last executing test programs:

2m17.835410502s ago: executing program 3 (id=544):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="0b000200", @ANYBLOB="010029"], 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0xc890)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x1b0)
setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000001940)=@filter={'filter\x00', 0xe, 0x4, 0x4b8, 0xffffffff, 0x308, 0x0, 0x208, 0xffffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff00, 0xff, 0xffffffff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'macsec0\x00', 'pimreg\x00', {}, {0xff}, 0x3b, 0x6f, 0x6}, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x6d11, [0x4, 0x5], 0x1, 0x9, 0x4, [@rand_addr=' \x01\x00', @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1e}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3a}, @loopback, @loopback, @remote, @empty, @ipv4={'\x00', '\xff\xff', @broadcast}, @private2, @mcast2, @mcast2, @mcast1], 0xa}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@ipv6={@rand_addr=' \x01\x00', @private1, [0xff000000, 0x0, 0xffffffff, 0xff000000], [0xff, 0x0, 0xffffff00, 0xff], 'pim6reg\x00', 'vxcan1\x00', {}, {0xff}, 0x2f, 0xa, 0x6, 0xe}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x8, 0x7ff], 0xfff, 0xa, 0x2}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x6, 0x7}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x4, 0x2}, {0x2, 0x2, 0x4}, {0xffffffffffffffff, 0x4, 0x4}, 0x401, 0xc}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000001400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xa36d5b677eee142b}, 0xc, &(0x7f00000013c0)={&(0x7f0000001240)={0x178, r5, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x681}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x40000004}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x42}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7}]}, @NL80211_ATTR_CQM={0x68, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5bb}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x29}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5e5}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3ff}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xde8e}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x7fffffff, 0x4, 0x9, 0x40, 0x1, 0xd1]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x10}]}, @NL80211_ATTR_CQM={0x4}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2a}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x37}]}, @NL80211_ATTR_CQM={0x54, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8b0f}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xe}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x14}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x12}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4d}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6f6}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3ff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5d}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x424a6b8d}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4b}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x4}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x10001}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x81}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x2b9}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x9}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x40}, 0x4000001)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
setsockopt$inet6_tcp_int(r1, 0x11a, 0x5, &(0x7f0000000000)=0x3f9, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001880)={0x11, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f9ff000085000000020000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000000240)=""/4096}, 0x94)

2m17.764802324s ago: executing program 3 (id=546):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={&(0x7f0000000000), 0xf27cad372872f2bd}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x4, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, r0, 0x1, 0x70bd27, 0x0, {0x54}}, 0x14}}, 0xc084)

2m17.746185575s ago: executing program 3 (id=547):
setns(0xc9, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xe}, 0x10c0e8, 0x0, 0x7, 0x4, 0xa, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x4)
writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x20)

2m17.711642616s ago: executing program 3 (id=549):
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x0, &(0x7f0000000000)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x787, &(0x7f0000001000)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x50)
pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d)
ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611)
ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0)
write(r3, &(0x7f0000000100)="5c7830313030303030302032303030303030303030209b", 0x17)
mount$nfs4(0x0, 0x0, 0x0, 0x400, 0x0)
syz_clone(0x80201100, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0)

2m17.445662522s ago: executing program 3 (id=551):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0xb6, 0x8, 0x0, 0x100, 0x18088, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x9, 0xffff}, 0x4000, 0x4, 0x0, 0x3, 0xfffffffffffffffc, 0x0, 0x4, 0x0, 0x10, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$igmp(0x2, 0x3, 0x2)
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x8070bd2a, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8}]}}]}, 0x3c}}, 0x800)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000040)=0x9)
write$binfmt_aout(r1, &(0x7f0000000500)=ANY=[], 0xff2e)
read(r1, &(0x7f0000000100), 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc)
setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18)
r3 = socket$inet6(0xa, 0x80002, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00'})
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)=0xfdfd)
sendmsg$nl_route_sched(r4, 0x0, 0x0)

2m17.321962345s ago: executing program 3 (id=553):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x200006, 0x8, &(0x7f0000006680))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r0 = syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc80, &(0x7f0000000600)=ANY=[@ANYRES16=0x0], 0x1, 0x266, &(0x7f0000000800)="$eJzs281OE1EYxvGHDwVBmCqKgjG+0Y1uJlCvoCGQGJtokBo/EpNBptp0aEmnwdQYYefW6yAu3ZkYb4CNV+DCHRuXLIxjmKnQlhrDQiba/29zXnJ4mnP6njZn0dl58Ha1XAzdoldXf59pUNrUrpRRvwaU6GuO/XF9Uq02dWMi/+XyvYePbufy+flFs4Xc0s2smY1f+fji1burn+qj99+PfxjSdubJzrfs1+3J7amdH0vPS6GVQqtU6+bZcrVa95YD31ZKYdk1uxv4XuhbqRL6tbb5YlBdW2uYV1kZG1mr+WFoXqVhZb9h9arVaw3znnmlirmua2Mjwp8UthYXvVzaq8DfVavlvDlJ04dmClupLAgAAKSK+38v4/7fC/bu/4+bn9923P8BAAAAAAAAAAAAAAAAAAAAAPgX7EaRE0WR82s8IcVP+ETNv09JGpE0Kum0pDFJ45IcSRlJZySdlTQh6Zyk85ImJV2QdFHSVMtrpb1XHEb/exv97230v7e1PLg7LK2+WS+sF5Ixmc8VVVIgXzNy9D3uZVNSL9zKz89YLKNLqxvN/MZ6YaA9Pytn78B0y88meWvPD8Xnbj+flbN3wLrls13zw7p+rSXvytHnp6oq0Ep8Jg/yr2fN5u7kO/LT8f/971zb17V/rvu7+SR/hPPR8f4Oanow3b1DChsvy14Q+DUKCgqK/SLtbyYch4Omp70SAAAAAAAAAAAAAAAAAMBRHMfPCdPeIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnX4GAAD//5KSYE0=")
syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0))
mkdir(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffc01, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x10)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'veth1_macvtap\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x4b}})
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000280)={r5, @in6={{0xa, 0x4e24, 0x2, @empty, 0x4}}, 0xfffe, 0xef}, &(0x7f0000000200)=0x90)
futex_waitv(&(0x7f0000001b00)=[{0xffb, &(0x7f0000000240)=0x200000006, 0xa}], 0x1, 0x0, 0x0, 0x1)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r7 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'dummy0\x00', <r8=>0x0})
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x2000027f, &(0x7f00000010c0)=ANY=[@ANYRES16=r0], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', r8, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r9, 0xffff0002, 0xe, 0x0, &(0x7f0000000000)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$netlink(0x10, 0x3, 0x0)
r10 = socket$inet6(0xa, 0x1, 0x0)
getsockopt$sock_int(r10, 0x1, 0x27, 0x0, &(0x7f0000000500))
socket$inet_sctp(0x2, 0x5, 0x84)

2m17.293089095s ago: executing program 32 (id=553):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x200006, 0x8, &(0x7f0000006680))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r0 = syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc80, &(0x7f0000000600)=ANY=[@ANYRES16=0x0], 0x1, 0x266, &(0x7f0000000800)="$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")
syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0))
mkdir(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffc01, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x10)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'veth1_macvtap\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x4b}})
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000280)={r5, @in6={{0xa, 0x4e24, 0x2, @empty, 0x4}}, 0xfffe, 0xef}, &(0x7f0000000200)=0x90)
futex_waitv(&(0x7f0000001b00)=[{0xffb, &(0x7f0000000240)=0x200000006, 0xa}], 0x1, 0x0, 0x0, 0x1)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r7 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'dummy0\x00', <r8=>0x0})
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x2000027f, &(0x7f00000010c0)=ANY=[@ANYRES16=r0], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', r8, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r9, 0xffff0002, 0xe, 0x0, &(0x7f0000000000)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$netlink(0x10, 0x3, 0x0)
r10 = socket$inet6(0xa, 0x1, 0x0)
getsockopt$sock_int(r10, 0x1, 0x27, 0x0, &(0x7f0000000500))
socket$inet_sctp(0x2, 0x5, 0x84)

2m11.595848273s ago: executing program 4 (id=624):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0})
signalfd4(0xffffffffffffffff, &(0x7f0000000200)={[0xf9a]}, 0x8, 0x80000)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000340), 0x9}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3)
r0 = syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYBLOB="010000000000000000002e000000", @ANYRES32=0x0, @ANYBLOB="08002c008000000005002b0002000000"], 0x2c}}, 0x4008000)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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")
r6 = open(&(0x7f00000001c0)='./file0/file0\x00', 0xecb42, 0x83)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
pwritev2(r6, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x6400, 0xf4ff, 0x3)

2m10.647500086s ago: executing program 4 (id=635):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_usb_connect$uac3(0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
close(0xffffffffffffffff)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000300000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100f3ff000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0)
rmdir(0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x8}}, 0x7}, 0x1c)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x14, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb93}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_val={0x18, 0x3, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x7}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffff0}}, @generic={0x1, 0xb, 0x3, 0x0, 0xffff}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x3}]}, &(0x7f0000000180)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x18, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r6, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x0)

2m9.837285055s ago: executing program 4 (id=643):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x8}, 0x10fcc8, 0x10001, 0x0, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r1, &(0x7f0000000640)='Z', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}, 0x4}, 0x1c)
shutdown(r1, 0x1)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x74, r2, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_CV4DOI={0x2d, 0x4, 0x1}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0x9f13317ea556064c}, 0x4)
kexec_load(0x20000000, 0x2, &(0x7f0000000100)=[{0x0, 0xfffffffffffffede, 0x200000000, 0x3e0000}, {0x0, 0x4d, 0x0, 0x8000}], 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x800, 0x1ff}, 0x400, 0x5, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x4, &(0x7f0000000640)=@framed={{}, [@ldst={0x1, 0x3, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x94)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ANNOUNCE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="4e1f2dbd7000fedbdf250700b204"], 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x40000)
pipe2(&(0x7f0000000000)={<r6=>0xffffffffffffffff}, 0x84800)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TDLS_MGMT(r4, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x48, r7, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x46}}}}, [@NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x9}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x4}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x7}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040}, 0x80)
bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e21, 0x8, @mcast2, 0x1}, 0x1c)
pipe2(&(0x7f0000000240)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x0)
tee(r6, r9, 0xfffffffffffffc01, 0x0)
r10 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640), 0x0, 0x0)
io_submit(0x0, 0x1, &(0x7f00000012c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2014, r10, 0x0, 0x0, 0x7fd, 0x0, 0x6, r10}])
statx(r8, &(0x7f00000007c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000380))
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000800))
unshare(0x2e000480)
r11 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080))
ioctl$PAGEMAP_SCAN(r11, 0xc0606610, 0x0)
sendmsg$netlink(r3, 0x0, 0x1004)
sendmsg$nl_xfrm(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="cc0000001b00010000000000fedbdf25ffffffff000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000002000000000000000feffffffffffffff000000000000000002050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000010100000000000000000000000000000c0008000805"], 0xcc}, 0x1, 0x0, 0x0, 0x41}, 0x0)

2m9.488446554s ago: executing program 4 (id=646):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0}, 0x80, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@user_xattr}, {@lazytime}, {@quota}]}, 0x3, 0x459, &(0x7f00000008c0)="$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")
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000340)={{}, {}, [], {0x4, 0x4}, [], {0x10, 0x7}}, 0x24, 0x0)
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x80, &(0x7f0000000000)=ANY=[], 0x1, 0x1fc, &(0x7f0000000200)="$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")
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000540)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540))
r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
move_pages(0x0, 0x0, 0x0, &(0x7f0000001180), &(0x7f0000000000), 0x0)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0)
read(r1, &(0x7f0000000180), 0x1000)
read(r1, &(0x7f0000000340)=""/202, 0xca)
openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515001, 0x408)
r2 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0)
syz_pidfd_open(r2, 0x0)
perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0xa, 0x4, 0x81, 0x6, 0x0, 0x7, 0x85, 0x7, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100), 0x9}, 0x2000, 0x6, 0xc97, 0x3, 0x400, 0x7a, 0x8000, 0x0, 0x5, 0x0, 0x6}, r2, 0x2, r0, 0x2)

2m9.001988176s ago: executing program 4 (id=651):
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x5b}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x0) (async)
bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) (async, rerun: 64)
syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x6}}]}, 0x1, 0x50f, &(0x7f0000000dc0)="$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") (async, rerun: 64)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x40)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000000a01080000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005401000000000000000ffffff000800034000000038480000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000001c000380180000800900090073797a30000000000400028004000180140000001000010000000000000000000084000a"], 0xdc}}, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x42403, 0x16e) (async, rerun: 64)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1, 0xb0) (async, rerun: 64)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r3, 0x0, 0x19, &(0x7f0000000140)=0x400030, 0x4) (async)
pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xe7c) (async)
r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0xb}, 0x10e848, 0x1224, 0x9, 0x5, 0x8, 0x20005, 0x4, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
read(r4, &(0x7f0000000940)=""/240, 0xf0) (async)
epoll_create(0x2)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) (async, rerun: 64)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) (rerun: 64)
bind$inet(0xffffffffffffffff, 0x0, 0x0) (async)
socket$inet(0xa, 0x801, 0x84) (async)
syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000804, &(0x7f0000000180)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@grpid}, {@bh}, {@grpid}, {@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@init_itable}, {@usrjquota}, {@nolazytime}, {@norecovery}]}, 0xfe, 0x47f, &(0x7f0000000f00)="$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") (async)
socket(0x2, 0x80805, 0x0)
socket$inet6(0xa, 0x2, 0x3a)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000002b00)=ANY=[@ANYBLOB="01000000040000000200000005"], 0x50) (async)
close(0x3) (async, rerun: 32)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) (async, rerun: 32)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2m8.470099679s ago: executing program 4 (id=661):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0xf132, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c300fd000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000100180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78)

2m8.458733859s ago: executing program 33 (id=661):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0xf132, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c300fd000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000100180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78)

1m58.337500553s ago: executing program 6 (id=803):
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_config_ext={0xffffffffffffffff, 0x8000000000000001}, 0x204, 0x7, 0x9a, 0x3, 0x9, 0x6, 0x2}, 0xffffffffffffffff, 0x4000000000, 0xffffffffffffffff, 0x8)
read(r0, &(0x7f0000000140)=""/217, 0xd9)

1m58.273071865s ago: executing program 6 (id=806):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x4, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0xa}, [@RTA_SRC={0x8, 0x2, @loopback}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x1b, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff0f0000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000050000008500000017000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0)
pwrite64(r4, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00')
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$gtp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x3c, r6, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_NET_NS_FD={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x8000)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f0000000500)={'gre0\x00', <r7=>0x0, 0x8000, 0x87, 0x8c, 0xfffffffc, {{0x1f, 0x4, 0x2, 0x6, 0x7c, 0x67, 0x0, 0x2, 0x2f, 0x0, @empty, @local, {[@end, @timestamp_addr={0x44, 0x2c, 0x1f, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x11}, 0x400}, {@multicast1, 0x100}, {@local, 0x7f}, {@rand_addr=0x64010101, 0x5}, {@rand_addr=0x64010102}]}, @lsrr={0x83, 0x13, 0xfd, [@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, @rand_addr=0x64010100]}, @rr={0x7, 0x7, 0xae, [@dev={0xac, 0x14, 0x14, 0x1d}]}, @timestamp_addr={0x44, 0x1c, 0xa2, 0x1, 0x0, [{@remote, 0x7}, {@broadcast, 0xfffffff9}, {@loopback, 0x1}]}, @generic={0x83, 0x5, "f3e254"}]}}}}})
sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000800)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x54, r6, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @mcast2}, @GTPA_LINK={0x8, 0x1, r7}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_FAMILY={0x5, 0xd, 0x28}, @GTPA_PEER_ADDR6={0x14, 0xb, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040}, 0xc000)
creat(&(0x7f0000000040)='./file1\x00', 0x32)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5800000010000300"/20, @ANYRES32, @ANYBLOB="00000000000000001c0012800b00010067656e657665"], 0x58}, 0x1, 0x2}, 0x80)

1m57.818154386s ago: executing program 6 (id=815):
r0 = getpid()
setresuid(0xee00, 0xffffffffffffffff, 0x0)
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
syz_clone(0xb31e0000, 0x0, 0x4000, 0x0, 0x0, 0x0)

1m57.25459646s ago: executing program 6 (id=817):
r0 = perf_event_open(&(0x7f00000012c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
socket$inet_udp(0x2, 0x2, 0x0) (async)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f00000000c0)={[{@errors_remount}, {@nodelalloc}, {@nombcache}, {@oldalloc}, {@nodiscard}, {@quota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}]}, 0x3, 0x452, &(0x7f0000000140)="$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")
r1 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000005c0), 0x2, 0x0)
write$cgroup_type(r1, &(0x7f00000006c0), 0x9) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r2, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, 0x4, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2801c}, 0x20)
r3 = socket(0x10, 0x803, 0x0) (async)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x4, 0x7fffffff, 0x8}}}}]}, 0x44}}, 0x0) (async)
sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=@newtfilter={0x60, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x34, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x0, 0x4}}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x1, 0x206, 0x7}]}}, @TCA_U32_POLICE={0x4}]}}]}, 0x60}}, 0x24040084)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0) (async)
ioprio_set$pid(0x2, 0x0, 0x0)
readv(r0, &(0x7f0000000940)=[{&(0x7f0000000700)=""/234, 0xea}, {&(0x7f0000000800)=""/43, 0x2b}, {&(0x7f0000000840)=""/78, 0x4e}], 0x3) (async)
openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) (async)
r6 = getpid()
r7 = syz_pidfd_open(r6, 0x0)
setns(r7, 0x24020000)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x8e, 0x0, 0x100000}, 0x20)
r8 = syz_clone(0x30000000, 0x0, 0xffffffffffffff67, 0x0, 0x0, 0x0)
r9 = syz_pidfd_open(r8, 0x0)
setns(r9, 0x24020000)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
name_to_handle_at(r0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[], 0x0, 0x1200)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1b002d62248dbc8e10f55116000000001b000007000000000000ffe0bdab427dd1af91e71b366f56d2d5a4453f37de034900d24f71eb2448f253051c28f904000000e198c72fed9b6e73a8c164792ac2ecb6d615c1243ec7c42abdcab2cf59902a9a4b0c929f34d46cefc12b7497f3fa7200a689bf079cccfd4e5bd1fd5cb5c9cb71833a5e3621c0e475f7c7fe0cbbb93d012e12ef904d64b968a133b9588724cc3717cd5cc834ac2f5f54c07b828ca1f4dcc6af17ab8fc81e7a32df209967fcb7d63078a4a018f96d0000", @ANYBLOB="2fbae76472eecdfbef41803c4a74ba28c01685b9a13ee16ac39a401bd06e54f9795aef8c29b3be67680dcef3fa84a0ad45781d34854f072aa9eb6a04426990db4de3f966482b0df5c1aaed371498c5d855219c91dd2173e7ec3d61467530dcf0f02f3b07abcf7a748a33a8171b34bfc6a988665355dd5700ca98ca12daa3a9cc518e3317bb19d380795c", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYRES32, @ANYBLOB="03000004040000002e0e0700000000000000bd32a2c8160300000000b2db612578e22f5c930ac35530904ee5b473a9dc85467851c76fca31e55b8c2b5f0d489e967d186f2ae30874ce933c06b79fd600"/92], 0x50)

1m56.848809249s ago: executing program 6 (id=821):
mount$9p_virtio(0x0, 0x0, 0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}, 0x98, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$rxrpc(0x21, 0x2, 0xa)
r3 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000107bb4284c000000dc00000000750000"], 0x18}, 0x404f444)
connect$rxrpc(r2, &(0x7f0000000080)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24)
sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x110}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}], 0x30, 0x4c00}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xb9, 0x5, 0x0, 0x0, 0x0, 0x10, 0x81420, 0xa, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x1, 0x8001}, 0x300, 0x106, 0x200001, 0x5, 0x29e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x1)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240))
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x81}, 0x50)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r4=>0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0)
ioctl$TCXONC(r5, 0x540a, 0x0)
write(r5, &(0x7f0000000100)='^', 0x1)
writev(r5, &(0x7f00000008c0)=[{&(0x7f0000000380)="e4", 0x1}], 0x1)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r4, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)

1m55.99373539s ago: executing program 6 (id=829):
socket(0x10, 0x3, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x1b78, &(0x7f0000000040)={0x0, 0xca72, 0xc000, 0x0, 0x20002fb})
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x9}}, 0x20)
r1 = socket$inet(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8)
fchmodat(0xffffffffffffff9c, 0x0, 0xfffffffb)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

1m55.419276154s ago: executing program 34 (id=829):
socket(0x10, 0x3, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x1b78, &(0x7f0000000040)={0x0, 0xca72, 0xc000, 0x0, 0x20002fb})
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x9}}, 0x20)
r1 = socket$inet(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8)
fchmodat(0xffffffffffffff9c, 0x0, 0xfffffffb)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

35.452170524s ago: executing program 2 (id=1736):
ioctl$sock_ifreq(0xffffffffffffffff, 0x8910, &(0x7f0000000000)={'vlan0\x00', @ifru_mtu=0x4})
r0 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117})
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x400004000008, 0x8000008}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000640)=[{0x0}], 0x178)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94)
io_uring_register$IORING_REGISTER_FILES(r0, 0x1e, &(0x7f0000000000)=[r0], 0x1)
r1 = inotify_init1(0x80000)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = dup(r2)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x3f0a, @loopback, 0x3}], 0x1c)
sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000180)={0x0, 0x2, 0x10}, 0xc)
r4 = dup(r2)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x8003, 0xbffc, 0x0, 0x5, 0x134, 0x48, 0x2}, 0x9c)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c)
pipe2$9p(&(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
write$P9_RSETATTR(r6, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a)
splice(r5, 0x0, r2, 0x0, 0xffff, 0x2)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0x80000001, @empty, 0x5}}, 0x10001fc, 0x7, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x98)
ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000040)={0x81, 0x4, 0x80000001, 0x7, 0x38000})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, 0x0, 0x20000000)

