last executing test programs:

6.399612651s ago: executing program 0 (id=315):
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000680)={0x0, 0xbd, 0x40000}, 0x20)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a3000000000080011400000000328000480080002400000001208000140"], 0xac}, 0x1, 0x0, 0x0, 0x4008805}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, &(0x7f0000000fc0)="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", 0x1000, 0x200)
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc, 0x4}, 0x0, 0x0, 0x0, 0x2, 0xfff, 0xa001, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat(0xffffffffffffff9c, 0x0, 0x442, 0x8c)
perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x2, 0x9, 0xd5, 0xfd, 0x0, 0x3ff, 0x16048, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x2, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x2, 0x5, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x1)
close(0x3)
capget(&(0x7f0000000140)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000180)={0x4, 0x9, 0x6, 0x8, 0x13, 0x7})
r3 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000080)={[{@data_err_ignore}, {@user_xattr}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nodiscard}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x3c}}, {@min_batch_time={'min_batch_time', 0x3d, 0x6}}]}, 0x1, 0x47a, &(0x7f00000006c0)="$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")
quotactl_fd$Q_GETINFO(r3, 0x0, 0x0, &(0x7f0000000240))
sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0xc050)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0)
sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000200)=ANY=[@ANYRESHEX=r1, @ANYRES16=0x0, @ANYRES32=r2], 0x228}, 0x1, 0x0, 0x0, 0x10}, 0x444)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x40010001)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x100000000000009, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x8312, 0x32, 0x43a1bd76, 0x7, 0x9, 0x200006, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0x7000000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="7529deb5c780659b1802c4a9b86adf3bb268d031206a728f0000feffff1d0000f905090000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/27], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f00000004c0)=ANY=[], &(0x7f0000000680)='syzkaller\x00'}, 0x94)
syz_open_dev$usbmon(&(0x7f0000000080), 0x480000000, 0x20082)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r5}, 0x4)

5.908134815s ago: executing program 0 (id=324):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0) (async)
r2 = socket$kcm(0xa, 0x1, 0x0)
r3 = socket$kcm(0xa, 0x5, 0x0) (async)
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_rxnfc={0x0, 0x2, 0x6, {0x10, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x20}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xd, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@multicast1, @private=0xa010101, 0x0, 0x5}, {0x0, @empty, 0x6, 0x5, [0x6, 0x9]}, 0xff, 0x3}}}) (async)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8916, &(0x7f0000000000)={r3}) (async)
r5 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8916, &(0x7f0000000000)={<r6=>r5}) (async)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8936, &(0x7f0000000000)={r5}) (async)
bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) (async)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
socket$kcm(0x21, 0x2, 0xa) (async)
sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000e"], 0x28}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYBLOB="3c000000108be57cea64c398307bdd430be52f4ce00c0587717b822881d6d9822dae400000000050bcfd7b090b2beb8c95bb493ea6f01c753e24769ac7e0fdaf445ee3fc524344135c24234bee74f749491f114c5a20960922e1c59a4c61f6108a58a416ce3ab3f86ce8f02a610b27ef3d591db20115a474711c38820eeb0f8095cab4a4a39b820c1890167437dd88025017", @ANYRES32=r7, @ANYBLOB="0100000000c000001c00128009000100626f6e64000000000c0002800500010001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) (async)
r8 = socket$kcm(0x10, 0x2, 0x0) (async)
r9 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'bond0\x00', <r10=>0x0}) (async)
r11 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r13 = dup2(r9, 0xffffffffffffffff) (async)
r14 = syz_open_procfs(0x0, &(0x7f0000000240)='projid_map\x00')
writev(r14, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1) (async)
ioctl$EVIOCGSND(r13, 0x8040451a, &(0x7f0000000c00)=""/240) (async)
sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r10, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r12], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x9}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)

5.781836179s ago: executing program 0 (id=326):
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0)
readv(r0, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x2)
syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x200)
timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r1, 0x107, 0x5, 0x0, 0x0)
unshare(0x22060600)
ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000080)={{0x5f, 0x5}, {0x4000000008}, 0x10000004, 0x5})
fcntl$lock(0xffffffffffffffff, 0x6, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FITRIM(r2, 0xc0185879, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000)

5.570801965s ago: executing program 0 (id=329):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00'})
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xcc, r2, 0x300, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x11, 0x3}, {0x8, 0x15, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0x1ff}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x2}, {0x8, 0x15, 0x9c}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20000000}, 0x805)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={<r4=>0x0, 0x27, "bfd9b8ddeb4ea1837b4168ede1a90068655bfeccf900848d102608cea9a2d09d0161208f39aa7b"}, &(0x7f0000000040)=0x2f)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000140)={r4, 0x8}, &(0x7f00000001c0)=0x8)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x400000000002000, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='vegas', 0x5)
getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, 0x0, 0x0)

4.268948051s ago: executing program 0 (id=334):
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000680)={0x0, 0xbd, 0x40000}, 0x20)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a3000000000080011400000000328000480080002400000001208000140"], 0xac}, 0x1, 0x0, 0x0, 0x4008805}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, &(0x7f0000000fc0)="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", 0x1000, 0x200)
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc, 0x4}, 0x0, 0x0, 0x0, 0x2, 0xfff, 0xa001, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat(0xffffffffffffff9c, 0x0, 0x442, 0x8c)
perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x2, 0x9, 0xd5, 0xfd, 0x0, 0x3ff, 0x16048, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x2, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x2, 0x5, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x1)
close(0x3)
capget(&(0x7f0000000140)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000180)={0x4, 0x9, 0x6, 0x8, 0x13, 0x7})
r3 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000080)={[{@data_err_ignore}, {@user_xattr}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nodiscard}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x3c}}, {@min_batch_time={'min_batch_time', 0x3d, 0x6}}]}, 0x1, 0x47a, &(0x7f00000006c0)="$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")
quotactl_fd$Q_GETINFO(r3, 0x0, 0x0, &(0x7f0000000240))
sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0xc050)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0)
sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000200)=ANY=[@ANYRESHEX=r1, @ANYRES16=0x0, @ANYRES32=r2], 0x228}, 0x1, 0x0, 0x0, 0x10}, 0x444)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x40010001)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x100000000000009, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x8312, 0x32, 0x43a1bd76, 0x7, 0x9, 0x200006, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0x7000000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="7529deb5c780659b1802c4a9b86adf3bb268d031206a728f0000feffff1d0000f905090000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/27], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f00000004c0)=ANY=[], &(0x7f0000000680)='syzkaller\x00'}, 0x94)
syz_open_dev$usbmon(&(0x7f0000000080), 0x480000000, 0x20082)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r5}, 0x4)

3.737801726s ago: executing program 4 (id=336):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x6c, r1, 0x9, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e26, 0x44, @loopback={0x5f0000005f000000}, 0x5}}, {0x1a, 0x2, @in6={0xa, 0x4e21, 0xfffffffc, @mcast2, 0x5}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000900)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x566, &(0x7f0000002080)="$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")
r2 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x9000)
fallocate(r2, 0x0, 0x0, 0x8800000)
r3 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21)
pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x5a00, 0x0, 0x3)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x8000, &(0x7f00000003c0))

3.484298203s ago: executing program 4 (id=338):
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x4060015)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8})
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0x9}, 0x2000, 0x0, 0x10000, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000180)={0x8, 0xff, 0x2, 0x8000, 0x10, "85bdcce51daec012"})
set_mempolicy(0x4005, 0x0, 0x4)
sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x4000)
perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x40, 0x400000, 0x0, 0x0, 0x0, 0xa0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x80, 0x28000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x1000, 0x3}, 0x2, 0x7, 0x10ffa, 0x0, 0x2, 0x4, 0x3, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$kcm(0x29, 0x2, 0x0)
r4 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0)
pwritev(r4, &(0x7f00000003c0)=[{&(0x7f0000000280)="11", 0x1}], 0x1, 0x4000001, 0x0)
sendfile(r3, r4, 0x0, 0x8000fb00)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000780)={[{@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@nodiscard}, {@noload}, {@delalloc}, {@mblk_io_submit}, {@commit}, {@noblock_validity}, {@lazytime}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x481, &(0x7f0000003380)="$eJzs3MtvFdUfAPDv3D54/9of4gMEqaKR+GhpecjCjUYTFpqY6ALjqraFVAo1tCZCiFYXuDQk7o3/hXGlG6NuNHGre0NCDDEBdTNm7szApdwpt/S2F3o/n2Tac2ZO7znfOXNuz8xpbwBdayj7kkRsjYjfImIgz95aYCj/dv3qhYm/r16YSCJN3/wzqZe7dvXCRFm0/LkteSZNi/yGJvVefCdifGZm6myRH5k//f7I3Lnzz0+fHj85dXLqzNjRo4cO7uk/Mna4LXFmcV3b9dHs7p3H3r70+sTxS+/+mNQijzsWxdEuQ/nZbeqpdlfWYdsa0klv45G9P99MN7sS6KSeiMi6q68+/geiJzbdODYQr37a0cYBqypN03SJd+WFFFjHkuh0C4DOKH/RZ/e/5bZGU497wpWX8hugLO7rxZYf6Y1antjbt+j+dmsb6x+KiOML/3yZbbFKzyEAABp9m81/nms2/6vFQ3miP/vyv2INZTAi/h8R2yPigYjYEREPRtTLPhwRjyyz/sUrJLfPf2qX7zq4FmTzvxeLta1b53+1sshgT5HbVo+/LzkxPTN1oDgn+6Nvw4npZGp0iTq+e+XXz6uONc7/si2rv5wLFu243LvoAd3k+Pz4SmJudOWTiF29zeJPolzGSSJiZ0Tsuss6pp/prTx25/iXUP2yLUu/ing67/+FWBR/Kalcnxx94cjY4ZGNMTN1YKS8Km730y8X36iqf0Xxt0HW/5ubXv834h9MNkbMnTt/qr5eO7esl8+GTlz8/bPKe5oi/mx4tXL9H9tWXP/9yVv1Hf3FgQ/H5+fPjkb0J6/dvn/s5quV+bJ8Fv/+fc3H//a4eSYejYjdEbEnIh7LbgqLtj8eEU9ExL4lTsIPLz/53h3ib9L/a7NWmsU/Wd3/f6VZ/0dj/y8/0XPq+2/uHP/GiKjq/0P11P5iTyvvf602cKXnDwAAAO4H+d/AJ7XhG+labXg4/xv+HbG5NjM7N//sidkPzkzm696D0Vcrn3QNNDwPHS2eDZf5sUX5g8Vz4y96NtXzwxOzM5OdDh663JaK8Z/5o6fTrQNWXRvW0YD7lPEP3cv4h+6UGP/Q1Yx/6F7Nxv/HlaWHv17VxgBryu9/6F4tjP+F/Fv1rAC4PzUb/wMdaAew9sz/oStV/m98bUX/8r/miX+LzzO8V9qz/hNRuyeasf4TvS1/mMUyEmkxv8/2bGhaptPvTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO3xXwAAAP//2Y/lXQ==")
chdir(&(0x7f0000000040)='./file0\x00')
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
lseek(r5, 0xfffffffffffffffc, 0x2)
r6 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r6, &(0x7f0000000180), 0x229ffa1c4ce5369, 0x0)

3.033901435s ago: executing program 0 (id=341):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
getsockopt$inet6_tcp_buf(r1, 0x6, 0x1c, &(0x7f0000000100)=""/172, &(0x7f00000001c0)=0xac)
ioprio_set$uid(0x3, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x3, 0x1000000000}, 0x1006a1, 0x5, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfa, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sched_setscheduler(r2, 0x3, &(0x7f00000002c0)=0x80000000)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmsg$inet6(r7, 0x0, 0x44010)
connect$tipc(r5, &(0x7f0000000380)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0x1}}, 0x10)
sendto$inet6(r7, &(0x7f0000000300)="8b", 0x1, 0x0, 0x0, 0x0)
shutdown(r7, 0x1)
mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x20000c4, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rf', @ANYRESHEX=r6, @ANYRESDEC=r7])
syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@data_err_ignore}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$eJzs281rHOUfAPDvTLKb9teX5FfrS2vVaBGCYtKkVXvwolQQqSjooR5jsi2h20aaKLYWm4p4EqSgZ/Eo+hd4E0HUk+DVkycpFO2lrafITGaSTbp5odlk0+7nAzP7PDPP7Dzfnbdnn2c3gI7Vn82SiJ0R8UdE9M5lFxfon3u5ef3i2K3rF8eSmJ198+8kL3fj+sWxsmi53Y4iM5BGpJ8kxU4Wmzp/4fRovV47V+SHps+8OzR1/sIz758ZPVU7VTs7cvTokcPDzz838mxL4sziurH/o8kD+155+8prYyeuvPPLd1l9dxbrG+Nolf4s8H9mc0vXPdnqnbXZrnzek8+T7jZXhjXriojscFXy6783umLh4PXGyx+3tXLAhsqeTT3Lr56ZBe5hSay1ZKXhngHc/coHffb9t5w2odmxZVx7ce4LUBb3zWKaW9MdaVGmMv/9tvX6I+LEzL9fZVNsUD8EAECjz8a+PF6Nnvjw1revZm2P3vk1aTyQv/6Zz3cXYyh9EfH/iNgTEfdFxN6IuD8iL/tgRDy0zvrc3v5Jr67zLVeUtf9eKMa2Frf/ytZf9HUVuV15/JXk5ES9dqj4TAai0pPlh1fYxw/Hfv98uXWN7b9syvZftgWLelztXtJBNz46PRqV9US94NrliP3dzeJP5kcCkojYFxH757da0wDP7jIx8dQ3B5YrtHr8K2jBONPs11l4M1n8M7Ek/lLSOD45cdv45NC2qNcODZVnxe1+/e3TN5bb/7rib4FrtbnXhuO/tEhf0jheO9Xa/d/h+Z9Wk7fyceZqMeb4wej09LnhiGpyPM9Xi7L58pGFbct8WT47/wcONr/+9xTbZPE/HBHZSfxIRDwaEY8VdX88Ip6IiIMrxPjzS6vHH2mbjv/liPGm97/583/J8T9/4XR5a1xYsmKi6/RP3y+3/7Ud/yN5aqBYkt//VtGsOt1NqnynnxsAAADcTdL8N/BJOjifTtPBwbnf8O+N/6X1yanpp09Ovnd2fO638n1RScuert6iP7Q+Ua8NJzPFO1aSY1GvjRR9xWV/6eGi3/iLru15fnBssj7e5tih0+1Y5vrP/NXV7toBG2x706Uj1U2vCNAGS8fR08XZS6+HmwHcq/xfGzrXKtd/uln1ADaf5z90rmbX/6UleWMBcG/y/IfO5fqHDpX+2O4aAG3k+Q8dadU/77cnsa1xSXXlwtUtUueWJbbqQckTEWUi3RL1kdigRLvvTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK3xXwAAAP//uIXZzg==")

2.840989511s ago: executing program 1 (id=343):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a128ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd0714", 0x173, 0x12, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x6}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e64000000080002400000000070000000160a0101000b000000000000010000000900020073797a31000000000900010073797a30000000004400038040000380140001007663616e3000000000000000000000001400010076657468315f746f5f626f6e64000000"], 0x110}}, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x2, 0xa, 0x5, 0x2, 0x2, 0x0, 0x70bd2c, 0x25dfdbfd}, 0x10}}, 0x40004)
r3 = syz_open_procfs(0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0x40505331, &(0x7f0000000180)={{0x2, 0x8}, {0x57, 0x7}, 0x6, 0x3, 0x49})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
r5 = accept(r3, &(0x7f00000004c0)=@alg, &(0x7f0000000540)=0x80)
sendmsg$inet(r5, &(0x7f00000008c0)={&(0x7f0000000580)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000880)=[{&(0x7f00000005c0)="24b23da802483e1e62bed1b4cd13f09ff84cd4e63f7f88e6286699268f77f9fffaaf8d505473caab322e888f298b193bdc038d1658b3c11c1f6bd3f5545c31dba148474fe05b6cf596a34fe5b6d6da250f2cee9326581cea0770a2ce02fb04002dd568f68a987f031cd88e44504b3b2479b28d29aa6407cf68bdbbb6ac5722ffc546311dc93323b8f4cecd96a0ce0c2b2bf89164e7fd2efb3456fa64c24fb69400f6fc2e3a8d2c88baf9cfcefbf1499dc343bba3d902b804aa4439786d882296296ae3ebcabb0d8fe331729fba66ff9499460b", 0xd3}, {&(0x7f00000006c0)="5bfc35c24d389c9547f53ff5d73bfd1b09b17c19ecfb067e2a14422b0b641ccfabcfdc07d9750cb58928798d80ac41fda30ee00842b5256badebb37e59222b6eef915e7e1a70bd81611203b66133458e78bdf2664be7b679f0435e809d9982a835d1f42f6b7584b8c20e39ce7196c2ade012989fe960d4a89f5759a22beffd76c45d26e8d5b4b3f00ac0a7b2c27121e81bd94dea48ea90fa7ad0ccaccd470e61b92164e2b4f4082dbc099ba8764f3ae6411022e51240eac3e77fd1", 0xbb}, {&(0x7f0000000780)="f71337938bf993dae89f1aaa106f86c2f5619682b1c907c1cee1677b86604a0c5a9bcc98b05fd5448b92347885ce71965874061e1cdc66cd04564d3ec0ad0d7cf24e4fcb8764f71cc1722a3b588fc33f1b6759c6ab5050961c0e69750308c9dc1ca849f5ac75759dde584f905089a683fecdd7b9245b9c007f531f685512e10d1278f2f5454c5cef07782b1d8c5b1e4147f25d158aa083469a0ea2c95e7388d0789fc0a5103aee4463ffdf5943c535854e9274e4023f3b479264f5f0c8712645b1ac1878735ce615a23a7bc309974b2e373b94271cf7", 0xd6}], 0x3}, 0x20000000)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4, <r6=>0xffffffffffffffff}, 0x4)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8400, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x4, 0x0, 0x8, 0x7fff, 0x200002, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xf7ffffffffffffff, 0xffffffffffffffff, 0xa)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0)
msync(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x4)
setsockopt$inet_buf(r8, 0x0, 0x8008000000010, &(0x7f0000000100)="17000000", 0x4)
read$eventfd(r3, &(0x7f0000000000), 0x8)
openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)

2.598362898s ago: executing program 2 (id=347):
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r0)
getpid()
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x40010, 0xffffffffffffffff, 0x0)
r1 = io_uring_setup(0xaae, &(0x7f0000000300)={0x0, 0xbfffeffb, 0x800, 0x8000007, 0x12})
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x100, 0x0, 0x0, 0x8, 0x1, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
clock_gettime(0x6, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2300000000000000, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)

2.50068349s ago: executing program 3 (id=350):
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r0)
getpid()
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x40010, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x108, 0xc, 0x0, 0x1}, 0x50)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x2300000000000000, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)

1.320253903s ago: executing program 1 (id=351):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = gettid()
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000140))
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0)
readv(r2, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1)
r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x200)
syz_usb_disconnect(r3)
timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r4, 0x0)
ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000080)={{0x5f, 0x5}, {0x4000000008}, 0x10000004, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
getgroups(0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000040)='./file0\x00', 0x2000800, &(0x7f0000000080)=ANY=[@ANYRES64, @ANYRESOCT, @ANYRES64=0x0], 0x1, 0x296, &(0x7f0000000740)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000)

1.201383476s ago: executing program 4 (id=352):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r1=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRESDEC=r0, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYBLOB="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", @ANYRES64=r1], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x40)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20040010)
syz_emit_ethernet(0x46, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x3, &(0x7f00000001c0)=@framed, 0x0, 0x5, 0x0, 0x0, 0x0, 0x11}, 0x94)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
close(0xffffffffffffffff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f0000000000)='memory_hugetlb_accounting', 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, 0x0, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, 0x0, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90224fc602f0000000a0c0100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff)
eventfd2(0x0, 0x1)
r5 = socket$inet6(0xa, 0x800000000000002, 0x0)
r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x10b701)
ioctl$USBDEVFS_CLAIM_PORT(r6, 0x80045518, &(0x7f0000001340)=0x1)
setsockopt$inet6_udp_int(r5, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4)
sendmmsg$inet6(r5, &(0x7f0000001340)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x29}}, 0x1c, 0x0}}], 0x1, 0xc040)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)

