last executing test programs:

2m29.963307385s ago: executing program 3 (id=4):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(0x0, r0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0)
signalfd(0xffffffffffffffff, &(0x7f00000006c0), 0x8)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x1003ffffffc]}, 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48)
r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7, 0xf60d}, 0x9092, 0x4, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0xfffffffc, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
fcntl$lock(r5, 0x26, &(0x7f0000000100)={0x0, 0x1, 0xffff, 0x7fff, r2})
openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x5, &(0x7f00000000c0)=ANY=[@ANYRES64=r5], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000bc0)=@bpf_lsm={0xd, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="350a000000000000611188000000000018000000000000000000000000f5000095000000000000", @ANYRESHEX=r7], &(0x7f0000000000)='GPL\x00', 0x857f}, 0x94)
r8 = semget$private(0x0, 0x20000000102, 0x0)
semtimedop(r8, &(0x7f0000000000)=[{0x4, 0xc, 0x800}], 0x1, 0x0)
semop(r8, &(0x7f0000000240)=[{0x2}, {0x0, 0xe65b}], 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7)
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48}, 0x44000)
add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="98", 0x1, 0xffffffffffffffff)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000380), 0x682001, 0x0)

2m27.622233814s ago: executing program 3 (id=8):
r0 = syz_clone(0x4008600, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x69)
ptrace(0x4207, r0)
ptrace(0x4207, r0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x48, 0x2, 0x6, 0x301, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000810}, 0x20004000)
ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0x0, 0x5004)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800718, &(0x7f00000003c0)={[{@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nobh}, {@resgid}, {@resuid}, {@nombcache}, {@noblock_validity}, {@usrquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}]}, 0x2, 0x4a3, &(0x7f00000004c0)="$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")

2m26.61075199s ago: executing program 3 (id=12):
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000380), 0x682001, 0x0)
fchdir(r0)
r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0xffff, 0x0, 0x798d}, 0x8, 0x0, 0x0, 0x48000000, 0x5, 0x0, 0x0})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r3, 0x10040)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x4e, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xb, 0xc2, 0x5, 0x0, 0x6, {[@timestamp={0x8, 0xa, 0x401, 0x6}, @fastopen={0x22, 0x2}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x5, @empty}]}}}}}}}, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xffffa888, 0x5}]}}}}}}}, 0x0)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x14)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x14, 0x4, 0x4, 0x8, 0x1014}, 0x50)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
bind$inet(r5, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x24, 0x6, 0x9}]}, 0x10)
syz_emit_ethernet(0xbe, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x68, 0x0, 0x0, 0x88, 0x0, @remote, @local}, {0xfffe, 0x4e24, 0x4d, 0x0, @wg=@initiation={0x1, 0x4, "497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d", "4bbef5e4007898221aa606d083cd59745493938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42", "ef7c9d6a98e3943f6892078bb952854743fe4dddd2e7c0ce70a4ac7d", {"a851525b16af17fe87acbae2ab0b233d", "01422d01cd53c3abe94331d0b7918724"}}}}}}}, 0x0)
write$cgroup_int(r4, &(0x7f0000000040)=0xfe8e, 0x12)

2m18.282670976s ago: executing program 3 (id=35):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000005c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x78bf, 0x0, 0x40204, 0x100039}, &(0x7f0000000340)=<r4=>0x0, &(0x7f0000000f80)=<r5=>0x0)
io_uring_setup(0x56ab, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000040)=0xefefffd7, 0x0, 0x4)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0})
io_uring_enter(r3, 0x3516, 0xc2de, 0x8, 0x0, 0x0)

2m18.254829707s ago: executing program 32 (id=35):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000005c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x78bf, 0x0, 0x40204, 0x100039}, &(0x7f0000000340)=<r4=>0x0, &(0x7f0000000f80)=<r5=>0x0)
io_uring_setup(0x56ab, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000040)=0xefefffd7, 0x0, 0x4)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0})
io_uring_enter(r3, 0x3516, 0xc2de, 0x8, 0x0, 0x0)

1m57.748964087s ago: executing program 0 (id=222):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
r1 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
syz_mount_image$iso9660(&(0x7f0000000fc0), &(0x7f0000000000)='./file1\x00', 0x8800, &(0x7f0000000d80)=ANY=[], 0x23, 0x7ff, &(0x7f00000001c0)="$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")
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents(r2, &(0x7f00000005c0)=""/59, 0x3b)
getdents(r2, 0xfffffffffffffffd, 0xbb)
r3 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r4 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_buf(r4, 0x29, 0x22, &(0x7f0000000100)="0f9064550378d9ca0755b373f13d36", 0xf)
r5 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0x77})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f00000009c0)=ANY=[@ANYBLOB="85000000fcbcca726a5ad99500000000000000ff410ec997ee3790f1c7572e8557a67049fdf930e75416066700000000"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94)
io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0)
sendmmsg(r3, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00001e9000/0x1000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r6 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89c, 0xc000, 0x2, 0x6})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xe, 0xfff0}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0)
close(0x3)
listen(r0, 0x2)

1m55.52730955s ago: executing program 0 (id=230):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, 0x0, 0x4040850)
r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5)
unshare(0x6c040000)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00')
write$binfmt_script(r6, &(0x7f0000000fc0)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', [], 0xa, "c5f49acb159d0e97dcc8685ce16afce456e886c5ccf1d3ef32a03b5f6a"}, 0x100e)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={<r7=>0x0}, &(0x7f0000000100)=0xc)
r8 = epoll_create(0xf)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
epoll_pwait(r8, &(0x7f0000000080)=[{}], 0x1, 0x1, 0x0, 0x0)
r9 = getpgid(r7)
ptrace$setregset(0x4205, r9, 0x200, 0x0)
prlimit64(r0, 0xc, &(0x7f0000000180)={0x8, 0x6}, &(0x7f0000000f80))

1m53.778576101s ago: executing program 0 (id=236):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f40)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000080), 0xfe41)
sendmsg$unix(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)='=', 0x1}], 0x1, 0x0, 0x0, 0x20000805}, 0x20000880)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000ec0)=@newtfilter={0x34, 0x2c, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000440), 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
setresuid(0x0, 0x0, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000240)=ANY=[@ANYBLOB="05c38c886b60aaaaaaaaaa4086dd6012000800103afffe800000000000000000bbff020000000000000000000000ff"], 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r6 = io_uring_setup(0x748, &(0x7f0000000100)={0x0, 0x9719, 0x20, 0x2, 0x2fd})
mmap$IORING_OFF_CQ_RING(&(0x7f0000192000/0x1000)=nil, 0x1000, 0x9, 0x8010, r6, 0x8000000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r7 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4)
io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0)

1m53.134675691s ago: executing program 0 (id=244):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2309fefffffffcffffff010000000500070000000000080009000000000006000200feffff7f08000a0004000100080017"], 0x3c}}, 0x0)
r2 = syz_clone(0x4008600, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x69)
ptrace(0x4207, r2)
ptrace(0x4207, r2)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601030000020000000000070000000c000780080012400000ffff0500010006000000050005cf28000adfc0000200000005000400000000000900020073797a310000000010000300686173683a69702c6d616300"], 0x54}, 0x1, 0x0, 0x0, 0x20000810}, 0x20004000)
ptrace$ARCH_SHSTK_UNLOCK(0x1e, r2, 0x0, 0x5004)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800718, &(0x7f00000003c0)={[{@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nobh}, {@resgid}, {@resuid}, {@nombcache}, {@noblock_validity}, {@usrquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}]}, 0x2, 0x4a3, &(0x7f00000004c0)="$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")

1m52.424576133s ago: executing program 0 (id=247):
r0 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = socket$kcm(0x10, 0x2, 0x4)
close(r1)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000005c0)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60064160af3653c001ac00800020009000c00040004c00364bc24eab556a717251e6182f27f0051f60a84c9f46b5caf2fb5fd90fd6fc513d4938037e786a6d0001000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl1\x00', <r3=>0x0, 0x2f, 0xf, 0x0, 0x9, 0x60, @empty, @mcast2, 0x10, 0x8, 0x8000}})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff0000"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_emit_ethernet(0xe, &(0x7f0000000400)={@local, @local, @void, {@generic={0x88f7}}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=r6, @ANYBLOB="00000000000000002800128009000100766574680000000018000280140001000000", @ANYRES32=r6], 0x48}, 0x1, 0x0, 0x0, 0x48800}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000180)=@gettaction={0x30, 0x32, 0x301, 0x0, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xa3}]}, 0x30}}, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0)
fsetxattr(r8, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)=':\x00', 0xffdf, 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000003c0))
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r9)
r10 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$NS_GET_OWNER_UID(r8, 0xb704, &(0x7f0000000540)=<r11=>0x0)
setsockopt$inet_IP_XFRM_POLICY(r10, 0x0, 0x11, &(0x7f0000000640)={{{@in=@multicast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e22, 0xfe, 0x4e24, 0x8, 0xe32a6e3a2e1142e1, 0xa0, 0x20, 0x3b, r3, r11}, {0x8, 0xc, 0x9, 0xd7, 0x3, 0x0, 0x7fffffff, 0x4}, {0xfffffffffffffffc, 0x5, 0x8001, 0x3960000000}, 0x7, 0x6e6bb9, 0x0, 0x0, 0x2}, {{@in6=@mcast2, 0x4d6, 0x6c}, 0x2, @in=@private=0xa010101, 0x3505, 0x2, 0x0, 0x3, 0x0, 0x7, 0x3}}, 0xe8)
perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0)

1m51.788644263s ago: executing program 0 (id=253):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
io_setup(0x6, &(0x7f0000000300)=<r1=>0x0)
r2 = eventfd2(0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f00006c4000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x9)
r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x2, @perf_config_ext={0x1, 0xf60e}, 0xba92, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
bind$bt_hci(r5, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x2, &(0x7f0000000080)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f0000001240)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r5, &(0x7f0000000040)="0300ffff0000", 0x6}])
syz_read_part_table(0x5cd, &(0x7f0000000600)="$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")
r7 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50)
io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0)
io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x3, r2}])
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xa}})
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r9}, 0xc)
listen(r8, 0x1000)

1m51.788003133s ago: executing program 33 (id=253):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
io_setup(0x6, &(0x7f0000000300)=<r1=>0x0)
r2 = eventfd2(0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f00006c4000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x9)
r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x2, @perf_config_ext={0x1, 0xf60e}, 0xba92, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
bind$bt_hci(r5, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x2, &(0x7f0000000080)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f0000001240)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r5, &(0x7f0000000040)="0300ffff0000", 0x6}])
syz_read_part_table(0x5cd, &(0x7f0000000600)="$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")
r7 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50)
io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0)
io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x3, r2}])
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xa}})
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r9}, 0xc)
listen(r8, 0x1000)

7.018308655s ago: executing program 6 (id=730):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000000)=0x21, 0x4)
bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000040)=0x40, 0x4)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)="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", 0x251}], 0x1}}], 0x1, 0x5)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f00000002c0)={0x20000000})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff)

6.931157489s ago: executing program 1 (id=731):
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="5500000020007fafb70000000000000081000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d5e801e0b009000000000100005ae583de0dd7d8319f98af84fda542e718f9", 0x55}], 0x1}, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x6e23, 0x7fff, @dev={0xfe, 0x80, '\x00', 0x37}, 0x9}, 0x1c)
connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x1, 0x0, 0x4, {0xa, 0x4e20, 0x80000001, @private0={0xfc, 0x0, '\x00', 0x1}, 0x81}}}, 0x32)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000380)=ANY=[], 0x8)
writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1)
socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r7 = getpid()
sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f0000001080)='\x00', 0x0)
request_key(&(0x7f00000010c0)='dns_resolver\x00', &(0x7f0000001100)={'syz', 0x2}, 0x0, 0x0)
futex(0x0, 0x800000000006, 0x0, 0x0, 0x0, 0x0)
mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f00000000c0)='btrfs\x00', 0x418, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
rseq(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, {0x0, 0xa7}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

3.737289267s ago: executing program 6 (id=740):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608ffff0000100018000000000000000000000000000a009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100004000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94)

3.407500192s ago: executing program 6 (id=744):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x7, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000050000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000500009500000000000000b7080000000100007b9a00fe00000000b509ffffff1f0000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000180000000095"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)

3.346721015s ago: executing program 6 (id=746):
openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x48000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'netdevsim0\x00'})
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x0, &(0x7f0000000180)}, 0x10)
close(0xffffffffffffffff)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc1}, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x18600, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608ffff0000100018000000000000000000000000000a009500000000000000360a020000000001180100002020782500fc1500002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78)

3.267496429s ago: executing program 5 (id=747):
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xe, 0x4a718, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x1}, 0x104b18, 0x6, 0x0, 0x1, 0x8, 0x4, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000440)={[0x7]}, 0x8, 0x0)
timer_create(0x2, &(0x7f0000000200)={0x0, 0x21}, &(0x7f0000bbdffc)=<r2=>0x0)
timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
clock_gettime(0x0, &(0x7f00000000c0)={<r3=>0x0, <r4=>0x0})
ppoll(&(0x7f0000000040)=[{r1, 0x48}, {0xffffffffffffffff, 0x8}, {0xffffffffffffffff, 0x20}, {r1}, {r0, 0x82}], 0x5, &(0x7f0000000100)={r3, r4+60000000}, &(0x7f00000001c0), 0x8)
r5 = syz_io_uring_setup(0x2231, &(0x7f0000000480)={0x0, 0xfec9, 0x0, 0xff7ffffa, 0x274, 0x0, r1}, &(0x7f0000000180)=<r6=>0x0, &(0x7f0000000280)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000007c0)=ANY=[@ANYBLOB="48000000100001002abd70000000000000000000", @ANYRES32=r9, @ANYBLOB="8121000000000000140003006772653000000000000000000000000014001680100001800c000400080000d0"], 0x48}}, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x0)
r11 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0)
getsockname$packet(r11, &(0x7f0000000080)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
socket$inet6(0xa, 0x1, 0x68)
sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES32=r12, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@delchain={0x24, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xfff2, 0xffff}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008801}, 0x0)
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r5, 0xdb4, 0xd070, 0x0, 0x0, 0x0)
r13 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$USBDEVFS_SUBMITURB(r13, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})

3.206454671s ago: executing program 6 (id=749):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socket$nl_sock_diag(0x10, 0x3, 0x4)
r3 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
r4 = socket(0x2b, 0x80801, 0x1)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0xfffffffc, 0x3c}, 0x2, @in=@local, 0x6, 0x4, 0x3, 0x0, 0x401}]}]}, 0xfc}}, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440))
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bridge0\x00', {0x1}, 0x8})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x0, 0xab, @empty, 0x1}, 0x1c)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xffffffffffff0000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60)

3.063595648s ago: executing program 4 (id=750):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x8001}, 0x4906}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x8c1}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0})
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', <r3=>0x0})
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0xa}, 0x9092, 0x0, 0x43a1bd76, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa)
r4 = socket$kcm(0xa, 0x1, 0x106)
setsockopt$sock_attach_bpf(r4, 0x29, 0x4e, 0x0, 0x4)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x1)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000002e80)={0x0, 0x0, &(0x7f0000002e40)={&(0x7f0000002dc0)=@ipv6_getroute={0x2c, 0x1a, 0x1, 0x70bd25, 0x25dfdbfb, {0xa, 0x0, 0x0, 0xf, 0xfd, 0x3, 0xff, 0x3, 0x880}, [@RTA_MARK={0x8, 0x10, 0x3}, @RTA_UID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x2)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x8, 0x0, 0x0, 0x7ffc0001}]})
getxattr(0x0, 0x0, 0x0, 0x0)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
shutdown(r6, 0x1)
connect$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x7, @any, 0x5}, 0xe)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r7, 0x400448cb, 0x0)
recvfrom(r7, &(0x7f0000000340)=""/202, 0xca, 0x40010000, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r7, {0x2, 0x4e24, @empty}, 0x2, 0x2, 0x2, 0x4}}, 0x80)
bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xe, 0xfff1}, {0x4, 0xd}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0)

3.062927778s ago: executing program 5 (id=751):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000000)=0x21, 0x4)
bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000040)=0x40, 0x4)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)="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", 0x251}], 0x1}}], 0x1, 0x5)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f00000002c0)={0x20000000})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff)

2.213773447s ago: executing program 4 (id=753):
r0 = socket$nl_route(0x10, 0x3, 0x0)
fcntl$getownex(r0, 0x10, 0xffffffffffffffff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
r1 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r1, &(0x7f0000000100)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e24, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}}, 0x24)
syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x71fe, 0x100, 0x14, 0x151}, &(0x7f0000000140)=<r2=>0x0, &(0x7f0000000200)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x110, &(0x7f0000000080)=0x4, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}})
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r6 = shmget$private(0x0, 0x2000, 0x54003f00, &(0x7f0000ffc000/0x2000)=nil)
shmat(r6, &(0x7f0000000000/0x4000)=nil, 0x6000)
shmctl$SHM_LOCK(r6, 0xb)
getsockopt$bt_BT_RCVMTU(r5, 0x112, 0xd, &(0x7f0000000040)=0xffff, &(0x7f00000001c0)=0x2)
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r3, &(0x7f0000001080)=@IORING_OP_FADVISE={0x18, 0x11, 0x0, @fd_index=0x8, 0x0, 0x0, 0x8, 0x0, 0x0, {0x0, r7}})
r8 = syz_open_dev$sg(&(0x7f00000010c0), 0xb2, 0x400000)
ioctl$SG_BLKTRACETEARDOWN(r8, 0x1276, 0x0)
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000)
syz_read_part_table(0x105b, &(0x7f0000000000)="$eJzsz72JAlEUBeDzZnbnZ2Fh081sykLMxEgDW7AEA6uwCnsxkJEZ0cxQRPi+6PHO4V5ueKuvx6tKk9+S7+RY9sl5aEqG6p53yaaM9Tb5q5OcujIFs2Xq/OfnyfxbKcMuKevFuHDbX1bTX9tnfnjtdQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwGa4BAAD//5KDDHA=")