34.592290725s ago: executing program 2 (id=1745):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000640), 0x800) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) (async)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) (async)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x9) (async)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000680)={{0x1, 0x3, 0xe89, 0x0, 0xe}, 0xfffffffffffffff7, 0x4})

34.39162525s ago: executing program 2 (id=1747):
socket(0x11, 0x4, 0x0) (async, rerun: 32)
r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r1 = socket(0x28, 0x803, 0x0) (async)
r2 = socket$pppl2tp(0x18, 0x1, 0x1) (async)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r4, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e22, @multicast1}, 0x1, 0x2, 0x4, 0x4}}, 0x26)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x208043, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
r9 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64)
r10 = socket$unix(0x1, 0x5, 0x0) (rerun: 64)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x7, 0x9}, {0x0, 0x9}, {0x6, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4004) (async)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtclass={0x3c, 0x28, 0x10, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x1, 0xfff1}, {0x9, 0x2}, {0xb, 0x4}}, [@TCA_RATE={0x6, 0x5, {0xb, 0x5}}, @TCA_RATE={0x6, 0x5, {0xa, 0x1}}, @tclass_kind_options=@c_sfq={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24040810}, 0x20008894) (async, rerun: 32)
sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000af40)=ANY=[], 0x2c9c}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) (async, rerun: 32)
sendmmsg(r4, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) (async)
connect$inet6(r3, &(0x7f0000000440)={0xa, 0x4e01, 0x3, @empty, 0x10000004}, 0x1c) (async, rerun: 32)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) (async, rerun: 32)
sendmsg$nl_route(r0, 0x0, 0x20048040) (async)
r12 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r12, 0x10e, 0xc, 0x0, 0x0) (async)
write(r3, &(0x7f00000000c0)="240000001e005ffffffffffff80700000001000000010000", 0xfffffffffffffe24)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket(0xa, 0x803, 0x0)

34.297864132s ago: executing program 2 (id=1749):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x6, 0x8, 0x20005, 0x0, 0x0, 0x4, 0x0, 0x80000000}, 0x0, 0x5, 0xffffffffffffffff, 0x8)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000005600)={0x8, {"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", 0x1000}}, 0x1006)
r0 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x124)
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x2a, 0x29, 0x3, {0x5, [{{0x10, 0x9, 0x5}, 0x7, 0x7, 0xf45b3bccc711007a, './file0'}]}}, 0xfffffceb)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0xa27b734c1a0bc97)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]})
r2 = socket$tipc(0x1e, 0x5, 0x0)
r3 = socket(0x2, 0x805, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r4=>0x0]}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f00000000c0)={r4, 0x0, 0xfff9, 0x7, 0x3ff, 0x9}, &(0x7f00000001c0)=0x14)
getsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
r6 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_FILTER(r6, 0x6b, 0x1, &(0x7f0000000480)=[{0x2, 0x2, {0x2, 0xff, 0x1}, {0x0, 0xff, 0x2}, 0x0, 0xfd}], 0x20)
write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x600000a, 0x12, r5, 0x0)
io_setup(0x81, &(0x7f0000000400))
r7 = syz_open_procfs(0x0, &(0x7f0000000140)='smaps\x00')
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
lseek(r7, 0x2004, 0x0)
bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r5, 0x4048587b, &(0x7f00000019c0)={{<r8=>r7, &(0x7f0000000200)='smaps\x00', 0x100, &(0x7f0000000240)={@_ha_fsid={[0x8, 0x10000]}, {0x7, 0xfc, 0x6, 0x6}}, 0x1, &(0x7f0000000280), &(0x7f00000002c0)=0x6}, 0x4, &(0x7f0000001940)=[{0x3, 0xc0, &(0x7f0000000300)='@+\x00', &(0x7f0000000380)="643899b9b506311a3377dab4057cd77d328377b36f6648d9f982a6f9e9f9f3473b3b0312005244aeb2774bad46c9e6d9d5afa3e923916ff604d2db10b23bec8a770e99579c3e7aabe613d03f67295dfeff3214d79ce8001c06e0ad5824e02687aba9ca335961795bed78afedff", 0x6d, 0x22}, {0x3, 0x1ec00000, &(0x7f0000000440)='smaps\x00', &(0x7f0000000800)="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", 0x1000, 0x28}, {0x3, 0x9, &(0x7f0000001800)='\x00', &(0x7f0000001840)="30e88530e55feb5caf4e4fa6b6bbf990e931b7f0cd770b", 0x17, 0xf0c4a777fa248135}, {0x2, 0x45c, &(0x7f0000001880)='\x00', &(0x7f00000018c0)="b7bd0c5e01ce80601c2fb068a14544a6ad5c6a70ccd726824112da4f77f92baaab5778f03222d9bee04b5db16c3504c74365825cb50d2eaa3a8a12a4c6f9efb9c26975963aba1c439391e97371acedf24041e9a09096f646c1455e3f8713daa4b0d6ff83fceda65484f370144a", 0x6d, 0x50}]})
setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0xfffffffd, 0x3, 0x3}, 0x50)
prctl$PR_PAC_RESET_KEYS(0x36, 0x0)
socket$tipc(0x1e, 0x5, 0x0)

33.842373363s ago: executing program 2 (id=1752):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001})
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'ip6_vti0\x00'})
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={@local, 0x40, r2})
nanosleep(&(0x7f0000000200)={0x0, 0xbebc200}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x14c, 0x10, 0x401, 0x0, 0x0, {{@in6=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@local, 0x4d2, 0x33}, @in6=@remote, {}, {}, {0x0, 0x5}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x5c, 0x1, {{'sha1\x00'}, 0x80, 0x60, "00112233445566778899aabbccddeeff"}}]}, 0x14c}}, 0x0)
write$tun(r0, &(0x7f0000000500)={@void, @void, @ipv6=@generic={0x0, 0x6, '\x00', 0x18, 0x33, 0x40, @remote, @local, {[], "3b010000000004d20000000100"/24}}}, 0x40)

33.441622403s ago: executing program 2 (id=1757):
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801)
r1 = getpid()
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60}, {}, {0x3}, {}, {0x1}, {}, {0x5}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0)
r3 = syz_pidfd_open(r1, 0x0)
setns(r3, 0x24020000)
r4 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = syz_pidfd_open(r4, 0x0)
setns(r5, 0x24020000)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x59d, &(0x7f0000001100)="$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")
unlinkat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200)
bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48)
open$dir(&(0x7f0000000000)='./file0\x00', 0x218040, 0x81)
move_mount(r0, 0x0, 0xffffffffffffffff, 0x0, 0x75)

33.401166044s ago: executing program 35 (id=1757):
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801)
r1 = getpid()
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60}, {}, {0x3}, {}, {0x1}, {}, {0x5}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0)
r3 = syz_pidfd_open(r1, 0x0)
setns(r3, 0x24020000)
r4 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = syz_pidfd_open(r4, 0x0)
setns(r5, 0x24020000)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x59d, &(0x7f0000001100)="$eJzs3c9vFGUfAPDvs7stlAItb97kfZGDTUiERG1pwWiMiRDx5sEfJJ5IrG0hhAUaWhNBjJDgf6B/gIk3E2M8EmOIevHqzcSriSESA714WzO7s2WB3f7cMsh8PsnQ55mnk+8zu3z7zDw7MxtAaY1l/1Qi9kbEfIoY6WirRd441vq9u3euzCzduTKTotF4568UKV/X/v2U/xzON94eEb/8kOI/1YfjLly6fHa6Xp+7mNcnFs/NTyxcuvz8mXPTp+dOz52fmnxx8oUjh6eOHOrLfu6KiJ/Gj9eun3pt3zczX+755LuvbqQ4Gjvz9s796JexGFt+TTplr+tL/Q5WkGq+P51vcaoV2CHWpf3+DUTE/2IkqnHvzRuJT98qtHPAlmqkiAZQUkn+Q0m1jwOy89/2UuwRCfCo3D7WmgC4m1pze0vL+V9rzQ3G9ubcwI6lFJ3TOiki+jEzl8WYfyaNZEts0Twc0N3VaxHx/27jf2rm5mhzFj/L/8p9+V+JiDfzn9n6tzcYf+yBuvyHR2cz+f9eR/6/v8H48h8AAAAAAAD65+axiHiu2+d/leXrf6LL9T/DEXG0D/FX//yvcqsPYYAubh+LeCUi2tf+LXXkf260mtd2Na8HGEinztTnDkXE7og4GAPbsvrkCjHG9v080LOt4/q/bMnit68FzPtxq7bt/m1mpxenN7PPQMvtaxFP1brlf1oe/1OX8T8b++fXGKNx/NUfe7Wtnv/AVml8EXGg6/h/78kVaeXnc0w0jwcm2kcFD/vo5I1ve8WX/1CcbPzfsXL+j6bO5/UsrD/Gx3/+ton87378P5hONB85M5iv+3B6cfHiZMRgeuPh9VPr7zM8idr50M6XLP8P7u9+/r/S8f9QRFxdY8wT379+vVeb8R+KM3QtYnZd4//6C/vf/fzvXvHXNv4faY7pB/M15v9gZWtN0KL7CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/RpWI2BmpMr5crlTGxyOGI+K/saNSv7Cw+OypCx+cn83amt//X2l/0+9Iq57a3/8/2lGfeqB+OCL2RMRn1aFmfXzmQn226J0HAAAAAAAAAAAAAAAAAACAx8Rwj/v/M39Ui+4dsOVqRXcAKIz8h/KS/1Be8h/KS/5Decl/KC/5D+Ul/6G85D+UV7Xx9cmi+wAAAAAAAPTNnqdv/poi4urLQ80lM5i3DRTaM2CrHS26A0BhPOIHysulf1Beq53jmwOAJ19apX37hrcEAAAAAAAAAAAAAPrlwF73/0NZVYruAFCY3vf/ezIAPOnc/w/l5RwfcP8/AAAAAAAAAAAAADz+Fi5dPjtdr89d3Ghh2+Y2V1BYa+H33a3/s49Lf9ZfiNSHjHtEhaL/MgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG3/BAAA//9r5fVk")
unlinkat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200)
bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48)
open$dir(&(0x7f0000000000)='./file0\x00', 0x218040, 0x81)
move_mount(r0, 0x0, 0xffffffffffffffff, 0x0, 0x75)

5.205928695s ago: executing program 8 (id=2019):
socket(0x840000000002, 0x3, 0x100)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x140, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, @perf_config_ext={0x8417, 0x1}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0xfffd, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x1b8, 0x12, 0x600, 0x0, 0x202, 0x388, 0x2e8, 0x2e8, 0x388, 0x2c0, 0x4, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0000050000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x4}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1776b4318bae1944}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7ff, 'system_u:object_r:fuse_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8)

5.124172417s ago: executing program 7 (id=2020):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000200), 0x3, 0x4fe, &(0x7f0000000dc0)="$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")
r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x280, 0xffffffff, 0x0, 0x0, 0x1d8, 0xffffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'ip6gretap0\x00', {0xf63}}}}, {{@ip={@rand_addr=0x64010102, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r1)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r3=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r3, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x20040800)
syz_mount_image$ext4(&(0x7f0000000780)='ext2\x00', &(0x7f0000000240)='./file0\x00', 0x2010480, &(0x7f00000001c0), 0x5, 0x76a, &(0x7f0000000fc0)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x40)
pwrite64(r4, 0x0, 0x0, 0x10008)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
close(0xffffffffffffffff)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
write$cgroup_devices(r5, &(0x7f0000000840)=ANY=[], 0xffdd)
close(r6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0)
quotactl$Q_SETQUOTA(0xffffffff80000800, 0x0, 0x0, 0x0)
close(0x4)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_tcp_buf(r7, 0x6, 0x5, 0x0, &(0x7f0000000100))
fcntl$getown(r0, 0x9)
getdents(r0, 0x0, 0x0)
lseek(r0, 0x6, 0x1)
getdents(r0, 0x0, 0x0)
fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)

4.735018296s ago: executing program 7 (id=2024):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd24, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x1c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x22044028}, 0x20004000)
r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000780), 0x1, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000000800)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
r5 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x0, 0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bond_slave_0\x00', <r7=>0x0})
r8 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r8, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @rand_addr=0x64010100, @rand_addr=0x64010101}}}], 0x20}, 0x8e810)
r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/timer_list\x00', 0x0, 0x0)
pread64(r9, &(0x7f00000000c0)=""/208, 0xd0, 0x8d35)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x45, 0x0, 0x1, 0xfffffffc}, {}, {0x6, 0x0, 0x0, 0x7fff0000}]})
r10 = socket$inet6(0xa, 0x3, 0x800)
sendmmsg(r10, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @local, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x108}}], 0x2, 0xc040)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000700)='./file2\x00', 0x100004e, &(0x7f0000000740)={[{@resgid}]}, 0x3, 0x53e, &(0x7f00000001c0)="$eJzs3dFrLFcZAPBvJtmb5N7UpOqDFqzFVm6qdpM03jb4UBXEt4JS8fW6JpsQssmWZNPehGJT/AMEES34ok++CP4BgvTFdxEK+i4qitRbfVBoOzK7sybZu5uk3N0dSH4/OHfnzMzO953duyfn7Aw7AVxbT0TEQkRMRMTTETFXrE+LEsedku/37v3X1vKSRJa99E4SSbGue6yp4vFW8bQonv/d5MG4+4dH27VGo75X1BdbO8l7WXb0zNZObbO+Wd9dWVl+bvX51TurS0Np53xEvPC1v/74B7/4+gu/+cKrf7r794Xv5Wn9N8tej552DFOn6ZWYPrVuMiL2RhGsJJPtFnbcKTkXAADOl4/3PxoRn2mP/+dioj2aAwAAAK6S7Muz8V4SkQEAAABXVhoRs5Gk1eJ639lI02q1cw3vx+Nm2mjutz6/0TzYXc+3RcxHJd3YatSXimsH5qOS5PXl4hrbbv3ZnvpKRDwaET+am2nXq2vNxnrZX34AAADANXGrZ/7/77nO/L/tuOTkAAAAgOGZLzsBAAAAYOTM/wEAAODqM/8HAACAK+0bL76Yl6x7/+v1Vw4PtpuvPLNe39+u7hysVdeaey9XN5vNzUa9uja9c9HxGs3my1+M3YN7i636fmtx//Do7k7zYLd1d+vMLbABAACAMXr002/9MYmI4y/NtEvuRrGtEpFNnN55sowMgVFJP8zOfxldHsD4nf77PlNiHsD4GdLD9VUpOwGgdMkF2zsX7/QZLfxuNPkAAADDd/uTg8//v7NRamrAiBXn/5OL5v/A1TNxmZ2mRp8HMH6d838fZB1lZwOMU+W8EYBJAVx56aXP//dxcv7/gksJEx0KAACUbLZdkrRazANmI02r1YhH2rcFqCQbW436UkR8JCL+MFeZyuvL7WcmRvMAAAAAAAAAAAAAAAAAAAAAAAAAcElZlkQGAAAAXGkR6d+6d+a6PffUbO/3AzeS/8y1HyPi1Z++9JN7tVZrbzlf/8//r2+9Wax/toxvMAAAAIBe3Xl6dx4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMP07v3X1rplnHH/8dWImI+YOZVHZ2kyptuP01GJiJv/SmLy1POSiJgYQvzjNyLiE/3an+RpxXyRxZn4NyLSOMn5oeP3ff3PiR+d+LeGEB+us7fy/ucr/T5/aTzRfuz/+ZssysPq9n/94nf7v4kB/d8jgw5aOVt97O1fLQ6M/0bEY5P9+59u/CQ/Xp/4T16yjd/51tHRoG3ZzyNu9+v/krOxFrud7dZObbO+Wd9dWVl+bvX51TurS4sbW4168W/fGD/81K8/OKm9/0D7b57T/7bbP+D1f+qcNk+dWn7/7Xv3P9ZZ7HlnohI/y7KFJ/u//22fezB+92/fZ4u98nr+GqZvfrtvLo//8vePD8ozb//6gPZPX9D+hXPaf9rT3/z+ny+5KwAwBvuHR9u1RqO+Z6HkhaQY8T7McbrfiIw+53zcWfYrVk8iie1aYyrObKqVn1hn4fXi3ag1up+2IR35t8V/lVEmP+6OCAAAGLmTQX/vlpMTMM4zAwAAAAAAAAAAAAAAAAAAwGhd+DNggzalEXHJnxPrjXlcTlMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM71vwAAAP//7pvFXQ==")
openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x0, 0x90)
r11 = getpgid(0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r11, r5, 0x0, 0x4, &(0x7f0000000140)='^2-@'}, 0x30)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000c40)={'gretap0\x00', &(0x7f0000000c00)={'syztnl2\x00', r7, 0x20, 0x80, 0x9, 0x4b, {{0x7, 0x4, 0x3, 0x9, 0x1c, 0x67, 0x0, 0x40, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x35}, @local, {[@lsrr={0x83, 0x7, 0xc4, [@loopback]}]}}}}})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)

4.268817807s ago: executing program 8 (id=2026):
perf_event_open(&(0x7f00000000c0)={0xa, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x840, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x2, @perf_config_ext={0x80, 0xffffffffffffffff}, 0x10000, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

4.268292367s ago: executing program 8 (id=2027):
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x5, @local, 0x6}, 0x1c, 0x0}}], 0x1, 0x0)
syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x4400, &(0x7f0000000100)=ANY=[@ANYBLOB='check=strict,session=0x0000000000000024,iocharset=ascii,overriderockperm,overriderockperm,gid=', @ANYRESOCT=0x0, @ANYRES16=0x0, @ANYBLOB="f144ef566aaa2604da071bbeb6f430dfed6346ac280ad0be1430acfe313e69a2fa6cfe678c61c9f409a06bfd99bec80be2031abda528aae9370d25e0b4fbf0cf85b7fb437e3447f576f632761291515cb5463d90d1bb7568142a060494f630902b3ef5334efb547f8cf0b2458c7979b0db9ca4f520c1f1b85f556cf01d", @ANYBLOB="e18d8e322868343b38d9db095899a1945e4a12ea0f3ebe5067157346e5624f6d506a1c219ece53b17b14f64e7fa1124f331eb2d46b4e89a95ce23ee44d7d"], 0xf6, 0xa19, &(0x7f0000000d00)="$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")
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
syz_mount_image$iso9660(&(0x7f0000000100), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000ec0)=ANY=[], 0xff, 0x692, &(0x7f00000011c0)="$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")
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000000))
setns(0xc9, 0x0)
r0 = socket(0x8, 0x5, 0x5)
ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x40106183, 0x0)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000020000"], 0x511000)
r1 = socket(0x10, 0x803, 0x0)
write(r1, &(0x7f0000000040)="66000000220047000500fc0f8980e8ff06006d20002b1ffec0906849199f90e90101c7bb0000d3e7ff0b317cfdc617ab685b77fa89b5843e9fb69ea04aab8950a19d1cb58605cc23e7c515927d846ba9769d3cd91cfc183ce736f56a28e5145ba2f94812237d", 0x66)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
r3 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$sock_linger(r3, 0x1, 0x4a, &(0x7f0000000180)={0x1, 0x7}, 0x8)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETS(r5, 0x5402, &(0x7f0000000000)={0x140, 0x40, 0x1001, 0xa, 0x13, "737b27e90e2947801cf3a25bada40a9fd86040"})
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000240)=0xd)
sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000090000003c000380140002007663616e30000000000000000000000014000600ff0500000000000000000000000000010800010001000000080003"], 0x50}}, 0x0)
r6 = socket$inet6(0xa, 0x5, 0x0)
mkdir(&(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000800)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdir(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/ncm.usb0\x00', 0x1ff)
symlink(&(0x7f0000000f00)='./config/usb_gadget/g1/functions/ncm.usb0\x00', &(0x7f0000001000)='./config\x00')
write(0xffffffffffffffff, &(0x7f0000001400)='dummy_udc.0', 0xb)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @in={0x2, 0x0, @private=0xc0586300}, @in6={0xa, 0x0, 0x0, @private0}, @in={0x2, 0x4e20, @broadcast}], 0x1e)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0xd2, &(0x7f0000000040)={[{@noauto_da_alloc}, {@bh}, {@block_validity}, {@noblock_validity}]}, 0x3, 0x54e, &(0x7f0000000240)="$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")
mmap(&(0x7f00003ff000/0xc00000)=nil, 0xc00000, 0x0, 0x30, r1, 0xdd799000)

3.74889643s ago: executing program 8 (id=2029):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x56530, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0xffffffffffffff7f}, 0x100902, 0x4, 0x0, 0x5, 0x8, 0x8, 0x4, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x6, 0x0)
fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x20000000000001, 0x90}) (fail_nth: 3)

3.584490593s ago: executing program 7 (id=2030):
socket$kcm(0x10, 0x400000002, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9)
syz_emit_ethernet(0x42, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffff00000000040000010190748f1e0001ac1414aa05009078e00100e0460000000000000900110000ac1414aa4018ef00440469d0"], 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
setuid(0xee01)
symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00')
setxattr$system_posix_acl(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="02000000010000000000000002000300", @ANYRES32=0x0, @ANYBLOB="040200000000000000000100", @ANYRES32=0x0, @ANYBLOB="1000050000000000"], 0x34, 0x1)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "db0127ff", "16dea6d67a8426bd"}, 0x28)
setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000140)=0x10001, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{0x304}, "b7a41f2305009201", "d21b0e8a0e000000000000000600", '\x00', "ec9300"}, 0x28)
recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0)
recvmmsg(r0, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000000180)=""/15, 0xf}], 0x17}, 0x9}], 0x2, 0x10100, 0x0)
setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4)
syz_emit_ethernet(0x172, &(0x7f0000000580)={@empty, @random="ed272f08deb0", @void, {@ipv6={0x86dd, @generic={0xd, 0x6, "fbcddd", 0x13c, 0x32, 0x1, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[], "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"}}}}}, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x4b, 0x1, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
ioprio_set$uid(0x3, 0x0, 0x0)