1.053274231s ago: executing program 4 (id=353):
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000680)={0x0, 0xbd, 0x40000}, 0x20)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a3000000000080011400000000328000480080002400000001208000140"], 0xac}, 0x1, 0x0, 0x0, 0x4008805}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, &(0x7f0000000fc0)="7058bfcc2b932293a5b05297e3e8c328a3d6f3538a926a6b0f1c837b2981ddb9e3145906c51e934dd3aae2b264e84a1c630c5032d8f8c4e2b18b8953900e20a0b40a8f9be23c60fd9d5494351478f6952f5181b1bbb2d7326738d6d116838a009f1d3d3e38affc6f924691e67ec4e12b2d9a479727e5a07b9875ff88d5bd368b60faec257e2e272a581d7f601318bb9b09c2553b03a8b81a6a9dd203b4cd4b4b7c94b79392bdb80d2b143cfa4b652944feb371473e80fc276b948d755f18c39f5b61032986cf5f62a64cf5a0c4028cbc7f9e1a5e23410626c6f6d7af8ec291b76c882276ff5bf3013c27f5c18be39cf3fb1e4da74538ff593939da579eb1f4a144e86787d3d2dcc61596281e0c51bce431d4a494ba5ab4b6018928f6329acb3cb015a347c88f0c267c3f86084a5656073af698de86d8c036313adb25be7b37f219acceee4f8be6ce04ef655454c648b19054aa98b8b1f9b18980f01deec199c2e434685aa7a8ff13e50336bad69014691d314217e7adf60475985507da32a30503883919764b1f8560d442de6693c97696fa800b46d4ee1e4c6bb066945040f73ce602b73a7ae7cba0df47baf685f9c53ea07755eee59f13e054b2130d025ce00c740219ef8d1b19501d08c30d37ba0a17fd0611b077722f279291e5fa8009467f8f8a4785b4abbaf47e6932304f2f5f2c6a73da00ad4edf75328d3f54124091c1865c18ed74edb2f58dc9e608e3f46043997923cdd9ae0f885c14b651d26793f7b4b66f21446cd9bd5292b34477005a221e2aa3f906d7c2d1a8281781122957143bf75ded170308494fd0b87d9a864cf8968461f744214fa462c366974f73b8095021d62cdb459f61dc17d306b2ea3c99d887f2ed12130e2f687f603cb44af87d773808357bfbcaae574abaef244e061253ba12113a2ed111ea28d2ec87337d8125966348a6d18c73e0a0c5de8ae67048be98bd6912ad4f0476b05e3d808699e27cdeaf05eb54325a723a31d8ee2e8a7a530c2aff9008b38f50a6dd8044c21b050423843fd8a2ca4ca7f2a5feb51b1209d5ca8def3ece1658c7811d007c9aabf4e4fe0698b9bb7af3b22cd9a57e563f4532cd9b98e99c5846830329fecc8250c247c200f32d3c555c7dfdd9b8dd8ee7311213dab0286b32cf95012176d62e6ce3459529ffec0714eac669b3fa1d05247661e33c95ec713c4123a76e6a723bcb35601d5734d30a36e5cd80cfb85433a48dade4db31e09247288ad2496ed1ee9a523d204f82f938904eb671c9b792bb84ef1655bfe0f6b12c05897c0935271768b3e041099df70932c0763e7c993538c4d22cbd4e1541585b0c64fe8f86784dcaa4b1193f65682592533b3187ef52e9a4cb2593c65dfcefc9caaf7915647bf43112b36c82761e156988d22f0c714aba5815851069592ef6ee35fc0e86f53eac58f90b8c0508d7096ef59f8178a3f941d94b6b3aeceb37cc9bcea6c63adc015e63b3484cbd28b403ec764e461160b9d79a4dc8587377655c64e7ed63f859c2240d76bb5a988e5ce25fb039c73271a5365bd6571f95d74dcc7d467805bec63bafc7aad37ad0b1839f66c90b0ab0515fd27e64af84eb31e2e39393fa83d1a120e82b59441d06209dba4f99bb3e17c06e2c11b97ce0195559bc0a3877cdf2dbe0ead0c0e67343d6e3fefb7cd642f9a3bc740ffe3741384ebf47ad9583ddd6cb0cee4214f302ea2a5be1b9372337044170b4e6a32ca30651797754fbd29b6e3b394a671b032dc94158c79e2015696939b3820685ccc57ebda5ef2654b0a41c93a5c83c7dabe9580f2bba6aced6c1ed11dbaef51792c8f517b5270de5a5fdbff829932455291b3fd84069260d09d89e280a8bd8b6c0724b4d3067933d1c2cc65522d5dc9f704d974b1930a80cd99261ad75d52de2414949d75d723a273257c7ae0c502b3fd55db74e92c7bf2f7351ab3c1d7af4fa786e13ba4ddbe5eacd34097dd4af95c627af77186e373f1091d33baf2f07193e6c1ecd2e8bcf8ae49bdcb4eeefda0f564ea6e0065d6da7d0a22bc810e1046131a32309304720401f2345ac6bdf87a9701c8e760c59f62d7a1553952affb07bf0f9cf33cabca209440a6da6d6300b0723c37b25008a09c60b6c9c5200f7bd3a7d71c20ebff384cd279d1e9f91511b35e6c7d66276c6d7b09c932d3d51cc699a683bfafe9a6886c6cecd6548655ea653a630d22e5e3c487a48172dec11e2cd5e49e9f0783cc80934d6871e3c1a1c3b9d8c2343e96a629af0656c289d110f7aeb62afd9a6c5410866a51a6087a05acecf386f475121e0cc67daa8aafac1efe59b9679c249ee1b2e9566f6ad2dac9b802e3c463596c7bd3a513430de95c3546efc5d1e9a26dd74d21f2c73892dfed33d7ed59805ad2911eb80c3accd4d59244ab16675e37d2dd2dab420d660f103bfa8af35ab74d48ccfaee94b29d4970c3e5eec58f407c058efec8927fee7f5b5122b09bf0dfff0d1850c3bc483222e150341c48304dcd17fbd95423dd85e7833ebc77e20f1b598f2beee00a36a97c15b06611a6c28002421bd746c347969f9493f0e7e8e6b2524597b22beea06d1a6b91a45497f4a3724a7d691444de48568255c49e96277b231d003662a493ff158f09c22c06a51a2008e5a89eea10989bc43d94bf8974b07e9d280acd73c670771634f4fe66101645e0748eeb20dd867a32455143bc5b2b89a8958413b9e3e94d638387337eeaf9283c72f50776e60f733b798310e6daab5e5400d1ddff9bed536a3d30120c01ee2dc0a9c4c12b21b747c59a94f8a86c42c310ff5920a2872819d0e7db3a327a3be2e2167b598b78033516bbbd32413076c202e902efd1afb3a9625bc2c6976deda2e7ba00ff1d7a137101def1297122ae4e22fed6565e468a16e5a374df92243fae5e012fe0d24e81602a1e3afd136fb9e0c7d17eaef82870e94f9fabbfe775d9ff0e1fb8466c957ada7d6c421680cfa7037afb19c9db0ea378660e396c65b2485722455d08ec867de83a90bd2098840b418c6660a2581ce47da88ac73b4339149a15158467ba4a2b06dd009a2f616332fc39b50c336c93ac47885f2b45d24b52af562928c18c3bd7baff373d6ff5a3198fce5621fb6e496fe0843328493bd47517b274973c3f95946759172a2398f077003bcd60326bb5d16366c3f45e603490d1b4d3e8bf800d59f2e388eacefea5d3a85eb5bb9e9c99515f7a6dab83142ad2e499500af5b71a329386a623b02027b8b04406720d39ea4ef903568a1790cf6a712b50aa1853c455aa42e02e782a4961887b58efb4a37f87f2341ffcf08c53ebcf7fc6aa112ed697cc4a724047a0b774d7075ed3749e9eb85c2aa1889a46de9cceff444f4da750f626a722762b6b710bd7731135573f85f293a890a263f328864d5d63bd23e9febc7901a972a021f59b6a31c7417318276486987155321404d58d7992d94101b4fa3ead5cedb16d4d7e7fbf8c9bdd657b4156b4b16344051fd3226566e51c0bf6d5341e18f2b1bdfc43123fbd320b02a01cba9c5e158043bf466774baa8911fe23003a8b807a0a98bce396738e792a3695acd767acc59b9f7ce002b43cd3274ac0c8cd8fd7e826dbf7926f56b2dfa81946dacc0c6c83fb20e45795a08c7ad3ee1221493a85f2283e3928b7074714c9f7bee36822e1a60e2563c43aef6a27b2cb6b49ebde1523e210315eea872b67bc0e2700a180d48e7a58e6a6c91084df0feb21fca3b2bdaf9ccf51ccfbdc59aad943167dbca2bf2084fab2f59e892f21795c0f62ca1d39dc5d3bd094e2edc12a55c6ae7fc08bd595a260be49989ea1dae0882f1d1f2ea87e601cb085078836ca44fa52d603ce6b94363b5a4a0b50c857853d3638be771e1fbc800515f98c6094d38f0648dcee55435fac2965837b424fc552da6e9cb367d76e386bb801c80ee1524bc39c852d3fde9fbfc3b1462900a63ce7b2449f4b3eac20cc3778c665d4f2b8be48c90cff136ba56d2c73b9b8ca75d9025fbc6c3eafa5130291e8146ca4b2363005488d887f6bf5714b5475f5933f159f97ed1bf7ced1906c60e9af95a853f048e062f0c5964665903e7bf3eb3786d86037606b04bbd690f6e3ebe63131587db4dab1310b5437bb92766481057edfe61e9dbbabbf8941c51a1339aa2d857a5872db32a3c9ec41a19cf7c8914c8fd417bf437227e58f50a119ad2ebf86d6ebc4cc0ef1c837b74deb4ae9a07a4b7d1140535dbd482b30214c46f9d17b1fa63c50e46770c1c99d5d5144e5dbec345f9f34bf57976274195762b863cc81f79373d13b9b44f5b2078918bc9042522e5c1ffca2efae71530856b376a6bfa90fe6d6fef1fc1d90b6807efd1dff5ecf35b795b226128aab9b2b2e4b6a9e4f6e8dd97aa0dacd09814d96b3e107690834bff5b5b1593040d40d038904b255e1c8046fbd76aa4c6e55c8bd69700c4c639eec69d09eb111aef2c8aebc225d22aed1a6cbe0a01e3a036cd788b7f7754d798b72ac04478fd523ecb6fe7c75f5ba2e6cc91a48d6a40206dd8d65986729de4d2915543845c4bcc611b9edcf51d3fbe14fbdb44be23fc0e5f3fb730aa987c0773f4465e5d6e5c9b1a486e7531c3d16e57dd4f5565457d1195f074bb51cff3c975bab4020985f46328efaa5fa9822d9c8c9ad5eb566e33f1822380abcb72102fb6b23d274fc0059bb729e3067a5c84297cb88f8a11a4f78f37ddce83f910dc0b21072676c143529ba94aed53dff0333f8eb30c98a24b96eef7901de8adb74cf21cbb0dc9ecd7a496abde82405eb4cc06ad142a0480174f5b66d13eba249c7639b0bc9aaaca428efecba9374dd36a88513c873df218fe67b1dad0534532a4ed0dc669c1ca4e200dba7421b7d9bba885d61e63025e2354cd862ac6b22f4eec14a2f24ff0830e86d921efeac5ef604c8138ee3d16945802626ac8ca700525f904eefcc87438cab199f2ceaafd104008c73a6a9719ce299b197fabdf8bea3e592a198eafbb3dc75f2127dd9e94911cf2f39e7c4e12598937492eafc7b3c46978fea6b1458817674a95566fdb288abd66550c181410e96410af221f329eb1cb18e69bce3489a39f5770cc01eaefe35868adf3bd2b6afb7517ba6eb84320c2782e5de202c4bd0fe497b51d163925941423f4051195e23add968bf3f1cc4713cc27b8e12992d629deaf023670a76699e18f0870dabf29fa99da1467fa23b1172fb3606554880089247a17127b8d9347fbdc99e3e6a3f17bc7fb0095cf4d8ce5fa323919121dbe5d73b668cac6faff527a644a3123393bc7fda34dce7e6bb16cf03512bb17b4ca207f792d418753a6422b0823e20959768e3abe61c0b037266c8794e06fe195576e3726ed484b1bb753398a0c10d6105448a8177f9f00a3f81b03aae7c62fd19196b5d4f3ba3a4e94b8e1a92713a28c8a463b5348f486171bd313396dd9005e727e57c0abc96a8da7d075ac873e691d89eee90c6906cc869631a35c2223be712d7481798ae34e6292da54a5cada8ce8b0036e1899374096d4f1063453bab74ebd31fae322331dd4d2c170504135a9b91ce7ced63e3a043f3b5fbacd9a3977f135eb4dec75cda2e787811752f2ef285120a2d4cb690ea28976310f38dea6aef46dde437c91ac64518debaab638d62d4c224e64b311cfac05b513fee09e0aedcde3f61a7ca20977a5b994c778964f4255a6e32ee73af821ea98e8f71805ea5bdb13c4ae4868d5e27810d2050d6b0ec2e3e37ab304bd080efd4af63f4e2cfe50d6a352cf71395f79c69358679", 0x1000, 0x200)
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc, 0x4}, 0x0, 0x0, 0x0, 0x2, 0xfff, 0xa001, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat(0xffffffffffffff9c, 0x0, 0x442, 0x8c)
perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x2, 0x9, 0xd5, 0xfd, 0x0, 0x3ff, 0x16048, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x2, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x2, 0x5, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x1)
close(0x3)
capget(&(0x7f0000000140)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000180)={0x4, 0x9, 0x6, 0x8, 0x13, 0x7})
r3 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000080)={[{@data_err_ignore}, {@user_xattr}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nodiscard}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x3c}}, {@min_batch_time={'min_batch_time', 0x3d, 0x6}}]}, 0x1, 0x47a, &(0x7f00000006c0)="$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")
quotactl_fd$Q_GETINFO(r3, 0x0, 0x0, &(0x7f0000000240))
sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0xc050)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0)
sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000200)=ANY=[@ANYRESHEX=r1, @ANYRES16=0x0, @ANYRES32=r2], 0x228}, 0x1, 0x0, 0x0, 0x10}, 0x444)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x40010001)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x100000000000009, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x8312, 0x32, 0x43a1bd76, 0x7, 0x9, 0x200006, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0x7000000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="7529deb5c780659b1802c4a9b86adf3bb268d031206a728f0000feffff1d0000f905090000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/27], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f00000004c0)=ANY=[], &(0x7f0000000680)='syzkaller\x00'}, 0x94)
syz_open_dev$usbmon(&(0x7f0000000080), 0x480000000, 0x20082)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r5}, 0x4)

800.910128ms ago: executing program 2 (id=354):
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0)
readv(r0, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x2)
syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x200)
timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r1, 0x107, 0x5, 0x0, 0x0)
unshare(0x22060600)
ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000080)={{0x5f, 0x5}, {0x4000000008}, 0x10000004, 0x5})
fcntl$lock(0xffffffffffffffff, 0x6, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FITRIM(r2, 0xc0185879, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000)

543.466095ms ago: executing program 2 (id=355):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x100081, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x800, 0xffee, 0x200}})
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_opts(r2, 0x0, 0xd, 0x0, 0x0)
setsockopt$inet_opts(r2, 0x0, 0xc, 0x0, 0x0)
getsockopt$inet_opts(r2, 0x0, 0x400000000000009, 0x0, &(0x7f0000000080))
ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000280))
r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x0, 0x0, @buffer={0x2, 0x51, &(0x7f00000000c0)=""/81}, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x3}, 0x4)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
getsockopt$packet_int(r4, 0x107, 0x15, 0x0, &(0x7f0000001600))
getsockopt$CAN_RAW_JOIN_FILTERS(r3, 0x65, 0x6, &(0x7f00000002c0), &(0x7f0000000300)=0x4)
r5 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000013c0), 0x280282, 0x0)
readahead(r5, 0x80000001, 0x4)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4a0, 0x228, 0x348, 0xd0, 0x228, 0xd0, 0x408, 0x408, 0x408, 0x408, 0x408, 0x6, &(0x7f0000000140), {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}, 0x3, 0xe, [0x12, 0x5, 0x1, 0x2d, 0x26, 0x2, 0x9, 0x31, 0xd, 0x33, 0x1d, 0x1d, 0x3b, 0x13, 0x16, 0x3b], 0x2, 0x2, 0xffffffffffff0001}}}, {{@ip={@empty, @remote, 0xff, 0xffffff00, 'wlan0\x00', 'wlan0\x00', {}, {0x80}, 0xff, 0x2}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x21}}}, {{@ip={@multicast1, @broadcast, 0xff000000, 0xff000000, 'dvmrp1\x00', 'netdevsim0\x00', {0xff}, {}, 0xc, 0x0, 0x8}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x1, 0x4, [0x4e24, 0x4e24, 0x4e20, 0x4e24, 0x4e24, 0x4e24, 0x4e21, 0x4e22, 0x4e20, 0x4e23, 0x4e20, 0x4e24, 0x4e23, 0x4e21, 0x4e23], [0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1]}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x0, 0x6, 0x1], 0x0, 0xc}, {0x4, [0x0, 0x6, 0x2, 0x1, 0x2, 0x1], 0x3, 0x2}}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "b26b", 0x1}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500)
ioctl$TIOCCBRK(r3, 0x5428)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newchain={0x13e4, 0x64, 0x200, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0x9, 0xffe0}, {0x5, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x13a8, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x6}, @TCA_FW_ACT={0xd64, 0x4, [@m_police={0xd60, 0x17, 0x0, 0x0, {{0xb}, {0xcb0, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x10000000, 0x7, 0x3ff, 0x10, {0xfc, 0x1, 0xa17, 0x0, 0x1, 0x9}, {0x55, 0x2, 0x4, 0xbed, 0x0, 0x40}, 0xb15, 0x4, 0x40}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_AVRATE={0x8}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x9, 0xfffffffc, 0x76, 0x7ff, 0x426, 0x3, 0x9a, 0x3, 0xd, 0xfff, 0x0, 0x8, 0x8, 0x7, 0x6, 0x6, 0x3, 0x3, 0xffffffff, 0x9, 0xffff, 0x8, 0x0, 0x0, 0xd, 0x9, 0xffff, 0x2f6a7c1b, 0x10001, 0x8, 0x7, 0x3, 0x101, 0x100, 0x0, 0x3, 0x4, 0x0, 0xfffff8b5, 0x5, 0xec7c, 0x9, 0x2, 0x5, 0x117c9ad7, 0xfc6f, 0x4, 0x5, 0x347, 0x6, 0x1, 0x8000, 0x7fffffff, 0x4, 0x9, 0x0, 0x0, 0x10001, 0x2, 0x1, 0x720, 0xc88, 0x9d6, 0x10000, 0xfffffff6, 0x6, 0x80000000, 0xffffffff, 0xd, 0x6, 0x4, 0x4, 0x5, 0x767, 0x3, 0xba9, 0x10000, 0xfffffff8, 0x3, 0x4, 0x5, 0x3, 0x5, 0xe, 0xfffffff9, 0x9, 0x6, 0x100, 0x1, 0x1000, 0xfffff2e6, 0x400000, 0x4, 0x3, 0x400, 0x40, 0x0, 0x9, 0x4, 0x4, 0x6, 0x209c, 0x7, 0x1, 0x2, 0xffffffff, 0x0, 0x4, 0xf8000, 0x1, 0x100, 0x2, 0x0, 0x9, 0x6e7, 0x30, 0x101, 0x2, 0x7, 0x3, 0x4, 0xf3b0, 0xffffff57, 0x3f9, 0xfff, 0x2, 0xffff, 0x7fff, 0x5, 0x4, 0x3, 0x0, 0x2, 0x3, 0x3, 0x4, 0x3, 0x9, 0x7f, 0x2, 0x0, 0x6e8, 0x9, 0xe29a, 0xb6a, 0x7f, 0x8, 0x0, 0x1, 0xffffff00, 0x9, 0x7fffffff, 0x0, 0x101, 0x6, 0x7, 0x9, 0x0, 0x1, 0x4, 0x2, 0x0, 0x38, 0x3, 0x3, 0x10, 0x2, 0x1, 0x0, 0xfffffffe, 0x400, 0xa, 0x10000, 0x4, 0x80000001, 0x7, 0x4, 0x6, 0x7fffffff, 0xa8929fb, 0xfffffff8, 0xe09, 0x9f1, 0x4, 0xfffffff8, 0x9, 0xfff, 0x7, 0x8, 0x1ff800, 0x6, 0x7, 0xf63, 0x7, 0x69f, 0x0, 0x80000001, 0x78a, 0x8, 0x1, 0x3, 0xffff, 0x7, 0x4, 0xfffffffa, 0x6, 0x1, 0xffffe5e1, 0x4, 0xf, 0x7ba2000, 0x3, 0x71e8, 0x7, 0x0, 0xffff, 0xfffffcb7, 0x4, 0x8, 0x8000, 0x3, 0x1ff, 0x3, 0x7, 0x3, 0x4, 0x9357, 0x1, 0x9, 0x7, 0x7, 0xfffffffd, 0x6, 0x100, 0xfffffffa, 0x1, 0xa, 0xd, 0x81, 0xbaee, 0x0, 0x3, 0x3, 0x7, 0x3, 0x5, 0x9, 0x7f, 0x3ff, 0x2, 0xf, 0x8, 0x37, 0x379, 0x7]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x800, 0x1, 0x9, 0x6, 0x1, 0xa30, 0x7, 0x2, 0xe9f1, 0x0, 0x6, 0x2, 0x0, 0xb, 0x6, 0x2, 0x7, 0x5, 0x5, 0x4800000, 0x4, 0x3000000, 0xc9, 0x40, 0x1ff, 0x0, 0x8, 0x1000, 0x6, 0x12d030da, 0xf8, 0x0, 0xaca, 0x2, 0x4, 0x8, 0x6, 0x7ff, 0x7f, 0x0, 0x2, 0x0, 0xfffffe01, 0xa, 0x6, 0xfff, 0x2, 0x4, 0x5, 0x5b, 0x9, 0x0, 0x8000, 0x9, 0x94f, 0x3, 0xffffff4b, 0x4, 0x9316, 0x1000, 0x8, 0x3, 0x2, 0xfffffffe, 0xffffffff, 0x80000001, 0x1, 0x3, 0x4, 0x802, 0x8, 0x4, 0xfffffffe, 0x7, 0x6, 0x401, 0xff, 0x6, 0x183, 0x9, 0x8, 0x2f, 0x0, 0x6a, 0x2, 0x6, 0x6, 0xfffffff3, 0x3, 0x9, 0x3, 0x0, 0x401, 0x5, 0x6, 0xd, 0x8, 0x51d8dd2f, 0xde, 0x10, 0x6, 0x2, 0x3, 0x1005, 0x2, 0x7, 0x1, 0x9, 0xc27, 0x10000, 0x10000, 0x8, 0x6, 0x5, 0x1, 0xffffff8f, 0x1, 0x7, 0x6, 0x9, 0x0, 0x9, 0x36c, 0x1, 0x4, 0x3, 0xba8, 0x9, 0x7, 0x7, 0x8, 0x3, 0x1, 0x9, 0x4, 0x4, 0x0, 0x6, 0xf, 0x63, 0x40, 0xfffffffc, 0x22, 0x508, 0x5, 0xca, 0x8, 0x3, 0x1ff, 0x6, 0x5, 0x0, 0x2, 0x1, 0x3ff, 0x8, 0x3, 0x80000000, 0x8, 0x1, 0x5, 0x81, 0x2, 0x0, 0x7, 0x9, 0x4, 0x8, 0x8, 0x7fffffff, 0xabbe, 0x400, 0x7, 0x1ff, 0xb8c, 0x9, 0x7, 0x1, 0x1ff, 0x200, 0x800, 0x9, 0x1000, 0x0, 0x0, 0x200, 0x9, 0x8, 0x44e512d2, 0x9, 0xfffffff4, 0x10, 0x5, 0x0, 0x7, 0x3, 0xced, 0x4, 0xfffffffd, 0x9, 0x1, 0xa, 0x0, 0x6acf, 0x6, 0xfff, 0x2, 0x6, 0xfffffffa, 0x9, 0x9, 0x4, 0x0, 0x3708b54d, 0x80000000, 0x0, 0x40, 0xf, 0x7, 0x0, 0x9, 0x2, 0x7, 0x609, 0x0, 0x523, 0x81, 0x0, 0x7, 0x0, 0x7ed, 0x1, 0x0, 0x1, 0x9, 0x4, 0x6, 0x7, 0x3, 0x3, 0x7f, 0x8702, 0xfffffffd, 0x8001, 0x6, 0xfffffffe, 0xc, 0x0, 0x7, 0x9, 0x4, 0xce, 0x8, 0x0, 0xffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x6, 0xb, 0x36d7, 0x6, {0x5, 0x1, 0xd31, 0xffff, 0x0, 0x163}, {0x1, 0x0, 0x7fff, 0x5, 0x81}, 0x4aa, 0x7, 0x5}}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x1, 0xfa, 0x3, 0x9, 0x7, 0x8, 0x3, 0x3, 0x7, 0x101, 0x3, 0x401, 0x6, 0xffffffff, 0x1, 0x51d2, 0xc36b848c, 0x1, 0x2, 0xea25, 0x1, 0xfff, 0x1, 0x4c, 0x2, 0xc, 0xfffffff9, 0x5, 0x6, 0x7fff, 0x9e8d, 0x0, 0x6b6, 0x2, 0xfffffe00, 0x7fffffff, 0x8, 0x4, 0xfffff752, 0xc, 0x0, 0xb1d2, 0x1f6, 0x2, 0x0, 0x4, 0xff, 0x76, 0x2, 0x1, 0x1, 0x8, 0x8, 0x19, 0x1000, 0x520, 0x496c295b, 0xfff, 0x4, 0x8, 0xffffffff, 0xc0, 0x8a, 0x3, 0x9, 0x6, 0xfffffffa, 0x4, 0x7, 0x0, 0x0, 0x2, 0x10000, 0x3, 0x1, 0x4, 0x401, 0xc99, 0x5, 0x5, 0x5, 0x5, 0x503, 0x1, 0x10000, 0xc6, 0x6a0e, 0x8, 0x13c2, 0x39d, 0x5, 0xffffffff, 0x9, 0x0, 0xfffffffd, 0xa2, 0x1, 0x8, 0xffff1d50, 0x8, 0x6, 0x8, 0xf, 0x9, 0x1, 0x7, 0x10001, 0x8, 0xffffffff, 0xffffffff, 0x2, 0x9, 0x2d2c, 0x6, 0xa, 0x8, 0x1a, 0x0, 0x3, 0x5, 0x7, 0xad7fc3e7, 0x2, 0x1, 0x0, 0x81, 0x10000, 0x11b, 0x400, 0x1, 0x7fff, 0x10001, 0x29, 0x200, 0xfffffff7, 0x3, 0x10000, 0x9, 0x60000000, 0x1, 0x4, 0xffffffc6, 0x101, 0x9, 0x4, 0xc, 0x0, 0x8, 0x8000, 0x1, 0x33, 0x3, 0xa41, 0x7, 0x7fff, 0xc9, 0x7, 0x9, 0x5, 0x3, 0x43, 0x1, 0x7fffffff, 0xbb7, 0x6, 0x8, 0x2, 0x7ff, 0x3, 0xed70, 0xe, 0x10, 0xff, 0x3, 0x3, 0x400, 0xf7, 0x8a, 0x7, 0x4, 0x0, 0x8, 0xb, 0x6, 0x40, 0x0, 0xd, 0x8000, 0x3, 0x200, 0x2, 0x7, 0x1, 0x3, 0xc, 0x200, 0x326, 0x0, 0x2bc, 0x3, 0x6, 0x4, 0x2f, 0x3fe, 0x9, 0x0, 0x6, 0x1000, 0x5, 0xffffffff, 0xf, 0x5655, 0x1, 0x9, 0xa, 0xffff, 0x5, 0x8, 0x0, 0x0, 0xce400000, 0x3, 0x7, 0x4, 0x1, 0x20, 0x8, 0x3, 0x8, 0x5, 0x0, 0x5, 0x4f2, 0x8, 0x81, 0x5, 0x2, 0x35, 0x3, 0x7f, 0x6, 0x4, 0x80000000, 0x7aa, 0x2, 0x3, 0x2, 0x3, 0x8, 0x6, 0x4, 0xfff, 0x800, 0x7f, 0x5d48]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}]]}, {0x86, 0x6, "c5cb56ecd5c24962139d036481366c55a045ac1d5325de850d91c664f50c5072c138bbb615c7761b21fdb0e522b232f8037675d9879dceea13b60fdb8444711045d3c90bf5540f9a339d6647d5e4b7c3dc7a31f143f9a8a81b921ce6c2c12bfb819430d487095aeddb43a94d7905645a90ac2ff83528f3aaa22b86902b1444cd24ea"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_FW_ACT={0x190, 0x4, [@m_simple={0x18c, 0x3, 0x0, 0x0, {{0xb}, {0x94, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xa, 0x3, 'wlan0\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x7, 0x3, 0x3, 0x9, 0x1a9}}, @TCA_DEF_DATA={0x6, 0x3, '/\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x3, 0x6, 0xda921ffba0f964d7, 0x3ff, 0x2}}, @TCA_DEF_PARMS={0x18, 0x2, {0x7, 0x6, 0x1, 0x8001, 0xffffffff}}, @TCA_DEF_DATA={0x9, 0x3, 'icmp\x00'}, @TCA_DEF_DATA={0xe, 0x3, 'multiport\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x3, 0xffffffffeffffffd, 0xa, 0x2}}]}, {0xd0, 0x6, "0d34eb778d719bbd1c1ca562087b68d37dc7097b11a167ea8f29b255279e4f8af6678953530504957acdcc1bd7838c176e6fe1d382285aee9091f2620b14b027b6a93129cfbde720a64d22a468c6186bf6df35d8812e60e362fc35631d5c4695e99c6c99a401776b309d883d0477ab48a70a2001b7a07ad15728e581a3a5f3bf1f69b6a461cca0d95e746b1e9d5b2562b5dcf6503bd34b1b5b9a2ca28397226deadf2280fe83aa4b0054493340ad28f7200206eeffb0374c92f064dc74c3019a469c8f4fbbb9d57740e7655d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_FW_POLICE={0x4a8, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x20000000, 0xfffffffe, 0x6, 0x2, {0x7, 0x1, 0x9, 0x5, 0x8, 0x5}, {0x0, 0x0, 0x401, 0xecf6, 0x2, 0x3}, 0x2, 0x7, 0x6}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x481}, @TCA_POLICE_TBF={0x3c, 0x1, {0x101, 0x6, 0x7fffffff, 0x28, 0x80000000, {0x4, 0x1, 0x3, 0x1, 0x7f8, 0x7}, {0x7, 0x1, 0x2, 0x9, 0x6, 0xb}, 0x405b47, 0x80, 0x1}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0xffffff01, 0x0, 0x10, 0x6, 0x100000, 0x3f, 0x3, 0x40, 0xc424, 0x1, 0x6b422810, 0x75db, 0xfffff306, 0xffffff7f, 0xe, 0x7, 0x1000, 0x6, 0xffffe5ab, 0x8, 0x80, 0x2, 0x0, 0x8e, 0x10, 0x3, 0x1000, 0x7fffffff, 0x7, 0x1f24c3ce, 0xdf11, 0x0, 0x4, 0x6, 0x2, 0x7eb, 0x0, 0x8, 0x6, 0xdcf, 0xffffffff, 0x5, 0x2, 0x5, 0x500000, 0x5, 0x3, 0x9, 0x8, 0x3, 0x1, 0x0, 0x8, 0x2, 0x5, 0x9, 0x3, 0x40, 0xed, 0x10000, 0xffff, 0x1, 0x8, 0x8001, 0xfff, 0x9, 0x8001, 0x14, 0x7, 0x7fffffff, 0x2, 0x2, 0x1, 0x3, 0x9, 0x11e9e796, 0x6, 0x4, 0x10000, 0x1, 0x0, 0xfffffffe, 0xe19, 0x1, 0xfffff486, 0x5, 0x10, 0x20000, 0x7fffffff, 0xffff, 0x3, 0xc, 0x0, 0x4, 0x3, 0x363f, 0x0, 0x1, 0x3ff, 0x9, 0xfffff85c, 0x5, 0xfffffffc, 0xc170, 0xb6, 0x8, 0x7, 0xc, 0x5, 0x8, 0x8, 0x10c8fdd9, 0xfffffc00, 0x0, 0xfffffff8, 0xc, 0x9, 0xe, 0x8, 0x2663bf34, 0xfffffc00, 0x6, 0x1, 0x3, 0x7ff, 0x9, 0x2, 0x200, 0x9, 0xb, 0xa, 0x0, 0x0, 0x4, 0x400, 0x1, 0xae0d, 0x10000, 0xffff, 0x400, 0xd13b, 0x4, 0x1, 0x6, 0x2, 0x0, 0x40, 0xffff, 0x10, 0x8, 0x6, 0x5, 0x8, 0x7ff, 0x7, 0x4, 0x9, 0x744, 0x4, 0x3, 0x1, 0x2, 0x8, 0x6, 0x7fffffff, 0x0, 0x262, 0x7, 0x4, 0x1, 0x2, 0x1, 0x8, 0x6, 0x6, 0x10000, 0x120, 0x4, 0x3, 0x4, 0x0, 0x9, 0x6, 0xe0a, 0x51, 0xff80000, 0x1fe2, 0xbed, 0x0, 0x815e, 0x5f0, 0x5, 0x6, 0x6, 0x8, 0x9, 0x1f51, 0x951, 0x5, 0x0, 0xab6, 0xffffffc6, 0x5, 0x1, 0x0, 0x1, 0x100, 0x8, 0x5c50, 0xd, 0xfffffff9, 0x7f, 0x4, 0x3, 0x7, 0xe9, 0xdcb, 0x7, 0x68a, 0x5, 0x3df, 0x1, 0x0, 0x7, 0xfff, 0x8000, 0x1, 0x8000, 0x101, 0x1000, 0x3, 0x0, 0x80, 0xa4, 0x57, 0x2, 0xc903a81e, 0x9, 0xc00000, 0x3ce1, 0x0, 0xa19b, 0x71, 0xc9, 0x84b5, 0xa5, 0x2, 0x7, 0x1, 0xcfe1, 0x3ff, 0xfffffffd, 0x1f, 0x6]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xf}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10001}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_CHAIN={0x8, 0xb, 0x7}]}, 0x13e4}}, 0x4000010)

