last executing test programs:

5m30.616059964s ago: executing program 3 (id=3385):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
add_key(&(0x7f0000000300)='dns_resolver\x00', 0x0, &(0x7f0000000200)="75a1d70300", 0x5, 0xfffffffffffffffe)
syz_mount_image$ext4(&(0x7f0000000b80)='ext2\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000380)={[{@dax_always}, {@nodiscard}, {@journal_checksum}, {@minixdf}, {@oldalloc}, {@usrquota}]}, 0x1, 0xb87, &(0x7f00000017c0)="$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")
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r1, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000bc0)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac539985bac8624c50b527c68b0ff250261953f2da79a78104c2d0000000086b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2d2462d0bb25fff9d3b1ce903597992b2a4d59e5ac2d704fa2595b5d36400d0b2d119796726a223f5739e45568cfdbdb3064d01bf9cd033e5e0907b2eb410b7cf31951394c247", 0xe4}], 0x2}}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000001500)="24acadd7f04daaa04e88680351d9ce53f67fd2afefe557d4bd561f02df2570f175951d4bdd97ec433ec583c79fa668922a61c8662e0890ce06996f5ba401e582dfb5197822bee50c6cd4b3a6f9d14f1fde9b1698ad6847d4fde0458282ece396a1e212cd02e6fb62599df5ecb5984843ee04e96eb26fa2a8100a0b7b2d032fff965485ded83b39d6c9835416a8db5414a6c54101693e6b05e652b49fceaf4a0cc2b7898034ff0eb5150b3e85b9ff5658ba346d0b6b5a3a71eb084311606cf6b8ccf7c45a79b319a201e9c5ae9f0aab5c4dd7a77de7f5ae2edb307892dbfa8377446d8cabb9302b27250c66ddaeb3988933df044b6ae4570671cf861484b9124827dbe78a0388eecac9e6ad371287ca014fa658c6f1308b046b2fc0cc3d5b8ba48f3b1319d5976bb45f3c630f01c77b93f07fe2b304a98383258a37791da00145e24f619c5dd07939c39212ca7d8421dcf50ab703f86dacf4a4159a123d25a7a9ad2319a876af43da4cf86b0f6a7f261562e1b10681a71d941a5e90031452e37f4a616b85fe6b48803cbca2369565be720ef5fd1e6326234c34f6e13ba39f9460acc68e15eef508e402b29e452883c90b50b04d66ad07cb689d31426147a965dd4691519d844bfc83d830b8c5a679c41fbdcc2d16b3dcecc1f5be156f96fa2a315c68bfd1ebba95e9de0e3cdf7ad8e93b92cda3c4643ca88fcd710c1a24d0d62b54d937f2fbe7aa09ba34c71a17eefa0dba2d4752ae91850d734be15b1f2f5e36856786f5cf0afec24a46634f8d5aec6008c1ace1e404af77c8f4d37283847349ac22f6703d44fb66cec0ceb9390cf2f878d8390ecd8fbeb82a6ccd966bca4c4689a2e2a850a30dfa7c0c19ecec0c799e2880d2088ece8401306bfa4b34da709caa802c8f9d6deb5b599d262faa7de40de113c89a8e8e3a4f19ac1847387be89e27286e20dd49339021e79ddb0cf3bf72fcc25f3b7d35ca05c4473521320b1a6bee637e4f4da9692506931df8f990ed54e23000030d26f30c8ee3ace6c9d5795b7443aa0651ecb2b64549d4bd4bea0ed0f69e69291057bf7c3b92ad0a8ec4e5acf31c4ed8c372f1bd9b0bf6c51a7a29915fc2e5a24c36599612fd4527870ea6c7057f87c105c73386f738f98165cb8bac0d2ce46eeb7e39d9f3c2d93e4910d231ce946d65120f2bd4842ed181261c0ea728b06e6155944b6c3554d553724c5419d45f633d97bc59889ed7a4df1d35cc9bede168d3d8dca779293dd9564877b009d93c99a7a0f983e33e937bfb13b06e611c8c33313821f110e6911643cfabc2c75c42af256a07c8fee22c7795cb5a57dda8df2b668d893dd7a6bbfada01b49c6c96156bd5ebc10f16fd30579fa059207c4c9f69fff76a3e83839697324adc1037b64db5fe6f55a72fc9311a414c8848885071620e2c7539e6ac2684785ce04bba9785b4571e183bc12fdad8d58e57d0355c4082fbe08fdb8feedd6d3d6f7f586f22b06069ed48b931c7cbc2eca14b2e649432953a9ef28928450ca8907b90fce815cdfecf28816817e72fa25317324b64ff7259d1a2bb9ef8469048f652fd47638060a26a48ff9e05a1fc6fed416d5a0f461cb111ce1cc9cdd38032c30e7c6b520274d638ddd69ef1c08d8c66b134", 0x48e}], 0x1}}], 0x2, 0x2090)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, &(0x7f0000000140))
r2 = socket(0x10, 0x803, 0x0)
semctl$GETALL(0x0, 0x0, 0xd, &(0x7f00000001c0)=""/39)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000cc0)=@newsa={0x194, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@loopback, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x4, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x1d}, {@in6=@private1, 0xfe, 0x32}, @in6=@empty, {0x1, 0x0, 0xfffffffffffffffd, 0x8, 0x1, 0x9, 0x7fffffff, 0x543}, {0x4, 0x7fffffffffffffff, 0xfffffffffffffffc, 0xebe2}, {0x2, 0xffffffff}, 0x70bd2c, 0x3500, 0x2, 0x1, 0x0, 0x50}, [@encap={0x1c, 0x4, {0x7, 0x4e24, 0x4e20, @in=@dev={0xac, 0x14, 0x14, 0x2e}}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd27, 0x70bd28, 0x70bd25, 0x70bd2c, 0x1, [0x3]}}, @replay_thresh={0x8, 0xb, 0x8}]}, 0x194}, 0x1, 0x0, 0x0, 0x4800}, 0x0)
socket$key(0xf, 0x3, 0x2)
writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

5m30.456916789s ago: executing program 3 (id=3386):
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'ip6tnl0\x00', <r0=>0x0, 0x4, 0xe8, 0xf6, 0x4, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x40, 0x3, 0x1}})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYRESDEC=r0], &(0x7f0000003ff6)='GPL\x00', 0x2e1, 0xc1, &(0x7f00000000c0)=""/193, 0x0, 0x22, '\x00', r0, @fallback=0x1}, 0x94)

5m30.390629791s ago: executing program 3 (id=3387):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000010c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xb}, {0x4, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x240408a0}, 0x4890)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r6)
socket$unix(0x1, 0x5, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

5m30.075050331s ago: executing program 3 (id=3393):
r0 = getpid()
prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket(0xa, 0x1, 0x0)
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(r3, 0x118, 0x1, 0xffffffffffffffff, 0x0)
r4 = getpgid(0x0)
syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/user\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
umount2(&(0x7f0000000080)='./file0\x00', 0x4)
r6 = syz_pidfd_open(r4, 0x0)
setns(r6, 0x24020000)
syz_clone(0xf21e8000, 0x0, 0xa, 0x0, 0x0, 0x0)

5m29.186114219s ago: executing program 3 (id=3396):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x80, 0x7, 0x4, 0x6, 0x8001, 0x3fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r1, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000bc0)}], 0x2}}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000001500)="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", 0x36b}], 0x1}}], 0x2, 0x2090)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, &(0x7f0000000140))
r2 = socket(0x10, 0x803, 0x0)
semctl$GETALL(0x0, 0x0, 0xd, &(0x7f00000001c0)=""/39)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000cc0)=@newsa={0x194, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@loopback, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x4, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x1d}, {@in6=@private1, 0xfe, 0x32}, @in6=@empty, {0x1, 0x0, 0xfffffffffffffffd, 0x8, 0x1, 0x9, 0x7fffffff, 0x543}, {0x4, 0x7fffffffffffffff, 0xfffffffffffffffc, 0xebe2}, {0x2, 0xffffffff}, 0x70bd2c, 0x3500, 0x2, 0x1, 0x0, 0x50}, [@encap={0x1c, 0x4, {0x7, 0x4e24, 0x4e20, @in=@dev={0xac, 0x14, 0x14, 0x2e}}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd27, 0x70bd28, 0x70bd25, 0x70bd2c, 0x1, [0x3]}}, @replay_thresh={0x8, 0xb, 0x8}]}, 0x194}, 0x1, 0x0, 0x0, 0x4800}, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0)
writev(r4, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYRES8=r4], 0x5}}, 0x20000800)

5m28.617374406s ago: executing program 3 (id=3399):
socket(0x23, 0x80002, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000009840)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)
utimensat(r0, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0)
r1 = socket$inet6(0xa, 0x80001, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x80552, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x2000000020000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2400000039000900f036d67600000000040000000400ff000c0001800600060008"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x10)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="7000000010000100"/17, @ANYRES32, @ANYBLOB="0000000000000000500012800e"], 0x70}}, 0x0)
r4 = socket(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0)
setpgid(r3, r3)
r5 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r5, 0x29, 0x23, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
socket$kcm(0xf, 0x3, 0x2)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0, 0x4}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xe70, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x0)
setpgid(0x0, r3)
tkill(r3, 0x7)
wait4(r3, 0x0, 0x0, 0x0)
ptrace$ARCH_MAP_VDSO_64(0x1e, r3, 0x1, 0x2003)
ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000840)=ANY=[@ANYBLOB="0400000000000000060000000000000002000000060000000300000000000000bf0d00000000000002000000000000000500000000000000000000000000000000000000000000000008000000000000000000000000001d1c64cf699c474bdc9e595daf979500fdffffffffffffff8e7a000000000000070000000000000000000000000000000000000000000000010100000000000000000000000000000b000000000000009b0d7e7900000000010000000000000000000000000000000000000000000000000400"/212])
r6 = syz_open_dev$usbfs(&(0x7f0000000240), 0xe, 0x8c0002)
ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r6, 0x80045505, 0x0)

5m28.537614888s ago: executing program 32 (id=3399):
socket(0x23, 0x80002, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000009840)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)
utimensat(r0, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0)
r1 = socket$inet6(0xa, 0x80001, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x80552, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x2000000020000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2400000039000900f036d67600000000040000000400ff000c0001800600060008"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x10)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="7000000010000100"/17, @ANYRES32, @ANYBLOB="0000000000000000500012800e"], 0x70}}, 0x0)
r4 = socket(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0)
setpgid(r3, r3)
r5 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r5, 0x29, 0x23, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
socket$kcm(0xf, 0x3, 0x2)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0, 0x4}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xe70, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x0)
setpgid(0x0, r3)
tkill(r3, 0x7)
wait4(r3, 0x0, 0x0, 0x0)
ptrace$ARCH_MAP_VDSO_64(0x1e, r3, 0x1, 0x2003)
ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000840)=ANY=[@ANYBLOB="0400000000000000060000000000000002000000060000000300000000000000bf0d00000000000002000000000000000500000000000000000000000000000000000000000000000008000000000000000000000000001d1c64cf699c474bdc9e595daf979500fdffffffffffffff8e7a000000000000070000000000000000000000000000000000000000000000010100000000000000000000000000000b000000000000009b0d7e7900000000010000000000000000000000000000000000000000000000000400"/212])
r6 = syz_open_dev$usbfs(&(0x7f0000000240), 0xe, 0x8c0002)
ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r6, 0x80045505, 0x0)

14.935099463s ago: executing program 0 (id=5234):
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffff9b, 0x3}, 0x10000d, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_open_dev$tty1(0xc, 0x4, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180200b577ffffff000000000000000085000000b20000009599f885"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2050}, 0x4)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x101, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
eventfd2(0x7, 0x100001)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x8c0}, 0x40805)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa0000010}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x3, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x20)

14.622275203s ago: executing program 0 (id=5241):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
r1 = eventfd2(0x0, 0x0)
close(0x3)
r2 = socket$inet(0x2, 0x801, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10)
sendto$inet(r2, 0x0, 0x1, 0x2004cfe9, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000001c0)=0x240, 0x4)
sendto$inet(r2, &(0x7f0000000040)="ee", 0x1, 0x20004010, 0x0, 0xfffffffffffffd2d)
shutdown(r2, 0x1)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0)
sendfile(r3, r3, 0x0, 0x9)

14.558548355s ago: executing program 0 (id=5243):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2)
lsetxattr$security_selinux(&(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000940), &(0x7f0000000980)='system_u:object_r:netutils_exec_t:s0\x00', 0xf, 0x0)
syz_io_uring_setup(0x1972, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x9, 0x4c032, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00')
pread64(r4, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000)
r5 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local, 0xc}, {0xa, 0x4e24, 0x0, @empty}, 0x1}, 0x5c)
setsockopt$MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e24, 0x100, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x4}, {0xa, 0x4e23, 0x7, @empty, 0xd473}, 0x0, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0xe, 0x3]}}, 0x5c)
syz_open_dev$usbfs(0x0, 0x1ff, 0xa401)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x10e, &(0x7f00000001c0)={[{@jqfmt_vfsv0}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@orlov}, {@nolazytime}]}, 0x3, 0x45f, &(0x7f0000000ec0)="$eJzs3MtvG8UfAPDvrpO26eOX/Ep59AEECiLikTRpgR44AAKJA0hIXMoxJGlV6jaoCRKtKggIlSOqxB1xROIv4AQXBJyQuMIdVapQLxRORmvv1o/abpI6cag/H2mTmd1xZr6eHXt2p9sABtZ49iOJ2B0Rv0XEaC3bXGC89uvG9Utzf1+/NJdEpfLWn0m13F/XL80VRYvX7cozE2lE+mkSB9vUu3Th4pnZcnnhfJ6fWj773tTShYvPnD47e2rh1MK5mePHjx2dfv65mWd7Euf/s7Ye+HDx0P7X3r7yxtyJK+/89E1SxN8Sxx0bqf4c71bk8UqlZ9VtBXsa0slQHxvCmpQiIuuu4er4H41S1DtvNF79pK+NAzZUJdfh8EoFuIsl0e8WAP1RfNFn17/Ftnmzj/679lLtAiiL+0a+1Y4MRRq1C6PhluvbXhqPiBMr/3yZbdHr+xAAAG18l81/nm43/0vjvoZy/8vXhsbytZS9EXFPROyLiHsjqmXvj4gH1lh/6yLJrfOf9Oq6AlulbP73Qr621Tz/S4siY6U8t6eaGU5Oni4vHMnfk4kY3p7lp7vU8f0rv37e6Vjj/C/bsvqLuWDejqtD25tfMz+7PHsnMTe69nHEgaF28Sc3VwKSiNgfEQfWWcfpJ78+1OlYa/yVpNtferE524N1pspXEU/U+n8lWuIvJN3XJ6d2RHnhyFRxVtzq518uv9mp/tv3/8bK+n9n2/P/ZvxjSeN67dLa67j8+2cdr2km13X+13dsy39/MLu8fH46Ylvyeq3Rjftn6q8t8kX5LP6Jw+3H/96ovxMHIyI7iR+MiIci4uG87x6JiEcj4nCnAFcifnz5sXc7Hd4K/T/f0v9jzUVa+r+e2Bate9onSmd++Lb5L9aTq/v8O1ZNTeR7VvP5t5p2re9sBgAAgP+eNCJ2R5JO3kyn6eRk7d/w74udaXlxafmpk4vvn5uvPSMwFsNpcaerdj+4dj90Or+sL/IzLfmj+X3jL0oj1fzk3GJ5vt/Bw4Db1WH8Z/4o9bt1wIbzvBYMLuMfBpfxD4PL+IfB1Wb8j/SjHcDma/f9/1E9WRndzMYAm6pl/Fv2gwHi+h8Gl/EPg6tx/Hd9/h64myyNxO0fkpfYyokdRVdubu2RboHYe5VINngU7O53gI2J4v/+7F64zx9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPfJvAAAA//+Zfec0")

12.48454742s ago: executing program 0 (id=5260):
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@nojournal_checksum}]}, 0x1, 0x5bc, &(0x7f0000001440)="$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")
setresuid(0x0, 0xee01, 0x0)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@quota}, {@debug}]}, 0x1, 0x246, &(0x7f0000000ac0)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
unshare(0x22020600)
syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
syz_open_dev$vcsn(0x0, 0x5, 0x46040)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x5c, r1, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x7}, @NL80211_ATTR_REG_RULES={0x2c, 0x22, 0x0, 0x1, [{0x4}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x81}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1ff}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x10, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x200}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8011}, 0x50)
modify_ldt$write(0x1, &(0x7f0000000300)={0x2, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10)
mount$bpf(0x200000000000, 0x0, 0x0, 0x202021, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x4000050)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x19, 0x5, 0xb, 0x6, 0xfffffff0, 0x9})
prctl$PR_MCE_KILL(0x35, 0x1, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1a1)
ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000000)={0xd2f0, 0x2000, 0x8, 0xadea})

12.356589544s ago: executing program 0 (id=5261):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa07, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, @perf_bp={0x0, 0x8}, 0x90, 0x0, 0x0, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0xc8d0, &(0x7f0000000280)=ANY=[@ANYRES32=0x0], 0x1, 0x314, &(0x7f00000002c0)="$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")
r0 = socket$packet(0x11, 0x2, 0x300)
bpf$ENABLE_STATS(0x20, &(0x7f00000000c0), 0x4)
setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000000)={0x1}, 0x8)
sendmmsg$sock(r0, 0x0, 0x0, 0x8800)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140))
rmdir(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4db, 0x20081, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x8000, 0x8}, 0x12c2b, 0x4000, 0x8010ffe, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0xfffffffd, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
bind$netlink(0xffffffffffffffff, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4)
prctl$PR_SET_MM_MAP(0x3c, 0xe, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0)
perf_event_open(0x0, 0x0, 0xdfffffffffffbfff, 0xffffffffffffffff, 0x9)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[], 0x1, 0x30e, &(0x7f0000000f00)="$eJzs3E1rE10UwPGTNEnTlHayeHhEQXrRjW6GNu7FIC2IAUttxBcQp81EQ8akZEIlIrZduXEhfggXpcvuCtov0I07V27cdSO4sAtxJDOTl7aJrWnSWPv/QZlD7j0z9+Y24dyBzPbdN0/zWVvPGmUJRpUERER2ROISlJqAfwy6cUSaLcvl4W+fzt++d/9mMpWanFFqKjl7JaGUGh17/+zFkN9tY1C24g+3vya+bP2/dXb75+yTnK1ytioUy8pQc8XPZWPOMlUmZ+d1paYt07BNlSvYZslrd5ZELFNlreLCQkUZhcxIbKFk2rYyChWVNyuqXFTlUkUZj41cQem6rkZigoOkV2dmjGSHyfNdHgx6pFRKGgMiMrSvJb3alwEBAIC+8uv/erUfrJb0ndT/oZb1/9qFzfLwnfVRv/7fiFTrf5Gm+v9R41ymygTr9X9URBr1f9HbH3S7/t9fEZ1sr3cvjjhOPYy06n+k+h8nRLX+j/mfX9fKg7VxN6D+BwAAAAAAAAAAAAAAAAAAAADgJNhxHM1xHM07DvivOtqgiETdX5B47X0eJnpk9/o3/lj/06Hx4I7QqIj1ajG9mPaOfodNEbHElHHR5If7/+CrxpFl5XZSVXH5YC35+UuLae+7JJmVnJs/IZrE9+Y7ztSN1OSE8uzOD0usOT8hmvzXOj+xNz9cPUbk0sWmfF00+TgvRbEk4/8yrpb/ckKp67dSe64/5PYDAAAAAOBfoKu6+v59sLld39/u7Y+9dm9/HZLW9we8/fV4y/19SM6F+jVrAAAAAABOF7vyPG9YllnqUbAiIj2+RJugNsPDZtUekNumT0AC7Zq6ENQu3ll6dWxdG0/4UO9YsKOhjkX+cFFaBrXbRu36yHQnZ3Y0kaO+h2fevvv++z7enTGRw5zw6nr0gJl2GkQOmmn42L6AAAAAABybRtFfe+VafwcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMApdByP4uv3HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/xa8AAAD//46ZAFE=")
openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')