2.003190827s ago: executing program 1 (id=754):
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e22, @multicast2}}, 0x0, 0x0, 0x3e, 0x0, "bb02a3c364ca41d6357e544508474004000b42a20000000000000010208a0e2f964e0000c534a632cd6193fcf19b2df3eea18afaa4ff1f56c54dc46d8b6d2ccd00a0cf0a007bbe00"}, 0xd8) (async)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e22, @multicast2}}, 0x0, 0x0, 0x3e, 0x0, "bb02a3c364ca41d6357e544508474004000b42a20000000000000010208a0e2f964e0000c534a632cd6193fcf19b2df3eea18afaa4ff1f56c54dc46d8b6d2ccd00a0cf0a007bbe00"}, 0xd8)
r0 = socket$kcm(0x23, 0x5, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x6, 0x4)
getsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@dev={0xfe, 0x80, '\x00', 0x1f}, 0xcb3d, 0x1, 0xff, 0x5, 0x400}, 0x20) (async)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@dev={0xfe, 0x80, '\x00', 0x1f}, 0xcb3d, 0x1, 0xff, 0x5, 0x400}, 0x20)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={<r3=>0x0}, &(0x7f0000000140)=0xc)
prlimit64(r3, 0xf, &(0x7f00000001c0)={0x5, 0x1}, &(0x7f0000000280)) (async)
prlimit64(r3, 0xf, &(0x7f00000001c0)={0x5, 0x1}, &(0x7f0000000280))
listen(r0, 0x8)
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78)
socket$can_raw(0x1d, 0x3, 0x1) (async)
r5 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x7, &(0x7f0000001c40)=0x2000ff, 0x4) (async)
setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x7, &(0x7f0000001c40)=0x2000ff, 0x4)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r6=>0x0})
sendmsg$can_raw(r5, &(0x7f0000000140)={&(0x7f0000000300)={0x1d, r6}, 0x10, &(0x7f00000002c0)={&(0x7f0000000380)=@canfd={{0x6, 0x0, 0x0, 0x1}, 0x38, 0x0, 0x0, 0x0, "5afd5a806f1455a8274d40d603ffc9a289b4913563cdaa68f8958f88fec2477cf8ddff35a0318dc18bd2bcafd80597a7e7b50a70ec1339f768e96cfae30b883c"}, 0x48}, 0x1, 0x0, 0x0, 0x20044082}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000380)=@delqdisc={0x434, 0x25, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x2, 0xf}, {0x0, 0x7}, {0xf, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x3, 0xfffffff8, 0x4, 0x40, 0x2, 0x2, 0x5, 0x7fff, 0x4, 0x1, 0x6, 0x1c8, 0x7, 0x0, 0x5, 0x0, 0x408, 0x9, 0x9, 0x9, 0xf5, 0x200, 0x1, 0x5, 0x6, 0xfff, 0x9, 0x1, 0x80, 0x10000, 0x0, 0x6, 0xff, 0x4, 0xfffffff5, 0x40000009, 0xe6c1, 0x6, 0x65, 0x6, 0x5, 0x71, 0x1f146d7e, 0x80000001, 0x89, 0xe9, 0x80000001, 0x2, 0xff, 0x8, 0xffff8dc2, 0x400, 0x0, 0x2, 0xffff, 0x10001, 0x3ff, 0x0, 0x5, 0xa000000, 0x0, 0x5, 0x8, 0x3, 0x0, 0x401, 0x5, 0x8, 0x4ad1, 0x1, 0x25ae, 0x1, 0xfff, 0x6, 0xe, 0xffffffff, 0x7, 0x5, 0x3fc, 0xfff, 0x8, 0x12, 0x0, 0x4, 0x626cfd3b, 0x0, 0x60df8662, 0x2, 0x5, 0x4, 0xc6, 0x8, 0x7, 0xfffffffa, 0x9, 0x4, 0x1, 0x3, 0x0, 0x7, 0x2, 0xffff8000, 0xe13, 0x8, 0x7, 0xc, 0xfdc1, 0x7ff, 0x4, 0xfffffff0, 0x4, 0x7fff, 0x40, 0x1, 0x1f1f, 0x3, 0x665195e1, 0x5, 0x7, 0x5, 0x8, 0x7, 0x4, 0x800, 0x101, 0x400, 0x2, 0x6, 0xd, 0x9, 0x7, 0xc5, 0x99, 0x4, 0x2e9, 0x4, 0x3, 0xf14d, 0xfffffffe, 0x7, 0x80000000, 0x8, 0x0, 0x4, 0x37, 0x4, 0x31, 0x2, 0x2, 0x3, 0x6, 0x1, 0x690c, 0x0, 0x9, 0x2, 0xe, 0xb, 0x8, 0x5597, 0x3, 0x4, 0x7fff, 0x62, 0xf6, 0x5, 0x0, 0x7fffffff, 0x9, 0xd, 0x2, 0x100, 0x6, 0x101, 0x5, 0x2, 0x3, 0x4, 0xfc8d, 0x8, 0x3ff, 0x3, 0xaeb3, 0x3, 0x5, 0x9, 0xfc, 0x8000, 0x1, 0x7, 0x20000, 0x4, 0x2, 0x9f85, 0x65, 0x85, 0x0, 0x2, 0x2, 0x6, 0x7, 0x8, 0x40, 0xfff, 0xe1, 0x8, 0x426, 0x5, 0x9, 0x1, 0x1000, 0x9, 0x36ae765f, 0x400, 0x9, 0x7fffffff, 0x3, 0x4, 0x5, 0x0, 0x89, 0x5, 0x80000000, 0x4007, 0x1, 0x41632842, 0x6, 0x10, 0x2, 0x8001, 0x5, 0x100, 0x8, 0x9, 0xfe64, 0xd, 0x1c2, 0x2, 0x6, 0x2, 0x80000001, 0xa, 0x6, 0xfffffffc, 0x5, 0x3, 0x7f, 0x8001, 0x5, 0x3, 0x6, 0x8001, 0x10001, 0x5, 0xb, 0x7]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40000}, 0x8010)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

1.904142032s ago: executing program 1 (id=755):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608ffff0000100018000000000000000000000000000a009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100004100000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94)

1.885594793s ago: executing program 4 (id=756):
socketpair(0x35, 0x1, 0x0, &(0x7f0000000200))
r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async)
r1 = fsmount(r0, 0x1, 0x1)
fchdir(r1) (async, rerun: 64)
symlink(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') (async, rerun: 64)
r2 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc3}, &(0x7f0000000180)={0x0, "4135ae1e0fe721441705322225930e6c1e3e2a51747cb4d42e2b253a6e0236805b4377f7ab1a9b01c103a4c6a7ef54e60000d7264c39ea00c508ba6062696118", 0x3f}, 0x48, 0xffffffffffffffff)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async)
keyctl$update(0x2, r2, 0x0, 0x0)

1.870159293s ago: executing program 2 (id=757):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x7, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000050000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000500009500000000000000b7080000000100007b9a00fe00000000b509ffffff1f0000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000200000000095"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)

1.854449424s ago: executing program 5 (id=758):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x7, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000500009500000000000000b7080000000100007b9a00fe00000000b509ffffff1f0000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000002000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)

1.763676769s ago: executing program 1 (id=759):
openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x48000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'netdevsim0\x00'})
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x0, &(0x7f0000000180)}, 0x10)
close(0xffffffffffffffff)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc1}, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x18600, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608ffff0000100018000000000000000000000000000a009500000000000000360a0200000000011801000020207825003b1600002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78)

1.756578199s ago: executing program 2 (id=760):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20008840)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x10040)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x5, 0x0, 0x6}}}}}}, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xffffa888, 0x5}]}}}}}}}, 0x0)

1.72778044s ago: executing program 2 (id=761):
r0 = fsopen(&(0x7f00000006c0)='sysfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
syz_io_uring_setup(0x1104, 0x0, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x4000000)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
getdents64(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
r3 = fsmount(r1, 0x1, 0x79)
ioctl$BTRFS_IOC_SPACE_INFO(r3, 0xc0109414, &(0x7f0000001dc0)={0x4a5, 0x7fffffffffffffff, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4)
open_by_handle_at(0xffffffffffffff9c, 0x0, 0x0)
fchdir(r1)
setuid(0xee01)
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffe11)

1.655641913s ago: executing program 5 (id=762):
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00\x00/'], 0x50)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
ppoll(&(0x7f0000000300)=[{r2, 0x4236}], 0x1, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20)
writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r3 = fsopen(0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x2)
statx(0xffffffffffffff9c, 0x0, 0x1000, 0x800, 0x0)
r5 = socket(0x10, 0x3, 0x0)
getpeername$packet(r5, 0x0, &(0x7f0000000640))
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
getsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000180), &(0x7f00000001c0)=0x4)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'bond0\x00', <r7=>0x0})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'gretap0\x00', <r8=>0x0})
sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r7], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)

1.655152794s ago: executing program 4 (id=763):
r0 = socket$key(0xf, 0x3, 0x2)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socket$can_raw(0x1d, 0x3, 0x1)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f00000000c0)={0x0}, 0x1b}, 0x44801)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3b)
ioctl$int_in(r3, 0x5452, &(0x7f0000000100)=0x7)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffebb5ad9f0d004500002000000080001128bc101c4cec9078000000000000000000004e20000c907801000000"], 0x0)

1.627205125s ago: executing program 1 (id=764):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0xf9ff, 0x30, &(0x7f00000001c0), 0x10}, 0x71)
r3 = fsmount(r1, 0x0, 0x1)
fchdir(r3)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000025c0)=@newsa={0x184, 0x10, 0x1, 0x70bd2b, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x2, 0x2, 0x20, 0x0, 0x33}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@local, {0x0, 0x9, 0x6, 0x10000, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x2, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'lzjh\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'cryptd(sha256)\x00'}, 0x0, 0x180}}]}, 0x184}, 0x1, 0x0, 0x0, 0x8881}, 0x10)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
lseek(r5, 0x1, 0x0)
getdents64(r5, 0x0, 0x22)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd27, 0x25dfdc03, {0x2, 0x20, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@RTA_DST={0x8, 0x1d, @local}, @RTA_SPORT={0x6, 0x1c, 0x4e22}]}, 0x2c}}, 0x4040000)

1.468354872s ago: executing program 1 (id=765):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) (async)
r0 = syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000040)='./file0\x00', 0x2000800, &(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYRESOCT, @ANYRES64=0x0], 0x1, 0x296, &(0x7f0000000740)="$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")
r1 = signalfd(r0, &(0x7f0000000000)={[0x8]}, 0x8) (async)
stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, 0xee00}}, '\x00'})
statfs(&(0x7f0000000ac0)='.\x00', 0x0)

1.371642657s ago: executing program 2 (id=766):
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x0) (async)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(r0, &(0x7f0000000000/0x2000)=nil, 0x5000) (async)
shmctl$SHM_LOCK(r0, 0xb)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r1, 0x0, 0x880) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0x3fe3aa0262d8c583, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {0xffff, 0xffff}, {0xe, 0xc}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x14, 0x0, 0x8, 0x3, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x40) (async)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@newqdisc={0x34, 0x24, 0x400, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xe, 0x8}, {0x10, 0x6}, {0x5, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x40}}, @TCA_RATE={0x6, 0x5, {0xc, 0xa2}}]}, 0x34}, 0x1, 0x0, 0x0, 0x577937e0762adca1}, 0x0)
r7 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21)
pwritev2(r7, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1a00, 0x0, 0x3) (async)
mount(&(0x7f0000000240)=@filename='./bus\x00', 0x0, &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') (async)
shmctl$SHM_UNLOCK(r0, 0xc)

1.247564632s ago: executing program 2 (id=767):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x480702, 0x0)
ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000080)=0x6)
r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0xd9f8fa21c298c4cc, 0x0)
ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f00000001c0)={<r3=>0xffffffffffffffff})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r3, 0x58, &(0x7f0000000240)}, 0x10)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r4, &(0x7f0000000440), 0x10)
listen(r4, 0x0)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
accept4$unix(r4, 0x0, 0x0, 0x0)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x13, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
fcntl$lock(r7, 0x6, &(0x7f00000008c0)={0x0, 0x2, 0xdecd, 0x6})
connect$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
r8 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0)
socket$inet6(0xa, 0x80000, 0xa)
ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[{0x0, 0xff, 0x5, 0x8}, {0x8, 0x5, 0x3e, 0x9}, {0x6, 0xda, 0x24, 0x2}, {0x6, 0xe, 0x5, 0x6}, {0xe93, 0x45, 0xe, 0x9}, {0x2, 0xf8, 0xf8, 0x3588ef5d}]})
r9 = socket$kcm(0xa, 0x2, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
r10 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r10, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7b}, {@private=0xa010102, 0x4e22, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44)
r11 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(r11, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44)
sendmsg$sock(r9, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000000)={0x64e, 0x2, 0x10000, 0x8, 0x2})

1.229037493s ago: executing program 4 (id=768):
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYBLOB="100029bd7000ffdbdf250e0000002c00028008000800060000000800030000000000080006000001000005000d00000000000800060009"], 0x40}, 0x1, 0x0, 0x0, 0x20008040}, 0x44000) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=<r1=>0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0) (async)
sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r2)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYRESOCT=r1, @ANYRES16=r3, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}}, 0x0) (async)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x6c, r4, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5a, 0xa, ':\xe4'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000080}, 0x24000000)

1.157683337s ago: executing program 6 (id=769):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000000)=0x21, 0x4)
bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000040)=0x40, 0x4)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)="4137a29b582bd471798f15f967e7f8118e1abf61ebd7d146a12a42f6ffd2340daaa8dcf6da818cc0efac75e8c35abbde7a18e0226b424f5557c71db5d327baccef203377178ddb12221cdaf45711a2535ae87e6ab62ecba71b6f2ac0f6c9ead0ec52116d305204537900daaad0d6e4dd9d3ad654711b72964f28b8b5d231d709bf3cd4a0477ef446e7da5eaa15cc39e9c57d89217e33a93e080000000000000086448a8e871cf560229a3cc36317ac47bae1596458badc9ebde2c707dea2e18f859e20f7595cce0a88485e5223b2c8fc383e37cbbfe8353e2a8eb6dc65d76746a31d8f206f3152176a502d3e582a31933e40cff645d93afca045741f99af1cba5b3b6dd6c2edd5e6c4505ae594aa23cbc8a143512180028d9b3984a2517ac9a15154460ff0f654df3f8cf1c13455cb5f440a67de7a6dad269c76e2625c35222985a47aa3b920d97dea05c43bc937361d33781f8057097ca11a9d90eea3d8ae56f0e57f3a6f32f8786e165305301a3d86367337d2651a27b8c222f349491648ba165a6ed9a1e5e5397a1ee963651c2d9c79d6d5b34941375b6b53abcc7882c4e57a63de2e32c30e41030f24ae6efee9e3446eab3b5407cc20f581095dde95241e3853c4864ea7ecd07888956d9375b9ef74be4454d7693b53ed6bd0644cd93945b2eb35a6ac7c34aa11facf27ca4463e2bb1eef7126a982f0de190da6ca5b992c9fecf37053894f4b8001fa9902cb9544f8394c96faa2767c0af169cf7c3e0c49d962d47061f788999120bc2144d3bdd4cd8dc5c6f00b10958416318ef9ea9b4f2e2f92ad6ce8f2f0a6022a753acf1b3247", 0x251}], 0x1}}], 0x1, 0x5)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f00000002c0)={0x20000000})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff)

1.103375629s ago: executing program 5 (id=770):
r0 = open(&(0x7f0000000400)='./file1\x00', 0x160a00, 0x0)
ioctl$TIOCGPTPEER(r0, 0x5441, 0xffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
write$rfkill(r0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0)
r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x89901)
move_mount(r6, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x125)
syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff})
pipe2$9p(&(0x7f00000001c0)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r7}})
write$P9_RVERSION(r9, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065fffffc7f000005000000000000002e4c"], 0x41)
r10 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$IPT_SO_GET_REVISION_TARGET(r10, 0x0, 0x43, &(0x7f0000000040)={'ah\x00'}, &(0x7f0000000080)=0x1e)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x56f, &(0x7f0000000140)="$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")