519.855636ms ago: executing program 3 (id=356):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1c}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x94}, 0x1, 0x0, 0x0, 0x840}, 0x4040080)

494.377796ms ago: executing program 3 (id=357):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x138}}, 0x844)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
r2 = epoll_create1(0x0)
r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
write$UHID_CREATE2(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a0000000000001000"/196], 0x119)
close_range(r2, 0xffffffffffffffff, 0x0)

456.444977ms ago: executing program 2 (id=358):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0xcf, 0x0, 0x0, 0x42a1, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6}]}}}, @IFLA_MTU={0xfffffffffffffdc2, 0x4, 0xb5}]}, 0x44}}, 0x0)
getgroups(0x6, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0xee00, 0xee00, <r1=>0xee00])
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x37, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3fffffff}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x5}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xb}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7fb}}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}}, @map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}]}, 0x0, 0x6, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000001}, 0x94)
r2 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r2, 0x107, 0x14, &(0x7f0000000000), 0x4)
sendmsg$kcm(r2, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1a, 0x100, 0x3, 0xa185, 0x12946, 0xffffffffffffffff, 0x4a40, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x3}, 0x50)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'sit0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0xfffffffc}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0xffffffc0}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x48801}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x4, 0x10, 0xb, 0x34028, r3, 0x2, '\x00', r5, 0xffffffffffffffff, 0x5, 0x0, 0x2, 0x7}, 0x50)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000001800010000000000000003001d01000008000e00", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="1500010000000000000000007721f5438b20ffdf03000000080009"], 0x50}, 0x1, 0x0, 0x0, 0xa8d0}, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f00000000c0)={[{@dioread_lock}, {@resgid={'resgid', 0x3d, r1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@nolazytime}, {@bsddf, 0x2e}, {@dax}, {@resuid}, {@lazytime}, {@grpid}], [], 0x2c}, 0x84, 0x504, &(0x7f0000000480)="$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")

455.115818ms ago: executing program 4 (id=359):
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000000))
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'wlan1\x00', 0x10})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$OCFS2_IOC_UNRESVSP(r0, 0x40305829, &(0x7f0000000080)={0x1, 0x2, 0x8, 0x7, 0xfffffffb, 0x6})
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0xa, &(0x7f00000000c0)=@raw=[@exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}}], &(0x7f0000000140)='syzkaller\x00', 0x5, 0x1e, &(0x7f0000000180)=""/30, 0x1e00, 0x22, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f00000001c0)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x2, 0x9, 0x80000001, 0x1}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000240)=[r0, r0], &(0x7f0000000280)=[{0x4, 0x2, 0xc, 0x3}, {0x0, 0x3, 0x10, 0x1}, {0x3, 0x3, 0xb, 0xb}], 0x10, 0x5}, 0x94)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x400002, 0x0)
ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f00000003c0)={'bond0\x00', 0x200})
socketpair$tipc(0x1e, 0x7, 0x0, &(0x7f0000000400)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$getown(r4, 0x9)
r6 = perf_event_open(&(0x7f0000000440)={0x5, 0x80, 0x3, 0xa, 0x4, 0x9, 0x0, 0x6, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x6, 0xa}, 0x10200, 0x103, 0x4, 0x5, 0x1, 0xffff, 0x5, 0x0, 0x1, 0x0, 0x4}, r5, 0xa, r0, 0x0)
accept4$llc(r0, 0x0, &(0x7f00000004c0), 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r6)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000540)={'team0\x00', <r7=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)=@ipv6_getaddrlabel={0x7c, 0x4a, 0x800, 0x70bd2c, 0x25dfdbfe, {0xa, 0x0, 0x1f, 0x0, r7, 0x7}, [@IFAL_ADDRESS={0x14, 0x1, @empty}, @IFAL_ADDRESS={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFAL_LABEL={0x8, 0x2, 0x2}, @IFAL_ADDRESS={0x14, 0x1, @empty}, @IFAL_ADDRESS={0x14, 0x1, @loopback}, @IFAL_LABEL={0x8, 0x2, 0x6}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x800)
mount_setattr(0xffffffffffffffff, &(0x7f0000000680)='./file0\x00', 0x100, &(0x7f00000006c0)={0xc, 0x0, 0x1c0000, {r0}}, 0x20)
ioctl$BTRFS_IOC_GET_FEATURES(r2, 0x80189439, &(0x7f0000000700))
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000740)={{0x1, 0x1, 0x18, <r8=>r1, {0xa}}, './file0\x00'})
r9 = openat$null(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r8, 0xc020f509, &(0x7f00000007c0)={r9, 0x8, 0xd9f, 0xc})
recvmmsg$unix(r8, &(0x7f0000002b80)=[{{&(0x7f0000000800)=@abs, 0x6e, &(0x7f0000001d80)=[{&(0x7f0000000880)=""/172, 0xac}, {&(0x7f0000000940)=""/193, 0xc1}, {&(0x7f0000000a40)=""/109, 0x6d}, {&(0x7f0000000ac0)=""/195, 0xc3}, {&(0x7f0000000bc0)=""/4, 0x4}, {&(0x7f0000000c00)=""/183, 0xb7}, {&(0x7f0000000cc0)=""/4096, 0x1000}, {&(0x7f0000001cc0)=""/153, 0x99}], 0x8, &(0x7f0000001e00)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000001e80)}, {&(0x7f0000001ec0)=""/103, 0x67}, {&(0x7f0000001f40)=""/231, 0xe7}, {&(0x7f0000002040)=""/168, 0xa8}, {&(0x7f0000002100)=""/198, 0xc6}, {&(0x7f0000002200)=""/248, 0xf8}], 0x6, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r10=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r11=>0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf0}}, {{&(0x7f0000002480)=@abs, 0x6e, &(0x7f0000002880)=[{&(0x7f0000002500)=""/246, 0xf6}, {&(0x7f0000002600)=""/184, 0xb8}, {&(0x7f00000026c0)=""/228, 0xe4}, {&(0x7f00000027c0)=""/146, 0x92}], 0x4, &(0x7f00000028c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}}, {{&(0x7f0000002980), 0x6e, &(0x7f0000002a80)=[{&(0x7f0000002a00)=""/105, 0x69}], 0x1, &(0x7f0000002ac0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [<r12=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [<r13=>0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}}], 0x4, 0x10142, &(0x7f0000002c80)={0x77359400})
socket$packet(0x11, 0x2, 0x300)
r14 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$KDGKBDIACR(r14, 0x4b4a, &(0x7f0000002cc0)=""/147)
ioctl$SIOCGETLINKNAME(r11, 0x89e0, &(0x7f0000002d80)={0x2})
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r13, 0x10e, 0x2, &(0x7f0000002e00)=0xf, 0x4)
ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f0000002e80)={'pimreg0\x00', &(0x7f0000002e40)=@ethtool_ringparam={0x11, 0x6, 0x2, 0x3, 0x6, 0x1, 0x6, 0x3, 0x1}})
setsockopt$bt_BT_CHANNEL_POLICY(r10, 0x112, 0xa, &(0x7f0000002ec0)=0x9ef, 0x4)
sendmsg$nl_route_sched(r9, &(0x7f0000002fc0)={&(0x7f0000002f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002f80)={&(0x7f0000002f40)=@getqdisc={0x38, 0x26, 0x8, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x4, 0xc}, {0x0, 0xfff2}, {0xffff, 0x6}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4081}, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)

443.507967ms ago: executing program 2 (id=360):
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xc8, 0x9, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x179}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x6}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_ETHER={0xa, 0x11, @local}, @IPSET_ATTR_ETHER={0xa, 0x11, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x79}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x8}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}]}, @IPSET_ATTR_ADT={0x1c, 0x8, 0x0, 0x1, [{0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'vlan1\x00'}}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4}, 0x20008004)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x7, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xfffffffd}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x10)

420.039058ms ago: executing program 2 (id=361):
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f00000004c0), 0x1, 0x436, &(0x7f0000001680)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40042, 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r2)
sendmsg$NFC_CMD_GET_SE(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r3, 0x4ea15a81ba351fdd, 0x70bd2a, 0x25dfdbff}, 0x14}}, 0x4000)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_STATUS(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r4, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008}, 0x20000005)
write(r1, &(0x7f0000000080)="c7", 0x5f)
sendfile(r1, r0, 0x0, 0x3ffff)
connect$netlink(r0, &(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x800}, 0xc)
sendfile(r1, r0, 0x0, 0x8000008)

419.583298ms ago: executing program 3 (id=362):
open$dir(&(0x7f0000000040)='./file0\x00', 0x400, 0x146)
syz_open_procfs(0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf41b8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x8, 0x9, 0x6, 0x6, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xa)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
r1 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000040)={{{@in=@broadcast, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e23, 0x0, 0xffff, 0x8000, 0x2}, {0x0, 0x1, 0x0, 0x0, 0x95, 0xfffffffffffffffa, 0x0, 0xfffffffffffffffe}, {0x0, 0x0, 0x0, 0x71ac92c2}, 0x8, 0x0, 0x1, 0x0, 0x3}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x2, 0x3c}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3507, 0x4, 0x0, 0x0, 0x0, 0x7c, 0xfffffffe}}, 0xe8)
connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e23, 0xaf, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1a}}, 0x80}, 0x1c)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
timer_create(0x0, 0x0, 0x0)
r2 = gettid()
timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=<r3=>0x0)
ioprio_set$pid(0x0, r2, 0x4)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x50)
r5 = socket$kcm(0x10, 0x2, 0x0)
r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)={0x34, r6, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x800)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000400)={r4, &(0x7f0000000100), 0x0}, 0x20)
timer_gettime(r3, &(0x7f0000000240))
timer_settime(0x0, 0x1, 0x0, 0x0)
timer_create(0x7, &(0x7f00000001c0)={0x0, 0x11, 0x4, @thr={&(0x7f0000000080)="4a2505a8aa21588e54849279e031d8b0f09e4fa1b29d9353414cdba82433f2a8fb1d01ed064a4706f44b3a1a16f6fe2513199a78635c69cca6336d6552e384b29f0a384ee9bf6e22", &(0x7f0000000100)="733326edac36348abf9a7cf8c5294e7a9380a8b03a6e7dfac4273a963b669a30e9d88e58b92bf241ac2289ba937c720d6f1c4eb8c3ee77c6e71720b7bad635bbdbf0e025c406dc7514ef8c4ad37f2f69ccc12dec0a5bf87972baecd66c4f71da5984121a9e742a092ed63870c3446dbec0f828359675eadbde268a590cefd6224b41ae0aeb3d8172d90ecd03cf265014b354c2311fe22d31c8cccdba235330df5637722bb8c640e663beda49806519c6e07a09d9d09105b2f7e29a5ecd9481"}}, &(0x7f0000000200))
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000001080)={[{@auto_da_alloc}]}, 0x3, 0x460, &(0x7f00000015c0)="$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")
open(&(0x7f0000000100)='./bus\x00', 0x24040, 0x10)
clock_adjtime(0x0, 0x0)

319.963511ms ago: executing program 4 (id=363):
syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
getpid()
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x40010, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0xaae, &(0x7f0000000300)={0x0, 0xbfffeffb, 0x800, 0x8000007, 0x12})
clock_gettime(0x6, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0xc000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xe}, 0xc000, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800"], 0x0, 0x34}, 0x28)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x2300000000000000, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)

177.124435ms ago: executing program 3 (id=364):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r1=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRESDEC=r0, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYBLOB="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", @ANYRES64=r1], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x40)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20040010)
syz_emit_ethernet(0x46, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x3, &(0x7f00000001c0)=@framed, 0x0, 0x5, 0x0, 0x0, 0x0, 0x11}, 0x94)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
close(0xffffffffffffffff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f0000000000)='memory_hugetlb_accounting', 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, 0x0, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, 0x0, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90224fc602f0000000a0c0100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff)
eventfd2(0x0, 0x1)
r5 = socket$inet6(0xa, 0x800000000000002, 0x0)
r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x10b701)
ioctl$USBDEVFS_CLAIM_PORT(r6, 0x80045518, &(0x7f0000001340)=0x1)
setsockopt$inet6_udp_int(r5, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4)
sendmmsg$inet6(r5, &(0x7f0000001340)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x29}}, 0x1c, 0x0}}], 0x1, 0xc040)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)

119.676326ms ago: executing program 3 (id=365):
syz_usb_disconnect(0xffffffffffffffff)
getpid()
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x40010, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0xaae, &(0x7f0000000300)={0x0, 0xbfffeffb, 0x800, 0x8000007, 0x12})
clock_gettime(0x6, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0xc000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xe}, 0xc000, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800"], 0x0, 0x34}, 0x28)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x2300000000000000, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)

97.104207ms ago: executing program 1 (id=366):
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x1c, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000f7ffffff000000001c0000001811000062f5cd579d9ed42fec32eade3fd60d9c487bb4a9077e873148a2da3d02bad3e826", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000c5090100000000009500000000000000b7020000000000007b9af8ff00000000c5090000fbffffff7baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffff5402000008000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9820000000000056080000020000008500000005000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110)

63.587218ms ago: executing program 1 (id=367):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1c}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x94}, 0x1, 0x0, 0x0, 0x840}, 0x4040080)