11.094545964s ago: executing program 0 (id=5281):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x20010, r1, 0xda503000)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', <r2=>0x0})
bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x81, 0x6, @remote}, 0x14)
r3 = fspick(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000200), 0x1, 0x569, &(0x7f00000002c0)="$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")
read$usbmon(0xffffffffffffffff, &(0x7f0000001180)=""/239, 0xef)
fsconfig$FSCONFIG_SET_FD(r3, 0x5, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x10003}, 0x102801, 0x9, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8000000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000003900070101000000fbdbdf25047c00"], 0x2c}, 0x1, 0x0, 0x0, 0x24000005}, 0x2000c004)
fsopen(&(0x7f00000001c0)='configfs\x00', 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r6, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x1000)
setsockopt$inet6_tcp_int(r6, 0x11a, 0x5, &(0x7f0000000000)=0x3f9, 0x2)
connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e)
r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002cbd7010fddbdf2505000000080009000200000008000c00a80a0000060001000500000008000b"], 0x3c}}, 0x20000034)

11.090216634s ago: executing program 33 (id=5281):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x20010, r1, 0xda503000)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', <r2=>0x0})
bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x81, 0x6, @remote}, 0x14)
r3 = fspick(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000200), 0x1, 0x569, &(0x7f00000002c0)="$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")
read$usbmon(0xffffffffffffffff, &(0x7f0000001180)=""/239, 0xef)
fsconfig$FSCONFIG_SET_FD(r3, 0x5, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x10003}, 0x102801, 0x9, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8000000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000003900070101000000fbdbdf25047c00"], 0x2c}, 0x1, 0x0, 0x0, 0x24000005}, 0x2000c004)
fsopen(&(0x7f00000001c0)='configfs\x00', 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r6, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x1000)
setsockopt$inet6_tcp_int(r6, 0x11a, 0x5, &(0x7f0000000000)=0x3f9, 0x2)
connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e)
r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002cbd7010fddbdf2505000000080009000200000008000c00a80a0000060001000500000008000b"], 0x3c}}, 0x20000034)

3.448048502s ago: executing program 4 (id=5333):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
syz_open_procfs(0x0, &(0x7f0000000200)='task\x00')
socket$can_bcm(0x1d, 0x2, 0x2)
semctl$GETALL(0x0, 0x0, 0xd, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d32, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x7, 0x830b}, 0x110202, 0x5, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r3 = socket$kcm(0x2, 0x200000000000001, 0x0)
socket$inet6(0xa, 0x3, 0x7)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_bp={0x0, 0x1}, 0x2002, 0x1000, 0x7, 0x7, 0x9, 0x2, 0x3, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4)
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x8, 0xf60e}, 0x154b8, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0x8)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x1008002, &(0x7f0000000d00)={[{@grpjquota}]}, 0x3, 0x5ee, &(0x7f0000000280)="$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")
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)
fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="94010000100001002dbd700000000000ff020000000000000000000000000001ac141411000000000000000000000000fffeecdf000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0a010101000000000000000000000000ffffffff32000000ffffffff000000000000000000000000fefffffffffffffffeffffffffffffff030000000000000000000000000000000000000000000000feffffffffffffff00000000000000000900000000000000fdffffffffffffff0408400000000000090000000000000092020000000000000000b01c050000000000000000000000000000000a0002002c00000000000000580002006362632863616d656c6c696129000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000003ae0bd000b000000366a6a849a7390454c001400686d61632873686132353629"], 0x194}}, 0x44050)
r5 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="020a030002000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0)

2.578651679s ago: executing program 5 (id=5342):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0xfe, 0x250, &(0x7f0000000300)="$eJzs3T9oJFUcB/DvzO565m7RUxtB/AMiooFwdoLN2SgcyHGICCqciNgod8J5h11iZWOhtUoqmyB2RktJE2wUwSpqitgIGiwMFlqs7M4G8mc1ZnfdkcznA5OZybyZ3xt2vm+3ebsBGutskvNJWknmk3SSFHsb3FctZ4e7y3Prl5Ne7+lfi0G7ar+ye96ZJEtJHk2yVhZ5tZ3cWH1+6/eNJx9853rngY9Wn5ub6U0ObW9tPrXz4cW3P73wyI2vv/35YpHz6e67r+krRvyvXSS3/xfF/ieKdt094N+49OYn3/Vzf0eS+wf576RM9eK9e+2mtU4e/uDvzn3vl2/ummVfgenr9Tr998ClHtA4ZZJuinIhSbVdlgsL1Wf471uny9euXntj/pWr16+8XPdIBUxLN9l84vNTn505kP+fWlX+gZOrn/9nLq380N/eadXdG2Am7q5W/fzPv7j4UOQfGkf+obnkH5pL/qG55B+aS/6hueQfTrDOPx+Wf2gu+Yfmkn9orr35BwCapXdqnFnDt05/IjIwc3WPPwAAAAAAAAAAAAAAAAAAwGHLc+uXd5dxr1Ecs/2X7yfbjydpj6rfGvwecXLz4O/p34p+s3212uN2dOiFeye8wIQ+rnn29S0/1lv/q3vqrb94JVl6K8m5dvvw81cMn7/x3XbE8c5LExY4poP5fOzZ2dY/6M+Veutf2Ei+6I8/50aNP2XuHKxHjz/do79i+Uiv/zHhBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJiZvwIAAP//1rxsXQ==")
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a80)=@newtaction={0x74, 0x30, 0xb, 0x5, 0x0, {}, [{0x60, 0x1, [@m_ct={0x5c, 0x1, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @dev={0xac, 0x14, 0x14, 0x14}}, @TCA_CT_MARK={0x8, 0x5, 0x7}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8890}, 0x40)
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)

2.411918344s ago: executing program 5 (id=5343):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa07, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, @perf_bp={0x0, 0x8}, 0x90, 0x0, 0x0, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0xc8d0, &(0x7f0000000280)=ANY=[@ANYRES32=0x0], 0x1, 0x314, &(0x7f00000002c0)="$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")
r0 = socket$packet(0x11, 0x2, 0x300)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000000)={0x1}, 0x8)
sendmmsg$sock(r0, 0x0, 0x0, 0x8800)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140))
rmdir(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
syz_emit_ethernet(0x8e, &(0x7f0000000500)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x58, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x16, 0x42, 0x0, 0x0, 0x0, {[@fastopen={0x22, 0x2}, @sack_perm={0x4, 0x2}, @timestamp={0x8, 0xa, 0x0, 0x1}, @mptcp=@capable={0x1e, 0xc, 0x5, 0x8, 0xd0, 0x6}, @mss={0x2, 0x4, 0x5}, @md5sig={0x13, 0x12, "ba885a106943a3de301004248cc11502"}, @md5sig={0x13, 0x12, "5de3ddccb400"}]}}}}}}}}, 0x0)
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4db, 0x20081, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x8000, 0x8}, 0x12c2b, 0x4000, 0x8010ffe, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0xfffffffd, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
bind$netlink(0xffffffffffffffff, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4)
prctl$PR_SET_MM_MAP(0x3c, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x5, &(0x7f0000000200))
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x1, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x3, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffbfff, 0xffffffffffffffff, 0x9)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')

2.402727125s ago: executing program 4 (id=5344):
pipe(&(0x7f0000000400)={<r0=>0xffffffffffffffff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'lo\x00', <r4=>0x0})
sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="318300000000fedbdf2519000016b02067e41cd119d885aa2cb9abed000c000180080001004a6ae9e9354252da738341fb29d13a2fe5fd4e26f5bfdf39a5031dca082301d555a5dec779d3b41725eda41b38012e1e78eb05cec93edfb43c954bdca9c538a031583988798fa7627f7aa037726792e85d263705d8fa17a03a9083f97d3775e6e9", @ANYRES32=r4, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x841}, 0x4080084)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000001100)=@nat={'nat\x00', 0x62, 0x5, 0x1520, 0x1298, 0x1298, 0xffffffff, 0x0, 0x1180, 0x1488, 0x1488, 0xffffffff, 0x1488, 0x1488, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00', {0xff}}, 0x0, 0x10a0, 0x10d8, 0x0, {0x22e}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.net/syz0\x00', 0x9, {0x100000001}}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x4f00, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x3dc, {0x0, @rand_addr=0x64010102, @remote, @icmp_id, @gre_key}}}}, {{@ip={@broadcast, @rand_addr=0x64010100, 0x0, 0x0, 'veth1_to_team\x00', 'ipvlan0\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key, @icmp_id}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'pimreg1\x00', 'netdevsim0\x00'}, 0x0, 0x1b8, 0x1f0, 0x0, {}, [@common=@unspec=@comment={{0x120}}, @common=@icmp={{0x28}, {0x0, "6e82"}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1580)
connect$inet(r5, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10)
sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYRESDEC=r0, @ANYRES16, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f0000000000000000140002"], 0x54}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@ipv6_newaddr={0x18, 0x14, 0x2, 0x70bd29, 0x25dfdbfc, {0xa, 0x40, 0x0, 0xfe}}, 0x18}, 0x1, 0x0, 0x0, 0x33d3948374ee73f4}, 0x40)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0)
read(r8, 0x0, 0xfdef)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0xb}, 0x8)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_subtree(r9, &(0x7f0000000280), 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0x1000040, &(0x7f0000000600)={[{@nouid32}, {@jqfmt_vfsv1}, {@usrquota}, {@debug}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x624}}, {@nodioread_nolock}]}, 0x1, 0x5af, &(0x7f0000003e80)="$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")
r10 = socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @random="5a01f3c2f136", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @random="43b1849c32a1", @remote, @local, @empty}}}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r11=>0x0})
r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r10)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x11e0ec, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, 0x0, 0x0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r12, 0x48212b8952c3aff5, 0x70bd27, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x700)
truncate(&(0x7f0000000940)='./file1\x00', 0x8da6)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000840)=0x4b63, 0x4)

2.202028991s ago: executing program 2 (id=5345):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa07, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, @perf_bp={0x0, 0x8}, 0x90, 0x0, 0x0, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0xc8d0, &(0x7f0000000280)=ANY=[@ANYRES32=0x0], 0x1, 0x314, &(0x7f00000002c0)="$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")
r0 = socket$packet(0x11, 0x2, 0x300)
bpf$ENABLE_STATS(0x20, &(0x7f00000000c0), 0x4)
setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000000)={0x1}, 0x8)
sendmmsg$sock(r0, 0x0, 0x0, 0x8800)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140))
rmdir(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4db, 0x20081, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x8000, 0x8}, 0x12c2b, 0x4000, 0x8010ffe, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0xfffffffd, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
bind$netlink(0xffffffffffffffff, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4)
prctl$PR_SET_MM_MAP(0x3c, 0xe, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x1, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x3, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffbfff, 0xffffffffffffffff, 0x9)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[], 0x1, 0x30e, &(0x7f0000000f00)="$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")
openat(0xffffffffffffff9c, 0x0, 0x40, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')

1.993452488s ago: executing program 5 (id=5349):
syz_emit_ethernet(0x5e, 0x0, 0x0)
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
r1 = perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000001ff, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x8, &(0x7f0000000d40)=ANY=[@ANYBLOB="b4000000000000001e10000000", @ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000540)=0x7)
sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB=' ', @ANYRES16=r0, @ANYBLOB="31830000000000000000190000"], 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x4008800)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/oops_count', 0x303602, 0x0)
mq_notify(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0xc, 0x1, @thr={&(0x7f0000000ac0)="8db15e93c5d879447f21fc3e4d29e67e3a541d3e707f662c82524d35c33a969a322725049bfc9705526faca8a8f1d52a694ff3bbb31cd1fa5a4a6cd6901f5b48ddc3208d85b709cb0c6260402dd6a7a82d8b2ff64247d70eefacda2c0933414fde751b59cfb0b32cb7022129d12d44c42059fc9954f2200b64b9ea065bd7379ae342b07d7f1a54038ecd781d53ea5a41e327577fdab04bb438b7e164688892f5a6b080d9ec", 0x0}})
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140))
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="7472616e733d46642c7266646e6b3de4f87e99b19c9e31814dcc41d60441682741999457611cdf53301ea499e3e185be0f8f63b4d865b1ca0fe126f74663f826381e88241c9d4b2a0073c6e7b3c8450ea103d7b175adc5aac123f173853767aa79253cd5ab123a26d4dd7e20975d48687f27fbdd3499dab912da8e6f91fcad817a00d269c718b54dbcbcf248fcd9b04fb1f7a572783dc68e57e4c13a37ddd83511dbcedb6d9e4084", @ANYRESHEX=r2, @ANYBLOB=',\x00'])
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x200040c4)
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x8a, &(0x7f0000000b00), 0x1, 0x47e, &(0x7f0000000640)="$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")
fchmodat(0xffffffffffffff9c, 0x0, 0xffffffd3)
mknodat$null(0xffffffffffffff9c, 0x0, 0x1d4e, 0x103)
shmat(0x0, &(0x7f0000be5000/0x7000)=nil, 0x3000)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x88000cc, 0x0)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0)
write$cgroup_int(r3, &(0x7f0000000040)=0x900, 0x12)

1.716057796s ago: executing program 2 (id=5350):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='veth0_to_hsr\x00', 0x10)
syz_emit_ethernet(0x45, &(0x7f0000000200)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @empty}, "00186371ae9b1c"}}}}}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0)
ioctl$TUNSETLINK(r1, 0x400454cd, 0x2)
r2 = getpid()
syz_pidfd_open(r2, 0x0)
prlimit64(r2, 0x7, &(0x7f0000000080)={0x27cd}, &(0x7f0000000340))
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2e}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x34}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03310044268ceab89e14e008", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
close_range(r1, r1, 0x2)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{0x1, <r4=>0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)='%ps    \x00'}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{}, &(0x7f00000004c0), &(0x7f0000000500)=r3}, 0x20)
bpf$TOKEN_CREATE(0x24, &(0x7f00000006c0)={0x0, r1}, 0x8)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'vlan0\x00', <r6=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r7=>0x0})
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x200005}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xe}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r6}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040080}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x10, 0xc, &(0x7f0000000580)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x69, 0x10, 0x32, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @map_val={0x18, 0x0, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x5}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x7}]}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', r7}, 0x94)
r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00'}, 0x94)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="3400009c305e96978e958e1000010800000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000011000000c002b8008000100", @ANYRES32=r9, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0)

1.514505693s ago: executing program 4 (id=5352):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000005c0), 0x88400)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000600)={{0x1, 0x1, 0x7, 0x3}, 0x1, 0x405})
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="03000000040000000400000009"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x4, @perf_config_ext={0x8, 0x830d}, 0x102302, 0x3, 0xfefffffa, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00')
preadv(r4, &(0x7f0000002780)=[{&(0x7f0000000100)=""/80, 0x50}], 0x1, 0xe97, 0x0)
sendmsg$nl_route(r2, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, 0x0)
write$P9_RGETLOCK(r4, &(0x7f0000000340)={0x29, 0x37, 0x2, {0x2, 0x5, 0x7ff, 0x0, 0xb, '/dev/ttyS3\x00'}}, 0x29)
ioctl$NILFS_IOCTL_GET_CPINFO(r1, 0x80186e82, &(0x7f0000000200)={0x0, 0x0, 0x38, 0xe226bc096f894daf, 0x2})
socket$inet6_sctp(0xa, 0x1, 0x84)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000e, 0x6c2f2, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil)
r5 = socket$inet(0x2, 0x1, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0)
ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSSOFTCAR(r6, 0x5453, 0x0)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x4a, &(0x7f00000a2000)={0x0, 0x0}, 0x10)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0)

1.377807597s ago: executing program 4 (id=5354):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0xfe, 0x250, &(0x7f0000000300)="$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")
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a80)=@newtaction={0x74, 0x30, 0xb, 0x5, 0x0, {}, [{0x60, 0x1, [@m_ct={0x5c, 0x1, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @dev={0xac, 0x14, 0x14, 0x14}}, @TCA_CT_MARK={0x8, 0x5, 0x7}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8890}, 0x40)
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)

1.366756068s ago: executing program 5 (id=5355):
socket(0x40000000015, 0x5, 0x0)
add_key(&(0x7f0000000300)='dns_resolver\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000200)="75a1d70300", 0x5, 0xfffffffffffffffe)
syz_mount_image$ext4(&(0x7f0000000b80)='ext2\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000380)={[{@dax_always}, {@nodiscard}, {@journal_checksum}, {@minixdf}, {@oldalloc}, {@usrquota}]}, 0x1, 0xb87, &(0x7f00000017c0)="$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")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x80, 0x7, 0x4, 0x6, 0x8001, 0x3fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000bc0)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac539985bac8624c50b527c68b0ff250261953f2da79a78104c2d0000000086b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2d2462d0bb25fff9d3b1ce903597992b2a4d59e5ac2d704fa2595b5d36400d0b2d119796726a223f5739e45568cfdbdb3064d01bf9cd033e5e0907b2eb410b7cf31951394c247", 0xe4}], 0x2}}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000001500)="24acadd7f04daaa04e88680351d9ce53f67fd2afefe557d4bd561f02df2570f175951d4bdd97ec433ec583c79fa668922a61c8662e0890ce06996f5ba401e582dfb5197822bee50c6cd4b3a6f9d14f1fde9b1698ad6847d4fde0458282ece396a1e212cd02e6fb62599df5ecb5984843ee04e96eb26fa2a8100a0b7b2d032fff965485ded83b39d6c9835416a8db5414a6c54101693e6b05e652b49fceaf4a0cc2b7898034ff0eb5150b3e85b9ff5658ba346d0b6b5a3a71eb084311606cf6b8ccf7c45a79b319a201e9c5ae9f0aab5c4dd7a77de7f5ae2edb307892dbfa8377446d8cabb9302b27250c66ddaeb3988933df044b6ae4570671cf861484b9124827dbe78a0388eecac9e6ad371287ca014fa658c6f1308b046b2fc0cc3d5b8ba48f3b1319d5976bb45f3c630f01c77b93f07fe2b304a98383258a37791da00145e24f619c5dd07939c39212ca7d8421dcf50ab703f86dacf4a4159a123d25a7a9ad2319a876af43da4cf86b0f6a7f261562e1b10681a71d941a5e90031452e37f4a616b85fe6b48803cbca2369565be720ef5fd1e6326234c34f6e13ba39f9460acc68e15eef508e402b29e452883c90b50b04d66ad07cb689d31426147a965dd4691519d844bfc83d830b8c5a679c41fbdcc2d16b3dcecc1f5be156f96fa2a315c68bfd1ebba95e9de0e3cdf7ad8e93b92cda3c4643ca88fcd710c1a24d0d62b54d937f2fbe7aa09ba34c71a17eefa0dba2d4752ae91850d734be15b1f2f5e36856786f5cf0afec24a46634f8d5aec6008c1ace1e404af77c8f4d37283847349ac22f6703d44fb66cec0ceb9390cf2f878d8390ecd8fbeb82a6ccd966bca4c4689a2e2a850a30dfa7c0c19ecec0c799e2880d2088ece8401306bfa4b34da709caa802c8f9d6deb5b599d262faa7de40de113c89a8e8e3a4f19ac1847387be89e27286e20dd49339021e79ddb0cf3bf72fcc25f3b7d35ca05c4473521320b1a6bee637e4f4da9692506931df8f990ed54e23000030d26f30c8ee3ace6c9d5795b7443aa0651ecb2b64549d4bd4bea0ed0f69e69291057bf7c3b92ad0a8ec4e5acf31c4ed8c372f1bd9b0bf6c51a7a29915fc2e5a24c36599612fd4527870ea6c7057f87c105c73386f738f98165cb8bac0d2ce46eeb7e39d9f3c2d93e4910d231ce946d65120f2bd4842ed181261c0ea728b06e6155944b6c3554d553724c5419d45f633d97bc59889ed7a4df1d35cc9bede168d3d8dca779293dd9564877b009d93c99a7a0f983e33e937bfb13b06e611c8c33313821f110e6911643cfabc2c75c42af256a07c8fee22c7795cb5a57dda8df2b668d893dd7a6bbfada01b49c6c96156bd5ebc10f16fd30579fa059207c4c9f69fff76a3e83839697324adc1037b64db5fe6f55a72fc9311a414c8848885071620e2c7539e6ac2684785ce04bba9785b4571e183bc12fdad8d58e57d0355c4082fbe08fdb8feedd6d3d6f7f586f22b06069ed48b931c7cbc2eca14b2e649432953a9ef28928450ca8907b90fce815cdfecf28816817e72fa25317324b64ff7259d1a2bb9ef8469048f652fd47638060a26a48ff9e05a1fc6fed416d5a0f461cb111ce1cc9cdd38032c30e7c6b520274d638ddd69ef1c08d8c66b134", 0x48e}], 0x1}}], 0x2, 0x2090)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)
r1 = socket(0x10, 0x803, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000cc0)=@newsa={0x194, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@loopback, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x4, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x1d}, {@in6=@private1, 0xfe, 0x32}, @in6=@empty, {0x1, 0x0, 0xfffffffffffffffd, 0x8, 0x1, 0x9, 0x7fffffff, 0x543}, {0x4, 0x7fffffffffffffff, 0xfffffffffffffffc, 0xebe2}, {0x2, 0xffffffff}, 0x70bd2c, 0x3500, 0x2, 0x1, 0x0, 0x50}, [@encap={0x1c, 0x4, {0x7, 0x4e24, 0x4e20, @in=@dev={0xac, 0x14, 0x14, 0x2e}}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd27, 0x70bd28, 0x70bd25, 0x70bd2c, 0x1, [0x3]}}, @replay_thresh={0x8, 0xb, 0x8}]}, 0x194}, 0x1, 0x0, 0x0, 0x4800}, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