3.293928341s ago: executing program 8 (id=2032):
r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x2b180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x2, @perf_config_ext={0x4, 0x60}, 0xc1ea, 0x1, 0x0, 0x3, 0x10000209, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000001040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x9}}, './file0\x00'})
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000010c0)={r1, &(0x7f0000001080)="f0eb8cee11be6ef587d1baf780c101"}, 0x20)
getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)=""/4103, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000012c0))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303136323134372c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c6e6f6e756d7461696c3d302c696f636861727365743d6b6f69382d72752c756e695f786c6174653d302c696f636861727365743d757466382c6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c7379735f696d6d757461626c652c757466383d302c0074c3fc52ac6365d676e1"], 0x1, 0x3c4, &(0x7f0000000a80)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000020000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
r4 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0)
syz_usb_connect(0x0, 0x3f, 0x0, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x14, r6, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x620b}, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15)
pwrite64(r7, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2)
socket$unix(0x1, 0x5, 0x0)
sendfile(r2, r2, 0x0, 0xe3aa6ea)
socket$inet6(0xa, 0x2, 0x0)

3.291647251s ago: executing program 7 (id=2033):
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@fallback, 0xffffffffffffffff, 0x18, 0x20}, 0x20)
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x68}}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="62a02a3a340977770a89"], 0xa)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x18, 0x1, 0x1000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x5}]}, 0x24}}, 0x44890)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b82, 0x4, @perf_config_ext={0x4, 0x800000001000}, 0x6b04, 0x0, 0x107f9, 0x8, 0xc60, 0x6, 0x6, 0x0, 0x0, 0x0, 0x2008}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0x8)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x3, 0x0, &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x94)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x6, 0x10, 0x0, 0x57}, 0x48)

2.948249509s ago: executing program 7 (id=2034):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8356c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0xffffffffffffff7f}, 0x104a13, 0x4, 0x0, 0x5, 0x8, 0x20005, 0x4, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
setns(0xc9, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0)
r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000180))
ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f0000000000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xf8f, 0x0, 0x0, 0x0, 0x0, 0x2})
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)='c:::\x00', 0x0)
gettid()
ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3})
ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil)
shmat(r4, &(0x7f0000ff9000/0x1000)=nil, 0x5000)
mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil)
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r6=>0x0})
bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r6, 0x0, {}, 0xfe}, 0x18)
connect$can_j1939(r5, &(0x7f0000000140)={0x1d, r6, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18)
sendmmsg(r5, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5)
getsockopt$SO_J1939_ERRQUEUE(r5, 0x6b, 0x4, &(0x7f0000000080), &(0x7f0000000180)=0x4)

2.525910419s ago: executing program 8 (id=2036):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES64], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/12, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
unshare(0x100000)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0)
lseek(r2, 0x1, 0x0)
r3 = memfd_secret(0x0)
inotify_add_watch(r3, &(0x7f0000001600)='./file0\x00', 0x6)
setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f00000016c0)=0x4, 0x4)
flistxattr(r3, 0x0, 0x0)
getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f00000003c0))
getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14)
ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f00000001c0)={0x0, @nl=@proc={0x10, 0x0, 0xffffff7f}, @qipcrtr={0x2a, 0x4, 0x2}, @xdp={0x2c, 0x4, r4, 0x11}, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x91, 0x6, 0x43})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x140c8, 0x1, 0x0, 0x6, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
socket$igmp(0x2, 0x3, 0x2)
socket(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x5}, 0x0)
r5 = getpid()
sched_setscheduler(r5, 0x6, &(0x7f0000000200)=0x388)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f0000000500)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="01000000080010000400000008"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001940), 0x2000cc0, r8}, 0x38)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'})
socket$nl_route(0x10, 0x3, 0x0)

1.323573648s ago: executing program 7 (id=2040):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}, {0xc, 0xc}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x1, 0x0, 0x2, 0x4}, 0xa4ca, 0x0, 0x2000008, 0x9, 0xfffffffe, 0x18, 0xb, 0x2e, 0x2, 0x2000009, {0x10001, 0x7fff, 0x2, 0x7, 0x2, 0x7fffffff}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x9, 0x7, 0xa9, 0x1, 0x1}}, {0x4}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40840}, 0x800)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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")
r1 = socket$kcm(0x29, 0x5, 0x0)
socket(0x23, 0x5, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
io_setup(0x8, &(0x7f0000000600))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a)
socket$nl_route(0x10, 0x3, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0)
keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mount$bind(0x0, 0x0, 0x0, 0x101091, 0x0)
mount$bind(0x0, 0x0, 0x0, 0x10a5840, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa07, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, @perf_config_ext={0x3, 0xffffffffffffffff}, 0x90, 0x0, 0x0, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r3 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x23f, &(0x7f0000000a80)="$eJzs3TFoJFUcBvBvZnfvzN0ipzaCoIKIaCCcnWBzNgoHchwiggoRERslEWKCXdbKxkJrlVQ2QeyMlpIm2CiCVdQUsRE0WBgstBiZnUQSE1HcuCM3vx/M7szOe/N/w8z3dpthA3TWpSRXkvSSzCYZJCmONri7WS4dbK7NbM0nVfXET8W4XbPdOOx3MckoyUNJNssiL/WTlY1ndn/Zfuy+N5cH976/8fTMVE/ywN7uzuP7711746OrD6588dUP14pcyfDYeZ294pTP+kVy639R7H+i6Lc9Av6J6699+HWd+9uS3DPO/yBlmov31tK5zUEeePev+r7945d3THOswNmrqkH9HTiqgM4pkwxTlHNJmvWynJtrfsN/07tQvry49Orsi4vLCy+0PVMBZ2WY7Dz6yfmPL/4p/9/3mvwDN646/09eX/+2Xt/vtT0aYJrq/M8+t3p/5B86R/6hu+Qfukv+obvkH7pL/qG75B+6S/6hu+Qfukv+obuO5h8A6JbqfFVV1bm2H0MGWtD2/AMAAAAAAAAAAAAAAAAAAJy0NrM1f7iMplTzs3eSvUeS9I/Xb/b2xv9HnNw0fr3wc1E3+0PRdJvIs3dNeIAJfdDy09c3f9du/c/vbLf+6kIyej3J5X7/5P1XHNx//94tf7N/8PyEBSb08FPt1v9tvd36V7eTT+v55/Jp80+Z28fvp88/w/r6TVj/lV8nPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABT83sAAAD//6rvbLA=")
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40e8662e, 0x0)
open_tree(0xffffffffffffff9c, 0x0, 0x89901)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000001480)={[{@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@dax}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@barrier_val={'barrier', 0x3d, 0x100}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@errors_continue}, {@bh}, {@jqfmt_vfsv0}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW2UfAPDvSdPu5/uugzHe1wsZ7MLJXLq2/pggOC9FhwO9n6HNymi6jCYdax24Xbgbb2QIIg7EP8B7L4f/gH/FQAdDRtELESInPenSNmnaLjPZ8vnAaZ8n55w+55vnfE+fJychAQytE+mPXMT/I+KrJOJIy7p8ZCtPrG23+vjmTLokUa9//HsSSfZYc/sk+30oq/wvIn7+IuJ0bmu71eWV+WK5XFrM6hO1hWsT1eWVM1cWinOludLVqenpc29MT7391ps9i/XVi39++9H99899eXL1mx8fHr2bxPk4nK1rjeMp3GqtnCj+nZVG4/ymDSd70NggSfp9AOzJSJbno5FeA47ESJb1wIvv84ioA0Mqkf8wpJrjgObcvkfz4OfGo/fWJkCN2Mda48+vvTYS+xtzo4OryYaZUTrfHe9B+2kbP/127266xPavQxzoUgfYlVu3I+JsPr/1+p9k17+9O9t48Xh7m9sYtv8/0E/30/HPa+3Gf7n18U+0Gf8capO7e9E9/3MPe9BMR+n4752249/1S9f4SFb7T2PMN5pcvlIunY2I/0bEqah3vfVxbvVBvdO61vFfuqTtN8eC2XE8zO/buM9ssVaMiLE9hrzBo9sRL+XbxZ+s93/Spv/T5+PiDts4Xrr3cqd13eN/tuo/RLzStv+fdGuy/f3Jicb5MNE8K7b6487xXzq13+/40/4/uH3840nr/drq7tv4fv9fpU7r9nr+jyWfNMrNJLhRrNUWJyPGkg+3Pj71ZN9mvbl9Gv+pk9tf/9qd/+nk69Mdxn/n2J2Omw5C/89u2//jsbH/d1948MFn33Vqf2f9/3qjdCp7JLv+tZedKzs9wKd+AgEAAAAAAGCA5CLicCS5wno5lysU1t7fcSwO5sqVau305crS1dlofFZ2PEZzzTvdR1reDzGZvR+2WZ/aVJ+OiKMR8fXIgUa9MFMpz/Y7eAAAAAAAAAAAAAAAAAAAABgQhzp8/j/160i/jw545hpfbLCv30cB9EPXr/zvxTc9AQOpa/4DLyz5D8NL/sPwkv8wvOQ/DC/5D8NL/sPwkv8AAAAAAAAAAAAAAAAAAAAAAAAAAADQUxcvXEiX+urjmzNpffb68tJ85fqZ2VJ1vrCwNFOYqSxeK8xVKnPlUmGmstDt75UrlWuTU7F0Y6JWqtYmqssrlxYqS1drl64sFOdKl0qj/0pUAAAAAAAAAAAAAAAAAAAA8HypLq/MF8vl0qJCx8K7MRCH8SwDXLOn3fODEoVCh8LtrHt3t1cfL0oAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsMk/AQAA//+MmzGa")
setxattr$trusted_overlay_upper(0x0, &(0x7f0000000100), &(0x7f0000001400)=ANY=[], 0x835, 0x0)
sendfile(r1, r2, 0x0, 0xffffffff000)

1.222934491s ago: executing program 0 (id=2041):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5800000055003d07000000000001000007000000", @ANYRES32=r1, @ANYBLOB="20000280", @ANYRES32=r0, @ANYBLOB="0000000000000000000000000a0000000000000000000014200001"], 0x58}}, 0x0)

1.141990182s ago: executing program 0 (id=2042):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0xfffffbfc, 0x2}, 0x2e)
sendmsg$tipc(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xc03}, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000000), 0x4)
r2 = dup3(r0, r1, 0x0)
write$tun(r2, 0x0, 0x0)
setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88)

1.096326534s ago: executing program 0 (id=2044):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000040)={@remote, @broadcast, <r2=>0x0}, &(0x7f0000000080)=0xc)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r2, 0x2f, 0xc6, 0x5, 0xfffff801, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}, 0x7, 0x80, 0x1, 0x9}}) (async, rerun: 64)
socket(0x2, 0xa, 0x300) (async, rerun: 64)
syz_emit_ethernet(0x2e, &(0x7f0000000000)={@local, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x1, 0x0, 0x1c, 0x66, 0x0, 0x8, 0x1, 0x0, @rand_addr=0x64010102, @local}, @info_request={0xf, 0x0, 0x0, 0x8}}}}}, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48)

1.034763665s ago: executing program 0 (id=2045):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/11, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x4000, 0x1, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$igmp(0x2, 0x3, 0x2)
socket(0x10, 0x3, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00'})
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
r3 = inotify_init()
inotify_add_watch(r3, &(0x7f0000000440)='.\x00', 0x449)
r4 = open(&(0x7f0000000140)='./bus\x00', 0x14d27e, 0x2)
fallocate(r4, 0x0, 0x0, 0x1000f4)
sendfile(r4, r4, 0x0, 0x800000a1e)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x0, 0x577, &(0x7f0000000640)="$eJzs3c9rHFUcAPDvbJI2/aFNoRT1IIEerNRumsQfFYTWo2ixoPe6bKahZNMt2U1pYqHtwV68SBFELIh/gHePxX/Av6KghSIl6MFLZDazzTbJ5lc3TXQ+H5j2vZnZvHn75vv2Ozu7bACFNZz9U4p4NSK+SSKOdGzrj3zj8NJ+C09uVhcO3Kwmsbj42Z9JJPm69v5J/v+hvPJKRPz6VcSp0up2G3PzU5VaLZ3J6yPN6Wsjjbn501emK5PpZHp1bHz87DvjY++/927P+vrmxb+///TBR2e/PrHw3c+Pjt5L4nwczrd19uM53O6sDMdw/pwMxPkVO472oLG9JNntA2Bb+vI4H4hsDjgSfXnUA/9/tyJiESioRPxDQbXzgNa1fb7sbkbyYj3+cOkCaHX/+5feG4nB1rXRwYXkmSuj7Hp3qAftZ2388sf9e9kSG7wPcasH7QG03b4TEWf6+1fPf0k+/23fmdabx+tb2UbRXn9gNz3I8p+31sp/Sk/zn1gj/zm0Ruxux8bxX3rUg2a6yvK/D9bMf59OXUN9ee2lVs43kFy+UkvPRMTLEXEyBvZn9fXu55xdeLjYbVtn/pctWfvtXDA/jkf9+599zESlWXmePnd6fCfiteX8N4lV8/9gK9ddOf7Z83Fxk20cT++/3m3bxv3v1PsMePGniDfWHP/lO1rJ+vcnR1rnw0j7rFjtr7vHf+vW/tb633vZ+B9cv/9DSef92sbW2/hx8J+027btnv/7ks9b5X2xdP12o9JszoxG7Es+WV4f+fqx5ce26+39s/6fPLH+/LfW+X8gIr7YZP/vHrvbdde9MP4TWxr/rRcefvzlD93a39z4v90qnczXbGb+2+wBPs9zBwAAAAAAAHtNKSIOR1IqPy2XSuXy0uc7jsXBUq3eaJ66XJ+9OhGt78oOxUCpfaf7SMfnIUbzz8O262Mr6uMRcTQivu070KqXq/XaxG53HgAAAAAAAAAAAAAAAAAAAPaIQ12+/5/5vW+3jw7YcX7yG4prw/jvxS89AXuS138oLvEPxSX+objEPxSX+IfiEv9QXOIfikv8AwAAAAAAAAAAAAAAAAAAAAAAAAAAQE9dvHAhWxYXntysZvWJ63OzU/XrpyfSxlR5erZartZnrpUn6/XJWlqu1qc3+nu1ev3a6FjM3hhppo3mSGNu/tJ0ffZq89KV6cpkeikdeCG9AgAAAAAAAAAAAAAAAAAAgP+Wxtz8VKVWS2cUuhbOxZ44jG0Xko1G+Vx+Mmyrif7d76DCDhQ2NX0M7ujkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC5fwMAAP//lvwy6w==")
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
mknod$loop(&(0x7f0000000300)='./file1\x00', 0xc000, 0x1)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x14, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd, 0x0, 0x3}}, 0x14}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4)
sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000070601080000000000000000050000020500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x24000840}, 0x4800)
close_range(r5, 0xffffffffffffffff, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000340)={'gretap0\x00', <r9=>0x0, 0x7, 0x80, 0x4000, 0x19, {{0xa, 0x4, 0x2, 0x4, 0x28, 0x64, 0x0, 0xf, 0x2f, 0x0, @private=0xa010101, @empty, {[@timestamp={0x44, 0x14, 0xd8, 0x0, 0x8, [0x7, 0x4, 0x6, 0xfffffffa]}]}}}}})
sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="beffffff100000082dbd70000840000000000000", @ANYRES32=r9, @ANYBLOB="0000000019530100080020001a0000001c001280000001006d616373656300000000028000000a005d000000000009000400000000000d0004000000000002404e210000000002404e24000000000c00fd00000000000400080000000000000000000b00000000000000030008000000000004000500000000000004"], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000240)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000180)='./file1\x00', &(0x7f0000000200), &(0x7f00000003c0)=ANY=[@ANYBLOB="00fb390107d9b0c44b20ac85c62ea424ea4957603f4b63125fe11aadb3810f713d25c22fc4e4c4a2d55b8d0007f08af7a6925b7fdada096c0b"], 0x39, 0x2)

855.807289ms ago: executing program 1 (id=2046):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/12, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x4000, 0x1, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$igmp(0x2, 0x3, 0x2)
socket(0x10, 0x3, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00'})
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48d0}, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}})

828.18177ms ago: executing program 5 (id=2047):
r0 = socket$inet6(0xa, 0x3, 0x87)
bpf$PROG_LOAD(0x5, 0x0, 0xc1551c105750eff5)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, &(0x7f00000004c0)={0x6, "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"})
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xf2000000}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x0, 0x2000}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8, 0x100}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r3}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@local, 0x0, 0x0, 0x4e20, 0x0, 0x2}, {0xffffffdffffffffd, 0x1, 0x1, 0x0, 0x0, 0xb, 0x400000}, {0x1ff, 0xffffffffe, 0x4053e5, 0x2}, 0x6, 0x80001, 0x1, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d4, 0x32}, 0xa, @in6=@empty, 0x3502, 0x1, 0x3, 0x0, 0x6, 0xffbffffd}}, 0xe8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c)
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r9=>0x0})
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x30, r8, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r10}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x8854)

806.069721ms ago: executing program 1 (id=2048):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
syslog(0x2, &(0x7f00000002c0)=""/123, 0x7b)
write(0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006a80), 0x1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400a000200001ec00037153e370a00018025581d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x8010)

498.057808ms ago: executing program 1 (id=2049):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="40000000091401002cbd7000fcdbdf25080001"], 0x40}, 0x1, 0x0, 0x0, 0x4040081}, 0x4000000)
r1 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000240)={0x0, 0x10000, 0x0, 0xe4}, 0x10)
socket$nl_rdma(0x10, 0x3, 0x14)
socket$nl_rdma(0x10, 0x3, 0x14) (async)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="40000000091401002cbd7000fcdbdf25080001"], 0x40}, 0x1, 0x0, 0x0, 0x4040081}, 0x4000000) (async)
socket(0x2, 0x80805, 0x0) (async)
setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000240)={0x0, 0x10000, 0x0, 0xe4}, 0x10) (async)
socket$nl_rdma(0x10, 0x3, 0x14) (async)

482.064779ms ago: executing program 1 (id=2050):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
io_uring_setup(0x4fef, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0x1, 0x20002f7})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key$keyring(&(0x7f0000000540), 0x0, 0x0, 0x0, 0xffffffffffffffff)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001c40)=@filter={'filter\x00', 0x8000000, 0x4, 0x370, 0xffffffff, 0xe8, 0x0, 0xe8, 0xfeffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffff00, 0xff000000, 0xff, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'macvlan0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x15}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0x0, 0x0, 0x0, 0xff000000], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00', {}, {}, 0x600}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x2000010}}}}, {{@ipv6={@private2, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0xffffff00, 0xff], [0x0, 0xffffff00, 0xf97f1f27bc0fd003, 0xff000000], 'bridge_slave_0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x11, 0x80, 0x2, 0x6a}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0)

459.785219ms ago: executing program 0 (id=2051):
mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', 0x0, 0x0, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xff00, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff00000568000800a8792d7200", @ANYRES32=0x0, @ANYBLOB="c30c424700000011280012800a00010076786c616e00000018000280140011"], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

427.06682ms ago: executing program 1 (id=2052):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/options/context-info\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)="30b3", 0x2) (async, rerun: 64)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl0\x00', <r1=>0x0, 0x2f, 0x5, 0x8, 0x2, 0x14, @rand_addr=' \x01\x00', @empty, 0x8000, 0x80, 0x732}}) (rerun: 64)
setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000100)={@loopback, r1}, 0x14)
lchown(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x0, 0x0)

357.984132ms ago: executing program 5 (id=2053):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

353.613182ms ago: executing program 1 (id=2054):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xb, 0x520, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x48, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4, 0xf5}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x48}}, 0x0)
socket$kcm(0x1e, 0x1, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00')
pread64(r1, &(0x7f0000000340)=""/19, 0x13, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1007f}, 0x94)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000dc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000dd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r2 = socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket(0x10, 0x803, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="18080000d0ff0000000000003e00000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180100002028782500000000002020207b1bf0ff00000000bfa100000000000007010000f8fffeffb702000008000000b50afbff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0xc}, 0x94)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc000000000000000000000000000001f5140375f604cf98f1078e563cd076e5d93cc023af0efea78ecfc7ea4a4a2e454c25fd6b2a597b018e81feb512018eb416e93a9ea8704cbc99c097a699d4399b5dad04a3db2c1136447519310247b5d09d9ff224ba48353f2c39182037f9afdf7f55563d2e2feb86d902e6167ad62e121cd43598713a41a318340d8dff3d9f31fc0361373f3c918b2ddabd987894255a9113f3baba3af708056b7063c078fbd5aa53643dd8463cd3e52a"], 0x5c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x844)
io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0x2, 0x20002f7})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2ff000fea0"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000804, &(0x7f0000000940)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@grpid}, {@bh}, {@grpid}, {@resgid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0xb}}, {@init_itable}, {@usrjquota}, {@nolazytime}, {@norecovery}, {@resgid}]}, 0xfe, 0x495, &(0x7f0000000e40)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r3, &(0x7f00000000c0)=""/58, 0x3a)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xcd83, 0xfffffffffffffec0, &(0x7f0000000140)="e09f547ed3f02dc1fd3d6487775b", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