62.853168ms ago: executing program 1 (id=368):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x100081, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x800, 0xffee, 0x200}})
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_opts(r2, 0x0, 0xd, 0x0, 0x0)
setsockopt$inet_opts(r2, 0x0, 0xc, 0x0, 0x0)
getsockopt$inet_opts(r2, 0x0, 0x400000000000009, 0x0, &(0x7f0000000080))
ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000280))
r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x0, 0x0, @buffer={0x2, 0x51, &(0x7f00000000c0)=""/81}, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x3}, 0x4)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
getsockopt$packet_int(r4, 0x107, 0x15, 0x0, &(0x7f0000001600))
getsockopt$CAN_RAW_JOIN_FILTERS(r3, 0x65, 0x6, &(0x7f00000002c0), &(0x7f0000000300)=0x4)
r5 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000013c0), 0x280282, 0x0)
readahead(r5, 0x80000001, 0x4)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4a0, 0x228, 0x348, 0xd0, 0x228, 0xd0, 0x408, 0x408, 0x408, 0x408, 0x408, 0x6, &(0x7f0000000140), {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}, 0x3, 0xe, [0x12, 0x5, 0x1, 0x2d, 0x26, 0x2, 0x9, 0x31, 0xd, 0x33, 0x1d, 0x1d, 0x3b, 0x13, 0x16, 0x3b], 0x2, 0x2, 0xffffffffffff0001}}}, {{@ip={@empty, @remote, 0xff, 0xffffff00, 'wlan0\x00', 'wlan0\x00', {}, {0x80}, 0xff, 0x2}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x21}}}, {{@ip={@multicast1, @broadcast, 0xff000000, 0xff000000, 'dvmrp1\x00', 'netdevsim0\x00', {0xff}, {}, 0xc, 0x0, 0x8}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x1, 0x4, [0x4e24, 0x4e24, 0x4e20, 0x4e24, 0x4e24, 0x4e24, 0x4e21, 0x4e22, 0x4e20, 0x4e23, 0x4e20, 0x4e24, 0x4e23, 0x4e21, 0x4e23], [0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1]}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x0, 0x6, 0x1], 0x0, 0xc}, {0x4, [0x0, 0x6, 0x2, 0x1, 0x2, 0x1], 0x3, 0x2}}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "b26b", 0x1}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500)
ioctl$TIOCCBRK(r3, 0x5428)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newchain={0x13e4, 0x64, 0x200, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0x9, 0xffe0}, {0x5, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x13a8, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x6}, @TCA_FW_ACT={0xd64, 0x4, [@m_police={0xd60, 0x17, 0x0, 0x0, {{0xb}, {0xcb0, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x10000000, 0x7, 0x3ff, 0x10, {0xfc, 0x1, 0xa17, 0x0, 0x1, 0x9}, {0x55, 0x2, 0x4, 0xbed, 0x0, 0x40}, 0xb15, 0x4, 0x40}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_AVRATE={0x8}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x9, 0xfffffffc, 0x76, 0x7ff, 0x426, 0x3, 0x9a, 0x3, 0xd, 0xfff, 0x0, 0x8, 0x8, 0x7, 0x6, 0x6, 0x3, 0x3, 0xffffffff, 0x9, 0xffff, 0x8, 0x0, 0x0, 0xd, 0x9, 0xffff, 0x2f6a7c1b, 0x10001, 0x8, 0x7, 0x3, 0x101, 0x100, 0x0, 0x3, 0x4, 0x0, 0xfffff8b5, 0x5, 0xec7c, 0x9, 0x2, 0x5, 0x117c9ad7, 0xfc6f, 0x4, 0x5, 0x347, 0x6, 0x1, 0x8000, 0x7fffffff, 0x4, 0x9, 0x0, 0x0, 0x10001, 0x2, 0x1, 0x720, 0xc88, 0x9d6, 0x10000, 0xfffffff6, 0x6, 0x80000000, 0xffffffff, 0xd, 0x6, 0x4, 0x4, 0x5, 0x767, 0x3, 0xba9, 0x10000, 0xfffffff8, 0x3, 0x4, 0x5, 0x3, 0x5, 0xe, 0xfffffff9, 0x9, 0x6, 0x100, 0x1, 0x1000, 0xfffff2e6, 0x400000, 0x4, 0x3, 0x400, 0x40, 0x0, 0x9, 0x4, 0x4, 0x6, 0x209c, 0x7, 0x1, 0x2, 0xffffffff, 0x0, 0x4, 0xf8000, 0x1, 0x100, 0x2, 0x0, 0x9, 0x6e7, 0x30, 0x101, 0x2, 0x7, 0x3, 0x4, 0xf3b0, 0xffffff57, 0x3f9, 0xfff, 0x2, 0xffff, 0x7fff, 0x5, 0x4, 0x3, 0x0, 0x2, 0x3, 0x3, 0x4, 0x3, 0x9, 0x7f, 0x2, 0x0, 0x6e8, 0x9, 0xe29a, 0xb6a, 0x7f, 0x8, 0x0, 0x1, 0xffffff00, 0x9, 0x7fffffff, 0x0, 0x101, 0x6, 0x7, 0x9, 0x0, 0x1, 0x4, 0x2, 0x0, 0x38, 0x3, 0x3, 0x10, 0x2, 0x1, 0x0, 0xfffffffe, 0x400, 0xa, 0x10000, 0x4, 0x80000001, 0x7, 0x4, 0x6, 0x7fffffff, 0xa8929fb, 0xfffffff8, 0xe09, 0x9f1, 0x4, 0xfffffff8, 0x9, 0xfff, 0x7, 0x8, 0x1ff800, 0x6, 0x7, 0xf63, 0x7, 0x69f, 0x0, 0x80000001, 0x78a, 0x8, 0x1, 0x3, 0xffff, 0x7, 0x4, 0xfffffffa, 0x6, 0x1, 0xffffe5e1, 0x4, 0xf, 0x7ba2000, 0x3, 0x71e8, 0x7, 0x0, 0xffff, 0xfffffcb7, 0x4, 0x8, 0x8000, 0x3, 0x1ff, 0x3, 0x7, 0x3, 0x4, 0x9357, 0x1, 0x9, 0x7, 0x7, 0xfffffffd, 0x6, 0x100, 0xfffffffa, 0x1, 0xa, 0xd, 0x81, 0xbaee, 0x0, 0x3, 0x3, 0x7, 0x3, 0x5, 0x9, 0x7f, 0x3ff, 0x2, 0xf, 0x8, 0x37, 0x379, 0x7]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x800, 0x1, 0x9, 0x6, 0x1, 0xa30, 0x7, 0x2, 0xe9f1, 0x0, 0x6, 0x2, 0x0, 0xb, 0x6, 0x2, 0x7, 0x5, 0x5, 0x4800000, 0x4, 0x3000000, 0xc9, 0x40, 0x1ff, 0x0, 0x8, 0x1000, 0x6, 0x12d030da, 0xf8, 0x0, 0xaca, 0x2, 0x4, 0x8, 0x6, 0x7ff, 0x7f, 0x0, 0x2, 0x0, 0xfffffe01, 0xa, 0x6, 0xfff, 0x2, 0x4, 0x5, 0x5b, 0x9, 0x0, 0x8000, 0x9, 0x94f, 0x3, 0xffffff4b, 0x4, 0x9316, 0x1000, 0x8, 0x3, 0x2, 0xfffffffe, 0xffffffff, 0x80000001, 0x1, 0x3, 0x4, 0x802, 0x8, 0x4, 0xfffffffe, 0x7, 0x6, 0x401, 0xff, 0x6, 0x183, 0x9, 0x8, 0x2f, 0x0, 0x6a, 0x2, 0x6, 0x6, 0xfffffff3, 0x3, 0x9, 0x3, 0x0, 0x401, 0x5, 0x6, 0xd, 0x8, 0x51d8dd2f, 0xde, 0x10, 0x6, 0x2, 0x3, 0x1005, 0x2, 0x7, 0x1, 0x9, 0xc27, 0x10000, 0x10000, 0x8, 0x6, 0x5, 0x1, 0xffffff8f, 0x1, 0x7, 0x6, 0x9, 0x0, 0x9, 0x36c, 0x1, 0x4, 0x3, 0xba8, 0x9, 0x7, 0x7, 0x8, 0x3, 0x1, 0x9, 0x4, 0x4, 0x0, 0x6, 0xf, 0x63, 0x40, 0xfffffffc, 0x22, 0x508, 0x5, 0xca, 0x8, 0x3, 0x1ff, 0x6, 0x5, 0x0, 0x2, 0x1, 0x3ff, 0x8, 0x3, 0x80000000, 0x8, 0x1, 0x5, 0x81, 0x2, 0x0, 0x7, 0x9, 0x4, 0x8, 0x8, 0x7fffffff, 0xabbe, 0x400, 0x7, 0x1ff, 0xb8c, 0x9, 0x7, 0x1, 0x1ff, 0x200, 0x800, 0x9, 0x1000, 0x0, 0x0, 0x200, 0x9, 0x8, 0x44e512d2, 0x9, 0xfffffff4, 0x10, 0x5, 0x0, 0x7, 0x3, 0xced, 0x4, 0xfffffffd, 0x9, 0x1, 0xa, 0x0, 0x6acf, 0x6, 0xfff, 0x2, 0x6, 0xfffffffa, 0x9, 0x9, 0x4, 0x0, 0x3708b54d, 0x80000000, 0x0, 0x40, 0xf, 0x7, 0x0, 0x9, 0x2, 0x7, 0x609, 0x0, 0x523, 0x81, 0x0, 0x7, 0x0, 0x7ed, 0x1, 0x0, 0x1, 0x9, 0x4, 0x6, 0x7, 0x3, 0x3, 0x7f, 0x8702, 0xfffffffd, 0x8001, 0x6, 0xfffffffe, 0xc, 0x0, 0x7, 0x9, 0x4, 0xce, 0x8, 0x0, 0xffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x6, 0xb, 0x36d7, 0x6, {0x5, 0x1, 0xd31, 0xffff, 0x0, 0x163}, {0x1, 0x0, 0x7fff, 0x5, 0x81}, 0x4aa, 0x7, 0x5}}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x1, 0xfa, 0x3, 0x9, 0x7, 0x8, 0x3, 0x3, 0x7, 0x101, 0x3, 0x401, 0x6, 0xffffffff, 0x1, 0x51d2, 0xc36b848c, 0x1, 0x2, 0xea25, 0x1, 0xfff, 0x1, 0x4c, 0x2, 0xc, 0xfffffff9, 0x5, 0x6, 0x7fff, 0x9e8d, 0x0, 0x6b6, 0x2, 0xfffffe00, 0x7fffffff, 0x8, 0x4, 0xfffff752, 0xc, 0x0, 0xb1d2, 0x1f6, 0x2, 0x0, 0x4, 0xff, 0x76, 0x2, 0x1, 0x1, 0x8, 0x8, 0x19, 0x1000, 0x520, 0x496c295b, 0xfff, 0x4, 0x8, 0xffffffff, 0xc0, 0x8a, 0x3, 0x9, 0x6, 0xfffffffa, 0x4, 0x7, 0x0, 0x0, 0x2, 0x10000, 0x3, 0x1, 0x4, 0x401, 0xc99, 0x5, 0x5, 0x5, 0x5, 0x503, 0x1, 0x10000, 0xc6, 0x6a0e, 0x8, 0x13c2, 0x39d, 0x5, 0xffffffff, 0x9, 0x0, 0xfffffffd, 0xa2, 0x1, 0x8, 0xffff1d50, 0x8, 0x6, 0x8, 0xf, 0x9, 0x1, 0x7, 0x10001, 0x8, 0xffffffff, 0xffffffff, 0x2, 0x9, 0x2d2c, 0x6, 0xa, 0x8, 0x1a, 0x0, 0x3, 0x5, 0x7, 0xad7fc3e7, 0x2, 0x1, 0x0, 0x81, 0x10000, 0x11b, 0x400, 0x1, 0x7fff, 0x10001, 0x29, 0x200, 0xfffffff7, 0x3, 0x10000, 0x9, 0x60000000, 0x1, 0x4, 0xffffffc6, 0x101, 0x9, 0x4, 0xc, 0x0, 0x8, 0x8000, 0x1, 0x33, 0x3, 0xa41, 0x7, 0x7fff, 0xc9, 0x7, 0x9, 0x5, 0x3, 0x43, 0x1, 0x7fffffff, 0xbb7, 0x6, 0x8, 0x2, 0x7ff, 0x3, 0xed70, 0xe, 0x10, 0xff, 0x3, 0x3, 0x400, 0xf7, 0x8a, 0x7, 0x4, 0x0, 0x8, 0xb, 0x6, 0x40, 0x0, 0xd, 0x8000, 0x3, 0x200, 0x2, 0x7, 0x1, 0x3, 0xc, 0x200, 0x326, 0x0, 0x2bc, 0x3, 0x6, 0x4, 0x2f, 0x3fe, 0x9, 0x0, 0x6, 0x1000, 0x5, 0xffffffff, 0xf, 0x5655, 0x1, 0x9, 0xa, 0xffff, 0x5, 0x8, 0x0, 0x0, 0xce400000, 0x3, 0x7, 0x4, 0x1, 0x20, 0x8, 0x3, 0x8, 0x5, 0x0, 0x5, 0x4f2, 0x8, 0x81, 0x5, 0x2, 0x35, 0x3, 0x7f, 0x6, 0x4, 0x80000000, 0x7aa, 0x2, 0x3, 0x2, 0x3, 0x8, 0x6, 0x4, 0xfff, 0x800, 0x7f, 0x5d48]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}]]}, {0x86, 0x6, "c5cb56ecd5c24962139d036481366c55a045ac1d5325de850d91c664f50c5072c138bbb615c7761b21fdb0e522b232f8037675d9879dceea13b60fdb8444711045d3c90bf5540f9a339d6647d5e4b7c3dc7a31f143f9a8a81b921ce6c2c12bfb819430d487095aeddb43a94d7905645a90ac2ff83528f3aaa22b86902b1444cd24ea"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_FW_ACT={0x190, 0x4, [@m_simple={0x18c, 0x3, 0x0, 0x0, {{0xb}, {0x94, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xa, 0x3, 'wlan0\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x7, 0x3, 0x3, 0x9, 0x1a9}}, @TCA_DEF_DATA={0x6, 0x3, '/\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x3, 0x6, 0xda921ffba0f964d7, 0x3ff, 0x2}}, @TCA_DEF_PARMS={0x18, 0x2, {0x7, 0x6, 0x1, 0x8001, 0xffffffff}}, @TCA_DEF_DATA={0x9, 0x3, 'icmp\x00'}, @TCA_DEF_DATA={0xe, 0x3, 'multiport\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x3, 0xffffffffeffffffd, 0xa, 0x2}}]}, {0xd0, 0x6, "0d34eb778d719bbd1c1ca562087b68d37dc7097b11a167ea8f29b255279e4f8af6678953530504957acdcc1bd7838c176e6fe1d382285aee9091f2620b14b027b6a93129cfbde720a64d22a468c6186bf6df35d8812e60e362fc35631d5c4695e99c6c99a401776b309d883d0477ab48a70a2001b7a07ad15728e581a3a5f3bf1f69b6a461cca0d95e746b1e9d5b2562b5dcf6503bd34b1b5b9a2ca28397226deadf2280fe83aa4b0054493340ad28f7200206eeffb0374c92f064dc74c3019a469c8f4fbbb9d57740e7655d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_FW_POLICE={0x4a8, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x20000000, 0xfffffffe, 0x6, 0x2, {0x7, 0x1, 0x9, 0x5, 0x8, 0x5}, {0x0, 0x0, 0x401, 0xecf6, 0x2, 0x3}, 0x2, 0x7, 0x6}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x481}, @TCA_POLICE_TBF={0x3c, 0x1, {0x101, 0x6, 0x7fffffff, 0x28, 0x80000000, {0x4, 0x1, 0x3, 0x1, 0x7f8, 0x7}, {0x7, 0x1, 0x2, 0x9, 0x6, 0xb}, 0x405b47, 0x80, 0x1}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0xffffff01, 0x0, 0x10, 0x6, 0x100000, 0x3f, 0x3, 0x40, 0xc424, 0x1, 0x6b422810, 0x75db, 0xfffff306, 0xffffff7f, 0xe, 0x7, 0x1000, 0x6, 0xffffe5ab, 0x8, 0x80, 0x2, 0x0, 0x8e, 0x10, 0x3, 0x1000, 0x7fffffff, 0x7, 0x1f24c3ce, 0xdf11, 0x0, 0x4, 0x6, 0x2, 0x7eb, 0x0, 0x8, 0x6, 0xdcf, 0xffffffff, 0x5, 0x2, 0x5, 0x500000, 0x5, 0x3, 0x9, 0x8, 0x3, 0x1, 0x0, 0x8, 0x2, 0x5, 0x9, 0x3, 0x40, 0xed, 0x10000, 0xffff, 0x1, 0x8, 0x8001, 0xfff, 0x9, 0x8001, 0x14, 0x7, 0x7fffffff, 0x2, 0x2, 0x1, 0x3, 0x9, 0x11e9e796, 0x6, 0x4, 0x10000, 0x1, 0x0, 0xfffffffe, 0xe19, 0x1, 0xfffff486, 0x5, 0x10, 0x20000, 0x7fffffff, 0xffff, 0x3, 0xc, 0x0, 0x4, 0x3, 0x363f, 0x0, 0x1, 0x3ff, 0x9, 0xfffff85c, 0x5, 0xfffffffc, 0xc170, 0xb6, 0x8, 0x7, 0xc, 0x5, 0x8, 0x8, 0x10c8fdd9, 0xfffffc00, 0x0, 0xfffffff8, 0xc, 0x9, 0xe, 0x8, 0x2663bf34, 0xfffffc00, 0x6, 0x1, 0x3, 0x7ff, 0x9, 0x2, 0x200, 0x9, 0xb, 0xa, 0x0, 0x0, 0x4, 0x400, 0x1, 0xae0d, 0x10000, 0xffff, 0x400, 0xd13b, 0x4, 0x1, 0x6, 0x2, 0x0, 0x40, 0xffff, 0x10, 0x8, 0x6, 0x5, 0x8, 0x7ff, 0x7, 0x4, 0x9, 0x744, 0x4, 0x3, 0x1, 0x2, 0x8, 0x6, 0x7fffffff, 0x0, 0x262, 0x7, 0x4, 0x1, 0x2, 0x1, 0x8, 0x6, 0x6, 0x10000, 0x120, 0x4, 0x3, 0x4, 0x0, 0x9, 0x6, 0xe0a, 0x51, 0xff80000, 0x1fe2, 0xbed, 0x0, 0x815e, 0x5f0, 0x5, 0x6, 0x6, 0x8, 0x9, 0x1f51, 0x951, 0x5, 0x0, 0xab6, 0xffffffc6, 0x5, 0x1, 0x0, 0x1, 0x100, 0x8, 0x5c50, 0xd, 0xfffffff9, 0x7f, 0x4, 0x3, 0x7, 0xe9, 0xdcb, 0x7, 0x68a, 0x5, 0x3df, 0x1, 0x0, 0x7, 0xfff, 0x8000, 0x1, 0x8000, 0x101, 0x1000, 0x3, 0x0, 0x80, 0xa4, 0x57, 0x2, 0xc903a81e, 0x9, 0xc00000, 0x3ce1, 0x0, 0xa19b, 0x71, 0xc9, 0x84b5, 0xa5, 0x2, 0x7, 0x1, 0xcfe1, 0x3ff, 0xfffffffd, 0x1f, 0x6]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xf}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10001}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_CHAIN={0x8, 0xb, 0x7}]}, 0x13e4}}, 0x4000010)