1.172432163s ago: executing program 4 (id=5356):
unshare(0x6a040000)
r0 = syz_usb_connect$uac3(0x6, 0xd5, &(0x7f0000000000)={{0x12, 0x1, 0x10, 0x0, 0x0, 0x0, 0x40, 0x582, 0x3b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc3, 0x3, 0x1, 0x0, 0xc0, 0x1, {0x8, 0xb, 0x1, 0x0, 0x1, 0x21, 0x30, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x1e, 0xa}, [@multiply_unit={0xb, 0x24, 0xd, 0xfe, 0x9, 0x9, 0x2}, @extension_unit={0x9, 0x24, 0xa, 0x2, 0x1, [0x2]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x1, 0x3, 0x40, 0x7, '-'}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x40, 0x3, 0xcc, 0x4, "d013f7", "a4"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0xec, 0x8, 0x3, {0xa, 0x25, 0x25, 0x7b4b, 0x4, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x6, 0x2, 0xf3, 0x26, '8\\{'}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xc7d, 0x3, 0x0, 0xff}, @as_header={0x17, 0x24, 0x1, 0x1, 0x9384, 0x1, 0x1, 0xfb, 0x7, 0x7, 0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x10, 0x3, 0x52, {0xa, 0x25, 0x25, 0x1, 0x8, 0x800}}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x0, 0xff, 0x10, 0x10, 0x28, 0x3}, 0x8, &(0x7f0000000140)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x4, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x1007}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x380a}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x2401}}, {0x12, &(0x7f0000000240)=@string={0x12, 0x3, "6dae2f0f86d01fca758b4bd47827859a"}}]})
syz_usb_disconnect(r0)
socket$packet(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff07000000000000000000008500000011000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200f808000000b70300000000000085000000720000009500000000000000"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000202010100000000000000000a0000082c000280140001"], 0x40}, 0x1, 0x0, 0x0, 0xc005}, 0x20040800)

990.011169ms ago: executing program 1 (id=5359):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa07, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, @perf_bp={0x0, 0x8}, 0x90, 0x0, 0x0, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0xc8d0, &(0x7f0000000280)=ANY=[@ANYRES32=0x0], 0x1, 0x314, &(0x7f00000002c0)="$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")
r0 = socket$packet(0x11, 0x2, 0x300)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000000)={0x1}, 0x8)
sendmmsg$sock(r0, 0x0, 0x0, 0x8800)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140))
rmdir(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
syz_emit_ethernet(0x8e, &(0x7f0000000500)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x58, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x16, 0x42, 0x0, 0x0, 0x0, {[@fastopen={0x22, 0x2}, @sack_perm={0x4, 0x2}, @timestamp={0x8, 0xa, 0x0, 0x1}, @mptcp=@capable={0x1e, 0xc, 0x5, 0x8, 0xd0, 0x6}, @mss={0x2, 0x4, 0x5}, @md5sig={0x13, 0x12, "ba885a106943a3de301004248cc11502"}, @md5sig={0x13, 0x12, "5de3ddccb400"}]}}}}}}}}, 0x0)
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4db, 0x20081, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x8000, 0x8}, 0x12c2b, 0x4000, 0x8010ffe, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0xfffffffd, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
bind$netlink(0xffffffffffffffff, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4)
prctl$PR_SET_MM_MAP(0x3c, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x5, &(0x7f0000000200))
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x1, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x3, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffbfff, 0xffffffffffffffff, 0x9)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')

775.307336ms ago: executing program 2 (id=5362):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x1c, 0x18, 0x1, 0x70bd2d, 0x3000000, {0x2, 0x20, 0x10, 0x0, 0xfd, 0x0, 0xfd}}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x80000)

765.112916ms ago: executing program 1 (id=5363):
socket$key(0xf, 0x3, 0x2) (async)
socket$key(0xf, 0x3, 0x2) (async)
r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x28, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x400000, 0x0, 0x1}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x10) (async)
r1 = socket$igmp(0x2, 0x3, 0x2) (async)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async, rerun: 64)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (rerun: 64)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b3e, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x36, 0x100, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, r0, 0x0) (async, rerun: 64)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (rerun: 64)
munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) (async)
r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
syz_usb_disconnect(r3)
syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100030000004025bf3325d35970898a0109021b00010108100109040040020701030409050102400005041a"], 0x0)
ioctl$EVIOCRMFF(r3, 0x40085507, &(0x7f00000000c0)=0x18)
r4 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x100102, 0x72e7334ada1c82d6)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="18460000fbffffff0000000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="000000000000b70500000800000085000000a5000000"], &(0x7f0000000300)='GPL\x00', 0x4, 0x76, &(0x7f0000000340)=""/118, 0x0, 0x1, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0xf, 0x5, 0x400}, 0x10, 0x27694, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000440)=[{0x5, 0x2, 0xb, 0xa}, {0x3, 0x0, 0x4}], 0x10, 0x1}, 0x94) (async)
setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000000), 0x4) (async)
r5 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, 0x0, &(0x7f0000000180))
setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_ifindex, @remote}, 0x10) (async, rerun: 64)
r6 = socket$packet(0x11, 0x3, 0x300) (rerun: 64)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', <r7=>0x0})
setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000000)={r7, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, 0x10) (async)
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040))
getdents64(r8, &(0x7f0000000780)=""/166, 0xa6)
openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x181000, 0x0)
r9 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)
r10 = fcntl$dupfd(r9, 0x0, r9)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r10, 0x8108551b, &(0x7f0000000000)={0x100, 0x1, "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"})

711.715137ms ago: executing program 1 (id=5364):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000005c0), 0x88400)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000600)={{0x1, 0x1, 0x7, 0x3}, 0x1, 0x405})
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="03000000040000000400000009"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x4, @perf_config_ext={0x8, 0x830d}, 0x102302, 0x3, 0xfefffffa, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00')
preadv(r4, &(0x7f0000002780)=[{&(0x7f0000000100)=""/80, 0x50}], 0x1, 0xe97, 0x0)
sendmsg$nl_route(r2, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, 0x0)
write$P9_RGETLOCK(r4, &(0x7f0000000340)={0x29, 0x37, 0x2, {0x2, 0x5, 0x7ff, 0x0, 0xb, '/dev/ttyS3\x00'}}, 0x29)
ioctl$NILFS_IOCTL_GET_CPINFO(r1, 0x80186e82, &(0x7f0000000200)={0x0, 0x0, 0x38, 0xe226bc096f894daf, 0x2})
socket$inet6_sctp(0xa, 0x1, 0x84)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000e, 0x6c2f2, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil)
r5 = socket$inet(0x2, 0x1, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0)
ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSSOFTCAR(r6, 0x5453, 0x0)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x4a, &(0x7f00000a2000)={0x0, 0x0}, 0x10)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0)

708.136368ms ago: executing program 1 (id=5365):
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000080)={0x40, 0x16, 0x303, 0x4, 0x0, 0xec, 0x0})

655.4767ms ago: executing program 1 (id=5366):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa0000010}, 0xc, 0x0}, 0x20)

655.09199ms ago: executing program 1 (id=5367):
ioprio_set$uid(0x3, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000180), 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000500), &(0x7f0000000600)="bb67781d9176df02bee8323a549f5aa2cae7affb19d820b4ab586210e323c867c17358cc0f", 0x66, r3}, 0x38)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x2000002, 0xe, 0x0, &(0x7f00000004c0)="df034affffffffffff0000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x3, 0x401}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x6d82d2b6}, 0x38)
socket$nl_rdma(0x10, 0x3, 0x14)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6000000002060500000000000000000007000001140007800800114000000000080012400000ffff0500010006000000050005000a00000005000400000000000900020073"], 0x60}, 0x1, 0x0, 0x0, 0x400c084}, 0x20004000)
syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xb7}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$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")
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[@ANYBLOB="4c0000001000010400000000000000000b000000", @ANYRES32=0x0], 0x4c}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)

589.937142ms ago: executing program 2 (id=5368):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="ac04af3af81ea9dd68bcf7ac67000000000000020600000000000002"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x80040)

589.137462ms ago: executing program 2 (id=5370):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000009800000001"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x9, &(0x7f0000000400)=ANY=[@ANYRESOCT=r1, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000002850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x25, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$inet(0x2, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_deladdrlabel={0x38, 0x49, 0x1, 0x70bd29, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0x0, 0x70000}, [@IFAL_LABEL={0x8, 0x2, 0x3}, @IFAL_ADDRESS={0x14, 0x1, @remote}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4004050)
r4 = socket(0x400000000010, 0x3, 0x0)
write(r4, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030011000500e1000c040007031a000900", 0x33a)
r5 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_FLAG(r5, 0x5, &(0x7f0000000200)='lazytime\x00', 0x0, 0x4)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_opts(r6, 0x0, 0x80000000000008, &(0x7f0000000240)='~', 0x1)
setsockopt$inet_opts(r6, 0x0, 0xc, &(0x7f0000000000)="c1", 0x1)
getsockopt$inet_opts(r6, 0x0, 0x9, &(0x7f00000001c0)=""/17, &(0x7f00000000c0)=0x11)
r7 = syz_open_procfs(0x0, 0x0)
renameat(r7, &(0x7f0000000040)='./file0\x00', r7, 0x0)
ioctl$BTRFS_IOC_GET_FEATURES(r3, 0x80189439, &(0x7f0000000100))
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x3, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r2)
socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8006f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0xfffffffc, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
getuid()
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_TX(r8, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0xf88ce2e0571bc7ea}, "0000000000000208", "5171bb74cd3660dab9e200", "d8a024e5", "00000300"}, 0x38)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000000000000000000170000004c0006803c00040067636d28616573290000000000000000000014000700e3de3d7b4cd07ec3ee777de774fc7987cca419890400050008000600ffffff00"/89], 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4000004)
setsockopt$inet6_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
setsockopt$inet6_tcp_int(r8, 0x6, 0x4, &(0x7f0000000040)=0x5, 0x4)

530.691363ms ago: executing program 6 (id=5371):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', <r1=>0x0, 0x3f00, 0x40, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}}}})
r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x88000, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x0, 0xec2bd, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x7, 0x800000000100}, 0x2402, 0x0, 0x43a1bd78, 0x7, 0x9, 0x10006, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffc46f}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xb)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r5)
sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="bbfb2a9d2029db1ec5386b00"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x80)
pidfd_getfd(r2, r0, 0x0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='uid_map\x00')
writev(r8, &(0x7f0000000200)=[{&(0x7f0000000100)="01e132", 0x3}, {&(0x7f0000000180)}], 0x2)
setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @remote, 0x4e21, 0x3, 'rr\x00', 0x11, 0x4}, {@loopback, 0x4e23, 0x10000, 0xffffffff, 0x12d5c, 0x12d5c}}, 0x44)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000240)={<r10=>0x0, 0x800, 0x0, [0x2, 0x1, 0xd3, 0x7, 0x1], [0x81, 0x8, 0xad, 0x4, 0x685, 0xfff, 0x5, 0x1, 0x2, 0x9, 0xee, 0x3, 0x6, 0x5, 0x8000, 0x800, 0x5, 0x6903, 0x4, 0xfffffffffffffffb, 0x2, 0xffff, 0x8, 0x2, 0x3, 0xfffffffffffffffc, 0x4, 0x8, 0x4, 0x7, 0x5, 0xe, 0xf, 0x10000, 0xffffffffffffffc5, 0x401, 0x6c49, 0x7, 0x100000001, 0xff, 0x9c73, 0xb8a4, 0x70, 0x2, 0x4, 0x4, 0x4, 0xe4a, 0x400, 0x9, 0x4, 0xb0e, 0xb18, 0xffff, 0x0, 0xd7e, 0x3591, 0x800000000000c, 0x8, 0x7, 0x1000, 0xe7, 0x7, 0x10001, 0xfffffffffffffffc, 0x3e, 0x200, 0x3, 0xffffffffffffffff, 0x2, 0x423, 0xbb15, 0x93ec, 0x3909, 0x8, 0xfffffffffffeffff, 0xfffffffffffffffa, 0x0, 0x1ff, 0x80000000, 0x8001, 0x7, 0x48, 0x0, 0x0, 0x1, 0x9, 0x1, 0x5, 0x7fff, 0x2a4, 0x8, 0x8, 0x7fffffff, 0xfffffffffffffff0, 0x3, 0x6, 0x7903, 0x8, 0x74bbf2dc, 0xffffffff, 0x7c3, 0x7, 0x0, 0xb, 0x8000000000000001, 0x7ff, 0xe01e, 0x4, 0x101, 0x39, 0x3, 0xb87d, 0x9, 0x16d, 0x10000, 0x5, 0x101, 0x9, 0x2, 0x100]})
ioctl$BTRFS_IOC_DEV_INFO(r8, 0xd000941e, &(0x7f0000001080)={r10, "a5286eaccc1885410fab425e317bb076"})
setsockopt$inet_mreqn(r9, 0x0, 0x24, &(0x7f0000000080)={@dev={0xac, 0x14, 0x14, 0xd}, @multicast1, r1}, 0xc)

495.016795ms ago: executing program 5 (id=5372):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='veth0_to_hsr\x00', 0x10)
syz_emit_ethernet(0x45, &(0x7f0000000200)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @empty}, "00186371ae9b1c"}}}}}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0)
ioctl$TUNSETLINK(r1, 0x400454cd, 0x2)
r2 = getpid()
syz_pidfd_open(r2, 0x0)
prlimit64(r2, 0x7, &(0x7f0000000080)={0x27cd}, &(0x7f0000000340))
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2e}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x34}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03310044268ceab89e14e008", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
close_range(r1, r1, 0x2)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{0x1, <r4=>0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)='%ps    \x00'}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{}, &(0x7f00000004c0), &(0x7f0000000500)=r3}, 0x20)
bpf$TOKEN_CREATE(0x24, &(0x7f00000006c0)={0x0, r1}, 0x8)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'vlan0\x00', <r6=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r7=>0x0})
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x200005}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xe}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r6}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040080}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x10, 0xc, &(0x7f0000000580)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x69, 0x10, 0x32, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @map_val={0x18, 0x0, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x5}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x7}]}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', r7}, 0x94)
r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00'}, 0x94)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="3400009c305e96978e958e1000010800000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000011000000c002b8008000100", @ANYRES32=r9, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0)

395.874198ms ago: executing program 2 (id=5373):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001400add427323b472545b45602117fffffff81000e224e227f000008925a8e0013007b000b00984d000000000000008100ff0000f03a86100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
ioctl$NILFS_IOCTL_SET_SUINFO(r0, 0x40186e8d, &(0x7f0000000180)={&(0x7f0000000080)=[{0xffffffffffffffc0, 0x0, 0x0, {0xb, 0x40000, 0x2}}, {0xfffffffffffffffb, 0x2, 0x0, {0x1, 0x800, 0x1}}, {0x5, 0x1, 0x0, {0x5, 0x101, 0x2}}, {0x8, 0x0, 0x0, {0x6, 0x0, 0x1}}, {0x0, 0x1, 0x0, {0x3, 0x100, 0x1}}, {0x65, 0x0, 0x0, {0x1000, 0x6, 0x1}}, {0x5, 0x0, 0x0, {0x4, 0x9, 0x2}}, {0x1877687b, 0x1, 0x0, {0x6, 0x8, 0x1}}], 0x8, 0x20, 0xb1, 0x7fffffffffffffff})
r2 = syz_open_dev$sg(&(0x7f0000000600), 0xecd, 0x800)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
setfsuid(0xee00)
ioctl$SG_GET_RESERVED_SIZE(r2, 0x2272, &(0x7f0000000640))
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0)
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x4)
syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000)
r3 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
ioprio_set$pid(0x2, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
preadv2(r5, &(0x7f0000000440)=[{&(0x7f0000000280)=""/238, 0xee}], 0x1, 0x0, 0x7, 0xe)
write$binfmt_misc(r4, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}})
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x10)
syz_usb_connect$uac1(0x2, 0xd5, &(0x7f0000000400)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc3, 0x3, 0x1, 0x3, 0xe0, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x29}, [@extension_unit={0xb, 0x24, 0x8, 0x2, 0x5, 0x3, "34eef0b7"}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x302, 0x6, 0x4, 0x9a}, @extension_unit={0xb, 0x24, 0x8, 0x4, 0xe, 0xa, "52a3a950"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x2, 0xb, 0x8, "1373bc"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x5, 0x2, 0x1, 0x9, "0d14a994e9c8e0"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x5, 0x9, 0x7f, 0x2, 0xc5}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x6, 0x4, 0xac, 0x9, "62ad14", "c4e7"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x8, 0xed, 0x6, 0x9, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x7f, 0x3, 0x8, {0x7, 0x25, 0x1, 0xc, 0x20, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x4, 0x885d, 0x9, 0x88}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x24, 0x1, 0x27, {0x7, 0x25, 0x1, 0x0, 0x7, 0xff56}}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x150, 0xf, 0x3, 0x9, 0x20, 0x8}, 0x19, &(0x7f0000000540)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "935bf9cee64f46c1a1483f3a6f0e6078"}]}, 0x1, [{0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x41e}}]})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
write$tun(r7, &(0x7f0000000d80)={@val={0x0, 0x800}, @val={0x3, 0x5, 0x7, 0x7, 0x80, 0x6}, @eth={@remote, @remote, @val={@val={0x88a8, 0x2, 0x0, 0x1}, {0x8100, 0x7, 0x0, 0x1}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x15, 0x3f3, 0x65, 0x0, 0x2, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}, @loopback}, {0x4e23, 0x4e24, 0x3df, 0x0, @opaque="ade6f3e41b77e87dedb79216936acfc17e345da970aa0f680bfa0a57cef7c911422eaa95b173a08f79d169e17d66a95a505530892f566eaff24fc0af64d7a1ba914cc89d11ec9dbe633557cd95b0c55200ca995cec3d9f42ea1f62d776354b59f556510edd6e60dc3409a97d4caedef55d51eaa211852abccbdc7273cb8144a778e9207a77b08fb782a8044d386c62452889f29bc18b23fd9feef83b559347250f939587d438d4bfe717bf51eafd336df9407310215adf5ff95307dc19cd85b22c0598fb95123e208869795d48ac0e55d60ae41f54c16b22e57e0568b23d16ae343e1f6552bf050810c3f700a0ca01f5dbc2cebbe72e9312ac9f43205ae9840e4038dec3f17c6a6c910824f78b5e643807a61451eb00be634dcc9a44f8209d405da8c6cbc6bacd7dac39972a99ea6b8db0292eb94a733bf81ec098f3a6c69d36f5f0d72f6b11cd2e58cebc5c2746cf67e6923730d91e13b7208efb78426d0feadc8a7524a6ef45eac098adcc677a93e560463b9e4ffff25de985f648e8b622d050d14a8cf8ec7a3f003774e0f1866520bf17a8cd3132478215685a3e70013d975b2655652e43deed93ccc30ec17705f76724b8092a97b93d8e7b7bd84b785fa25e0638176337694daf1ba24ecd530c80b510c22526494a2888c475e29ea77bb1778db733abe6e5e9b4f0ebc627769f4f42dc00a32aefc135dbdd7d4e3427e1b3b90f4952d262d390a7b00627bb591b7d78082e51f50e8b936c552a09d25fa674fcaa73d24a1655293260198d63baca71233dafe36414f8532beb51cebfecea021dff84995e06deb01a1d3447d3bc0606bb4f01b0913732492218048bb7a65b7d4ed97752a8c19c016eb2a48ee2122f8d1e3933e6ceb65851e5caef7bc4318bd6140adced12f08e6c2f526673af91107226815a7ae2669b6c8ec1e6d9b79340f76d87b5bab9cff1abb76c36f0ef35533e62f58241a3ce85c90df6a43a430cd0fb4db83395788b74ee4637f8c886296ebcf349a8499c8df3342a218f6dcf12fa8469d58a3ad6b500cdd08c12ae4f01eca33b6a2878bfcfe385d7ad2c40596e9caee3d763d5dbfeaea84d9a2f684b6794daf42c1f6aacb1c2cce4ae8d1ff5400b48831103c463342e13fde6b373b6e0b47c7ee0c9c794b5383ba738c9ccca7a68feaf43a301a26a1d081723ebf298c0e2c6c5ecbb6cc8f2188a4f5e3d8f3157cb463e9a13f32dfca3c35146108fe91cdf6324622a62526725e9cd08f79caf80538c36e504f9a09b33048b7df489652fbf3cff42c326614de9ad2cc8460d3a4dc80663fdb0c68bb094f33b4b1d0e1f87fb268aa4b88fd9cc861139b3e4795dfe1f2fc8d7192930e9b94561bac20cb4d7f23141895783956be8"}}}}}}, 0x417)
r8 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
dup2(r8, r6)