340.138532ms ago: executing program 0 (id=2055):
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000005c0)=@nat={'nat\x00', 0x670, 0x5, 0x350, 0x150, 0x150, 0xfeffffff, 0x0, 0xa8, 0x2b8, 0x2b8, 0xffffffff, 0x2b8, 0x2b8, 0x5, 0x0, {[{{@ip={@loopback, @broadcast, 0x0, 0x0, 'dvmrp1\x00', 'vlan1\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x13, @rand_addr, @empty, @port=0x1, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x13, @broadcast, @loopback}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x3c}, @empty, 0x0, 0xff, 'vlan0\x00', 'virt_wifi0\x00', {0xff}, {0xff}, 0x2f, 0x1, 0xa}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0x0, 0x0, 'batadv_slave_1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @remote, @port, @icmp_id=0x65}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b0)
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
dup3(r0, 0xffffffffffffffff, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a310000000005000100070000002c0007801800018014000240fe80000000000000000000007649ec610600044000040000050007"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x61)
copy_file_range(r3, 0x0, r3, 0x0, 0x9, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, 0x0, 0x80)
mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x4, 0x9, 0x0, 0x1, 0xe7030000}, {0x16, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x24, 0x9}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={r6, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001c80)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, 0x8, 0x0, 0x0}}, 0x10)
prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil)
r7 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000000800000000000003000000850000002c00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0xe, 0x0, &(0x7f0000000200)="6eb56da56e6aea6b7ee72d0700bb", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)
mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4)
io_setup(0x2278, 0x0)
fallocate(0xffffffffffffffff, 0x20, 0x4000, 0x3000000)
r9 = socket(0x1d, 0x2, 0x6)
getsockname$packet(r9, 0x0, 0x0)
eventfd(0x60000000)

314.955283ms ago: executing program 5 (id=2056):
syz_open_dev$tty1(0xc, 0x4, 0x2)
r0 = socket(0x10, 0x3, 0x9)
connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc)
unshare(0x22020400)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040)
syz_init_net_socket$802154_raw(0x24, 0x4, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
socket$inet_sctp(0x2, 0x5, 0x84)
socket$inet_smc(0x2b, 0x1, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x80002, 0x3, 0xfffffffffffffffd, 0x3, 0x40000000080, 0x9}, 0x0, &(0x7f0000002080)={0x3ff, 0x0, 0x8, 0x8, 0x8000000000000001, 0x663, 0x7fffffff, 0x6608c64b}, 0x0, 0x0)

209.232145ms ago: executing program 5 (id=2057):
perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc8, 0x3}, 0x100100, 0x0, 0x0, 0x3, 0x800000, 0x1b9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x24) (async, rerun: 32)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
r0 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={<r1=>r0})
bpf$PROG_LOAD(0x5, &(0x7f0000002880)={0x1b, 0xd, &(0x7f0000000480)=@raw=[@map_idx_val={0x18, 0x6, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x120}, @generic={0x0, 0x7, 0x4, 0x4, 0x6}, @map_fd={0x18, 0xb}, @map_fd={0x18, 0xa, 0x1, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @alu={0x74114ad813b02ccb, 0x1, 0x1, 0x1, 0x4, 0x30, 0x1}], &(0x7f0000000580)='GPL\x00', 0xffff, 0x1000, &(0x7f00000017c0)=""/4096, 0x41000, 0x32, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, &(0x7f00000027c0)={0xa, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000002800)=[0xffffffffffffffff], &(0x7f0000002840)=[{0x1, 0x3, 0xe, 0x3}], 0x10, 0x8}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x18, r3, 0x301, 0x70bd26, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x90}, 0x40006) (async, rerun: 32)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)}], 0x1}, 0x8040) (async)
r4 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000440)={0x3, {{0xa, 0x4e23, 0xfffffffe, @mcast1, 0xbffffff8}}, 0x0, 0x1, [{{0xa, 0x4e21, 0x0, @local, 0x10000003}}]}, 0x110) (async)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async, rerun: 64)
r6 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, 0x0, 0x1)
openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r1)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYRES16=r5], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000100)={0x1, 0x2, 0x2a000000}) (rerun: 64)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) (async)
r8 = socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) (async)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0)

59.627328ms ago: executing program 5 (id=2058):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0}, 0x94)
ioctl$SIOCSIFHWADDR(r1, 0x8946, &(0x7f0000000040)={'bond0\x00', @random='\x00\x00\x00\x00\x00 '})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000140)=@ipv4_newaddr={0x3c, 0x14, 0x509, 0x70bd27, 0x25dfdbfd, {0x2, 0x1f, 0x0, 0xff, r2}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010104}, @IFA_LOCAL={0x8, 0x2, @local}, @IFA_LABEL={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040014}, 0x0)

0s ago: executing program 5 (id=2059):
socket(0x840000000002, 0x3, 0x100)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x140, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, @perf_config_ext={0x8417, 0x1}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0xfffd, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x1b8, 0x12, 0x600, 0x0, 0x202, 0x388, 0x2e8, 0x2e8, 0x388, 0x2c0, 0x4, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0000050000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x4}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1776b4318bae1944}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7ff, 'system_u:object_r:fuse_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8)

kernel console output (not intermixed with test programs):