0s ago: executing program 1 (id=369):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = gettid()
bind$inet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000140))
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0)
readv(r2, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1)
r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x200)
syz_usb_disconnect(r3)
timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r4, 0x0)
ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000080)={{0x5f, 0x5}, {0x4000000008}, 0x10000004, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
getgroups(0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000040)='./file0\x00', 0x2000800, &(0x7f0000000080)=ANY=[@ANYRES64, @ANYRESOCT, @ANYRES64=0x0], 0x1, 0x296, &(0x7f0000000740)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.52' (ED25519) to the list of known hosts.
[   28.444229][   T28] audit: type=1400 audit(1777574500.536:62): avc:  denied  { mounton } for  pid=3284 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   28.469434][   T28] audit: type=1400 audit(1777574500.566:63): avc:  denied  { mount } for  pid=3284 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   28.470279][ T3284] cgroup: Unknown subsys name 'net'
[   28.499015][   T28] audit: type=1400 audit(1777574500.596:64): avc:  denied  { unmount } for  pid=3284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   28.656603][ T3284] cgroup: Unknown subsys name 'cpuset'
[   28.663156][ T3284] cgroup: Unknown subsys name 'rlimit'
[   28.792458][   T28] audit: type=1400 audit(1777574500.886:65): avc:  denied  { setattr } for  pid=3284 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   28.818091][   T28] audit: type=1400 audit(1777574500.886:66): avc:  denied  { create } for  pid=3284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   28.839995][   T28] audit: type=1400 audit(1777574500.886:67): avc:  denied  { write } for  pid=3284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   28.860282][ T3289] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   28.863515][   T28] audit: type=1400 audit(1777574500.886:68): avc:  denied  { read } for  pid=3284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   28.893897][   T28] audit: type=1400 audit(1777574500.886:69): avc:  denied  { mounton } for  pid=3284 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   28.920024][   T28] audit: type=1400 audit(1777574500.886:71): avc:  denied  { read } for  pid=3018 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   28.941551][   T28] audit: type=1400 audit(1777574500.886:70): avc:  denied  { mount } for  pid=3284 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   28.958157][ T3284] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   30.193400][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.201154][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.208628][ T3298] bridge_slave_0: entered allmulticast mode
[   30.215288][ T3298] bridge_slave_0: entered promiscuous mode
[   30.236807][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.244374][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.252051][ T3298] bridge_slave_1: entered allmulticast mode
[   30.258602][ T3298] bridge_slave_1: entered promiscuous mode
[   30.315658][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.343238][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.352686][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.360682][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.368019][ T3305] bridge_slave_0: entered allmulticast mode
[   30.375056][ T3305] bridge_slave_0: entered promiscuous mode
[   30.390997][ T3296] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.398569][ T3296] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.405879][ T3296] bridge_slave_0: entered allmulticast mode
[   30.413440][ T3296] bridge_slave_0: entered promiscuous mode
[   30.432233][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.440333][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.449796][ T3305] bridge_slave_1: entered allmulticast mode
[   30.460438][ T3305] bridge_slave_1: entered promiscuous mode
[   30.471392][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.480653][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.489122][ T3304] bridge_slave_0: entered allmulticast mode
[   30.497066][ T3304] bridge_slave_0: entered promiscuous mode
[   30.504687][ T3296] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.514804][ T3296] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.524700][ T3296] bridge_slave_1: entered allmulticast mode
[   30.534973][ T3296] bridge_slave_1: entered promiscuous mode
[   30.547807][ T3298] team0: Port device team_slave_0 added
[   30.560871][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.569193][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.577967][ T3304] bridge_slave_1: entered allmulticast mode
[   30.587005][ T3304] bridge_slave_1: entered promiscuous mode
[   30.603207][ T3298] team0: Port device team_slave_1 added
[   30.626744][ T3296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.641894][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.661064][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.672232][ T3296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.688920][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.697645][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.727575][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.741098][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.760633][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.778418][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.788382][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   30.816664][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.832177][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.839974][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.848093][ T3306] bridge_slave_0: entered allmulticast mode
[   30.856260][ T3306] bridge_slave_0: entered promiscuous mode
[   30.868990][ T3296] team0: Port device team_slave_0 added
[   30.880060][ T3305] team0: Port device team_slave_0 added
[   30.888020][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.897297][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.904875][ T3306] bridge_slave_1: entered allmulticast mode
[   30.912332][ T3306] bridge_slave_1: entered promiscuous mode
[   30.920336][ T3304] team0: Port device team_slave_0 added
[   30.927435][ T3296] team0: Port device team_slave_1 added
[   30.935089][ T3305] team0: Port device team_slave_1 added
[   30.945843][ T3304] team0: Port device team_slave_1 added
[   30.989188][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   31.002316][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0
[   31.010241][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   31.040292][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   31.051868][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_0
[   31.060091][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   31.090384][ T3296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   31.105333][ T3298] hsr_slave_0: entered promiscuous mode
[   31.112508][ T3298] hsr_slave_1: entered promiscuous mode
[   31.119860][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0
[   31.128295][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   31.157406][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   31.170237][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   31.183874][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1
[   31.191181][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   31.219119][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   31.237789][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_1
[   31.245481][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   31.273370][ T3296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   31.287113][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1
[   31.294076][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   31.320582][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   31.348199][ T3306] team0: Port device team_slave_0 added
[   31.355402][ T3306] team0: Port device team_slave_1 added
[   31.386378][ T3296] hsr_slave_0: entered promiscuous mode
[   31.392491][ T3296] hsr_slave_1: entered promiscuous mode
[   31.398962][ T3296] debugfs: 'hsr0' already exists in 'hsr'
[   31.404785][ T3296] Cannot create hsr debugfs directory
[   31.425996][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0
[   31.433238][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   31.460399][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   31.480638][ T3304] hsr_slave_0: entered promiscuous mode
[   31.487200][ T3304] hsr_slave_1: entered promiscuous mode
[   31.493337][ T3304] debugfs: 'hsr0' already exists in 'hsr'
[   31.500153][ T3304] Cannot create hsr debugfs directory
[   31.510361][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1
[   31.518085][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   31.545391][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   31.560701][ T3305] hsr_slave_0: entered promiscuous mode
[   31.567339][ T3305] hsr_slave_1: entered promiscuous mode
[   31.574108][ T3305] debugfs: 'hsr0' already exists in 'hsr'
[   31.580174][ T3305] Cannot create hsr debugfs directory
[   31.647191][ T3306] hsr_slave_0: entered promiscuous mode
[   31.653171][ T3306] hsr_slave_1: entered promiscuous mode
[   31.659306][ T3306] debugfs: 'hsr0' already exists in 'hsr'
[   31.665410][ T3306] Cannot create hsr debugfs directory
[   31.784709][ T3298] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   31.793717][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   31.801311][ T3298] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   31.809606][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   31.824734][ T3298] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   31.833676][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   31.845646][ T3298] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   31.854208][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   31.875960][ T3304] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   31.884520][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   31.892311][ T3304] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   31.900577][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   31.908393][ T3304] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   31.917593][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   31.925890][ T3304] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   31.935020][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   31.969932][ T3296] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   31.978882][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   31.987727][ T3296] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   31.996214][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   32.006367][ T3296] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   32.014988][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   32.028075][ T3296] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   32.037061][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   32.063849][ T3305] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   32.072645][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   32.080969][ T3305] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   32.089367][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   32.097247][ T3305] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   32.106081][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   32.113952][ T3305] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   32.122690][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   32.160703][ T3306] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   32.170407][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   32.181647][ T3306] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   32.191223][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   32.199421][ T3306] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   32.208528][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   32.217051][ T3306] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   32.226261][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   32.235341][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0
[   32.257629][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0
[   32.276764][ T3298] 8021q: adding VLAN 0 to HW filter on device team0
[   32.292593][ T3304] 8021q: adding VLAN 0 to HW filter on device team0
[   32.303162][   T30] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.310732][   T30] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.327224][   T30] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.335062][   T30] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.344070][   T30] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.351262][   T30] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.374737][   T30] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.382000][   T30] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.399533][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0
[   32.429506][ T3305] 8021q: adding VLAN 0 to HW filter on device team0
[   32.443148][ T3296] 8021q: adding VLAN 0 to HW filter on device bond0
[   32.456355][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.464762][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.474211][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.482063][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.497596][ T3296] 8021q: adding VLAN 0 to HW filter on device team0
[   32.517016][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0
[   32.527045][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.541242][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.561761][   T41] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.569250][   T41] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.583256][ T3306] 8021q: adding VLAN 0 to HW filter on device team0
[   32.609761][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.616980][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.631503][ T3296] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   32.643737][ T3305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   32.657448][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.664625][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.723328][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0
[   32.802946][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0
[   32.892655][ T3296] 8021q: adding VLAN 0 to HW filter on device batadv0
[   32.917527][ T3298] veth0_vlan: entered promiscuous mode
[   32.924717][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0
[   32.943018][ T3298] veth1_vlan: entered promiscuous mode
[   32.958880][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0
[   32.983013][ T3298] veth0_macvtap: entered promiscuous mode
[   32.997437][ T3304] veth0_vlan: entered promiscuous mode
[   33.006368][ T3298] veth1_macvtap: entered promiscuous mode
[   33.018575][ T3304] veth1_vlan: entered promiscuous mode
[   33.037879][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0
[   33.061026][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1
[   33.084015][   T53] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   33.093800][   T53] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   33.104263][ T3296] veth0_vlan: entered promiscuous mode
[   33.113890][   T53] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   33.123508][   T53] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   33.133101][ T3304] veth0_macvtap: entered promiscuous mode
[   33.140978][ T3304] veth1_macvtap: entered promiscuous mode
[   33.161078][ T3296] veth1_vlan: entered promiscuous mode
[   33.171329][ T3306] veth0_vlan: entered promiscuous mode
[   33.192667][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0
[   33.201053][ T3306] veth1_vlan: entered promiscuous mode
[   33.211475][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1
[   33.221625][   T53] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   33.241603][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   33.257795][ T3305] veth0_vlan: entered promiscuous mode
[   33.264732][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   33.276902][ T3298] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   33.290743][ T3306] veth0_macvtap: entered promiscuous mode
[   33.301143][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   33.315408][ T3306] veth1_macvtap: entered promiscuous mode
[   33.329602][ T3305] veth1_vlan: entered promiscuous mode
[   33.351464][ T3296] veth0_macvtap: entered promiscuous mode
[   33.362416][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0
[   33.391222][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1
[   33.401387][ T3296] veth1_macvtap: entered promiscuous mode
[   33.416080][  T310] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   33.437313][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_0
[   33.447919][  T310] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   33.462161][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_1
[   33.469860][   T28] kauditd_printk_skb: 30 callbacks suppressed
[   33.469873][   T28] audit: type=1400 audit(1777574505.566:102): avc:  denied  { open } for  pid=3512 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   33.479406][ T3305] veth0_macvtap: entered promiscuous mode
[   33.496540][   T28] audit: type=1400 audit(1777574505.566:103): avc:  denied  { perfmon } for  pid=3512 comm="syz.1.2" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   33.524166][   T28] audit: type=1400 audit(1777574505.566:104): avc:  denied  { kernel } for  pid=3512 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   33.531722][  T310] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   33.544487][   T28] audit: type=1400 audit(1777574505.616:105): avc:  denied  { bpf } for  pid=3507 comm="syz.3.7" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   33.578453][ T3429] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   33.587387][   T28] audit: type=1400 audit(1777574505.676:106): avc:  denied  { watch watch_reads } for  pid=3507 comm="syz.3.7" path="/2/file1" dev="tmpfs" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   33.594775][ T3376] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   33.621835][ T3376] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   33.625868][   T28] audit: type=1400 audit(1777574505.676:107): avc:  denied  { create } for  pid=3507 comm="syz.3.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   33.633231][ T3305] veth1_macvtap: entered promiscuous mode
[   33.651815][   T28] audit: type=1400 audit(1777574505.686:108): avc:  denied  { create } for  pid=3512 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   33.682547][   T28] audit: type=1400 audit(1777574505.686:109): avc:  denied  { write } for  pid=3512 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   33.703887][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0
[   33.713336][ T3517] fido_id[3517]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   33.730600][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1
[   33.740701][   T28] audit: type=1400 audit(1777574505.686:110): avc:  denied  { read write } for  pid=3512 comm="syz.1.2" name="uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   33.764482][   T28] audit: type=1400 audit(1777574505.686:111): avc:  denied  { open } for  pid=3512 comm="syz.1.2" path="/dev/uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   33.768022][ T3429] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   33.808391][ T3429] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   33.817712][ T3429] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   33.826825][ T3429] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   33.850251][   T40] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   33.860068][   T40] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   33.871460][   T40] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   33.882888][   T40] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   33.895558][ T3525] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'.
[   33.933093][ T3525] loop2: detected capacity change from 0 to 164
[   33.953262][ T3525] loop2: detected capacity change from 0 to 512
[   33.983717][ T3525] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3: bg 0: block 393: padding at end of block bitmap is not set
[   33.983814][ T3525] loop2: lost filesystem error report for type 5 error -117
[   33.984009][ T3525] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem
[   33.984089][ T3525] loop2: lost filesystem error report for type 5 error -117
[   33.984299][ T3525] EXT4-fs (loop2): 2 truncates cleaned up
[   33.984714][ T3525] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   33.986659][ T3533] gretap0: entered promiscuous mode
[   33.986810][ T3533] vlan2: entered promiscuous mode
[   34.022829][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.033843][ T3530] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5'.
[   34.102041][ T3532] loop1: detected capacity change from 0 to 512
[   34.111173][ T3530] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5'.
[   34.124097][ T3532] EXT4-fs (loop1): 1 truncate cleaned up
[   34.135477][ T3532] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   34.151317][ T3532] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.189515][ T3546] loop0: detected capacity change from 0 to 1024
[   34.189805][ T3546] =======================================================
[   34.189805][ T3546] WARNING: The mand mount option has been deprecated and
[   34.189805][ T3546]          and is ignored by this kernel. Remove the mand
[   34.189805][ T3546]          option from the mount to silence this warning.
[   34.189805][ T3546] =======================================================
[   34.189957][ T3546] EXT4-fs: Ignoring removed orlov option
[   34.242790][ T3546] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002]
[   34.242818][ T3546] System zones: 0-1, 3-12
[   34.243448][ T3546] EXT4-fs (loop0): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   34.308053][ T3546] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2860: Unable to expand inode 12. Delete some EAs or run e2fsck.
[   34.324558][ T3550] netlink: 172 bytes leftover after parsing attributes in process `syz.2.10'.
[   34.358540][ T3552] capability: warning: `syz.1.12' uses 32-bit capabilities (legacy support in use)
[   34.401946][ T3556] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET)
[   34.427583][ T3557] netlink: 'syz.4.13': attribute type 12 has an invalid length.
[   34.452372][ T3557] netlink: 'syz.4.13': attribute type 1 has an invalid length.
[   34.472599][ T3557] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13'.
[   34.580150][ T3552] loop1: detected capacity change from 0 to 512
[   34.665674][ T3552] ------------[ cut here ]------------
[   34.672447][ T3552] EA inode 11 i_nlink=0
[   34.672841][ T3552] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#1: syz.1.12/3552
[   34.689802][ T3552] Modules linked in:
[   34.695761][ T3552] CPU: 1 UID: 0 PID: 3552 Comm: syz.1.12 Not tainted syzkaller #0 PREEMPT(full) 
[   34.706161][ T3552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[   34.739481][ T3552] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350
[   34.747717][ T3552] Code: 54 5f 98 ff 4c 8d 2d bd 69 5c 05 49 8d 7e 40 e8 a4 1d b6 ff 49 8b 6e 40 4c 89 e7 e8 d8 18 b6 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 df 6d d7 03 66 66 66 66 66 66 2e
[   34.769588][ T3552] RSP: 0018:ffffc900018b35a8 EFLAGS: 00010246
[   34.776141][ T3552] RAX: ffff8881022dbdf8 RBX: ffff888107254dd8 RCX: ffffffff81c0c968
[   34.785197][ T3552] RDX: 0000000000000000 RSI: 000000000000000b RDI: ffffffff871d3310
[   34.794540][ T3552] RBP: 000000000000000b R08: 0001888107254d8b R09: 0000000000000000
[   34.803751][ T3552] R10: ffffc900018b34d8 R11: 0001c900018b34d8 R12: ffff888107254d88
[   34.812121][ T3552] R13: ffffffff871d3310 R14: ffff888107254d40 R15: 0000000000000001
[   34.821260][ T3552] FS:  00007f22443ff6c0(0000) GS:ffff8882ae9fe000(0000) knlGS:0000000000000000
[   34.834940][ T3552] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   34.842911][ T3552] CR2: 0000200000015038 CR3: 000000011c3fa000 CR4: 00000000003506f0
[   34.852541][ T3552] Call Trace:
[   34.857591][ T3552]  <TASK>
[   34.861341][ T3552]  ext4_xattr_set_entry+0x77c/0x1010
[   34.868579][ T3552]  ext4_xattr_ibody_set+0x184/0x3c0
[   34.874971][ T3552]  ext4_expand_extra_isize_ea+0xd7b/0x11a0
[   34.882731][ T3552]  __ext4_expand_extra_isize+0x246/0x280
[   34.889543][ T3552]  __ext4_mark_inode_dirty+0x29b/0x3d0
[   34.895410][ T3552]  ext4_evict_inode+0x8ba/0xe30
[   34.901321][ T3552]  ? __pfx_ext4_evict_inode+0x10/0x10
[   34.907700][ T3552]  evict+0x2af/0x510
[   34.912614][ T3552]  ? __dquot_initialize+0x146/0x7c0
[   34.920271][ T3552]  iput+0x41a/0x580
[   34.925571][ T3552]  ext4_process_orphan+0x1a9/0x1c0
[   34.931841][ T3552]  ext4_orphan_cleanup+0x69c/0x9f0
[   34.937801][ T3552]  ext4_fill_super+0x3408/0x37c0
[   34.944524][ T3552]  ? set_blocksize+0x14c/0x270
[   34.950071][ T3552]  ? setup_bdev_super+0x30e/0x370
[   34.955991][ T3552]  ? __pfx_ext4_fill_super+0x10/0x10
[   34.961571][ T3552]  get_tree_bdev_flags+0x291/0x300
[   34.967341][ T3552]  ? __pfx_ext4_fill_super+0x10/0x10
[   34.973831][ T3552]  get_tree_bdev+0x1f/0x30
[   34.979241][ T3552]  ext4_get_tree+0x1c/0x30
[   34.984321][ T3552]  vfs_get_tree+0x57/0x1d0
[   34.989321][ T3552]  do_new_mount+0x288/0x8d0
[   34.994681][ T3552]  ? __sanitizer_cov_trace_pc+0x5c/0x70
[   35.003171][ T3552]  path_mount+0x4d0/0xbc0
[   35.008148][ T3552]  __se_sys_mount+0x28c/0x2e0
[   35.014130][ T3552]  __x64_sys_mount+0x67/0x80
[   35.019351][ T3552]  x64_sys_call+0x2d61/0x3020
[   35.025239][ T3552]  do_syscall_64+0x12c/0x3b0
[   35.031478][ T3552]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   35.039767][ T3552] RIP: 0033:0x7f22459ae04a
[   35.045410][ T3552] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   35.066401][ T3552] RSP: 002b:00007f22443fee58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   35.076381][ T3552] RAX: ffffffffffffffda RBX: 00007f22443feee0 RCX: 00007f22459ae04a
[   35.085660][ T3552] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007f22443feea0
[   35.094690][ T3552] RBP: 0000200000000180 R08: 00007f22443feee0 R09: 0000000000000000
[   35.104491][ T3552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000
[   35.113141][ T3552] R13: 00007f22443feea0 R14: 000000000000047a R15: 0000200000000080
[   35.122300][ T3552]  </TASK>
[   35.125871][ T3552] ---[ end trace 0000000000000000 ]---
[   35.133751][ T3552] EXT4-fs error (device loop1): ext4_free_inode:354: comm syz.1.12: bit already cleared for inode 11
[   35.147748][ T3552] loop1: lost filesystem error report for type 5 error -117
[   35.157998][    C1] EXT4-fs (loop1): error count since last fsck: 1
[   35.162259][ T3552] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem
[   35.166007][    C1] EXT4-fs (loop1): initial error at time 1777574507: ext4_free_inode:354
[   35.166716][    C1] EXT4-fs (loop1): last error at time 1777574507: ext4_free_inode:354
[   35.273702][ T3552] loop1: lost filesystem error report for type 5 error -117
[   35.291786][ T3552] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem
[   35.312530][ T3552] loop1: lost filesystem error report for type 5 error -117
[   35.313298][ T3552] EXT4-fs (loop1): 1 orphan inode deleted
[   35.334725][ T3552] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   35.496576][ T3552] syz.1.12 (3552) used greatest stack depth: 9344 bytes left
[   35.505148][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.533502][ T3565] Invalid option length (65021) for dns_resolver key