395.382667ms ago: executing program 6 (id=5374):
r0 = syz_open_dev$loop(&(0x7f0000000240), 0x41, 0x1c0862)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xcc, r2, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:tmpreaper_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, @NLBL_UNLABEL_A_SECCTX={0x22, 0x7, 'system_u:object_r:devlog_t:s0\x00'}]}, 0xcc}, 0x1, 0x0, 0x0, 0x80}, 0x4004800)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000040)={0xffffffffffffffff, 0x1000, {0x0, 0x0, 0x0, 0x0, 0x4000000000001001, 0x0, 0x0, 0x8, 0xc, "faf98317e5a1149989fc8dbe53ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a8a0f3500000000000000000e00", "32d8cc26f7061a74df2cfc72c89f3d9e234b30c50997d3bcf409ff2176ff7bfe55cd4a5d83cd4a5249d3ffe70c7f3f800b2f1c6aa54cc50a1fcaed33ba1fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce2, 0x200006]}})
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x238, 0xc8, 0x8, 0x238, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x218, 0x238, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@devgroup={{0x38}, {0xc, 0x61f4, 0x10000, 0xc, 0xffff}}, @common=@rt={{0x138}, {0x6, [0x2, 0x6], 0x6, 0x20, 0x6, [@rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, @dev={0xfe, 0x80, '\x00', 0x2e}, @private0, @dev={0xfe, 0x80, '\x00', 0x34}, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, @dev={0xfe, 0x80, '\x00', 0x15}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @mcast2, @private1, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0xc}, @private0={0xfc, 0x0, '\x00', 0x1}], 0x7}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x4, 0x2, 0x100, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) (async)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc0042, 0x1)
close(r4) (async)
r5 = socket(0x1d, 0x2, 0x6) (async)
r6 = socket$packet(0x11, 0x2, 0x300)
ioctl$int_in(r6, 0x5452, &(0x7f00000003c0)=0xc) (async)
syz_emit_ethernet(0x3e, &(0x7f0000000400)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}}, @time_exceeded={0x5, 0xea452954ff7d0934, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0xd, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x33}, @empty}}}}}}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000040), 0x3000084, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r7 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket(0x4, 0x3, 0x81) (async)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) (async)
io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000680), 0x81, 0x482, &(0x7f0000001040)="$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") (async)
close_range(r8, r0, 0x0)

277.431091ms ago: executing program 4 (id=5375):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x9, 0x0, 0x0, 0x0, 0x8, 0xee2bd, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x9, 0x2, 0x0, 0x5, 0x0, 0xffffffffffffc46f}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xb)
ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000180)={{}, "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"})
socket$kcm(0xa, 0x3, 0x3a)
r1 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu<=0||(')
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001180)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a480000000000000000000a0000040900010073797a31000000000900020073797a32000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001000000000000d0c31d991c3f5aee69c29e72d00000007b971a0100000a"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3)
fchdir(0xffffffffffffffff)
r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f00000000c0)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x7998}, 0x8, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="e500000000000000791028000000000069003600000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48)
ioctl$USBDEVFS_REAPURB(r5, 0x4004550c, &(0x7f0000000380))
add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(0xffffffffffffffff, 0x0, 0xa)
fchdir(r6)
sendmsg$NFT_BATCH(r6, 0x0, 0x40)

232.121503ms ago: executing program 6 (id=5376):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000005c0), 0x88400)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000600)={{0x1, 0x1, 0x7, 0x3}, 0x1, 0x405})
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="03000000040000000400000009"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x4, @perf_config_ext={0x8, 0x830d}, 0x102302, 0x3, 0xfefffffa, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00')
preadv(r4, &(0x7f0000002780)=[{&(0x7f0000000100)=""/80, 0x50}], 0x1, 0xe97, 0x0)
sendmsg$nl_route(r2, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, 0x0)
write$P9_RGETLOCK(r4, &(0x7f0000000340)={0x29, 0x37, 0x2, {0x2, 0x5, 0x7ff, 0x0, 0xb, '/dev/ttyS3\x00'}}, 0x29)
ioctl$NILFS_IOCTL_GET_CPINFO(r1, 0x80186e82, &(0x7f0000000200)={0x0, 0x0, 0x38, 0xe226bc096f894daf, 0x2})
socket$inet6_sctp(0xa, 0x1, 0x84)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000e, 0x6c2f2, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil)
r5 = socket$inet(0x2, 0x1, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0)
ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSSOFTCAR(r6, 0x5453, 0x0)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x4a, &(0x7f00000a2000)={0x0, 0x0}, 0x10)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0)

199.589464ms ago: executing program 6 (id=5377):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa0000010}, 0xc, 0x0}, 0x20)

171.056554ms ago: executing program 6 (id=5378):
socket$inet6_icmp(0xa, 0x2, 0x3a)

170.381474ms ago: executing program 6 (id=5379):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000003f00)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1400040013000100000000080000000002000000"], 0x14}], 0x1}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), r2)
sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r3, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4000)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_tracing={0x1a, 0x3, 0x0, 0x0, 0x26, 0x0, 0x0, 0x1f00, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2c603, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x74}, 0x94)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
ioctl$FICLONE(r0, 0x40049409, r0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000100000d0000000000000000030000000000000000000001ff000000400000000000000000000003000000000200000002"], 0x0, 0x56, 0x0, 0x1}, 0x28)
unshare(0x2c020400)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r5 = dup(r4)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c0, 0x1d0, 0xc8, 0x8, 0x0, 0x5803, 0x2f0, 0x2e8, 0x2e8, 0x2f0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [0x0, 0x0, 0x0, 0xff], [0x0, 0x7ed2cfb18ac3309a], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1d0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c6701d23a505cd431e1ecef50c3234e082555f67222476147864fa031a2f5cf11d8c348cbd06dc8de03cbde7d4ef607b0178fa5ea335019ac07a602061c96baebc989f1f34a213867262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c521bac2b500000034e0572400", 0x1}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x4, 0x81, {0xc052}}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ipv6header={{0x28}, {0xb1}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @common=@unspec=@AUDIT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420)
r7 = fsmount(r5, 0x0, 0x82)
bpf$PROG_BIND_MAP(0x23, &(0x7f00000001c0)={r5, r7}, 0xc)
r8 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x92ba, 0x4, 0xa, 0x392})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000003c0)={'ip_vti0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x8008, 0x1, 0xfffffffd, 0x152857ad, {{0xb, 0x4, 0x0, 0xd, 0x2c, 0x66, 0x0, 0x6, 0x4, 0x0, @loopback, @empty, {[@rr={0x7, 0x17, 0x6, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @broadcast, @private=0xa010101]}, @noop]}}}}})
r9 = socket$inet_udp(0x2, 0x2, 0x0)
recvmmsg(r9, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0)
setsockopt$inet_int(r9, 0x0, 0x8, &(0x7f0000000000)=0x81, 0x4)
bind$inet(r9, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$ARPT_SO_SET_REPLACE(r9, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x240, 0x240, 0x0, 0x350, 0x370, 0x350, 0x4, 0x0, {[{{@arp={@private, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_to_batadv\x00', 'batadv0\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "bc2e329885ea3654891fbae8c6c66e07212432bde429bcda7deb48d85c6f5e269c2021c8f8dc09af0b3f2e10e8ac79cc67e264613c4be6838ee2daacf7926a6e"}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr, @broadcast}}}, {{@arp={@private, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0\x00', 'veth0_to_bond\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488)
syz_emit_ethernet(0x2e, &(0x7f0000000540)=ANY=[@ANYBLOB="ffffffffffffffffffffffff0800450000200000000000119000000001214e20000c030000000000"], 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000002, 0x110, 0xffffffffffffffff, 0x0)
setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)

0s ago: executing program 5 (id=5380):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r1 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080), 0x10)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0x1, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0}}, 0x10)
setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000100)={r2, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, 0x10) (async)
close(r1)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x113042, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, 0x0) (async)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) (async)
sendmmsg$inet6(r0, &(0x7f0000000840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x0)

kernel console output (not intermixed with test programs):