000000-0000-0000-0000-000000000000.
[  162.983529][   T28] audit: type=1400 audit(2000000014.960:11621): avc:  denied  { ioctl } for  pid=8660 comm="syz.1.1526" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x227e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  163.059713][   T28] audit: type=1400 audit(2000000014.990:11622): avc:  denied  { read write } for  pid=8660 comm="syz.1.1526" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  163.125395][ T8661] loop1: detected capacity change from 0 to 512
[  163.143699][   T28] audit: type=1400 audit(2000000014.990:11623): avc:  denied  { open } for  pid=8660 comm="syz.1.1526" path="/dev/ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  163.183366][ T8661] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities
[  163.246269][   T28] audit: type=1400 audit(2000000015.200:11624): avc:  denied  { setopt } for  pid=8660 comm="syz.1.1526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  163.306812][ T8665] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  163.332731][ T8665] batman_adv: batadv0: Removing interface: batadv_slave_0
[  163.349009][ T8665] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  163.357276][ T8665] batman_adv: batadv0: Removing interface: batadv_slave_1
[  163.534819][ T5198] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.566687][ T8671] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1531'.
[  163.576010][ T8671] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1531'.
[  163.643360][ T8672] loop2: detected capacity change from 0 to 512
[  163.664117][ T8672] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.1530: invalid indirect mapped block 11 (level 0)
[  163.682706][ T8672] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  163.686430][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  163.702016][    C1] EXT4-fs (loop2): initial error at time 2000000015: ext4_free_branches:1023: inode 13
[  163.711715][    C1] EXT4-fs (loop2): last error at time 2000000015: ext4_free_branches:1023: inode 13
[  163.723944][ T8672] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.1530: attempt to clear invalid blocks 1024 len 1
[  163.737973][ T8672] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  163.761370][ T8672] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters
[  163.791249][ T8672] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.1530: invalid indirect mapped block 1819239214 (level 0)
[  163.806799][ T8672] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  163.812611][ T8672] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.1530: invalid indirect mapped block 33554432 (level 2)
[  163.843942][ T8672] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  163.846594][ T8672] EXT4-fs (loop2): 1 truncate cleaned up
[  163.872212][ T8672] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  163.931144][ T8688] loop7: detected capacity change from 0 to 1764
[  164.004857][ T8695] Failed to initialize the IGMP autojoin socket (err -2)
[  164.048264][ T8688] IPVS: Unknown mcast interface: vcan0
[  164.071117][   T28] audit: type=1400 audit(2000000016.050:11625): avc:  denied  { bind } for  pid=8694 comm="syz.5.1541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  164.143826][ T8705] usb usb5: usbfs: process 8705 (syz.5.1545) did not claim interface 1 before use
[  164.369093][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.396780][ T3382] usb usb6-port1: attempt power cycle
[  164.652103][ T8745] loop2: detected capacity change from 0 to 512
[  164.676091][ T8745] EXT4-fs: Ignoring removed nomblk_io_submit option
[  164.686169][ T8745] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  164.699690][ T8745] EXT4-fs (loop2): 1 truncate cleaned up
[  164.706058][ T8745] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  164.725353][ T8745] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.744556][ T8745] loop2: detected capacity change from 0 to 128
[  164.832839][   T28] audit: type=1326 audit(2000000016.810:11626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8748 comm="syz.2.1559" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f117609e019 code=0x7ffc0000
[  164.865734][   T28] audit: type=1326 audit(2000000016.810:11627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8748 comm="syz.2.1559" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f117609e019 code=0x7ffc0000
[  165.418224][ T8776] loop5: detected capacity change from 0 to 128
[  165.430328][ T8774] SELinux:  invalid class
[  165.458070][ T8776] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  165.470769][ T8774] SELinux: failed to load policy
[  165.478132][ T8776] ext4 filesystem being mounted at /199/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  165.624745][ T8782] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8782 comm=syz.7.1573
[  165.758144][ T5198] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  166.267001][ T3382] usb usb6-port1: unable to enumerate USB device
[  166.526143][   T28] kauditd_printk_skb: 37 callbacks suppressed
[  166.526169][   T28] audit: type=1400 audit(2000000018.500:11665): avc:  denied  { append } for  pid=8806 comm="syz.7.1584" name="usbmon2" dev="devtmpfs" ino=148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  166.618692][ T8807] __nla_validate_parse: 12 callbacks suppressed
[  166.618712][ T8807] netlink: 96 bytes leftover after parsing attributes in process `syz.7.1584'.
[  166.634633][ T8807] 8021q: VLANs not supported on ip6gre0
[  166.830659][   T28] audit: type=1400 audit(2000000018.810:11666): avc:  denied  { ioctl } for  pid=8806 comm="syz.7.1584" path="/dev/usbmon2" dev="devtmpfs" ino=148 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  166.858940][ T8818] bond4: option downdelay: invalid value (18446744073709547007)
[  166.867348][ T8818] bond4: option downdelay: allowed values 0 - 2147483647
[  166.884865][ T8823] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1590'.
[  166.928503][ T8823] loop2: detected capacity change from 0 to 512
[  166.964457][ T8823] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.1590: invalid indirect mapped block 11 (level 0)
[  166.991839][ T8823] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  166.992188][ T8818] bond4 (unregistering): Released all slaves
[  166.996532][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  167.014274][    C1] EXT4-fs (loop2): initial error at time 2000000018: ext4_free_branches:1023: inode 13
[  167.023992][    C1] EXT4-fs (loop2): last error at time 2000000018: ext4_free_branches:1023: inode 13
[  167.038588][ T8823] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.1590: attempt to clear invalid blocks 1024 len 1
[  167.052316][ T8823] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  167.055374][ T8823] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters
[  167.090294][ T8823] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.1590: invalid indirect mapped block 1819239214 (level 0)
[  167.113764][ T8823] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  167.115157][ T8823] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.1590: invalid indirect mapped block 33554432 (level 2)
[  167.144897][ T8823] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  167.149927][ T8823] EXT4-fs (loop2): 1 truncate cleaned up
[  167.217827][ T8823] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  167.355117][ T8841] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  167.366516][ T8841] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1595'.
[  167.414401][   T28] audit: type=1400 audit(2000000019.390:11667): avc:  denied  { ioctl } for  pid=8844 comm="syz.5.1599" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7010 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  167.557090][ T8847] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1600'.
[  167.569179][ T8850] 9p: Bad value for 'wfdno'
[  167.642216][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.654170][ T8847] loop7: detected capacity change from 0 to 1024
[  167.669553][ T8847] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  167.705123][ T8847] EXT4-fs error (device loop7): ext4_map_blocks:833: inode #3: block 1: comm syz.7.1600: lblock 1 mapped to illegal pblock 1 (length 1)
[  167.724660][ T8847] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  167.726450][    C1] EXT4-fs (loop7): error count since last fsck: 1
[  167.741966][    C1] EXT4-fs (loop7): initial error at time 2000000019: ext4_map_blocks:833: inode 3: block 1
[  167.752036][    C1] EXT4-fs (loop7): last error at time 2000000019: ext4_map_blocks:833: inode 3: block 1
[  167.765546][ T8847] Quota error (device loop7): write_blk: dquota write failed
[  167.779950][ T8847] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota
[  167.793427][ T8847] EXT4-fs error (device loop7): ext4_acquire_dquot:7041: comm syz.7.1600: Failed to acquire dquot type 0
[  167.805157][ T8847] loop7: lost filesystem error report for type 5 error -117
[  167.810219][ T8847] EXT4-fs error (device loop7): ext4_free_blocks:6718: comm syz.7.1600: Freeing blocks not in datazone - block = 0, count = 4096
[  167.835560][ T8847] loop7: lost filesystem error report for type 5 error -117
[  167.837714][ T8847] EXT4-fs error (device loop7): ext4_read_inode_bitmap:141: comm syz.7.1600: Invalid inode bitmap blk 0 in block_group 0
[  167.864878][ T2064] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1)
[  167.864991][ T2064] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  167.865162][ T2064] Quota error (device loop7): remove_tree: Can't read quota data block 1
[  167.865184][ T2064] EXT4-fs error (device loop7): ext4_release_dquot:7077: comm kworker/u8:10: Failed to release dquot type 0
[  167.865239][ T2064] loop7: lost filesystem error report for type 5 error -117
[  167.951514][ T8847] loop7: lost filesystem error report for type 5 error -117
[  167.960480][ T8847] EXT4-fs error (device loop7) in ext4_free_inode:363: Corrupt filesystem
[  167.981610][ T8847] loop7: lost filesystem error report for type 5 error -117
[  167.982240][ T8847] EXT4-fs (loop7): 1 orphan inode deleted
[  168.004825][ T8847] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  168.074755][ T6310] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.214276][ T8121] Process accounting resumed
[  168.276647][ T8880] loop5: detected capacity change from 0 to 512
[  168.392522][ T8882] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1615'.
[  168.402842][ T8880] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  168.430061][ T8880] ext4 filesystem being mounted at /214/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  168.502764][ T8882] loop7: detected capacity change from 0 to 1024
[  168.523554][ T8882] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  168.625672][ T8882] EXT4-fs error (device loop7): ext4_map_blocks:833: inode #3: block 1: comm syz.7.1615: lblock 1 mapped to illegal pblock 1 (length 1)
[  168.642293][ T8882] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  168.642750][ T8882] Quota error (device loop7): write_blk: dquota write failed
[  168.652040][    C0] EXT4-fs (loop7): error count since last fsck: 1
[  168.652070][    C0] EXT4-fs (loop7): initial error at time 2000000020: ext4_map_blocks:833: inode 3: block 1
[  168.652189][    C0] EXT4-fs (loop7): last error at time 2000000020: ext4_map_blocks:833: inode 3: block 1
[  168.690050][ T8882] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota
[  168.700287][ T8882] EXT4-fs error (device loop7): ext4_acquire_dquot:7041: comm syz.7.1615: Failed to acquire dquot type 0
[  168.711831][ T8882] loop7: lost filesystem error report for type 5 error -117
[  168.713316][ T8882] EXT4-fs error (device loop7): ext4_free_blocks:6718: comm syz.7.1615: Freeing blocks not in datazone - block = 0, count = 4096
[  168.736058][ T8882] loop7: lost filesystem error report for type 5 error -117
[  168.740972][ T8882] EXT4-fs error (device loop7): ext4_read_inode_bitmap:141: comm syz.7.1615: Invalid inode bitmap blk 0 in block_group 0
[  168.763134][ T8882] loop7: lost filesystem error report for type 5 error -117
[  168.764724][ T8882] EXT4-fs error (device loop7) in ext4_free_inode:363: Corrupt filesystem
[  168.766214][   T49] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1)
[  168.772334][ T8882] loop7: lost filesystem error report for type 5 error -117
[  168.797885][ T8882] EXT4-fs (loop7): 1 orphan inode deleted
[  168.816076][ T8896] Failed to initialize the IGMP autojoin socket (err -2)
[  168.833593][ T8882] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  168.898437][   T49] Quota error (device loop7): remove_tree: Can't read quota data block 1
[  168.907058][   T49] EXT4-fs error (device loop7): ext4_release_dquot:7077: comm kworker/u8:3: Failed to release dquot type 0
[  168.923281][ T6310] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.942881][ T5198] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  169.082861][ T8900] loop7: detected capacity change from 0 to 512
[  169.089517][ T8900] EXT4-fs: Ignoring removed i_version option
[  169.095801][ T8900] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  169.109353][ T8900] EXT4-fs (loop7): 1 truncate cleaned up
[  169.115412][ T8900] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  169.129308][   T28] audit: type=1400 audit(2000000021.110:11668): avc:  denied  { write } for  pid=8899 comm="syz.7.1620" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  170.216050][ T8918] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1625'.
[  170.234596][ T8918] loop1: detected capacity change from 0 to 512
[  170.257569][ T8918] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1625: invalid indirect mapped block 11 (level 0)
[  170.321330][ T8918] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  170.322007][ T8918] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.1625: attempt to clear invalid blocks 1024 len 1
[  170.331235][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  170.331267][    C0] EXT4-fs (loop1): initial error at time 2000000022: ext4_free_branches:1023: inode 13
[  170.331311][    C0] EXT4-fs (loop1): last error at time 2000000022: ext4_free_branches:1023: inode 13
[  170.370147][ T8918] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  170.374563][ T8918] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters
[  170.398421][ T8918] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1625: invalid indirect mapped block 1819239214 (level 0)
[  170.412351][ T8918] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  170.412979][ T8918] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1625: invalid indirect mapped block 33554432 (level 2)
[  170.519145][ T8918] EXT4-fs (loop1): 1 truncate cleaned up
[  170.526212][ T8918] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  170.546866][ T8900] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.069465][ T8930] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1629'.
[  171.286838][ T8932] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1630'.
[  171.364647][ T8932] loop7: detected capacity change from 0 to 1024
[  171.382964][ T8932] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  171.401725][ T8932] EXT4-fs error (device loop7): ext4_map_blocks:833: inode #3: block 1: comm syz.7.1630: lblock 1 mapped to illegal pblock 1 (length 1)
[  171.418832][ T8932] EXT4-fs error (device loop7): ext4_acquire_dquot:7041: comm syz.7.1630: Failed to acquire dquot type 0
[  171.430622][    C0] EXT4-fs (loop7): error count since last fsck: 1
[  171.430662][    C0] EXT4-fs (loop7): initial error at time 2000000023: ext4_map_blocks:833: inode 3: block 1
[  171.431053][    C0] EXT4-fs (loop7): last error at time 2000000023: ext4_map_blocks:833: inode 3: block 1
[  171.459985][ T8932] loop7: lost filesystem error report for type 5 error -117
[  171.462361][ T8932] EXT4-fs error (device loop7): ext4_free_blocks:6718: comm syz.7.1630: Freeing blocks not in datazone - block = 0, count = 4096
[  171.484822][ T8932] EXT4-fs error (device loop7): ext4_read_inode_bitmap:141: comm syz.7.1630: Invalid inode bitmap blk 0 in block_group 0
[  171.501564][   T12] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1)
[  171.516365][ T8932] EXT4-fs error (device loop7) in ext4_free_inode:363: Corrupt filesystem
[  171.527610][ T8932] EXT4-fs (loop7): 1 orphan inode deleted
[  171.538020][ T8932] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  171.643670][   T12] __quota_error: 4 callbacks suppressed
[  171.643683][   T12] Quota error (device loop7): remove_tree: Can't read quota data block 1
[  171.666614][   T12] EXT4-fs error (device loop7): ext4_release_dquot:7077: comm kworker/u8:0: Failed to release dquot type 0
[  171.741935][ T6310] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.752191][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.764551][ T8937] bridge0: port 3(syz_tun) entered disabled state
[  171.782500][ T8937] syz_tun (unregistering): left allmulticast mode
[  171.800441][ T8937] syz_tun (unregistering): left promiscuous mode
[  171.815123][ T8940] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1632'.
[  171.829651][ T8942] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1634'.
[  171.842818][ T8937] bridge0: port 3(syz_tun) entered disabled state
[  171.859213][ T8942] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1634'.
[  171.912077][ T8944] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1635'.
[  171.926614][ T8942] SELinux: failed to load policy
[  171.933579][ T8944] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1635'.
[  172.586080][ T8958] Failed to initialize the IGMP autojoin socket (err -2)
[  172.613737][   T28] audit: type=1400 audit(2000000024.590:11671): avc:  denied  { listen } for  pid=8959 comm="syz.2.1641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  172.740316][ T8962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1642'.
[  172.772657][ T8966] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=8966 comm=syz.7.1640
[  172.795833][ T8963] bridge2: entered promiscuous mode
[  172.810492][ T8963] bridge2: entered allmulticast mode
[  172.905988][ T8962] loop1: detected capacity change from 0 to 1024
[  172.943581][ T8968] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1643'.
[  172.954751][ T8962] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  172.987742][ T8972] loop7: detected capacity change from 0 to 512
[  172.996849][ T8962] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #3: block 1: comm syz.1.1642: lblock 1 mapped to illegal pblock 1 (length 1)
[  173.013622][ T8972] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  173.035492][ T8962] fserror_report: 2 callbacks suppressed
[  173.035509][ T8962] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  173.051814][ T8962] Quota error (device loop1): write_blk: dquota write failed
[  173.061152][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  173.061216][    C1] EXT4-fs (loop1): initial error at time 2000000025: ext4_map_blocks:833: inode 3: block 1
[  173.061408][    C1] EXT4-fs (loop1): last error at time 2000000025: ext4_map_blocks:833: inode 3: block 1
[  173.111638][ T8972] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003)
[  173.128123][ T8962] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  173.139565][ T8962] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.1642: Failed to acquire dquot type 0
[  173.162208][ T8962] fserror_report: 3 callbacks suppressed
[  173.162234][ T8962] loop1: lost filesystem error report for type 5 error -117
[  173.170349][ T8962] EXT4-fs error (device loop1): ext4_free_blocks:6718: comm syz.1.1642: Freeing blocks not in datazone - block = 0, count = 4096
[  173.219212][ T8962] loop1: lost filesystem error report for type 5 error -117
[  173.225407][ T8962] EXT4-fs error (device loop1): ext4_read_inode_bitmap:141: comm syz.1.1642: Invalid inode bitmap blk 0 in block_group 0
[  173.254167][   T36] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1)
[  173.267104][ T8962] loop1: lost filesystem error report for type 5 error -117
[  173.287934][ T8962] EXT4-fs error (device loop1) in ext4_free_inode:363: Corrupt filesystem
[  173.304953][ T8962] loop1: lost filesystem error report for type 5 error -117
[  173.307932][ T8962] EXT4-fs (loop1): 1 orphan inode deleted
[  173.325423][ T8962] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  173.334034][   T36] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  173.407152][   T36] Quota error (device loop1): remove_tree: Can't read quota data block 1
[  173.410115][ T8975] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1645'.
[  173.418657][   T36] EXT4-fs error (device loop1): ext4_release_dquot:7077: comm kworker/u8:2: Failed to release dquot type 0
[  173.463102][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  173.540647][ T8979] usb usb5: usbfs: process 8979 (syz.7.1647) did not claim interface 1 before use
[  173.566362][ T8980] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1646'.
[  173.642182][ T8980] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1646'.
[  173.995432][ T8997] loop7: detected capacity change from 0 to 512
[  174.092106][ T8997] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.1651: invalid indirect mapped block 11 (level 0)
[  174.105551][ T8997] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  174.106441][    C0] EXT4-fs (loop7): error count since last fsck: 1
[  174.122031][    C0] EXT4-fs (loop7): initial error at time 2000000026: ext4_free_branches:1023: inode 13
[  174.131705][    C0] EXT4-fs (loop7): last error at time 2000000026: ext4_free_branches:1023: inode 13
[  174.141824][ T8997] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #13: comm syz.7.1651: attempt to clear invalid blocks 1024 len 1
[  174.154929][ T8997] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  174.156327][ T8997] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters
[  174.180097][ T8997] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.1651: invalid indirect mapped block 1819239214 (level 0)
[  174.194300][ T8997] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  174.201931][ T8997] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.1651: invalid indirect mapped block 33554432 (level 2)
[  174.225020][ T8997] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  174.228713][ T8997] EXT4-fs (loop7): 1 truncate cleaned up
[  174.257650][ T8997] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  174.295177][ T9001] 9p: Bad value for 'wfdno'
[  174.571784][ T8993] netlink: 'syz.5.1652': attribute type 10 has an invalid length.
[  174.817338][ T8993] bond0: (slave netdevsim2): Releasing backup interface
[  174.873050][ T8993] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  174.890370][ T9007] ieee802154 phy0 wpan0: encryption failed: -22
[  174.935681][   T28] audit: type=1400 audit(2000000026.910:11672): avc:  denied  { write } for  pid=9006 comm="syz.2.1657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  174.960907][ T9007] netlink: 'syz.2.1657': attribute type 10 has an invalid length.
[  174.974011][ T8993] team0: Port device netdevsim2 added
[  175.005851][ T9007] bridge0: port 1(team0) entered disabled state
[  175.044585][ T9007] team_slave_0: left promiscuous mode
[  175.065394][ T9007] team_slave_0: left allmulticast mode
[  175.101302][ T9007] team0 (unregistering): Port device team_slave_0 removed
[  175.127645][ T9007] team_slave_1: left promiscuous mode
[  175.145979][ T9007] team_slave_1: left allmulticast mode
[  175.178518][ T9007] team0 (unregistering): Port device team_slave_1 removed
[  175.204047][ T9007] dummy0: left promiscuous mode
[  175.226892][ T9007] dummy0: left allmulticast mode
[  175.251362][ T9007] team0 (unregistering): Port device dummy0 removed
[  175.489570][ T9021] loop2: detected capacity change from 0 to 512
[  175.497817][ T9021] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  175.520337][ T9021] rdma_rxe: Failed to create IPv4 UDP tunnel
[  175.531196][ T9021] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548)
[  175.539735][ T9021] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548)
[  175.548596][ T9021] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548)
[  175.557233][ T9021] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548)
[  175.565950][ T9021] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548)
[  175.574579][ T9021] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548)
[  175.583084][ T9021] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548)
[  175.591654][ T9021] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548)
[  175.600401][ T9021] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548)
[  175.608892][ T9021] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548)
[  175.617573][ T9021] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548)
[  175.625962][ T9021] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548)
[  175.634411][ T9021] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 548)
[  175.643445][ T9021] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548)
[  175.749471][ T6310] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  176.373502][ T9042] loop2: detected capacity change from 0 to 1764
[  177.587750][ T9059] __nla_validate_parse: 5 callbacks suppressed
[  177.587778][ T9059] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1672'.
[  177.614852][ T9059] loop1: detected capacity change from 0 to 512
[  177.738149][ T9059] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1672: invalid indirect mapped block 11 (level 0)
[  177.752236][ T9059] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  177.753403][ T9059] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.1672: attempt to clear invalid blocks 1024 len 1
[  177.762621][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  177.762634][    C1] EXT4-fs (loop1): initial error at time 2000000029: ext4_free_branches:1023: inode 13
[  177.762664][    C1] EXT4-fs (loop1): last error at time 2000000029: ext4_free_branches:1023: inode 13
[  177.802422][ T9059] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  177.807963][ T9059] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters
[  177.831809][ T9059] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1672: invalid indirect mapped block 1819239214 (level 0)
[  177.847132][ T9059] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  177.848939][ T9059] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1672: invalid indirect mapped block 33554432 (level 2)
[  177.872046][ T9059] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  177.873206][ T9059] EXT4-fs (loop1): 1 truncate cleaned up
[  177.890904][ T9059] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  178.525488][ T9075] 9p: Bad value for 'wfdno'
[  178.581740][ T9077] loop7: detected capacity change from 0 to 1764
[  179.062758][   T28] audit: type=1400 audit(2000000031.040:11673): avc:  denied  { create } for  pid=9084 comm="syz.7.1682" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  179.091455][ T9086] loop7: detected capacity change from 0 to 512
[  179.152812][   T28] audit: type=1400 audit(2000000031.040:11674): avc:  denied  { write } for  pid=9084 comm="syz.7.1682" name="file0" dev="tmpfs" ino=868 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  179.176936][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  179.177507][   T28] audit: type=1400 audit(2000000031.040:11675): avc:  denied  { open } for  pid=9084 comm="syz.7.1682" path="/161/file0" dev="tmpfs" ino=868 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  179.248047][   T28] audit: type=1400 audit(2000000031.120:11676): avc:  denied  { ioctl } for  pid=9084 comm="syz.7.1682" path="/161/file0" dev="tmpfs" ino=868 ioctlcmd=0x551f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  179.280404][ T9083] loop2: detected capacity change from 0 to 512
[  179.299774][   T28] audit: type=1400 audit(2000000031.280:11677): avc:  denied  { unlink } for  pid=6310 comm="syz-executor" name="file0" dev="tmpfs" ino=868 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  179.383656][ T9083] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  179.572519][   T28] audit: type=1400 audit(2000000031.540:11678): avc:  denied  { write } for  pid=9082 comm="syz.2.1681" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  179.742275][ T9093] loop1: detected capacity change from 0 to 512
[  179.816568][ T9093] EXT4-fs: Ignoring removed bh option
[  179.864981][ T9093] EXT4-fs (loop1): invalid first ino: 0
[  179.929085][ T9083] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  180.064997][   T28] audit: type=1400 audit(2000000031.540:11679): avc:  denied  { link } for  pid=9082 comm="syz.2.1681" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  180.088452][   T28] audit: type=1400 audit(2000000031.610:11680): avc:  denied  { write } for  pid=9082 comm="syz.2.1681" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  180.136884][   T28] audit: type=1400 audit(2000000031.610:11681): avc:  denied  { remove_name } for  pid=9082 comm="syz.2.1681" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  180.183924][   T28] audit: type=1400 audit(2000000031.610:11682): avc:  denied  { unlink } for  pid=9082 comm="syz.2.1681" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  180.339486][ T9108] loop5: detected capacity change from 0 to 1764
[  180.422694][ T9112] loop7: detected capacity change from 0 to 1764
[  181.218558][ T9119] netlink: 80 bytes leftover after parsing attributes in process `syz.7.1693'.
[  181.238428][ T9119] loop7: detected capacity change from 0 to 512
[  181.348548][ T9119] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.1693: invalid indirect mapped block 11 (level 0)
[  181.361912][ T9119] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  181.363157][ T9119] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #13: comm syz.7.1693: attempt to clear invalid blocks 1024 len 1
[  181.372410][    C0] EXT4-fs (loop7): error count since last fsck: 1
[  181.372449][    C0] EXT4-fs (loop7): initial error at time 2000000033: ext4_free_branches:1023: inode 13
[  181.372503][    C0] EXT4-fs (loop7): last error at time 2000000033: ext4_free_branches:1023: inode 13
[  181.411348][ T9119] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  181.414791][ T9119] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters
[  181.438361][ T9119] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.1693: invalid indirect mapped block 1819239214 (level 0)
[  181.452311][ T9119] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  181.452583][ T9119] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.1693: invalid indirect mapped block 33554432 (level 2)
[  181.475595][ T9119] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  181.476488][ T9119] EXT4-fs (loop7): 1 truncate cleaned up
[  181.492682][ T9119] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  182.041010][ T9128] loop2: detected capacity change from 0 to 512
[  182.100064][ T9128] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  182.134167][ T9128] EXT4-fs (loop2): orphan cleanup on readonly fs
[  182.160861][ T9128] EXT4-fs warning (device loop2): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  182.230320][ T9128] EXT4-fs (loop2): Cannot turn on quotas: error -117
[  182.272134][ T9128] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #16: comm syz.2.1697: inode has both inline data and extents flags
[  182.290680][ T9134] loop5: detected capacity change from 0 to 1764
[  182.323633][ T9128] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  182.325336][ T9128] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1697: couldn't read orphan inode 16 (err -117)
[  182.334632][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  182.334667][    C0] EXT4-fs (loop2): initial error at time 2000000034: ext4_orphan_get:1399: inode 16
[  182.334720][    C0] EXT4-fs (loop2): last error at time 2000000034: ext4_orphan_get:1399: inode 16
[  182.523696][ T9128] loop2: lost filesystem error report for type 5 error -117
[  182.524410][ T9128] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  182.608476][ T9128] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  182.723535][ T9138] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1701'.
[  182.762016][ T9138] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1701'.
[  182.850123][ T9138] SELinux: failed to load policy
[  182.927110][ T6310] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  182.970755][ T9145] 9p: Bad value for 'wfdno'
[  183.060610][ T9147] loop7: detected capacity change from 0 to 128
[  183.077912][ T9149] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1706'.
[  183.108324][ T9149] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1706'.
[  183.148083][ T9147] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  183.161527][ T9147] ext4 filesystem being mounted at /167/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  183.260773][ T9149] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[  183.332158][ T9149] SELinux: failed to load policy
[  183.748384][ T6310] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  183.792601][ T9163] loop7: detected capacity change from 0 to 4096
[  183.805059][ T9163] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  183.845452][ T6310] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  183.974577][ T9172] loop7: detected capacity change from 0 to 128
[  183.992137][ T9174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1715'.
[  183.992159][ T9174] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1715'.
[  184.097245][   T28] kauditd_printk_skb: 9 callbacks suppressed
[  184.097264][   T28] audit: type=1400 audit(2000000036.070:11691): avc:  denied  { shutdown } for  pid=9173 comm="syz.0.1715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  184.130036][ T9172] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  184.144239][ T9172] ext4 filesystem being mounted at /171/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  184.170965][ T9188] tipc: Cannot configure node identity twice
[  184.201778][ T9188] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  184.202753][   T28] audit: type=1400 audit(2000000036.180:11692): avc:  denied  { write } for  pid=9171 comm="syz.7.1714" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  184.243296][ T9188] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1719'.
[  184.304454][   T28] audit: type=1400 audit(2000000036.280:11693): avc:  denied  { write } for  pid=9171 comm="syz.7.1714" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  184.454235][ T6310] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  184.456608][ T9201] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1723'.
[  184.472500][ T9201] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1723'.
[  184.622700][ T9201] SELinux:  invalid class
[  184.627843][ T9201] SELinux: failed to load policy
[  185.028708][   T28] audit: type=1326 audit(2000000037.010:11694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9212 comm="syz.5.1728" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f05d32fe019 code=0x0
[  185.084650][   T28] audit: type=1326 audit(2000000037.010:11695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9212 comm="syz.5.1728" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f05d32fe019 code=0x0
[  185.183213][ T9215] loop5: detected capacity change from 0 to 512
[  185.191539][ T9215] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  185.215456][ T9215] EXT4-fs (loop5): orphan cleanup on readonly fs
[  185.244782][ T9215] Quota error (device loop5): find_block_dqentry: Quota for id 0 referenced but not present
[  185.265921][ T9215] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0
[  185.285744][ T9215] EXT4-fs error (device loop5): ext4_acquire_dquot:7041: comm syz.5.1728: Failed to acquire dquot type 1
[  185.331555][ T9215] loop5: lost filesystem error report for type 5 error -5
[  185.331887][ T9215] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1728: bg 0: block 40: padding at end of block bitmap is not set
[  185.339168][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  185.339186][    C1] EXT4-fs (loop5): initial error at time 2000000037: ext4_acquire_dquot:7041
[  185.339236][    C1] EXT4-fs (loop5): last error at time 2000000037: ext4_acquire_dquot:7041
[  185.441525][ T9215] loop5: lost filesystem error report for type 5 error -117
[  185.441843][ T9215] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  185.462939][ T9215] loop5: lost filesystem error report for type 5 error -117
[  185.463179][ T9215] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #16: comm syz.5.1728: data will be lost
[  185.482605][ T9215] EXT4-fs (loop5): 1 truncate cleaned up
[  185.489555][ T9215] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  185.513738][ T5198] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  185.560458][   T28] audit: type=1326 audit(2000000037.530:11696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9225 comm="syz.5.1732" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f05d32fe019 code=0x0
[  185.880555][ T9242] loop1: detected capacity change from 0 to 1764
[  185.994446][ T9245] loop1: detected capacity change from 0 to 4096
[  186.008012][ T9245] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  186.023219][   T28] audit: type=1400 audit(2000000038.000:11697): avc:  denied  { setattr } for  pid=9244 comm="syz.1.1740" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  186.050707][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  186.118222][ T9249] loop1: detected capacity change from 0 to 164
[  186.127974][ T9249] iso9660: Unknown parameter '"þÚüZu­va±Z½ykýÆ™~•lMuÜSlšî—ÓôäôôÔÔôôÔÙwοsnrrhˆɇdKÄÞŸ´ì�¿èµ~¦J«ÿÏBæ³”+ù ÕŽ�™Ìf%ËY첿e£ÿ?uºÖ³Üöþ£—?ú`÷±”ýÿ«ÍµW»õÿ]êÒÿQ¯7sÞiú�Çgù"_æv>ÊzÖs#Ÿþì·<þk@ùT~k·>.¥–¥Ìg5Ë™Ïb.”[ª­-ÕœÏÙœÍd>ÌåÌe5ÕÌe>©e5W³šµÔÊ3j&+©åBÖ²œ•T3–™¼™j¦'
[  186.204253][ T9251] loop1: detected capacity change from 0 to 128
[  186.247816][ T9251] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  186.261448][ T9251] ext4 filesystem being mounted at /319/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  186.277206][   T28] audit: type=1400 audit(2000000038.260:11698): avc:  denied  { write } for  pid=9250 comm="syz.1.1742" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  186.438255][ T3302] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  186.463248][ T9254] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1743'.
[  186.551273][ T9263] loop5: detected capacity change from 0 to 512
[  186.560838][ T9263] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.1746: invalid block
[  186.573653][ T9263] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  186.573798][ T9263] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1746: invalid indirect mapped block 4294967295 (level 1)
[  186.582998][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  186.583018][    C0] EXT4-fs (loop5): initial error at time 2000000038: ext4_get_branch:178: inode 11: block 4294967295
[  186.583072][    C0] EXT4-fs (loop5): last error at time 2000000038: ext4_get_branch:178: inode 11: block 4294967295
[  186.586905][ T9257] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7)
[  186.598795][ T9263] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  186.603437][ T9257] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  186.649221][ T9263] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1746: invalid indirect mapped block 4294967295 (level 1)
[  186.651953][ T9257] vhci_hcd vhci_hcd.0: Device attached
[  186.682447][ T9263] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  186.685593][ T9263] EXT4-fs (loop5): 2 truncates cleaned up
[  186.706930][ T9263] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  186.742537][ T9267] vhci_hcd vhci_hcd.0: port 0 already used
[  186.760133][ T9279] loop2: detected capacity change from 0 to 512
[  186.789450][ T9279] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  186.805769][ T5198] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  186.816792][ T9279] ext4 filesystem being mounted at /396/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  187.008185][   T35] usb 4-1: SetAddress Request (3) to port 0
[  187.190602][ T9285] loop5: detected capacity change from 0 to 1024
[  187.223543][   T35] usb 4-1: new SuperSpeed USB device number 3 using vhci_hcd
[  187.237393][ T9285] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  187.259333][ T3308] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816
[  187.278807][ T9285] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #3: block 1: comm syz.5.1751: lblock 1 mapped to illegal pblock 1 (length 1)
[  187.293227][ T9285] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  187.293767][ T9285] EXT4-fs error (device loop5): ext4_acquire_dquot:7041: comm syz.5.1751: Failed to acquire dquot type 0
[  187.302939][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  187.302975][    C1] EXT4-fs (loop5): initial error at time 2000000039: ext4_map_blocks:833: inode 3: block 1
[  187.303135][    C1] EXT4-fs (loop5): last error at time 2000000039: ext4_map_blocks:833: inode 3: block 1
[  187.319101][ T3308] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816
[  187.331090][ T9285] loop5: lost filesystem error report for type 5 error -117
[  187.389386][ T9285] EXT4-fs error (device loop5): ext4_free_blocks:6718: comm syz.5.1751: Freeing blocks not in datazone - block = 0, count = 4096
[  187.422864][ T9285] loop5: lost filesystem error report for type 5 error -117
[  187.424008][ T9285] EXT4-fs error (device loop5): ext4_read_inode_bitmap:141: comm syz.5.1751: Invalid inode bitmap blk 0 in block_group 0
[  187.444827][ T9285] loop5: lost filesystem error report for type 5 error -117
[  187.444894][  T310] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1)
[  187.466705][ T9285] EXT4-fs error (device loop5) in ext4_free_inode:363: Corrupt filesystem
[  187.475735][ T9285] loop5: lost filesystem error report for type 5 error -117
[  187.491805][ T9285] EXT4-fs (loop5): 1 orphan inode deleted
[  187.520218][  T310] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  187.520343][  T310] EXT4-fs error (device loop5): ext4_release_dquot:7077: comm kworker/u8:5: Failed to release dquot type 0
[  187.520786][ T9285] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  187.557509][  T310] loop5: lost filesystem error report for type 5 error -117
[  187.617280][ T4938] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  187.620625][ T5198] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  187.726548][ T9300] SELinux:  invalid class
[  187.737553][ T9300] SELinux: failed to load policy
[  187.767152][ T9307] ext3: Unknown parameter 'smackfshat'
[  187.834165][ T9315] vlan2: entered allmulticast mode
[  187.846699][ T9315] veth0_to_bond: entered allmulticast mode
[  187.905883][ T9320] tipc: Cannot configure node identity twice
[  187.920204][ T9320] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  187.941103][ T9320] __nla_validate_parse: 4 callbacks suppressed
[  187.941129][ T9320] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1762'.
[  187.962268][ T9308] Failed to initialize the IGMP autojoin socket (err -2)
[  187.993623][ T9303] netlink: 'syz.0.1758': attribute type 2 has an invalid length.
[  188.058567][ T9303] 0: entered promiscuous mode
[  188.166866][ T9334] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1769'.
[  188.547065][ T9334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  188.607614][ T9334] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  188.720753][ T9346] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  188.785177][ T9308] bridge0: port 1(bridge_slave_0) entered blocking state
[  188.803601][ T9308] bridge0: port 1(bridge_slave_0) entered disabled state
[  188.812543][ T9308] bridge_slave_0: entered allmulticast mode
[  188.819768][ T9308] bridge_slave_0: entered promiscuous mode
[  188.826761][ T9308] bridge0: port 2(bridge_slave_1) entered blocking state
[  188.833927][ T9308] bridge0: port 2(bridge_slave_1) entered disabled state
[  188.841172][ T9308] bridge_slave_1: entered allmulticast mode
[  188.889557][ T9308] bridge_slave_1: entered promiscuous mode
[  188.930354][ T9371] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1771'.
[  188.945589][ T9371] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1771'.
[  188.959381][ T9308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  188.983336][ T9308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  189.010575][ T6310] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  189.017459][ T9371] SELinux: failed to load policy
[  189.050685][ T9373] rdma_rxe: Failed to create IPv4 UDP tunnel
[  189.052767][ T9308] team0: Port device team_slave_0 added
[  189.065797][ T9308] team0: Port device team_slave_1 added
[  189.093931][ T9308] batman_adv: batadv0: Adding interface: batadv_slave_0
[  189.101718][ T9308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  189.129843][ T9308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  189.141595][ T9308] batman_adv: batadv0: Adding interface: batadv_slave_1
[  189.149350][ T9308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  189.176974][ T9308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  189.259207][ T9308] hsr_slave_0: entered promiscuous mode
[  189.265521][ T9308] hsr_slave_1: entered promiscuous mode
[  189.271635][ T9308] debugfs: 'hsr0' already exists in 'hsr'
[  189.277686][ T9308] Cannot create hsr debugfs directory
[  189.335920][   T28] kauditd_printk_skb: 35 callbacks suppressed
[  189.335938][   T28] audit: type=1400 audit(2000000041.310:11731): avc:  denied  { write } for  pid=9377 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  189.392057][   T28] audit: type=1400 audit(2000000041.370:11732): avc:  denied  { write } for  pid=9390 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  189.417178][ T9388] set_capacity_and_notify: 2 callbacks suppressed
[  189.417195][ T9388] loop7: detected capacity change from 0 to 512
[  189.455398][ T9388] EXT4-fs: Ignoring removed bh option
[  189.503924][ T9388] EXT4-fs error (device loop7): ext4_iget_extra_inode:5180: inode #15: comm syz.7.1773: corrupted in-inode xattr: e_value size too large
[  189.534344][ T9388] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  189.536426][    C0] EXT4-fs (loop7): error count since last fsck: 1
[  189.542047][ T9388] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.1773: couldn't read orphan inode 15 (err -117)
[  189.545642][    C0] EXT4-fs (loop7): initial error at time 2000000041: ext4_iget_extra_inode:5180
[  189.552265][ T9388] loop7: lost filesystem error report for type 5 error -117
[  189.563901][    C0] : inode 15
[  189.563916][    C0] EXT4-fs (loop7): last error at time 2000000041: ext4_iget_extra_inode:5180: inode 15
[  189.599422][   T49] netdevsim netdevsim8 eth16: set [1, 0] type 2 family 0 port 20001 - 0
[  189.622610][ T9405] loop1: detected capacity change from 0 to 512
[  189.628920][ T9388] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  189.644247][ T9308] netdevsim netdevsim8 netdevsim0: renamed from eth13
[  189.654622][ T9308] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  189.662596][ T9308] netdevsim netdevsim8 netdevsim1: renamed from eth14
[  189.677908][ T9308] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  189.690293][ T9308] netdevsim netdevsim8 netdevsim2: renamed from eth15
[  189.698214][ T9405] EXT4-fs (loop1): bad s_want_extra_isize: 65312
[  189.721853][ T9308] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  189.766633][   T49] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0
[  189.785850][ T9308] netdevsim netdevsim8 netdevsim3: renamed from eth16
[  189.812235][ T9308] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  189.840622][  T310] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0
[  189.841333][ T9421] loop1: detected capacity change from 0 to 164
[  189.850912][  T310] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0
[  189.874083][ T9421] rock: corrupted directory entry. extent=41 out of volume (nzones=41)
[  189.950469][ T6310] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  189.997308][ T9421] rock: corrupted directory entry. extent=41 out of volume (nzones=41)
[  190.008475][ T9421] iso9660: Corrupted directory entry in block 4 of inode 1792
[  190.446136][ T9308] 8021q: adding VLAN 0 to HW filter on device team0
[  190.677957][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  190.685129][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  190.713890][ T2033] bridge0: port 2(bridge_slave_1) entered blocking state
[  190.720993][ T2033] bridge0: port 2(bridge_slave_1) entered forwarding state
[  191.613590][ T9444] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1789'.
[  191.646631][ T9444] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1789'.
[  191.697974][   T28] audit: type=1400 audit(2000000043.670:11733): avc:  denied  { append } for  pid=9443 comm="syz.5.1789" name="uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  191.722002][ T9444] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[  191.739020][   T28] audit: type=1400 audit(2000000043.680:11734): avc:  denied  { open } for  pid=9443 comm="syz.5.1789" path="/dev/uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  191.750186][ T9444] SELinux: failed to load policy
[  191.871802][ T9433] loop1: detected capacity change from 0 to 4096
[  192.152788][ T9308] 8021q: adding VLAN 0 to HW filter on device batadv0
[  192.938089][ T9433] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  193.000478][   T28] audit: type=1400 audit(2000000044.980:11735): avc:  denied  { write } for  pid=9432 comm="syz.1.1786" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  193.249784][ T9478] loop7: detected capacity change from 0 to 164
[  193.302084][ T9478] rock: corrupted directory entry. extent=41 out of volume (nzones=41)
[  193.329801][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  193.401275][ T9478] rock: corrupted directory entry. extent=41 out of volume (nzones=41)
[  193.421844][ T9478] iso9660: Corrupted directory entry in block 4 of inode 1792
[  193.447390][ T9308] veth0_vlan: entered promiscuous mode
[  193.465390][ T9308] veth1_vlan: entered promiscuous mode
[  193.535600][ T9308] veth0_macvtap: entered promiscuous mode
[  193.596455][   T28] audit: type=1400 audit(2000000045.570:11736): avc:  denied  { setopt } for  pid=9479 comm="syz.5.1796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  193.622571][ T9484] netlink: 'syz.5.1796': attribute type 1 has an invalid length.
[  193.631766][ T9497] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1798'.
[  193.647636][ T9484] netlink: 12746 bytes leftover after parsing attributes in process `syz.5.1796'.
[  193.650299][ T9308] batman_adv: batadv0: Interface activated: batadv_slave_0
[  193.669261][   T28] audit: type=1400 audit(2000000045.650:11737): avc:  denied  { getopt } for  pid=9479 comm="syz.5.1796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  193.701992][ T9308] batman_adv: batadv0: Interface activated: batadv_slave_1
[  193.719500][ T9484] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1796'.
[  193.729781][   T28] audit: type=1400 audit(2000000045.710:11738): avc:  denied  { read write } for  pid=9501 comm="syz.0.1799" name="uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  193.731252][ T3405] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  193.781165][ T9480] loop5: detected capacity change from 0 to 2048
[  193.783295][ T9308] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  193.804887][ T3405] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  193.818654][ T3405] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  193.828180][ T3405] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  193.839521][ T9308] wireguard: wg0: Could not create IPv4 socket
[  193.850063][ T3405] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  193.858672][ T9308] wireguard: wg1: Could not create IPv4 socket
[  193.860171][ T3405] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  193.875089][ T9480]  loop5: p1 < > p3
[  193.878664][   T28] audit: type=1400 audit(2000000045.850:11739): avc:  denied  { bind } for  pid=9501 comm="syz.0.1799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  193.891103][ T3405] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  193.902758][ T9308] wireguard: wg2: Could not create IPv4 socket
[  193.907450][ T9507] loop1: detected capacity change from 0 to 736
[  193.924619][ T9480] loop5: p3 size 134217728 extends beyond EOD, truncated
[  193.964770][   T28] audit: type=1400 audit(2000000045.900:11740): avc:  denied  { mounton } for  pid=9308 comm="syz-executor" path="/root/syzkaller.ULzZ8N/syz-tmp" dev="sda1" ino=2054 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[  194.047893][ T3405] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  194.052054][ T2986]  loop5: p1 < > p3
[  194.061771][ T3405] hid-generic 0000:0000:0000.0003: hidraw0: <UNKNOWN> HID v0.10 Device [syz0] on syz1
[  194.073614][ T2986] loop5: p3 size 134217728 extends beyond EOD, truncated
[  194.119879][ T9507] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  194.186004][ T9516] fido_id[9516]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  194.213623][ T9362] udevd[9362]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  194.219565][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory
[  194.305314][ T9522] SELinux:  invalid class
[  194.314661][ T9522] SELinux: failed to load policy
[  194.486939][ T9545] loop1: detected capacity change from 0 to 512
[  194.499881][ T9545] ext4: Unknown parameter 'dont_hash'
[  194.525301][   T28] kauditd_printk_skb: 5 callbacks suppressed
[  194.525317][   T28] audit: type=1400 audit(2000000046.500:11746): avc:  denied  { write } for  pid=9526 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  194.616940][   T28] audit: type=1400 audit(2000000046.580:11747): avc:  denied  { write } for  pid=9550 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  194.648491][ T9549] loop8: detected capacity change from 0 to 1764
[  194.833936][   T28] audit: type=1400 audit(2000000046.810:11748): avc:  denied  { write } for  pid=9557 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  194.881374][   T28] audit: type=1400 audit(2000000046.860:11749): avc:  denied  { write } for  pid=9567 comm="syz.5.1810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  194.885315][   T28] audit: type=1400 audit(2000000046.860:11750): avc:  denied  { write } for  pid=9575 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  195.013627][ T9552] loop1: detected capacity change from 0 to 512
[  195.032339][ T9552] EXT4-fs: Ignoring removed bh option
[  195.158967][ T9552] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.1808: corrupted in-inode xattr: e_value size too large
[  195.180950][ T9552] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  195.182473][ T9552] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.1808: couldn't read orphan inode 15 (err -117)
[  195.191764][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  195.191835][    C1] EXT4-fs (loop1): initial error at time 2000000047: ext4_iget_extra_inode:5180: inode 15
[  195.191974][    C1] EXT4-fs (loop1): last error at time 2000000047: ext4_iget_extra_inode:5180: inode 15
[  195.257284][ T9552] loop1: lost filesystem error report for type 5 error -117
[  195.264329][   T28] audit: type=1400 audit(2000000047.240:11751): avc:  denied  { write } for  pid=9580 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  195.264356][ T9552] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  195.376221][   T28] audit: type=1400 audit(2000000047.350:11752): avc:  denied  { write } for  pid=9597 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  195.470998][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  195.484349][ T9612] loop8: detected capacity change from 0 to 128
[  195.507257][   T28] audit: type=1400 audit(2000000047.490:11753): avc:  denied  { accept } for  pid=9615 comm="syz.1.1819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  195.532748][ T9612] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  195.605803][ T9612] ext4 filesystem being mounted at /6/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  195.686529][   T28] audit: type=1400 audit(2000000047.660:11754): avc:  denied  { write } for  pid=9609 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  195.749924][ T9632] loop7: detected capacity change from 0 to 128
[  195.776987][   T28] audit: type=1400 audit(2000000047.750:11755): avc:  denied  { write } for  pid=9641 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  195.827378][ T9308] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  195.844345][ T9632] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  195.852796][ T9636] tipc: Cannot configure node identity twice
[  195.863304][ T9651] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  195.872800][ T9636] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1821'.
[  195.970361][ T9658] program syz.1.1825 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  195.985145][ T9632] ext4 filesystem being mounted at /185/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  196.139420][ T9673] FAULT_INJECTION: forcing a failure.
[  196.139420][ T9673] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  196.186501][ T9673] CPU: 0 UID: 0 PID: 9673 Comm: syz.8.1828 Not tainted syzkaller #0 PREEMPT(lazy) 
[  196.186530][ T9673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  196.186554][ T9673] Call Trace:
[  196.186561][ T9673]  <TASK>
[  196.186631][ T9673]  __dump_stack+0x1d/0x30
[  196.186655][ T9673]  dump_stack_lvl+0x95/0xd0
[  196.186676][ T9673]  dump_stack+0x15/0x1b
[  196.186697][ T9673]  should_fail_ex+0x25e/0x270
[  196.186743][ T9673]  should_fail_alloc_page+0xf2/0x100
[  196.186794][ T9673]  __alloc_frozen_pages_noprof+0x108/0x350
[  196.186866][ T9673]  alloc_pages_mpol+0xa9/0x1d0
[  196.186899][ T9673]  vma_alloc_folio_noprof+0x1a9/0x2f0
[  196.186934][ T9673]  do_wp_page+0x6f6/0x2030
[  196.186972][ T9673]  ? _raw_spin_lock+0x52/0xa0
[  196.187075][ T9673]  ? __css_rstat_updated+0xbb/0x280
[  196.187109][ T9673]  ? __rcu_read_lock+0x36/0x50
[  196.187220][ T9673]  handle_mm_fault+0x8bc/0x2da0
[  196.187323][ T9673]  do_user_addr_fault+0x634/0x1060
[  196.187348][ T9673]  ? fpregs_assert_state_consistent+0xb3/0xe0
[  196.187381][ T9673]  ? arch_exit_to_user_mode_prepare+0x26/0x60
[  196.187459][ T9673]  ? trace_page_fault_user+0x1f/0xa0
[  196.187485][ T9673]  exc_page_fault+0x62/0xa0
[  196.187506][ T9673]  asm_exc_page_fault+0x26/0x30
[  196.187570][ T9673] RIP: 0033:0x7f26e0c95258
[  196.187586][ T9673] Code: 85 ed 74 3b 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41
[  196.187602][ T9673] RSP: 002b:00007f26df836470 EFLAGS: 00010202
[  196.187620][ T9673] RAX: 0000000000006005 RBX: 00007f26df836530 RCX: 0000000000000037
[  196.187634][ T9673] RDX: 00000000000027ff RSI: 0000000000001000 RDI: 00007f26df8365d0
[  196.187713][ T9673] RBP: 0000000000000038 R08: 00007f26d7417000 R09: 0000000000000010
[  196.187728][ T9673] R10: 0000200000000682 R11: 0000000000000569 R12: 0000000000000c01
[  196.187742][ T9673] R13: 00007f26e0e94fa0 R14: 0000000000000017 R15: 00007f26df8365d0
[  196.187764][ T9673]  </TASK>
[  196.187816][ T9673] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  196.421169][ T9673] loop8: detected capacity change from 0 to 512
[  196.471701][ T9673] EXT4-fs (loop8): orphan cleanup on readonly fs
[  196.498231][ T9673] EXT4-fs warning (device loop8): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  196.546093][ T9673] EXT4-fs (loop8): Cannot turn on quotas: error -117
[  196.576098][ T9673] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #14: comm syz.8.1828: invalid orphan symlink nlink 1
[  196.605600][ T9673] loop8: lost file I/O error report for ino 14 type 5 pos 0x0 len 0x0 error -117
[  196.605840][ T9673] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.1828: couldn't read orphan inode 14 (err -117)
[  196.615069][    C0] EXT4-fs (loop8): error count since last fsck: 1
[  196.615085][    C0] EXT4-fs (loop8): last error at time 2000000048: ext4_orphan_get:1399: inode 14
[  196.717223][ T9673] loop8: lost filesystem error report for type 5 error -117
[  196.718993][ T9673] EXT4-fs (loop8): 1 truncate cleaned up
[  196.769108][ T9673] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  196.829820][ T6310] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  196.883862][ T9308] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.070524][ T9730] loop8: detected capacity change from 0 to 128
[  197.142560][ T9735] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1839'.
[  197.156093][ T9735] loop7: detected capacity change from 0 to 1024
[  197.184161][ T9735] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  197.188783][ T9693] loop5: detected capacity change from 0 to 512
[  197.206262][ T9735] EXT4-fs error (device loop7): ext4_map_blocks:833: inode #3: block 1: comm syz.7.1839: lblock 1 mapped to illegal pblock 1 (length 1)
[  197.211788][ T9693] EXT4-fs: Ignoring removed bh option
[  197.221463][ T9735] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  197.226166][ T9735] EXT4-fs error (device loop7): ext4_acquire_dquot:7041: comm syz.7.1839: Failed to acquire dquot type 0
[  197.235277][    C1] EXT4-fs (loop7): error count since last fsck: 1
[  197.235309][    C1] EXT4-fs (loop7): initial error at time 2000000049: ext4_map_blocks:833: inode 3: block 1
[  197.235338][    C1] EXT4-fs (loop7): last error at time 2000000049: ext4_map_blocks:833: inode 3: block 1
[  197.239246][ T9693] EXT4-fs error (device loop5): ext4_iget_extra_inode:5180: inode #15: comm syz.5.1830: corrupted in-inode xattr: e_value size too large
[  197.248608][ T9735] loop7: lost filesystem error report for type 5 error -117
[  197.260631][ T9693] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  197.264352][ T9735] EXT4-fs error (device loop7): ext4_free_blocks:6718: comm syz.7.1839: Freeing blocks not in datazone - block = 0, count = 4096
[  197.277782][ T9693] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.1830: couldn't read orphan inode 15 (err -117)
[  197.288113][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  197.288204][    C0] EXT4-fs (loop5): initial error at time 2000000049: ext4_iget_extra_inode:5180: inode 15
[  197.288344][    C0] EXT4-fs (loop5): last error at time 2000000049: ext4_iget_extra_inode:5180: inode 15
[  197.288450][ T9735] loop7: lost filesystem error report for type 5 error -117
[  197.353433][ T9735] EXT4-fs error (device loop7): ext4_read_inode_bitmap:141: comm syz.7.1839: Invalid inode bitmap blk 0 in block_group 0
[  197.380319][ T9735] loop7: lost filesystem error report for type 5 error -117
[  197.380594][ T9643] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:19: lblock 1 mapped to illegal pblock 1 (length 1)
[  197.381755][ T9735] EXT4-fs error (device loop7) in ext4_free_inode:363: Corrupt filesystem
[  197.388665][ T9643] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  197.402133][ T9735] loop7: lost filesystem error report for type 5 error -117
[  197.402637][ T9735] EXT4-fs (loop7): 1 orphan inode deleted
[  197.436154][ T9735] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  197.436691][ T9730] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  197.451841][ T9693] loop5: lost filesystem error report for type 5 error -117
[  197.465519][ T9693] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  197.502872][ T9746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1840'.
[  197.519801][ T9730] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  197.536981][ T9643] EXT4-fs error (device loop7): ext4_release_dquot:7077: comm kworker/u8:19: Failed to release dquot type 0
[  197.548403][ T9746] gre0: entered promiscuous mode
[  197.548483][ T9746] gre0: entered allmulticast mode
[  197.572142][ T9746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1840'.
[  197.586104][ T6310] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.767810][ T9755] macvtap1: entered promiscuous mode
[  197.775635][ T9755] macvtap1: entered allmulticast mode
[  197.793787][ T9755] veth1_vlan: entered allmulticast mode
[  197.805924][ T5198] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.917537][ T9779] No source specified
[  198.016705][ T9790] loop7: detected capacity change from 0 to 128
[  198.031149][ T9308] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  198.413266][ T9778] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint
[  198.437969][ T9778] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1847'.
[  198.554807][ T9830] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1857'.
[  198.820790][ T9864] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1861'.
[  198.836655][ T9864] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1861'.
[  198.875338][ T9868] EXT4-fs: Ignoring removed bh option
[  198.920180][ T9868] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.1856: corrupted in-inode xattr: e_value size too large
[  198.928828][ T9862] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  198.950533][ T9868] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  198.950751][ T9868] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.1856: couldn't read orphan inode 15 (err -117)
[  198.950799][ T9868] loop1: lost filesystem error report for type 5 error -117
[  198.951357][ T9868] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  199.040220][ T9878] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1863'.
[  199.057541][ T9862] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  199.120099][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.198379][ T9896] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[  199.229164][ T9896] SELinux: failed to load policy
[  199.264635][ T9899] FAULT_INJECTION: forcing a failure.
[  199.264635][ T9899] name failslab, interval 1, probability 0, space 0, times 0
[  199.335807][ T9899] CPU: 1 UID: 0 PID: 9899 Comm: syz.1.1865 Not tainted syzkaller #0 PREEMPT(lazy) 
[  199.335878][ T9899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  199.335890][ T9899] Call Trace:
[  199.335897][ T9899]  <TASK>
[  199.335905][ T9899]  __dump_stack+0x1d/0x30
[  199.335931][ T9899]  dump_stack_lvl+0x95/0xd0
[  199.335988][ T9899]  dump_stack+0x15/0x1b
[  199.336010][ T9899]  should_fail_ex+0x25e/0x270
[  199.336040][ T9899]  should_failslab+0x8c/0xb0
[  199.336068][ T9899]  __kmalloc_noprof+0xd4/0x4a0
[  199.336117][ T9899]  ? genl_family_rcv_msg_attrs_parse+0x8c/0x1b0
[  199.336157][ T9899]  ? genl_family_rcv_msg_attrs_parse+0x8c/0x1b0
[  199.336258][ T9899]  genl_family_rcv_msg_attrs_parse+0x8c/0x1b0
[  199.336305][ T9899]  genl_family_rcv_msg_doit+0x4b/0x1f0
[  199.336351][ T9899]  ? selinux_capable+0x31/0x40
[  199.336386][ T9899]  ? security_capable+0x7b/0x90
[  199.336416][ T9899]  ? ns_capable+0x80/0xb0
[  199.336484][ T9899]  genl_rcv_msg+0x42f/0x470
[  199.336526][ T9899]  ? __pfx_wg_set_device_doit+0x10/0x10
[  199.336568][ T9899]  netlink_rcv_skb+0x11e/0x220
[  199.336598][ T9899]  ? __pfx_genl_rcv_msg+0x10/0x10
[  199.336698][ T9899]  genl_rcv+0x28/0x40
[  199.336789][ T9899]  netlink_unicast+0x5a7/0x680
[  199.336822][ T9899]  netlink_sendmsg+0x5be/0x6f0
[  199.336888][ T9899]  ? __pfx_netlink_sendmsg+0x10/0x10
[  199.336923][ T9899]  ____sys_sendmsg+0x532/0x580
[  199.337035][ T9899]  ___sys_sendmsg+0x195/0x1e0
[  199.337117][ T9899]  __x64_sys_sendmsg+0xd4/0x160
[  199.337167][ T9899]  x64_sys_call+0x194c/0x3020
[  199.337259][ T9899]  do_syscall_64+0x136/0x3c0
[  199.337303][ T9899]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  199.337331][ T9899] RIP: 0033:0x7f07a577e019
[  199.337351][ T9899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  199.337456][ T9899] RSP: 002b:00007f07a41d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  199.337480][ T9899] RAX: ffffffffffffffda RBX: 00007f07a5a05fa0 RCX: 00007f07a577e019
[  199.337570][ T9899] RDX: 0000000000044000 RSI: 0000200000000200 RDI: 0000000000000003
[  199.337587][ T9899] RBP: 00007f07a41d7090 R08: 0000000000000000 R09: 0000000000000000
[  199.337603][ T9899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  199.337619][ T9899] R13: 00007f07a5a06038 R14: 00007f07a5a05fa0 R15: 00007ffd727d1488
[  199.337657][ T9899]  </TASK>
[  199.701738][ T9918] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1873'.
[  199.717663][ T9308] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  199.754788][   T28] kauditd_printk_skb: 31 callbacks suppressed
[  199.754800][   T28] audit: type=1400 audit(2000000051.730:11783): avc:  denied  { getopt } for  pid=9925 comm="syz.1.1874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  199.785942][ T9926] set_capacity_and_notify: 2 callbacks suppressed
[  199.785957][ T9926] loop1: detected capacity change from 0 to 256
[  199.832397][   T28] audit: type=1400 audit(2000000051.740:11784): avc:  denied  { write } for  pid=9905 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  199.870310][ T9932] loop8: detected capacity change from 0 to 1764
[  199.944309][   T28] audit: type=1400 audit(2000000051.860:11785): avc:  denied  { write } for  pid=9933 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  200.126930][ T9910] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1870'.
[  200.284238][   T28] audit: type=1400 audit(2000000052.260:11786): avc:  denied  { write } for  pid=9939 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  200.433956][ T9967] loop1: detected capacity change from 0 to 512
[  200.533377][ T9967] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1879: invalid indirect mapped block 11 (level 0)
[  200.554876][ T9967] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  200.556453][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  200.572533][    C1] EXT4-fs (loop1): initial error at time 2000000052: ext4_free_branches:1023: inode 13
[  200.583014][    C1] EXT4-fs (loop1): last error at time 2000000052: ext4_free_branches:1023: inode 13
[  200.600270][ T9967] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.1879: attempt to clear invalid blocks 1024 len 1
[  200.618202][ T9967] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  200.633036][ T9967] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters
[  200.664572][ T9967] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1879: invalid indirect mapped block 1819239214 (level 0)
[  200.679179][ T9967] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  200.681774][ T9967] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1879: invalid indirect mapped block 33554432 (level 2)
[  200.715924][ T9967] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  200.721444][ T9967] EXT4-fs (loop1): 1 truncate cleaned up
[  200.747160][ T9967] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  201.280261][   T28] audit: type=1400 audit(2000000053.260:11787): avc:  denied  { write } for  pid=9964 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  201.324480][ T9985] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1886'.
[  201.343109][ T9981] netlink: 1 bytes leftover after parsing attributes in process `syz.8.1885'.
[  201.353969][ T9987] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9987 comm=syz.7.1883
[  201.385636][ T9985] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1886'.
[  201.529056][ T9981] loop8: detected capacity change from 0 to 1024
[  201.586309][ T9981] EXT4-fs: Ignoring removed bh option
[  201.615973][ T9981] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  201.650664][ T9981] __find_get_block_slow() failed. block=144115188075855872, b_blocknr=0, b_state=0x00000010, b_size=1024, device loop8 blocksize: 1024
[  201.705459][ T9989] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1885'.
[  201.733354][ T9981] grow_buffers: requested out-of-range block 144115188075855872 for device loop8
[  201.787291][ T9981] EXT4-fs warning (device loop8): ext4_resize_fs:2018: can't read last block, resize aborted
[  201.866664][   T28] audit: type=1400 audit(2000000053.810:11788): avc:  denied  { write } for  pid=9993 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  201.925193][   T28] audit: type=1400 audit(2000000053.900:11789): avc:  denied  { write } for  pid=10005 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  202.089209][   T28] audit: type=1400 audit(2000000054.070:11790): avc:  denied  { write } for  pid=10008 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  202.117630][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.179455][   T28] audit: type=1400 audit(2000000054.160:11791): avc:  denied  { write } for  pid=10019 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  202.203701][T10025] loop5: detected capacity change from 0 to 512
[  202.211722][ T9308] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.225612][T10025] EXT4-fs: Ignoring removed nomblk_io_submit option
[  202.241878][T10025] EXT4-fs warning (device loop5): ext4_multi_mount_protect:313: fsck is running on the filesystem
[  202.268074][T10027] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1887'.
[  202.294965][T10025] EXT4-fs warning (device loop5): ext4_multi_mount_protect:313: MMP failure info: last update time: 72057595707060727, last update node: , last update device: loop14
[  202.329336][T10029] loop8: detected capacity change from 0 to 1764
[  202.517511][   T28] audit: type=1400 audit(2000000054.500:11792): avc:  denied  { write } for  pid=10033 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  202.607889][T10049] loop7: detected capacity change from 0 to 512
[  202.615946][T10049] EXT4-fs: Ignoring removed bh option
[  202.636849][T10049] EXT4-fs error (device loop7): ext4_iget_extra_inode:5180: inode #15: comm syz.7.1892: corrupted in-inode xattr: e_value size too large
[  202.670936][T10049] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  202.671192][T10049] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.1892: couldn't read orphan inode 15 (err -117)
[  202.680436][    C0] EXT4-fs (loop7): error count since last fsck: 1
[  202.680458][    C0] EXT4-fs (loop7): initial error at time 2000000054: ext4_iget_extra_inode:5180: inode 15
[  202.680499][    C0] EXT4-fs (loop7): last error at time 2000000054: ext4_iget_extra_inode:5180: inode 15
[  202.718673][T10049] loop7: lost filesystem error report for type 5 error -117
[  202.719694][T10049] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  202.805084][ T6310] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.327345][T10123] loop1: detected capacity change from 0 to 512
[  203.451405][T10128] loop7: detected capacity change from 0 to 512
[  203.495024][T10128] EXT4-fs: Ignoring removed nobh option
[  203.617427][T10134] tipc: Cannot configure node identity twice
[  203.628306][T10134] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  203.659541][T10123] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1900: invalid indirect mapped block 11 (level 0)
[  203.680181][T10123] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  203.683139][T10123] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.1900: attempt to clear invalid blocks 1024 len 1
[  203.692822][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  203.692859][    C1] EXT4-fs (loop1): initial error at time 2000000055: ext4_free_branches:1023: inode 13
[  203.693019][    C1] EXT4-fs (loop1): last error at time 2000000055: ext4_free_branches:1023: inode 13
[  203.744951][T10123] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  203.747228][T10123] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters
[  203.772412][T10123] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1900: invalid indirect mapped block 1819239214 (level 0)
[  203.795837][T10123] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  203.801134][T10123] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1900: invalid indirect mapped block 33554432 (level 2)
[  203.832328][T10123] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  203.836832][T10123] EXT4-fs (loop1): 1 truncate cleaned up
[  203.865260][T10123] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  203.970243][T10128] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.1903: invalid indirect mapped block 256 (level 2)
[  204.024906][T10128] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  204.025975][T10128] EXT4-fs (loop7): Remounting filesystem read-only
[  204.035281][    C1] EXT4-fs (loop7): error count since last fsck: 1
[  204.035327][    C1] EXT4-fs (loop7): initial error at time 2000000056: ext4_free_branches:1023: inode 11
[  204.035393][    C1] EXT4-fs (loop7): last error at time 2000000056: ext4_free_branches:1023: inode 11
[  204.326501][T10141] __nla_validate_parse: 1 callbacks suppressed
[  204.326516][T10141] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1905'.
[  204.475668][T10128] EXT4-fs (loop7): 2 truncates cleaned up
[  204.503219][T10128] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  204.530665][T10141] netlink: 56 bytes leftover after parsing attributes in process `syz.8.1905'.
[  204.623771][ T6310] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.841896][   T28] kauditd_printk_skb: 11 callbacks suppressed
[  204.841913][   T28] audit: type=1400 audit(2000000056.820:11804): avc:  denied  { write } for  pid=10160 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  204.954264][   T28] audit: type=1400 audit(2000000056.920:11805): avc:  denied  { write } for  pid=10177 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  205.114637][   T28] audit: type=1400 audit(2000000057.090:11806): avc:  denied  { write } for  pid=10181 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  205.153445][T10192] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1916'.
[  205.165282][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.167173][   T28] audit: type=1400 audit(2000000057.130:11807): avc:  denied  { write } for  pid=10194 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  205.201522][T10192] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1916'.
[  205.369243][   T28] audit: type=1400 audit(2000000057.350:11808): avc:  denied  { write } for  pid=10200 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  205.424231][   T28] audit: type=1400 audit(2000000057.400:11809): avc:  denied  { write } for  pid=10224 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  205.458086][T10223] loop1: detected capacity change from 0 to 512
[  205.485949][T10223] EXT4-fs: Ignoring removed bh option
[  205.511983][T10223] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.1919: corrupted in-inode xattr: e_value size too large
[  205.536646][T10223] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.1919: couldn't read orphan inode 15 (err -117)
[  205.548604][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  205.548619][    C1] EXT4-fs (loop1): initial error at time 2000000057: ext4_iget_extra_inode:5180: inode 15
[  205.548662][    C1] EXT4-fs (loop1): last error at time 2000000057: ext4_iget_extra_inode:5180: inode 15
[  205.591187][T10223] loop1: lost filesystem error report for type 5 error -117
[  205.591728][T10223] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  205.673417][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.694337][   T28] audit: type=1400 audit(2000000057.670:11810): avc:  denied  { write } for  pid=10230 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  205.746431][T10247] loop8: detected capacity change from 0 to 164
[  205.757205][T10247] rock: corrupted directory entry. extent=134217760 out of volume (nzones=41)
[  205.766130][   T28] audit: type=1326 audit(2000000057.720:11811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10246 comm="syz.8.1924" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26e0dde019 code=0x7ffc0000
[  205.827335][   T28] audit: type=1326 audit(2000000057.720:11812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10246 comm="syz.8.1924" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26e0dde019 code=0x7ffc0000
[  205.881613][T10254] netlink: 'syz.0.1926': attribute type 32 has an invalid length.
[  205.891674][   T28] audit: type=1326 audit(2000000057.720:11813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10246 comm="syz.8.1924" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26e0dde019 code=0x7ffc0000
[  205.959056][T10264] syzkaller0: entered promiscuous mode
[  205.982208][T10264] syzkaller0: entered allmulticast mode
[  205.997357][T10260] syzkaller0: entered promiscuous mode
[  206.029555][T10260] syzkaller0: entered allmulticast mode
[  206.082321][T10264] veth0_to_bridge: mtu less than device minimum
[  206.093103][T10260] syzkaller0: mtu less than device minimum
[  206.113597][T10280] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1932'.
[  206.143206][T10280] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1932'.
[  206.210527][T10280] geneve3: entered promiscuous mode
[  206.283507][T10293] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1934'.
[  206.309071][T10293] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1934'.
[  206.325530][T10299] loop8: detected capacity change from 0 to 1764
[  206.425012][T10293] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[  206.468160][T10293] SELinux: failed to load policy
[  206.558090][T10287] loop1: detected capacity change from 0 to 512
[  206.584025][T10287] EXT4-fs: Ignoring removed bh option
[  206.598801][T10321] tipc: Cannot configure node identity twice
[  206.608550][T10321] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  206.619011][T10321] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1939'.
[  206.658076][T10287] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.1933: corrupted in-inode xattr: e_value size too large
[  206.677703][T10287] fserror_report: 1 callbacks suppressed
[  206.677729][T10287] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  206.686431][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  206.702064][    C1] EXT4-fs (loop1): initial error at time 2000000058: ext4_iget_extra_inode:5180: inode 15
[  206.712045][    C1] EXT4-fs (loop1): last error at time 2000000058: ext4_iget_extra_inode:5180: inode 15
[  206.729637][T10287] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.1933: couldn't read orphan inode 15 (err -117)
[  206.763580][T10287] loop1: lost filesystem error report for type 5 error -117
[  206.768686][T10287] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  206.943587][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  207.453569][T10383] loop7: detected capacity change from 0 to 512
[  207.539451][T10383] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.1944: invalid indirect mapped block 11 (level 0)
[  207.553623][T10383] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  207.556548][    C1] EXT4-fs (loop7): error count since last fsck: 1
[  207.572789][    C1] EXT4-fs (loop7): initial error at time 2000000059: ext4_free_branches:1023: inode 13
[  207.582939][    C1] EXT4-fs (loop7): last error at time 2000000059: ext4_free_branches:1023: inode 13
[  207.604851][T10383] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #13: comm syz.7.1944: attempt to clear invalid blocks 1024 len 1
[  207.618983][T10383] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  207.624670][T10383] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters
[  207.657474][T10383] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.1944: invalid indirect mapped block 1819239214 (level 0)
[  207.683086][T10383] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  207.685226][T10383] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.1944: invalid indirect mapped block 33554432 (level 2)
[  207.714257][T10383] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  207.716850][T10383] EXT4-fs (loop7): 1 truncate cleaned up
[  207.739265][T10383] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  208.028662][T10392] netlink: 'syz.5.1949': attribute type 83 has an invalid length.
[  208.176925][T10394] configfs-gadget.g1 gadget.0: HOST MAC 9e:cf:bf:15:69:6e
[  208.244318][T10394] configfs-gadget.g1 gadget.0: MAC 9a:ff:33:04:27:f9
[  208.314015][T10408] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1952'.
[  208.660296][T10430] tipc: Cannot configure node identity twice
[  208.680580][T10430] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  208.896030][ T6310] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  209.560360][T10527] loop1: detected capacity change from 0 to 512
[  209.680187][T10527] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  209.849815][T10527] ext4 filesystem being mounted at /365/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  210.023385][   T28] kauditd_printk_skb: 75 callbacks suppressed
[  210.023406][   T28] audit: type=1400 audit(2000000062.000:11889): avc:  denied  { write } for  pid=10525 comm="syz.1.1970" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  210.241487][T10548] loop5: detected capacity change from 0 to 512
[  210.259352][T10549] team0: Device gtp0 is up. Set it down before adding it as a team port
[  210.298058][T10548] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  210.367133][T10548] ext4 filesystem being mounted at /286/file3 supports timestamps until 2038-01-19 (0x7fffffff)
[  210.385370][   T28] audit: type=1400 audit(2000000062.360:11890): avc:  denied  { write } for  pid=10547 comm="syz.5.1976" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  210.408020][T10535] loop7: detected capacity change from 0 to 512
[  210.435129][T10535] EXT4-fs: Ignoring removed bh option
[  210.527704][ T5198] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  210.623553][   T28] audit: type=1400 audit(2000000062.600:11891): avc:  denied  { ioctl } for  pid=10525 comm="syz.1.1970" path="/365/file1/file1" dev="loop1" ino=15 ioctlcmd=0x5519 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  210.652219][T10535] EXT4-fs error (device loop7): ext4_iget_extra_inode:5180: inode #15: comm syz.7.1972: corrupted in-inode xattr: e_value size too large
[  210.679542][T10527] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  210.689346][T10535] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  210.691065][T10527] bond1 (unregistering): Released all slaves
[  210.700227][    C0] EXT4-fs (loop7): error count since last fsck: 1
[  210.700241][    C0] EXT4-fs (loop7): initial error at time 2000000062: ext4_iget_extra_inode:5180: inode 15
[  210.700261][    C0] EXT4-fs (loop7): last error at time 2000000062: ext4_iget_extra_inode:5180: inode 15
[  210.735765][T10535] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.1972: couldn't read orphan inode 15 (err -117)
[  210.748528][   T28] audit: type=1400 audit(2000000062.710:11892): avc:  denied  { read } for  pid=10561 comm="syz.8.1979" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  210.774665][T10535] loop7: lost filesystem error report for type 5 error -117
[  210.778477][T10535] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  210.801616][   T28] audit: type=1400 audit(2000000062.710:11893): avc:  denied  { mount } for  pid=10561 comm="syz.8.1979" name="/" dev="ramfs" ino=31198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  210.884075][ T6310] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  210.937139][T10572] tipc: Started in network mode
[  210.943150][T10572] tipc: Node identity 785634120000000021436587, cluster identity 4711
[  210.961994][T10572] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  210.973458][T10572] __nla_validate_parse: 2 callbacks suppressed
[  210.973495][T10572] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1981'.
[  211.143935][   T28] audit: type=1400 audit(2000000063.120:11894): avc:  denied  { write } for  pid=10550 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  211.222129][T10580] netlink: 80 bytes leftover after parsing attributes in process `syz.8.1982'.
[  211.240456][T10580] loop8: detected capacity change from 0 to 512
[  211.271195][T10580] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.1982: invalid indirect mapped block 11 (level 0)
[  211.284571][T10580] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  211.285661][T10580] EXT4-fs error (device loop8): ext4_clear_blocks:876: inode #13: comm syz.8.1982: attempt to clear invalid blocks 1024 len 1
[  211.294838][    C0] EXT4-fs (loop8): error count since last fsck: 1
[  211.294865][    C0] EXT4-fs (loop8): initial error at time 2000000063: ext4_free_branches:1023: inode 13
[  211.294893][    C0] EXT4-fs (loop8): last error at time 2000000063: ext4_free_branches:1023: inode 13
[  211.333720][T10580] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  211.335377][T10580] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters
[  211.359301][T10580] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.1982: invalid indirect mapped block 1819239214 (level 0)
[  211.373326][T10580] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  211.382828][T10580] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.1982: invalid indirect mapped block 33554432 (level 2)
[  211.405905][T10580] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  211.418837][T10580] EXT4-fs (loop8): 1 truncate cleaned up
[  211.449143][T10580] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  211.480689][T10584] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1978'.
[  211.490033][T10584] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1978'.
[  211.673380][T10584] SELinux: failed to load policy
[  211.777810][T10592] UHID_CREATE from different security context by process 724 (syz.5.1986), this is not allowed.
[  211.960236][T10603] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1991'.
[  212.004054][T10604] cgroup: Invalid name
[  212.028480][T10606] tipc: Cannot configure node identity twice
[  212.036896][T10606] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  212.045763][T10606] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1992'.
[  212.081492][T10608] netlink: 14975 bytes leftover after parsing attributes in process `syz.5.1993'.
[  212.103125][   T28] audit: type=1400 audit(2000000064.080:11895): avc:  denied  { write } for  pid=10587 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  212.168680][T10612] netlink: 560 bytes leftover after parsing attributes in process `syz.5.1994'.
[  212.196595][T10612] loop5: detected capacity change from 0 to 512
[  212.210221][T10612] EXT4-fs: Ignoring removed nobh option
[  212.279135][   T28] audit: type=1400 audit(2000000064.260:11896): avc:  denied  { write } for  pid=10613 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  212.325069][   T28] audit: type=1400 audit(2000000064.300:11897): avc:  denied  { write } for  pid=10624 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  212.452182][   T28] audit: type=1400 audit(2000000064.430:11898): avc:  denied  { write } for  pid=10627 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  212.532976][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  212.543178][T10612] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  212.579734][T10612] EXT4-fs (loop5): 1 truncate cleaned up
[  212.599080][T10612] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  212.677403][T10612] EXT4-fs warning (device loop5): verify_group_input:137: Cannot add at group 125 (only 1 groups)
[  212.867556][T10653] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1997'.
[  212.904855][T10653] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1997'.
[  213.043164][ T9308] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  213.069824][T10653] SELinux: failed to load policy
[  213.206041][T10666] loop1: detected capacity change from 0 to 128
[  213.248870][T10666] FAT-fs (loop1): bogus number of FAT structure
[  213.261897][T10666] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code
[  213.291722][T10666] FAT-fs (loop1): Can't find a valid FAT filesystem
[  213.362200][T10689] tipc: Cannot configure node identity twice
[  213.384680][T10689] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  213.500915][T10698] loop7: detected capacity change from 0 to 2048
[  213.550213][T10698]  loop7: p1 p4
[  213.563384][T10698] loop7: p1 start 262144 is beyond EOD, truncated
[  213.585582][T10698] loop7: p4 start 184550144 is beyond EOD, truncated
[  213.602331][T10705] loop8: detected capacity change from 0 to 1024
[  213.618673][ T2986]  loop7: p1 p4
[  213.622419][ T2986] loop7: p1 start 262144 is beyond EOD, truncated
[  213.631387][T10705] EXT4-fs: Ignoring removed bh option
[  213.632526][ T2986] loop7: p4 start 184550144 is beyond EOD, truncated
[  213.689505][T10705] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  213.950924][ T9308] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  214.057673][T10736] loop7: detected capacity change from 0 to 512
[  214.159354][T10736] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.2010: invalid indirect mapped block 11 (level 0)
[  214.172715][T10736] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  214.176402][    C1] EXT4-fs (loop7): error count since last fsck: 1
[  214.191988][    C1] EXT4-fs (loop7): initial error at time 2000000066: ext4_free_branches:1023: inode 13
[  214.201684][    C1] EXT4-fs (loop7): last error at time 2000000066: ext4_free_branches:1023: inode 13
[  214.217182][T10736] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #13: comm syz.7.2010: attempt to clear invalid blocks 1024 len 1
[  214.230534][T10736] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  214.231449][T10736] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters
[  214.255798][T10736] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.2010: invalid indirect mapped block 1819239214 (level 0)
[  214.270294][T10736] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  214.271120][T10736] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.2010: invalid indirect mapped block 33554432 (level 2)
[  214.294756][T10736] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  214.296091][T10736] EXT4-fs (loop7): 1 truncate cleaned up
[  214.312728][T10736] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  214.457831][T10742] ieee802154 phy0 wpan0: entered promiscuous mode
[  215.018905][T10755] loop8: detected capacity change from 0 to 1764
[  215.225016][T10764] tipc: Cannot configure node identity twice
[  215.238282][T10764] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  215.350700][   T28] kauditd_printk_skb: 16 callbacks suppressed
[  215.350715][   T28] audit: type=1400 audit(2000000067.330:11915): avc:  denied  { write } for  pid=10752 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  215.497994][   T28] audit: type=1400 audit(2000000067.460:11916): avc:  denied  { write } for  pid=10770 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  215.746009][ T6310] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  215.804369][T10782] netlink: 'syz.7.2017': attribute type 1 has an invalid length.
[  215.982097][   T28] audit: type=1400 audit(2000000067.960:11917): avc:  denied  { write } for  pid=10775 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  216.012845][T10796] loop7: detected capacity change from 0 to 512
[  216.033046][T10796] EXT4-fs error (device loop7): ext4_get_branch:178: inode #11: block 4294967295: comm syz.7.2020: invalid block
[  216.053988][T10796] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  216.055928][T10796] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.2020: invalid indirect mapped block 4294967295 (level 1)
[  216.065191][    C0] EXT4-fs (loop7): error count since last fsck: 1
[  216.065210][    C0] EXT4-fs (loop7): initial error at time 2000000068: ext4_get_branch:178: inode 11: block 4294967295
[  216.065245][    C0] EXT4-fs (loop7): last error at time 2000000068: ext4_get_branch:178: inode 11: block 4294967295
[  216.107334][T10796] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  216.108768][T10796] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.2020: invalid indirect mapped block 4294967295 (level 1)
[  216.131986][T10796] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  216.133539][T10796] EXT4-fs (loop7): 2 truncates cleaned up
[  216.148932][T10796] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  216.167488][   T28] audit: type=1400 audit(2000000068.140:11918): avc:  denied  { write } for  pid=10801 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  216.245151][   T28] audit: type=1400 audit(2000000068.220:11919): avc:  denied  { write } for  pid=10795 comm="syz.7.2020" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  216.361699][ T6310] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  216.437640][   T28] audit: type=1400 audit(2000000068.410:11920): avc:  denied  { write } for  pid=10808 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  216.513029][   T28] audit: type=1400 audit(2000000068.470:11921): avc:  denied  { write } for  pid=10821 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  216.635413][T10817] loop7: detected capacity change from 0 to 512
[  216.706445][T10817] EXT4-fs (loop7): revision level too high, forcing read-only mode
[  216.716292][T10817] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  216.797433][T10817] System zones: 0-1, 15-15, 18-18, 34-34
[  216.811034][T10817] EXT4-fs (loop7): orphan cleanup on readonly fs
[  216.851277][T10839] loop8: detected capacity change from 0 to 1764
[  216.869457][   T28] audit: type=1400 audit(2000000068.850:11922): avc:  denied  { write } for  pid=10824 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  216.895317][T10817] Quota error (device loop7): v2_read_header: Failed header read: expected=8 got=0
[  216.930773][T10817] EXT4-fs warning (device loop7): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  216.961040][   T28] audit: type=1400 audit(2000000068.940:11923): avc:  denied  { write } for  pid=10842 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  216.970449][T10817] EXT4-fs (loop7): Cannot turn on quotas: error -22
[  217.042858][T10817] EXT4-fs error (device loop7): ext4_orphan_get:1425: comm syz.7.2024: bad orphan inode 16
[  217.086644][T10817] loop7: lost filesystem error report for type 5 error -117
[  217.096488][    C0] EXT4-fs (loop7): error count since last fsck: 1
[  217.110585][    C0] EXT4-fs (loop7): initial error at time 2000000069: ext4_orphan_get:1425
[  217.119540][    C0] EXT4-fs (loop7): last error at time 2000000069: ext4_orphan_get:1425
[  217.129686][T10817] ext4_test_bit(bit=15, block=18) = 1
[  217.167964][T10817] is_bad_inode(inode)=0
[  217.177915][T10817] NEXT_ORPHAN(inode)=0
[  217.187995][T10817] max_ino=32
[  217.198182][T10817] i_nlink=2
[  217.231252][T10817] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  217.377287][T10863] FAULT_INJECTION: forcing a failure.
[  217.377287][T10863] name failslab, interval 1, probability 0, space 0, times 0
[  217.409290][T10863] CPU: 1 UID: 0 PID: 10863 Comm: syz.8.2029 Not tainted syzkaller #0 PREEMPT(lazy) 
[  217.409323][T10863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  217.409337][T10863] Call Trace:
[  217.409345][T10863]  <TASK>
[  217.409354][T10863]  __dump_stack+0x1d/0x30
[  217.409446][T10863]  dump_stack_lvl+0x95/0xd0
[  217.409467][T10863]  dump_stack+0x15/0x1b
[  217.409486][T10863]  should_fail_ex+0x25e/0x270
[  217.409516][T10863]  should_failslab+0x8c/0xb0
[  217.409538][T10863]  kmem_cache_alloc_noprof+0x7f/0x3c0
[  217.409604][T10863]  ? locks_get_lock_context+0x7d/0x2c0
[  217.409711][T10863]  ? locks_get_lock_context+0x7d/0x2c0
[  217.409762][T10863]  locks_get_lock_context+0x7d/0x2c0
[  217.409804][T10863]  posix_lock_inode+0x75/0x2360
[  217.409906][T10863]  ? __file_has_perm+0x3d9/0x430
[  217.409967][T10863]  fcntl_setlk+0x60f/0x910
[  217.410013][T10863]  do_fcntl+0x69c/0xf80
[  217.410086][T10863]  __se_sys_fcntl+0xb1/0x120
[  217.410124][T10863]  __x64_sys_fcntl+0x43/0x50
[  217.410235][T10863]  x64_sys_call+0x2844/0x3020
[  217.410259][T10863]  do_syscall_64+0x136/0x3c0
[  217.410285][T10863]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  217.410383][T10863] RIP: 0033:0x7f26e0dde019
[  217.410398][T10863] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  217.410417][T10863] RSP: 002b:00007f26df837028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048
[  217.410512][T10863] RAX: ffffffffffffffda RBX: 00007f26e1065fa0 RCX: 00007f26e0dde019
[  217.410570][T10863] RDX: 0000200000000140 RSI: 0000000000000007 RDI: 0000000000000004
[  217.410587][T10863] RBP: 00007f26df837090 R08: 0000000000000000 R09: 0000000000000000
[  217.410600][T10863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  217.410616][T10863] R13: 00007f26e1066038 R14: 00007f26e1065fa0 R15: 00007fff40ba6278
[  217.410645][T10863]  </TASK>
[  217.603058][ T6310] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  217.820158][T10880] loop8: detected capacity change from 0 to 512
[  217.828593][T10880] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  217.856884][T10880] rdma_rxe: Failed to create IPv4 UDP tunnel
[  217.874991][T10880] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 548)
[  217.883869][T10880] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 548)
[  217.892506][T10880] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 548)
[  217.902650][T10880] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 548)
[  217.911268][T10880] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 548)
[  217.921692][T10880] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 548)
[  217.931835][T10880] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 548)
[  217.940289][T10880] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 548)
[  217.949318][T10880] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 548)
[  217.959331][T10880] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 548)
[  217.967994][T10880] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 548)
[  217.976746][T10880] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 548)
[  217.985395][T10880] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 548)
[  217.995750][T10880] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 548)
[  218.444788][ T5198] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  219.945435][T11000] loop5: detected capacity change from 0 to 512
[  219.962580][T10988] loop7: detected capacity change from 0 to 2048
[  220.005821][T11000] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  220.084609][T11000] ext4 filesystem being mounted at /295/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  220.105473][T11000] EXT4-fs (loop5): resizing filesystem from 128 to 2 blocks
[  220.112976][T11000] EXT4-fs warning (device loop5): ext4_resize_fs:2041: can't shrink FS - resize aborted
[  220.133758][T10988] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  220.292494][ T9642] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  220.342956][ T9642] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 318 with error 28
[  220.357072][ T9642] EXT4-fs (loop7): This should not happen!! Data will be lost
[  220.357072][ T9642] 
[  220.370199][ T5198] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  220.388872][ T9642] EXT4-fs (loop7): Total free blocks count 0
[  220.446249][ T9642] EXT4-fs (loop7): Free/Dirty block details
[  220.462804][ T9642] EXT4-fs (loop7): free_blocks=2415919104
[  220.474298][ T9642] EXT4-fs (loop7): dirty_blocks=336
[  220.503044][ T9642] EXT4-fs (loop7): Block reservation details
[  220.523505][ T9642] EXT4-fs (loop7): i_reserved_data_blocks=29
[  220.561348][T11031] __nla_validate_parse: 7 callbacks suppressed
[  220.561364][T11031] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2049'.
[  220.582141][ T1881] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 318 with max blocks 140 with error 28
[  220.700050][T11043] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2053'.
[  220.867477][   T28] kauditd_printk_skb: 23 callbacks suppressed
[  220.867490][   T28] audit: type=1400 audit(2000000072.850:11947): avc:  denied  { ioctl } for  pid=11052 comm="syz.5.2057" path="socket:[32227]" dev="sockfs" ino=32227 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  221.136174][T10985] syz.7.2040 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  221.226369][T10985] CPU: 1 UID: 0 PID: 10985 Comm: syz.7.2040 Not tainted syzkaller #0 PREEMPT(lazy) 
[  221.226407][T10985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  221.226424][T10985] Call Trace:
[  221.226452][T10985]  <TASK>
[  221.226461][T10985]  __dump_stack+0x1d/0x30
[  221.226488][T10985]  dump_stack_lvl+0x95/0xd0
[  221.226548][T10985]  dump_stack+0x15/0x1b
[  221.226570][T10985]  dump_header+0x80/0x240
[  221.226594][T10985]  oom_kill_process+0x295/0x350
[  221.226634][T10985]  out_of_memory+0x981/0xbc0
[  221.226751][T10985]  try_charge_memcg+0x621/0xa00
[  221.226923][T10985]  charge_memcg+0x6d/0x120
[  221.226965][T10985]  mem_cgroup_swapin_charge_folio+0xc2/0x150
[  221.227008][T10985]  swap_cache_alloc_folio+0x47b/0x5e0
[  221.227124][T10985]  swap_cluster_readahead+0x3d2/0x460
[  221.227208][T10985]  swapin_readahead+0xd8/0x8a0
[  221.227244][T10985]  ? _raw_spin_unlock+0x9/0x30
[  221.227277][T10985]  ? swap_put_entries_cluster+0x49c/0x4c0
[  221.227386][T10985]  ? asm_exc_general_protection+0x3/0x30
[  221.227443][T10985]  ? __rcu_read_unlock+0x4e/0x70
[  221.227517][T10985]  ? swap_cache_get_folio+0x1f7/0x200
[  221.227590][T10985]  do_swap_page+0x2a2/0x1ec0
[  221.227629][T10985]  ? __css_rstat_updated+0xbb/0x280
[  221.227698][T10985]  ? __rcu_read_lock+0x36/0x50
[  221.227730][T10985]  ? pte_offset_map_rw_nolock+0x19e/0x200
[  221.227768][T10985]  handle_mm_fault+0xb3c/0x2da0
[  221.227824][T10985]  do_user_addr_fault+0x634/0x1060
[  221.227872][T10985]  ? arch_exit_to_user_mode_prepare+0x26/0x60
[  221.227913][T10985]  ? trace_page_fault_user+0x1f/0xa0
[  221.227979][T10985]  exc_page_fault+0x62/0xa0
[  221.228004][T10985]  asm_exc_page_fault+0x26/0x30
[  221.228031][T10985] RIP: 0033:0x7f78f1c054a7
[  221.228052][T10985] Code: 05 26 cc 3c 00 48 89 18 48 8b 05 14 cc 3c 00 c7 00 00 00 01 00 5b c3 66 66 2e 0f 1f 84 00 00 00 00 00 90 80 3d 02 29 3d 00 00 <48> 8b 47 18 48 8b 4f 28 74 1f 48 8b 30 89 f2 83 c6 02 48 8d 04 f0
[  221.228077][T10985] RSP: 002b:00007fff72579bd8 EFLAGS: 00010202
[  221.228172][T10985] RAX: 0000001b2e924000 RBX: 00007f78f1fd5f40 RCX: 0000001b2e924000
[  221.228192][T10985] RDX: 0000000000000010 RSI: 0000000000000011 RDI: 00007f78f1fd5f40
[  221.228231][T10985] RBP: 0000000000000fd2 R08: 00000000003ffcb4 R09: 0000000000000006
[  221.228244][T10985] R10: 0000001b2e92421c R11: 000000000000000a R12: 00007f78f1fd6180
[  221.228257][T10985] R13: 00007f78f1fd618c R14: 0000000000036c76 R15: 00007f78f1fd6180
[  221.228282][T10985]  </TASK>
[  221.476364][T11047] loop1: detected capacity change from 0 to 512
[  221.511817][T10985] memory: usage 253644kB, limit 307200kB, failcnt 328
[  221.523189][T11047] EXT4-fs: Ignoring removed bh option
[  221.559971][T10985] memory+swap: usage 179944kB, limit 9007199254740988kB, failcnt 0
[  221.614380][ T1881] ==================================================================
[  221.622514][ T1881] BUG: KCSAN: data-race in __xa_set_mark / xas_find_marked
[  221.629744][ T1881] 
[  221.632110][ T1881] read-write to 0xffff88810cc096b0 of 8 bytes by task 10988 on cpu 0:
[  221.640302][ T1881]  __xa_set_mark+0xd2/0x1a0
[  221.644834][ T1881]  __folio_mark_dirty+0x42c/0x520
[  221.649888][ T1881]  mark_buffer_dirty+0x120/0x1f0
[  221.654943][ T1881]  folio_zero_new_buffers+0x272/0x2d0
[  221.660359][ T1881]  block_write_end+0x200/0x210
[  221.665191][ T1881]  ext4_da_write_end+0x1e4/0x7b0
[  221.670216][ T1881]  generic_perform_write+0x314/0x490
[  221.675622][ T1881]  ext4_buffered_write_iter+0x2e2/0x480
[  221.681192][ T1881]  ext4_file_write_iter+0x38e/0xef0
[  221.686419][ T1881]  vfs_write+0x57d/0x990
[  221.690678][ T1881]  ksys_write+0xdc/0x1a0
[  221.694949][ T1881]  __x64_sys_write+0x40/0x50
[  221.699569][ T1881]  x64_sys_call+0x27e1/0x3020
[  221.704299][ T1881]  do_syscall_64+0x136/0x3c0
[  221.708922][ T1881]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  221.714843][ T1881] 
[  221.717183][ T1881] read to 0xffff88810cc096b0 of 8 bytes by task 1881 on cpu 1:
[  221.724741][ T1881]  xas_find_marked+0x211/0x650
[  221.729527][ T1881]  filemap_get_folios_tag+0xf7/0x400
[  221.734840][ T1881]  mpage_prepare_extent_to_map+0x2f8/0xc00
[  221.740669][ T1881]  ext4_do_writepages+0x9e5/0x2720
[  221.745819][ T1881]  ext4_writepages+0x18f/0x300
[  221.750595][ T1881]  do_writepages+0x1b9/0x300
[  221.755192][ T1881]  __writeback_single_inode+0x7b/0x660
[  221.760681][ T1881]  writeback_sb_inodes+0x4d9/0xaa0
[  221.765814][ T1881]  __writeback_inodes_wb+0x8a/0x180
[  221.771023][ T1881]  wb_writeback+0x21e/0x510
[  221.775535][ T1881]  wb_workfn+0x4f4/0xa50
[  221.779795][ T1881]  process_scheduled_works+0x4d4/0x9a0
[  221.785290][ T1881]  worker_thread+0x569/0x750
[  221.789901][ T1881]  kthread+0x221/0x270
[  221.793988][ T1881]  ret_from_fork+0x146/0x330
[  221.798606][ T1881]  ret_from_fork_asm+0x1a/0x30
[  221.803384][ T1881] 
[  221.805704][ T1881] value changed: 0x000000000007ffff -> 0x00000000001fffff
[  221.812811][ T1881] 
[  221.815160][ T1881] Reported by Kernel Concurrency Sanitizer on:
[  221.821332][ T1881] CPU: 1 UID: 0 PID: 1881 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(lazy) 
[  221.830805][ T1881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  221.840870][ T1881] Workqueue: writeback wb_workfn (flush-7:7)
[  221.846867][ T1881] ==================================================================
[  221.938787][T10985] kmem: usage 50180kB, limit 9007199254740988kB, failcnt 0
[  221.950943][T10985] Memory cgroup stats for /syz7:
[  221.951170][T10985] cache 4186112
[  222.012071][T11047] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.2054: corrupted in-inode xattr: e_value size too large
[  222.027238][T10985] rss 4096
[  222.036270][T10985] shmem 0
[  222.039632][T10985] mapped_file 0
[  222.043159][T10985] dirty 4169728
[  222.046871][T10985] writeback 0
[  222.050250][T10985] workingset_refault_anon 340
[  222.055026][T10985] workingset_refault_file 0
[  222.074912][T10985] swap 1507328
[  222.078507][T10985] swapcached 2990080
[  222.082462][T10985] pgpgin 104466
[  222.086008][T10985] pgpgout 103443
[  222.090003][T10985] pgfault 107871
[  222.093105][T11047] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  222.093655][T10985] pgmajfault 96
[  222.093664][T10985] inactive_anon 4096
[  222.093739][T10985] active_anon 0
[  222.093746][T10985] inactive_file 3047424
[  222.093755][T10985] active_file 1138688
[  222.093765][T10985] unevictable 0
[  222.093774][T10985] hierarchical_memory_limit 314572800
[  222.131504][T10985] hierarchical_memsw_limit 9223372036854771712
[  222.137826][T10985] total_cache 4186112
[  222.141852][T10985] total_rss 4096
[  222.145480][T10985] total_shmem 0
[  222.164778][T11047] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.2054: couldn't read orphan inode 15 (err -117)
[  222.169083][T10985] total_mapped_file 0
[  222.176828][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  222.176858][    C1] EXT4-fs (loop1): initial error at time 2000000074: ext4_iget_extra_inode:5180: inode 15
[  222.181349][T10985] total_dirty 4169728
[  222.187438][    C1] 
[  222.187458][    C1] EXT4-fs (loop1): last error at time 2000000074: ext4_iget_extra_inode:5180
[  222.198048][T10985] total_writeback 0
[  222.201477][    C1] : inode 15
[  222.203843][T10985] total_workingset_refault_anon 340
[  222.203855][T10985] total_workingset_refault_file 0
[  222.203864][T10985] total_swap 1507328
[  222.203873][T10985] total_swapcached 2990080
[  222.203882][T10985] total_pgpgin 104466
[  222.203941][T10985] total_pgpgout 103443
[  222.203951][T10985] total_pgfault 107871
[  222.203959][T10985] total_pgmajfault 96
[  222.203968][T10985] total_inactive_anon 4096
[  222.212739][    C1] 
[  222.234951][T10985] total_active_anon 0
[  222.378153][T11047] loop1: lost filesystem error report for type 5 error -117
[  222.385836][T11047] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  222.388225][T10985] total_inactive_file 3047424
[  222.548976][T10985] total_active_file 1138688
[  222.582379][T10985] total_unevictable 0
[  222.594331][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  222.614015][T10985] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.2040,pid=10985,uid=0
[  222.711248][T10985] Memory cgroup out of memory: Killed process 10985 (syz.7.2040) total-vm:94324kB, anon-rss:1240kB, file-rss:22304kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000
[  222.737324][T11024] syz.7.2040 (11024) used greatest stack depth: 9024 bytes left
[  222.971157][ T6310] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost
[  223.409133][   T28] audit: type=1400 audit(2000000075.390:11948): avc:  denied  { write } for  pid=11109 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  223.466868][   T28] audit: type=1400 audit(2000000075.430:11949): avc:  denied  { write } for  pid=11120 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  223.622824][   T28] audit: type=1400 audit(2000000075.600:11950): avc:  denied  { write } for  pid=11123 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  223.668909][   T28] audit: type=1400 audit(2000000075.650:11951): avc:  denied  { write } for  pid=11134 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  223.796249][   T28] audit: type=1400 audit(2000000075.770:11952): avc:  denied  { execstack } for  pid=11048 comm="syz.0.2055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  223.834912][   T28] audit: type=1400 audit(2000000075.770:11953): avc:  denied  { write } for  pid=11138 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  223.892667][   T28] audit: type=1400 audit(2000000075.810:11954): avc:  denied  { write } for  pid=11149 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  223.974970][   T28] audit: type=1400 audit(2000000075.950:11955): avc:  denied  { write } for  pid=11152 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  224.015795][   T28] audit: type=1400 audit(2000000075.990:11956): avc:  denied  { write } for  pid=11163 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  225.949009][   T28] kauditd_printk_skb: 36 callbacks suppressed
[  225.949026][   T28] audit: type=1400 audit(2000000077.930:11993): avc:  denied  { write } for  pid=11419 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  225.986288][   T28] audit: type=1400 audit(2000000077.960:11994): avc:  denied  { write } for  pid=11430 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  226.091649][   T28] audit: type=1400 audit(2000000078.070:11995): avc:  denied  { write } for  pid=11433 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  226.123553][   T28] audit: type=1400 audit(2000000078.100:11996): avc:  denied  { write } for  pid=11444 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  226.221956][   T28] audit: type=1400 audit(2000000078.200:11997): avc:  denied  { write } for  pid=11447 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  226.253824][   T28] audit: type=1400 audit(2000000078.230:11998): avc:  denied  { write } for  pid=11458 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  226.355367][   T28] audit: type=1400 audit(2000000078.330:11999): avc:  denied  { write } for  pid=11461 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  226.386484][   T28] audit: type=1400 audit(2000000078.360:12000): avc:  denied  { write } for  pid=11472 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  226.488506][   T28] audit: type=1400 audit(2000000078.470:12001): avc:  denied  { write } for  pid=11475 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  226.519386][   T28] audit: type=1400 audit(2000000078.500:12002): avc:  denied  { write } for  pid=11486 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1