[   35.534557][ T3415] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   35.554144][ T3415] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   35.711341][ T3571] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   35.731275][ T3571] loop1: detected capacity change from 0 to 1024
[   35.738603][ T3571] EXT4-fs: Ignoring removed orlov option
[   35.745514][ T3571] EXT4-fs (loop1): stripe (7) is not aligned with cluster size (4096), stripe is disabled
[   35.756427][ T3571] EXT4-fs (loop1): revision level too high, forcing read-only mode
[   35.764904][ T3571] EXT4-fs (loop1): orphan cleanup on readonly fs
[   35.772333][ T3571] EXT4-fs error (device loop1): __ext4_get_inode_loc:4885: comm syz.1.17: Invalid inode table block 0 in block_group 0
[   35.785319][ T3571] loop1: lost filesystem error report for type 5 error -117
[   35.785510][ T3571] EXT4-fs (loop1): Remounting filesystem read-only
[   35.792973][    C1] EXT4-fs (loop1): error count since last fsck: 1
[   35.792996][    C1] EXT4-fs (loop1): initial error at time 1777574507: __ext4_get_inode_loc:4885
[   35.793017][    C1] EXT4-fs (loop1): last error at time 1777574507: __ext4_get_inode_loc:4885
[   35.824367][ T3571] EXT4-fs (loop1): 1 truncate cleaned up
[   35.830703][ T3571] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   36.414431][ T3508] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   36.454349][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0500-0000-0000-000000000000.
[   36.560744][ T3588] Invalid option length (65021) for dns_resolver key
[   36.574115][ T3590] netlink: 24 bytes leftover after parsing attributes in process `syz.0.23'.
[   36.614242][ T3590] Zero length message leads to an empty skb
[   36.786417][ T3603] ref_ctr increment failed for inode: 0x23 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888103bb0d80
[   36.821626][ T3603] uprobe: syz.0.29:3603 failed to unregister, leaking uprobe
[   37.112078][ T3615] loop3: detected capacity change from 0 to 1024
[   37.130307][ T3615] EXT4-fs: Ignoring removed orlov option
[   37.173501][ T3615] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002]
[   37.192420][ T3615] System zones: 0-1, 3-12
[   37.211880][ T3615] EXT4-fs (loop3): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   37.283739][ T3605] loop0: detected capacity change from 0 to 512
[   37.389458][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0500-0000-0000-000000000000.
[   37.442726][ T3605] EXT4-fs error (device loop0): ext4_free_inode:354: comm syz.0.30: bit already cleared for inode 11
[   37.486865][ T3605] loop0: lost filesystem error report for type 5 error -117
[   37.495949][    C0] EXT4-fs (loop0): error count since last fsck: 1
[   37.510050][    C0] EXT4-fs (loop0): initial error at time 1777574509: ext4_free_inode:354
[   37.518508][    C0] EXT4-fs (loop0): last error at time 1777574509: ext4_free_inode:354
[   37.534390][ T3605] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem
[   37.557804][ T3624] netlink: 12 bytes leftover after parsing attributes in process `syz.3.37'.
[   37.558009][ T3605] loop0: lost filesystem error report for type 5 error -117
[   37.583441][ T3605] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem
[   37.603446][   T40] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   37.603453][ T3624] netlink: 12 bytes leftover after parsing attributes in process `syz.3.37'.
[   37.633145][ T3605] loop0: lost filesystem error report for type 5 error -117
[   37.634355][ T3605] EXT4-fs (loop0): 1 orphan inode deleted
[   37.654242][   T40] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   37.669148][ T3605] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   37.683124][   T40] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   37.692336][   T40] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   37.919071][ T3637] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   37.940608][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.984510][ T3637] loop4: detected capacity change from 0 to 1024
[   38.021129][ T3637] EXT4-fs: Ignoring removed orlov option
[   38.037729][ T3637] EXT4-fs (loop4): stripe (7) is not aligned with cluster size (4096), stripe is disabled
[   38.064520][ T3637] EXT4-fs (loop4): revision level too high, forcing read-only mode
[   38.086635][ T3637] EXT4-fs (loop4): orphan cleanup on readonly fs
[   38.119093][ T3637] EXT4-fs error (device loop4): __ext4_get_inode_loc:4885: comm syz.4.41: Invalid inode table block 0 in block_group 0
[   38.133774][ T3637] loop4: lost filesystem error report for type 5 error -117
[   38.135561][ T3637] EXT4-fs (loop4): Remounting filesystem read-only
[   38.143113][    C1] EXT4-fs (loop4): error count since last fsck: 1
[   38.143145][    C1] EXT4-fs (loop4): initial error at time 1777574510: __ext4_get_inode_loc:4885
[   38.143194][    C1] EXT4-fs (loop4): last error at time 1777574510: __ext4_get_inode_loc:4885
[   38.175665][ T3637] EXT4-fs (loop4): 1 truncate cleaned up
[   38.184215][ T3637] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   38.212808][ T3641] loop0: detected capacity change from 0 to 512
[   38.222266][ T3641] EXT4-fs: Ignoring removed nomblk_io_submit option
[   38.243691][ T3641] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8857e02c, mo2=0002]
[   38.263616][ T3641] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 33261: comm syz.0.42: invalid block
[   38.277006][ T3641] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   38.280248][ T3641] EXT4-fs (loop0): Remounting filesystem read-only
[   38.290320][    C1] EXT4-fs (loop0): error count since last fsck: 1
[   38.290370][    C1] EXT4-fs (loop0): initial error at time 1777574510: ext4_get_branch:178: inode 11: block 33261
[   38.290599][    C1] EXT4-fs (loop0): last error at time 1777574510: ext4_get_branch:178: inode 11: block 33261
[   38.330938][ T3641] EXT4-fs (loop0): 1 truncate cleaned up
[   38.340982][ T3641] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   38.449040][ T3658] syz.3.50: attempt to access beyond end of device
[   38.449040][ T3658] loop3: rw=2049, sector=154, nr_sectors = 2 limit=128
[   38.593693][ T3658] syz.3.50: attempt to access beyond end of device
[   38.593693][ T3658] loop3: rw=2049, sector=138, nr_sectors = 2 limit=128
[   38.619793][ T3658] Buffer I/O error on dev loop3, logical block 69, lost async page write
[   38.746450][   T28] kauditd_printk_skb: 79 callbacks suppressed
[   38.746463][   T28] audit: type=1400 audit(1777574510.846:187): avc:  denied  { unmount } for  pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   38.930339][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.310005][ T3671] macsec1: entered promiscuous mode
[   39.315256][ T3671] macsec1: entered allmulticast mode
[   39.585962][ T3670] set_capacity_and_notify: 1 callbacks suppressed
[   39.586133][ T3670] loop3: detected capacity change from 0 to 2048
[   39.651495][   T28] audit: type=1400 audit(1777574511.136:188): avc:  denied  { create } for  pid=3665 comm="syz.3.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   39.740556][ T3670] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   39.775811][ T3670] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #12: block 2: comm syz.3.52: lblock 0 mapped to illegal pblock 2 (length 1)
[   39.808371][ T3670] tipc: Started in network mode
[   39.814788][ T3670] tipc: Node identity ac1414aa, cluster identity 4711
[   39.828827][ T3670] tipc: Enabled bearer <udp:syz2>, priority 10
[   39.972612][   T28] audit: type=1400 audit(1777574511.146:189): avc:  denied  { setopt } for  pid=3665 comm="syz.3.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   40.027759][   T28] audit: type=1400 audit(1777574511.146:190): avc:  denied  { connect } for  pid=3665 comm="syz.3.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   40.073990][   T28] audit: type=1400 audit(1777574511.866:191): avc:  denied  { read } for  pid=3665 comm="syz.3.52" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1
[   40.537392][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.777101][ T3693] loop3: detected capacity change from 0 to 128
[   40.825734][ T3692] syz.3.62: attempt to access beyond end of device
[   40.825734][ T3692] loop3: rw=2049, sector=154, nr_sectors = 2 limit=128
[   40.981206][ T3692] syz.3.62: attempt to access beyond end of device
[   40.981206][ T3692] loop3: rw=2049, sector=138, nr_sectors = 2 limit=128
[   41.008080][ T3391] tipc: Node number set to 2886997162
[   41.027877][ T3692] Buffer I/O error on dev loop3, logical block 69, lost async page write
[   41.255714][ T3702] ref_ctr increment failed for inode: 0xa9 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888103bb72c0
[   41.296586][ T3702] uprobe: syz.3.65:3702 failed to unregister, leaking uprobe
[   41.408289][ T3706] loop3: detected capacity change from 0 to 512
[   41.441840][ T3706] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   41.538860][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.926446][ T3722] loop2: detected capacity change from 0 to 2048
[   41.936613][ T3722] EXT4-fs: test_dummy_encryption option not supported
[   41.961852][   T28] audit: type=1400 audit(1777574514.056:192): avc:  denied  { create } for  pid=3721 comm="syz.2.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   42.031995][   T28] audit: type=1400 audit(1777574514.056:193): avc:  denied  { ioctl } for  pid=3721 comm="syz.2.72" path="socket:[5017]" dev="sockfs" ino=5017 ioctlcmd=0x5868 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   42.083909][ T3724] netlink: 'syz.3.73': attribute type 4 has an invalid length.
[   42.385401][ T3728] loop3: detected capacity change from 0 to 128
[   42.469425][ T3727] syz.3.74: attempt to access beyond end of device
[   42.469425][ T3727] loop3: rw=2049, sector=154, nr_sectors = 2 limit=128
[   42.700451][   T28] audit: type=1400 audit(1777574514.796:194): avc:  denied  { setopt } for  pid=3729 comm="syz.0.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   42.775009][ T3730] netlink: 14 bytes leftover after parsing attributes in process `syz.0.75'.
[   42.786879][   T28] audit: type=1400 audit(1777574514.866:195): avc:  denied  { map_read map_write } for  pid=3729 comm="syz.0.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   42.809928][ T3728] syz.3.74: attempt to access beyond end of device
[   42.809928][ T3728] loop3: rw=2049, sector=138, nr_sectors = 2 limit=128
[   42.841800][ T3728] Buffer I/O error on dev loop3, logical block 69, lost async page write
[   42.884018][ T3733] loop0: detected capacity change from 0 to 512
[   42.904276][ T3730] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   42.929347][ T3733] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   42.974293][ T3733] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   43.022582][ T3733] EXT4-fs (loop0): 1 truncate cleaned up
[   43.037034][ T3730] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   43.047857][ T3733] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   43.092468][ T3742] 9pnet_fd: Insufficient options for proto=fd
[   43.115460][   T28] audit: type=1400 audit(1777574515.206:196): avc:  denied  { watch } for  pid=3743 comm="syz.2.80" path="/18" dev="tmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   43.156078][ T3730] bond0 (unregistering): Released all slaves
[   43.167632][ T3745] loop3: detected capacity change from 0 to 512
[   43.196858][ T3744] xt_l2tp: unknown flags: 10
[   43.225537][ T3745] EXT4-fs (loop3): 1 orphan inode deleted
[   43.260208][ T3745] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   43.282970][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.380525][ T3745] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.422454][ T3752] loop0: detected capacity change from 0 to 512
[   43.443555][ T3752] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[   43.487611][ T3752] EXT4-fs (loop0): 1 truncate cleaned up
[   43.507320][ T3752] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   43.885241][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.937576][ T3761] netlink: 131740 bytes leftover after parsing attributes in process `syz.0.86'.
[   43.966703][ T3761] netlink: zone id is out of range
[   43.985589][ T3761] netlink: zone id is out of range
[   44.002796][ T3761] netlink: del zone limit has 8 unknown bytes
[   44.073854][ T3763] loop0: detected capacity change from 0 to 512
[   44.180561][ T3763] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   44.260264][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.357349][ T3768] IPVS: length: 146 != 8
[   44.440098][ T3770] loop0: detected capacity change from 0 to 128
[   44.501072][ T3769] syz.0.89: attempt to access beyond end of device
[   44.501072][ T3769] loop0: rw=2049, sector=154, nr_sectors = 2 limit=128
[   44.680770][ T3770] syz.0.89: attempt to access beyond end of device
[   44.680770][ T3770] loop0: rw=2049, sector=138, nr_sectors = 2 limit=128
[   44.724218][ T3770] Buffer I/O error on dev loop0, logical block 69, lost async page write
[   45.224523][ T3775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.91'.
[   45.264911][ T3775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.91'.
[   45.369819][ T3775] process 'syz.0.91' launched '/dev/fd/11' with NULL argv: empty string added
[   45.393328][   T28] kauditd_printk_skb: 20 callbacks suppressed
[   45.393340][   T28] audit: type=1400 audit(1777574517.345:217): avc:  denied  { execute_no_trans } for  pid=3774 comm="syz.0.91" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   45.437659][ T3779] loop2: detected capacity change from 0 to 256
[   45.470719][   T28] audit: type=1400 audit(1777574517.401:218): avc:  denied  { bind } for  pid=3774 comm="syz.0.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   45.491764][ T3779] FAT-fs (loop2): Directory bread(block 64) failed
[   45.501309][ T3779] FAT-fs (loop2): Directory bread(block 65) failed
[   45.513182][ T3779] FAT-fs (loop2): Directory bread(block 66) failed
[   45.524973][   T28] audit: type=1400 audit(1777574517.401:219): avc:  denied  { name_bind } for  pid=3774 comm="syz.0.91" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[   45.549508][ T3779] FAT-fs (loop2): Directory bread(block 67) failed
[   45.560834][ T3779] FAT-fs (loop2): Directory bread(block 68) failed
[   45.573695][ T3779] FAT-fs (loop2): Directory bread(block 69) failed
[   45.583732][ T3779] FAT-fs (loop2): Directory bread(block 70) failed
[   45.594117][   T28] audit: type=1400 audit(1777574517.401:220): avc:  denied  { node_bind } for  pid=3774 comm="syz.0.91" saddr=255.255.255.255 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[   45.623019][ T3779] FAT-fs (loop2): Directory bread(block 71) failed
[   45.631412][ T3779] FAT-fs (loop2): Directory bread(block 72) failed
[   45.638410][ T3779] FAT-fs (loop2): Directory bread(block 73) failed
[   45.646287][   T28] audit: type=1400 audit(1777574517.448:221): avc:  denied  { map } for  pid=3774 comm="syz.0.91" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=6169 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   45.677192][   T28] audit: type=1400 audit(1777574517.458:222): avc:  denied  { read } for  pid=3774 comm="syz.0.91" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=6169 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   45.721677][ T3779] syz.2.92: attempt to access beyond end of device
[   45.721677][ T3779] loop2: rw=524288, sector=1192, nr_sectors = 4 limit=256
[   45.745605][ T3779] syz.2.92: attempt to access beyond end of device
[   45.745605][ T3779] loop2: rw=0, sector=1192, nr_sectors = 4 limit=256
[   45.760315][ T3779] syz.2.92: attempt to access beyond end of device
[   45.760315][ T3779] loop2: rw=0, sector=1192, nr_sectors = 4 limit=256
[   45.774784][ T3779] syz.2.92: attempt to access beyond end of device
[   45.774784][ T3779] loop2: rw=0, sector=1192, nr_sectors = 4 limit=256
[   45.800998][ T3779] syz.2.92: attempt to access beyond end of device
[   45.800998][ T3779] loop2: rw=0, sector=1192, nr_sectors = 4 limit=256
[   45.816086][ T3779] syz.2.92: attempt to access beyond end of device
[   45.816086][ T3779] loop2: rw=0, sector=1192, nr_sectors = 4 limit=256
[   45.829923][ T3779] syz.2.92: attempt to access beyond end of device
[   45.829923][ T3779] loop2: rw=0, sector=1192, nr_sectors = 4 limit=256
[   45.847263][ T3779] syz.2.92: attempt to access beyond end of device
[   45.847263][ T3779] loop2: rw=0, sector=1192, nr_sectors = 4 limit=256
[   45.901433][ T3785] netlink: 8 bytes leftover after parsing attributes in process `syz.0.94'.
[   46.844387][   T28] audit: type=1400 audit(1777574518.702:223): avc:  denied  { create } for  pid=3791 comm="syz.3.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[   46.876379][ T3793] loop3: detected capacity change from 0 to 512
[   46.904527][ T3793] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   46.948569][   T28] audit: type=1400 audit(1777574518.776:224): avc:  denied  { read } for  pid=3791 comm="syz.3.97" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[   47.042813][   T28] audit: type=1400 audit(1777574518.776:225): avc:  denied  { open } for  pid=3791 comm="syz.3.97" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[   47.114105][   T28] audit: type=1400 audit(1777574518.776:226): avc:  denied  { ioctl } for  pid=3791 comm="syz.3.97" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[   47.172239][ T3805] loop0: detected capacity change from 0 to 128
[   47.175172][ T3571] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.352467][ T3804] Buffer I/O error on dev loop0, logical block 69, lost async page write
[   47.559556][ T3811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   47.570980][ T3811] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   47.647788][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.869657][ T3815] loop3: detected capacity change from 0 to 512
[   47.895160][ T3815] EXT4-fs: Ignoring removed nomblk_io_submit option
[   47.935819][ T3815] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8857e02c, mo2=0002]
[   47.968984][ T3815] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 33261: comm syz.3.104: invalid block
[   48.004947][ T3815] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   48.006320][    C0] EXT4-fs (loop3): error count since last fsck: 1
[   48.022489][    C0] EXT4-fs (loop3): initial error at time 1777574519: ext4_get_branch:178: inode 11: block 33261
[   48.033617][    C0] EXT4-fs (loop3): last error at time 1777574519: ext4_get_branch:178: inode 11: block 33261
[   48.060056][ T3815] EXT4-fs (loop3): Remounting filesystem read-only
[   48.073213][ T3815] EXT4-fs (loop3): 1 truncate cleaned up
[   48.097646][ T3815] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   48.173280][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.217647][ T3823] loop2: detected capacity change from 0 to 512
[   48.265174][ T3823] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   48.331844][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.452156][ T3822] loop0: detected capacity change from 0 to 512
[   48.470406][ T3832] netlink: 572 bytes leftover after parsing attributes in process `syz.3.111'.
[   48.492283][ T3832] netlink: 12 bytes leftover after parsing attributes in process `syz.3.111'.
[   48.538950][ T3822] EXT4-fs error (device loop0): ext4_free_inode:354: comm syz.0.107: bit already cleared for inode 11
[   48.562454][ T3822] loop0: lost filesystem error report for type 5 error -117
[   48.572933][    C0] EXT4-fs (loop0): error count since last fsck: 1
[   48.586896][    C0] EXT4-fs (loop0): initial error at time 1777574520: ext4_free_inode:354
[   48.595634][    C0] EXT4-fs (loop0): last error at time 1777574520: ext4_free_inode:354
[   48.605938][ T3822] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem
[   48.615101][ T3822] loop0: lost filesystem error report for type 5 error -117
[   48.617919][ T3822] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem
[   48.668153][ T3822] loop0: lost filesystem error report for type 5 error -117
[   48.668724][ T3822] EXT4-fs (loop0): 1 orphan inode deleted
[   48.685360][ T3840] xt_l2tp: unknown flags: 10
[   48.727306][ T3842] loop3: detected capacity change from 0 to 128
[   48.750109][ T3822] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   48.899679][ T3842] Buffer I/O error on dev loop3, logical block 69, lost async page write
[   49.014390][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.097548][ T3853] netlink: 20 bytes leftover after parsing attributes in process `syz.1.114'.
[   49.315560][ T3852] loop0: detected capacity change from 0 to 512
[   49.360557][ T3852] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ01777777777777777777777'
[   49.473608][ T3863] loop0: detected capacity change from 0 to 1024
[   49.492325][ T3863] EXT4-fs: Ignoring removed orlov option
[   49.509532][ T3863] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002]
[   49.524607][ T3863] System zones: 0-1, 3-12
[   49.553258][ T3863] EXT4-fs (loop0): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   49.614379][ T3869] FAULT_INJECTION: forcing a failure.
[   49.614379][ T3869] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   49.639823][ T3863] EXT4-fs error (device loop0): ext4_find_dest_de:2050: inode #2: block 16: comm syz.0.119: bad entry in directory: directory entry overrun - offset=60, inode=21519, rec_len=1024, size=1024 fake=0
[   49.675474][ T3869] CPU: 0 UID: 0 PID: 3869 Comm: syz.1.121 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[   49.675519][ T3869] Tainted: [W]=WARN
[   49.675525][ T3869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[   49.675537][ T3869] Call Trace:
[   49.675543][ T3869]  <TASK>
[   49.675549][ T3869]  __dump_stack+0x1d/0x30
[   49.675691][ T3869]  dump_stack_lvl+0x95/0xd0
[   49.675710][ T3869]  dump_stack+0x15/0x1b
[   49.675890][ T3869]  should_fail_ex+0x263/0x280
[   49.675915][ T3869]  should_fail+0xb/0x20
[   49.675936][ T3869]  should_fail_usercopy+0x1a/0x20
[   49.675976][ T3869]  _copy_from_user+0x1c/0xb0
[   49.676045][ T3869]  sctp_getsockopt_scheduler+0x71/0x330
[   49.676067][ T3869]  sctp_getsockopt+0x9ff/0xaa0
[   49.676088][ T3869]  sock_common_getsockopt+0x60/0x70
[   49.676110][ T3869]  ? __pfx_sock_common_getsockopt+0x10/0x10
[   49.676145][ T3869]  do_sock_getsockopt+0x2f5/0x570
[   49.676191][ T3869]  __x64_sys_getsockopt+0x11d/0x1a0
[   49.676282][ T3869]  x64_sys_call+0x2dcf/0x3020
[   49.676310][ T3869]  do_syscall_64+0x12c/0x3b0
[   49.676333][ T3869]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   49.676350][ T3869] RIP: 0033:0x7f22459acdd9
[   49.676363][ T3869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   49.676377][ T3869] RSP: 002b:00007f22443ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[   49.676393][ T3869] RAX: ffffffffffffffda RBX: 00007f2245c25fa0 RCX: 00007f22459acdd9
[   49.676440][ T3869] RDX: 000000000000007b RSI: 0000000000000084 RDI: 0000000000000003
[   49.676450][ T3869] RBP: 00007f22443ff090 R08: 00002000000001c0 R09: 0000000000000000
[   49.676460][ T3869] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001
[   49.676472][ T3869] R13: 00007f2245c26038 R14: 00007f2245c25fa0 R15: 00007ffea11a0208
[   49.676524][ T3869]  </TASK>
[   49.891605][ T3637] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.910705][ T3871] loop1: detected capacity change from 0 to 764
[   49.931278][ T3871] rock: directory entry would overflow storage
[   49.941629][ T3871] rock: sig=0x4654, size=5, remaining=4
[   49.964887][ T3871] netlink: 56 bytes leftover after parsing attributes in process `syz.1.122'.
[   50.192251][ T3880] bio_check_eod: 1815 callbacks suppressed
[   50.192294][ T3880] syz.3.126: attempt to access beyond end of device
[   50.192294][ T3880] loop3: rw=2049, sector=154, nr_sectors = 2 limit=128
[   50.235938][ T3877] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ01777777777777777777777'
[   50.366437][ T3880] syz.3.126: attempt to access beyond end of device
[   50.366437][ T3880] loop3: rw=2049, sector=138, nr_sectors = 2 limit=128
[   50.380225][ T3880] Buffer I/O error on dev loop3, logical block 69, lost async page write
[   50.405631][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0500-0000-0000-000000000000.
[   50.883465][   T28] kauditd_printk_skb: 153 callbacks suppressed
[   50.883509][   T28] audit: type=1400 audit(1777574522.481:380): avc:  denied  { write } for  pid=3895 comm="syz.2.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   50.970916][   T28] audit: type=1400 audit(1777574522.565:381): avc:  denied  { create } for  pid=3895 comm="syz.2.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   51.054596][   T28] audit: type=1400 audit(1777574522.649:382): avc:  denied  { read write } for  pid=3897 comm="syz.2.133" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   51.084048][ T3890] set_capacity_and_notify: 2 callbacks suppressed
[   51.084074][ T3890] loop3: detected capacity change from 0 to 512
[   51.101552][   T28] audit: type=1400 audit(1777574522.668:383): avc:  denied  { open } for  pid=3897 comm="syz.2.133" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   51.127938][   T28] audit: type=1400 audit(1777574522.714:384): avc:  denied  { module_request } for  pid=3897 comm="syz.2.133" kmod="crypto-gcm(aes)" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[   51.181789][ T3901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.133'.
[   51.213773][   T28] audit: type=1400 audit(1777574522.752:385): avc:  denied  { connect } for  pid=3897 comm="syz.2.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   51.257730][ T3890] EXT4-fs error (device loop3): ext4_free_inode:354: comm syz.3.129: bit already cleared for inode 11
[   51.266424][   T28] audit: type=1400 audit(1777574522.789:386): avc:  denied  { connect } for  pid=3897 comm="syz.2.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   51.299289][ T3890] loop3: lost filesystem error report for type 5 error -117
[   51.301631][ T3908] xt_l2tp: unknown flags: 10
[   51.312533][    C0] EXT4-fs (loop3): error count since last fsck: 1
[   51.312552][    C0] EXT4-fs (loop3): initial error at time 1777574522: ext4_free_inode:354
[   51.312590][    C0] EXT4-fs (loop3): last error at time 1777574522: ext4_free_inode:354
[   51.354701][ T3890] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem
[   51.384642][ T3890] loop3: lost filesystem error report for type 5 error -117
[   51.387458][ T3890] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem
[   51.414334][   T28] audit: type=1400 audit(1777574522.976:387): avc:  denied  { bpf } for  pid=3911 comm="syz.4.136" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   51.435933][ T3890] loop3: lost filesystem error report for type 5 error -117
[   51.436614][ T3890] EXT4-fs (loop3): 1 orphan inode deleted
[   51.437133][ T3912] kernel profiling enabled (shift: 2)
[   51.459021][ T3890] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   51.480944][   T28] audit: type=1400 audit(1777574522.976:388): avc:  denied  { nlmsg_write } for  pid=3911 comm="syz.4.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   51.525889][   T28] audit: type=1400 audit(1777574522.995:389): avc:  denied  { read write } for  pid=3911 comm="syz.4.136" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[   51.606253][ T3915] loop4: detected capacity change from 0 to 256
[   51.630780][ T3915] FAT-fs (loop4): Directory bread(block 64) failed
[   51.638144][ T3915] FAT-fs (loop4): Directory bread(block 65) failed
[   51.652472][ T3915] FAT-fs (loop4): Directory bread(block 66) failed
[   51.665403][ T3915] FAT-fs (loop4): Directory bread(block 67) failed
[   51.684448][ T3915] FAT-fs (loop4): Directory bread(block 68) failed
[   51.695645][ T3915] FAT-fs (loop4): Directory bread(block 69) failed
[   51.717097][ T3915] FAT-fs (loop4): Directory bread(block 70) failed
[   51.724010][ T3915] FAT-fs (loop4): Directory bread(block 71) failed
[   51.742103][ T3915] FAT-fs (loop4): Directory bread(block 72) failed