328] 9p: Could not find request transport: Fd
[  593.291172][T19336] loop1: detected capacity change from 0 to 4096
[  593.305089][T19336] EXT4-fs: dax option not supported
[  593.363639][T19343] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4963'.
[  593.531314][T19343] EXT4-fs (loop4): 1 orphan inode deleted
[  593.641235][T19343] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  593.668296][T12198] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  593.802883][T19354] GPT:first_usable_lbas don't match.
[  593.808305][T19354] GPT:34 != 290
[  593.811837][T19354] GPT: Use GNU Parted to correct GPT errors.
[  593.818379][T19354]  loop2: p1 p2 p3
[  594.017539][T19357] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  594.024798][T19357] IPv6: NLM_F_CREATE should be set when creating new route
[  594.032014][T19357] IPv6: NLM_F_CREATE should be set when creating new route
[  594.039258][T19357] IPv6: NLM_F_CREATE should be set when creating new route
[  594.047691][T19357] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  594.151520][T13157] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  594.322819][T19373] 9p: Could not find request transport: Fd
[  594.371229][T19376] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  594.405702][T19376] EXT4-fs (loop0): failed to open journal device unknown-block(0,0) -6
[  594.582884][T19384] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  594.593832][T19384] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869)
[  594.604285][T19384] EXT4-fs error (device loop4): ext4_get_journal_inode:5896: comm syz.4.4975: inode #1: comm syz.4.4975: iget: illegal inode #
[  594.617485][T19384] loop4: lost filesystem error report for type 5 error -117
[  594.619640][T19384] EXT4-fs (loop4): no journal found
[  594.632128][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  594.632144][    C0] EXT4-fs (loop4): initial error at time 1781352199: ext4_get_journal_inode:5896
[  594.632163][    C0] EXT4-fs (loop4): last error at time 1781352199: ext4_get_journal_inode:5896
[  594.657884][T19384] EXT4-fs (loop4): can't get journal size
[  594.666117][T19384] EXT4-fs (loop4): failed to initialize system zone (-22)
[  594.673376][T19384] EXT4-fs (loop4): mount failed
[  594.839774][   T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  594.889615][T19379] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4975'.
[  595.109286][T19388] EXT4-fs: Ignoring removed orlov option
[  595.301016][T19388] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  595.329376][T19388] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.4978: invalid indirect mapped block 32768 (level 2)
[  595.343428][T19388] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  595.345542][T19388] EXT4-fs (loop2): 1 orphan inode deleted
[  595.355125][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  595.355281][    C0] EXT4-fs (loop2): initial error at time 1781352199: ext4_free_branches:1023: inode 16
[  595.355373][    C0] EXT4-fs (loop2): last error at time 1781352199: ext4_free_branches:1023: inode 16
[  595.389751][T19382] EXT4-fs: dax option not supported
[  595.413695][T19388] EXT4-fs (loop2): 1 truncate cleaned up
[  595.424094][T19388] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  596.118026][ T3489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  596.126924][   T77] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  596.168722][T19397] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  596.179689][T19397] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869)
[  596.189685][T19397] EXT4-fs error (device loop5): ext4_get_journal_inode:5896: comm syz.5.4979: inode #1: comm syz.5.4979: iget: illegal inode #
[  596.202899][T19397] loop5: lost filesystem error report for type 5 error -117
[  596.203826][T19397] EXT4-fs (loop5): no journal found
[  596.211132][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  596.211148][    C1] EXT4-fs (loop5): initial error at time 1781352200: ext4_get_journal_inode:5896
[  596.211176][    C1] EXT4-fs (loop5): last error at time 1781352200: ext4_get_journal_inode:5896
[  596.240810][T19397] EXT4-fs (loop5): can't get journal size
[  596.278272][T19397] EXT4-fs (loop5): failed to initialize system zone (-22)
[  596.285602][T19397] EXT4-fs (loop5): mount failed
[  596.391566][T19402] FAULT_INJECTION: forcing a failure.
[  596.391566][T19402] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  596.405296][T19402] CPU: 0 UID: 0 PID: 19402 Comm: syz.4.4982 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  596.405343][T19402] Tainted: [W]=WARN
[  596.405349][T19402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  596.405363][T19402] Call Trace:
[  596.405371][T19402]  <TASK>
[  596.405379][T19402]  __dump_stack+0x1d/0x30
[  596.405452][T19402]  dump_stack_lvl+0x95/0xd0
[  596.405475][T19402]  dump_stack+0x15/0x1b
[  596.405541][T19402]  should_fail_ex+0x25e/0x270
[  596.405587][T19402]  should_fail+0xb/0x20
[  596.405607][T19402]  should_fail_usercopy+0x1a/0x20
[  596.405631][T19402]  _copy_from_user+0x1c/0xb0
[  596.405680][T19402]  ___sys_sendmsg+0xc1/0x1e0
[  596.405719][T19402]  __x64_sys_sendmsg+0xd4/0x160
[  596.405754][T19402]  x64_sys_call+0x194c/0x3020
[  596.405776][T19402]  do_syscall_64+0x136/0x3c0
[  596.405873][T19402]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  596.405894][T19402] RIP: 0033:0x7f1a52b6ce59
[  596.405910][T19402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  596.405994][T19402] RSP: 002b:00007f1a515c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  596.406081][T19402] RAX: ffffffffffffffda RBX: 00007f1a52de5fa0 RCX: 00007f1a52b6ce59
[  596.406097][T19402] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000007
[  596.406157][T19402] RBP: 00007f1a515c7090 R08: 0000000000000000 R09: 0000000000000000
[  596.406169][T19402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  596.406181][T19402] R13: 00007f1a52de6038 R14: 00007f1a52de5fa0 R15: 00007ffe5d295cc8
[  596.406201][T19402]  </TASK>
[  596.579718][T19394] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4979'.
[  596.769477][   T77] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  596.806046][T11301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  596.977610][T19404] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4983'.
[  597.020207][T19404] set_capacity_and_notify: 8 callbacks suppressed
[  597.020227][T19404] loop0: detected capacity change from 0 to 512
[  597.186781][T19404] EXT4-fs (loop0): 1 orphan inode deleted
[  597.195789][T19404] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  597.407841][ T6899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  597.676203][T19418] 9p: Could not find request transport: Fd
[  597.685413][T12198] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  597.760223][T19426] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4990'.
[  597.797937][T19426] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4990'.
[  597.811820][T19425] loop4: detected capacity change from 0 to 4096
[  597.828247][T19425] EXT4-fs: dax option not supported
[  597.848206][T19426] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4990'.
[  597.903785][T19418] loop5: detected capacity change from 0 to 512
[  597.929193][T19418] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  597.942153][T19434] loop0: detected capacity change from 0 to 256
[  597.979700][T19434] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  597.989487][T19418] EXT4-fs (loop5): failed to open journal device unknown-block(0,0) -6
[  598.039138][   T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  598.244272][   T28] audit: type=1400 audit(1781352202.727:1730): avc:  denied  { write } for  pid=19441 comm="syz.2.4994" name="file0" dev="tmpfs" ino=2553 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  598.490582][T19449] loop0: detected capacity change from 0 to 1024
[  598.553507][T19449] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  598.565921][T19449] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869)
[  598.587368][T19449] EXT4-fs error (device loop0): ext4_get_journal_inode:5896: comm syz.0.4995: inode #1: comm syz.0.4995: iget: illegal inode #
[  598.601190][T19449] loop0: lost filesystem error report for type 5 error -117
[  598.607146][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  598.620881][    C0] EXT4-fs (loop0): initial error at time 1781352203: ext4_get_journal_inode:5896
[  598.630035][    C0] EXT4-fs (loop0): last error at time 1781352203: ext4_get_journal_inode:5896
[  598.641789][T19449] EXT4-fs (loop0): no journal found
[  598.647964][T19449] EXT4-fs (loop0): can't get journal size
[  598.683096][T19449] EXT4-fs (loop0): failed to initialize system zone (-22)
[  598.696747][T19449] EXT4-fs (loop0): mount failed
[  598.769096][T19449] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4995'.
[  598.847658][   T28] audit: type=1400 audit(1781352202.727:1731): avc:  denied  { ioctl } for  pid=19441 comm="syz.2.4994" path="/457/file0" dev="tmpfs" ino=2553 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  600.074359][T19457] loop2: detected capacity change from 0 to 1024
[  600.151518][T19457] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  600.162969][T19457] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869)
[  600.189387][T19457] EXT4-fs error (device loop2): ext4_get_journal_inode:5896: comm syz.2.4997: inode #1: comm syz.2.4997: iget: illegal inode #
[  600.203414][T19457] loop2: lost filesystem error report for type 5 error -117
[  600.204954][T19457] EXT4-fs (loop2): no journal found
[  600.212806][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  600.212948][    C0] EXT4-fs (loop2): initial error at time 1781352204: ext4_get_journal_inode:5896
[  600.213024][    C0] EXT4-fs (loop2): last error at time 1781352204: ext4_get_journal_inode:5896
[  600.260437][T19457] EXT4-fs (loop2): can't get journal size
[  600.283792][T19457] EXT4-fs (loop2): failed to initialize system zone (-22)
[  600.303110][T19457] EXT4-fs (loop2): mount failed
[  600.365367][T19464] loop1: detected capacity change from 0 to 512
[  600.440721][T19464] ext4: Unknown parameter 'obj_user'
[  600.601079][  T418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  600.714646][T19475] netlink: 'syz.0.5004': attribute type 12 has an invalid length.
[  600.762564][T19472] loop4: detected capacity change from 0 to 128
[  600.883002][T19457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4997'.
[  600.928334][T19479] loop5: detected capacity change from 0 to 256
[  600.950718][T19479] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  601.023081][T19464] loop1: detected capacity change from 0 to 512
[  601.092839][T19464] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  601.188732][T19464] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.5001: bad orphan inode 131083
[  601.218675][T19464] loop1: lost filesystem error report for type 5 error -117
[  601.221931][T19464] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  601.276223][T19481] netlink: 600 bytes leftover after parsing attributes in process `syz.0.5006'.
[  601.290986][T19481] bridge0: port 2(bridge_slave_1) entered disabled state
[  601.307657][T19481] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  601.380819][   T28] audit: type=1400 audit(1781352205.787:1732): avc:  denied  { write } for  pid=19463 comm="syz.1.5001" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  601.441476][T19490] FAULT_INJECTION: forcing a failure.
[  601.441476][T19490] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  601.454624][T19490] CPU: 1 UID: 0 PID: 19490 Comm: syz.2.5007 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  601.454697][T19490] Tainted: [W]=WARN
[  601.454704][T19490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  601.454794][T19490] Call Trace:
[  601.454801][T19490]  <TASK>
[  601.454809][T19490]  __dump_stack+0x1d/0x30
[  601.454831][T19490]  dump_stack_lvl+0x95/0xd0
[  601.454853][T19490]  dump_stack+0x15/0x1b
[  601.454873][T19490]  should_fail_ex+0x25e/0x270
[  601.454911][T19490]  should_fail+0xb/0x20
[  601.454930][T19490]  should_fail_usercopy+0x1a/0x20
[  601.454995][T19490]  _copy_from_user+0x1c/0xb0
[  601.455050][T19490]  ___sys_sendmsg+0xc1/0x1e0
[  601.455081][T19490]  __x64_sys_sendmsg+0xd4/0x160
[  601.455161][T19490]  x64_sys_call+0x194c/0x3020
[  601.455187][T19490]  do_syscall_64+0x136/0x3c0
[  601.455233][T19490]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  601.455255][T19490] RIP: 0033:0x7f63d89bce59
[  601.455336][T19490] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  601.455353][T19490] RSP: 002b:00007f63d740f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  601.455373][T19490] RAX: ffffffffffffffda RBX: 00007f63d8c35fa0 RCX: 00007f63d89bce59
[  601.455442][T19490] RDX: 0000000000040000 RSI: 0000200000000400 RDI: 0000000000000003
[  601.455454][T19490] RBP: 00007f63d740f090 R08: 0000000000000000 R09: 0000000000000000
[  601.455468][T19490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  601.455483][T19490] R13: 00007f63d8c36038 R14: 00007f63d8c35fa0 R15: 00007ffdeaa0e3c8
[  601.455548][T19490]  </TASK>
[  601.490526][   T28] audit: type=1400 audit(1781352205.967:1733): avc:  denied  { ioctl } for  pid=19491 comm="syz.0.5008" path="socket:[62139]" dev="sockfs" ino=62139 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  601.651549][T19494] EXT4-fs: Ignoring removed nobh option
[  601.687763][T19498] ext4: Unknown parameter 'obj_user'
[  601.689116][T19494] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  601.722744][T19494] ext4 filesystem being mounted at /460/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  601.751294][T19498] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  601.761476][   T28] audit: type=1400 audit(1781352206.227:1734): avc:  denied  { getopt } for  pid=19491 comm="syz.0.5008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  601.789296][T11905] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  601.808466][T19498] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.5010: bad orphan inode 131083
[  601.824887][T19494] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5009'.
[  601.846771][   T28] audit: type=1400 audit(1781352206.287:1735): avc:  denied  { write } for  pid=19493 comm="syz.2.5009" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  601.868887][T19494] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5009'.
[  601.868947][T19494] netlink: 11 bytes leftover after parsing attributes in process `syz.2.5009'.
[  601.869026][T19494] netlink: 'syz.2.5009': attribute type 2 has an invalid length.
[  601.869070][T19494] netlink: 'syz.2.5009': attribute type 3 has an invalid length.
[  601.869147][T19494] netlink: 11 bytes leftover after parsing attributes in process `syz.2.5009'.
[  601.869598][T19498] loop5: lost filesystem error report for type 5 error -117
[  601.881188][  T418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  601.926861][ T5330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  601.961715][   T28] audit: type=1400 audit(1781352206.427:1736): avc:  denied  { map } for  pid=19493 comm="syz.2.5009" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1
[  601.985125][   T28] audit: type=1400 audit(1781352206.447:1737): avc:  denied  { execute } for  pid=19493 comm="syz.2.5009" path="/460/mnt/file1" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  602.008974][T19498] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  602.115429][T19508] set_capacity_and_notify: 3 callbacks suppressed
[  602.115514][T19508] loop4: detected capacity change from 0 to 128
[  602.403296][T19511] loop1: detected capacity change from 0 to 512
[  602.414380][T19511] EXT4-fs: Ignoring removed orlov option
[  603.000806][T19511] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  603.000927][ T5330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  603.001902][  T418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  603.107716][   T28] audit: type=1400 audit(1781352206.637:1738): avc:  denied  { write } for  pid=19495 comm="syz.5.5010" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  603.153141][T19511] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.5013: invalid indirect mapped block 32768 (level 2)
[  603.167526][T19511] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  603.170657][T19511] EXT4-fs (loop1): 1 orphan inode deleted
[  603.180329][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  603.180458][    C1] EXT4-fs (loop1): initial error at time 1781352207: ext4_free_branches:1023: inode 16
[  603.180678][    C1] EXT4-fs (loop1): last error at time 1781352207: ext4_free_branches:1023: inode 16
[  603.212868][T19511] EXT4-fs (loop1): 1 truncate cleaned up
[  603.220806][T19511] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  603.286149][T13814] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  603.319334][T19510] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  603.448785][   T28] audit: type=1400 audit(1781352207.937:1739): avc:  denied  { write } for  pid=19493 comm="syz.2.5009" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  603.472770][T11905] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  603.509105][T19510] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  603.551085][T19510] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  603.595863][T19510] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  603.609388][T19517] loop1: detected capacity change from 0 to 512
[  603.648539][T19517] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  603.718084][T19517] EXT4-fs (loop1): failed to open journal device unknown-block(0,0) -6
[  603.738277][T11301] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  603.989658][T19525] 9p: Could not find request transport: Fd
[  604.205186][T19530] loop2: detected capacity change from 0 to 512
[  604.224681][T19530] EXT4-fs: Ignoring removed orlov option
[  604.238617][T19530] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  604.272517][T19530] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.5016: invalid indirect mapped block 32768 (level 2)
[  604.286749][T19530] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  604.293894][T19530] EXT4-fs (loop2): 1 orphan inode deleted
[  604.303471][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  604.303521][    C1] EXT4-fs (loop2): initial error at time 1781352208: ext4_free_branches:1023: inode 16
[  604.303869][    C1] EXT4-fs (loop2): last error at time 1781352208: ext4_free_branches:1023: inode 16
[  604.338703][T19530] EXT4-fs (loop2): 1 truncate cleaned up
[  604.363012][T19530] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  604.377193][T19541] loop5: detected capacity change from 0 to 512
[  604.388149][T19541] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  604.408534][T19541] EXT4-fs (loop5): 1 truncate cleaned up
[  604.419357][T19541] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  604.442548][   T28] audit: type=1400 audit(1781352208.917:1740): avc:  denied  { write } for  pid=19532 comm="syz.5.5019" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  604.538993][   T28] audit: type=1400 audit(1781352209.007:1741): avc:  denied  { relabelfrom } for  pid=19532 comm="syz.5.5019" name="NETLINK" dev="sockfs" ino=62204 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  604.569024][T19517] loop1: detected capacity change from 0 to 128
[  604.608414][T19517] EXT4-fs: Ignoring removed nobh option
[  604.668254][T19517] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  604.703944][   T28] audit: type=1400 audit(1781352209.007:1742): avc:  denied  { relabelto } for  pid=19532 comm="syz.5.5019" name="NETLINK" dev="sockfs" ino=62204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1
[  604.800789][T19550] loop0: detected capacity change from 0 to 128
[  604.802300][T19517] ext4 filesystem being mounted at /426/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  604.854711][T11301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  604.903664][T19517] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:375: inode #2: comm syz.1.5015: No space for directory leaf checksum. Please run e2fsck -D.
[  604.940766][T19517] EXT4-fs error (device loop1): __ext4_find_entry:1626: inode #2: comm syz.1.5015: checksumming directory block 0
[  605.138468][T19557] loop4: detected capacity change from 0 to 1024
[  605.828787][T19558] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5023'.
[  605.856511][T11905] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  605.878677][T19557] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  605.889721][T19557] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869)
[  605.899949][T19557] EXT4-fs error (device loop4): ext4_get_journal_inode:5896: comm syz.4.5022: inode #1: comm syz.4.5022: iget: illegal inode #
[  605.913734][T19557] loop4: lost filesystem error report for type 5 error -117
[  605.917141][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  605.930908][    C0] EXT4-fs (loop4): initial error at time 1781352210: ext4_get_journal_inode:5896
[  605.940075][    C0] EXT4-fs (loop4): last error at time 1781352210: ext4_get_journal_inode:5896
[  606.220339][T19557] EXT4-fs (loop4): no journal found
[  606.225384][T19560] loop1: detected capacity change from 0 to 512
[  606.225609][T19557] EXT4-fs (loop4): can't get journal size
[  606.241732][T19560] ext4: Unknown parameter 'obj_user'
[  606.831029][ T6899] net_ratelimit: 309 callbacks suppressed
[  606.831046][ T6899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  606.957429][T19557] EXT4-fs (loop4): failed to initialize system zone (-22)
[  606.964629][T19557] EXT4-fs (loop4): mount failed
[  606.983224][T19553] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5022'.
[  607.038395][T13814] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  607.182792][T19563] loop2: detected capacity change from 0 to 128
[  607.249739][T19576] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5027'.
[  607.293373][T19576] loop0: detected capacity change from 0 to 512
[  607.349879][T19578] loop1: detected capacity change from 0 to 512
[  607.358897][T19578] EXT4-fs: Ignoring removed oldalloc option
[  607.410974][T19577] loop5: detected capacity change from 0 to 512
[  607.430794][T19578] EXT4-fs: Mount option(s) incompatible with ext3
[  607.475932][T19576] EXT4-fs (loop0): 1 orphan inode deleted
[  607.486224][T19576] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  607.552421][T19577] EXT4-fs (loop5): 1 orphan inode deleted
[  607.563949][T19577] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  607.643087][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  607.653249][ T6899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  607.685735][T19586] 9p: Could not find request transport: Fd
[  607.756152][T19586] loop4: detected capacity change from 0 to 512
[  607.774248][T19586] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  607.806341][T19586] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6
[  607.957597][T19597] loop4: detected capacity change from 0 to 128
[  608.032381][T19591] loop2: detected capacity change from 0 to 512
[  608.043790][T19591] EXT4-fs: Ignoring removed orlov option
[  608.061120][T19591] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  608.104683][T19591] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.5033: invalid indirect mapped block 32768 (level 2)
[  608.119523][T19591] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  608.125478][T19591] EXT4-fs (loop2): 1 orphan inode deleted
[  608.135094][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  608.135196][    C1] EXT4-fs (loop2): initial error at time 1781352212: ext4_free_branches:1023: inode 16
[  608.135467][    C1] EXT4-fs (loop2): last error at time 1781352212: ext4_free_branches:1023: inode 16
[  608.169998][T19591] EXT4-fs (loop2): 1 truncate cleaned up
[  608.184957][T19591] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  608.222580][T13814] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  608.237944][T12198] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  608.278161][ T6899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  608.287046][T19603] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5036'.
[  608.359375][T19606] loop1: detected capacity change from 0 to 128
[  608.620499][T11301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  608.676119][T19620] loop5: detected capacity change from 0 to 1024
[  608.683474][T19620] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  608.694402][T19620] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869)
[  608.704354][T19620] EXT4-fs error (device loop5): ext4_get_journal_inode:5896: comm syz.5.5039: inode #1: comm syz.5.5039: iget: illegal inode #
[  608.717591][T19620] loop5: lost filesystem error report for type 5 error -117
[  608.717974][T19620] EXT4-fs (loop5): no journal found
[  608.730561][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  608.730582][    C1] EXT4-fs (loop5): initial error at time 1781352213: ext4_get_journal_inode:5896
[  608.730609][    C1] EXT4-fs (loop5): last error at time 1781352213: ext4_get_journal_inode:5896
[  608.755041][T19620] EXT4-fs (loop5): can't get journal size
[  608.767927][T19620] EXT4-fs (loop5): failed to initialize system zone (-22)
[  608.775253][T19620] EXT4-fs (loop5): mount failed
[  608.917669][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  609.438015][T19616] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5039'.
[  609.557594][  T418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  609.615303][   T28] audit: type=1400 audit(1781352214.097:1743): avc:  denied  { map } for  pid=19628 comm="syz.0.5046" path="/dev/usbmon3" dev="devtmpfs" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  609.703274][T19631] 9p: Could not find request transport: Fd
[  609.837683][T19636] loop4: detected capacity change from 0 to 512
[  610.209814][T19636] EXT4-fs (loop4): 1 orphan inode deleted
[  610.221436][T19636] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  610.248179][T19640] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  610.259172][T19640] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869)
[  610.268949][T19640] EXT4-fs error (device loop0): ext4_get_journal_inode:5896: comm syz.0.5048: inode #1: comm syz.0.5048: iget: illegal inode #
[  610.282238][T19640] loop0: lost filesystem error report for type 5 error -117
[  610.286565][T19640] EXT4-fs (loop0): no journal found
[  610.293886][    C1] EXT4-fs (loop0): error count since last fsck: 1
[  610.293917][    C1] EXT4-fs (loop0): initial error at time 1781352214: ext4_get_journal_inode:5896
[  610.293946][    C1] EXT4-fs (loop0): last error at time 1781352214: ext4_get_journal_inode:5896
[  610.323695][T19640] EXT4-fs (loop0): can't get journal size
[  610.341393][T19640] EXT4-fs (loop0): failed to initialize system zone (-22)
[  610.348687][T19640] EXT4-fs (loop0): mount failed
[  610.650385][T19627] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  610.675107][T19645] EXT4-fs: dax option not supported
[  610.741157][T19645] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  610.816512][T19627] EXT4-fs (loop1): failed to open journal device unknown-block(0,0) -6
[  611.098379][T19639] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5048'.
[  611.176259][T13157] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  611.560383][T19659] EXT4-fs: Ignoring removed orlov option
[  611.591544][T19659] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  611.630451][T19659] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.5054: invalid indirect mapped block 32768 (level 2)
[  611.653086][T19659] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  611.657140][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  611.672664][    C0] EXT4-fs (loop5): initial error at time 1781352216: ext4_free_branches:1023: inode 16
[  611.682341][    C0] EXT4-fs (loop5): last error at time 1781352216: ext4_free_branches:1023: inode 16
[  611.694388][T19659] EXT4-fs (loop5): 1 orphan inode deleted
[  611.700848][T19659] EXT4-fs (loop5): 1 truncate cleaned up
