[   61.397168][ T5011] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   61.397204][ T5011] CPU: 0 UID: 0 PID: 5011 Comm: syz.0.361 Not tainted syzkaller #0 PREEMPT(lazy) 
[   61.397296][ T5011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   61.397339][ T5011] Call Trace:
[   61.397344][ T5011]  <TASK>
[   61.397352][ T5011]  __dump_stack+0x1d/0x30
[   61.397376][ T5011]  dump_stack_lvl+0x95/0xd0
[   61.397398][ T5011]  dump_stack+0x15/0x1b
[   61.397433][ T5011]  should_fail_ex+0x262/0x280
[   61.397466][ T5011]  should_fail+0xb/0x20
[   61.397486][ T5011]  should_fail_usercopy+0x1a/0x20
[   61.397509][ T5011]  _copy_from_iter+0xcc/0xe70
[   61.397535][ T5011]  ? alloc_pages_mpol+0xdf/0x1d0
[   61.397636][ T5011]  copy_page_from_iter+0x15d/0x1f0
[   61.397663][ T5011]  tun_get_user+0x612/0x2870
[   61.397698][ T5011]  ? irqentry_exit+0x7d/0x610
[   61.397798][ T5011]  ? ref_tracker_alloc+0x1eb/0x2f0
[   61.397823][ T5011]  tun_chr_write_iter+0x15a/0x210
[   61.397893][ T5011]  ? __pfx_tun_chr_write_iter+0x10/0x10
[   61.397924][ T5011]  vfs_write+0x57f/0x9a0
[   61.397961][ T5011]  ksys_write+0xdc/0x1a0
[   61.398054][ T5011]  __x64_sys_write+0x40/0x50
[   61.398085][ T5011]  x64_sys_call+0x154e/0x2550
[   61.398115][ T5011]  do_syscall_64+0x112/0x360
[   61.398177][ T5011]  ? generic_smp_call_function_single_interrupt+0x13/0x20
[   61.398207][ T5011]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   61.398230][ T5011] RIP: 0033:0x7f1ac058e98e
[   61.398326][ T5011] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   61.398341][ T5011] RSP: 002b:00007f1abf026fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   61.398436][ T5011] RAX: ffffffffffffffda RBX: 00007f1abf0276c0 RCX: 00007f1ac058e98e
[   61.398486][ T5011] RDX: 0000000000000056 RSI: 00002000000017c0 RDI: 00000000000000c8
[   61.398501][ T5011] RBP: 00007f1abf027090 R08: 0000000000000000 R09: 0000000000000000
[   61.398514][ T5011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   61.398526][ T5011] R13: 00007f1ac0856038 R14: 00007f1ac0855fa0 R15: 00007ffde59cc5e8
[   61.398544][ T5011]  </TASK>
[   61.414164][ T3590] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.433267][ T5008] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[   61.443552][ T5008] FAULT_INJECTION: forcing a failure.
[   61.443552][ T5008] name failslab, interval 1, probability 0, space 0, times 0
[   61.443672][ T5008] CPU: 1 UID: 0 PID: 5008 Comm: syz.4.360 Not tainted syzkaller #0 PREEMPT(lazy) 
[   61.443699][ T5008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   61.443713][ T5008] Call Trace:
[   61.443720][ T5008]  <TASK>
[   61.443728][ T5008]  __dump_stack+0x1d/0x30
[   61.443755][ T5008]  dump_stack_lvl+0x95/0xd0
[   61.443788][ T5008]  dump_stack+0x15/0x1b
[   61.443810][ T5008]  should_fail_ex+0x262/0x280
[   61.443837][ T5008]  should_failslab+0x8c/0xb0
[   61.443869][ T5008]  kmem_cache_alloc_lru_noprof+0x7f/0x3f0
[   61.443971][ T5008]  ? sock_alloc_inode+0x36/0xf0
[   61.443999][ T5008]  ? sock_alloc_inode+0x36/0xf0
[   61.444027][ T5008]  ? selinux_socket_create+0xfd/0x180
[   61.444118][ T5008]  ? __pfx_sock_alloc_inode+0x10/0x10
[   61.444147][ T5008]  sock_alloc_inode+0x36/0xf0
[   61.444177][ T5008]  alloc_inode+0x40/0x170
[   61.444197][ T5008]  __sock_create+0x121/0x580
[   61.444227][ T5008]  ? trace_event_raw_event_sys_enter+0x195/0x1f0
[   61.444267][ T5008]  __sys_socket+0xaf/0x180
[   61.444305][ T5008]  __x64_sys_socket+0x3f/0x50
[   61.444380][ T5008]  x64_sys_call+0x246e/0x2550
[   61.444408][ T5008]  do_syscall_64+0x112/0x360
[   61.444444][ T5008]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   61.444469][ T5008] RIP: 0033:0x7fce74f9e159
[   61.444486][ T5008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   61.444556][ T5008] RSP: 002b:00007fce739f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[   61.444579][ T5008] RAX: ffffffffffffffda RBX: 00007fce75225fa0 RCX: 00007fce74f9e159
[   61.444595][ T5008] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010
[   61.444618][ T5008] RBP: 00007fce7503503b R08: 0000000000000000 R09: 0000000000000000
[   61.444632][ T5008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   61.444646][ T5008] R13: 00007fce75226038 R14: 00007fce75225fa0 R15: 00007fff9450b3a8
[   61.444666][ T5008]  </TASK>
[   61.444674][ T5008] socket: no more sockets
[   61.641172][ T3590] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.388428][ T5000] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.388465][ T5000] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.388650][ T5000] bridge_slave_0: entered allmulticast mode
[   62.389072][ T5000] bridge_slave_0: entered promiscuous mode
[   62.420657][ T5000] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.420694][ T5000] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.420781][ T5000] bridge_slave_1: entered allmulticast mode
[   62.436747][ T5000] bridge_slave_1: entered promiscuous mode
[   62.460721][ T5000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.462051][ T5000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.493278][ T5000] team0: Port device team_slave_0 added
[   62.507677][ T5000] team0: Port device team_slave_1 added
[   62.529167][ T5000] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.529182][ T5000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.529284][ T5000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.534856][ T3590] bridge_slave_1: left allmulticast mode
[   62.534914][ T3590] bridge_slave_1: left promiscuous mode
[   62.534997][ T3590] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.568286][ T3590] bridge_slave_0: left allmulticast mode
[   62.568309][ T3590] bridge_slave_0: left promiscuous mode
[   62.568406][ T3590] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.693534][ T5061] loop4: detected capacity change from 0 to 512
[   62.701344][ T5061] /dev/loop4: Can't open blockdev
[   62.739914][ T5016] loop5: detected capacity change from 0 to 512
[   62.757698][ T5016] EXT4-fs: Ignoring removed bh option
[   62.763112][ T3546] smc: removing ib device syz0
[   62.776229][ T3590] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   62.786330][ T3590] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   62.792604][ T5016] EXT4-fs error (device loop5): ext4_iget_extra_inode:5210: inode #15: comm syz.5.362: corrupted in-inode xattr: e_value size too large
[   62.792644][ T5016] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   62.801461][    C0] EXT4-fs (loop5): error count since last fsck: 1
[   62.801483][    C0] EXT4-fs (loop5): initial error at time 1789433156: ext4_iget_extra_inode:5210: inode 15
[   62.801535][    C0] EXT4-fs (loop5): last error at time 1789433156: ext4_iget_extra_inode:5210: inode 15
[   62.826586][ T3590] bond0 (unregistering): Released all slaves
[   62.856858][ T5000] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.856896][ T5000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.856924][ T5000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.866080][ T5016] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.362: couldn't read orphan inode 15 (err -117)
[   62.866120][ T5016] loop5: lost filesystem error report for type 5 error -117
[   63.034243][ T5000] hsr_slave_0: entered promiscuous mode
[   63.037372][ T5000] hsr_slave_1: entered promiscuous mode
[   63.037662][ T5000] debugfs: 'hsr0' already exists in 'hsr'
[   63.037674][ T5000] Cannot create hsr debugfs directory
[   63.228881][ T5090] loop4: detected capacity change from 0 to 512
[   63.240694][ T5090] EXT4-fs (loop4): 1 truncate cleaned up
[   63.246083][ T5090] EXT4-fs error (device loop4): ext4_find_dest_de:2052: inode #2: block 13: comm syz.4.371: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0
[   63.251937][   T29] kauditd_printk_skb: 94 callbacks suppressed
[   63.251952][   T29] audit: type=1400 audit(1789433156.633:752): avc:  denied  { write } for  pid=5089 comm="syz.4.371" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   63.284107][   T29] audit: type=1400 audit(1789433156.663:753): avc:  denied  { write } for  pid=5089 comm="syz.4.371" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   63.284140][   T29] audit: type=1400 audit(1789433156.663:754): avc:  denied  { write } for  pid=5089 comm="syz.4.371" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   63.284196][   T29] audit: type=1400 audit(1789433156.663:755): avc:  denied  { rename } for  pid=5089 comm="syz.4.371" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   63.284297][   T29] audit: type=1400 audit(1789433156.663:756): avc:  denied  { read write } for  pid=5089 comm="syz.4.371" name="file1" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   63.284388][   T29] audit: type=1400 audit(1789433156.663:757): avc:  denied  { open } for  pid=5089 comm="syz.4.371" path="/65/file1/file1" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   63.284411][   T29] audit: type=1400 audit(1789433156.663:758): avc:  denied  { map } for  pid=5089 comm="syz.4.371" path="/65/file1/file1" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   63.549379][ T3590] hsr_slave_0: left promiscuous mode
[   63.549692][ T3590] hsr_slave_1: left promiscuous mode
[   63.550152][ T3590] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   63.550165][ T3590] batman_adv: batadv0: Removing interface: batadv_slave_0
[   63.550474][ T3590] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   63.550486][ T3590] batman_adv: batadv0: Removing interface: batadv_slave_1
[   63.553380][ T3590] veth1_macvtap: left promiscuous mode
[   63.553401][ T3590] veth0_macvtap: left promiscuous mode
[   63.553432][ T3590] veth1_vlan: left promiscuous mode
[   63.553522][ T3590] veth0_vlan: left promiscuous mode
[   63.676935][ T3590] team0 (unregistering): Port device team_slave_1 removed
[   63.681460][ T3590] team0 (unregistering): Port device team_slave_0 removed
[   63.697376][ T5094] FAULT_INJECTION: forcing a failure.
[   63.697376][ T5094] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   63.697477][ T5094] CPU: 1 UID: 0 PID: 5094 Comm: syz.6.372 Not tainted syzkaller #0 PREEMPT(lazy) 
[   63.697503][ T5094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   63.697516][ T5094] Call Trace:
[   63.697523][ T5094]  <TASK>
[   63.697531][ T5094]  __dump_stack+0x1d/0x30
[   63.697557][ T5094]  dump_stack_lvl+0x95/0xd0
[   63.697635][ T5094]  dump_stack+0x15/0x1b
[   63.697725][ T5094]  should_fail_ex+0x262/0x280
[   63.697751][ T5094]  should_fail+0xb/0x20
[   63.697773][ T5094]  should_fail_usercopy+0x1a/0x20
[   63.697799][ T5094]  _copy_from_iter+0xcc/0xe70
[   63.697859][ T5094]  ? __alloc_skb+0x516/0x6f0
[   63.697891][ T5094]  ? __alloc_skb+0x209/0x6f0
[   63.697971][ T5094]  netlink_sendmsg+0x4a4/0x6f0
[   63.698020][ T5094]  ? __pfx_netlink_sendmsg+0x10/0x10
[   63.698052][ T5094]  ____sys_sendmsg+0x532/0x580
[   63.698078][ T5094]  ___sys_sendmsg+0x195/0x1e0
[   63.698170][ T5094]  __x64_sys_sendmsg+0xd4/0x160
[   63.698195][ T5094]  x64_sys_call+0x22ab/0x2550
[   63.698222][ T5094]  do_syscall_64+0x112/0x360
[   63.698257][ T5094]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   63.698364][ T5094] RIP: 0033:0x7fb9f8f5e159
[   63.698380][ T5094] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   63.698399][ T5094] RSP: 002b:00007fb9f79b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   63.698420][ T5094] RAX: ffffffffffffffda RBX: 00007fb9f91e5fa0 RCX: 00007fb9f8f5e159
[   63.698435][ T5094] RDX: 0000000000048084 RSI: 0000200000000180 RDI: 0000000000000003
[   63.698449][ T5094] RBP: 00007fb9f79b7090 R08: 0000000000000000 R09: 0000000000000000
[   63.698601][ T5094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   63.698614][ T5094] R13: 00007fb9f91e6038 R14: 00007fb9f91e5fa0 R15: 00007ffdb4074438
[   63.698633][ T5094]  </TASK>
[   63.936383][ T5088] loop5: detected capacity change from 0 to 512
[   63.977009][ T5088] EXT4-fs: Ignoring removed bh option
[   63.989818][ T5088] EXT4-fs error (device loop5): ext4_iget_extra_inode:5210: inode #15: comm syz.5.370: corrupted in-inode xattr: e_value size too large
[   63.989988][ T5088] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   63.991490][ T5088] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.370: couldn't read orphan inode 15 (err -117)
[   63.991658][ T5088] loop5: lost filesystem error report for type 5 error -117
[   64.016599][ T5098] loop6: detected capacity change from 0 to 512
[   64.054682][ T5088] netlink: 100 bytes leftover after parsing attributes in process `syz.5.370'.
[   64.054784][ T5088] netlink: 36 bytes leftover after parsing attributes in process `syz.5.370'.
[   64.054813][ T5088] netlink: 8 bytes leftover after parsing attributes in process `syz.5.370'.
[   64.074194][ T3546] EXT4-fs error (device loop4): ext4_validate_block_bitmap:445: comm kworker/u8:38: bg 0: block 465: padding at end of block bitmap is not set
[   64.074413][ T3546] EXT4-fs (loop4): Delayed block allocation failed for inode 13 at logical offset 2 with max blocks 2 with error 28
[   64.074438][ T3546] EXT4-fs (loop4): This should not happen!! Data will be lost
[   64.074438][ T3546] 
[   64.074451][ T3546] EXT4-fs (loop4): Total free blocks count 0
[   64.074513][ T3546] EXT4-fs (loop4): Free/Dirty block details
[   64.074524][ T3546] EXT4-fs (loop4): free_blocks=0
[   64.074537][ T3546] EXT4-fs (loop4): dirty_blocks=2
[   64.074628][ T3546] EXT4-fs (loop4): Block reservation details
[   64.074640][ T3546] EXT4-fs (loop4): i_reserved_data_blocks=2
[   64.175091][   T29] audit: type=1400 audit(1789433157.563:759): avc:  denied  { read } for  pid=5102 comm="syz.5.376" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   64.185843][ T5098] ext4 filesystem being mounted at /35/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   64.204392][   T29] audit: type=1400 audit(1789433157.573:760): avc:  denied  { write } for  pid=5097 comm="syz.6.374" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   64.214675][   T29] audit: type=1400 audit(1789433157.593:761): avc:  denied  { write } for  pid=5097 comm="syz.6.374" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   64.651261][ T5122] loop5: detected capacity change from 0 to 512
[   64.656232][ T5122] EXT4-fs: Ignoring removed nobh option
[   64.701455][ T4159] EXT4-fs error (device loop6): ext4_lookup:1787: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816
[   64.701727][ T4159] EXT4-fs error (device loop6): ext4_lookup:1787: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816
[   64.713571][ T5122] ext4 filesystem being mounted at /53/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   64.778915][ T5131] loop5: detected capacity change from 0 to 512
[   64.969281][ T5134] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.969315][ T5134] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.969374][ T5134] bridge_slave_0: entered allmulticast mode
[   64.969909][ T5134] bridge_slave_0: entered promiscuous mode
[   64.971118][ T5134] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.971148][ T5134] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.971202][ T5134] bridge_slave_1: entered allmulticast mode
[   64.971647][ T5134] bridge_slave_1: entered promiscuous mode
[   64.982192][ T5134] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.983151][ T5134] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.993100][ T5134] team0: Port device team_slave_0 added
[   64.994315][ T5134] team0: Port device team_slave_1 added
[   65.004659][ T5134] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.004678][ T5134] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.004707][ T5134] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.005382][ T5134] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.005392][ T5134] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.005473][ T5134] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.022587][ T5134] hsr_slave_0: entered promiscuous mode
[   65.022868][ T5134] hsr_slave_1: entered promiscuous mode
[   65.023150][ T5134] debugfs: 'hsr0' already exists in 'hsr'
[   65.023163][ T5134] Cannot create hsr debugfs directory
[   65.675858][ T5078] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   65.681553][ T5134] netdevsim netdevsim8 netdevsim0: renamed from eth0
[   65.702497][ T5134] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   65.702877][ T5000] netdevsim netdevsim7 netdevsim0: renamed from eth0
[   65.712992][ T5000] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   65.713783][ T5134] netdevsim netdevsim8 netdevsim1: renamed from eth1
[   65.730327][ T5152] netlink: 8 bytes leftover after parsing attributes in process `syz.4.388'.
[   65.746341][ T5134] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   65.746694][ T5000] netdevsim netdevsim7 netdevsim1: renamed from eth1
[   65.775264][ T5000] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   65.775837][ T5134] netdevsim netdevsim8 netdevsim2: renamed from eth2
[   65.783337][ T5134] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   65.786346][ T5134] netdevsim netdevsim8 netdevsim3: renamed from eth3
[   65.823278][ T5134] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   65.824257][ T5000] netdevsim netdevsim7 netdevsim2: renamed from eth2
[   65.829841][ T5000] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   65.831182][ T5000] netdevsim netdevsim7 netdevsim3: renamed from eth3
[   65.835667][ T5000] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   65.865261][ T5158] Illegal XDP return value 1417158866 on prog  (id 57) dev syz_tun, expect packet loss!
[   65.893712][ T5159] nfs4: Unknown parameter 'eo'
[   65.909626][ T5158] netlink: 16 bytes leftover after parsing attributes in process `syz.0.391'.
[   65.909652][ T5158] netlink: 16 bytes leftover after parsing attributes in process `syz.0.391'.
[   65.994538][ T5000] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.027446][ T5000] 8021q: adding VLAN 0 to HW filter on device team0
[   66.034124][ T5134] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.037003][ T3590] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.037036][ T3590] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.041723][ T3545] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.041754][ T3545] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.059643][ T5134] 8021q: adding VLAN 0 to HW filter on device team0
[   66.073112][ T3545] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.073150][ T3545] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.084402][ T3590] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.084434][ T3590] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.235409][ T5184] loop0: detected capacity change from 0 to 8192
[   66.559532][ T5000] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.578642][ T5134] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.689305][ T5234] netlink: 168 bytes leftover after parsing attributes in process `syz.4.394'.
[   66.789973][ T5253] loop0: detected capacity change from 0 to 512
[   66.821849][ T5253] EXT4-fs (loop0): 1 orphan inode deleted
[   66.822605][ T5253] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   66.822784][ T3546] EXT4-fs error (device loop0): ext4_release_dquot:7105: comm kworker/u8:38: Failed to release dquot type 1
[   66.863967][ T5262] netlink: 32 bytes leftover after parsing attributes in process `syz.4.398'.
[   66.957277][ T5279] loop5: detected capacity change from 0 to 512
[   66.959185][ T5279] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   66.969496][ T5134] veth0_vlan: entered promiscuous mode
[   66.975034][ T5134] veth1_vlan: entered promiscuous mode
[   66.986900][ T5134] veth0_macvtap: entered promiscuous mode
[   66.988753][ T5134] veth1_macvtap: entered promiscuous mode
[   66.994990][ T5134] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.000806][ T5134] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.005778][ T5279] EXT4-fs (loop5): 1 truncate cleaned up
[   67.053535][ T5134] ==================================================================
[   67.053567][ T5134] BUG: KCSAN: data-race in __follow_mount_rcu / d_set_mounted
[   67.053601][ T5134] 
[   67.053607][ T5134] read to 0xffff888100445180 of 4 bytes by task 2982 on cpu 0:
[   67.053623][ T5134]  __follow_mount_rcu+0x156/0x2a0
[   67.053646][ T5134]  step_into_slowpath+0x30c/0x4c0
[   67.053668][ T5134]  link_path_walk+0x947/0xdd0
[   67.053689][ T5134]  path_lookupat+0x53/0x4c0
[   67.053708][ T5134]  filename_lookup+0x18f/0x390
[   67.053729][ T5134]  do_readlinkat+0x74/0x2f0
[   67.053751][ T5134]  __x64_sys_readlink+0x47/0x60
[   67.053772][ T5134]  x64_sys_call+0x1d41/0x2550
[   67.053796][ T5134]  do_syscall_64+0x112/0x360
[   67.053826][ T5134]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   67.053846][ T5134] 
[   67.053851][ T5134] write to 0xffff888100445180 of 4 bytes by task 5134 on cpu 1:
[   67.053866][ T5134]  d_set_mounted+0xff/0x160
[   67.053887][ T5134]  get_mountpoint+0x197/0x370
[   67.053911][ T5134]  attach_recursive_mnt+0x11a/0x1700
[   67.053935][ T5134]  graft_tree+0xf0/0x100
[   67.053958][ T5134]  do_loopback+0x247/0x480
[   67.053988][ T5134]  path_mount+0x3ea/0xb90
[   67.054017][ T5134]  __se_sys_mount+0x28c/0x2e0
[   67.054034][ T5134]  __x64_sys_mount+0x67/0x80
[   67.054051][ T5134]  x64_sys_call+0xc3b/0x2550
[   67.054075][ T5134]  do_syscall_64+0x112/0x360
[   67.054103][ T5134]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   67.054122][ T5134] 
[   67.054125][ T5134] Reported by Kernel Concurrency Sanitizer on:
[   67.054135][ T5134] CPU: 1 UID: 0 PID: 5134 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(lazy) 
[   67.054159][ T5134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   67.054171][ T5134] ==================================================================
[   67.125227][ T3545] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.126523][ T3545] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.127259][ T3545] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.127388][ T3545] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.285987][ T5000] veth0_vlan: entered promiscuous mode
[   67.303871][ T5000] veth1_vlan: entered promiscuous mode
[   67.363491][ T5000] veth0_macvtap: entered promiscuous mode
[   67.372165][ T5000] veth1_macvtap: entered promiscuous mode
[   67.386310][ T5000] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.392514][ T5000] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.414660][ T3548] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.414901][ T3548] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.414944][ T3548] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.415037][ T3548] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.702258][ T3021] 8021q: adding VLAN 0 to HW filter on device eth9
[   67.807310][ T3021] 8021q: adding VLAN 0 to HW filter on device eth10
[   67.905781][ T3021] 8021q: adding VLAN 0 to HW filter on device eth11
[   68.241745][ T3021] 8021q: adding VLAN 0 to HW filter on device eth12
[   68.312883][   T29] kauditd_printk_skb: 53 callbacks suppressed
[   68.312906][   T29] audit: type=1400 audit(1789433161.693:814): avc:  denied  { write } for  pid=5416 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   68.343449][   T29] audit: type=1400 audit(1789433161.713:815): avc:  denied  { write } for  pid=5427 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   68.419093][   T29] audit: type=1400 audit(1789433161.803:816): avc:  denied  { write } for  pid=5429 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   68.447143][   T29] audit: type=1400 audit(1789433161.823:817): avc:  denied  { write } for  pid=5440 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   68.644214][   T29] audit: type=1400 audit(1789433162.033:818): avc:  denied  { write } for  pid=5449 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   68.677268][   T29] audit: type=1400 audit(1789433162.053:819): avc:  denied  { write } for  pid=5460 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   68.787656][   T29] audit: type=1400 audit(1789433162.173:820): avc:  denied  { write } for  pid=5464 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   68.817353][   T29] audit: type=1400 audit(1789433162.193:821): avc:  denied  { write } for  pid=5475 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   68.927793][   T29] audit: type=1400 audit(1789433162.313:822): avc:  denied  { write } for  pid=5479 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   68.957250][   T29] audit: type=1400 audit(1789433162.333:823): avc:  denied  { write } for  pid=5490 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   68.981639][ T3547] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.042216][ T3547] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.076542][ T3547] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.126757][ T3547] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.222074][ T3547] bridge_slave_1: left allmulticast mode
[   69.222095][ T3547] bridge_slave_1: left promiscuous mode
[   69.222206][ T3547] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.222746][ T3547] bridge_slave_0: left allmulticast mode
[   69.222823][ T3547] bridge_slave_0: left promiscuous mode
[   69.223022][ T3547] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.295486][ T3547] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   69.296639][ T3547] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   69.297419][ T3547] bond0 (unregistering): Released all slaves
[   69.341366][ T3547] tipc: Left network mode
[   69.343475][ T3547] hsr_slave_0: left promiscuous mode
[   69.344296][ T3547] hsr_slave_1: left promiscuous mode
[   69.344734][ T3547] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   69.344747][ T3547] batman_adv: batadv0: Removing interface: batadv_slave_0
[   69.349111][ T3547] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   69.349142][ T3547] batman_adv: batadv0: Removing interface: batadv_slave_1
[   69.359841][ T3547] veth1_macvtap: left promiscuous mode
[   69.359915][ T3547] veth0_macvtap: left promiscuous mode
[   69.360004][ T3547] veth1_vlan: left promiscuous mode
[   69.360042][ T3547] veth0_vlan: left promiscuous mode
[   69.484594][ T3547] team0 (unregistering): Port device team_slave_1 removed
[   69.487647][ T3547] team0 (unregistering): Port device team_slave_0 removed
[   69.531187][ T3021] 8021q: adding VLAN 0 to HW filter on device eth13
[   69.659947][ T3021] 8021q: adding VLAN 0 to HW filter on device eth14
[   69.766807][ T3547] IPVS: stop unused estimator thread 0...
[   69.802633][ T3021] 8021q: adding VLAN 0 to HW filter on device eth15
[   69.924509][ T3021] 8021q: adding VLAN 0 to HW filter on device eth16
[   73.332327][   T29] kauditd_printk_skb: 59 callbacks suppressed
[   73.332342][   T29] audit: type=1400 audit(1789433166.713:883): avc:  denied  { write } for  pid=5950 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   73.443756][   T29] audit: type=1400 audit(1789433166.833:884): avc:  denied  { write } for  pid=5954 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   73.478400][   T29] audit: type=1400 audit(1789433166.843:885): avc:  denied  { write } for  pid=5965 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   73.576276][   T29] audit: type=1400 audit(1789433166.963:886): avc:  denied  { write } for  pid=5969 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   73.607163][   T29] audit: type=1400 audit(1789433166.983:887): avc:  denied  { write } for  pid=5980 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   73.719429][   T29] audit: type=1400 audit(1789433167.103:888): avc:  denied  { write } for  pid=5985 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   73.764624][   T29] audit: type=1400 audit(1789433167.153:889): avc:  denied  { write } for  pid=5996 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   73.900624][   T29] audit: type=1400 audit(1789433167.283:890): avc:  denied  { write } for  pid=6000 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   73.928396][   T29] audit: type=1400 audit(1789433167.303:891): avc:  denied  { write } for  pid=6011 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   74.032511][   T29] audit: type=1400 audit(1789433167.413:892): avc:  denied  { write } for  pid=6015 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1