824.150372ms ago: executing program 2 (id=771):
r0 = open(&(0x7f0000000400)='./file1\x00', 0x160a00, 0x0)
ioctl$TIOCGPTPEER(r0, 0x5441, 0xffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
write$rfkill(r0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0)
r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x89901)
move_mount(r6, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x125)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff})
pipe2$9p(&(0x7f00000001c0)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r7}})
write$P9_RVERSION(r9, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065fffffc7f000005000000000000002e4c"], 0x41)
r10 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$IPT_SO_GET_REVISION_TARGET(r10, 0x0, 0x43, &(0x7f0000000040)={'ah\x00'}, &(0x7f0000000080)=0x1e)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x56f, &(0x7f0000000140)="$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")

726.246757ms ago: executing program 4 (id=772):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x20008840)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x10040)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x5, 0x0, 0x6}}}}}}, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xffffa888, 0x5}]}}}}}}}, 0x0)

0s ago: executing program 5 (id=773):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608ffff0000100018000000000000000000000000000a009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100004400000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94)

kernel console output (not intermixed with test programs):

tributes in process `syz.1.107'.
[   59.343018][ T4135] netlink: 'syz.1.107': attribute type 20 has an invalid length.
[   59.377194][ T4145] SET target dimension over the limit!
[   59.447237][ T4145] loop0: detected capacity change from 0 to 4096
[   59.479152][ T4145] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   59.493418][ T4150] loop1: detected capacity change from 0 to 512
[   59.512051][ T4150] EXT4-fs: Ignoring removed oldalloc option
[   59.519332][ T4145] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   59.533638][ T4150] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   59.571208][ T4150] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   59.598199][ T4150] EXT4-fs (loop1): 1 truncate cleaned up
[   59.604352][ T4150] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   59.695867][ T4167] netlink: 40 bytes leftover after parsing attributes in process `syz.0.108'.
[   59.760516][ T4167] netlink: 260 bytes leftover after parsing attributes in process `syz.0.108'.
[   59.763054][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   59.816502][ T4161] loop4: detected capacity change from 0 to 128
[   59.838726][ T4171] loop2: detected capacity change from 0 to 512
[   59.860056][ T4171] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   59.905721][ T4171] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.116: iget: bad i_size value: 38620345925642
[   59.936083][ T4171] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   59.946137][ T4171] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.116: couldn't read orphan inode 15 (err -117)
[   59.952744][ T4173] loop5: detected capacity change from 0 to 256
[   59.955428][ T4171] loop2: lost filesystem error report for type 5 error -117
[   59.955980][    C1] EXT4-fs (loop2): error count since last fsck: 2
[   59.985020][ T4171] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   59.987883][    C1] EXT4-fs (loop2): initial error at time 1774009334: ext4_orphan_get:1391: inode 15
[   59.987917][    C1] EXT4-fs (loop2): last error at time 1774009334: ext4_orphan_get:1396
[   60.237933][ T4191] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.116: bg 0: block 5: invalid block bitmap
[   60.304763][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.326168][ T4188] IPVS: set_ctl: invalid protocol: 51 127.0.0.1:20001
[   60.362612][ T4191] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 848 with error 28
[   60.421252][ T4191] EXT4-fs (loop2): This should not happen!! Data will be lost
[   60.421252][ T4191] 
[   60.431672][ T4198] ipt_REJECT: TCP_RESET invalid for non-tcp
[   60.440452][ T4191] EXT4-fs (loop2): Total free blocks count 0
[   60.447229][ T4191] EXT4-fs (loop2): Free/Dirty block details
[   60.453207][ T4191] EXT4-fs (loop2): free_blocks=0
[   60.481603][ T4191] EXT4-fs (loop2): dirty_blocks=904
[   60.499799][ T4212] loop5: detected capacity change from 0 to 2048
[   60.517956][ T4191] EXT4-fs (loop2): Block reservation details
[   60.527981][ T4191] EXT4-fs (loop2): i_reserved_data_blocks=904
[   60.644103][ T4223] loop1: detected capacity change from 0 to 4096
[   60.672882][ T3586] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 848 with max blocks 56 with error 28
[   60.691644][ T4223] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   60.695027][ T3659]  loop5: unable to read partition table
[   60.738986][ T3659] loop5: partition table beyond EOD, truncated
[   60.758641][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.867182][ T4212]  loop5: unable to read partition table
[   60.876019][ T4212] loop5: partition table beyond EOD, truncated
[   60.882185][ T4233] loop4: detected capacity change from 0 to 256
[   60.883008][ T4212] loop_reread_partitions: partition scan of loop5 () failed (rc=-5)
[   60.903399][ T4239] loop1: detected capacity change from 0 to 512
[   60.997669][ T4242] usb usb8: usbfs: process 4242 (syz.0.138) did not claim interface 0 before use
[   61.086132][ T4239] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   61.179826][ T4239] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   61.256740][ T3000]  loop5: unable to read partition table
[   61.280588][ T3000] loop5: partition table beyond EOD, truncated
[   61.618159][ T4266] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10)
[   61.620201][ T4264] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   61.624927][ T4266] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   61.642592][ T4264] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   61.671050][ T4266] vhci_hcd vhci_hcd.0: Device attached
[   61.712274][ T4272] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(13)
[   61.718989][ T4272] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   61.727483][ T4272] vhci_hcd vhci_hcd.0: Device attached
[   61.739509][ T4266] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(12)
[   61.746155][ T4266] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[   61.757371][ T4266] vhci_hcd vhci_hcd.0: Device attached
[   61.770113][ T3729] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   61.800089][ T4271] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #2: comm syz.1.136: corrupted inode contents
[   61.812520][ T4271] EXT4-fs error (device loop1): ext4_dirty_inode:6450: inode #2: comm syz.1.136: mark_inode_dirty error
[   61.824378][ T4271] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #2: comm syz.1.136: corrupted inode contents
[   61.839864][ T4272] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(21)
[   61.846551][ T4272] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   61.849779][ T4271] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #2: comm syz.1.136: mark_inode_dirty error
[   61.864810][ T4272] vhci_hcd vhci_hcd.0: Device attached
[   61.880099][ T4266] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(23)
[   61.886745][ T4266] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   61.895734][ T4266] vhci_hcd vhci_hcd.0: Device attached
[   61.915104][ T4286] vhci_hcd: connection closed
[   61.915212][ T4281] vhci_hcd: connection closed
[   61.920612][ T3575] vhci_hcd vhci_hcd.4: stop threads
[   61.927310][   T23] usb 9-1: new low-speed USB device number 2 using vhci_hcd
[   61.931519][ T3575] vhci_hcd vhci_hcd.4: release socket
[   61.973619][ T3575] vhci_hcd vhci_hcd.4: disconnect device
[   61.981992][ T4275] vhci_hcd: connection closed
[   62.008005][ T4273] vhci_hcd: connection closed
[   62.024091][ T3575] vhci_hcd vhci_hcd.4: stop threads
[   62.035538][ T4268] vhci_hcd: connection reset by peer
[   62.054113][ T3575] vhci_hcd vhci_hcd.4: release socket
[   62.061130][ T3575] vhci_hcd vhci_hcd.4: disconnect device
[   62.067191][ T3575] vhci_hcd vhci_hcd.4: stop threads
[   62.072664][ T3575] vhci_hcd vhci_hcd.4: release socket
[   62.078473][ T3575] vhci_hcd vhci_hcd.4: disconnect device
[   62.084497][ T3575] vhci_hcd vhci_hcd.4: stop threads
[   62.090099][ T3575] vhci_hcd vhci_hcd.4: release socket
[   62.095656][ T3575] vhci_hcd vhci_hcd.4: disconnect device
[   62.101745][ T3575] vhci_hcd vhci_hcd.4: stop threads
[   62.119029][ T3575] vhci_hcd vhci_hcd.4: release socket
[   62.124526][ T3575] vhci_hcd vhci_hcd.4: disconnect device
[   62.208456][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   62.530387][ T4302] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   62.551701][ T4302] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.151: bg 0: block 393: padding at end of block bitmap is not set
[   62.551738][ T4302] loop1: lost filesystem error report for type 5 error -117
[   62.551880][ T4302] EXT4-fs (loop1): Remounting filesystem read-only
[   62.551948][ T4302] EXT4-fs (loop1): 2 truncates cleaned up
[   62.552474][ T4302] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   62.692787][ T4312] msdos: Unknown parameter 'u^d'
[   62.937217][ T4312] EXT4-fs (loop4): revision level too high, forcing read-only mode
[   62.937342][ T4312] EXT4-fs (loop4): orphan cleanup on readonly fs
[   63.025702][ T4312] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #16: comm syz.4.154: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[   63.025747][ T4312] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   63.025906][    C0] EXT4-fs (loop4): error count since last fsck: 1
[   63.025958][    C0] EXT4-fs (loop4): initial error at time 1774009337: ext4_ext_check_inode:521: inode 16
[   63.025993][    C0] EXT4-fs (loop4): last error at time 1774009337: ext4_ext_check_inode:521: inode 16
[   63.026190][ T4312] EXT4-fs (loop4): Remounting filesystem read-only
[   63.026754][ T4312] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   63.027251][ T4312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   63.201788][ T4296] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.150'.
[   64.477695][ T4330] set_capacity_and_notify: 6 callbacks suppressed
[   64.477712][ T4330] loop4: detected capacity change from 0 to 2048
[   64.495569][   T28] kauditd_printk_skb: 48 callbacks suppressed
[   64.495587][   T28] audit: type=1326 audit(1774009339.386:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4331 comm="syz.5.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a5f9c799 code=0x7ffc0000
[   64.496428][   T28] audit: type=1326 audit(1774009339.396:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4331 comm="syz.5.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f22a5f9c799 code=0x7ffc0000
[   64.496468][   T28] audit: type=1326 audit(1774009339.396:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4331 comm="syz.5.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a5f9c799 code=0x7ffc0000
[   64.496532][   T28] audit: type=1326 audit(1774009339.396:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4331 comm="syz.5.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f22a5f9c799 code=0x7ffc0000
[   64.496848][   T28] audit: type=1326 audit(1774009339.396:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4331 comm="syz.5.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a5f9c799 code=0x7ffc0000
[   64.497605][   T28] audit: type=1326 audit(1774009339.396:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4331 comm="syz.5.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f22a5f9c799 code=0x7ffc0000
[   64.497639][   T28] audit: type=1326 audit(1774009339.396:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4331 comm="syz.5.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a5f9c799 code=0x7ffc0000
[   64.497766][   T28] audit: type=1326 audit(1774009339.396:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4331 comm="syz.5.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f22a5f9c799 code=0x7ffc0000
[   64.498980][ T4333] loop0: detected capacity change from 0 to 512
[   64.499313][ T4333] EXT4-fs: test_dummy_encryption option not supported
[   64.510868][   T28] audit: type=1326 audit(1774009339.406:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4331 comm="syz.5.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a5f9c799 code=0x7ffc0000
[   64.510907][   T28] audit: type=1326 audit(1774009339.406:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4331 comm="syz.5.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f22a5f9c799 code=0x7ffc0000
[   64.518295][ T4330] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   64.519689][ T4330] capability: warning: `syz.4.157' uses deprecated v2 capabilities in a way that may be insecure
[   64.659599][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   64.946496][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   65.228463][ T4362] loop1: detected capacity change from 0 to 1024
[   67.546057][   T23] usb 9-1: enqueue for inactive port 0
[   67.551588][   T23] usb 9-1: enqueue for inactive port 0
[   67.710428][ T4379] netlink: 88 bytes leftover after parsing attributes in process `syz.0.171'.
[   68.030170][ T4385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.172'.
[   68.107756][ T4385] mmap: syz.1.172 (4385) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   68.165633][   T23] vhci_hcd vhci_hcd.4: vhci_device speed not set
[   68.636012][ T4356] syz.4.161 (4356) used greatest stack depth: 7880 bytes left
[   68.706165][ T4415] cgroup: No subsys list or none specified
[   68.707832][ T4409] netlink: 12 bytes leftover after parsing attributes in process `syz.2.177'.
[   68.815272][ T4395] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.173'.
[   68.816938][ T4420] loop1: detected capacity change from 0 to 128
[   69.003001][ T4442] sg_write: data in/out 1196/14 bytes for SCSI command 0x0-- guessing data in;
[   69.003001][ T4442]    program syz.4.183 not setting count and/or reply_len properly
[   69.050784][ T4440] loop1: detected capacity change from 0 to 512
[   69.089976][ T4451] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.185'.
[   69.109712][ T4440] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   69.136483][ T4440] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.182: bg 0: block 393: padding at end of block bitmap is not set
[   69.226213][ T4440] loop1: lost filesystem error report for type 5 error -117
[   69.226607][ T4440] EXT4-fs (loop1): Remounting filesystem read-only
[   69.240754][    C0] EXT4-fs (loop1): error count since last fsck: 1
[   69.240775][    C0] EXT4-fs (loop1): initial error at time 1774009344: ext4_validate_block_bitmap:441
[   69.240804][    C0] EXT4-fs (loop1): last error at time 1774009344: ext4_validate_block_bitmap:441
[   69.312016][ T4440] EXT4-fs (loop1): 2 truncates cleaned up
[   69.358652][ T4440] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   69.465338][ T4476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.189'.
[   69.474483][ T4476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.189'.
[   69.499952][ T4476] bridge1: entered promiscuous mode
[   69.515445][ T4476] bridge1: entered allmulticast mode
[   69.546340][ T4483] loop2: detected capacity change from 0 to 1024
[   69.553315][ T4483] ext3: Bad value for 'max_batch_time'
[   69.668891][ T4494] netlink: 236 bytes leftover after parsing attributes in process `syz.0.192'.
[   69.762015][ T4452] capability: warning: `syz.5.184' uses 32-bit capabilities (legacy support in use)
[   69.847757][ T4500] loop4: detected capacity change from 0 to 512
[   69.953882][ T4500] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   69.966774][ T4500] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   70.136963][   T28] kauditd_printk_skb: 468 callbacks suppressed
[   70.136988][   T28] audit: type=1400 audit(1774009345.036:842): avc:  denied  { kexec_image_load } for  pid=4446 comm="syz.5.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[   70.378802][ T4514] loop2: detected capacity change from 0 to 512
[   70.407254][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.449411][ T4514] Quota error (device loop2): v2_read_file_info: Free block number 58381 out of range (1, 6).
[   70.469325][ T4514] EXT4-fs warning (device loop2): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   70.534111][ T4514] EXT4-fs (loop2): mount failed
[   70.544052][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.556639][ T4527] loop1: detected capacity change from 0 to 1024
[   70.579603][ T4527] Quota error (device loop1): v2_read_file_info: Block with free entry 1 out of range (1, 6).
[   70.603249][ T4527] EXT4-fs warning (device loop1): ext4_enable_quotas:7236: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[   70.643207][ T4527] EXT4-fs (loop1): mount failed
[   70.768050][ T4537] loop4: detected capacity change from 0 to 512
[   70.820028][ T4537] FAT-fs (loop4): error, corrupted directory (invalid entries)
[   70.979241][ T4557] loop4: detected capacity change from 0 to 256
[   71.006273][ T4527] loop1: detected capacity change from 0 to 764
[   71.076919][ T4564] netlink: 8 bytes leftover after parsing attributes in process `syz.5.210'.
[   71.105352][   T28] audit: type=1400 audit(1774009345.976:843): avc:  denied  { mount } for  pid=4526 comm="syz.1.196" name="/" dev="loop1" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1
[   71.145306][ T4527] rock: directory entry would overflow storage
[   71.152659][ T4527] rock: sig=0x4f50, size=4, remaining=3
[   71.170789][ T4527] iso9660: Corrupted directory entry in block 6 of inode 1792
[   71.179655][   T28] audit: type=1400 audit(1774009346.066:844): avc:  denied  { name_bind } for  pid=4567 comm="syz.5.211" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[   71.201642][   T28] audit: type=1400 audit(1774009346.076:845): avc:  denied  { create } for  pid=4567 comm="syz.5.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[   71.249199][   T28] audit: type=1400 audit(1774009346.076:846): avc:  denied  { ioctl } for  pid=4567 comm="syz.5.211" path="socket:[9309]" dev="sockfs" ino=9309 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[   71.342301][ T4527] Symlink component flag not implemented
[   71.381355][ T4527] Symlink component flag not implemented (129)
[   71.404857][ T4586] loop0: detected capacity change from 0 to 1024
[   71.426479][   T28] audit: type=1400 audit(1774009346.316:847): avc:  denied  { read } for  pid=4590 comm="syz.5.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   71.451730][ T4527] rock: directory entry would overflow storage