[  611.718009][T19659] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  611.936306][T19681] ext4: Unknown parameter 'obj_user'
[  612.106119][T19681] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  612.143097][T19681] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.5062: bad orphan inode 131083
[  612.166626][T13814] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  612.192255][T19681] loop4: lost filesystem error report for type 5 error -117
[  612.201024][T19681] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  612.253764][T19688] 9p: Could not find request transport: Fd
[  612.370641][   T28] audit: type=1400 audit(1781352216.857:1744): avc:  denied  { write } for  pid=19680 comm="syz.4.5062" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  612.503303][T19693] set_capacity_and_notify: 7 callbacks suppressed
[  612.503359][T19693] loop1: detected capacity change from 0 to 1024
[  612.544220][T19693] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  612.556641][T19693] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869)
[  612.567192][T19693] EXT4-fs error (device loop1): ext4_get_journal_inode:5896: comm syz.1.5066: inode #1: comm syz.1.5066: iget: illegal inode #
[  612.581529][T19693] loop1: lost filesystem error report for type 5 error -117
[  612.582432][T19693] EXT4-fs (loop1): no journal found
[  612.590176][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  612.590263][    C1] EXT4-fs (loop1): initial error at time 1781352217: ext4_get_journal_inode:5896
[  612.590382][    C1] EXT4-fs (loop1): last error at time 1781352217: ext4_get_journal_inode:5896
[  612.623113][T19693] EXT4-fs (loop1): can't get journal size
[  612.633233][T19693] EXT4-fs (loop1): failed to initialize system zone (-22)
[  612.643000][T19693] EXT4-fs (loop1): mount failed
[  612.662478][T19704] netlink: 144 bytes leftover after parsing attributes in process `syz.0.5070'.
[  612.698810][T19693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5066'.
[  612.718758][T19708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5071'.
[  612.740617][   T28] audit: type=1400 audit(1781352217.227:1745): avc:  denied  { read } for  pid=19705 comm="syz.2.5071" name="/" dev="configfs" ino=1160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  612.765292][   T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  612.775387][   T77] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  612.775434][T19688] loop5: detected capacity change from 0 to 512
[  612.789740][   T28] audit: type=1400 audit(1781352217.227:1746): avc:  denied  { read open } for  pid=19705 comm="syz.2.5071" path="/" dev="configfs" ino=1160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  612.814756][T19688] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  612.828903][T13157] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  612.875238][T19688] EXT4-fs (loop5): failed to open journal device unknown-block(0,0) -6
[  612.891218][T19718] loop0: detected capacity change from 0 to 128
[  613.056752][T19724] loop0: detected capacity change from 0 to 512
[  613.064958][T19724] ext4: Unknown parameter 'obj_user'
[  613.261962][T19722] loop5: detected capacity change from 0 to 512
[  613.279635][T19722] EXT4-fs: Ignoring removed orlov option
[  613.293785][T19722] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  613.313090][T19727] loop1: detected capacity change from 0 to 512
[  613.319737][   T28] audit: type=1400 audit(1781352217.797:1747): avc:  denied  { setattr } for  pid=19726 comm="syz.1.5077" name="KEY" dev="sockfs" ino=63500 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  613.320586][T19724] loop0: detected capacity change from 0 to 512
[  613.352866][T19727] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  613.371317][T19724] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  613.388569][T19722] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.5075: invalid indirect mapped block 32768 (level 2)
[  613.402688][ T5330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  613.412346][T19722] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  613.417253][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  613.434064][    C1] EXT4-fs (loop5): initial error at time 1781352217: ext4_free_branches:1023: inode 16
[  613.442150][T19724] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.5076: bad orphan inode 131083
[  613.444443][    C1] EXT4-fs (loop5): last error at time 1781352217: ext4_free_branches:1023: inode 16
[  613.446483][T19722] EXT4-fs (loop5): 1 orphan inode deleted
[  613.472193][T19722] EXT4-fs (loop5): 1 truncate cleaned up
[  613.486772][T19722] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  613.517419][T19724] loop0: lost filesystem error report for type 5 error -117
[  613.528151][T19724] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  613.553807][T19732] loop2: detected capacity change from 0 to 512
[  613.563638][T19732] ext4: Unknown parameter 'obj_user'
[  613.593179][   T28] audit: type=1400 audit(1781352218.047:1748): avc:  denied  { write } for  pid=19723 comm="syz.0.5076" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  613.692403][T19732] loop2: detected capacity change from 0 to 512
[  613.926870][T13814] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  614.040007][ T5330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  614.087522][T19732] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  614.317935][T12198] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  614.345229][T19732] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.5078: bad orphan inode 131083
[  614.427771][T19732] loop2: lost filesystem error report for type 5 error -117
[  614.436619][T19732] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  614.601546][   T28] audit: type=1400 audit(1781352218.197:1749): avc:  denied  { write } for  pid=19726 comm="syz.1.5077" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  614.623312][   T28] audit: type=1400 audit(1781352219.047:1750): avc:  denied  { write } for  pid=19731 comm="syz.2.5078" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  614.675488][T19750] loop4: detected capacity change from 0 to 256
[  614.682902][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  614.691594][   T77] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  614.743089][T19750] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  614.845821][T11301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  615.295187][T11905] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  615.380480][T19768] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  615.414451][T19772] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  615.425422][T19772] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869)
[  615.435681][T19772] EXT4-fs error (device loop4): ext4_get_journal_inode:5896: comm syz.4.5087: inode #1: comm syz.4.5087: iget: illegal inode #
[  615.448846][T19772] loop4: lost filesystem error report for type 5 error -117
[  615.449188][T19772] EXT4-fs (loop4): no journal found
[  615.457140][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  615.457161][    C0] EXT4-fs (loop4): initial error at time 1781352219: ext4_get_journal_inode:5896
[  615.457199][    C0] EXT4-fs (loop4): last error at time 1781352219: ext4_get_journal_inode:5896
[  615.466242][T19768] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  615.469803][T19772] EXT4-fs (loop4): can't get journal size
[  615.471810][T19772] EXT4-fs (loop4): failed to initialize system zone (-22)
[  615.513823][T19772] EXT4-fs (loop4): mount failed
[  615.535324][T19768] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  615.543781][   T28] audit: type=1400 audit(1781352220.017:1751): avc:  denied  { remount } for  pid=19765 comm="syz.5.5088" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  615.573439][T19767] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5087'.
[  615.654870][T19773] EXT4-fs: Ignoring removed orlov option
[  615.673133][T19773] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  615.708649][T19776] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  615.739587][T19773] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.5089: invalid indirect mapped block 32768 (level 2)
[  615.754957][T19773] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  615.757217][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  615.773800][    C0] EXT4-fs (loop1): initial error at time 1781352220: ext4_free_branches:1023: inode 16
[  615.784178][    C0] EXT4-fs (loop1): last error at time 1781352220: ext4_free_branches:1023: inode 16
[  615.809313][T19773] EXT4-fs (loop1): 1 orphan inode deleted
[  615.816047][T19773] EXT4-fs (loop1): 1 truncate cleaned up
[  615.871550][T19783] ext4: Unknown parameter 'obj_user'
[  615.880116][T19773] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  615.895123][T19781] EXT4-fs: dax option not supported
[  615.964111][T19783] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  615.976665][T19783] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.5091: bad orphan inode 131083
[  615.988923][T19783] loop2: lost filesystem error report for type 5 error -117
[  615.990309][T19783] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  616.011567][   T28] audit: type=1400 audit(1781352220.497:1752): avc:  denied  { write } for  pid=19782 comm="syz.2.5091" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  616.158337][T11301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  616.216290][T11905] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  616.352959][T13814] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  616.592539][T19796] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  616.635975][T19811] 9p: Could not find request transport: Fd
[  616.833978][T19817] EXT4-fs: Ignoring removed orlov option
[  616.846814][T19817] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  616.887086][T19817] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.5099: invalid indirect mapped block 32768 (level 2)
[  616.901446][T19817] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  616.907136][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  616.922729][    C0] EXT4-fs (loop5): initial error at time 1781352221: ext4_free_branches:1023: inode 16
[  616.932397][    C0] EXT4-fs (loop5): last error at time 1781352221: ext4_free_branches:1023: inode 16
[  616.949085][T19817] EXT4-fs (loop5): 1 orphan inode deleted
[  616.955306][T19817] EXT4-fs (loop5): 1 truncate cleaned up
[  616.977889][T19817] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  617.066330][T19814] EXT4-fs: Ignoring removed nomblk_io_submit option
[  617.089128][T19814] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  617.113959][T19814] ext4 filesystem being mounted at /439/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  617.259784][T11905] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  617.282477][T19827] geneve2: entered allmulticast mode
[  617.366408][T13814] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  617.593239][T19835] 9p: Could not find request transport: Fd
[  617.672367][T19830] set_capacity_and_notify: 10 callbacks suppressed
[  617.672410][T19830] loop2: detected capacity change from 0 to 512
[  617.696251][T19830] EXT4-fs: Ignoring removed orlov option
[  617.711700][T19830] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  617.829530][T19830] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.5104: invalid indirect mapped block 32768 (level 2)
[  617.843690][T19830] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  617.852130][T19830] EXT4-fs (loop2): 1 orphan inode deleted
[  617.861927][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  617.862031][    C1] EXT4-fs (loop2): initial error at time 1781352222: ext4_free_branches:1023: inode 16
[  617.862062][    C1] EXT4-fs (loop2): last error at time 1781352222: ext4_free_branches:1023: inode 16
[  617.896603][T19830] EXT4-fs (loop2): 1 truncate cleaned up
[  617.912530][T19830] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  618.293608][T11301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  618.438017][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  618.519187][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  618.625950][T19864] loop2: detected capacity change from 0 to 4096
[  618.656103][T19864] EXT4-fs: dax option not supported
[  618.709193][T19864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  618.740651][T19866] loop0: detected capacity change from 0 to 1024
[  618.801014][T19866] EXT4-fs: Ignoring removed nomblk_io_submit option
[  618.892524][T19866] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  618.940106][T19866] ext4 filesystem being mounted at /448/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  619.019393][T12198] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  619.194140][T19882] loop4: detected capacity change from 0 to 512
[  619.206291][T19882] EXT4-fs: Ignoring removed orlov option
[  619.225204][T19882] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  619.254444][T19882] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.5118: invalid indirect mapped block 32768 (level 2)
[  619.269648][T19882] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  619.273779][T19882] EXT4-fs (loop4): 1 orphan inode deleted
[  619.283537][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  619.283607][    C1] EXT4-fs (loop4): initial error at time 1781352223: ext4_free_branches:1023: inode 16
[  619.283765][    C1] EXT4-fs (loop4): last error at time 1781352223: ext4_free_branches:1023: inode 16
[  619.317209][T19882] EXT4-fs (loop4): 1 truncate cleaned up
[  619.333619][T19882] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  619.900522][   T77] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  619.914412][T13157] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  620.152753][T19874] loop5: detected capacity change from 0 to 256
[  621.123476][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  621.132805][   T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  621.167386][T19874] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  621.242869][T19892] loop2: detected capacity change from 0 to 512
[  621.249535][T19892] EXT4-fs: Ignoring removed orlov option
[  621.324618][T19892] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  621.344355][T19892] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.5130: invalid indirect mapped block 32768 (level 2)
[  621.357960][T19892] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  621.361671][T19892] EXT4-fs (loop2): 1 orphan inode deleted
[  621.370827][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  621.370848][    C1] EXT4-fs (loop2): initial error at time 1781352225: ext4_free_branches:1023: inode 16
[  621.370880][    C1] EXT4-fs (loop2): last error at time 1781352225: ext4_free_branches:1023: inode 16
[  621.408532][T19892] EXT4-fs (loop2): 1 truncate cleaned up
[  621.414632][T19892] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  621.506159][   T28] audit: type=1400 audit(1781352225.987:1753): avc:  denied  { create } for  pid=19898 comm="syz.0.5122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  621.544710][T19899] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5122'.
[  621.556244][T19899] bpf: Bad value for 'uid'
[  621.560959][   T28] audit: type=1400 audit(1781352226.037:1754): avc:  denied  { write } for  pid=19898 comm="syz.0.5122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  621.592239][T19899] loop0: detected capacity change from 0 to 512
[  621.601331][T11301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  621.650716][T19899] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  621.722241][T19899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5122'.
[  621.728446][   T28] audit: type=1400 audit(1781352226.207:1755): avc:  denied  { write } for  pid=19898 comm="syz.0.5122" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  621.771757][T19901] 9p: Could not find request transport: Fd
[  621.795392][T19899] SELinux: failed to load policy
[  621.827777][T19899] EXT4-fs (loop0): shut down requested (2)
[  621.881860][T19895] loop4: detected capacity change from 0 to 256
[  621.882838][T19906] loop2: detected capacity change from 0 to 128
[  621.964509][T12198] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  621.983172][T19895] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  621.985964][T19904] loop1: detected capacity change from 0 to 4096
[  622.039944][T19904] EXT4-fs: Ignoring removed mblk_io_submit option
[  622.052329][T19904] EXT4-fs: Ignoring removed nomblk_io_submit option
[  622.113728][T19910] EXT4-fs (loop5): 1 orphan inode deleted
[  622.128080][T19910] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  622.153087][T19904] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  622.171761][   T28] audit: type=1400 audit(1781352226.657:1756): avc:  denied  { write } for  pid=19903 comm="syz.1.5124" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  622.244710][T11905] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  622.308480][T19919] EXT4-fs: dax option not supported
[  622.427714][T19928] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  623.254975][T19934] set_capacity_and_notify: 3 callbacks suppressed
[  623.254996][T19934] loop1: detected capacity change from 0 to 1024
[  623.468211][T19934] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  623.479912][T19934] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869)
[  623.489578][T19934] EXT4-fs error (device loop1): ext4_get_journal_inode:5896: comm syz.1.5128: inode #1: comm syz.1.5128: iget: illegal inode #
[  623.502789][T19934] loop1: lost filesystem error report for type 5 error -117
[  623.507138][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  623.521137][    C0] EXT4-fs (loop1): initial error at time 1781352227: ext4_get_journal_inode:5896
[  623.530285][    C0] EXT4-fs (loop1): last error at time 1781352227: ext4_get_journal_inode:5896
[  623.710028][T19934] EXT4-fs (loop1): no journal found
[  623.715287][T19934] EXT4-fs (loop1): can't get journal size
[  623.815153][T19934] EXT4-fs (loop1): failed to initialize system zone (-22)
[  623.822436][T19934] EXT4-fs (loop1): mount failed
[  624.105420][T19935] loop0: detected capacity change from 0 to 512
[  624.112451][T19935] EXT4-fs: Ignoring removed orlov option
[  624.420406][   T28] audit: type=1400 audit(1781352228.587:1757): avc:  denied  { watch_reads } for  pid=19927 comm="syz.2.5132" path="/479/file0" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1
[  624.451104][ T3489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  624.459729][ T5330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  624.509089][T19941] loop4: detected capacity change from 0 to 512
[  624.554441][T19941] EXT4-fs: Ignoring removed orlov option
[  624.611760][T19935] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  624.626487][T19929] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5128'.
[  624.664181][T19941] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  624.721416][T19935] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.5133: invalid indirect mapped block 32768 (level 2)
[  624.735022][T19935] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  624.736212][T19935] EXT4-fs (loop0): 1 orphan inode deleted
[  624.745354][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  624.745375][    C0] EXT4-fs (loop0): initial error at time 1781352229: ext4_free_branches:1023: inode 16
[  624.745400][    C0] EXT4-fs (loop0): last error at time 1781352229: ext4_free_branches:1023: inode 16
[  624.847197][T19935] EXT4-fs (loop0): 1 truncate cleaned up
[  624.853586][T19935] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  624.941084][T19941] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.5134: invalid indirect mapped block 32768 (level 2)
[  624.955322][T19941] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  624.957227][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  624.973452][    C1] EXT4-fs (loop4): initial error at time 1781352229: ext4_free_branches:1023: inode 16
[  624.983258][    C1] EXT4-fs (loop4): last error at time 1781352229: ext4_free_branches:1023: inode 16
[  624.998772][T19941] EXT4-fs (loop4): 1 orphan inode deleted
[  625.005273][T19941] EXT4-fs (loop4): 1 truncate cleaned up
[  625.020885][T19941] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  625.034565][T13814] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  625.250788][T13157] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  625.260309][T12198] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  625.422340][   T28] audit: type=1400 audit(1781352229.907:1758): avc:  denied  { bind } for  pid=19960 comm="syz.2.5141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  625.481194][   T28] audit: type=1400 audit(1781352229.937:1759): avc:  denied  { listen } for  pid=19960 comm="syz.2.5141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  625.550892][T19965] loop2: detected capacity change from 0 to 128
[  625.559577][  T418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  625.861037][T19977] loop2: detected capacity change from 0 to 4096
[  626.145481][T19977] EXT4-fs: dax option not supported
[  626.219655][T19977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  626.371281][T19985] loop0: detected capacity change from 0 to 512
[  626.399463][T19985] EXT4-fs: Ignoring removed orlov option
[  626.413042][T19985] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  626.473301][T19985] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.5147: invalid indirect mapped block 32768 (level 2)
[  626.497080][T19985] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  626.502422][T19985] EXT4-fs (loop0): 1 orphan inode deleted
[  626.512429][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  626.512500][    C0] EXT4-fs (loop0): initial error at time 1781352230: ext4_free_branches:1023: inode 16
[  626.512630][    C0] EXT4-fs (loop0): last error at time 1781352230: ext4_free_branches:1023: inode 16
[  626.568462][T19985] EXT4-fs (loop0): 1 truncate cleaned up
[  626.583662][T19985] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  626.976566][T19990] loop4: detected capacity change from 0 to 512
[  626.989290][T19990] EXT4-fs: Ignoring removed orlov option
[  627.013775][  T418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  627.022387][   T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  627.025141][T12198] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  627.031780][T19990] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  627.096345][T19990] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.5148: invalid indirect mapped block 32768 (level 2)
[  627.118875][T19990] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  627.125292][T19990] EXT4-fs (loop4): 1 orphan inode deleted
[  627.135010][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  627.135081][    C0] EXT4-fs (loop4): initial error at time 1781352231: ext4_free_branches:1023: inode 16
[  627.135751][    C0] EXT4-fs (loop4): last error at time 1781352231: ext4_free_branches:1023: inode 16
[  627.174571][T19990] EXT4-fs (loop4): 1 truncate cleaned up
[  627.174817][T20000] loop0: detected capacity change from 0 to 4096
[  627.201968][T20000] EXT4-fs: dax option not supported
[  627.276630][T20004] 9p: Could not find request transport: Fd
[  627.499039][T20004] loop2: detected capacity change from 0 to 512
[  627.535373][T20004] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  627.625394][T20013] loop4: detected capacity change from 0 to 1024
[  627.655441][T20013] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  627.667203][T20013] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869)
[  627.678119][T20013] EXT4-fs error (device loop4): ext4_get_journal_inode:5896: comm syz.4.5153: inode #1: comm syz.4.5153: iget: illegal inode #
[  627.691735][T20013] loop4: lost filesystem error report for type 5 error -117
[  627.697150][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  627.710870][    C1] EXT4-fs (loop4): initial error at time 1781352232: ext4_get_journal_inode:5896
[  627.719989][    C1] EXT4-fs (loop4): last error at time 1781352232: ext4_get_journal_inode:5896
[  627.730484][T20013] EXT4-fs (loop4): no journal found
[  627.736335][T20013] EXT4-fs (loop4): can't get journal size
[  627.764183][T20013] EXT4-fs (loop4): failed to initialize system zone (-22)
[  627.771830][T20013] EXT4-fs (loop4): mount failed
[  627.809479][T20013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5153'.
[  627.990128][T20004] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -6
[  628.301223][T20020] set_capacity_and_notify: 1 callbacks suppressed
[  628.301239][T20020] loop0: detected capacity change from 0 to 4096
[  628.348042][T20020] EXT4-fs: dax option not supported
[  628.575641][T20024] loop1: detected capacity change from 0 to 128
[  628.958161][T20028] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  629.326969][T20034] loop1: detected capacity change from 0 to 512
[  629.340448][T20034] EXT4-fs: Ignoring removed orlov option
[  629.947535][T20034] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  630.117200][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  630.129967][   T77] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  630.243209][   T28] audit: type=1400 audit(1781352234.727:1760): avc:  denied  { write } for  pid=20027 comm="syz.2.5159" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  630.306452][T20034] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.5158: invalid indirect mapped block 32768 (level 2)
[  630.310732][   T28] audit: type=1400 audit(1781352234.727:1761): avc:  denied  { open } for  pid=20027 comm="syz.2.5159" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  630.321139][T20034] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  630.347179][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  630.362744][    C1] EXT4-fs (loop1): initial error at time 1781352234: ext4_free_branches:1023: inode 16
[  630.372425][    C1] EXT4-fs (loop1): last error at time 1781352234: ext4_free_branches:1023: inode 16
[  630.404092][T20045] syzkaller0: entered promiscuous mode
[  630.415960][T20034] EXT4-fs (loop1): 1 orphan inode deleted
[  630.424549][T20034] EXT4-fs (loop1): 1 truncate cleaned up
[  630.448618][T20045] syzkaller0: entered allmulticast mode
[  630.555707][T20048] loop0: detected capacity change from 0 to 1024
[  630.571805][T20048] EXT4-fs: Ignoring removed nomblk_io_submit option
[  630.678882][T20048] ext4 filesystem being mounted at /459/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  630.692442][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  630.732160][T20047] loop2: detected capacity change from 0 to 512
[  630.747759][T20047] EXT4-fs: Ignoring removed orlov option
[  630.762901][T20047] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  630.799154][T20047] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.5163: invalid indirect mapped block 32768 (level 2)
[  630.813292][T20047] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  630.818440][T20047] EXT4-fs (loop2): 1 orphan inode deleted
[  630.828210][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  630.828259][    C1] EXT4-fs (loop2): initial error at time 1781352235: ext4_free_branches:1023: inode 16
[  630.828799][    C1] EXT4-fs (loop2): last error at time 1781352235: ext4_free_branches:1023: inode 16
[  630.862871][T20047] EXT4-fs (loop2): 1 truncate cleaned up
[  631.003179][T20058] loop0: detected capacity change from 0 to 4096
[  631.030525][T20058] EXT4-fs: dax option not supported
[  631.048193][T20054] loop1: detected capacity change from 0 to 512
[  631.073206][T20060] loop2: detected capacity change from 0 to 256
[  631.092212][T20054] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  631.119645][T20060] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  631.147875][T20054] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.5164: bad orphan inode 131083
[  631.185310][T20054] loop1: lost filesystem error report for type 5 error -117
[  631.187153][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  631.200912][    C0] EXT4-fs (loop1): initial error at time 1781352235: ext4_orphan_get:1423