[   51.752874][ T3915] FAT-fs (loop4): Directory bread(block 73) failed
[   51.794567][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.839130][ T3915] syz.4.137: attempt to access beyond end of device
[   51.839130][ T3915] loop4: rw=524288, sector=1192, nr_sectors = 4 limit=256
[   51.883241][ T3915] syz.4.137: attempt to access beyond end of device
[   51.883241][ T3915] loop4: rw=0, sector=1192, nr_sectors = 4 limit=256
[   51.915742][ T3915] syz.4.137: attempt to access beyond end of device
[   51.915742][ T3915] loop4: rw=0, sector=1192, nr_sectors = 4 limit=256
[   51.952078][ T3915] syz.4.137: attempt to access beyond end of device
[   51.952078][ T3915] loop4: rw=0, sector=1192, nr_sectors = 4 limit=256
[   51.973180][ T3924] loop1: detected capacity change from 0 to 512
[   51.994017][ T3915] syz.4.137: attempt to access beyond end of device
[   51.994017][ T3915] loop4: rw=0, sector=1192, nr_sectors = 4 limit=256
[   52.008158][ T3924] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ01777777777777777777777'
[   52.039547][ T3915] syz.4.137: attempt to access beyond end of device
[   52.039547][ T3915] loop4: rw=0, sector=1192, nr_sectors = 4 limit=256
[   52.077101][ T3915] syz.4.137: attempt to access beyond end of device
[   52.077101][ T3915] loop4: rw=0, sector=1192, nr_sectors = 4 limit=256
[   52.118941][ T3915] syz.4.137: attempt to access beyond end of device
[   52.118941][ T3915] loop4: rw=0, sector=1192, nr_sectors = 4 limit=256
[   52.212484][ T3935] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   52.268741][ T3935] loop3: detected capacity change from 0 to 1024
[   52.283371][ T3935] EXT4-fs: Ignoring removed orlov option
[   52.329930][ T3935] EXT4-fs (loop3): stripe (7) is not aligned with cluster size (4096), stripe is disabled
[   52.359881][ T3935] EXT4-fs (loop3): revision level too high, forcing read-only mode
[   52.377096][ T3935] EXT4-fs (loop3): orphan cleanup on readonly fs
[   52.390678][ T3935] EXT4-fs error (device loop3): __ext4_get_inode_loc:4885: comm syz.3.141: Invalid inode table block 0 in block_group 0
[   52.404106][ T3935] loop3: lost filesystem error report for type 5 error -117
[   52.405522][ T3935] EXT4-fs (loop3): Remounting filesystem read-only
[   52.412958][    C1] EXT4-fs (loop3): error count since last fsck: 1
[   52.412989][    C1] EXT4-fs (loop3): initial error at time 1777574523: __ext4_get_inode_loc:4885
[   52.413041][    C1] EXT4-fs (loop3): last error at time 1777574523: __ext4_get_inode_loc:4885
[   52.443904][ T3935] EXT4-fs (loop3): 1 truncate cleaned up
[   52.452587][ T3935] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   52.492348][ T3938] loop1: detected capacity change from 0 to 512
[   52.519735][ T3938] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ01777777777777777777777'
[   52.672132][ T3952] loop0: detected capacity change from 0 to 512
[   52.690075][ T3952] EXT4-fs: Ignoring removed mblk_io_submit option
[   52.702820][ T3952] EXT4-fs: Mount option(s) incompatible with ext2
[   52.749283][ T3952] deleting an unspecified loop device is not supported.
[   52.980937][ T3957] Bluetooth: hci0: sending frame failed (-49)
[   52.987578][   T43] Bluetooth: hci0: Opcode 0x1003 failed: -49
[   53.491509][ T3962] loop2: detected capacity change from 0 to 512
[   53.508888][ T3962] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ01777777777777777777777'
[   53.897175][ T3977] loop2: detected capacity change from 0 to 512
[   53.913708][ T3977] EXT4-fs: Ignoring removed nomblk_io_submit option
[   53.935406][ T3977] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8857e02c, mo2=0002]
[   53.946147][ T3977] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.157: invalid indirect mapped block 2683928664 (level 1)
[   53.960895][ T3977] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   53.962437][ T3977] EXT4-fs (loop2): Remounting filesystem read-only
[   53.971836][    C0] EXT4-fs (loop2): error count since last fsck: 1
[   53.971889][    C0] EXT4-fs (loop2): initial error at time 1777574525: ext4_free_branches:1023: inode 11
[   53.972305][    C0] EXT4-fs (loop2): last error at time 1777574525: ext4_free_branches:1023: inode 11
[   54.008562][ T3977] EXT4-fs (loop2): 1 truncate cleaned up
[   54.016517][ T3977] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   54.712400][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.982386][ T3999] loop1: detected capacity change from 0 to 512
[   54.992196][ T3996] loop4: detected capacity change from 0 to 512
[   54.996239][ T3999] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ01777777777777777777777'
[   55.062611][ T3996] EXT4-fs error (device loop4): ext4_free_inode:354: comm syz.4.164: bit already cleared for inode 11
[   55.074218][ T3996] loop4: lost filesystem error report for type 5 error -117
[   55.079185][ T3996] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem
[   55.086893][    C0] EXT4-fs (loop4): error count since last fsck: 1
[   55.086946][    C0] EXT4-fs (loop4): initial error at time 1777574526: ext4_free_inode:354
[   55.087032][    C0] EXT4-fs (loop4): last error at time 1777574526: ext4_free_inode:354
[   55.127753][ T3996] loop4: lost filesystem error report for type 5 error -117
[   55.129001][ T3996] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem
[   55.162924][ T3996] loop4: lost filesystem error report for type 5 error -117
[   55.194132][ T3996] EXT4-fs (loop4): 1 orphan inode deleted
[   55.232981][ T3996] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   55.344239][ T4010] netlink: 68 bytes leftover after parsing attributes in process `syz.2.169'.
[   55.429282][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.607588][ T4023] netlink: 8 bytes leftover after parsing attributes in process `syz.4.174'.
[   55.770146][ T4026] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   55.802419][ T4026] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000.
[   56.173460][ T4035] EXT4-fs: Ignoring removed nomblk_io_submit option
[   56.174246][ T4038] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   56.224648][ T4035] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8857e02c, mo2=0002]
[   56.239578][   T28] kauditd_printk_skb: 284 callbacks suppressed
[   56.239591][   T28] audit: type=1326 audit(2000000000.374:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4025 comm="syz.0.175" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2b2a3ed60e code=0x7ffc0000
[   56.271720][   T28] audit: type=1326 audit(2000000000.383:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4025 comm="syz.0.175" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2b2a3ed60e code=0x7ffc0000
[   56.297897][   T28] audit: type=1326 audit(2000000000.383:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4025 comm="syz.0.175" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2b2a3ed60e code=0x7ffc0000
[   56.323790][   T28] audit: type=1326 audit(2000000000.383:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4025 comm="syz.0.175" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2b2a3ed60e code=0x7ffc0000
[   56.328090][ T4035] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.176: invalid indirect mapped block 2683928664 (level 1)
[   56.349478][   T28] audit: type=1326 audit(2000000000.383:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4025 comm="syz.0.175" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2b2a3ed60e code=0x7ffc0000
[   56.349505][   T28] audit: type=1326 audit(2000000000.383:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4025 comm="syz.0.175" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2b2a3ed60e code=0x7ffc0000
[   56.349590][   T28] audit: type=1326 audit(2000000000.411:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4025 comm="syz.0.175" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2b2a3ed60e code=0x7ffc0000
[   56.349611][   T28] audit: type=1326 audit(2000000000.411:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4025 comm="syz.0.175" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2b2a3ed60e code=0x7ffc0000
[   56.349630][   T28] audit: type=1326 audit(2000000000.411:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4025 comm="syz.0.175" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2b2a3ed60e code=0x7ffc0000
[   56.349656][   T28] audit: type=1326 audit(2000000000.430:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4025 comm="syz.0.175" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2b2a3ed60e code=0x7ffc0000
[   56.531976][ T4035] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   56.532379][ T4035] EXT4-fs (loop4): Remounting filesystem read-only
[   56.532702][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   56.541787][    C0] EXT4-fs (loop4): error count since last fsck: 1
[   56.566781][    C0] EXT4-fs (loop4): initial error at time 2000000000: ext4_free_branches:1023: inode 11
[   56.577716][    C0] EXT4-fs (loop4): last error at time 2000000000: ext4_free_branches:1023: inode 11
[   56.592990][ T4035] EXT4-fs (loop4): 1 truncate cleaned up
[   56.615003][ T4035] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   56.779605][ T4049] set_capacity_and_notify: 3 callbacks suppressed
[   56.779785][ T4049] loop1: detected capacity change from 0 to 512
[   56.832685][ T4049] EXT4-fs error (device loop1): ext4_free_inode:354: comm syz.1.179: bit already cleared for inode 11
[   56.846195][ T4049] loop1: lost filesystem error report for type 5 error -117
[   56.847555][    C0] EXT4-fs (loop1): error count since last fsck: 1
[   56.861959][    C0] EXT4-fs (loop1): initial error at time 2000000000: ext4_free_inode:354
[   56.870822][    C0] EXT4-fs (loop1): last error at time 2000000000: ext4_free_inode:354
[   56.881636][ T4049] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem
[   56.891246][ T4049] loop1: lost filesystem error report for type 5 error -117
[   56.892565][ T4049] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem
[   56.911197][ T4049] loop1: lost filesystem error report for type 5 error -117
[   56.912066][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   56.912731][ T4049] EXT4-fs (loop1): 1 orphan inode deleted
[   56.949297][ T4049] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   57.162812][ T4054] loop4: detected capacity change from 0 to 512
[   57.223166][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   57.249881][ T4054] EXT4-fs error (device loop4): ext4_free_inode:354: comm syz.4.181: bit already cleared for inode 11
[   57.275425][ T4054] loop4: lost filesystem error report for type 5 error -117
[   57.280822][ T4054] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem
[   57.288328][    C1] EXT4-fs (loop4): error count since last fsck: 1
[   57.288359][    C1] EXT4-fs (loop4): initial error at time 2000000001: ext4_free_inode:354
[   57.288585][    C1] EXT4-fs (loop4): last error at time 2000000001: ext4_free_inode:354
[   57.357937][ T4054] loop4: lost filesystem error report for type 5 error -117
[   57.360330][ T4054] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem
[   57.399381][ T4054] loop4: lost filesystem error report for type 5 error -117
[   57.402836][ T4054] EXT4-fs (loop4): 1 orphan inode deleted
[   57.453720][ T4054] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   57.483528][ T4064] team0 (unregistering): Port device team_slave_0 removed
[   57.496109][ T4064] team0 (unregistering): Port device team_slave_1 removed
[   57.685529][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   57.835901][ T4068] loop1: detected capacity change from 0 to 512
[   57.861829][ T4068] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ01777777777777777777777'
[   58.043835][ T4077] mmap: syz.1.190 (4077) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   58.072277][ T4077] erspan1: entered allmulticast mode
[   58.176339][ T4079] loop4: detected capacity change from 0 to 512
[   58.189916][ T4079] EXT4-fs: Ignoring removed nomblk_io_submit option
[   58.202784][ T4079] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8857e02c, mo2=0002]
[   58.228054][ T4079] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.191: invalid indirect mapped block 2683928664 (level 1)
[   58.243383][ T4079] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   58.244116][ T4079] EXT4-fs (loop4): Remounting filesystem read-only
[   58.254175][    C0] EXT4-fs (loop4): error count since last fsck: 1
[   58.254281][    C0] EXT4-fs (loop4): initial error at time 2000000002: ext4_free_branches:1023: inode 11
[   58.254676][    C0] EXT4-fs (loop4): last error at time 2000000002: ext4_free_branches:1023: inode 11
[   58.301094][ T4079] EXT4-fs (loop4): 1 truncate cleaned up
[   58.310219][ T4079] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   58.366425][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.591952][ T4088] loop1: detected capacity change from 0 to 512
[   58.719672][ T4088] EXT4-fs (loop1): 1 orphan inode deleted
[   58.732592][ T4088] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   58.752556][ T4088] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   59.108891][ T4026] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   59.130399][ T4087] loop4: detected capacity change from 0 to 164
[   59.435771][ T4087] isofs_fill_super: bread failed, dev=loop4, iso_blknum=41, block=82
[   59.477161][   T40] EXT4-fs error (device loop1): ext4_release_dquot:7070: comm kworker/u8:2: Failed to release dquot type 1
[   59.536895][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   59.609190][ T4095] netlink: 131740 bytes leftover after parsing attributes in process `syz.2.196'.
[   59.655820][ T4095] netlink: zone id is out of range
[   59.683837][ T4095] netlink: zone id is out of range
[   59.709226][ T4095] netlink: zone id is out of range
[   59.723603][ T4095] netlink: zone id is out of range
[   59.746849][ T4095] netlink: zone id is out of range
[   59.764022][ T4087] netlink: 4 bytes leftover after parsing attributes in process `syz.4.193'.
[   59.778375][ T4095] netlink: zone id is out of range
[   59.795341][ T4095] netlink: zone id is out of range
[   59.818161][ T4095] netlink: zone id is out of range
[   59.841104][ T4095] netlink: zone id is out of range
[   59.863977][ T4095] netlink: zone id is out of range
[   60.012551][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.159116][ T4100] netlink: 52 bytes leftover after parsing attributes in process `syz.4.193'.
[   60.205441][ T4111] loop1: detected capacity change from 0 to 512
[   60.227187][ T4111] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[   60.269117][ T4111] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.201: bg 0: block 4: invalid block bitmap
[   60.292279][ T4111] loop1: lost filesystem error report for type 5 error -117
[   60.292372][ T4111] EXT4-fs (loop1): Remounting filesystem read-only
[   60.307542][    C1] EXT4-fs (loop1): error count since last fsck: 1
[   60.307563][    C1] EXT4-fs (loop1): initial error at time 2000000004: ext4_validate_block_bitmap:432
[   60.307587][    C1] EXT4-fs (loop1): last error at time 2000000004: ext4_validate_block_bitmap:432
[   60.333560][ T4111] EXT4-fs (loop1): 1 truncate cleaned up
[   60.339746][ T4111] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   60.360050][ T4105] loop2: detected capacity change from 0 to 512
[   60.370123][ T4114] loop4: detected capacity change from 0 to 128
[   60.391172][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.421334][ T4113] bio_check_eod: 641 callbacks suppressed
[   60.421350][ T4113] syz.4.202: attempt to access beyond end of device
[   60.421350][ T4113] loop4: rw=2049, sector=154, nr_sectors = 2 limit=128
[   60.462236][ T4105] vfat: Unknown parameter ''
[   60.521672][ T4103] loop0: detected capacity change from 0 to 512
[   60.539956][ T4116] netlink: 131740 bytes leftover after parsing attributes in process `syz.1.203'.
[   60.616402][ T4103] EXT4-fs error (device loop0): ext4_free_inode:354: comm syz.0.197: bit already cleared for inode 11
[   60.631177][ T4114] syz.4.202: attempt to access beyond end of device
[   60.631177][ T4114] loop4: rw=2049, sector=138, nr_sectors = 2 limit=128
[   60.642820][ T4103] loop0: lost filesystem error report for type 5 error -117
[   60.645299][ T4114] Buffer I/O error on dev loop4, logical block 69, lost async page write
[   60.661808][    C0] EXT4-fs (loop0): error count since last fsck: 1
[   60.661825][    C0] EXT4-fs (loop0): initial error at time 2000000004: ext4_free_inode:354
[   60.661852][    C0] EXT4-fs (loop0): last error at time 2000000004: ext4_free_inode:354
[   60.691711][ T4103] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem
[   60.738979][ T4103] loop0: lost filesystem error report for type 5 error -117
[   60.742136][ T4103] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem
[   60.760501][ T4103] loop0: lost filesystem error report for type 5 error -117
[   60.761538][ T4103] EXT4-fs (loop0): 1 orphan inode deleted
[   60.813612][ T4103] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   61.031513][ T4139] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   61.051398][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   61.101216][ T4141] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   61.167749][ T4141] EXT4-fs: Ignoring removed orlov option
[   61.204407][ T4141] EXT4-fs (loop4): stripe (7) is not aligned with cluster size (4096), stripe is disabled
[   61.239417][ T4141] EXT4-fs (loop4): revision level too high, forcing read-only mode
[   61.274722][ T4141] EXT4-fs (loop4): orphan cleanup on readonly fs
[   61.286762][ T4141] EXT4-fs error (device loop4): __ext4_get_inode_loc:4885: comm syz.4.212: Invalid inode table block 0 in block_group 0
[   61.310164][ T4141] loop4: lost filesystem error report for type 5 error -117
[   61.310513][ T4141] EXT4-fs (loop4): Remounting filesystem read-only
[   61.317975][    C1] EXT4-fs (loop4): error count since last fsck: 1
[   61.318011][    C1] EXT4-fs (loop4): initial error at time 2000000005: __ext4_get_inode_loc:4885
[   61.318041][    C1] EXT4-fs (loop4): last error at time 2000000005: __ext4_get_inode_loc:4885
[   61.349688][ T4141] EXT4-fs (loop4): 1 truncate cleaned up
[   61.358543][ T4141] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   61.884619][ T4153] EXT4-fs: Ignoring removed nomblk_io_submit option
[   61.894365][ T3935] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   61.936472][ T4153] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8857e02c, mo2=0002]
[   61.970918][ T4158] syz.3.218: attempt to access beyond end of device
[   61.970918][ T4158] loop3: rw=2049, sector=154, nr_sectors = 2 limit=128
[   61.993896][ T4153] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.216: invalid indirect mapped block 2683928664 (level 1)
[   62.012982][ T4153] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   62.015256][ T3304] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000.
[   62.015587][ T4153] EXT4-fs (loop0): Remounting filesystem read-only
[   62.024630][    C1] EXT4-fs (loop0): error count since last fsck: 1
[   62.024674][    C1] EXT4-fs (loop0): initial error at time 2000000005: ext4_free_branches:1023: inode 11
[   62.024887][    C1] EXT4-fs (loop0): last error at time 2000000005: ext4_free_branches:1023: inode 11
[   62.095045][ T4153] EXT4-fs (loop0): 1 truncate cleaned up
[   62.115601][ T4158] syz.3.218: attempt to access beyond end of device
[   62.115601][ T4158] loop3: rw=2049, sector=138, nr_sectors = 2 limit=128
[   62.147669][ T4153] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   62.150115][ T4158] Buffer I/O error on dev loop3, logical block 69, lost async page write
[   62.338046][ T4163] set_capacity_and_notify: 5 callbacks suppressed
[   62.338091][ T4163] loop1: detected capacity change from 0 to 1024
[   62.567268][ T4175] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.225'.
[   62.668626][ T4180] netlink: 8 bytes leftover after parsing attributes in process `syz.1.226'.
[   62.690640][ T4181] FAULT_INJECTION: forcing a failure.
[   62.690640][ T4181] name failslab, interval 1, probability 0, space 0, times 1
[   62.703824][ T4181] CPU: 1 UID: 0 PID: 4181 Comm: syz.3.222 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[   62.703862][ T4181] Tainted: [W]=WARN
[   62.703868][ T4181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[   62.703877][ T4181] Call Trace:
[   62.703883][ T4181]  <TASK>
[   62.703890][ T4181]  __dump_stack+0x1d/0x30
[   62.703909][ T4181]  dump_stack_lvl+0x95/0xd0
[   62.703932][ T4181]  dump_stack+0x15/0x1b
[   62.703946][ T4181]  should_fail_ex+0x263/0x280
[   62.703997][ T4181]  ? sctp_add_bind_addr+0x71/0x1e0
[   62.704018][ T4181]  should_failslab+0x8c/0xb0
[   62.704058][ T4181]  __kmalloc_cache_noprof+0x5f/0x400
[   62.704220][ T4181]  sctp_add_bind_addr+0x71/0x1e0
[   62.704238][ T4181]  sctp_do_bind+0x427/0x4b0
[   62.704315][ T4181]  sctp_connect_new_asoc+0x153/0x3a0
[   62.704370][ T4181]  sctp_sendmsg+0xfff/0x1d60
[   62.704392][ T4181]  ? selinux_socket_sendmsg+0x192/0x1c0
[   62.704460][ T4181]  ? __pfx_sctp_sendmsg+0x10/0x10
[   62.704523][ T4181]  ? __pfx_inet_sendmsg+0x10/0x10
[   62.704540][ T4181]  inet_sendmsg+0xc5/0xd0
[   62.704556][ T4181]  __sys_sendto+0x3db/0x490
[   62.704590][ T4181]  __x64_sys_sendto+0x76/0x90
[   62.704606][ T4181]  x64_sys_call+0x2d35/0x3020
[   62.704628][ T4181]  do_syscall_64+0x12c/0x3b0
[   62.704702][ T4181]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   62.704721][ T4181] RIP: 0033:0x7fbe4791cdd9
[   62.704736][ T4181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   62.704776][ T4181] RSP: 002b:00007fbe4632d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[   62.704792][ T4181] RAX: ffffffffffffffda RBX: 00007fbe47b96180 RCX: 00007fbe4791cdd9
[   62.704803][ T4181] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 000000000000000c
[   62.704813][ T4181] RBP: 00007fbe4632d090 R08: 000020000005ffe4 R09: 000000000000001c
[   62.704826][ T4181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   62.704884][ T4181] R13: 00007fbe47b96218 R14: 00007fbe47b96180 R15: 00007ffecf3edbf8
[   62.704899][ T4181]  </TASK>
[   63.131049][ T4192] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.231'.
[   63.160647][ T4194] loop1: detected capacity change from 0 to 128
[   63.192841][ T4193] syz.1.232: attempt to access beyond end of device
[   63.192841][ T4193] loop1: rw=2049, sector=154, nr_sectors = 2 limit=128
[   63.355788][ T4194] syz.1.232: attempt to access beyond end of device
[   63.355788][ T4194] loop1: rw=2049, sector=138, nr_sectors = 2 limit=128
[   63.369356][ T4194] Buffer I/O error on dev loop1, logical block 69, lost async page write
[   63.542691][ T4198] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.233'.
[   63.987300][ T4217] loop2: detected capacity change from 0 to 512
[   64.023232][ T4217] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.242: bg 0: block 393: padding at end of block bitmap is not set
[   64.042316][ T4217] loop2: lost filesystem error report for type 5 error -117
[   64.044000][ T4217] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem
[   64.060601][    C1] EXT4-fs (loop2): error count since last fsck: 1
[   64.060621][    C1] EXT4-fs (loop2): initial error at time 2000000007: ext4_validate_block_bitmap:441
[   64.060647][    C1] EXT4-fs (loop2): last error at time 2000000007: ext4_validate_block_bitmap:441
[   64.087280][ T4217] loop2: lost filesystem error report for type 5 error -117
[   64.088438][ T4217] EXT4-fs (loop2): 2 truncates cleaned up
[   64.129793][ T4224] loop2: detected capacity change from 0 to 128
[   64.173754][ T4223] syz.2.244: attempt to access beyond end of device
[   64.173754][ T4223] loop2: rw=2049, sector=154, nr_sectors = 2 limit=128
[   64.370971][ T4224] syz.2.244: attempt to access beyond end of device
[   64.370971][ T4224] loop2: rw=2049, sector=138, nr_sectors = 2 limit=128
[   64.397204][ T4224] Buffer I/O error on dev loop2, logical block 69, lost async page write
[   64.865554][ T4237] loop0: detected capacity change from 0 to 512
[   64.896373][ T4237] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ01777777777777777777777'
[   65.069992][ T4248] loop2: detected capacity change from 0 to 512
[   65.116369][ T4248] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.254: bg 0: block 393: padding at end of block bitmap is not set
[   65.155941][ T4248] loop2: lost filesystem error report for type 5 error -117
[   65.156162][ T4248] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem
[   65.172629][    C0] EXT4-fs (loop2): error count since last fsck: 1
[   65.172648][    C0] EXT4-fs (loop2): initial error at time 2000000008: ext4_validate_block_bitmap:441
[   65.172679][    C0] EXT4-fs (loop2): last error at time 2000000008: ext4_validate_block_bitmap:441
[   65.198636][ T4248] loop2: lost filesystem error report for type 5 error -117
[   65.198919][ T4248] EXT4-fs (loop2): 2 truncates cleaned up
[   65.303231][ T4258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.257'.
[   65.455208][ T4265] 9pnet_fd: Insufficient options for proto=fd
[   65.465768][ T4265] loop0: detected capacity change from 0 to 512
[   65.490317][ T4265] EXT4-fs (loop0): 1 orphan inode deleted
[   67.243344][ T4279] loop2: detected capacity change from 0 to 512
[   67.260489][ T4279] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ01777777777777777777777'
[   67.455717][ T4288] loop3: detected capacity change from 0 to 512
[   67.464799][ T4286] tipc: Started in network mode
[   67.477255][ T4286] tipc: Node identity a66b19649464, cluster identity 4711
[   67.493868][ T4288] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.267: bg 0: block 393: padding at end of block bitmap is not set
[   67.510356][ T4286] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   67.526387][ T4286] syzkaller0: entered promiscuous mode
[   67.543711][ T4286] syzkaller0: entered allmulticast mode
[   67.553541][ T4288] loop3: lost filesystem error report for type 5 error -117
[   67.553742][ T4288] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem
[   67.561065][    C1] EXT4-fs (loop3): error count since last fsck: 1
[   67.561091][    C1] EXT4-fs (loop3): initial error at time 2000000010: ext4_validate_block_bitmap:441
[   67.561109][    C1] EXT4-fs (loop3): last error at time 2000000010: ext4_validate_block_bitmap:441
[   67.598072][   T28] kauditd_printk_skb: 111 callbacks suppressed
[   67.598084][   T28] audit: type=1400 audit(2000000011.000:790): avc:  denied  { write } for  pid=4285 comm="syz.1.266" name="file0" dev="tmpfs" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   67.644544][ T4284] loop2: detected capacity change from 0 to 512
[   67.654148][ T4288] loop3: lost filesystem error report for type 5 error -117
[   67.654442][ T4288] EXT4-fs (loop3): 2 truncates cleaned up
[   67.671619][ T4284] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ01777777777777777777777'
[   67.677417][ T4288] EXT4-fs mount: 7 callbacks suppressed
[   67.677432][ T4288] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   67.679237][   T28] audit: type=1400 audit(2000000011.028:791): avc:  denied  { open } for  pid=4285 comm="syz.1.266" path="/45/file0" dev="tmpfs" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   67.720288][   T28] audit: type=1400 audit(2000000011.028:792): avc:  denied  { ioctl } for  pid=4285 comm="syz.1.266" path="/45/file0" dev="tmpfs" ino=261 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   67.765942][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   67.810701][ T4292] tipc: Resetting bearer <eth:syzkaller0>
[   68.010134][ T4285] tipc: Resetting bearer <eth:syzkaller0>
[   68.017541][ T4285] tipc: Disabling bearer <eth:syzkaller0>
[   68.767739][   T28] audit: type=1400 audit(2000000012.094:793): avc:  denied  { accept } for  pid=4304 comm="syz.0.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[   68.907544][ T4313] loop2: detected capacity change from 0 to 512
[   68.916403][ T4313] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ01777777777777777777777'
[   69.065928][ T4315] loop2: detected capacity change from 0 to 512
[   69.080480][ T4315] EXT4-fs: Ignoring removed nomblk_io_submit option
[   69.137109][ T4315] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8857e02c, mo2=0002]
[   69.147914][ T4315] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.275: invalid indirect mapped block 2683928664 (level 1)
[   69.163370][ T4315] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   69.171142][ T4315] EXT4-fs (loop2): Remounting filesystem read-only
[   69.180722][    C1] EXT4-fs (loop2): error count since last fsck: 1
[   69.181033][    C1] EXT4-fs (loop2): initial error at time 2000000012: ext4_free_branches:1023: inode 11
[   69.181212][    C1] EXT4-fs (loop2): last error at time 2000000012: ext4_free_branches:1023: inode 11
[   69.220648][ T4315] EXT4-fs (loop2): 1 truncate cleaned up
[   69.229930][ T4315] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   69.276239][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.381391][ T4324] loop3: detected capacity change from 0 to 512
[   69.398028][ T4324] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.278: bg 0: block 393: padding at end of block bitmap is not set
[   69.413290][ T4324] loop3: lost filesystem error report for type 5 error -117
[   69.413559][ T4324] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem
[   69.421232][    C1] EXT4-fs (loop3): error count since last fsck: 1
[   69.421251][    C1] EXT4-fs (loop3): initial error at time 2000000012: ext4_validate_block_bitmap:441
[   69.421290][    C1] EXT4-fs (loop3): last error at time 2000000012: ext4_validate_block_bitmap:441
[   69.458935][ T4324] loop3: lost filesystem error report for type 5 error -117
[   69.459255][ T4324] EXT4-fs (loop3): 2 truncates cleaned up
[   69.473691][ T4324] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   69.554763][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.425665][ T4330] netlink: 14 bytes leftover after parsing attributes in process `syz.3.279'.
[   70.457405][ T4330] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   70.472356][ T4330] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   70.484994][ T4330] bond0 (unregistering): Released all slaves
[   70.503277][ T4336] loop3: detected capacity change from 0 to 512
[   70.516741][ T4336] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   70.528185][ T4336] EXT4-fs (loop3): 1 truncate cleaned up
[   70.544786][ T4336] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   70.597162][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.625593][   T28] audit: type=1400 audit(2000000013.825:794): avc:  denied  { connect } for  pid=4340 comm="syz.3.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   70.645680][   T28] audit: type=1400 audit(2000000013.825:795): avc:  denied  { create } for  pid=4340 comm="syz.3.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   70.666528][   T28] audit: type=1400 audit(2000000013.825:796): avc:  denied  { write } for  pid=4340 comm="syz.3.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   70.690446][ T4341] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[   70.702711][ T4341] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[   70.714675][ T4345] 9pnet_fd: Insufficient options for proto=fd
[   70.746253][ T4345] loop0: detected capacity change from 0 to 512
[   70.837250][ T4345] EXT4-fs (loop0): 1 orphan inode deleted
[   70.837621][ T4345] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   70.875182][   T28] audit: type=1400 audit(2000000014.059:797): avc:  denied  { bind } for  pid=4348 comm="syz.3.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   70.944885][ T4345] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.962708][ T4353] loop3: detected capacity change from 0 to 512
[   70.980290][ T4353] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ01777777777777777777777'
[   71.087435][ T4356] xt_l2tp: unknown flags: 10
[   71.673940][ T4370] loop3: detected capacity change from 0 to 512
[   71.693873][ T4370] EXT4-fs: Ignoring removed oldalloc option
[   71.713043][ T4370] EXT4-fs: Ignoring removed nomblk_io_submit option
[   71.734312][ T4370] EXT4-fs (loop3): revision level too high, forcing read-only mode
[   71.789820][ T4370] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002]
[   71.828663][ T4370] EXT4-fs (loop3): orphan cleanup on readonly fs
[   71.853555][ T4370] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0
[   71.893591][ T4370] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[   71.962633][ T4370] EXT4-fs (loop3): Cannot turn on quotas: error -22
[   71.983241][ T4375] netlink: 68 bytes leftover after parsing attributes in process `syz.1.292'.
[   72.006572][ T4370] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.291: bg 0: block 40: padding at end of block bitmap is not set
[   72.081503][ T4370] loop3: lost filesystem error report for type 5 error -117
[   72.081581][    C1] EXT4-fs (loop3): error count since last fsck: 1
[   72.096320][    C1] EXT4-fs (loop3): initial error at time 2000000015: ext4_validate_block_bitmap:441
[   72.105848][    C1] EXT4-fs (loop3): last error at time 2000000015: ext4_validate_block_bitmap:441
[   72.135422][ T4376] loop1: detected capacity change from 0 to 512
[   72.171704][ T4376] EXT4-fs error (device loop1): ext4_free_inode:354: comm syz.1.292: bit already cleared for inode 11
[   72.212360][ T4376] loop1: lost filesystem error report for type 5 error -117
[   72.212906][ T4376] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem
[   72.228744][    C1] EXT4-fs (loop1): error count since last fsck: 1
[   72.228775][    C1] EXT4-fs (loop1): initial error at time 2000000015: ext4_free_inode:354
[   72.228799][    C1] EXT4-fs (loop1): last error at time 2000000015: ext4_free_inode:354
[   72.268043][ T4370] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem
[   72.287631][ T4370] loop3: lost filesystem error report for type 5 error -117
[   72.287775][ T4370] EXT4-fs (loop3): 1 truncate cleaned up
[   72.324133][ T4376] loop1: lost filesystem error report for type 5 error -117
[   72.324434][ T4376] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem
[   72.367471][ T4370] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   72.433377][ T4376] loop1: lost filesystem error report for type 5 error -117
[   72.433570][ T4376] EXT4-fs (loop1): 1 orphan inode deleted
[   72.460316][ T4370] EXT4-fs (loop3): shut down requested (2)
[   72.492222][   T28] audit: type=1400 audit(2000000015.565:798): avc:  denied  { bind } for  pid=4369 comm="syz.3.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   72.515116][ T4376] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   72.576941][ T4362] syz.2.289 (4362) used greatest stack depth: 8888 bytes left
[   72.669202][ T4370] netlink: 4 bytes leftover after parsing attributes in process `syz.3.291'.
[   72.696010][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.714091][ T4370] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop3 ino=16
[   72.733966][ T4370] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop3 ino=16
[   72.756526][ T4370] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop3 ino=16
[   72.796003][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.422731][ T4386] loop3: detected capacity change from 0 to 512
[   73.460685][ T4386] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ01777777777777777777777'
[   73.615679][ T4141] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.946402][   T28] kauditd_printk_skb: 9 callbacks suppressed
[   73.946414][   T28] audit: type=1400 audit(2000000016.940:808): avc:  denied  { setopt } for  pid=4401 comm="syz.3.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   73.993651][   T28] audit: type=1400 audit(2000000016.968:809): avc:  denied  { ioctl } for  pid=4401 comm="syz.3.301" path="socket:[7060]" dev="sockfs" ino=7060 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   74.020424][   T28] audit: type=1400 audit(2000000016.968:810): avc:  denied  { bind } for  pid=4401 comm="syz.3.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   74.043429][ T4404] loop0: detected capacity change from 0 to 512
[   74.149558][ T4408] netlink: 131740 bytes leftover after parsing attributes in process `syz.2.303'.
[   74.168928][ T4408] net_ratelimit: 42 callbacks suppressed
[   74.168974][ T4408] netlink: zone id is out of range
[   74.183444][ T4404] EXT4-fs error (device loop0): ext4_free_inode:354: comm syz.0.302: bit already cleared for inode 11
[   74.189172][ T4396] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ01777777777777777777777'
[   74.195614][ T4404] loop0: lost filesystem error report for type 5 error -117
[   74.204247][ T4408] netlink: zone id is out of range
[   74.211630][ T4404] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem
[   74.211662][ T4404] loop0: lost filesystem error report for type 5 error -117
[   74.211901][    C1] EXT4-fs (loop0): error count since last fsck: 2
[   74.211942][    C1] EXT4-fs (loop0): initial error at time 2000000017: ext4_free_inode:354
[   74.212210][    C1] EXT4-fs (loop0): last error at time 2000000017: ext4_free_inode:361
[   74.219195][ T4404] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem
[   74.227738][ T4408] netlink: zone id is out of range
[   74.258873][ T4404] loop0: lost filesystem error report for type 5 error -117
[   74.268748][ T4408] netlink: zone id is out of range
[   74.302819][ T4404] EXT4-fs (loop0): 1 orphan inode deleted
[   74.305386][ T4408] netlink: zone id is out of range
[   74.320880][ T4408] netlink: zone id is out of range
[   74.325197][ T4404] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   74.337084][ T4408] netlink: zone id is out of range
[   74.344550][ T4408] netlink: zone id is out of range
[   74.358820][ T4408] netlink: zone id is out of range
[   74.368581][ T4408] netlink: zone id is out of range
[   74.435123][ T4415] netlink: 68 bytes leftover after parsing attributes in process `syz.2.306'.
[   74.473594][ T4421] FAULT_INJECTION: forcing a failure.
[   74.473594][ T4421] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   74.489059][ T4421] CPU: 0 UID: 0 PID: 4421 Comm: syz.1.308 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[   74.489086][ T4421] Tainted: [W]=WARN
[   74.489092][ T4421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[   74.489105][ T4421] Call Trace:
[   74.489113][ T4421]  <TASK>
[   74.489120][ T4421]  __dump_stack+0x1d/0x30
[   74.489144][ T4421]  dump_stack_lvl+0x95/0xd0
[   74.489163][ T4421]  dump_stack+0x15/0x1b
[   74.489250][ T4421]  should_fail_ex+0x263/0x280
[   74.489271][ T4421]  should_fail+0xb/0x20
[   74.489292][ T4421]  should_fail_usercopy+0x1a/0x20
[   74.489317][ T4421]  _copy_from_user+0x1c/0xb0
[   74.489389][ T4421]  ___sys_sendmsg+0xc1/0x1e0
[   74.489408][ T4421]  ? path_openat+0x1b01/0x2050
[   74.489441][ T4421]  __sys_sendmmsg+0x185/0x320
[   74.489536][ T4421]  __x64_sys_sendmmsg+0x57/0x70
[   74.489556][ T4421]  x64_sys_call+0x27aa/0x3020
[   74.489643][ T4421]  do_syscall_64+0x12c/0x3b0
[   74.489681][ T4421]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   74.489702][ T4421] RIP: 0033:0x7f22459acdd9
[   74.489718][ T4421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   74.489889][ T4421] RSP: 002b:00007f22443ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[   74.489909][ T4421] RAX: ffffffffffffffda RBX: 00007f2245c25fa0 RCX: 00007f22459acdd9
[   74.489922][ T4421] RDX: 0229ffa1c4ce5369 RSI: 0000200000000180 RDI: 0000000000000003
[   74.489935][ T4421] RBP: 00007f22443ff090 R08: 0000000000000000 R09: 0000000000000000
[   74.489959][ T4421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   74.489987][ T4421] R13: 00007f2245c26038 R14: 00007f2245c25fa0 R15: 00007ffea11a0208
[   74.490002][ T4421]  </TASK>
[   74.675412][ T4415] set_capacity_and_notify: 1 callbacks suppressed
[   74.675436][ T4415] loop2: detected capacity change from 0 to 512
[   74.699519][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.735749][ T4415] EXT4-fs error (device loop2): ext4_free_inode:354: comm syz.2.306: bit already cleared for inode 11
[   74.747067][ T4415] loop2: lost filesystem error report for type 5 error -117
[   74.749593][ T4415] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem
[   74.757333][    C0] EXT4-fs (loop2): error count since last fsck: 1
[   74.757524][    C0] EXT4-fs (loop2): initial error at time 2000000017: ext4_free_inode:354
[   74.757612][    C0] EXT4-fs (loop2): last error at time 2000000017: ext4_free_inode:354
[   74.792789][ T4415] loop2: lost filesystem error report for type 5 error -117
[   74.795788][ T4415] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem
[   74.814082][ T4415] loop2: lost filesystem error report for type 5 error -117
[   74.814827][ T4415] EXT4-fs (loop2): 1 orphan inode deleted
[   74.835909][ T4415] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   74.877596][   T28] audit: type=1400 audit(2000000017.810:811): avc:  denied  { block_suspend } for  pid=4432 comm="syz.3.313" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   74.901131][ T4433] netlink: 'syz.3.313': attribute type 21 has an invalid length.
[   74.910143][ T4433] netlink: 132 bytes leftover after parsing attributes in process `syz.3.313'.
[   74.932637][ T4433] netlink: 'syz.3.313': attribute type 1 has an invalid length.
[   74.941084][   T28] audit: type=1400 audit(2000000017.856:812): avc:  denied  { ioctl } for  pid=4435 comm="syz.0.314" path="/dev/input/event1" dev="devtmpfs" ino=243 ioctlcmd=0x4507 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   74.970812][ T4433] netlink: 8 bytes leftover after parsing attributes in process `syz.3.313'.
[   74.976978][ T4438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.315'.
[   74.986156][   T28] audit: type=1400 audit(2000000017.903:813): avc:  denied  { firmware_load } for  pid=4432 comm="syz.3.313" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[   75.004654][ T4438] netlink: 20 bytes leftover after parsing attributes in process `syz.0.315'.
[   75.054683][ T4440] loop4: detected capacity change from 0 to 512
[   75.077952][ T4440] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   75.091913][ T4443] loop1: detected capacity change from 0 to 512
[   75.099114][ T4438] loop0: detected capacity change from 0 to 512
[   75.114446][ T4443] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   75.127625][   T28] audit: type=1400 audit(2000000018.043:814): avc:  denied  { add_name } for  pid=4439 comm="syz.4.317" name="cgroup.controllers" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   75.167951][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.184766][ T4438] EXT4-fs error (device loop0): ext4_free_inode:354: comm syz.0.315: bit already cleared for inode 11
[   75.196952][ T4438] loop0: lost filesystem error report for type 5 error -117
[   75.197228][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.203242][    C0] EXT4-fs (loop0): error count since last fsck: 1
[   75.214795][ T4438] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem
[   75.219914][    C0] EXT4-fs (loop0): initial error at time 2000000018: ext4_free_inode:354
[   75.228891][ T4438] loop0: lost filesystem error report for type 5 error -117
[   75.236852][    C0] EXT4-fs (loop0): last error at time 2000000018: ext4_free_inode:354
[   75.237423][ T4438] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem
[   75.244131][    C0] 
[   75.263530][ T4438] loop0: lost filesystem error report for type 5 error -117
[   75.264365][ T4438] EXT4-fs (loop0): 1 orphan inode deleted
[   75.279980][ T4449] netlink: 68 bytes leftover after parsing attributes in process `syz.2.318'.
[   75.289625][ T4438] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   75.293286][ T4451] loop4: detected capacity change from 0 to 256
[   75.303637][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.460333][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.512643][   T28] audit: type=1400 audit(2000000018.399:815): avc:  denied  { ioctl } for  pid=4463 comm="syz.0.324" path="socket:[7675]" dev="sockfs" ino=7675 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   75.867496][ T4449] loop2: detected capacity change from 0 to 512
[   75.947231][ T4449] EXT4-fs error (device loop2): ext4_free_inode:354: comm syz.2.318: bit already cleared for inode 11
[   75.959430][ T4449] loop2: lost filesystem error report for type 5 error -117
[   75.962156][ T4449] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem
[   75.962358][    C0] EXT4-fs (loop2): error count since last fsck: 1
[   75.962394][    C0] EXT4-fs (loop2): initial error at time 2000000018: ext4_free_inode:354
[   75.962540][    C0] EXT4-fs (loop2): last error at time 2000000018: ext4_free_inode:354
[   76.007685][ T4449] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem
[   76.018643][ T4449] EXT4-fs (loop2): 1 orphan inode deleted
[   76.052882][ T4449] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   76.137724][ T4476] loop4: detected capacity change from 0 to 512
[   76.198957][ T4476] vfat: Unknown parameter ''
[   76.360860][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.378387][ T4462] loop3: detected capacity change from 0 to 1764
[   76.605017][ T4492] netlink: 8 bytes leftover after parsing attributes in process `syz.3.333'.
[   76.613977][ T4492] netlink: 'syz.3.333': attribute type 29 has an invalid length.
[   76.622318][ T4492] netlink: 8 bytes leftover after parsing attributes in process `syz.3.333'.
[   76.635702][ T4492] loop3: detected capacity change from 0 to 512
[   76.668560][ T4492] EXT4-fs (loop3): revision level too high, forcing read-only mode
[   76.677317][ T4492] EXT4-fs (loop3): orphan cleanup on readonly fs
[   76.685686][ T4492] EXT4-fs error (device loop3): ext4_quota_enable:7225: comm syz.3.333: inode #150994944: comm syz.3.333: iget: illegal inode #
[   76.700598][ T4492] EXT4-fs (loop3): Remounting filesystem read-only
[   76.710672][    C1] EXT4-fs (loop3): error count since last fsck: 1
[   76.717278][    C1] EXT4-fs (loop3): initial error at time 2000000019: ext4_quota_enable:7225
[   76.726075][    C1] EXT4-fs (loop3): last error at time 2000000019: ext4_quota_enable:7225
[   76.755861][ T4497] netlink: 12 bytes leftover after parsing attributes in process `syz.2.332'.
[   76.920413][ T4497] loop2: detected capacity change from 0 to 2048
[   76.957657][ T4492] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=2, err=-117, ino=150994944). Please run e2fsck to fix.
[   76.992565][ T4497] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   77.032281][ T4497] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   77.122962][ T4492] EXT4-fs (loop3): Cannot turn on quotas: error -117
[   77.147046][ T4501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.334'.
[   77.163228][ T4492] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   77.180052][ T4501] netlink: 20 bytes leftover after parsing attributes in process `syz.0.334'.
[   77.629476][ T4502] EXT4-fs error (device loop0): ext4_free_inode:354: comm syz.0.334: bit already cleared for inode 11
[   77.664898][ T4507] netlink: 4 bytes leftover after parsing attributes in process `syz.4.336'.
[   77.677697][ T4492] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.691867][ T4502] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem
[   77.700814][    C1] EXT4-fs (loop0): error count since last fsck: 1
[   77.700914][    C1] EXT4-fs (loop0): initial error at time 2000000020: ext4_free_inode:354
[   77.700964][    C1] EXT4-fs (loop0): last error at time 2000000020: ext4_free_inode:354
[   77.726162][ T4507] tipc: Started in network mode
[   77.731899][ T4507] tipc: Node identity 5f0000005f0000000000000000000001, cluster identity 4711
[   77.742706][ T4507] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   77.793597][ T4502] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem
[   77.804103][ T4508] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   77.828244][ T4507] 9p: Bad value for 'rfdno'
[   77.843383][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.921488][ T4502] EXT4-fs (loop0): 1 orphan inode deleted
[   77.929722][   T28] audit: type=1400 audit(2000000020.560:816): avc:  denied  { write } for  pid=4506 comm="syz.4.336" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   77.953361][ T4502] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   77.967328][   T28] audit: type=1400 audit(2000000020.560:817): avc:  denied  { map } for  pid=4506 comm="syz.4.336" path="/31/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   78.124784][ T4510] EXT4-fs error (device loop3): ext4_quota_enable:7225: inode #3: comm syz.3.337: iget: checksum invalid
[   78.138910][ T4510] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -74
[   78.139159][ T4510] EXT4-fs error (device loop3): ext4_quota_enable:7228: comm syz.3.337: Bad quota inode: 3, type: 0
[   78.148161][    C1] EXT4-fs (loop3): error count since last fsck: 1
[   78.148177][    C1] EXT4-fs (loop3): initial error at time 2000000020: ext4_quota_enable:7225: inode 3
[   78.148220][    C1] EXT4-fs (loop3): last error at time 2000000020: ext4_quota_enable:7225: inode 3
[   78.185045][ T4510] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-74, ino=3). Please run e2fsck to fix.
[   78.200281][ T4510] EXT4-fs (loop3): mount failed
[   78.206939][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.272956][ T4502] syz.0.334 (4502) used greatest stack depth: 8768 bytes left
[   78.293641][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.369586][ T4540] EXT4-fs: Ignoring removed mblk_io_submit option
[   78.379375][ T4539] xt_l2tp: unknown flags: 10
[   78.392669][ T4540] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.338: corrupted in-inode xattr: e_value size too large
[   78.411588][ T4540] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   78.412984][ T4540] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.338: couldn't read orphan inode 15 (err -117)
[   78.422294][    C0] EXT4-fs (loop4): error count since last fsck: 1
[   78.422316][    C0] EXT4-fs (loop4): initial error at time 2000000021: ext4_iget_extra_inode:5128: inode 15
[   78.422357][    C0] EXT4-fs (loop4): last error at time 2000000021: ext4_iget_extra_inode:5128: inode 15
[   78.470245][ T4543] 9pnet_fd: Insufficient options for proto=fd
[   78.576144][ T4543] EXT4-fs (loop0): 1 orphan inode deleted
[   78.589831][ T4543] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   78.609324][ T4540] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   78.664713][ T4552] netlink: 12 bytes leftover after parsing attributes in process `syz.2.345'.
[   78.681535][ T4543] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.165337][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.226569][ T4571] netlink: 131740 bytes leftover after parsing attributes in process `syz.4.352'.
[   80.237260][ T4571] net_ratelimit: 16 callbacks suppressed
[   80.237405][ T4571] netlink: zone id is out of range
[   80.249524][ T4571] netlink: zone id is out of range
[   80.255682][ T4571] netlink: zone id is out of range
[   80.262214][ T4571] netlink: zone id is out of range
[   80.269530][ T4571] netlink: zone id is out of range
[   80.275981][ T4571] netlink: zone id is out of range
[   80.281785][ T4571] netlink: zone id is out of range
[   80.287264][ T4571] netlink: zone id is out of range
[   80.293357][ T4571] netlink: zone id is out of range
[   80.299016][ T4571] netlink: zone id is out of range
[   80.322019][ T4574] netlink: 8 bytes leftover after parsing attributes in process `syz.4.353'.
[   80.330974][ T4574] netlink: 20 bytes leftover after parsing attributes in process `syz.4.353'.
[   80.519365][ T4568] set_capacity_and_notify: 5 callbacks suppressed
[   80.519474][ T4568] loop1: detected capacity change from 0 to 512
[   80.550443][ T4568] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ01777777777777777777777'
[   80.614043][ T4574] loop4: detected capacity change from 0 to 512
[   80.671387][ T4574] EXT4-fs error (device loop4): ext4_free_inode:354: comm syz.4.353: bit already cleared for inode 11
[   80.682988][ T4574] fserror_report: 8 callbacks suppressed
[   80.683079][ T4574] loop4: lost filesystem error report for type 5 error -117
[   80.697776][ T4574] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem
[   80.700818][    C1] EXT4-fs (loop4): error count since last fsck: 1
[   80.707155][ T4574] loop4: lost filesystem error report for type 5 error -117
[   80.709496][ T4574] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem
[   80.717174][    C1] EXT4-fs (loop4): initial error at time 2000000023: ext4_free_inode:354
[   80.724417][ T4574] loop4: lost filesystem error report for type 5 error -117
[   80.725924][ T4574] EXT4-fs (loop4): 1 orphan inode deleted
[   80.732316][    C1] 
[   80.732428][    C1] EXT4-fs (loop4): last error at time 2000000023: ext4_free_inode:361
[   80.746899][ T4574] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   80.751174][    C1] 
[   80.895794][ T4585] loop2: detected capacity change from 0 to 512
[   80.902996][ T4585] ext4: Unknown parameter 'bsddf.dax'
[   80.912248][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.955927][ T4592] loop2: detected capacity change from 0 to 512
[   80.981152][ T4592] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   81.001439][ T4592] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   81.016599][   T28] kauditd_printk_skb: 3 callbacks suppressed
[   81.016612][   T28] audit: type=1400 audit(2000000023.544:821): avc:  denied  { write } for  pid=4590 comm="syz.2.361" path="/92/file1/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   81.024227][ T4595] loop3: detected capacity change from 0 to 512
[   81.062970][ T4595] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   81.081711][ T4595] EXT4-fs (loop3): 1 truncate cleaned up
[   81.091101][ T4595] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   81.179344][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.447700][ T4592] ==================================================================
[   81.455923][ T4592] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read
[   81.464186][ T4592] 
[   81.466544][ T4592] write to 0xffff88811c0f8520 of 8 bytes by task 4601 on cpu 1:
[   81.474263][ T4592]  filemap_splice_read+0x523/0x780
[   81.479398][ T4592]  ext4_file_splice_read+0x8f/0xb0
[   81.484627][ T4592]  splice_direct_to_actor+0x26e/0x670
[   81.490372][ T4592]  do_splice_direct+0x119/0x1a0
[   81.495327][ T4592]  do_sendfile+0x382/0x650
[   81.499753][ T4592]  __x64_sys_sendfile64+0x105/0x150
[   81.504966][ T4592]  x64_sys_call+0x2dc4/0x3020
[   81.509827][ T4592]  do_syscall_64+0x12c/0x3b0
[   81.514491][ T4592]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   81.520743][ T4592] 
[   81.523074][ T4592] write to 0xffff88811c0f8520 of 8 bytes by task 4592 on cpu 0:
[   81.530802][ T4592]  filemap_splice_read+0x523/0x780
[   81.536208][ T4592]  ext4_file_splice_read+0x8f/0xb0
[   81.542142][ T4592]  splice_direct_to_actor+0x26e/0x670
[   81.548058][ T4592]  do_splice_direct+0x119/0x1a0
[   81.553924][ T4592]  do_sendfile+0x382/0x650
[   81.558528][ T4592]  __x64_sys_sendfile64+0x105/0x150
[   81.563841][ T4592]  x64_sys_call+0x2dc4/0x3020
[   81.568786][ T4592]  do_syscall_64+0x12c/0x3b0
[   81.573572][ T4592]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   81.579853][ T4592] 
[   81.582273][ T4592] value changed: 0x0000000000017e6e -> 0x0000000000017ecd
[   81.589602][ T4592] 
[   81.591981][ T4592] Reported by Kernel Concurrency Sanitizer on:
[   81.598313][ T4592] CPU: 0 UID: 0 PID: 4592 Comm: syz.2.361 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[   81.609756][ T4592] Tainted: [W]=WARN
[   81.613671][ T4592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[   81.624454][ T4592] ==================================================================
[   81.663236][ T4615] loop1: detected capacity change from 0 to 512
[   81.671397][ T4615] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ01777777777777777777777'
[   81.889543][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.