[   71.458832][ T4527] rock: sig=0x4f50, size=4, remaining=3
[   71.465095][ T4527] iso9660: Corrupted directory entry in block 6 of inode 1792
[   71.492493][   T28] audit: type=1400 audit(1774009346.346:848): avc:  denied  { mount } for  pid=4592 comm="syz.4.218" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[   71.525943][   T28] audit: type=1400 audit(1774009346.416:849): avc:  denied  { write } for  pid=4590 comm="syz.5.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   71.580845][ T4600] loop4: detected capacity change from 0 to 512
[   71.597812][ T4586] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   71.673516][ T4600] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   71.684053][ T4600] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.219: bg 0: block 393: padding at end of block bitmap is not set
[   71.698664][ T4600] loop4: lost filesystem error report for type 5 error -117
[   71.698929][ T4600] EXT4-fs (loop4): Remounting filesystem read-only
[   71.706275][    C1] EXT4-fs (loop4): error count since last fsck: 1
[   71.706294][    C1] EXT4-fs (loop4): initial error at time 1774009346: ext4_validate_block_bitmap:441
[   71.706320][    C1] EXT4-fs (loop4): last error at time 1774009346: ext4_validate_block_bitmap:441
[   71.748725][ T4600] EXT4-fs (loop4): 2 truncates cleaned up
[   71.755224][ T4600] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   71.780982][ T4616] EXT4-fs error (device loop0): ext4_generic_delete_entry:2666: inode #12: block 7: comm syz.0.216: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0
[   71.862654][ T4618] 9p: Bad value for 'source'
[   72.020170][ T4616] EXT4-fs (loop0): Remounting filesystem read-only
[   72.114860][ T4614] loop1: detected capacity change from 0 to 1024
[   72.159631][ T4614] ext4: Unknown parameter 'uid'
[   72.222077][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.705764][ T4638] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (4096), stripe is disabled
[   72.720494][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.900242][ T4638] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #3: block 2: comm syz.1.225: lblock 2 mapped to illegal pblock 2 (length 1)
[   73.818328][ T4638] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   73.820577][ T4638] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #3: block 48: comm syz.1.225: lblock 0 mapped to illegal pblock 48 (length 1)
[   73.829794][    C0] EXT4-fs (loop1): error count since last fsck: 1
[   73.829811][    C0] EXT4-fs (loop1): initial error at time 1774009348: ext4_map_blocks:776: inode 3: block 2
[   73.829841][    C0] EXT4-fs (loop1): last error at time 1774009348: ext4_map_blocks:776: inode 3: block 2
[   73.958347][ T4638] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   73.958467][ T4638] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.225: Failed to acquire dquot type 0
[   74.229928][ T4638] loop1: lost filesystem error report for type 5 error -117
[   74.231823][ T4638] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6246: Corrupt filesystem
[   74.616698][ T4661] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[   74.658615][ T4638] loop1: lost filesystem error report for type 5 error -117
[   74.658794][ T4638] EXT4-fs error (device loop1): ext4_evict_inode:255: inode #11: comm syz.1.225: mark_inode_dirty error
[   75.590063][ T4638] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   75.590204][ T4638] EXT4-fs warning (device loop1): ext4_evict_inode:258: couldn't mark inode dirty (err -117)
[   75.622621][   T28] kauditd_printk_skb: 7 callbacks suppressed
[   75.622646][   T28] audit: type=1400 audit(1774009350.516:855): avc:  denied  { create } for  pid=4659 comm="syz.4.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   75.654124][   T28] audit: type=1400 audit(1774009350.516:856): avc:  denied  { write } for  pid=4659 comm="syz.4.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   75.660201][ T4638] EXT4-fs (loop1): 1 orphan inode deleted
[   75.729598][   T28] audit: type=1400 audit(1774009350.596:857): avc:  denied  { create } for  pid=4658 comm="syz.0.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[   75.737649][ T4638] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   75.756248][ T3577] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:28: lblock 1 mapped to illegal pblock 1 (length 1)
[   75.766173][ T4664] SELinux:  Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[   75.791771][   T28] audit: type=1400 audit(1774009350.656:858): avc:  denied  { mac_admin } for  pid=4658 comm="syz.0.230" capability=33  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   75.915937][   T28] audit: type=1400 audit(1774009350.676:859): avc:  denied  { getopt } for  pid=4658 comm="syz.0.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[   75.965695][ T3577] Quota error (device loop1): remove_tree: Can't read quota data block 1
[   75.975516][   T28] audit: type=1400 audit(1774009350.686:860): avc:  denied  { getopt } for  pid=4665 comm="syz.5.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   76.000368][ T3577] EXT4-fs error (device loop1): ext4_release_dquot:7037: comm kworker/u8:28: Failed to release dquot type 0
[   76.026828][ T4668] set_capacity_and_notify: 3 callbacks suppressed
[   76.026852][ T4668] loop2: detected capacity change from 0 to 512
[   76.043180][ T4670] netlink: 8 bytes leftover after parsing attributes in process `syz.5.233'.
[   76.049190][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.054298][ T4668] EXT4-fs: Ignoring removed bh option
[   76.071093][ T3322] EXT4-fs error (device loop1): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0
[   76.088819][ T4668] EXT4-fs: Ignoring removed oldalloc option
[   76.095848][ T4668] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   76.101893][ T3322] loop1: lost filesystem error report for type 5 error -117
[   76.107353][ T3322] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6246: Corrupt filesystem
[   76.124861][ T3322] loop1: lost filesystem error report for type 5 error -117
[   76.127428][ T3322] EXT4-fs error (device loop1): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error
[   76.147406][ T3322] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   76.147864][ T4668] EXT4-fs (loop2): 1 truncate cleaned up
[   76.163484][ T4668] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   76.198129][ T4680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.234'.
[   76.235950][ T4679] netlink: 8 bytes leftover after parsing attributes in process `syz.1.234'.
[   76.307658][   T28] audit: type=1400 audit(1774009351.206:861): avc:  denied  { bind } for  pid=4689 comm="syz.1.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   76.351710][   T28] audit: type=1400 audit(1774009351.236:862): avc:  denied  { setopt } for  pid=4689 comm="syz.1.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   76.382300][ T4691] loop1: detected capacity change from 0 to 128
[   76.414478][ T4691] 9pnet_virtio: no channels available for device syz
[   76.425987][   T28] audit: type=1400 audit(1774009351.306:863): avc:  denied  { mounton } for  pid=4689 comm="syz.1.238" path="/54/file1/file1" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1
[   76.469906][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.658052][ T4712] loop1: detected capacity change from 0 to 128
[   76.723772][ T4712] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4712 comm=syz.1.243
[   76.751790][ T4716] netlink: 36 bytes leftover after parsing attributes in process `syz.0.244'.
[   76.771363][ T4712] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=4712 comm=syz.1.243
[   76.809781][ T4716] loop0: detected capacity change from 0 to 512
[   76.863733][ T4716] EXT4-fs: Ignoring removed nobh option
[   76.943321][ T4716] EXT4-fs (loop0): 1 orphan inode deleted
[   77.153122][ T4697] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.240'.
[   77.199219][ T4716] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   77.378772][ T4736] loop4: detected capacity change from 0 to 512
[   77.407053][ T3313] EXT4-fs error (device loop0): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0
[   77.453786][ T4736] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement.
[   77.494772][ T3313] EXT4-fs error (device loop0): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 11
[   77.506654][ T3313] EXT4-fs error (device loop0): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 11
[   77.599825][ T4738] netlink: 36 bytes leftover after parsing attributes in process `syz.2.248'.
[   77.632299][ T4742] loop4: detected capacity change from 0 to 512
[   77.641975][ T4237] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.655986][ T4742] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[   77.665653][ T4742] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[   77.675028][ T4742] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended
[   77.685672][ T4742] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[   77.694997][ T4742] System zones: 0-2, 18-18, 34-35
[   77.701133][ T4742] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   77.735591][ T4742] EXT4-fs error (device loop4): ext4_generic_delete_entry:2666: inode #2: block 3: comm syz.4.250: bad entry in directory: inode out of bounds - offset=24, inode=134217739, rec_len=20, size=2048 fake=0
[   77.791623][ T4742] EXT4-fs error (device loop4) in ext4_delete_entry:2737: Corrupt filesystem
[   77.829427][ T4742] EXT4-fs warning (device loop4): ext4_rename_delete:3729: inode #2: comm syz.4.250: Deleting old file: nlink 4, error=-117
[   77.849013][ T4752] loop2: detected capacity change from 0 to 1024
[   77.952845][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.972027][ T4752] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   78.024377][ T4752] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.248: corrupted xattr block 113: invalid header
[   78.063103][ T3577] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.127171][ T3577] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.220763][ T3577] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.261205][ T3577] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.345535][ T3577] bridge_slave_1: left allmulticast mode
[   78.345634][ T3577] bridge_slave_1: left promiscuous mode
[   78.345832][ T3577] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.347202][ T3577] bridge_slave_0: left allmulticast mode
[   78.347223][ T3577] bridge_slave_0: left promiscuous mode
[   78.347408][ T3577] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.508800][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.546261][ T3577] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   78.556837][ T4782] loop2: detected capacity change from 0 to 2048
[   78.564800][ T3577] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   78.578709][ T4728]  loop2: p1 < > p4 < >
[   78.583043][ T4728] loop2: partition table partially beyond EOD, truncated
[   78.591307][ T3577] bond0 (unregistering): Released all slaves
[   78.599217][ T4728] loop2: p1 start 3405774848 is beyond EOD, truncated
[   78.615862][ T4760] chnl_net:caif_netlink_parms(): no params data found
[   78.626611][ T4782]  loop2: p1 < > p4 < >
[   78.630820][ T4782] loop2: partition table partially beyond EOD, truncated
[   78.649686][ T4782] loop2: p1 start 3405774848 is beyond EOD, truncated
[   78.698732][ T3577] hsr_slave_0: left promiscuous mode
[   78.704803][ T3577] hsr_slave_1: left promiscuous mode
[   78.720966][ T3577] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   78.729345][ T3577] batman_adv: batadv0: Removing interface: batadv_slave_0
[   78.730741][ T4728] udevd[4728]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[   78.749342][ T3577] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   78.756942][ T3577] batman_adv: batadv0: Removing interface: batadv_slave_1
[   78.772613][ T4728] udevd[4728]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[   78.795042][ T3577] veth1_macvtap: left promiscuous mode
[   78.802220][ T3577] veth0_macvtap: left promiscuous mode
[   78.828211][ T3577] veth1_vlan: left promiscuous mode
[   78.848494][ T3577] veth0_vlan: left promiscuous mode
[   78.908466][ T4792] netlink: 4 bytes leftover after parsing attributes in process `syz.5.262'.
[   79.054402][ T4811] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4811 comm=syz.5.262
[   79.070581][ T4809] loop2: detected capacity change from 0 to 164
[   79.079411][ T4809] loop2: detected capacity change from 0 to 128
[   79.145182][ T3577] team0 (unregistering): Port device team_slave_1 removed
[   79.158004][ T3577] team0 (unregistering): Port device team_slave_0 removed
[   79.207634][ T4797] netlink: 8 bytes leftover after parsing attributes in process `syz.5.262'.
[   79.274180][ T4760] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.283841][ T4760] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.291410][ T4760] bridge_slave_0: entered allmulticast mode
[   79.300870][ T4760] bridge_slave_0: entered promiscuous mode
[   79.307882][ T4760] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.315293][ T4760] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.322614][ T4760] bridge_slave_1: entered allmulticast mode
[   79.335406][ T4760] bridge_slave_1: entered promiscuous mode
[   79.378812][ T4760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   79.397422][ T4760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   79.477281][ T4760] team0: Port device team_slave_0 added
[   79.487639][ T4760] team0: Port device team_slave_1 added
[   80.519299][ T4833] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   80.532101][ T4833] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   80.560344][ T4835] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   80.573026][ T4835] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   80.653812][ T4760] batman_adv: batadv0: Adding interface: batadv_slave_0
[   80.668782][ T4848] netlink: 8 bytes leftover after parsing attributes in process `syz.4.271'.
[   80.669332][ T4760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   80.710454][ T4760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   80.722205][ T4760] batman_adv: batadv0: Adding interface: batadv_slave_1
[   80.729327][ T4760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   80.798490][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.809079][ T4760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   80.821658][ T4853] Illegal XDP return value 4294967274 on prog  (id 75) dev N/A, expect packet loss!
[   80.950333][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.954219][ T4760] hsr_slave_0: entered promiscuous mode
[   80.965934][ T4760] hsr_slave_1: entered promiscuous mode
[   81.037734][ T4868] netlink: 3260 bytes leftover after parsing attributes in process `syz.2.273'.
[   81.137415][ T4872] set_capacity_and_notify: 2 callbacks suppressed
[   81.137435][ T4872] loop1: detected capacity change from 0 to 8192
[   81.200536][   T28] kauditd_printk_skb: 20 callbacks suppressed
[   81.200553][   T28] audit: type=1400 audit(1774009356.096:884): avc:  denied  { create } for  pid=4871 comm="syz.1.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[   81.203761][ T4760] netdevsim netdevsim6 netdevsim0: renamed from eth0
[   81.210206][   T28] audit: type=1400 audit(1774009356.116:885): avc:  denied  { ioctl } for  pid=4871 comm="syz.1.276" path="socket:[14362]" dev="sockfs" ino=14362 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[   81.332650][ T4897] netlink: 'syz.1.280': attribute type 13 has an invalid length.
[   81.359148][ T4760] netdevsim netdevsim6 netdevsim1: renamed from eth1
[   81.622454][ T4897] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.629757][ T4897] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.709225][ T4897] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   81.720135][ T4897] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   81.775498][ T4760] netdevsim netdevsim6 netdevsim2: renamed from eth2
[   81.803990][ T3586] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   81.820057][ T3586] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   81.863105][   T28] audit: type=1400 audit(1774009356.756:886): avc:  denied  { ioctl } for  pid=4907 comm="syz.5.281" path="socket:[14633]" dev="sockfs" ino=14633 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   81.896315][ T4760] netdevsim netdevsim6 netdevsim3: renamed from eth3
[   81.949021][ T3586] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   82.314037][   T28] audit: type=1400 audit(1774009356.796:887): avc:  denied  { bind } for  pid=4907 comm="syz.5.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   82.852001][ T3586] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   83.068255][ T4918] loop1: detected capacity change from 0 to 1024
[   83.138104][ T4925] netlink: 28 bytes leftover after parsing attributes in process `syz.2.285'.
[   83.162498][ T4918] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   83.237716][ T4925] netlink: 7 bytes leftover after parsing attributes in process `syz.2.285'.
[   83.249750][   T28] audit: type=1400 audit(1774009357.846:888): avc:  denied  { getopt } for  pid=4909 comm="syz.1.282" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   83.342466][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.384766][ T4760] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.401900][ T4760] 8021q: adding VLAN 0 to HW filter on device team0
[   83.411727][ T4945] loop4: detected capacity change from 0 to 512
[   83.420052][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.427534][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.440598][ T4954] xt_connbytes: Forcing CT accounting to be enabled
[   83.472353][ T3586] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.479903][ T3586] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.528699][ T4958] loop1: detected capacity change from 0 to 1024
[   83.680476][ T4975] loop2: detected capacity change from 0 to 512
[   83.702313][ T4981] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   83.711287][ T4975] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   83.743103][   T28] audit: type=1400 audit(1774009614.632:889): avc:  denied  { ioctl } for  pid=4980 comm="syz.5.297" path="socket:[14786]" dev="sockfs" ino=14786 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   83.763394][ T4760] 8021q: adding VLAN 0 to HW filter on device batadv0
[   83.795991][ T4975] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.296: bg 0: block 393: padding at end of block bitmap is not set
[   83.811114][   T28] audit: type=1400 audit(1774009614.702:890): avc:  denied  { bind } for  pid=4980 comm="syz.5.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   83.837975][ T4975] loop2: lost filesystem error report for type 5 error -117
[   83.843837][ T4975] EXT4-fs (loop2): Remounting filesystem read-only
[   83.851223][    C1] EXT4-fs (loop2): error count since last fsck: 1
[   83.851247][    C1] EXT4-fs (loop2): initial error at time 1774009614: ext4_validate_block_bitmap:441
[   83.851278][    C1] EXT4-fs (loop2): last error at time 1774009614: ext4_validate_block_bitmap:441
[   83.866081][ T4981] veth0_virt_wifi: entered promiscuous mode
[   83.874257][ T4975] EXT4-fs (loop2): 2 truncates cleaned up
[   83.895679][ T4975] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   84.154970][ T4760] veth0_vlan: entered promiscuous mode
[   84.172177][ T4760] veth1_vlan: entered promiscuous mode
[   84.220178][ T4760] veth0_macvtap: entered promiscuous mode
[   84.222436][ T5020] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=170 sclass=netlink_route_socket pid=5020 comm=syz.5.300
[   84.239298][ T4760] veth1_macvtap: entered promiscuous mode
[   84.266085][ T4760] batman_adv: batadv0: Interface activated: batadv_slave_0
[   84.280721][ T4760] batman_adv: batadv0: Interface activated: batadv_slave_1
[   84.292143][ T3577] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.311992][ T3577] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.323153][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.334097][ T5020] netlink: 4 bytes leftover after parsing attributes in process `syz.5.300'.
[   84.367690][ T3577] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.413598][ T3577] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.439042][ T5026] dummy0: entered promiscuous mode
[   84.446790][ T5026] vlan3: entered promiscuous mode
[   84.456201][   T28] audit: type=1400 audit(1774009615.364:891): avc:  denied  { write } for  pid=5032 comm="syz.4.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   84.590519][   T28] audit: type=1400 audit(1774009615.485:892): avc:  denied  { nlmsg_read } for  pid=5042 comm="syz.2.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   84.626850][   T28] audit: type=1400 audit(1774009615.516:893): avc:  denied  { read } for  pid=5042 comm="syz.2.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   84.771483][ T5049] lo speed is unknown, defaulting to 1000
[   84.778154][ T5049] lo speed is unknown, defaulting to 1000
[   84.800633][ T5049] lo speed is unknown, defaulting to 1000
[   84.807237][ T5049] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   84.856210][ T5049] lo speed is unknown, defaulting to 1000
[   84.877429][ T5049] lo speed is unknown, defaulting to 1000
[   84.902952][ T5054] loop4: detected capacity change from 0 to 128
[   84.913134][ T5049] lo speed is unknown, defaulting to 1000
[   84.926341][ T5054] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   84.955756][ T5054] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   84.958194][ T5049] lo speed is unknown, defaulting to 1000
[   85.118044][ T5049] lo speed is unknown, defaulting to 1000
[   85.209050][ T5060] syzkaller1: entered promiscuous mode
[   85.214709][ T5060] syzkaller1: entered allmulticast mode
[   85.662528][ T3318] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   85.950573][ T5074] loop2: detected capacity change from 0 to 512
[   85.975122][ T5074] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   85.988430][ T5074] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   86.248945][ T5079] loop4: detected capacity change from 0 to 512
[   86.956143][ T5079] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   86.968791][ T5079] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   87.043876][ T5086] 9p: Bad value for 'source'
[   87.075450][ T5085] loop1: detected capacity change from 0 to 1764
[   87.085373][ T5085] iso9660: Unknown parameter 'fsmagic'
[   87.280153][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   87.360038][ T5101] loop4: detected capacity change from 0 to 764
[   87.500837][ T5105] loop1: detected capacity change from 0 to 512
[   87.961972][ T5108] syzkaller0: entered promiscuous mode
[   87.967571][ T5108] syzkaller0: entered allmulticast mode
[   87.979483][   T28] kauditd_printk_skb: 7 callbacks suppressed
[   87.979507][   T28] audit: type=1400 audit(1774009618.911:901): avc:  denied  { relabelfrom } for  pid=5106 comm="syz.4.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[   88.071609][   T28] audit: type=1400 audit(1774009618.992:902): avc:  denied  { relabelto } for  pid=5106 comm="syz.4.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[   88.142520][   T28] audit: type=1400 audit(1774009619.072:903): avc:  denied  { accept } for  pid=5109 comm="syz.5.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1
[   88.203186][ T5115] netlink: 'syz.5.324': attribute type 6 has an invalid length.
[   88.213394][   T28] audit: type=1400 audit(1774009619.072:904): avc:  denied  { ioctl } for  pid=5109 comm="syz.5.323" path="socket:[14946]" dev="sockfs" ino=14946 ioctlcmd=0x941e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   88.245804][ T5115] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.324'.
[   88.682326][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.755513][ T5116] netlink: 'syz.5.324': attribute type 6 has an invalid length.
[   88.767342][ T5116] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.324'.
[   89.269202][   T28] audit: type=1400 audit(1774009620.201:905): avc:  denied  { connect } for  pid=5156 comm="syz.1.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[   89.314387][   T28] audit: type=1400 audit(1774009620.251:906): avc:  denied  { write } for  pid=5156 comm="syz.1.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[   89.395220][ T5161] netlink: 'syz.4.332': attribute type 11 has an invalid length.
[   89.542429][ T5168] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.334'.
[   90.619317][ T5185] loop1: detected capacity change from 0 to 128
[   91.554089][ T5192] loop6: detected capacity change from 0 to 2048
[   91.562625][   T28] audit: type=1400 audit(1774009622.517:907): avc:  denied  { read } for  pid=5184 comm="syz.1.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   91.612878][   T28] audit: type=1400 audit(1774009622.567:908): avc:  denied  { name_bind } for  pid=5184 comm="syz.1.337" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[   91.645771][ T5192] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   91.657063][   T28] audit: type=1326 audit(1774009622.587:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5196 comm="syz.2.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca1b36c799 code=0x7ffc0000
[   91.691342][   T28] audit: type=1326 audit(1774009622.587:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5196 comm="syz.2.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca1b36c799 code=0x7ffc0000
[   91.733726][ T4760] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   91.769362][ T5203] netlink: 64 bytes leftover after parsing attributes in process `syz.1.342'.
[   91.830272][ T5209] loop6: detected capacity change from 0 to 512
[   91.848977][ T5209] EXT4-fs: Ignoring removed orlov option
[   91.861287][ T5211] loop4: detected capacity change from 0 to 128
[   91.873750][ T5209] EXT4-fs: Ignoring removed mblk_io_submit option
[   91.907412][ T5209] EXT4-fs error (device loop6): ext4_iget_extra_inode:5025: inode #15: comm syz.6.341: corrupted in-inode xattr: e_value size too large
[   91.960450][ T5209] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   91.960658][ T5209] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.341: couldn't read orphan inode 15 (err -117)
[   91.970822][    C1] EXT4-fs (loop6): error count since last fsck: 1
[   91.970841][    C1] EXT4-fs (loop6): initial error at time 1774009622: ext4_iget_extra_inode:5025: inode 15
[   91.970898][    C1] EXT4-fs (loop6): last error at time 1774009622: ext4_iget_extra_inode:5025: inode 15
[   92.009428][ T5209] loop6: lost filesystem error report for type 5 error -117
[   92.022517][ T5209] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   92.052483][ T5224] loop4: detected capacity change from 0 to 256
[   92.102201][ T4760] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   92.113444][ T5231] loop2: detected capacity change from 0 to 256
[   92.148722][ T5231] FAULT_INJECTION: forcing a failure.
[   92.148722][ T5231] name failslab, interval 1, probability 0, space 0, times 1
[   92.181807][ T5231] CPU: 0 UID: 0 PID: 5231 Comm: syz.2.350 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[   92.181848][ T5231] Tainted: [W]=WARN
[   92.181856][ T5231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   92.181870][ T5231] Call Trace:
[   92.181879][ T5231]  <TASK>
[   92.181889][ T5231]  __dump_stack+0x1d/0x30
[   92.181923][ T5231]  dump_stack_lvl+0x95/0xd0
[   92.181994][ T5231]  dump_stack+0x15/0x1b
[   92.182022][ T5231]  should_fail_ex+0x263/0x280
[   92.182132][ T5231]  should_failslab+0x8c/0xb0
[   92.182155][ T5231]  kmem_cache_alloc_noprof+0x66/0x400
[   92.182253][ T5231]  ? do_getname+0x2e/0x1c0
[   92.182282][ T5231]  ? __rcu_read_unlock+0x4e/0x70
[   92.182311][ T5231]  do_getname+0x2e/0x1c0
[   92.182348][ T5231]  getname_flags+0x1d/0x30
[   92.182411][ T5231]  do_sys_openat2+0x60/0x130
[   92.182447][ T5231]  __x64_sys_creat+0x65/0x90
[   92.182534][ T5231]  x64_sys_call+0x2ea0/0x3020
[   92.182568][ T5231]  do_syscall_64+0x12c/0x370
[   92.182597][ T5231]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   92.182622][ T5231] RIP: 0033:0x7fca1b36c799
[   92.182705][ T5231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   92.182729][ T5231] RSP: 002b:00007fca19dbf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
[   92.182752][ T5231] RAX: ffffffffffffffda RBX: 00007fca1b5e5fa0 RCX: 00007fca1b36c799
[   92.182766][ T5231] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000002c0
[   92.182778][ T5231] RBP: 00007fca19dbf090 R08: 0000000000000000 R09: 0000000000000000
[   92.182791][ T5231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   92.182823][ T5231] R13: 00007fca1b5e6038 R14: 00007fca1b5e5fa0 R15: 00007fff9c03a338
[   92.182850][ T5231]  </TASK>
[   92.415853][ T5241] netlink: 172 bytes leftover after parsing attributes in process `syz.2.351'.
[   92.427584][ T5241] netlink: 16 bytes leftover after parsing attributes in process `syz.2.351'.
[   92.591986][ T5247] loop2: detected capacity change from 0 to 256
[   92.828104][ T5236] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.348'.
[   93.101236][   T28] kauditd_printk_skb: 104 callbacks suppressed
[   93.101250][   T28] audit: type=1400 audit(1774009624.068:1015): avc:  denied  { write } for  pid=5258 comm="syz.4.354" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   93.141827][   T28] audit: type=1400 audit(1774009624.098:1016): avc:  denied  { open } for  pid=5258 comm="syz.4.354" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   93.169806][   T28] audit: type=1400 audit(1774009624.098:1017): avc:  denied  { read } for  pid=5258 comm="syz.4.354" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   93.194107][   T28] audit: type=1400 audit(1774009624.098:1018): avc:  denied  { block_suspend } for  pid=5258 comm="syz.4.354" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   95.103129][ T5297] loop6: detected capacity change from 0 to 256
[   95.202443][ T5297] FAULT_INJECTION: forcing a failure.
[   95.202443][ T5297] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   95.222206][ T5297] CPU: 0 UID: 0 PID: 5297 Comm: syz.6.361 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[   95.222275][ T5297] Tainted: [W]=WARN
[   95.222285][ T5297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   95.222301][ T5297] Call Trace:
[   95.222310][ T5297]  <TASK>
[   95.222320][ T5297]  __dump_stack+0x1d/0x30
[   95.222355][ T5297]  dump_stack_lvl+0x95/0xd0
[   95.222451][ T5297]  dump_stack+0x15/0x1b
[   95.222517][ T5297]  should_fail_ex+0x263/0x280
[   95.222548][ T5297]  should_fail+0xb/0x20
[   95.222572][ T5297]  should_fail_usercopy+0x1a/0x20
[   95.222609][ T5297]  strncpy_from_user+0x27/0x250
[   95.222665][ T5297]  ? kmem_cache_alloc_noprof+0x18c/0x400
[   95.222695][ T5297]  do_getname+0x59/0x1c0
[   95.222833][ T5297]  getname_flags+0x1d/0x30
[   95.222856][ T5297]  do_sys_openat2+0x60/0x130
[   95.222954][ T5297]  __x64_sys_creat+0x65/0x90
[   95.223057][ T5297]  x64_sys_call+0x2ea0/0x3020
[   95.223099][ T5297]  do_syscall_64+0x12c/0x370
[   95.223189][ T5297]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   95.223220][ T5297] RIP: 0033:0x7f71de28c799
[   95.223241][ T5297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   95.223336][ T5297] RSP: 002b:00007f71dccdf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
[   95.223406][ T5297] RAX: ffffffffffffffda RBX: 00007f71de505fa0 RCX: 00007f71de28c799
[   95.223420][ T5297] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000002c0
[   95.223432][ T5297] RBP: 00007f71dccdf090 R08: 0000000000000000 R09: 0000000000000000
[   95.223448][ T5297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   95.223465][ T5297] R13: 00007f71de506038 R14: 00007f71de505fa0 R15: 00007fff870dfc88
[   95.223537][ T5297]  </TASK>
[   95.694156][ T5328] lo speed is unknown, defaulting to 1000
[   95.982465][   T28] audit: type=1400 audit(1774009626.947:1019): avc:  denied  { accept } for  pid=5333 comm="syz.1.366" path="socket:[15170]" dev="sockfs" ino=15170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   96.045474][   T28] audit: type=1400 audit(1774009627.017:1020): avc:  denied  { shutdown } for  pid=5333 comm="syz.1.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   96.069734][ T5334] lo speed is unknown, defaulting to 1000
[   96.381654][ T5349] netlink: 'syz.6.368': attribute type 2 has an invalid length.
[   96.447707][ T5355] loop1: detected capacity change from 0 to 1024
[   96.482763][ T5355] ext4: Unknown parameter 'uid'
[   96.539409][ T5346] netlink: 14 bytes leftover after parsing attributes in process `syz.6.368'.
[   96.929463][   T28] audit: type=1400 audit(1774009627.249:1021): avc:  denied  { connect } for  pid=5344 comm="syz.6.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   97.262522][   T28] audit: type=1326 audit(1774009628.255:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5327 comm="syz.2.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca1b36c799 code=0x7ffc0000
[   97.448309][ T5356] loop2: detected capacity change from 0 to 512
[   97.521746][   T28] audit: type=1326 audit(1774009628.285:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5327 comm="syz.2.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca1b36c799 code=0x7ffc0000
[   97.574467][ T5356] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   97.653001][ T5374] loop6: detected capacity change from 0 to 512
[   97.699259][ T5356] EXT4-fs (loop2): 1 truncate cleaned up
[   97.715390][ T5374] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   97.725565][ T5356] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   97.760172][   T28] audit: type=1326 audit(1774009628.285:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5327 comm="syz.2.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7fca1b36c799 code=0x7ffc0000
[   97.809194][ T5374] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.374: bg 0: block 393: padding at end of block bitmap is not set
[   97.843937][ T5374] loop6: lost filesystem error report for type 5 error -117
[   97.844130][ T5374] EXT4-fs (loop6): Remounting filesystem read-only
[   97.851613][    C0] EXT4-fs (loop6): error count since last fsck: 1
[   97.851628][    C0] EXT4-fs (loop6): initial error at time 1774009628: ext4_validate_block_bitmap:441
[   97.851648][    C0] EXT4-fs (loop6): last error at time 1774009628: ext4_validate_block_bitmap:441
[   97.996483][ T5374] EXT4-fs (loop6): 2 truncates cleaned up
[   98.027932][ T5374] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   98.041683][ T5391] vhci_hcd vhci_hcd.2: default hub control req: 400e v000b i0008 l0
[   98.601811][   T28] kauditd_printk_skb: 23 callbacks suppressed
[   98.601863][   T28] audit: type=1400 audit(1774009629.604:1048): avc:  denied  { ioctl } for  pid=5407 comm="syz.5.378" path="/71/file2" dev="tmpfs" ino=392 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   98.762127][ T4760] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.792338][ T5418] loop1: detected capacity change from 0 to 8192
[   98.814855][ T5418] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   98.926160][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.995622][   T28] audit: type=1400 audit(1774009629.946:1049): avc:  denied  { setcheckreqprot } for  pid=5427 comm="syz.6.385" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[   99.072167][ T5428] loop6: detected capacity change from 0 to 512
[   99.207866][ T5428] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[   99.292503][ T5428] loop6: detected capacity change from 0 to 1024
[   99.340084][ T5428] EXT4-fs: Ignoring removed i_version option
[   99.410154][ T5428] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   99.455355][ T5428] Quota error (device loop6): do_check_range: Getting block 64 out of range 1-5
[   99.488383][ T5428] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0
[   99.510464][ T5428] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.385: Failed to acquire dquot type 0
[   99.540693][ T5428] loop6: lost filesystem error report for type 5 error -117
[   99.542810][ T5428] EXT4-fs error (device loop6): mb_free_blocks:2047: group 0, 
[   99.550302][    C0] EXT4-fs (loop6): error count since last fsck: 1
[   99.550329][    C0] EXT4-fs (loop6): initial error at time 1774009630: ext4_acquire_dquot:7001
[   99.550359][    C0] EXT4-fs (loop6): last error at time 1774009630: ext4_acquire_dquot:7001
[   99.582597][ T5428] inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt.
[   99.605610][ T5437] loop2: detected capacity change from 0 to 128
[   99.636872][ T5437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.384'.
[   99.656127][ T5437] loop2: detected capacity change from 0 to 512
[   99.663235][ T5437] journal_path: Non-blockdev passed as './file2'
[   99.677223][   T28] audit: type=1326 audit(1774009630.660:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5436 comm="syz.2.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca1b36c799 code=0x7ffc0000
[   99.717070][ T5437] EXT4-fs: error: could not find journal device path
[   99.725269][ T5428] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #13: comm syz.6.385: corrupted inode contents
[   99.769639][   T28] audit: type=1326 audit(1774009630.660:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5436 comm="syz.2.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fca1b36c799 code=0x7ffc0000
[   99.793132][   T28] audit: type=1326 audit(1774009630.660:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5436 comm="syz.2.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca1b36c799 code=0x7ffc0000
[   99.845207][ T5437] netlink: 12 bytes leftover after parsing attributes in process `syz.2.384'.
[   99.877559][ T5443] loop1: detected capacity change from 0 to 512
[   99.919003][ T5428] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[   99.927437][ T5428] EXT4-fs error (device loop6): ext4_dirty_inode:6450: inode #13: comm syz.6.385: mark_inode_dirty error
[  100.015056][ T5443] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  100.027859][ T5443] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  100.166829][ T5437] netlink: 48 bytes leftover after parsing attributes in process `syz.2.384'.
[  100.237023][ T5428] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  100.237437][ T5428] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #13: comm syz.6.385: corrupted inode contents
[  100.262324][ T5450] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.388'.
[  100.285394][   T28] audit: type=1326 audit(1774009630.660:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5436 comm="syz.2.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fca1b36c799 code=0x7ffc0000
[  100.373097][ T5428] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  100.373372][ T5428] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #13: comm syz.6.385: mark_inode_dirty error
[  100.390832][   T28] audit: type=1326 audit(1774009630.660:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5436 comm="syz.2.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca1b36c799 code=0x7ffc0000
[  100.402088][ T5428] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  100.417073][   T28] audit: type=1326 audit(1774009630.660:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5436 comm="syz.2.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fca1b36c799 code=0x7ffc0000
[  100.460681][ T5428] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #13: comm syz.6.385: corrupted inode contents
[  100.472968][ T5428] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  100.473180][ T5428] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem
[  100.491346][ T5428] loop6: lost filesystem error report for type 5 error -117
[  100.491536][ T5428] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #13: comm syz.6.385: corrupted inode contents
[  100.511562][ T5428] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  100.511784][ T5428] EXT4-fs error (device loop6): ext4_truncate:4587: inode #13: comm syz.6.385: mark_inode_dirty error
[  100.532450][ T5428] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  100.532678][ T5428] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem
[  100.552390][ T5428] loop6: lost filesystem error report for type 5 error -117
[  100.552807][ T5428] EXT4-fs (loop6): 1 truncate cleaned up
[  100.570658][ T5428] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  100.596053][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.667639][ T5456] sctp: [Deprecated]: syz.2.389 (pid 5456) Use of int in max_burst socket option deprecated.
[  100.667639][ T5456] Use struct sctp_assoc_value instead
[  100.692363][ T4760] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.723995][ T5463] netlink: 48 bytes leftover after parsing attributes in process `syz.4.392'.
[  100.741742][ T5460] loop1: detected capacity change from 0 to 512
[  100.751501][ T5460] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  100.803204][ T5460] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.391: bg 0: block 393: padding at end of block bitmap is not set
[  100.879501][ T5474] netlink: 24 bytes leftover after parsing attributes in process `syz.6.396'.
[  100.890033][ T5460] loop1: lost filesystem error report for type 5 error -117
[  100.890266][ T5460] EXT4-fs (loop1): Remounting filesystem read-only
[  100.904671][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  100.904693][    C1] EXT4-fs (loop1): initial error at time 1774009631: ext4_validate_block_bitmap:441
[  100.904731][    C1] EXT4-fs (loop1): last error at time 1774009631: ext4_validate_block_bitmap:441
[  100.930697][ T5460] EXT4-fs (loop1): 2 truncates cleaned up
[  100.933115][ T5481] loop2: detected capacity change from 0 to 512
[  100.938291][ T5460] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  101.021861][ T5481] netlink: 12 bytes leftover after parsing attributes in process `syz.2.397'.
[  101.632640][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.936345][ T5493] netlink: 65039 bytes leftover after parsing attributes in process `syz.6.400'.
[  102.324187][ T5531] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  102.833107][ T5531] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  103.246684][ T5538] lo speed is unknown, defaulting to 1000
[  103.353322][ T5531] EXT4-fs (loop6): shut down requested (0)
[  103.389211][ T5531] netlink: 12 bytes leftover after parsing attributes in process `syz.6.409'.
[  103.418184][ T5553] cgroup: Unknown subsys name 'GPL'
[  103.478439][ T5561] set_capacity_and_notify: 2 callbacks suppressed
[  103.478457][ T5561] loop4: detected capacity change from 0 to 256
[  103.479467][ T5561] vfat: Unknown parameter 'ÿ'
[  103.506046][ T4760] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.936632][ T5565] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.415'.
[  104.292518][ T5597] loop2: detected capacity change from 0 to 512
[  104.310362][ T5597] ext4: Bad value for 'max_dir_size_kb'
[  104.456982][ T5597] loop2: detected capacity change from 0 to 128
[  104.519539][ T5597] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  104.532833][ T5611] netlink: 20 bytes leftover after parsing attributes in process `syz.5.432'.
[  104.562161][ T5597] ext4 filesystem being mounted at /73/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  104.628377][ T5604] netlink: 'syz.2.427': attribute type 5 has an invalid length.
[  104.636290][ T5604] netlink: 168 bytes leftover after parsing attributes in process `syz.2.427'.
[  104.647894][   T28] kauditd_printk_skb: 48 callbacks suppressed
[  104.647913][   T28] audit: type=1400 audit(1774009635.619:1104): avc:  denied  { accept } for  pid=5596 comm="syz.2.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  104.677973][   T28] audit: type=1326 audit(1774009635.619:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5596 comm="syz.2.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca1b36c799 code=0x7ffc0000
[  104.701553][   T28] audit: type=1326 audit(1774009635.619:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5596 comm="syz.2.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fca1b36c799 code=0x7ffc0000
[  104.729243][   T28] audit: type=1326 audit(1774009635.619:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5596 comm="syz.2.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca1b36c799 code=0x7ffc0000
[  104.753197][   T28] audit: type=1326 audit(1774009635.619:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5596 comm="syz.2.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fca1b36c799 code=0x7ffc0000
[  104.776747][   T28] audit: type=1326 audit(1774009635.619:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5596 comm="syz.2.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca1b36c799 code=0x7ffc0000
[  104.809707][ T5622] loop6: detected capacity change from 0 to 512
[  104.836141][   T28] audit: type=1326 audit(1774009635.619:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5596 comm="syz.2.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fca1b36c799 code=0x7ffc0000
[  104.944073][ T5622] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  104.956929][ T5622] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  105.263993][ T3320] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  105.349520][ T5647] SELinux:  policydb string S does not match my string SE Linux
[  105.349542][ T5647] SELinux: failed to load policy
[  105.352600][ T5644] loop1: detected capacity change from 0 to 736
[  105.363662][   T28] audit: type=1400 audit(1774009636.394:1111): avc:  denied  { load_policy } for  pid=5646 comm="syz.2.439" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  105.393796][ T5652] loop2: detected capacity change from 0 to 128
[  105.484195][ T5636] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.438'.
[  107.231298][ T5665] loop1: detected capacity change from 0 to 256
[  107.258225][ T5665] vfat: Unknown parameter ''
[  107.394146][ T5672] netlink: 'syz.1.448': attribute type 5 has an invalid length.
[  107.420633][ T5672] netlink: 'syz.1.448': attribute type 9 has an invalid length.
[  107.455854][ T5672] loop1: detected capacity change from 0 to 512
[  107.590961][ T4760] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.606049][ T5672] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  107.644979][ T5672] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  107.725486][   T28] audit: type=1400 audit(1774009638.777:1112): avc:  denied  { getopt } for  pid=5678 comm="syz.6.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  107.786576][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.967717][ T5683] loop6: detected capacity change from 0 to 512
[  108.046608][ T5683] loop6: detected capacity change from 0 to 512
[  108.400315][   T28] audit: type=1326 audit(1774009639.460:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5704 comm="syz.2.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca1b36c799 code=0x7ffc0000
[  108.428220][ T5706] netlink: 20 bytes leftover after parsing attributes in process `syz.2.455'.
[  108.479683][ T5683] set_capacity_and_notify: 5 callbacks suppressed
[  108.479702][ T5683] loop6: detected capacity change from 0 to 512
[  108.541381][ T5683] loop6: detected capacity change from 0 to 512
[  108.591363][ T5683] loop6: detected capacity change from 0 to 512
[  108.648388][ T5683] loop6: detected capacity change from 0 to 512
[  108.697213][ T5721] loop2: detected capacity change from 0 to 256
[  108.755563][ T5683] loop6: detected capacity change from 0 to 512
[  108.867569][ T5731] loop2: detected capacity change from 0 to 512
[  108.913850][ T5731] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  108.915274][ T5736] loop6: detected capacity change from 0 to 128
[  108.990776][ T5737] loop1: detected capacity change from 0 to 512
[  109.198099][ T5731] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  109.212733][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  109.219184][    C1] EXT4-fs (loop2): initial error at time 1774009640: ext4_mb_generate_buddy:1315
[  109.228447][    C1] EXT4-fs (loop2): last error at time 1774009640: ext4_mb_generate_buddy:1315
[  109.323896][ T5737] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  109.336584][ T5737] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  109.449968][ T5731] EXT4-fs (loop2): 1 truncate cleaned up
[  109.474890][ T5731] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  109.571913][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.673595][ T5754] program syz.2.466 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  111.496102][ T5767] netlink: 28 bytes leftover after parsing attributes in process `syz.5.470'.
[  111.556044][ T5767] netlink: 'syz.5.470': attribute type 1 has an invalid length.
[  111.575931][ T5768] sctp: [Deprecated]: syz.5.470 (pid 5768) Use of struct sctp_assoc_value in delayed_ack socket option.
[  111.575931][ T5768] Use struct sctp_sack_info instead
[  111.789145][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.014785][ T5778] lo speed is unknown, defaulting to 1000
[  112.263969][   T28] kauditd_printk_skb: 254 callbacks suppressed
[  112.264045][   T28] audit: type=1400 audit(1774009643.340:1368): avc:  denied  { getopt } for  pid=5781 comm="syz.6.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  112.368597][   T28] audit: type=1400 audit(1774009643.431:1369): avc:  denied  { sqpoll } for  pid=5783 comm="syz.6.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  112.600270][ T5795] netlink: 20 bytes leftover after parsing attributes in process `syz.1.472'.
[  113.062344][ T5809] loop1: detected capacity change from 0 to 128
[  115.057506][ T5814] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  115.070561][ T5814] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  115.161238][ T5822] bridge_slave_1: left allmulticast mode
[  115.227073][ T5822] bridge_slave_1: left promiscuous mode
[  115.239296][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.661021][ T4760] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.752976][ T5842] netlink: 16 bytes leftover after parsing attributes in process `syz.6.489'.
[  116.776560][ T5842] netlink: 4 bytes leftover after parsing attributes in process `syz.6.489'.
[  116.821008][ T5842] netlink: 8 bytes leftover after parsing attributes in process `syz.6.489'.
[  116.876293][ T5852] ipip0: entered promiscuous mode
[  116.884707][ T5852] ipip0: entered allmulticast mode
[  116.938512][   T28] audit: type=1400 audit(1774009648.043:1370): avc:  denied  { accept } for  pid=5856 comm="syz.5.494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  116.972078][ T5844] set_capacity_and_notify: 1 callbacks suppressed
[  116.972096][ T5844] loop6: detected capacity change from 0 to 4096
[  117.017943][ T5862] loop2: detected capacity change from 0 to 128
[  117.038058][ T5844] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  117.070072][   T28] audit: type=1400 audit(1774009648.174:1371): avc:  denied  { setattr } for  pid=5841 comm="syz.6.489" name=".pending_reads" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  117.187918][   T28] audit: type=1400 audit(1774009648.284:1372): avc:  denied  { write } for  pid=5865 comm="syz.1.497" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  118.239417][ T5881] loop1: detected capacity change from 0 to 512
[  118.684883][ T5881] EXT4-fs (loop1): orphan cleanup on readonly fs
[  119.074570][ T5886] netlink: 276 bytes leftover after parsing attributes in process `syz.4.502'.
[  119.131372][ T5881] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.499: ea_inode with extended attributes
[  119.144082][ T5881] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  119.144125][ T4760] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.154182][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  119.168722][    C1] EXT4-fs (loop1): initial error at time 1774009650: ext4_xattr_inode_iget:441: inode 11
[  119.178800][    C1] EXT4-fs (loop1): last error at time 1774009650: ext4_xattr_inode_iget:441: inode 11
[  119.188650][ T5881] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.499: error while reading EA inode 11 err=-117
[  119.201014][ T5881] loop1: lost filesystem error report for type 5 error -117
[  119.201352][ T5881] EXT4-fs (loop1): 1 orphan inode deleted
[  119.215233][ T5881] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  119.235459][ T5880] netlink: 'syz.1.499': attribute type 1 has an invalid length.
[  119.308447][ T5880] bond1: entered promiscuous mode
[  119.313786][ T5880] 8021q: adding VLAN 0 to HW filter on device bond1
[  119.319108][   T28] audit: type=1400 audit(1774009650.424:1373): avc:  denied  { read } for  pid=5888 comm="syz.4.503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  119.360521][   T28] audit: type=1400 audit(1774009650.454:1374): avc:  denied  { read } for  pid=5890 comm="syz.2.504" dev="sockfs" ino=17406 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  119.467553][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.538867][ T5913] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  119.581054][   T28] audit: type=1400 audit(1774009650.695:1375): avc:  denied  { ioctl } for  pid=5900 comm="syz.5.508" path="socket:[18463]" dev="sockfs" ino=18463 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  119.608574][ T5915] netlink: 220 bytes leftover after parsing attributes in process `syz.1.506'.
[  119.624219][ T5915] loop1: detected capacity change from 0 to 512
[  119.654288][   T28] audit: type=1400 audit(1774009650.735:1376): avc:  denied  { name_bind 0x1000000 } for  pid=5904 comm="syz.6.509" path="socket:[17615]" dev="sockfs" ino=17615 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  119.714932][ T5913] loop4: detected capacity change from 0 to 512
[  119.809340][ T5927] batadv0: entered promiscuous mode
[  119.821713][ T5927] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  119.836935][ T5915] Quota error (device loop1): v2_read_file_info: Free block number 1 out of range (1, 6).
[  119.860619][ T5927] batadv0: left promiscuous mode
[  119.861160][ T5915] EXT4-fs warning (device loop1): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  119.884132][ T5936] netlink: 199828 bytes leftover after parsing attributes in process `syz.6.514'.
[  119.918512][ T5915] EXT4-fs (loop1): mount failed
[  119.995195][ T5913] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  120.041225][ T5913] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  121.142582][   T28] audit: type=1400 audit(1774009652.132:1377): avc:  denied  { ioctl } for  pid=5912 comm="syz.4.511" path="/98/file1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=19 ioctlcmd=0x743a scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  121.199266][   T28] audit: type=1400 audit(1774009652.242:1378): avc:  denied  { setopt } for  pid=5943 comm="syz.6.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  121.223866][   T28] audit: type=1400 audit(1774009652.252:1379): avc:  denied  { write } for  pid=5943 comm="syz.6.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  121.274173][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.302966][ T5952] xt_policy: output policy not valid in PREROUTING and INPUT
[  121.335223][ T5952] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1014 sclass=netlink_route_socket pid=5952 comm=syz.2.517
[  121.393547][ T5955] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=5955 comm=syz.2.517
[  121.459130][ T5952] bridge0: port 1(bridge_slave_0) entered disabled state
[  121.505229][ T5952] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  121.516178][ T5952] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  121.561779][   T56] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  121.572461][   T56] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  121.613963][   T56] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  121.627099][ T5952] tc_dump_action: action bad kind
[  121.632337][   T56] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  121.729802][ T5962] loop2: detected capacity change from 0 to 256
[  121.760091][ T5962] 9pnet_fd: Insufficient options for proto=fd
[  121.802871][ T5965] netlink: 20 bytes leftover after parsing attributes in process `syz.2.521'.
[  121.814448][ T5964] loop2: detected capacity change from 0 to 512
[  121.823069][ T5965] netlink: 4 bytes leftover after parsing attributes in process `syz.2.521'.
[  122.129174][ T5977] netlink: 'syz.2.522': attribute type 9 has an invalid length.
[  122.137091][ T5977] netlink: 'syz.2.522': attribute type 7 has an invalid length.
[  122.145136][ T5977] netlink: 'syz.2.522': attribute type 8 has an invalid length.
[  123.382398][ T5995] loop4: detected capacity change from 0 to 512
[  123.709103][ T5995] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  123.723926][ T5995] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  124.535253][   T28] audit: type=1400 audit(1774009655.667:1380): avc:  denied  { connect } for  pid=6007 comm="syz.2.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  124.601767][ T6009] loop2: detected capacity change from 0 to 1024
[  125.541075][ T6009] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  125.726260][ T6017] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  126.008228][ T6017] EXT4-fs (loop2): Remounting filesystem read-only
[  126.081561][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  126.105320][ T6031] loop1: detected capacity change from 0 to 128
[  127.107583][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.125469][   T28] audit: type=1400 audit(1774009658.187:1381): avc:  denied  { read } for  pid=6007 comm="syz.2.530" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1
[  127.203370][ T6048] netlink: 65039 bytes leftover after parsing attributes in process `syz.6.535'.
[  128.230096][ T6056] loop4: detected capacity change from 0 to 1024
[  128.249905][ T6056] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  128.506811][ T6054] bridge0: port 2(bridge_slave_1) entered disabled state
[  128.514195][ T6054] bridge0: port 1(bridge_slave_0) entered disabled state
[  128.529722][ T6065] loop1: detected capacity change from 0 to 256
[  128.566227][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.653106][ T6078] loop2: detected capacity change from 0 to 512
[  128.667810][ T6078] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  128.680770][ T6078] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  128.871369][ T6054] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  128.883439][ T6054] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  128.937809][   T12] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  129.028841][ T3403] lo speed is unknown, defaulting to 1000
[  129.058091][   T12] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  129.101063][ T3403] syz0: Port: 1 Link DOWN
[  129.156119][   T28] audit: type=1326 audit(1774009660.295:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6083 comm="syz.1.545" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f212fd9c799 code=0x0
[  129.236777][   T12] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  129.263008][   T12] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  129.322790][   T28] audit: type=1400 audit(1774009660.476:1383): avc:  denied  { ioctl } for  pid=6095 comm="syz.4.550" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  129.362535][ T6096] loop4: detected capacity change from 0 to 2048
[  129.430086][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.441908][ T4728]  loop4: p1 p2
[  129.450656][ T6096]  loop4: p1 p2
[  129.460019][ T3000]  loop4: p1 p2
[  129.534244][ T6117] loop6: detected capacity change from 0 to 128
[  129.779635][   T28] audit: type=1400 audit(1774009660.928:1384): avc:  denied  { connect } for  pid=6126 comm="syz.6.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  129.840357][ T6120] netlink: 4116 bytes leftover after parsing attributes in process `syz.2.558'.
[  129.893168][   T28] audit: type=1400 audit(1774009661.048:1385): avc:  denied  { create } for  pid=6135 comm="syz.6.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1
[  129.928602][   T28] audit: type=1400 audit(1774009661.078:1386): avc:  denied  { write } for  pid=6135 comm="syz.6.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  129.948846][ T6130] loop2: detected capacity change from 0 to 4096
[  129.956310][ T6130] EXT4-fs: Ignoring removed bh option
[  130.048466][ T6142] loop1: detected capacity change from 0 to 8192
[  130.071995][ T6130] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  130.109734][ T3659]  loop1: p1 p3 p4
[  130.113552][ T3659] loop1: p1 size 3942842368 extends beyond EOD, truncated
[  130.121667][ T3659] loop1: p3 start 1073741840 is beyond EOD, truncated
[  130.140080][ T6142]  loop1: p1 p3 p4
[  130.144095][ T6142] loop1: p1 size 3942842368 extends beyond EOD, truncated
[  130.152301][ T6142] loop1: p3 start 1073741840 is beyond EOD, truncated
[  130.216849][ T6144] loop6: detected capacity change from 0 to 512
[  130.288651][ T6144] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  130.301484][ T6144] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  130.692178][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.808817][ T6159] loop2: detected capacity change from 0 to 512
[  130.825045][ T6159] /dev/loop2: Can't open blockdev
[  130.884565][ T6166] loop4: detected capacity change from 0 to 4096
[  130.916111][ T4760] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.929540][ T6166] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  131.025777][ T6166] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #15: comm syz.4.575: corrupted inode contents
[  131.079434][ T6166] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  131.108139][ T6166] EXT4-fs error (device loop4): ext4_dirty_inode:6450: inode #15: comm syz.4.575: mark_inode_dirty error
[  131.174739][ T6166] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  131.174985][ T6166] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #15: comm syz.4.575: corrupted inode contents
[  131.202773][ T6166] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  131.203012][ T6166] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #15: comm syz.4.575: mark_inode_dirty error
[  131.224151][ T6166] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  131.224467][ T6166] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #15: comm syz.4.575: corrupted inode contents
[  131.246625][ T6166] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  131.246886][ T6166] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #15: comm syz.4.575: mark_inode_dirty error
[  131.268534][ T6166] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  131.268734][ T6166] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #15: comm syz.4.575: corrupted inode contents
[  131.294291][ T6166] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  131.297632][ T6166] EXT4-fs error (device loop4): ext4_truncate:4587: inode #15: comm syz.4.575: mark_inode_dirty error
[  131.383882][ T6166] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  131.403887][ T6166] EXT4-fs error (device loop4): ext4_evict_inode:266: comm syz.4.575: couldn't truncate inode 15 (err -117)
[  131.748526][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.092726][ T6218] netlink: 4348 bytes leftover after parsing attributes in process `syz.6.590'.
[  133.127529][ T6218] netlink: 4348 bytes leftover after parsing attributes in process `syz.6.590'.
[  133.168848][ T6218] loop6: detected capacity change from 0 to 128
[  133.224747][   T28] audit: type=1326 audit(1774009664.380:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6221 comm="syz.2.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca1b36c799 code=0x7ffc0000
[  133.249633][   T28] audit: type=1326 audit(1774009664.380:1388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6221 comm="syz.2.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca1b36c799 code=0x7ffc0000
[  133.273571][   T28] audit: type=1326 audit(1774009664.380:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6221 comm="syz.2.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fca1b36c799 code=0x7ffc0000
[  133.453225][   T28] audit: type=1326 audit(1774009664.380:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6221 comm="syz.2.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca1b36c799 code=0x7ffc0000
[  133.488498][ T6218] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  133.603416][ T6218] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  133.684785][   T28] audit: type=1326 audit(1774009664.380:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6221 comm="syz.2.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7fca1b36c799 code=0x7ffc0000
[  133.768877][   T28] audit: type=1326 audit(1774009664.380:1392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6221 comm="syz.2.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca1b36c799 code=0x7ffc0000
[  133.863137][ T4760] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  133.938869][ T6244] loop4: detected capacity change from 0 to 128
[  133.970521][ T6242] netlink: 28 bytes leftover after parsing attributes in process `syz.6.595'.
[  133.979654][   T28] audit: type=1400 audit(1774009665.123:1393): avc:  denied  { create } for  pid=6243 comm="syz.4.596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  134.298325][ T6252] loop4: detected capacity change from 0 to 512
[  135.213720][   T28] audit: type=1400 audit(1774009666.387:1394): avc:  denied  { mounton } for  pid=6246 comm="syz.4.597" path="/116/file0" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1
[  136.431113][ T6286] lo speed is unknown, defaulting to 1000
[  136.501635][   T28] audit: type=1326 audit(1774009667.682:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6290 comm="syz.4.608" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f477e0ec799 code=0x0
[  136.551355][ T6289] lo speed is unknown, defaulting to 1000
[  137.594423][   T28] audit: type=1400 audit(1774009668.746:1396): avc:  denied  { read append } for  pid=6303 comm="syz.1.613" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  137.648406][   T28] audit: type=1400 audit(1774009668.746:1397): avc:  denied  { open } for  pid=6303 comm="syz.1.613" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  137.648440][   T28] audit: type=1400 audit(1774009668.746:1398): avc:  denied  { ioctl } for  pid=6303 comm="syz.1.613" path="socket:[18198]" dev="sockfs" ino=18198 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  137.906064][ T6322] loop1: detected capacity change from 0 to 512
[  138.402561][ T6307] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.612'.
[  138.840730][ T6329] loop6: detected capacity change from 0 to 512
[  139.002508][ T6329] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  139.015277][ T6329] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  139.715269][ T4760] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.773213][   T28] audit: type=1400 audit(1774009670.963:1399): avc:  denied  { mount } for  pid=6347 comm="syz.6.621" name="/" dev="ramfs" ino=18233 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  139.821180][ T6350] tipc: Can't bind to reserved service type 0
[  139.852274][   T28] audit: type=1400 audit(1774009671.013:1400): avc:  denied  { create } for  pid=6341 comm="syz.4.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1
[  140.391166][ T6341] syz.4.619 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  140.410922][ T6341] CPU: 1 UID: 0 PID: 6341 Comm: syz.4.619 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  140.411004][ T6341] Tainted: [W]=WARN
[  140.411011][ T6341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  140.411024][ T6341] Call Trace:
[  140.411031][ T6341]  <TASK>
[  140.411038][ T6341]  __dump_stack+0x1d/0x30
[  140.411073][ T6341]  dump_stack_lvl+0x95/0xd0
[  140.411147][ T6341]  dump_stack+0x15/0x1b
[  140.411169][ T6341]  dump_header+0x80/0x240
[  140.411216][ T6341]  oom_kill_process+0x295/0x350
[  140.411242][ T6341]  out_of_memory+0x97d/0xb80
[  140.411265][ T6341]  try_charge_memcg+0x62e/0xa10
[  140.411366][ T6341]  mem_cgroup_swapin_charge_folio+0x103/0x1f0
[  140.411408][ T6341]  __swap_cache_prepare_and_add+0x386/0x530
[  140.411454][ T6341]  swap_cache_alloc_folio+0xa2/0x120
[  140.411509][ T6341]  swap_cluster_readahead+0x26e/0x3d0
[  140.411552][ T6341]  swapin_readahead+0xde/0x840
[  140.411586][ T6341]  ? _raw_spin_unlock+0x9/0x30
[  140.411617][ T6341]  ? swap_put_entries_cluster+0x385/0x3a0
[  140.411682][ T6341]  ? swap_put_entries_cluster+0x81/0x3a0
[  140.411716][ T6341]  ? __rcu_read_unlock+0x4e/0x70
[  140.411810][ T6341]  ? swap_cache_get_folio+0x26f/0x280
[  140.411844][ T6341]  do_swap_page+0x30d/0x2220
[  140.411902][ T6341]  ? css_rstat_updated+0xbb/0x280
[  140.411925][ T6341]  ? __rcu_read_lock+0x36/0x50
[  140.411945][ T6341]  ? pte_offset_map_rw_nolock+0x19e/0x200
[  140.411974][ T6341]  handle_mm_fault+0xb46/0x3020
[  140.412034][ T6341]  ? vma_start_read+0x1c7/0x2c0
[  140.412069][ T6341]  do_user_addr_fault+0x62f/0x1050
[  140.412189][ T6341]  ? fpregs_assert_state_consistent+0xb3/0xe0
[  140.412226][ T6341]  ? arch_exit_to_user_mode_prepare+0x26/0x80
[  140.412258][ T6341]  ? trace_page_fault_user+0x1f/0xe0
[  140.412363][ T6341]  exc_page_fault+0x62/0xa0
[  140.412414][ T6341]  asm_exc_page_fault+0x26/0x30
[  140.412492][ T6341] RIP: 0033:0x7f477e0a78f8
[  140.412534][ T6341] Code: 75 40 a8 10 75 3c 41 51 4c 8d 9b 08 03 00 00 49 89 c9 48 89 f1 41 50 48 8b 74 24 20 49 89 d0 48 89 fa 4c 89 df e8 a8 56 00 00 <8b> 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00
[  140.412555][ T6341] RSP: 002b:00007fff002d2ab0 EFLAGS: 00010246
[  140.412576][ T6341] RAX: 0000000000000000 RBX: 000055555bd98500 RCX: 00007f477e0acfce
[  140.412594][ T6341] RDX: 00007fff002d2b00 RSI: 0000000000000000 RDI: 0000000000000000
[  140.412610][ T6341] RBP: 00007f477e367da0 R08: 0000000000000000 R09: 0000000000000000
[  140.412639][ T6341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000022599
[  140.412656][ T6341] R13: 00007f477e36627c R14: 0000000000022372 R15: 00007f477e366270
[  140.412682][ T6341]  </TASK>
[  140.671740][ T6341] memory: usage 293424kB, limit 307200kB, failcnt 307
[  140.680742][ T6341] memory+swap: usage 278628kB, limit 9007199254740988kB, failcnt 0
[  140.690638][ T6341] kmem: usage 262584kB, limit 9007199254740988kB, failcnt 0
[  140.698205][ T6341] Memory cgroup stats for /syz4:
[  140.698497][ T6341] cache 524288
[  140.708105][ T6341] rss 8192
[  140.715517][ T6341] shmem 0
[  140.720764][ T6341] mapped_file 65536
[  140.729972][ T6341] dirty 0
[  140.736293][ T6341] writeback 0
[  140.742898][ T6341] workingset_refault_anon 18
[  140.752831][ T6341] workingset_refault_file 386
[  140.762889][ T6341] swap 294912
[  140.769839][ T6341] swapcached 307200
[  140.777834][ T6341] pgpgin 59823
[  140.785378][ T6341] pgpgout 59691
[  140.794125][ T6341] pgfault 86300
[  140.800790][ T6341] pgmajfault 18
[  140.835574][ T6341] inactive_anon 8192
[  140.843736][ T6341] active_anon 4096
[  140.851170][ T6341] inactive_file 4096
[  140.863434][ T6341] active_file 507904
[  140.871811][ T6341] unevictable 0
[  140.883505][ T6341] hierarchical_memory_limit 314572800
[  140.901002][ T6341] hierarchical_memsw_limit 9223372036854771712
[  140.907235][ T6341] total_cache 524288
[  140.920903][ T6341] total_rss 8192
[  140.924559][ T6341] total_shmem 0
[  140.928053][ T6341] total_mapped_file 65536
[  140.940822][ T6341] total_dirty 0
[  140.944817][ T6341] total_writeback 0
[  140.948681][ T6341] total_workingset_refault_anon 18
[  140.976722][ T6341] total_workingset_refault_file 386
[  140.985306][ T6341] total_swap 294912
[  140.989204][ T6341] total_swapcached 307200
[  140.993849][ T6341] total_pgpgin 59823
[  140.997826][ T6341] total_pgpgout 59691
[  141.014343][ T6372] netlink: 'syz.2.629': attribute type 1 has an invalid length.
[  141.028041][ T6341] total_pgfault 86300
[  141.032761][ T6341] total_pgmajfault 18
[  141.039604][ T6341] total_inactive_anon 8192
[  141.044358][ T6341] total_active_anon 4096
[  141.047565][ T6372] bond2: entered promiscuous mode
[  141.048841][ T6341] total_inactive_file 4096
[  141.053868][ T6372] bond2: entered allmulticast mode
[  141.059145][ T6341] total_active_file 507904
[  141.069297][ T6341] total_unevictable 0
[  141.079075][ T6341] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.619,pid=6341,uid=0
[  141.088761][ T6372] 8021q: adding VLAN 0 to HW filter on device bond2
[  141.106215][ T6341] Memory cgroup out of memory: Killed process 6341 (syz.4.619) total-vm:98532kB, anon-rss:1236kB, file-rss:26436kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000
[  141.180214][   T28] audit: type=1400 audit(1774009672.367:1401): avc:  denied  { setopt } for  pid=6380 comm="syz.6.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  141.219393][ T6378] erspan1: entered allmulticast mode
[  141.242378][   T28] audit: type=1400 audit(1774009672.367:1402): avc:  denied  { ioctl } for  pid=6380 comm="syz.6.631" path="socket:[19476]" dev="sockfs" ino=19476 ioctlcmd=0x8918 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  141.301462][ T6378] bond2: (slave erspan1): making interface the new active one
[  141.350392][ T6378] erspan1: entered promiscuous mode
[  141.356735][ T6378] bond2: (slave erspan1): Enslaving as an active interface with an up link
[  141.636698][ T6393] loop1: detected capacity change from 0 to 512
[  142.379004][ T6372] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10)
[  142.385662][ T6372] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  143.274719][ T6397] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(13)
[  143.281464][ T6397] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  143.292452][ T6372] vhci_hcd vhci_hcd.0: Device attached
[  143.298877][ T6397] vhci_hcd vhci_hcd.0: Device attached
[  143.306192][ T6374] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.628'.
[  143.645684][ T6372] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(12)
[  143.652512][ T6372] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  143.661196][ T6372] vhci_hcd vhci_hcd.0: Device attached
[  143.667695][ T6372] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  143.677118][ T6372] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(18)
[  143.683794][ T6372] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  143.693285][ T6372] vhci_hcd vhci_hcd.0: Device attached
[  143.699801][ T6372] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(20)
[  143.706521][ T6372] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  143.715223][ T6372] vhci_hcd vhci_hcd.0: Device attached
[  143.851765][ T3369] usb 5-1: new low-speed USB device number 2 using vhci_hcd
[  143.873829][ T6400] vhci_hcd: connection closed
[  143.874006][ T6398] vhci_hcd: connection closed
[  143.878894][ T6402] vhci_hcd: connection closed
[  143.883931][ T6390] vhci_hcd: connection closed
[  143.888832][ T6404] vhci_hcd: connection closed
[  143.894301][   T56] vhci_hcd vhci_hcd.2: stop threads
[  143.917551][ T6396] vhci_hcd: sendmsg failed!, ret=-32 for 48
[  143.924248][   T56] vhci_hcd vhci_hcd.2: release socket
[  143.929850][   T56] vhci_hcd vhci_hcd.2: disconnect device
[  143.936521][   T56] vhci_hcd vhci_hcd.2: stop threads
[  143.942003][   T56] vhci_hcd vhci_hcd.2: release socket
[  143.947507][   T56] vhci_hcd vhci_hcd.2: disconnect device
[  143.953817][   T56] vhci_hcd vhci_hcd.2: stop threads
[  143.959103][   T56] vhci_hcd vhci_hcd.2: release socket
[  143.966967][   T56] vhci_hcd vhci_hcd.2: disconnect device
[  143.972882][   T56] vhci_hcd vhci_hcd.2: stop threads
[  143.978218][   T56] vhci_hcd vhci_hcd.2: release socket
[  143.984091][   T56] vhci_hcd vhci_hcd.2: disconnect device
[  143.990022][   T56] vhci_hcd vhci_hcd.2: stop threads
[  143.996297][   T56] vhci_hcd vhci_hcd.2: release socket
[  144.002036][   T56] vhci_hcd vhci_hcd.2: disconnect device
[  144.298084][ T6416] IPv6: NLM_F_CREATE should be specified when creating new route
[  144.307958][ T6418] netlink: 12 bytes leftover after parsing attributes in process `syz.5.639'.
[  144.339941][ T6416] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  144.347221][ T6416] IPv6: NLM_F_CREATE should be set when creating new route
[  144.365473][ T6416] loop4: detected capacity change from 0 to 512
[  144.380316][ T6416] msdos: Unknown parameter '0x0000000000000003'
[  144.388560][ T6418] 8021q: adding VLAN 0 to HW filter on device bond2
[  144.411141][ T6421] macsec1: entered promiscuous mode
[  144.416453][ T6421] bond2: entered promiscuous mode
[  144.424398][ T6421] bond2: left promiscuous mode
[  144.721603][ T6440] netlink: 24 bytes leftover after parsing attributes in process `syz.4.648'.
[  144.736101][   T28] audit: type=1400 audit(1774009675.938:1403): avc:  denied  { ioctl } for  pid=6433 comm="syz.5.645" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=19547 ioctlcmd=0x943f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  144.771714][ T6440] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6440 comm=syz.4.648
[  144.840284][ T6445] loop4: detected capacity change from 0 to 128
[  145.282882][ T6449] loop1: detected capacity change from 0 to 512
[  145.849556][ T6453] loop2: detected capacity change from 0 to 128
[  148.283746][ T6466] netlink: 'syz.5.655': attribute type 21 has an invalid length.
[  148.867711][ T6466] netlink: 128 bytes leftover after parsing attributes in process `syz.5.655'.
[  148.877172][ T6466] netlink: 'syz.5.655': attribute type 4 has an invalid length.
[  148.885402][ T6466] netlink: 3 bytes leftover after parsing attributes in process `syz.5.655'.
[  149.391059][ T3369] usb 5-1: enqueue for inactive port 0
[  149.396760][ T3369] usb 5-1: enqueue for inactive port 0
[  149.478656][ T3369] vhci_hcd vhci_hcd.2: vhci_device speed not set
[  150.471817][ T6498] loop4: detected capacity change from 0 to 128
[  150.609278][ T6505] loop1: detected capacity change from 0 to 512
[  151.292642][ T6503] netlink: 65039 bytes leftover after parsing attributes in process `syz.6.665'.
[  151.443469][ T6498] 9pnet_virtio: no channels available for device syz
[  153.546741][ T6528] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  153.714934][ T6533] netlink: 8 bytes leftover after parsing attributes in process `syz.6.670'.
[  154.222682][ T6538] loop2: detected capacity change from 0 to 128
[  154.470326][ T6528] bond2 (unregistering): Released all slaves
[  154.857962][ T6553] netlink: 277 bytes leftover after parsing attributes in process `syz.1.678'.
[  154.891406][ T6555] FAULT_INJECTION: forcing a failure.
[  154.891406][ T6555] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  155.120265][ T6555] CPU: 0 UID: 0 PID: 6555 Comm: syz.6.679 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  155.120303][ T6555] Tainted: [W]=WARN
[  155.120310][ T6555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  155.120384][ T6555] Call Trace:
[  155.120486][ T6555]  <TASK>
[  155.120496][ T6555]  __dump_stack+0x1d/0x30
[  155.120541][ T6555]  dump_stack_lvl+0x95/0xd0
[  155.120573][ T6555]  dump_stack+0x15/0x1b
[  155.120667][ T6555]  should_fail_ex+0x263/0x280
[  155.120697][ T6555]  should_fail+0xb/0x20
[  155.120722][ T6555]  should_fail_usercopy+0x1a/0x20
[  155.120759][ T6555]  _copy_to_user+0x20/0xa0
[  155.120847][ T6555]  ioctl_fsgetxattr+0x1b8/0x200
[  155.120879][ T6555]  do_vfs_ioctl+0x4d3/0xe70
[  155.120903][ T6555]  ? selinux_file_ioctl+0x5f7/0xcb0
[  155.120935][ T6555]  ? __rcu_read_unlock+0x4e/0x70
[  155.120973][ T6555]  ? __rcu_read_unlock+0x4e/0x70
[  155.121000][ T6555]  ? __fget_files+0x184/0x1c0
[  155.121027][ T6555]  ? mutex_lock+0x57/0x90
[  155.121060][ T6555]  __se_sys_ioctl+0x82/0x140
[  155.121131][ T6555]  __x64_sys_ioctl+0x43/0x50
[  155.121173][ T6555]  x64_sys_call+0x1563/0x3020
[  155.121208][ T6555]  do_syscall_64+0x12c/0x370
[  155.121250][ T6555]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  155.121272][ T6555] RIP: 0033:0x7f71de28c799
[  155.121288][ T6555] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  155.121306][ T6555] RSP: 002b:00007f71dccdf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  155.121333][ T6555] RAX: ffffffffffffffda RBX: 00007f71de505fa0 RCX: 00007f71de28c799
[  155.121394][ T6555] RDX: 0000200000000000 RSI: 00000000801c581f RDI: 0000000000000003
[  155.121411][ T6555] RBP: 00007f71dccdf090 R08: 0000000000000000 R09: 0000000000000000
[  155.121455][ T6555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  155.121471][ T6555] R13: 00007f71de506038 R14: 00007f71de505fa0 R15: 00007fff870dfc88
[  155.121497][ T6555]  </TASK>
[  155.562873][ T6579] loop6: detected capacity change from 0 to 256
[  155.781320][ T6581] x_tables: duplicate underflow at hook 3
[  156.298335][ T6586] loop6: detected capacity change from 0 to 512
[  156.355892][   T28] audit: type=1400 audit(1774009687.019:1404): avc:  denied  { map } for  pid=6580 comm="syz.6.687" path="/dev/full" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:null_device_t tclass=chr_file permissive=1
[  156.885926][ T6588] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.682'.
[  176.389501][ T6591] netlink: 24 bytes leftover after parsing attributes in process `syz.6.689'.
[  176.400158][ T6591] netlink: 20 bytes leftover after parsing attributes in process `syz.6.689'.
[  176.793745][ T6602] 9p: Bad value for 'wfdno'
[  176.869755][ T6603] loop2: detected capacity change from 0 to 1024
[  177.675692][ T6614] loop1: detected capacity change from 0 to 512
[  178.381494][ T6603] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  178.626095][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  178.639357][ T6614] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  178.651995][ T6614] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  179.158526][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  179.971876][ T6657] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.701'.
[  180.313017][ T6667] loop2: detected capacity change from 0 to 512
[  180.696669][   T28] audit: type=1400 audit(1774009711.951:1405): avc:  denied  { read } for  pid=6663 comm="syz.1.707" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  180.839988][ T6668] loop1: detected capacity change from 0 to 8192
[  180.853500][   T28] audit: type=1400 audit(1774009711.951:1406): avc:  denied  { open } for  pid=6663 comm="syz.1.707" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  180.878583][ T6667] EXT4-fs (loop2): blocks per group (8192) and clusters per group (2304) inconsistent
[  180.889249][ T6610]  loop1: p1 < > p2 p4 < p5 >
[  180.894083][ T6610] loop1: partition table partially beyond EOD, truncated
[  180.920282][ T6610] loop1: p1 start 134217728 is beyond EOD, truncated
[  180.927244][ T6610] loop1: p2 size 591360 extends beyond EOD, truncated
[  180.971169][ T6610] loop1: p5 size 591360 extends beyond EOD, truncated
[  181.079026][ T6668]  loop1: p1 < > p2 p4 < p5 >
[  181.083777][ T6668] loop1: partition table partially beyond EOD, truncated
[  181.091147][ T6668] loop1: p1 start 134217728 is beyond EOD, truncated
[  181.099383][ T6668] loop1: p2 size 591360 extends beyond EOD, truncated
[  181.112668][   T28] audit: type=1326 audit(1774009712.402:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6677 comm="syz.5.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a5f9c799 code=0x7ffc0000
[  181.112743][ T6668] loop1: p5 size 591360 extends beyond EOD, truncated
[  181.155335][ T6678] netlink: 'syz.6.711': attribute type 1 has an invalid length.
[  181.181989][ T6683] netlink: 40 bytes leftover after parsing attributes in process `syz.4.715'.
[  181.192059][ T6678] netlink: 'syz.6.711': attribute type 1 has an invalid length.
[  181.200928][   T28] audit: type=1326 audit(1774009712.402:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6677 comm="syz.5.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a5f9c799 code=0x7ffc0000
[  181.224510][ T6676] erspan0: entered promiscuous mode
[  181.233391][ T6676] netlink: 8 bytes leftover after parsing attributes in process `syz.6.711'.
[  181.247387][   T28] audit: type=1326 audit(1774009712.402:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6677 comm="syz.5.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f22a5f9c799 code=0x7ffc0000
[  181.250418][ T6685] loop2: detected capacity change from 0 to 2048
[  181.323064][   T28] audit: type=1326 audit(1774009712.402:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6677 comm="syz.5.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a5f9c799 code=0x7ffc0000
[  181.347690][ T6685] EXT4-fs (loop2): cluster size (1024) smaller than block size (4096)
[  181.361003][   T28] audit: type=1326 audit(1774009712.402:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6677 comm="syz.5.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a5f9c799 code=0x7ffc0000
[  181.386403][   T28] audit: type=1326 audit(1774009712.402:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6681 comm="syz.5.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f22a5f5cfce code=0x7ffc0000
[  181.418751][ T6689] loop4: detected capacity change from 0 to 1024
[  181.425659][ T6689] ext4: Unknown parameter 'fowner>00000000000000000000'
[  181.570333][   T28] audit: type=1326 audit(1774009712.442:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6677 comm="syz.5.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f22a5f9c799 code=0x7ffc0000
[  181.595206][   T28] audit: type=1326 audit(1774009712.592:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6681 comm="syz.5.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f22a5f9c799 code=0x7ffc0000
[  181.915905][ T6639] udevd[6639]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  181.929173][ T6698] udevd[6698]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[  181.943836][ T6610] udevd[6610]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory
[  182.235316][ T6722] loop1: detected capacity change from 0 to 512
[  182.378453][ T6722] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  182.391813][ T6722] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  182.520846][ T6726] lo speed is unknown, defaulting to 1000
[  182.783798][ T6733] netlink: 7 bytes leftover after parsing attributes in process `syz.2.728'.
[  182.890360][ T6738] netlink: 'syz.5.729': attribute type 13 has an invalid length.
[  182.907681][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  182.917383][ T6738] gretap0: refused to change device tx_queue_len
[  182.943613][ T6738] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  182.960469][ T6741] netlink: 4 bytes leftover after parsing attributes in process `syz.2.732'.
[  182.973756][ T6741] netlink: 4 bytes leftover after parsing attributes in process `syz.2.732'.
[  182.987271][ T6743] netlink: 'syz.1.731': attribute type 4 has an invalid length.
[  183.011364][ T6743] netlink: 17 bytes leftover after parsing attributes in process `syz.1.731'.
[  183.553336][ T6758] netlink: 12 bytes leftover after parsing attributes in process `syz.1.731'.
[  186.016732][ T6769] loop2: detected capacity change from 0 to 512
[  186.156149][ T6769] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  186.169383][ T6769] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  186.493302][ T6788] netlink: 56 bytes leftover after parsing attributes in process `syz.4.743'.
[  186.585247][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  187.171252][   T28] kauditd_printk_skb: 4 callbacks suppressed
[  187.171318][   T28] audit: type=1400 audit(1774017910.459:1419): avc:  denied  { shutdown } for  pid=6796 comm="syz.4.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  187.274754][ T6799] netlink: 4 bytes leftover after parsing attributes in process `syz.4.750'.
[  187.387714][   T28] audit: type=1400 audit(1774017910.499:1420): avc:  denied  { read } for  pid=6796 comm="syz.4.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  187.522721][   T28] audit: type=1400 audit(1774017910.559:1421): avc:  denied  { bind } for  pid=6796 comm="syz.4.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  187.633809][   T28] audit: type=1400 audit(1774017910.919:1422): avc:  denied  { bind } for  pid=6814 comm="syz.4.753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  187.764471][ T6815] loop4: detected capacity change from 0 to 8192
[  187.802292][   T28] audit: type=1400 audit(1774017911.089:1423): avc:  denied  { getopt } for  pid=6816 comm="syz.1.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  187.837294][ T6639]  loop4: p3 p4 < >
[  187.841252][ T6639] loop4: p3 start 9895680 is beyond EOD, truncated
[  187.860311][ T6815]  loop4: p3 p4 < >
[  187.864511][ T6815] loop4: p3 start 9895680 is beyond EOD, truncated
[  187.987349][ T6698] udevd[6698]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[  188.033557][ T6698] udevd[6698]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[  188.140136][   T28] audit: type=1400 audit(1774017911.429:1424): avc:  denied  { mount } for  pid=6833 comm="syz.2.761" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  188.212185][ T6840] netlink: 'syz.1.764': attribute type 29 has an invalid length.
[  188.224971][ T6838] netlink: 'syz.5.762': attribute type 8 has an invalid length.
[  188.232926][ T6838] netlink: 4 bytes leftover after parsing attributes in process `syz.5.762'.
[  188.254792][ T6838] bond0: entered promiscuous mode
[  188.260170][   T28] audit: type=1326 audit(1774017911.459:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6833 comm="syz.2.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca1b36c799 code=0x7ffc0000
[  188.290239][ T6838] bond_slave_0: entered promiscuous mode
[  188.296243][ T6838] bond_slave_1: entered promiscuous mode
[  188.307210][ T6838] gretap0: entered promiscuous mode
[  188.333528][ T6838] batadv_slave_0: entered promiscuous mode
[  188.343850][ T6838] batadv_slave_0: left promiscuous mode
[  188.356068][   T28] audit: type=1326 audit(1774017911.459:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6833 comm="syz.2.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca1b36c799 code=0x7ffc0000
[  188.423155][ T6844] loop1: detected capacity change from 0 to 512
[  188.431156][ T6838] bond0: left promiscuous mode
[  188.439770][ T6838] bond_slave_0: left promiscuous mode
[  188.461341][ T6844] FAT-fs (loop1): Directory bread(block 199916) failed
[  188.471640][ T6838] bond_slave_1: left promiscuous mode
[  188.486966][ T6844] FAT-fs (loop1): Directory bread(block 199917) failed
[  188.505378][ T6838] gretap0: left promiscuous mode
[  188.510576][   T28] audit: type=1326 audit(1774017911.459:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6833 comm="syz.2.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca1b36c799 code=0x7ffc0000
[  188.535081][ T6844] FAT-fs (loop1): Directory bread(block 199918) failed
[  188.544177][ T6844] FAT-fs (loop1): Directory bread(block 199919) failed
[  188.580163][ T6844] FAT-fs (loop1): Directory bread(block 199920) failed
[  188.628086][ T6844] FAT-fs (loop1): Directory bread(block 199921) failed
[  188.638151][   T28] audit: type=1326 audit(1774017911.459:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6833 comm="syz.2.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca1b36c799 code=0x7ffc0000
[  188.677221][ T6844] FAT-fs (loop1): Directory bread(block 199922) failed
[  188.699216][ T6852] bond0: invalid ARP target 0.0.0.0 specified for addition
[  188.715104][ T6844] FAT-fs (loop1): Directory bread(block 199923) failed
[  188.727189][ T6865] FAT-fs (loop1): Directory bread(block 199916) failed
[  188.734366][ T6852] bond0: option arp_ip_target: invalid value (0)
[  188.740987][ T6865] FAT-fs (loop1): Directory bread(block 199917) failed
[  188.749479][ T6852] bond0 (unregistering): Released all slaves
[  189.950252][ T6874] loop2: detected capacity change from 0 to 1024
[  189.994550][ T6698] ==================================================================
[  190.002684][ T6698] BUG: KCSAN: data-race in _copy_to_iter / vsnprintf
[  190.009399][ T6698] 
[  190.011747][ T6698] write to 0xffff888105f0b055 of 1 bytes by task 6874 on cpu 0:
[  190.019445][ T6698]  vsnprintf+0x7ee/0x860
[  190.023727][ T6698]  snprintf+0x86/0xb0
[  190.027759][ T6698]  ext4_multi_mount_protect+0x4e4/0x600
[  190.033332][ T6698]  ext4_fill_super+0x22e6/0x37c0
[  190.038295][ T6698]  get_tree_bdev_flags+0x291/0x300
[  190.043452][ T6698]  get_tree_bdev+0x1f/0x30
[  190.047919][ T6698]  ext4_get_tree+0x1c/0x30
[  190.052366][ T6698]  vfs_get_tree+0x57/0x1d0
[  190.056893][ T6698]  do_new_mount+0x288/0x8d0
[  190.061428][ T6698]  path_mount+0x4d0/0xbc0
[  190.065783][ T6698]  __se_sys_mount+0x28c/0x2e0
[  190.070487][ T6698]  __x64_sys_mount+0x67/0x80
[  190.075187][ T6698]  x64_sys_call+0x2d61/0x3020
[  190.079905][ T6698]  do_syscall_64+0x12c/0x370
[  190.084541][ T6698]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  190.091069][ T6698] 
[  190.093448][ T6698] read to 0xffff888105f0b000 of 512 bytes by task 6698 on cpu 1:
[  190.101179][ T6698]  _copy_to_iter+0x130/0xea0
[  190.105798][ T6698]  copy_page_to_iter+0x18f/0x2d0
[  190.110762][ T6698]  filemap_read+0x407/0xa10
[  190.115287][ T6698]  blkdev_read_iter+0x22d/0x2e0
[  190.120167][ T6698]  vfs_read+0x6c0/0x7f0
[  190.124360][ T6698]  ksys_read+0xdc/0x1a0
[  190.128553][ T6698]  __x64_sys_read+0x40/0x50
[  190.133069][ T6698]  x64_sys_call+0x2886/0x3020
[  190.137774][ T6698]  do_syscall_64+0x12c/0x370
[  190.142391][ T6698]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  190.148318][ T6698] 
[  190.150666][ T6698] Reported by Kernel Concurrency Sanitizer on:
[  190.156842][ T6698] CPU: 1 UID: 0 PID: 6698 Comm: udevd Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  190.167297][ T6698] Tainted: [W]=WARN
[  190.171118][ T6698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  190.181280][ T6698] ==================================================================
[  190.216910][ T6874] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  190.383448][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.