[  631.209440][    C0] EXT4-fs (loop1): last error at time 1781352235: ext4_orphan_get:1423
[  631.278015][   T28] audit: type=1400 audit(1781352235.717:1762): avc:  denied  { write } for  pid=20053 comm="syz.1.5164" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  631.317680][   T77] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  631.520966][T20075] loop2: detected capacity change from 0 to 128
[  631.712766][T11905] EXT4-fs unmount: 9 callbacks suppressed
[  631.712847][T11905] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  631.760888][T20082] loop5: detected capacity change from 0 to 512
[  631.851884][T20082] EXT4-fs (loop5): 1 orphan inode deleted
[  631.861045][T20082] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  631.934748][T20084] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  631.958673][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  631.987082][T20084] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #15: comm syz.0.5175: corrupted inode contents
[  632.264404][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  632.376797][T20090] EXT4-fs: Ignoring removed orlov option
[  632.390193][T20090] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  632.402535][   T28] audit: type=1400 audit(1781352236.467:1763): avc:  denied  { write } for  pid=20083 comm="syz.0.5175" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  632.428793][   T28] audit: type=1400 audit(1781352236.467:1764): avc:  denied  { write } for  pid=20083 comm="syz.0.5175" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  632.461238][T20084] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  632.461543][T20084] EXT4-fs error (device loop0): ext4_dirty_inode:6587: inode #15: comm syz.0.5175: mark_inode_dirty error
[  632.496010][T20090] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.5176: invalid indirect mapped block 32768 (level 2)
[  632.518307][T20090] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  632.527236][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  632.544120][    C0] EXT4-fs (loop2): initial error at time 1781352237: ext4_free_branches:1023: inode 16
[  632.554483][    C0] EXT4-fs (loop2): last error at time 1781352237: ext4_free_branches:1023: inode 16
[  632.578332][T20090] EXT4-fs (loop2): 1 orphan inode deleted
[  632.584562][T20090] EXT4-fs (loop2): 1 truncate cleaned up
[  632.610082][T20090] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  632.660382][   T28] audit: type=1400 audit(1781352236.947:1765): avc:  denied  { accept } for  pid=20083 comm="syz.0.5175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  632.682072][T20084] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  632.684315][T20084] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #15: comm syz.0.5175: corrupted inode contents
[  632.745875][T13814] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  632.767093][T20084] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  632.773589][T20084] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #15: comm syz.0.5175: mark_inode_dirty error
[  632.832490][T20084] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  632.858240][T20084] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #15: comm syz.0.5175: corrupted inode contents
[  632.882190][T11301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  632.896881][T20084] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  632.898933][T20084] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #15: comm syz.0.5175: mark_inode_dirty error
[  632.935475][T20084] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  632.935650][T20084] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #15: comm syz.0.5175: corrupted inode contents
[  632.957034][T20084] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  632.957335][T20084] EXT4-fs error (device loop0): ext4_truncate:4690: inode #15: comm syz.0.5175: mark_inode_dirty error
[  632.970280][T20109] EXT4-fs: dax option not supported
[  633.017476][T20084] EXT4-fs error (device loop0): ext4_evict_inode:278: comm syz.0.5175: couldn't truncate inode 15 (err -117)
[  633.051713][T20109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  633.061364][T20107] 9p: Could not find request transport: Fd
[  633.082444][T12198] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  633.374490][T20121] set_capacity_and_notify: 4 callbacks suppressed
[  633.374541][T20121] loop0: detected capacity change from 0 to 1024
[  633.398769][T20114] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  633.410203][T20121] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  633.423067][T20121] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869)
[  633.443583][T20121] EXT4-fs error (device loop0): ext4_get_journal_inode:5896: comm syz.0.5185: inode #1: comm syz.0.5185: iget: illegal inode #
[  633.457422][T20121] loop0: lost filesystem error report for type 5 error -117
[  633.459051][T20121] EXT4-fs (loop0): no journal found
[  633.460916][T20114] EXT4-fs (loop1): failed to open journal device unknown-block(0,0) -6
[  633.466907][T20121] EXT4-fs (loop0): can't get journal size
[  633.467184][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  633.494353][    C0] EXT4-fs (loop0): initial error at time 1781352237: ext4_get_journal_inode:5896
[  633.504211][    C0] EXT4-fs (loop0): last error at time 1781352237: ext4_get_journal_inode:5896
[  633.531944][T20121] EXT4-fs (loop0): failed to initialize system zone (-22)
[  633.540403][T20121] EXT4-fs (loop0): mount failed
[  633.600870][T20121] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5185'.
[  633.682090][T20114] loop1: detected capacity change from 0 to 128
[  633.692964][T20131] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5189'.
[  633.704197][T20114] EXT4-fs: Ignoring removed nobh option
[  633.724988][   T28] audit: type=1400 audit(1781352238.207:1766): avc:  denied  { accept } for  pid=20125 comm="syz.5.5188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  633.755578][   T28] audit: type=1400 audit(1781352238.217:1767): avc:  denied  { ioctl } for  pid=20125 comm="syz.5.5188" path="socket:[63970]" dev="sockfs" ino=63970 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  633.828995][T20136] loop2: detected capacity change from 0 to 4096
[  633.840163][T20136] EXT4-fs: dax option not supported
[  633.857691][T20136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  633.896275][T20114] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  633.939785][T20134] loop0: detected capacity change from 0 to 4096
[  633.949152][T20134] EXT4-fs: Ignoring removed mblk_io_submit option
[  633.955821][T20134] EXT4-fs: Ignoring removed nomblk_io_submit option
[  634.101120][T20140] loop5: detected capacity change from 0 to 512
[  634.113500][T20140] EXT4-fs: Ignoring removed orlov option
[  634.139177][T20114] ext4 filesystem being mounted at /455/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  634.152514][T20140] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  634.209732][T20140] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.5192: invalid indirect mapped block 32768 (level 2)
[  634.227558][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  634.234736][    C0] EXT4-fs (loop5): initial error at time 1781352238: ext4_free_branches:1023: inode 16
[  634.244907][    C0] EXT4-fs (loop5): last error at time 1781352238: ext4_free_branches:1023: inode 16
[  634.270626][T20140] EXT4-fs (loop5): 1 orphan inode deleted
[  634.276790][T20140] EXT4-fs (loop5): 1 truncate cleaned up
[  634.304111][T20140] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  634.356309][T20134] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  634.382901][T20114] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:375: inode #2: comm syz.1.5184: No space for directory leaf checksum. Please run e2fsck -D.
[  634.442520][   T28] audit: type=1400 audit(1781352238.917:1768): avc:  denied  { write } for  pid=20133 comm="syz.0.5190" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  634.465659][T20114] EXT4-fs error (device loop1): __ext4_find_entry:1626: inode #2: comm syz.1.5184: checksumming directory block 0
[  634.494786][T12198] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  634.513388][T20148] 9p: Could not find request transport: Fd
[  634.546661][T11905] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  634.807235][T20158] loop1: detected capacity change from 0 to 764
[  634.826270][T13814] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  634.842526][T20158] Symlink component flag not implemented
[  634.866088][T20158] Symlink component flag not implemented (15)
[  634.951487][T20163] loop0: detected capacity change from 0 to 128
[  634.972646][T20164] loop2: detected capacity change from 0 to 1024
[  634.985529][T20164] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  634.996467][T20164] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869)
[  635.006904][T20164] EXT4-fs error (device loop2): ext4_get_journal_inode:5896: comm syz.2.5198: inode #1: comm syz.2.5198: iget: illegal inode #
[  635.020163][T20164] loop2: lost filesystem error report for type 5 error -117
[  635.021730][T20164] EXT4-fs (loop2): no journal found
[  635.029074][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  635.029088][    C0] EXT4-fs (loop2): initial error at time 1781352239: ext4_get_journal_inode:5896
[  635.029108][    C0] EXT4-fs (loop2): last error at time 1781352239: ext4_get_journal_inode:5896
[  635.060061][T20164] EXT4-fs (loop2): can't get journal size
[  635.071776][T20164] EXT4-fs (loop2): failed to initialize system zone (-22)
[  635.078997][T20164] EXT4-fs (loop2): mount failed
[  635.153900][T20161] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5198'.
[  635.609623][T20167] loop5: detected capacity change from 0 to 1024
[  635.645288][T20167] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  635.668951][T20167] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869)
[  635.680621][T20167] EXT4-fs error (device loop5): ext4_get_journal_inode:5896: comm syz.5.5199: inode #1: comm syz.5.5199: iget: illegal inode #
[  635.694311][T20167] loop5: lost filesystem error report for type 5 error -117
[  635.697125][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  635.710868][    C0] EXT4-fs (loop5): initial error at time 1781352240: ext4_get_journal_inode:5896
[  635.720061][    C0] EXT4-fs (loop5): last error at time 1781352240: ext4_get_journal_inode:5896
[  635.741808][T20163] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  635.794053][T20170] loop1: detected capacity change from 0 to 4096
[  635.821952][T20170] EXT4-fs: dax option not supported
[  635.845001][T20167] EXT4-fs (loop5): no journal found
[  635.859861][T20167] EXT4-fs (loop5): can't get journal size
[  635.897609][   T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  635.931393][T20167] EXT4-fs (loop5): failed to initialize system zone (-22)
[  635.939704][T20167] EXT4-fs (loop5): mount failed
[  635.945486][T20163] ext4 filesystem being mounted at /466/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  636.010614][   T28] audit: type=1400 audit(1781352240.487:1769): avc:  denied  { write } for  pid=20162 comm="syz.0.5200" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  636.234932][T20167] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5199'.
[  636.802478][  T418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  636.920616][T12198] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  636.946024][T20174] EXT4-fs: Ignoring removed orlov option
[  636.959734][T20174] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  637.055966][T20178] EXT4-fs: Ignoring removed mblk_io_submit option
[  637.064049][T20178] EXT4-fs: Ignoring removed nomblk_io_submit option
[  637.075198][T20179] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.5204: bg 0: block 127: padding at end of block bitmap is not set
[  637.091503][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  637.100292][T20174] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.5202: invalid indirect mapped block 32768 (level 2)
[  637.114393][T20174] fserror_report: 2 callbacks suppressed
[  637.114408][T20174] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  637.127246][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  637.144118][    C0] EXT4-fs (loop1): initial error at time 1781352241: ext4_free_branches:1023: inode 16
[  637.154738][    C0] EXT4-fs (loop1): last error at time 1781352241: ext4_free_branches:1023: inode 16
[  637.180427][T20174] EXT4-fs (loop1): 1 orphan inode deleted
[  637.180743][T20178] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  637.186786][T20174] EXT4-fs (loop1): 1 truncate cleaned up
[  637.227091][T20174] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  637.244701][   T28] audit: type=1400 audit(1781352241.727:1770): avc:  denied  { write } for  pid=20177 comm="syz.2.5205" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  637.278657][T20179] loop5: lost filesystem error report for type 5 error -117
[  637.297132][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  637.310899][    C1] EXT4-fs (loop5): initial error at time 1781352241: ext4_validate_block_bitmap:441
[  637.320290][    C1] EXT4-fs (loop5): last error at time 1781352241: ext4_validate_block_bitmap:441
[  637.346411][T20179] EXT4-fs error (device loop5): ext4_free_inode:354: comm syz.5.5204: bit already cleared for inode 11
[  637.353596][T11905] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  637.359998][T20179] loop5: lost filesystem error report for type 5 error -117
[  637.371544][T20179] EXT4-fs (loop5): 1 orphan inode deleted
[  637.386194][T20179] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  637.431970][T11301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  637.513501][T13814] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  637.652857][T20188] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  637.692514][T20190] EXT4-fs: Ignoring removed mblk_io_submit option
[  637.713206][T20190] EXT4-fs: Ignoring removed nomblk_io_submit option
[  637.720220][  T418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  637.741858][T20190] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  637.759647][T20188] EXT4-fs (loop1): failed to open journal device unknown-block(0,0) -6
[  637.794262][   T28] audit: type=1400 audit(1781352242.277:1771): avc:  denied  { write } for  pid=20189 comm="syz.2.5207" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  637.876869][T20188] EXT4-fs: Ignoring removed nobh option
[  637.900056][T11301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  637.939536][T20188] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  637.941043][T20188] ext4 filesystem being mounted at /459/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  637.972535][T20188] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:375: inode #2: comm syz.1.5206: No space for directory leaf checksum. Please run e2fsck -D.
[  637.972605][T20188] EXT4-fs error (device loop1): __ext4_find_entry:1626: inode #2: comm syz.1.5206: checksumming directory block 0
[  638.004123][T11905] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  638.037043][T20205] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  638.085239][T20205] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -6
[  638.100041][T20205] EXT4-fs: Ignoring removed nobh option
[  638.123155][T20205] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  638.123456][T20205] ext4 filesystem being mounted at /502/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  638.199538][T20204] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.5211: No space for directory leaf checksum. Please run e2fsck -D.
[  638.219811][T20204] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.5211: checksumming directory block 0
[  638.275431][T11301] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  638.319472][T20217] netlink: 'syz.5.5213': attribute type 1 has an invalid length.
[  638.327410][   T28] audit: type=1400 audit(1781352242.807:1772): avc:  denied  { name_bind } for  pid=20212 comm="syz.5.5213" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  638.368578][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  638.406637][   T28] audit: type=1400 audit(1781352242.887:1773): avc:  denied  { getopt } for  pid=20212 comm="syz.5.5213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  638.443480][T20196] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  638.520021][T20219] set_capacity_and_notify: 10 callbacks suppressed
[  638.520047][T20219] loop2: detected capacity change from 0 to 128
[  638.569564][T20225] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5215'.
[  638.605801][T20225] loop5: detected capacity change from 0 to 512
[  638.672381][T20228] syzkaller0: entered promiscuous mode
[  638.682195][T20229] 9p: Could not find request transport: Fd
[  638.691196][T20225] EXT4-fs (loop5): 1 orphan inode deleted
[  638.700100][T20228] syzkaller0: entered allmulticast mode
[  638.700698][T20225] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  638.786368][T20228] loop0: detected capacity change from 0 to 1024
[  638.794605][T20228] EXT4-fs: Ignoring removed nomblk_io_submit option
[  638.834504][T20228] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  638.889328][T20228] ext4 filesystem being mounted at /468/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  638.956695][T20234] loop4: detected capacity change from 0 to 128
[  639.015384][T20238] loop1: detected capacity change from 0 to 512
[  639.033427][T12198] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  639.065016][T20238] EXT4-fs: Ignoring removed orlov option
[  639.110584][T20238] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  639.139390][T20238] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.5216: invalid indirect mapped block 32768 (level 2)
[  639.153074][T20238] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  639.153490][T20238] EXT4-fs (loop1): 1 orphan inode deleted
[  639.162721][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  639.162743][    C1] EXT4-fs (loop1): initial error at time 1781352243: ext4_free_branches:1023: inode 16
[  639.162777][    C1] EXT4-fs (loop1): last error at time 1781352243: ext4_free_branches:1023: inode 16
[  639.175099][T20243] loop2: detected capacity change from 0 to 4096
[  639.185381][T20238] EXT4-fs (loop1): 1 truncate cleaned up
[  639.209224][T20238] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  639.277654][T20243] EXT4-fs: dax option not supported
[  639.318458][T20243] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  639.367455][T13814] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  639.441966][T20250] 9p: Could not find request transport: Fd
[  639.452068][T20246] loop4: detected capacity change from 0 to 512
[  639.478338][T20246] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  639.520322][T20246] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6
[  639.562810][T20250] loop5: detected capacity change from 0 to 512
[  639.592979][T20246] loop4: detected capacity change from 0 to 128
[  639.602550][T20250] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  639.623899][T20246] EXT4-fs: Ignoring removed nobh option
[  639.646828][T20246] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  639.662299][T20246] ext4 filesystem being mounted at /371/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  639.676050][T20250] EXT4-fs (loop5): failed to open journal device unknown-block(0,0) -6
[  639.703745][T20246] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:375: inode #2: comm syz.4.5222: No space for directory leaf checksum. Please run e2fsck -D.
[  639.766793][T20246] EXT4-fs error (device loop4): __ext4_find_entry:1626: inode #2: comm syz.4.5222: checksumming directory block 0
[  639.844672][T13157] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  639.862674][T20264] loop5: detected capacity change from 0 to 128
[  640.108601][T20273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  640.117422][T20273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  640.125902][T20273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  640.135800][T20273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  640.618252][T20275] syzkaller0: entered promiscuous mode
[  640.637906][T20275] syzkaller0: entered allmulticast mode
[  640.781567][T20278] EXT4-fs: Ignoring removed nomblk_io_submit option
[  640.882795][T20278] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  640.944796][T20278] ext4 filesystem being mounted at /343/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  640.965538][T20280] EXT4-fs: Ignoring removed mblk_io_submit option
[  640.972352][T20280] EXT4-fs: Ignoring removed nomblk_io_submit option
[  640.985541][T20280] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  641.006741][   T28] audit: type=1400 audit(1781352245.487:1774): avc:  denied  { write } for  pid=20279 comm="syz.2.5232" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  641.086408][T11905] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  641.127580][T13814] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  641.141902][T11301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  641.242055][T20289] netlink: 'syz.1.5233': attribute type 1 has an invalid length.
[  641.280315][T20289] netlink: 'syz.1.5233': attribute type 4 has an invalid length.
[  641.464460][T20300] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  641.495043][T20313] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5244'.
[  641.509452][T20314] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5242'.
[  641.559889][ T3489] net_ratelimit: 1020 callbacks suppressed
[  641.559922][ T3489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  641.573889][   T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  641.590257][T20313] bpf: Bad value for 'uid'
[  641.604312][T20311] EXT4-fs (loop4): 1 orphan inode deleted
[  641.614575][T20311] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  641.645882][T20313] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  641.662706][T20300] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -6
[  641.685427][T20313] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5244'.
[  641.689548][T20314] EXT4-fs (loop5): 1 orphan inode deleted
[  641.705680][T20314] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  641.708297][T20313] SELinux: failed to load policy
[  641.719377][   T28] audit: type=1400 audit(1781352246.167:1775): avc:  denied  { write } for  pid=20312 comm="syz.1.5244" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  641.789459][T20300] EXT4-fs: Ignoring removed nobh option
[  641.811354][T20300] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  641.826270][T11905] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  641.841278][T20300] ext4 filesystem being mounted at /510/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  641.864071][T20300] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.5238: No space for directory leaf checksum. Please run e2fsck -D.
[  641.908666][T20324] FAULT_INJECTION: forcing a failure.
[  641.908666][T20324] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  641.939451][T20300] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.5238: checksumming directory block 0
[  641.957560][T20324] CPU: 1 UID: 0 PID: 20324 Comm: syz.1.5245 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  641.957665][T20324] Tainted: [W]=WARN
[  641.957674][T20324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  641.957738][T20324] Call Trace:
[  641.957745][T20324]  <TASK>
[  641.957754][T20324]  __dump_stack+0x1d/0x30
[  641.957779][T20324]  dump_stack_lvl+0x95/0xd0
[  641.957835][T20324]  dump_stack+0x15/0x1b
[  641.957857][T20324]  should_fail_ex+0x25e/0x270
[  641.957895][T20324]  should_fail+0xb/0x20
[  641.957912][T20324]  should_fail_usercopy+0x1a/0x20
[  641.957934][T20324]  _copy_from_user+0x1c/0xb0
[  641.957992][T20324]  io_submit_one+0x52/0x1350
[  641.958029][T20324]  __se_sys_io_submit+0xfb/0x280
[  641.958057][T20324]  __x64_sys_io_submit+0x43/0x50
[  641.958081][T20324]  x64_sys_call+0x19d5/0x3020
[  641.958125][T20324]  do_syscall_64+0x136/0x3c0
[  641.958159][T20324]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  641.958191][T20324] RIP: 0033:0x7fd4552ace59
[  641.958207][T20324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  641.958252][T20324] RSP: 002b:00007fd453cff028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
[  641.958275][T20324] RAX: ffffffffffffffda RBX: 00007fd455525fa0 RCX: 00007fd4552ace59
[  641.958291][T20324] RDX: 00002000000002c0 RSI: 0000000000000002 RDI: 00007fd456060000
[  641.958307][T20324] RBP: 00007fd453cff090 R08: 0000000000000000 R09: 0000000000000000
[  641.958322][T20324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  641.958336][T20324] R13: 00007fd455526038 R14: 00007fd455525fa0 R15: 00007fff91f67878
[  641.958359][T20324]  </TASK>
[  642.193126][T11301] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  642.203235][   T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  642.224285][T13157] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  642.281352][T13814] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  642.405254][T20343] EXT4-fs: Ignoring removed nomblk_io_submit option
[  642.505166][T20343] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  642.556190][T20343] ext4 filesystem being mounted at /511/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  642.596422][T20321] EXT4-fs: Ignoring removed orlov option
[  642.713618][T20351] bond1: option tlb_dynamic_lb: invalid value (4)
[  642.736771][T11301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  642.747226][T20351] bond1 (unregistering): Released all slaves
[  642.754957][T20321] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  642.837533][   T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  642.848205][  T418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  642.902937][T20359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  642.959707][T20321] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.5243: invalid indirect mapped block 32768 (level 2)
[  642.986141][T20363] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  643.005792][T20364] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  643.020606][T20363] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  643.037824][T20364] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  643.102342][T20363] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  643.108595][T20321] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  643.113197][T20364] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  643.122396][    C1] EXT4-fs (loop0): error count since last fsck: 1
[  643.122418][    C1] EXT4-fs (loop0): initial error at time 1781352247: ext4_free_branches:1023: inode 16
[  643.122453][    C1] EXT4-fs (loop0): last error at time 1781352247: ext4_free_branches:1023: inode 16
[  643.160557][T20363] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  643.176413][T20321] EXT4-fs (loop0): 1 orphan inode deleted
[  643.191623][T20321] EXT4-fs (loop0): 1 truncate cleaned up
[  643.206600][T20321] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  643.382892][T20368] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5258'.
[  643.399934][T20368] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5258'.
[  643.459585][   T28] audit: type=1400 audit(1781352247.947:1776): avc:  denied  { getopt } for  pid=20367 comm="syz.1.5258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  643.480182][ T3489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  643.514262][T12198] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  643.534767][T20374] set_capacity_and_notify: 13 callbacks suppressed
[  643.534783][T20374] loop0: detected capacity change from 0 to 512
[  643.560557][T20375] loop5: detected capacity change from 0 to 1024
[  643.568878][T20374] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  643.571200][T20375] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  643.604354][T20375] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  643.634913][T20375] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  643.641669][   T28] audit: type=1400 audit(1781352248.117:1777): avc:  denied  { write } for  pid=12198 comm="syz-executor" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  643.667049][T12198] EXT4-fs error (device loop0): ext4_readdir:225: inode #12: comm syz-executor: path /475/file0/file0: directory fails checksum at offset 0
[  643.681994][T12198] EXT4-fs error (device loop0): ext4_empty_dir:3085: inode #12: comm syz-executor: Directory block failed checksum
[  643.694200][   T28] audit: type=1400 audit(1781352248.167:1778): avc:  denied  { write } for  pid=12198 comm="syz-executor" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  643.701204][T12198] EXT4-fs error (device loop0): ext4_readdir:225: inode #12: comm syz-executor: path /475/file0/file0: directory fails checksum at offset 0
[  643.732347][T20375] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  643.734339][T12198] EXT4-fs error (device loop0): ext4_empty_dir:3085: inode #12: comm syz-executor: Directory block failed checksum
[  643.742511][   T28] audit: type=1400 audit(1781352248.217:1779): avc:  denied  { write } for  pid=12198 comm="syz-executor" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  643.756652][T12198] EXT4-fs error (device loop0): ext4_readdir:225: inode #12: comm syz-executor: path /475/file0/file0: directory fails checksum at offset 0
[  643.789534][   T28] audit: type=1400 audit(1781352248.277:1780): avc:  denied  { write } for  pid=12198 comm="syz-executor" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  643.789558][T12198] EXT4-fs error (device loop0): ext4_empty_dir:3085: inode #12: comm syz-executor: Directory block failed checksum
[  643.789813][T12198] EXT4-fs error (device loop0): ext4_readdir:225: inode #12: comm syz-executor: path /475/file0/file0: directory fails checksum at offset 0
[  643.839235][T12198] EXT4-fs error (device loop0): ext4_empty_dir:3085: inode #12: comm syz-executor: Directory block failed checksum
[  643.841774][   T28] audit: type=1400 audit(1781352248.327:1781): avc:  denied  { write } for  pid=12198 comm="syz-executor" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  643.851915][T12198] EXT4-fs error (device loop0): ext4_readdir:225: inode #12: comm syz-executor: path /475/file0/file0: directory fails checksum at offset 0
[  643.888931][T13157] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  643.889138][T11301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  643.898958][T12198] EXT4-fs error (device loop0): ext4_empty_dir:3085: inode #12: comm syz-executor: Directory block failed checksum
[  643.907436][   T28] audit: type=1400 audit(1781352248.387:1782): avc:  denied  { write } for  pid=12198 comm="syz-executor" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  643.951934][   T28] audit: type=1400 audit(1781352248.437:1783): avc:  denied  { write } for  pid=12198 comm="syz-executor" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  643.994128][   T28] audit: type=1400 audit(1781352248.467:1784): avc:  denied  { write } for  pid=12198 comm="syz-executor" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  644.091960][T20393] loop2: detected capacity change from 0 to 1024
[  644.106838][T20393] EXT4-fs: Ignoring removed nomblk_io_submit option
[  644.151629][T20393] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  644.172129][T20394] loop1: detected capacity change from 0 to 4096
[  644.177249][T20393] ext4 filesystem being mounted at /515/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  644.182951][T20394] EXT4-fs: dax option not supported
[  644.235202][T11301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  644.283348][T20405] loop1: detected capacity change from 0 to 128
[  644.423846][T20414] loop1: detected capacity change from 0 to 128
[  644.449057][T20414] vfat: Unknown parameter ''
[  644.482681][T13814] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  644.574524][T20408] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  644.605070][T20408] syzkaller0: entered promiscuous mode
[  644.635488][T20408] syzkaller0: entered allmulticast mode
[  644.669012][T20414] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  644.795952][T20425] loop2: detected capacity change from 0 to 512
[  644.819617][T20425] EXT4-fs: Ignoring removed orlov option
[  644.831387][T12198] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  644.874434][T20425] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  644.923541][T20425] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.5270: invalid indirect mapped block 32768 (level 2)
[  644.960786][T20425] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  644.961324][T20425] EXT4-fs (loop2): 1 orphan inode deleted
[  644.970566][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  644.970589][    C1] EXT4-fs (loop2): initial error at time 1781352249: ext4_free_branches:1023: inode 16
[  644.970618][    C1] EXT4-fs (loop2): last error at time 1781352249: ext4_free_branches:1023: inode 16
[  645.073865][T20448] loop5: detected capacity change from 0 to 1024
[  645.093637][T20448] EXT4-fs: Ignoring removed nomblk_io_submit option
[  645.143028][T20448] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  645.166836][T20425] EXT4-fs (loop2): 1 truncate cleaned up
[  645.171960][T20459] loop4: detected capacity change from 0 to 2048
[  645.173233][T20425] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  645.191637][T20448] ext4 filesystem being mounted at /353/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  645.206212][T20459] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[  645.269932][T20459] loop4: detected capacity change from 0 to 128
[  645.316171][T13814] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  645.343900][T20459] ext4 filesystem being mounted at /384/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  645.390598][T20468] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5285'.
[  645.411817][T20468] bpf: Bad value for 'uid'
[  645.459483][T20468] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5285'.
[  645.509779][T20468] EXT4-fs (loop5): shut down requested (2)
[  645.687282][ T3419] tipc: Node number set to 1888966096
[  645.791583][T20450] bridge0: port 1(bridge_slave_0) entered blocking state
[  645.804337][T20450] bridge0: port 1(bridge_slave_0) entered disabled state
[  645.811800][T20450] bridge_slave_0: entered allmulticast mode
[  645.818365][T20450] bridge_slave_0: entered promiscuous mode
[  645.825160][T20450] bridge0: port 2(bridge_slave_1) entered blocking state
[  645.833475][T20450] bridge0: port 2(bridge_slave_1) entered disabled state
[  645.838067][T20482] EXT4-fs (loop4): 1 truncate cleaned up
[  646.469995][T20450] bridge_slave_1: entered allmulticast mode
[  646.476486][T20450] bridge_slave_1: entered promiscuous mode
[  646.502324][T20450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  646.528647][T20450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  646.623606][T20450] team0: Port device team_slave_0 added
[  646.644917][T20450] team0: Port device team_slave_1 added
[  646.698750][T20500] 9p: Could not find request transport: Fd
[  646.701997][T20450] batman_adv: batadv0: Adding interface: batadv_slave_0
[  646.724435][T20450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  646.770447][T20504] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  646.880186][T20450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  646.898531][T20450] batman_adv: batadv0: Adding interface: batadv_slave_1
[  646.905534][T20450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  646.946711][T20504] EXT4-fs (loop5): failed to open journal device unknown-block(0,0) -6
[  646.960502][T20450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  647.039732][T20450] hsr_slave_0: entered promiscuous mode
[  647.055987][T20450] hsr_slave_1: entered promiscuous mode
[  647.062494][T20450] debugfs: 'hsr0' already exists in 'hsr'
[  647.068343][T20450] Cannot create hsr debugfs directory
[  647.184519][T20511] GPT:first_usable_lbas don't match.
[  647.189881][T20511] GPT:34 != 290
[  647.193401][T20511] GPT: Use GNU Parted to correct GPT errors.
[  647.200015][T20511]  loop4: p1 p2 p3
[  647.293783][   T28] kauditd_printk_skb: 95 callbacks suppressed
[  647.293797][   T28] audit: type=1400 audit(1781352251.777:1880): avc:  denied  { append } for  pid=20513 comm="syz.5.5296" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  647.326506][  T418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  647.341342][   T77] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  647.451844][T20512] EXT4-fs: Ignoring removed nomblk_io_submit option
[  647.452951][ T2980] GPT:first_usable_lbas don't match.
[  647.477234][ T2980] GPT:34 != 290
[  647.489054][ T2980] GPT: Use GNU Parted to correct GPT errors.
[  647.503440][ T2980]  loop4: p1 p2 p3
[  647.515337][T20512] ext4 filesystem being mounted at /476/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  647.583059][T20450] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  647.610693][T20450] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  647.642176][T20525] netlink: 15 bytes leftover after parsing attributes in process `syz.2.5299'.
[  647.656225][T20409] tipc: Resetting bearer <eth:syzkaller0>
[  647.771325][T20409] tipc: Disabling bearer <eth:syzkaller0>
[  647.992624][  T418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  648.574621][T20545] set_capacity_and_notify: 5 callbacks suppressed
[  648.574643][T20545] loop4: detected capacity change from 0 to 1024
[  648.591270][T20545] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  648.602904][T20545] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869)
[  648.612683][T20545] EXT4-fs error (device loop4): ext4_get_journal_inode:5896: comm syz.4.5303: inode #1: comm syz.4.5303: iget: illegal inode #
[  648.625912][T20545] loop4: lost filesystem error report for type 5 error -117
[  648.627118][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  648.640827][    C0] EXT4-fs (loop4): initial error at time 1781352253: ext4_get_journal_inode:5896
[  648.650053][    C0] EXT4-fs (loop4): last error at time 1781352253: ext4_get_journal_inode:5896
[  648.659804][ T5330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  648.668629][  T418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  648.690769][T20545] EXT4-fs (loop4): no journal found
[  648.696013][T20545] EXT4-fs (loop4): can't get journal size
[  648.706041][T20545] EXT4-fs (loop4): failed to initialize system zone (-22)
[  648.713388][T20545] EXT4-fs (loop4): mount failed
[  648.736055][T20545] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5303'.
[  648.785783][T20450] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  648.794835][T20450] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  648.802484][T20450] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  648.815886][   T28] audit: type=1400 audit(1781352253.287:1881): avc:  denied  { audit_read } for  pid=20547 comm="syz.5.5304" capability=37  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  648.818547][T20450] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  648.876657][T20548] loop5: detected capacity change from 0 to 128
[  649.099885][T20548] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5304'.
[  649.129312][T20548] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5304'.
[  649.161034][   T28] audit: type=1400 audit(1781352253.647:1882): avc:  denied  { read } for  pid=20547 comm="syz.5.5304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  649.238352][   T77] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  649.392875][T20554] loop5: detected capacity change from 0 to 512
[  649.439667][T20554] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  649.496612][T20554] EXT4-fs (loop5): failed to open journal device unknown-block(0,0) -6
[  649.796587][T20450] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  649.827165][T20450] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  649.921764][T20554] loop5: detected capacity change from 0 to 128
[  649.972840][T20554] EXT4-fs: Ignoring removed nobh option
[  650.003062][T20450] 8021q: adding VLAN 0 to HW filter on device bond0
[  650.014714][T20554] ext4 filesystem being mounted at /364/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  650.041319][T20450] 8021q: adding VLAN 0 to HW filter on device team0
[  650.060110][  T418] bridge0: port 1(bridge_slave_0) entered blocking state
[  650.062350][T20554] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:375: inode #2: comm syz.5.5306: No space for directory leaf checksum. Please run e2fsck -D.
[  650.067227][  T418] bridge0: port 1(bridge_slave_0) entered forwarding state
[  650.094149][   T77] bridge0: port 2(bridge_slave_1) entered blocking state
[  650.101232][   T77] bridge0: port 2(bridge_slave_1) entered forwarding state
[  650.124012][T20554] EXT4-fs error (device loop5): __ext4_find_entry:1626: inode #2: comm syz.5.5306: checksumming directory block 0
[  650.146050][T20580] loop4: detected capacity change from 0 to 1024
[  650.151457][T20450] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  650.163040][T20450] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  650.176368][T20580] EXT4-fs: Ignoring removed nomblk_io_submit option
[  650.246014][T20580] ext4 filesystem being mounted at /393/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  650.381132][T20605] loop1: detected capacity change from 0 to 512
[  650.391563][T20450] 8021q: adding VLAN 0 to HW filter on device batadv0
[  650.398785][T20605] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  650.425770][T20605] EXT4-fs (loop1): 1 orphan inode deleted
[  650.434527][T20605] EXT4-fs (loop1): 1 truncate cleaned up
[  650.446074][T20586] loop5: detected capacity change from 0 to 4096
[  650.460298][T20586] EXT4-fs: Ignoring removed mblk_io_submit option
[  650.467061][T20586] EXT4-fs: Ignoring removed nomblk_io_submit option
[  650.480581][   T28] audit: type=1400 audit(1781352254.967:1883): avc:  denied  { write } for  pid=20603 comm="syz.1.5316" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  650.511709][   T28] audit: type=1400 audit(1781352254.997:1884): avc:  denied  { write } for  pid=20585 comm="syz.5.5312" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  650.541816][   T28] audit: type=1400 audit(1781352255.027:1885): avc:  denied  { write } for  pid=20603 comm="syz.1.5316" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  650.574467][T20450] veth0_vlan: entered promiscuous mode
[  650.575609][   T28] audit: type=1400 audit(1781352255.047:1886): avc:  denied  { lock } for  pid=20603 comm="syz.1.5316" path="/481/file0/cpuset.effective_cpus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  650.586465][T20450] veth1_vlan: entered promiscuous mode
[  650.605045][   T28] audit: type=1400 audit(1781352255.067:1887): avc:  denied  { unmount } for  pid=11905 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  650.625129][T20450] veth0_macvtap: entered promiscuous mode
[  650.630880][   T28] audit: type=1400 audit(1781352255.117:1888): avc:  denied  { write } for  pid=11905 comm="syz-executor" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  650.638720][T20450] veth1_macvtap: entered promiscuous mode
[  650.658160][   T28] audit: type=1400 audit(1781352255.117:1889): avc:  denied  { write } for  pid=11905 comm="syz-executor" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  650.670226][T20450] batman_adv: batadv0: Interface activated: batadv_slave_0
[  650.697633][T20450] batman_adv: batadv0: Interface activated: batadv_slave_1
[  650.717824][  T418] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  650.727388][  T418] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  650.733080][T20622] 9p: Could not find request transport: Fd
[  650.736679][  T418] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  650.752313][  T418] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  650.842313][T20628] loop6: detected capacity change from 0 to 4096
[  650.853983][T20628] EXT4-fs: dax option not supported
[  650.909630][T20622] loop1: detected capacity change from 0 to 512
[  650.945424][T20622] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  650.975071][T20622] EXT4-fs (loop1): failed to open journal device unknown-block(0,0) -6
[  650.998332][T20638] loop5: detected capacity change from 0 to 1024
[  651.016862][T20638] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  651.073680][T20638] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  651.105027][ T5330] Bluetooth: hci0: Frame reassembly failed (-84)
[  651.240420][T20646] GPT:first_usable_lbas don't match.
[  651.245912][T20646] GPT:34 != 290
[  651.250045][T20646] GPT: Use GNU Parted to correct GPT errors.
[  651.256375][T20646]  loop6: p1 p2 p3
[  651.348575][ T2980] GPT:first_usable_lbas don't match.
[  651.354113][ T2980] GPT:34 != 290
[  651.374259][ T2980] GPT: Use GNU Parted to correct GPT errors.
[  651.420597][ T2980]  loop6: p1 p2 p3
[  651.542750][T20654] EXT4-fs: Ignoring removed nomblk_io_submit option
[  651.611323][T20654] ext4 filesystem being mounted at /395/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  651.772019][T20659] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5325'.
[  651.830081][T20660] EXT4-fs (loop4): 1 orphan inode deleted
[  652.063686][T20675] ext4 filesystem being mounted at /523/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  652.107506][T20678] EXT4-fs: dax option not supported
[  652.166933][T20680] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[  652.173506][T20680] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  652.181397][T20680] vhci_hcd vhci_hcd.0: Device attached
[  652.191564][T20680] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(5)
[  652.198099][T20680] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  652.210466][T20680] vhci_hcd vhci_hcd.0: Device attached
[  652.439568][ T3385] usb 5-1: new low-speed USB device number 2 using vhci_hcd
[  652.619926][T20692] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  652.650358][T20692] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  653.007163][T20706] 9p: Could not find request transport: Fd
[  653.077988][ T5330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  653.093371][  T418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  653.147851][T20704] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  653.163142][T20704] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869)
[  653.167566][T14364] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  653.176042][T20704] EXT4-fs error (device loop2): ext4_get_journal_inode:5896: comm syz.2.5337: inode #1: comm syz.2.5337: iget: illegal inode #
[  653.180735][T20645] Bluetooth: hci0: command 0x1003 tx timeout
[  653.210080][T20704] loop2: lost filesystem error report for type 5 error -117
[  653.211655][T20704] EXT4-fs (loop2): no journal found
[  653.219745][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  653.219796][    C0] EXT4-fs (loop2): initial error at time 1781352257: ext4_get_journal_inode:5896
[  653.220124][    C0] EXT4-fs (loop2): last error at time 1781352257: ext4_get_journal_inode:5896
[  653.276988][T20704] EXT4-fs (loop2): can't get journal size
[  653.286463][T20704] EXT4-fs (loop2): failed to initialize system zone (-22)
[  653.294510][T20704] EXT4-fs (loop2): mount failed
[  653.360055][T20704] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5337'.
[  653.425316][T20712] EXT4-fs: Ignoring removed orlov option
[  653.469194][T20723] ext4 filesystem being mounted at /376/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  653.504921][T20712] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  653.535909][   T28] kauditd_printk_skb: 1 callbacks suppressed
[  653.535932][   T28] audit: type=1400 audit(1781352258.007:1891): avc:  denied  { write } for  pid=20722 comm="syz.5.5342" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  653.647797][T20729] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5344'.
[  653.671711][T20712] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #16: comm syz.6.5336: invalid indirect mapped block 32768 (level 2)
[  653.692658][T20728] set_capacity_and_notify: 10 callbacks suppressed
[  653.692724][T20728] loop5: detected capacity change from 0 to 128
[  653.707601][T20712] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  653.708074][T20712] EXT4-fs (loop6): 1 orphan inode deleted
[  653.717297][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  653.717313][    C1] EXT4-fs (loop6): initial error at time 1781352258: ext4_free_branches:1023: inode 16
[  653.717360][    C1] EXT4-fs (loop6): last error at time 1781352258: ext4_free_branches:1023: inode 16
[  653.770435][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  653.788564][T20730] loop4: detected capacity change from 0 to 1024
[  653.798273][T20712] EXT4-fs (loop6): 1 truncate cleaned up
[  653.824699][T20730] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ee018, mo2=0002]
[  653.839053][T20730] System zones: 0-1, 3-8
[  653.847737][T20730] ext4 filesystem being mounted at /398/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  653.928400][T20732] loop2: detected capacity change from 0 to 128
[  654.069842][T20744] 9p: Could not find request transport: Fd
[  654.109274][T20740] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5348'.
[  654.182890][T20740] bond1: (slave dummy0): Releasing backup interface
[  654.323556][T20744] loop5: detected capacity change from 0 to 512
[  654.357762][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  654.368601][T20744] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  654.399907][T20750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5351'.
[  654.429235][T20750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5351'.
[  654.430345][T20744] EXT4-fs (loop5): failed to open journal device unknown-block(0,0) -6
[  654.438813][T20750] netlink: 304 bytes leftover after parsing attributes in process `syz.1.5351'.
[  654.457087][T20749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5351'.
[  654.482931][T20749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5351'.
[  654.495928][T20749] netlink: 304 bytes leftover after parsing attributes in process `syz.1.5351'.
[  654.640420][T20760] loop4: detected capacity change from 0 to 128
[  654.677745][T20760] ext4 filesystem being mounted at /400/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  654.699785][T20761] loop1: detected capacity change from 0 to 1024
[  654.714180][T20763] loop5: detected capacity change from 0 to 4096
[  654.724785][T20761] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  654.742129][T20763] EXT4-fs: dax option not supported
[  654.749331][   T28] audit: type=1400 audit(1781352259.227:1892): avc:  denied  { write } for  pid=20759 comm="syz.4.5354" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  654.805862][T20757] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000.
[  654.998555][   T77] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  655.042546][T20776] loop1: detected capacity change from 0 to 128
[  655.098293][T20767] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5356'.
[  655.125735][T20778] 9p: Could not find request transport: Fd
[  655.192092][T20781] bridge0: port 2(bridge_slave_1) entered disabled state
[  655.199341][T20781] bridge0: port 1(bridge_slave_0) entered disabled state
[  655.281078][T20781] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  655.292186][T20793] vhci_hcd vhci_hcd.4: default hub control req: 4016 v0303 i0004 l0
[  655.299356][T20781] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  655.345765][ T3489] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  655.355330][ T3489] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  655.371473][ T3489] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  655.386568][ T3489] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  655.423675][T20802] loop6: detected capacity change from 0 to 1764
[  655.436685][T20800] loop1: detected capacity change from 0 to 512
[  655.513249][T20800] EXT4-fs (loop1): 1 orphan inode deleted
[  655.579995][   T28] audit: type=1400 audit(1781352260.067:1893): avc:  denied  { create } for  pid=20815 comm="syz.6.5374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ipx_socket permissive=1
[  655.619359][T20817] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #15: comm syz.6.5374: corrupted inode contents
[  655.632092][T20817] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  655.632285][T20817] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem
[  655.641518][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  655.641539][    C0] EXT4-fs (loop6): initial error at time 1781352260: ext4_do_update_inode:5690: inode 15
[  655.641569][    C0] EXT4-fs (loop6): last error at time 1781352260: ext4_do_update_inode:5690: inode 15
[  655.678810][T20817] loop6: lost filesystem error report for type 5 error -117
[  655.678952][T20817] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #15: comm syz.6.5374: corrupted inode contents
[  655.698873][T20817] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  655.699025][T20817] EXT4-fs error (device loop6): ext4_evict_inode:315: inode #15: comm syz.6.5374: mark_inode_dirty error
[  655.722091][T20817] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  655.722242][T20817] EXT4-fs (loop6): 1 orphan inode deleted
[  656.003595][T20835] ==================================================================
[  656.011697][T20835] BUG: KCSAN: data-race in mas_wmb_replace / mtree_range_walk
[  656.019155][T20835] 
[  656.021464][T20835] write to 0xffff88810160f400 of 8 bytes by task 20834 on cpu 0:
[  656.029165][T20835]  mas_wmb_replace+0x22e/0x1770
[  656.034006][T20835]  mas_wr_store_entry+0x54a7/0x5a90
[  656.039194][T20835]  mas_store_prealloc+0x421/0x670
[  656.044209][T20835]  vma_complete+0x3c7/0x850
[  656.048702][T20835]  __split_vma+0x5da/0x640
[  656.053116][T20835]  vma_modify+0xbcc/0xc80
[  656.057435][T20835]  vma_modify_flags+0x182/0x210
[  656.062289][T20835]  mprotect_fixup+0x3a2/0x680
[  656.066959][T20835]  do_mprotect_pkey+0x69e/0x950
[  656.071803][T20835]  __x64_sys_mprotect+0x48/0x60
[  656.076647][T20835]  x64_sys_call+0x2768/0x3020
[  656.081316][T20835]  do_syscall_64+0x136/0x3c0
[  656.085899][T20835]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  656.091781][T20835] 
[  656.094089][T20835] read to 0xffff88810160f400 of 8 bytes by task 20835 on cpu 1:
[  656.101708][T20835]  mtree_range_walk+0x35a/0x480
[  656.106556][T20835]  mas_walk+0x1ac/0x340
[  656.110704][T20835]  lock_vma_under_rcu+0xc9/0x210
[  656.115637][T20835]  do_user_addr_fault+0x237/0x1060
[  656.120739][T20835]  exc_page_fault+0x62/0xa0
[  656.125234][T20835]  asm_exc_page_fault+0x26/0x30
[  656.130070][T20835] 
[  656.132384][T20835] value changed: 0xffff888104d0ec41 -> 0xffff88810160f400
[  656.139474][T20835] 
[  656.141779][T20835] Reported by Kernel Concurrency Sanitizer on:
[  656.147919][T20835] CPU: 1 UID: 0 PID: 20835 Comm: syz.5.5380 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  656.158844][T20835] Tainted: [W]=WARN
[  656.162630][T20835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  656.172673][T20835] ==================================================================
[  658.197607][   T77] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  658.205733][  T418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  658.837944][  T418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  659.397813][  T418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  659.477737][  T418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  660.757727][   T77] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  663.327678][   T77] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  663.958138][ T3489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  664.597555][ T3489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  664.605703][   T77] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  665.237568][  T418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog