last executing test programs:

17.605648762s ago: executing program 0 (id=844):
syz_open_procfs(0x0, &(0x7f0000000100)='net/psched\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000540), 0x0}, 0x20)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
r4 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r4, &(0x7f0000000180)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000007000200060c10000000010000000000", 0x58}], 0x1)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)

16.701884363s ago: executing program 0 (id=849):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r6, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x1, 0x803, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r9], 0x54}}, 0x0)
r10 = socket(0x1, 0x803, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20, 0x20}}}}}}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2], 0x3c}}, 0x0)

16.049974877s ago: executing program 0 (id=854):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[], 0x184}, 0x1, 0x0, 0x0, 0x2004c805}, 0x40880)
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0)
sendto$inet(r4, &(0x7f0000000300)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec", 0x41, 0x0, 0x0, 0x0)
sendto(r3, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000014c0), 0x3ffffffffffff42, 0x162, 0x0)

14.427960229s ago: executing program 0 (id=861):
socket$kcm(0x10, 0x2, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3)
ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
r1 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x1, 0x20e}, &(0x7f0000ff0000), 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000340)='./file2\x00', 0x14550, &(0x7f0000000240)=ANY=[], 0x1, 0x11f3, &(0x7f0000001b80)="$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")
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@user_xattr}, {@grpjquota}, {@barrier_val={'barrier', 0x3d, 0x9}}]}, 0x1, 0x4a3, &(0x7f0000000580)="$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")
write$binfmt_script(r2, &(0x7f0000000200), 0xfea7)
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x11, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee12f200daf7a4936ce7110ff4117639c2eb4b78c660e677df701905b9aa0339a2884b3e5728a00400", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]})
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
syz_clone3(0x0, 0x0)
syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0)

13.403961978s ago: executing program 0 (id=865):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "b39625e03be22ead", "8da0640c9e8f6b81143f1a1a6d81ee2b", "3b0e7088", "19a4216dfdbf6602"}, 0x28)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, 0x0, 0x0)
connect$inet6(r1, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, 0x0, 0x0)
writev(r1, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "3da2d199", "72392a24199b5903"}, 0x28)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0)
setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4)
pipe2$9p(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file2\x00', 0x0, 0xd2404, 0x0)

13.02437735s ago: executing program 0 (id=868):
sched_setscheduler(0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0xea5bc50b6199d77e)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r2, 0x0, 0x4c844)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000540)=@ipv6_newaddrlabel={0x38, 0x48, 0x321, 0x70bd2c, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x0, 0x0, 0x4}, [@IFAL_LABEL={0x8, 0x2, 0x6}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x38, 0x10, 0x801, 0x4000000, 0xfffffffc, {0x0, 0x0, 0x4c, 0x0, 0x204e9, 0x500}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x4529}]}, 0x38}, 0x1, 0xffffa888}, 0x20000880)

12.962029659s ago: executing program 32 (id=868):
sched_setscheduler(0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0xea5bc50b6199d77e)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r2, 0x0, 0x4c844)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000540)=@ipv6_newaddrlabel={0x38, 0x48, 0x321, 0x70bd2c, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x0, 0x0, 0x4}, [@IFAL_LABEL={0x8, 0x2, 0x6}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x38, 0x10, 0x801, 0x4000000, 0xfffffffc, {0x0, 0x0, 0x4c, 0x0, 0x204e9, 0x500}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x4529}]}, 0x38}, 0x1, 0xffffa888}, 0x20000880)

10.762203779s ago: executing program 2 (id=880):
socket(0x10, 0x2, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4400000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000804003001c0012800b00010067726574617000000c00028008000700ac14142808000a00", @ANYRES32=r3], 0x44}}, 0x804)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd60"], 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r5)
getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x5)
sendto$packet(r4, &(0x7f0000000040)="2717a90af1a30d71286f47000000", 0xe, 0x40000, &(0x7f0000000180)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14)

10.663858251s ago: executing program 2 (id=882):
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00')
read$eventfd(r1, &(0x7f0000000240), 0x8)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040))
write$binfmt_misc(r0, &(0x7f0000000000), 0xfffffecc)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = socket(0x2b, 0x80801, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x7fffffe, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @mcast1, [0x0, 0x0, 0x0, 0xffffff], [0x0, 0x0, 0x4c62d6309aaa1bde, 0xff000000], 'ip6tnl0\x00', 'nicvf0\x00', {}, {0xff}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x4, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330)
sendmsg$DEVLINK_CMD_SB_POOL_SET(r4, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001540)={0x0, 0xd4}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000)
connect$inet6(r4, &(0x7f00000003c0)={0xa, 0x4e22, 0xfffffffa, @ipv4={'\x00', '\xff\xff', @remote}, 0x7}, 0x1c)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r5, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10)
listen(r5, 0x8b25714e)
accept4(r5, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000008f000000000000000100000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000054000001b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000c309000041000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0xd}, 0x94)
accept4$vsock_stream(r4, &(0x7f0000000340)={0x28, 0x0, 0x2711, @host}, 0x10, 0x80000)
r6 = getpgid(0x0)
syz_open_procfs$namespace(r6, &(0x7f0000000000)='ns/uts\x00')

6.03296445s ago: executing program 2 (id=898):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'gre0\x00', <r4=>0x0})
bind$packet(r3, &(0x7f0000000300)={0x11, 0x1b, r4, 0x1, 0x0, 0x6, @local}, 0x14)
sendto$inet6(r3, 0x0, 0x0, 0x4000, 0x0, 0x0)
writev(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)="2e9b3d0007e001000100df163e74963f86ddf08412e900092f8d", 0x1a}], 0x1)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r5, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, &(0x7f0000003700)={0x77359400})
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x96, 0x200}, 0x0, 0x0, 0x0, 0x80004, 0x0, 0x0, 0xffffffffffffffff})
io_setup(0x3, &(0x7f0000008240))
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendto$inet6(r6, 0x0, 0x0, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
recvmmsg(r6, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@nfc, 0x80, &(0x7f0000001340)=[{0x0}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000280)=""/124, 0x7c}], 0x3}, 0x7}, {{&(0x7f0000001480)=@isdn, 0x80, &(0x7f0000002640)=[{&(0x7f0000001500)=""/207, 0xcf}, {&(0x7f0000001600)=""/14, 0xe}, {&(0x7f0000001640)=""/4096, 0x1000}], 0x3, &(0x7f0000002680)=""/205, 0xcd}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000028c0)=""/182, 0xb6}, 0x8001}, {{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000002980)=""/237, 0xed}, {&(0x7f0000002a80)=""/110, 0x6e}, {&(0x7f0000002b00)=""/50, 0x32}, {&(0x7f0000002b40)=""/23, 0x17}, {&(0x7f0000002b80)=""/116, 0x74}, {&(0x7f0000002c00)=""/120, 0x78}, {&(0x7f0000005d00)=""/4096, 0x1000}], 0x7, &(0x7f0000002d00)=""/104, 0x68}, 0x4}], 0x4, 0x0, &(0x7f0000002e80)={0x0, 0x989680})

5.879559583s ago: executing program 1 (id=901):
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
unshare(0x64000600)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
sendmsg$nl_route(r0, 0x0, 0x20004090)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, 0x0)
getdents64(r1, &(0x7f0000002f40)=""/4098, 0x1002)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000080)=0x10000, 0x4)
sigaltstack(&(0x7f00000001c0)={&(0x7f0000000100)=""/176, 0x80000000, 0xb0}, &(0x7f0000000240)={0x0})
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2)
r2 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000004c0)=[@in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e24, @loopback}], 0x20)

5.320823673s ago: executing program 4 (id=904):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000))
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, 0x0, 0x4000000)
socket(0x2, 0x80802, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vcan0\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f0000000140)="c2", 0x1, 0xffacae97b873f0b1, &(0x7f0000000080)={0x11, 0xd, r5, 0x1, 0xfe, 0x6, @random="42b106616fdb"}, 0x14)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a18000000060a0b0400000000"], 0x40}}, 0x0)
socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'veth0_vlan\x00', {0x3}, 0x8da})
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4008011)
io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0x7b4e, 0xf080, 0x1, 0x31a})

5.24597093s ago: executing program 4 (id=906):
set_mempolicy(0x1, &(0x7f0000000e80)=0x1ff, 0x7582)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
recvfrom$x25(0xffffffffffffffff, &(0x7f0000000000)=""/45, 0x2d, 0x12000, &(0x7f0000000100), 0x12)
socket$packet(0x11, 0x2, 0x300)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1)
fspick(0xffffffffffffffff, 0x0, 0xf0961890b4faa8d0)
setuid(0xee00)
r0 = socket$netlink(0x10, 0x3, 0x4)
write(r0, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x0)
set_mempolicy(0x4000, &(0x7f0000000200)=0x7, 0x2)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000ffffffff180800002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000400008500000004000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
syz_clone(0xc30e3400, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0)

5.093218603s ago: executing program 2 (id=907):
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x8, 0x2c, 0x0, @remote, @local, {[], {{0x3a00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0)
rt_sigprocmask(0x2, &(0x7f0000000000)={[0xffffffffffffffff]}, 0xfffffffffffffffe, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
r3 = msgget$private(0x0, 0x3b)
msgctl$IPC_SET(r3, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x400000000000})
ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x10040000}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r4, @ANYRES32=r4, @ANYBLOB="2f000000282000006cec3fded6391b37f8f9"], 0x20)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
mount$9p_xen(&(0x7f0000000140), &(0x7f0000000200)='./file1\x00', 0x0, 0x4010, &(0x7f0000000a00)=ANY=[@ANYBLOB='trans=xen,nodevmap,pcr=00000000000000000037', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0xee01, @ANYBLOB=',audit,\x00'])

5.092569413s ago: executing program 3 (id=908):
openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000))
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x6, 0x8000}, 0x100, 0x8000000, 0x0, 0x2, 0xfff, 0xa001, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x6, 0x504}, 0x50)
syz_io_uring_setup(0x512b, &(0x7f0000000180)={0x0, 0x6f04, 0x130c8, 0x1, 0x2a0}, 0x0, 0x0)
epoll_create1(0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcdd, r0}, 0x38)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'bond0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r3, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r1], 0x44}, 0x1, 0x0, 0x0, 0x240448e0}, 0x0)

4.986165014s ago: executing program 4 (id=909):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'geneve1\x00', <r2=>0x0})
syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000d00)=ANY=[@ANYBLOB="73686f776173736f632c646d6f64653d3078303030303030303030303030303030372c6f76657272696465726f636b7065726d2c756e686964652c636865636b3d7374726963742c6d61703d6f66662c636865636b3d7374726963742c73686f776173737f632c00"], 0x1, 0xa69, &(0x7f0000002780)="$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")
getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x53, 0x0, &(0x7f0000000040))
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5800000010000300"/20, @ANYRES32=r2, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000400010000001c001a8018000a80140007"], 0x58}, 0x1, 0x2}, 0x80)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtfilter={0x2c, 0x2c, 0x2, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x7, 0xffe0}, {0xb, 0xa}, {0x5, 0x8}}, [@TCA_CHAIN={0x8, 0xb, 0x9ed5}]}, 0x2c}}, 0x10)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000), 0x8)
sendto$packet(r4, &(0x7f0000000280)="a5734828637e96746fb233f3bfdb3f266ac970f4b8c4c19f3dea9855e36339300a602e2e95c928d233074135f0556a68d9a56d44a445c32f254a15b6e15b828ee1fc84ad55cde18ba38f0ef1a1f9999a46fde0af27a98fe99e03c20ecac2d70adf5e8010283c3ee60257967c446c0335423d52952ab962c02fab42a69fdebf88ce9a04ebcca4f77f12250df2fc576c8214564472ff575687afc8984563a7ebd8151daaae3d2a28d9d4381fea33702a63331716cbb6f6129a2757731aa41aad45e45c9215998b1adb49d91ea977dfc438d761a0eacaf53ee96f44a2eb812e551b5f74f1560705753c5c6a", 0xea, 0x4000020, 0x0, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8)
ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x6627993fc9cad4e1)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0}}, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)=@migrate={0xec, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffc, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x9c, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in=@rand_addr=0x64010102, @in=@local, @in6=@remote, 0x3c, 0x2, 0x0, 0x0, 0xa, 0xa}, {@in=@private=0xa010102, @in6=@dev={0xfe, 0x80, '\x00', 0x34}, @in6=@remote, @in=@rand_addr=0x64010101, 0x6c, 0x1, 0x0, 0x0, 0xa, 0xa}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r6 = socket$l2tp6(0xa, 0x2, 0x73)
connect$l2tp6(r6, &(0x7f0000000000)={0xa, 0x0, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5, 0x2}, 0x20)

4.985478344s ago: executing program 4 (id=910):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = timerfd_create(0x1, 0x800)
timerfd_gettime(r1, &(0x7f0000000280))
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0)
r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = dup2(0xffffffffffffffff, r2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@minixdf}, {@quota}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@dioread_lock}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}, {@nobh}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9GajdN4o8KgvUiiBYLeq9LMg0lm27JbkoTC20P9uJFiiBiQfwDvHss/gP+FQUtFClBD14is5lNt81ukqYbN3U+H5j2vZnZvPnum+/bNzu7bACFNZL9U4p4OSK+SSIOt20bjHzjyOp+yw+vTWVLEisrn/2ZRJKva+2f5P8fzCsvRcSvX0WcKK1vt764NFupVtP5vD7WmLs8Vl9cOnlxrjKTzqSXJiYnT781OfHuO2/3LNbXz/39/ad3Pzr99fHl736+f+R2EmfiUL6tPY5ncKO9MhIj+XMyFGee2HG8B43tJkm/D4BtGcjzfCiyMeBwDORZD/z/XY+IFaCgEvkPBdWaB7Su7Xt0HfzcePDB6gXQ+vgHV98biX3Na6MDy8ljV0bZ9e5wD9rP2vjljzu3syU2eR/ieg/aA2i5cTMiTg0Orh//knz8275TzTePN/ZkG0V7/YF+upvNf97oNP8prc1/osP852CH3N2OzfO/dL8HzXSVzf/e6zj/XRu6hgfy2gvNOd9QcuFiNT0VES9GxGgM7c3qG93POb18b6Xbtvb5X7Zk7bfmgvlx3B/c+/hjpiuNyrPE3O7BzYhXOs5/k7X+Tzr0f/Z8nNtiG8fSO69227Z5/Dtr5aeI1zr2/6M7WsnG9yfHmufDWOusWO+vW8d+69b+6If9jT/r/wMbxz+ctN+vrT99Gz/u+yfttm275/+e5PNmeU++7mql0Zgfj9iTfLJ+/cSjx7bqrf2z+EePbzz+dTr/90fEF1uM/9bRW1137ff5n8U//VT9//SFex9/+UO39rfW/282S6P5mq2Mf1s9wGd57gAAAAAAAGC3KUXEoUhK5bVyqVQur36+42gcKFVr9caJC7WFS9PR/K7scAyVWne6D7d9HmI8/zxsqz7xRH0yIo5ExLcD+5v18lStOt3v4AEAAAAAAAAAAAAAAAAAAGCXONjl+/+Z3wf6fXTAjvOT31Bcm+Z/L37pCdiVvP5Dccl/KC75D8Ul/6G45D8Ul/yH4pL/UFzyHwAAAAAAAAAAAAAAAAAAAAAAAAAAAHrq3Nmz2bKy/PDaVFafvrK4MFu7cnI6rc+W5xamylO1+cvlmVptppqWp2pzm/29aq12eXwiFq6ONdJ6Y6y+uHR+rrZwqXH+4lxlJj2fDv0nUQEAAAAAAAAAAAAAAAAAAMDzpb64NFupVtN5ha6F92NXHMZOBrhqWw8f3C1RKHQt7NtG5/Z5YAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACANv8GAAD//04mM/E=")
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
timerfd_gettime(r3, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000002180)={0x1, &(0x7f0000000240)=[{0x6, 0xfd, 0x0, 0x7fffffff}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000140))
ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c)

4.803209682s ago: executing program 2 (id=911):
perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x62, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa3f, 0x2, @perf_bp={0x0}, 0x0, 0x6, 0x800000, 0x6, 0x2, 0xcb, 0x2, 0x0, 0x76, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x8)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x880)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000026c0)={'gre0\x00', &(0x7f0000002640)={'erspan0\x00', 0x0, 0x7800, 0x10, 0x7, 0x4, {{0x5, 0x4, 0x1, 0x0, 0x14, 0x66, 0x0, 0x9, 0x4, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}}}}})
syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000180)=ANY=[@ANYRES64=0x0], 0xfe, 0x122e, &(0x7f0000001280)="$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")
r2 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc)
fallocate(r2, 0x0, 0x0, 0x8800000)
syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00'})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, 0x0, 0x8000)
r3 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21)
pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1600, 0x0, 0x3)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x972, &(0x7f0000006680))
socket$inet6_udp(0xa, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)

4.79634274s ago: executing program 3 (id=912):
r0 = syz_open_dev$sg(&(0x7f00000004c0), 0x1, 0x4c0002)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d7", 0x20}], 0x1)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000001810000089"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x9, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94)
r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2)
r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x0)
fchdir(r5)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r6, 0x1000)
listen(0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)="e88e2fd0cb6a75ba2b68db5096cd24737584d8798a7fc1ca74ac262e5cf04b0cdf98fc599b9d909fd04bb6512147ecfbc9bfd2bec657816adb4bb5f3ea14c21b08103c0cbf1859eac1b56d8affe20337615741a540ebd2d50846e7491f826c147f7bff83a9cd3115a3fc531a5d7d93de5458a5d581", &(0x7f0000000680)="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", 0x80, r1, 0x0, 0x7}, 0x38)
prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffa000/0x4000)=nil)

4.7346586s ago: executing program 1 (id=913):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000001440)=[{{&(0x7f0000000280)=@un=@abs, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)=""/1}, {&(0x7f0000000300)=""/102}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/111}]}}], 0x700, 0x40002002, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xffc1)
setsockopt$sock_int(r2, 0x1, 0x10, 0x0, 0x0)
close(0xffffffffffffffff)
getdents(0xffffffffffffffff, 0x0, 0x54)
mkdirat(0xffffffffffffff9c, 0x0, 0x20)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$NFC_CMD_DEP_LINK_UP(r3, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24048040}, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000680))
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, 0x0)

4.688244352s ago: executing program 5 (id=914):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r3)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r4, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r6 = accept(r3, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1)
recvfrom(r5, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0)

4.526312123s ago: executing program 3 (id=915):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r3 = socket(0x10, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="3c00000010001fff0000", @ANYRES32=0x0, @ANYBLOB="0000000000000004000012800900010076657468000000000400028008000a00f22a2748e8334c288f99dae6673376117abcd19690490f73d27e58e93a1597e629d861aeb099ffbcfe205c63ed5ee42deb15b5f210ee74876f6357c8fbdc5f0e557d63a55bbc2d7100b6deca2a146d8ac18957ecc028fef5593821092632dcd9dacdea5ad9b478316db5cd43b1b057998ff7b67c801211dd052ae95f6df993c2a4210eb75bd4046de7bafac01dd5", @ANYRES32=r4, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}, @IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, 0x48}}, 0x0)
fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004800}, 0x8)

2.579679338s ago: executing program 5 (id=916):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b921, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0x3}, {0x2, 0xb}, {0x9, 0x6}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4010040}, 0x44000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

2.579231297s ago: executing program 1 (id=917):
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
shutdown(r0, 0x1)

2.578721397s ago: executing program 3 (id=918):
ioperm(0x0, 0x7, 0x80006)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x1fc, 0x3}, 0x102822, 0x2e, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0xa)
socket$inet_sctp(0x2, 0x5, 0x84)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, 0x0, 0x0)
r0 = socket$tipc(0x1e, 0x2, 0x0)
getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet6(0xa, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r3=>0x0})
r4 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r4, @ANYRES32=r4], 0x44}}, 0x2000800)

2.578386237s ago: executing program 4 (id=919):
r0 = socket$inet6(0xa, 0x802, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31)
sendmmsg$inet6(r0, &(0x7f0000002940), 0x40000000000017d, 0x888)

2.160658983s ago: executing program 3 (id=920):
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2000844, &(0x7f0000000300)={[{@fat=@time_offset={'time_offset', 0x3d, 0x804f7}}, {@dots}, {@fat=@nfs_stale_rw}, {@dots}, {@dots}, {@dots}, {@fat=@quiet}, {@fat=@flush}, {@fat=@nocase}, {@fat=@fmask={'fmask', 0x3d, 0xca}}, {@fat=@dos1xfloppy}, {}, {@fat=@dmask}, {@nodots}, {@nodots}, {@dots}]}, 0x21, 0x23d, &(0x7f0000000a40)="$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")
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x81ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x38)
syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x18, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0x13, 0x2}]}}}}}}}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='.\x02\x00', 0x180)
syz_clone3(&(0x7f00000004c0)={0xa690b000, &(0x7f0000000040), 0x0, 0x0, {}, &(0x7f0000000100)=""/161, 0xa1, 0x0, 0x0}, 0x58)
r2 = socket$kcm(0x2, 0x200000000000001, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x50, &(0x7f0000000100), 0x4)
recvmmsg(r2, &(0x7f00000055c0)=[{{&(0x7f00000000c0)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)=""/9, 0x9}], 0x1, &(0x7f00000003c0)=""/197, 0xc5}, 0x1}, {{&(0x7f00000004c0)=@qipcrtr, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000c80)=""/4096, 0x1000}], 0x1, &(0x7f0000000540)=""/179, 0xb3}, 0x8}, {{&(0x7f0000000600)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000680)=""/128, 0x80}], 0x1}, 0x8}, {{&(0x7f0000000700)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000780)=""/113, 0x71}], 0x1}, 0x4}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000840)=""/181, 0xb5}, {&(0x7f0000000900)=""/175, 0xaf}, {&(0x7f0000001c80)=""/132, 0x84}, {&(0x7f0000001d40)=""/4096, 0x1000}], 0x4, &(0x7f0000000a00)=""/54, 0x36}, 0x3}, {{&(0x7f0000002d40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000003180)=[{&(0x7f0000002dc0)=""/48, 0x30}, {&(0x7f0000002e00)=""/148, 0x94}, {&(0x7f0000002ec0)=""/247, 0xf7}, {&(0x7f0000002fc0)=""/21, 0x15}, {&(0x7f0000003000)=""/97, 0x61}, {&(0x7f0000003080)=""/6, 0x6}, {&(0x7f00000030c0)=""/192, 0xc0}], 0x7, &(0x7f0000003200)=""/4096, 0x1000}, 0x2000}, {{&(0x7f0000004200)=@isdn, 0x80, &(0x7f0000004480)=[{&(0x7f0000004280)=""/201, 0xc9}, {&(0x7f0000004380)=""/132, 0x84}, {&(0x7f0000004440)}], 0x3, &(0x7f00000044c0)=""/4096, 0x1000}, 0x1}, {{&(0x7f00000054c0)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000005540), 0x0, &(0x7f0000005580)}, 0x255}], 0x8, 0x61, 0x0)
mount$9p_tcp(0x0, &(0x7f0000000200)='.\x02\x00', 0x0, 0x20000, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000040), 0xa8, 0x82)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'lo\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv4_newaddr={0x28, 0x14, 0x503, 0x70bd32, 0x25dfdbfd, {0x2, 0x1f, 0x0, 0xff, r6}, [@IFA_LOCAL={0x8, 0x2, @remote}, @IFA_FLAGS={0x8, 0x8, 0x330}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000e081}, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}})
ioctl$BLKFRAGET(r3, 0xc0c0128e, 0x0)

1.818415302s ago: executing program 3 (id=921):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={<r0=>0xffffffffffffffff})
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
timer_gettime(0x0, 0x0)
close(0x3)
gettid()
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
clock_gettime(0x0, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
creat(0x0, 0x70)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f00000004c0), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
cachestat(r1, &(0x7f0000000040)={0x7f, 0x20000000000006}, &(0x7f000009de80), 0x0)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = syz_usb_connect$lan78xx(0x2, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_disconnect(r2)

1.41005841s ago: executing program 5 (id=922):
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x8, 0x2c, 0x0, @remote, @local, {[], {{0x3a00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0)
rt_sigprocmask(0x2, &(0x7f0000000000)={[0xffffffffffffffff]}, 0xfffffffffffffffe, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
r3 = msgget$private(0x0, 0x3b)
msgctl$IPC_SET(r3, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x400000000000})
ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x10040000}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r4, @ANYRES32=r4, @ANYBLOB="2f000000282000006cec3fded6391b37f8f9"], 0x20)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
mount$9p_xen(&(0x7f0000000140), &(0x7f0000000200)='./file1\x00', 0x0, 0x4010, &(0x7f0000000a00)=ANY=[@ANYBLOB='trans=xen,nodevmap,pcr=00000000000000000037', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0xee01, @ANYBLOB=',audit,\x00'])

1.335261576s ago: executing program 5 (id=923):
openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000))
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x6, 0x8000}, 0x100, 0x8000000, 0x0, 0x2, 0xfff, 0xa001, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x6, 0x504}, 0x50)
syz_io_uring_setup(0x512b, &(0x7f0000000180)={0x0, 0x6f04, 0x130c8, 0x1, 0x2a0}, 0x0, 0x0)
epoll_create1(0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcdd, r0}, 0x38)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'bond0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r3, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r1], 0x44}, 0x1, 0x0, 0x0, 0x240448e0}, 0x0)

1.123455149s ago: executing program 5 (id=924):
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
unshare(0x64000600)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
sendmsg$nl_route(r0, 0x0, 0x20004090)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, 0x0)
getdents64(r1, &(0x7f0000002f40)=""/4098, 0x1002)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000080)=0x10000, 0x4)
sigaltstack(&(0x7f00000001c0)={&(0x7f0000000100)=""/176, 0x80000000, 0xb0}, &(0x7f0000000240)={0x0})
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2)
r2 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000004c0)=[@in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e24, @loopback}], 0x20)

1.122992249s ago: executing program 1 (id=925):
timer_delete(0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x100, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x7, 0x6}, 0x0, 0x0, 0x10000, 0x7, 0x2, 0xfffffffa, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c25"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_extract_tcp_res$synack(0x0, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
unlink(0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32)
write(r1, &(0x7f0000000240)="53d38327618ea9", 0x7)
sendfile(r1, r0, 0x0, 0x3ffff)

357.535924ms ago: executing program 5 (id=926):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x43201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080), 0x8}, 0x640, 0x5, 0x0, 0x0, 0x2, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x8}}, './file0\x00'})
ioprio_set$uid(0x3, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000000340)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00, @ANYBLOB="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"], 0x1, 0x2b4, &(0x7f0000000e40)="$eJzs3cFr024YwPFn7bZ2HVt7GIPfD8QHveglbPUvKLKBWFDmOqYHIXOplsZmNLVSEbeb1/0dw6MnBfUf2GU38SpeiiB42UGsrEm2rqu4ztVM8/1Aydv3fZ/kTd60PAk0bS5vPiwXXaNo1iSWVImJbMiuSGav5Bvyl7F2eVQ6bcjl8a/vz926fed6Lp+fW1Cdzy1eyarq5Pk3j5++uPCuNr70cvJ1QrYzd5tfsh+3p7f/a35fDNbuiJi64jg1c8W2dLXklg3Vm7ZlupaWKq5VrWlHe9F21tYaalZWJ1JrVct11aw0tGw1tOZordpQ875ZqqhhGDqRkqiJ9x1R2FpYMHMDGQzCMNarslrNmfGejYWtPzEoAABwtjSXN+Nh5P8PSq6WXK04h/L7o/l/TPrI/0Uinf/3j/w/Cvby/5T/+T2M/B8AAAAAAAAAAAAAAAAAAAAAgL/BbquVbrVa6WAZvBIikhSR4H3Y48RgMP/R1vHDvaSI/bxeqBe8pdeeK0pJbLFkZkTkW/t88Hnl+Wv5uRltm5a39rofv14vxCURxAcyveNnvXjtjF+XEUl1bj8raZnqHZ/tEV8vjMqli62Ev2VLDEnLzj1xxJbV9nl9EP9sVvXqjXxX/Fi7HwAAAAAA/wJD92W6r9/b7YYGjw3pavcqD+4PSPoX9we6rq+H5f/h8PYbAAAAAIAocRtPyqZtW9UIFIL/PziVFYZ/6JLH7TwsIn7Nq7MyFweFoQ1vVo42xUTkpGuO/94sfxaRQzVToU/3aRQ+PfKO9X7Nh593XpoI7UsJAAAAwEAESf9Q35GFnYEMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAACACDruw8OC/id59ljH5uLh7CUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwNvwIAAD//5jbFjk=")
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
statfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)=""/38)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x20, r5, 0x9c3fa077fa966179, 0x0, 0x25dfdbfe, {{0x7e}, {@void, @val={0xc, 0x99, {0x7, 0x17}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x8004800}, 0x8)

357.218763ms ago: executing program 2 (id=927):
syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x4000, &(0x7f0000000480), 0x1, 0x3d0, &(0x7f00000004c0)="$eJzs3M1uG0UcAPD/br5I+mEjcUCFgyUQBAFxHQhQhEThyscFeAArSUuF21SNkWjJoSBOnDggbhz6Ahx4gKpCSEi8Ai+AKlUozQFuQWvvOm4cp7Fix2r6+0mjndkdZ/bv3axm1rsTwGOrEhHnI2IiIhYjopSvT/MUN9spq3d/c2N5a3NjOYnt7U/+SSLJ1xV/K8mXJ/LCfBqRfhfxzM3edtev3/ii3misXsvL1eblq9X16zdevXS5fnH14uqV2pvnarWlxbdqrw8t1p+ef+ncxPvnz/z8V+nO0vT0bLa/J/Nt3XEMSyUqne9kt6VhNzZm0+PeAQAADiTN+/6Trf5/KSZaubZSVDfGunMAAADAUGy/my8BAACAYywx9gcAAIBjrngO4P7mxnKRxvg4wpG7915ElHfebd7qxD8ZT+R1pkb4fmslIq6+kJSyFCN6DxkAoNudrP9zdq/+XxpPd9WbiWj1h2aH3H5lV7m3/5PeHXKTD8j6f+9ExFZP/y8tqpQn8tKpVldxKrlwqbF6NiJOR8R8TM1k5do+bXzw7y8f99uWxf97cup0kbL2s+VOjfTu5MyDn1mpN+uHibnbvW8izkzuFX/S6f8mETF3iDYmvr71dr9tD49/tLZvRby45/Hfmbkn2X9+omrrfKgWZ0Wv/7799aN+7Y87/uz4z+0ffznpnq9pffA2bn/+57P9tnWPfwY5/6eTT1v5Ylz2Vb3ZvFaLmE4+7F2/uPPZolzUz+Kff27v///i+pfkc1qdzK8Bg/r+h99eOUj8WcraL8aCRyGLf2Wg4z945o3bf3zWr/2Hx58d//YcYPP5moNc/w66g4f57gAAAOBRkbbuayTpQiefpgsL7fsdT8Vc2lhbb758Ye3LKyvt+x/lmEqLO12lrvuhtfbP6J3y4q7yaxHxZET8WJptlReW1xor4w4eAAAAHhMn+oz/M38f2VMIAAAAwMiVx70DAAAAwMgZ/wMAAMCxdph5/WRkZI5rZtxXJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEfb/wEAAP//Wt22ag==")
syz_io_uring_setup(0x4ed, &(0x7f0000000880)={0x0, 0xfec9, 0x8000, 0xfffffffc, 0x274}, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x2000000, 0x8, 0x0, &(0x7f0000000200)="63eced8e46dc92b1", 0x0, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f00000007c0)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@sysvgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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")
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0)
open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
socket$inet_udp(0x2, 0x2, 0x0)
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r3 = syz_io_uring_setup(0x10d, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff, 0xa0}, &(0x7f00000003c0)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r2, 0x0, 0x0, 0x0, 0x80000})
io_uring_enter(r3, 0x47f5, 0x0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)

357.013373ms ago: executing program 4 (id=928):
r0 = socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r1, &(0x7f0000000140)={0x2, 0x3, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000), 0x20000328)
setsockopt$inet_tcp_int(r1, 0x6, 0x4, &(0x7f0000000100)=0xd9, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8071, 0xffffffffffffffff, 0x50182000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x8031, 0xffffffffffffffff, 0xfdffa000)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r2, &(0x7f00000004c0), 0x0, 0x0)
mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x88d0}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x80003, 0x3)
setsockopt$inet6_int(r4, 0x29, 0x16, 0x0, 0x0)
sendmsg$nl_route(r3, 0x0, 0x0)

112.43792ms ago: executing program 1 (id=929):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
fchdir(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe)
ioctl$XFS_IOC_OPEN_BY_HANDLE(r0, 0xc038586b, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x2080, &(0x7f0000000140)={@align=0x5, {0x1, 0x4, 0x4, 0x6}}, 0x8000, 0x0, 0x0})
r2 = socket$inet(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000000080)={0x2c, @rand_addr=0x64010100, 0x4e22, 0x2, 'rr\x00', 0x10, 0xe1, 0x56}, 0x2c)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = timerfd_create(0x9, 0x800)
timerfd_settime(r3, 0x1, &(0x7f0000007000)={{}, {0x0, 0x989680}}, 0x0)
timerfd_gettime(r3, &(0x7f0000000000))
setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000240)={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc)
setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYBLOB="e0000001ac1414aa00000000"], 0x1c)
preadv(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x6, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r4 = openat$cgroup_freezer_state(r1, &(0x7f0000000300), 0x2, 0x0)
write$cgroup_freezer_state(r4, &(0x7f00000000c0)='FROZEN\x00', 0x7)
sendfile(r4, r4, 0x0, 0x8000002)

0s ago: executing program 1 (id=930):
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r1 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x800, 0x4, 0x306}, &(0x7f0000000340)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RENAMEAT={0x23, 0x58, 0x0, 0xffffffffffffffff, &(0x7f0000001c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000b40)='./file1/file0\x00', 0xffffffffffffffff, 0x0, 0x1})
io_uring_enter(r1, 0x3516, 0x7dd6, 0x8, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4)
openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r6, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)

kernel console output (not intermixed with test programs):

p=0x7f6be712c799 code=0x7ffc0000
[  113.033447][   T28] audit: type=1326 audit(1772844751.287:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5020 comm="syz.2.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6be712c799 code=0x7ffc0000
[  113.062651][   T28] audit: type=1326 audit(1772844751.287:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5020 comm="syz.2.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6be712c799 code=0x7ffc0000
[  113.128198][   T28] audit: type=1326 audit(1772844751.317:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5020 comm="syz.2.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f6be712c799 code=0x7ffc0000
[  113.160693][   T28] audit: type=1326 audit(1772844751.317:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5020 comm="syz.2.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6be712c799 code=0x7ffc0000
[  113.185906][   T28] audit: type=1326 audit(1772844751.317:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5020 comm="syz.2.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6be712c799 code=0x7ffc0000
[  113.222262][ T5026] netlink: 68 bytes leftover after parsing attributes in process `syz.0.439'.
[  113.240647][ T5026] netlink: 32 bytes leftover after parsing attributes in process `syz.0.439'.
[  113.249585][   T28] audit: type=1326 audit(1772844751.317:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5020 comm="syz.2.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f6be712c799 code=0x7ffc0000
[  113.273572][ T5029] SELinux:  policydb magic number 0x100 does not match expected magic number 0xf97cff8c
[  113.293795][ T5029] SELinux: failed to load policy
[  113.303046][ T5031] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5031 comm=syz.1.440
[  113.340987][ T5033] loop0: detected capacity change from 0 to 512
[  113.373391][ T5033] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[  113.383220][ T5033] System zones: 0-2, 18-18, 34-34
[  113.389119][ T5033] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.442: bg 0: block 248: padding at end of block bitmap is not set
[  113.403744][ T5033] loop0: lost filesystem error report for type 5 error -117
[  113.403925][ T5033] EXT4-fs error (device loop0): ext4_acquire_dquot:7001: comm syz.0.442: Failed to acquire dquot type 1
[  113.411294][    C1] EXT4-fs (loop0): error count since last fsck: 1
[  113.411318][    C1] EXT4-fs (loop0): last error at time 1772844751: ext4_validate_block_bitmap:441
[  113.438625][ T5033] loop0: lost filesystem error report for type 5 error -117
[  113.457281][ T5033] EXT4-fs (loop0): 1 truncate cleaned up
[  113.463875][ T5033] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  113.476980][ T5033] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  113.560146][ T5033] netlink: 80 bytes leftover after parsing attributes in process `syz.0.442'.
[  113.839553][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.022651][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.068853][   T30] EXT4-fs error (device loop0): ext4_release_dquot:7037: comm kworker/u8:1: Failed to release dquot type 1
[  114.080493][   T30] loop0: lost filesystem error report for type 5 error -117
[  114.094768][ T5054] netlink: 'syz.0.446': attribute type 1 has an invalid length.
[  114.124120][ T5054] 8021q: adding VLAN 0 to HW filter on device bond1
[  114.165454][ T5054] ip6erspan0: entered promiscuous mode
[  114.174763][ T5054] bond1: (slave ip6erspan0): making interface the new active one
[  114.184137][ T5054] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link
[  114.194458][ T5061] loop2: detected capacity change from 0 to 512
[  114.230430][ T5054] macvlan2: entered promiscuous mode
[  114.237986][ T5054] bond1: entered promiscuous mode
[  114.244573][ T5054] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  114.252436][ T5054] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  114.268571][ T5054] bond1: left promiscuous mode
[  114.364422][ T5070] netlink: 'syz.1.452': attribute type 10 has an invalid length.
[  114.377113][ T5070] netdevsim netdevsim1 netdevsim1: entered promiscuous mode
[  114.380567][ T5061] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  114.385199][ T5070] netdevsim netdevsim1 netdevsim1: entered allmulticast mode
[  114.399209][ T5061] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  114.407352][ T5070] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[  114.503473][ T5071] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  114.619201][ T5073] netlink: 'syz.0.453': attribute type 1 has an invalid length.
[  114.687195][ T5074] netlink: 28 bytes leftover after parsing attributes in process `syz.0.453'.
[  114.752856][ T5073] 8021q: adding VLAN 0 to HW filter on device bond2
[  114.765215][ T5078] bond2: (slave dummy0): making interface the new active one
[  114.776140][ T5078] bond2: (slave dummy0): Enslaving as an active interface with an up link
[  114.822172][ T5074] bond2: entered allmulticast mode
[  114.827583][ T5074] dummy0: entered allmulticast mode
[  114.916655][ T5081] loop0: detected capacity change from 0 to 4096
[  114.923966][ T5081] EXT4-fs: Ignoring removed bh option
[  114.935199][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.946164][ T5081] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  115.269016][ T5086] tipc: Started in network mode
[  115.316072][ T5086] tipc: Node identity 4, cluster identity 4711
[  115.360540][ T5086] tipc: Node number set to 4
[  115.636228][ T5093] lo speed is unknown, defaulting to 1000
[  115.772471][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.476414][ T5104] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.503481][ T5104] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.612259][ T3753] lo speed is unknown, defaulting to 1000
[  116.813079][ T5113] netlink: 'syz.1.464': attribute type 1 has an invalid length.
[  116.899303][ T5116] loop4: detected capacity change from 0 to 512
[  116.915348][ T5116] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  117.350252][ T5119] netlink: 'syz.3.465': attribute type 10 has an invalid length.
[  117.792674][ T5116] EXT4-fs (loop4): 1 truncate cleaned up
[  117.798142][ T5113] 8021q: adding VLAN 0 to HW filter on device bond2
[  117.798957][ T5116] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  117.877528][ T5117] macvlan3: entered promiscuous mode
[  117.885835][ T5117] bond2: entered promiscuous mode
[  117.891789][ T5117] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  117.900971][ T5117] bond2: left promiscuous mode
[  117.925052][ T5119] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[  118.135158][ T5126] netlink: 'syz.3.467': attribute type 1 has an invalid length.
[  118.158649][ T5126] 8021q: adding VLAN 0 to HW filter on device bond3
[  118.173877][ T5126] netlink: 28 bytes leftover after parsing attributes in process `syz.3.467'.
[  118.182898][ T5126] bond3: entered allmulticast mode
[  118.193629][ T5126] bond3: (slave dummy0): making interface the new active one
[  118.201524][ T5126] dummy0: entered allmulticast mode
[  118.216770][ T5126] bond3: (slave dummy0): Enslaving as an active interface with an up link
[  118.280366][ T5131] ip6erspan0: left promiscuous mode
[  118.460273][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.105789][ T5143] syzkaller0: entered promiscuous mode
[  119.128356][ T5143] syzkaller0: entered allmulticast mode
[  119.360931][ T5148] loop1: detected capacity change from 0 to 4096
[  119.381612][ T5148] EXT4-fs: Ignoring removed bh option
[  119.398611][ T5148] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  119.540170][ T5150] loop3: detected capacity change from 0 to 8192
[  119.670978][ T5156] tipc: Started in network mode
[  119.675898][ T5156] tipc: Node identity 4, cluster identity 4711
[  119.682381][ T5156] tipc: Node number set to 4
[  119.944415][ T5161] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105)
[  119.971651][ T5161] team0 (unregistering): Port device team_slave_0 removed
[  119.991029][ T5161] team0 (unregistering): Failed to send options change via netlink (err -105)
[  120.006488][ T5161] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105)
[  120.018480][ T5161] team0 (unregistering): Port device team_slave_1 removed
[  120.219316][ T5169] netlink: 'syz.2.480': attribute type 1 has an invalid length.
[  120.227970][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  120.391473][ T5174] netlink: 28 bytes leftover after parsing attributes in process `syz.2.480'.
[  120.666941][ T5169] 8021q: adding VLAN 0 to HW filter on device bond3
[  120.703164][ T5171] syz.0.478 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000
[  120.727586][ T5171] CPU: 1 UID: 0 PID: 5171 Comm: syz.0.478 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  120.727622][ T5171] Tainted: [W]=WARN
[  120.727629][ T5171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  120.727643][ T5171] Call Trace:
[  120.727651][ T5171]  <TASK>
[  120.727679][ T5171]  __dump_stack+0x1d/0x30
[  120.727713][ T5171]  dump_stack_lvl+0x95/0xd0
[  120.727738][ T5171]  dump_stack+0x15/0x1b
[  120.727812][ T5171]  dump_header+0x80/0x240
[  120.727837][ T5171]  oom_kill_process+0x295/0x350
[  120.727862][ T5171]  out_of_memory+0x97d/0xb80
[  120.727888][ T5171]  try_charge_memcg+0x62e/0xa10
[  120.727941][ T5171]  obj_cgroup_charge_pages+0x23/0xc0
[  120.727975][ T5171]  __memcg_kmem_charge_page+0x9e/0x170
[  120.728020][ T5171]  __alloc_frozen_pages_noprof+0x18a/0x360
[  120.728052][ T5171]  alloc_pages_mpol+0xb3/0x260
[  120.728081][ T5171]  alloc_pages_noprof+0x8f/0x130
[  120.728110][ T5171]  __vmalloc_node_range_noprof+0xa46/0x12b0
[  120.728185][ T5171]  __kvmalloc_node_noprof+0x3d4/0x650
[  120.728213][ T5171]  ? futex_hash_allocate+0x190/0x9d0
[  120.728243][ T5171]  ? futex_hash_allocate+0x190/0x9d0
[  120.728320][ T5171]  futex_hash_allocate+0x190/0x9d0
[  120.728349][ T5171]  ? cap_task_prctl+0x13f/0x6e0
[  120.728374][ T5171]  futex_hash_prctl+0xd8/0xf0
[  120.728401][ T5171]  __se_sys_prctl+0xa3d/0x13f0
[  120.728484][ T5171]  __x64_sys_prctl+0x67/0x80
[  120.728513][ T5171]  x64_sys_call+0x2533/0x3020
[  120.728538][ T5171]  do_syscall_64+0x12c/0x370
[  120.728561][ T5171]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  120.728588][ T5171] RIP: 0033:0x7fb58581c799
[  120.728705][ T5171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  120.728725][ T5171] RSP: 002b:00007fb58426f028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d
[  120.728779][ T5171] RAX: ffffffffffffffda RBX: 00007fb585a95fa0 RCX: 00007fb58581c799
[  120.728794][ T5171] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e
[  120.728807][ T5171] RBP: 00007fb5858b2bd9 R08: 0000000000000000 R09: 0000000000000000
[  120.728821][ T5171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  120.728861][ T5171] R13: 00007fb585a96038 R14: 00007fb585a95fa0 R15: 00007fff22302378
[  120.728881][ T5171]  </TASK>
[  120.728903][ T5171] memory: usage 307200kB, limit 307200kB, failcnt 2736
[  120.968295][ T5171] memory+swap: usage 307564kB, limit 9007199254740988kB, failcnt 0
[  120.977579][ T5171] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0
[  120.985358][ T5171] Memory cgroup stats for /syz0:
[  120.985946][ T5171] cache 0
[  120.994153][ T5171] rss 4096
[  120.997656][ T5171] shmem 0
[  121.000830][ T5171] mapped_file 0
[  121.004579][ T5171] dirty 0
[  121.007750][ T5179] netlink: 'syz.4.481': attribute type 10 has an invalid length.
[  121.007829][ T5171] writeback 0
[  121.019175][ T5171] workingset_refault_anon 115
[  121.028311][ T5171] workingset_refault_file 425
[  121.033107][ T5171] swap 352256
[  121.036424][ T5171] swapcached 634880
[  121.040284][ T5171] pgpgin 70706
[  121.065921][ T5171] pgpgout 70701
[  121.072680][ T5171] pgfault 84275
[  121.080490][ T5171] pgmajfault 72
[  121.102726][ T5171] inactive_anon 0
[  121.106881][ T5171] active_anon 20480
[  121.111683][ T5171] inactive_file 0
[  121.116438][ T5171] active_file 0
[  121.119948][ T5171] unevictable 0
[  121.123466][ T5171] hierarchical_memory_limit 314572800
[  121.128888][ T5171] hierarchical_memsw_limit 9223372036854771712
[  121.136199][ T5171] total_cache 0
[  121.139747][ T5171] total_rss 4096
[  121.143443][ T5171] total_shmem 0
[  121.146978][ T5171] total_mapped_file 0
[  121.151038][ T5171] total_dirty 0
[  121.154605][ T5171] total_writeback 0
[  121.158427][ T5171] total_workingset_refault_anon 115
[  121.163750][ T5171] total_workingset_refault_file 425
[  121.168994][ T5171] total_swap 352256
[  121.172899][ T5171] total_swapcached 634880
[  121.177261][ T5171] total_pgpgin 70706
[  121.181308][ T5171] total_pgpgout 70701
[  121.185331][ T5171] total_pgfault 84275
[  121.188846][ T5176] bond3: (slave dummy0): making interface the new active one
[  121.191502][ T5171] total_pgmajfault 72
[  121.198358][ T5176] bond3: (slave dummy0): Enslaving as an active interface with an up link
[  121.201310][ T5171] total_inactive_anon 0
[  121.213564][ T5171] total_active_anon 20480
[  121.218116][ T5171] total_inactive_file 0
[  121.222341][ T5171] total_active_file 0
[  121.226385][ T5171] total_unevictable 0
[  121.230540][ T5171] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.478,pid=5168,uid=0
[  121.245317][ T5171] Memory cgroup out of memory: Killed process 5168 (syz.0.478) total-vm:96208kB, anon-rss:1220kB, file-rss:22272kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000
[  121.328002][ T5174] bond3: entered allmulticast mode
[  121.333510][ T5174] dummy0: entered allmulticast mode
[  121.426875][ T5187] bond2: (slave dummy0): Releasing active interface
[  121.435956][ T5187] dummy0: left allmulticast mode
[  121.448382][ T5190] loop3: detected capacity change from 0 to 512
[  121.455918][ T5190] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  121.571456][ T5190] EXT4-fs (loop3): 1 truncate cleaned up
[  121.577822][ T5190] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  121.703029][ T5187] bridge_slave_0: left allmulticast mode
[  121.734740][ T5187] bridge_slave_0: left promiscuous mode
[  121.772835][ T5187] bridge0: port 1(bridge_slave_0) entered disabled state
[  121.840411][ T5187] bond0: (slave bridge_slave_1): Releasing backup interface
[  121.898335][ T5187] team0: Port device team_slave_0 removed
[  121.923242][ T5187] team0: Port device team_slave_1 removed
[  121.936208][ T5187] batman_adv: batadv0: Removing interface: batadv_slave_0
[  121.975074][ T5187] batman_adv: batadv0: Removing interface: batadv_slave_1
[  122.014442][ T5187] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  122.600233][ T5210] loop4: detected capacity change from 0 to 512
[  122.631918][ T5210] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  122.663851][ T5210] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.489: bg 0: block 393: padding at end of block bitmap is not set
[  122.699037][ T5210] loop4: lost filesystem error report for type 5 error -117
[  122.699243][ T5210] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6685: Corrupt filesystem
[  122.706568][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  122.706583][    C0] EXT4-fs (loop4): initial error at time 1772844761: ext4_validate_block_bitmap:441
[  122.706629][    C0] EXT4-fs (loop4): last error at time 1772844761: ext4_validate_block_bitmap:441
[  122.754957][ T5212] loop1: detected capacity change from 0 to 8192
[  122.819390][ T5210] loop4: lost filesystem error report for type 5 error -117
[  122.819850][ T5210] EXT4-fs (loop4): 2 truncates cleaned up
[  122.853925][ T5210] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  122.911552][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  122.924127][ T5210] rdma_rxe: rxe_newlink: failed to add lo
[  123.090784][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.201435][   T28] kauditd_printk_skb: 33 callbacks suppressed
[  124.201503][   T28] audit: type=1400 audit(1772844762.617:653): avc:  denied  { write } for  pid=5240 comm="syz.0.499" path="socket:[18477]" dev="sockfs" ino=18477 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  124.304235][ T5243] netlink: 4 bytes leftover after parsing attributes in process `syz.4.500'.
[  124.346173][ T5243] netlink: 4 bytes leftover after parsing attributes in process `syz.4.500'.
[  124.565229][ T5245] loop4: detected capacity change from 0 to 128
[  124.874904][ T5238] loop1: detected capacity change from 0 to 32768
[  125.222119][   T28] audit: type=1400 audit(1772844763.477:654): avc:  denied  { read } for  pid=5246 comm="syz.3.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  125.537163][   T28] audit: type=1400 audit(1772844763.677:655): avc:  denied  { listen } for  pid=5248 comm="syz.1.503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  126.250476][ T5260] lo speed is unknown, defaulting to 1000
[  126.520026][ T5263] loop1: detected capacity change from 0 to 512
[  126.730728][ T5263] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿ'
[  126.740645][ T5263] loop1: detected capacity change from 0 to 512
[  127.602971][ T5277] xt_bpf: check failed: parse error
[  127.820326][ T5293] loop1: detected capacity change from 0 to 512
[  127.829021][ T5293] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  128.039603][ T5292] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.056786][ T5281] netlink: 8 bytes leftover after parsing attributes in process `syz.4.513'.
[  128.066430][ T5281] netlink: 4 bytes leftover after parsing attributes in process `syz.4.513'.
[  128.113262][ T5292] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.184146][ T5292] bond0: (slave netdevsim1): Releasing backup interface
[  128.214561][ T5292] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.225913][ T5302] loop4: detected capacity change from 0 to 4096
[  128.232748][ T5302] EXT4-fs: Ignoring removed bh option
[  128.252199][ T5302] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  128.310103][ T5292] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.454437][   T30] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  128.488197][   T30] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  128.521152][   T30] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  128.553333][   T30] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  129.047577][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.902862][ T5308] tipc: Started in network mode
[  129.907756][ T5308] tipc: Node identity 4, cluster identity 4711
[  129.915981][ T5308] tipc: Node number set to 4
[  129.924282][ T5311] loop3: detected capacity change from 0 to 4096
[  129.933203][ T5311] EXT4-fs: Ignoring removed bh option
[  129.944400][ T5311] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  130.782407][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.890885][ T5328] bond0: left allmulticast mode
[  130.895844][ T5328] bond_slave_0: left allmulticast mode
[  130.910516][   T28] audit: type=1400 audit(1772844769.257:656): avc:  denied  { accept } for  pid=5323 comm="syz.0.523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  130.944632][ T5328] bond_slave_1: left allmulticast mode
[  130.950238][ T5328] netdevsim netdevsim1 netdevsim1: left allmulticast mode
[  130.957720][ T5328] bridge0: port 3(bond0) entered disabled state
[  130.967024][ T5328] bridge_slave_0: left allmulticast mode
[  130.973025][ T5328] bridge_slave_0: left promiscuous mode
[  130.978839][ T5328] bridge0: port 1(bridge_slave_0) entered disabled state
[  130.986905][ T5328] bridge_slave_1: left allmulticast mode
[  130.998766][ T5328] bridge_slave_1: left promiscuous mode
[  131.005759][ T5328] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.134314][ T5328] bond0: (slave bond_slave_0): Releasing backup interface
[  131.780969][ T5328] bond_slave_0: left promiscuous mode
[  131.791457][ T5328] bond0: (slave bond_slave_1): Releasing backup interface
[  131.799713][ T5328] bond_slave_1: left promiscuous mode
[  131.805534][ T5328] batman_adv: batadv0: Removing interface: batadv_slave_0
[  131.813194][ T5328] batman_adv: batadv0: Removing interface: batadv_slave_1
[  131.820771][ T5328] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  131.968190][ T5346] xt_bpf: check failed: parse error
[  132.846725][ T5361] tipc: Cannot configure node identity twice
[  132.886995][ T5363] loop4: detected capacity change from 0 to 4096
[  132.907818][ T5363] EXT4-fs: Ignoring removed bh option
[  132.927455][ T5363] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  133.742461][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.831562][ T5385] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.874019][ T5385] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.925694][ T5385] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.994165][ T5385] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.057375][  T129] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  134.075093][  T129] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  134.096864][  T129] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  134.117744][  T129] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  137.039414][ T5428] loop4: detected capacity change from 0 to 4096
[  137.059617][ T5428] EXT4-fs: Ignoring removed bh option
[  137.086789][ T5428] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  137.155251][ T5434] loop0: detected capacity change from 0 to 512
[  137.169922][ T5434] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  137.261286][ T5434] EXT4-fs (loop0): 1 truncate cleaned up
[  137.268056][ T5434] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  138.046595][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.586065][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.658803][ T5446] loop3: detected capacity change from 0 to 4096
[  138.686539][ T5446] EXT4-fs: Ignoring removed bh option
[  138.718182][ T5439] syz.1.556 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  138.736207][ T5446] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  138.741021][ T5439] CPU: 1 UID: 0 PID: 5439 Comm: syz.1.556 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  138.741053][ T5439] Tainted: [W]=WARN
[  138.741060][ T5439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  138.741110][ T5439] Call Trace:
[  138.741118][ T5439]  <TASK>
[  138.741127][ T5439]  __dump_stack+0x1d/0x30
[  138.741154][ T5439]  dump_stack_lvl+0x95/0xd0
[  138.741262][ T5439]  dump_stack+0x15/0x1b
[  138.741298][ T5439]  dump_header+0x80/0x240
[  138.741320][ T5439]  oom_kill_process+0x295/0x350
[  138.741357][ T5439]  out_of_memory+0x97d/0xb80
[  138.741456][ T5439]  try_charge_memcg+0x62e/0xa10
[  138.741491][ T5439]  mem_cgroup_swapin_charge_folio+0x103/0x1f0
[  138.741523][ T5439]  __swap_cache_prepare_and_add+0x386/0x530
[  138.741582][ T5439]  swap_cache_alloc_folio+0xa2/0x120
[  138.741611][ T5439]  swap_cluster_readahead+0x26e/0x3d0
[  138.741642][ T5439]  swapin_readahead+0xde/0x840
[  138.741708][ T5439]  ? __rcu_read_unlock+0x4e/0x70
[  138.741729][ T5439]  ? __perf_event_task_sched_in+0xa65/0xad0
[  138.741752][ T5439]  ? __list_add_valid_or_report+0x38/0xe0
[  138.741852][ T5439]  ? __rcu_read_unlock+0x4e/0x70
[  138.741876][ T5439]  ? swap_cache_get_folio+0x26f/0x280
[  138.741904][ T5439]  do_swap_page+0x309/0x2210
[  138.741932][ T5439]  ? __schedule+0x93c/0xd40
[  138.741955][ T5439]  ? __rcu_read_lock+0x36/0x50
[  138.742040][ T5439]  ? pte_offset_map_rw_nolock+0x19e/0x200
[  138.742115][ T5439]  handle_mm_fault+0xb40/0x3020
[  138.742145][ T5439]  ? vma_start_read+0x1c7/0x2c0
[  138.742186][ T5439]  do_user_addr_fault+0x62f/0x1050
[  138.742260][ T5439]  ? trace_page_fault_user+0x1f/0xe0
[  138.742288][ T5439]  exc_page_fault+0x62/0xa0
[  138.742315][ T5439]  asm_exc_page_fault+0x26/0x30
[  138.742335][ T5439] RIP: 0033:0x7f0e147aa14c
[  138.742352][ T5439] Code: 8a 31 13 00 eb 24 66 66 2e 0f 1f 84 00 00 00 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 81 c3 f0 00 00 00 48 39 dd 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00
[  138.742434][ T5439] RSP: 002b:00007fffbacd7280 EFLAGS: 00010206
[  138.742451][ T5439] RAX: 0000000000000000 RBX: 00007f0e14b55fa0 RCX: 0000555575fa6808
[  138.742464][ T5439] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  138.742476][ T5439] RBP: 00007f0e14b57da0 R08: 0000000000000000 R09: 0000000000000000
[  138.742488][ T5439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000021e82
[  138.742549][ T5439] R13: 00007f0e14b5609c R14: 0000000000021be6 R15: 00007f0e14b56090
[  138.742567][ T5439]  </TASK>
[  138.742600][ T5439] memory: usage 307200kB, limit 307200kB, failcnt 213
[  138.995212][ T5439] memory+swap: usage 307560kB, limit 9007199254740988kB, failcnt 0
[  138.996282][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.003153][ T5439] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0
[  139.003171][ T5439] Memory cgroup stats for /syz1:
[  139.019683][ T5439] cache 0
[  139.027807][ T5439] rss 0
[  139.030716][ T5439] shmem 0
[  139.033722][ T5439] mapped_file 0
[  139.037169][ T5439] dirty 0
[  139.040261][ T5439] writeback 0
[  139.043588][ T5439] workingset_refault_anon 38
[  139.048248][ T5439] workingset_refault_file 2
[  139.052843][ T5439] swap 368640
[  139.056119][ T5439] swapcached 2842624
[  139.060058][ T5439] pgpgin 144993
[  139.063789][ T5439] pgpgout 144990
[  139.067391][ T5439] pgfault 111723
[  139.070997][ T5439] pgmajfault 12
[  139.074448][ T5439] inactive_anon 0
[  139.078077][ T5439] active_anon 8192
[  139.090613][ T5439] inactive_file 0
[  139.094277][ T5439] active_file 4096
[  139.098015][ T5439] unevictable 0
[  139.111646][ T5439] hierarchical_memory_limit 314572800
[  139.117050][ T5439] hierarchical_memsw_limit 9223372036854771712
[  139.140539][ T5439] total_cache 0
[  139.144033][ T5439] total_rss 0
[  139.147317][ T5439] total_shmem 0
[  139.160684][ T5439] total_mapped_file 0
[  139.164686][ T5439] total_dirty 0
[  139.168208][ T5439] total_writeback 0
[  139.180978][ T5439] total_workingset_refault_anon 38
[  139.186178][ T5439] total_workingset_refault_file 2
[  139.200504][ T5439] total_swap 368640
[  139.204426][ T5439] total_swapcached 2842624
[  139.213430][ T5439] total_pgpgin 144993
[  139.221869][ T5439] total_pgpgout 144990
[  139.230582][ T5439] total_pgfault 111723
[  139.239254][ T5439] total_pgmajfault 12
[  139.247985][ T5439] total_inactive_anon 0
[  139.256811][ T5439] total_active_anon 8192
[  139.265836][ T5439] total_inactive_file 0
[  139.279746][ T5439] total_active_file 4096
[  139.290794][ T5439] total_unevictable 0
[  139.294898][ T5439] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.556,pid=5439,uid=0
[  139.317171][ T5439] Memory cgroup out of memory: Killed process 5439 (syz.1.556) total-vm:96208kB, anon-rss:1224kB, file-rss:22212kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[  139.486423][ T5463] loop2: detected capacity change from 0 to 512
[  139.505111][ T5463] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  139.525651][ T5463] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.561: bg 0: block 393: padding at end of block bitmap is not set
[  139.540110][ T5463] loop2: lost filesystem error report for type 5 error -117
[  139.540299][ T5463] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6685: Corrupt filesystem
[  139.547800][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  139.547822][    C1] EXT4-fs (loop2): initial error at time 1772844777: ext4_validate_block_bitmap:441
[  139.547847][    C1] EXT4-fs (loop2): last error at time 1772844777: ext4_validate_block_bitmap:441
[  139.581948][ T5463] loop2: lost filesystem error report for type 5 error -117
[  139.582199][ T5463] EXT4-fs (loop2): 2 truncates cleaned up
[  139.595985][ T5463] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  139.614679][ T5463] rdma_rxe: rxe_newlink: failed to add lo
[  139.658053][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  143.042817][ T5527] loop1: detected capacity change from 0 to 512
[  143.092378][ T5527] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  143.121594][ T5527] EXT4-fs (loop1): 1 truncate cleaned up
[  143.127930][ T5527] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  144.231824][ T5536] lo speed is unknown, defaulting to 1000
[  144.550365][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  144.752548][ T5542] netlink: 'syz.0.578': attribute type 10 has an invalid length.
[  144.770590][ T5542] netlink: 2 bytes leftover after parsing attributes in process `syz.0.578'.
[  146.074265][ T5569] bond0: left promiscuous mode
[  146.079202][ T5569] netdevsim netdevsim1 netdevsim1: left promiscuous mode
[  146.261510][ T5569] macvlan2: left promiscuous mode
[  146.776518][ T5573] loop3: detected capacity change from 0 to 512
[  146.822017][ T5573] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  146.852938][ T5573] EXT4-fs (loop3): 1 truncate cleaned up
[  146.859438][ T5573] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  147.617886][ T5590] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  148.112966][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  148.428970][ T5604] loop1: detected capacity change from 0 to 512
[  148.440799][ T5604] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  148.541834][ T5604] EXT4-fs (loop1): 1 truncate cleaned up
[  148.548394][ T5604] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  149.435810][ T5609] loop4: detected capacity change from 0 to 1024
[  149.458298][ T5609] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  149.541663][ T5609] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4222: comm syz.4.599: Allocating blocks 497-513 which overlap fs metadata
[  149.580009][ T5618] lo speed is unknown, defaulting to 1000
[  149.586551][ T5609] EXT4-fs (loop4): Remounting filesystem read-only
[  149.640896][ T5608] EXT4-fs (loop4): pa ffff888100683e00: logic 304, phys. 433, len 5
[  149.694580][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.837201][ T3622] Bluetooth: hci0: Frame reassembly failed (-84)
[  149.918038][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.156540][ T5634] loop4: detected capacity change from 0 to 256
[  150.179510][ T5634] FAT-fs (loop4): Directory bread(block 64) failed
[  150.186256][ T5634] FAT-fs (loop4): Directory bread(block 65) failed
[  150.192990][ T5634] FAT-fs (loop4): Directory bread(block 66) failed
[  150.199603][ T5634] FAT-fs (loop4): Directory bread(block 67) failed
[  150.206392][ T5634] FAT-fs (loop4): Directory bread(block 68) failed
[  150.213186][ T5634] FAT-fs (loop4): Directory bread(block 69) failed
[  150.219823][ T5634] FAT-fs (loop4): Directory bread(block 70) failed
[  150.226440][ T5634] FAT-fs (loop4): Directory bread(block 71) failed
[  150.233236][ T5634] FAT-fs (loop4): Directory bread(block 72) failed
[  150.239860][ T5634] FAT-fs (loop4): Directory bread(block 73) failed
[  151.754298][ T5649] syzkaller0: entered promiscuous mode
[  151.762139][ T5649] syzkaller0: entered allmulticast mode
[  151.890683][ T4956] Bluetooth: hci0: command 0x1003 tx timeout
[  151.950613][ T3538] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  152.048675][ T5655] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.142260][ T5655] bridge_slave_1: left allmulticast mode
[  152.177489][ T5655] bridge_slave_1: left promiscuous mode
[  152.348513][ T5655] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.400310][ T5655] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  152.475498][ T5659] loop1: detected capacity change from 0 to 512
[  152.499072][ T5659] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  152.545179][ T5659] EXT4-fs (loop1): 1 truncate cleaned up
[  152.564498][ T5659] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  152.672585][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  153.055385][ T5667] loop0: detected capacity change from 0 to 1024
[  153.148373][ T5667] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  153.192452][ T5672] syzkaller0: entered promiscuous mode
[  153.208097][ T5667] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4222: comm syz.0.614: Allocating blocks 497-513 which overlap fs metadata
[  153.218414][ T5672] syzkaller0: entered allmulticast mode
[  153.230634][ T5667] EXT4-fs (loop0): Remounting filesystem read-only
[  153.283513][ T5674] loop4: detected capacity change from 0 to 512
[  153.291710][ T5674] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  153.303938][ T5674] EXT4-fs (loop4): 1 truncate cleaned up
[  153.310228][ T5674] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  153.407384][ T5665] EXT4-fs (loop0): pa ffff888100683ee0: logic 304, phys. 433, len 5
[  153.458881][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  153.591672][ T5683] lo speed is unknown, defaulting to 1000
[  154.209155][ T3622] Bluetooth: hci0: Frame reassembly failed (-84)
[  154.697449][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  155.391856][ T5705] loop1: detected capacity change from 0 to 256
[  156.054936][ T5706] loop3: detected capacity change from 0 to 512
[  156.280577][ T5706] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  156.299601][ T4956] Bluetooth: hci0: command 0x1003 tx timeout
[  156.305728][ T3538] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  158.292232][ T5713] syzkaller0: entered promiscuous mode
[  158.297929][ T5713] syzkaller0: entered allmulticast mode
[  158.331035][ T5706] EXT4-fs (loop3): 1 truncate cleaned up
[  158.337312][ T5706] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  158.352214][ T5705] FAT-fs (loop1): Directory bread(block 64) failed
[  158.358730][ T5705] FAT-fs (loop1): Directory bread(block 65) failed
[  158.365424][ T5705] FAT-fs (loop1): Directory bread(block 66) failed
[  158.371948][ T5705] FAT-fs (loop1): Directory bread(block 67) failed
[  158.378502][ T5705] FAT-fs (loop1): Directory bread(block 68) failed
[  158.385143][ T5705] FAT-fs (loop1): Directory bread(block 69) failed
[  158.391761][ T5705] FAT-fs (loop1): Directory bread(block 70) failed
[  158.398528][ T5705] FAT-fs (loop1): Directory bread(block 71) failed
[  158.405139][ T5705] FAT-fs (loop1): Directory bread(block 72) failed
[  158.411652][ T5705] FAT-fs (loop1): Directory bread(block 73) failed
[  158.432261][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.528147][ T5718] bridge0: port 2(bridge_slave_1) entered disabled state
[  158.544250][ T5718] bridge_slave_1: left allmulticast mode
[  158.555872][ T5718] bridge_slave_1: left promiscuous mode
[  158.564353][ T5720] loop4: detected capacity change from 0 to 512
[  158.571304][ T5718] bridge0: port 2(bridge_slave_1) entered disabled state
[  158.583077][ T5720] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  158.596586][ T5718] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  158.615202][ T5720] EXT4-fs (loop4): 1 truncate cleaned up
[  158.626354][ T5720] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  158.675463][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  159.357937][ T5735] loop1: detected capacity change from 0 to 1024
[  159.370533][ T5732] syzkaller0: entered promiscuous mode
[  159.376055][ T5732] syzkaller0: entered allmulticast mode
[  159.392721][ T5735] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  159.441510][ T5735] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4222: comm syz.1.628: Allocating blocks 497-513 which overlap fs metadata
[  159.456313][ T5735] EXT4-fs (loop1): Remounting filesystem read-only
[  159.498052][ T5731] EXT4-fs (loop1): pa ffff888100683d20: logic 304, phys. 433, len 5
[  159.537506][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  159.583381][ T5743] lo speed is unknown, defaulting to 1000
[  159.986055][ T5750] syzkaller0: entered promiscuous mode
[  159.992948][ T5750] syzkaller0: entered allmulticast mode
[  160.006492][ T5750] 0: reclassify loop, rule prio 0, protocol 800
[  160.126285][  T129] Bluetooth: hci0: Frame reassembly failed (-84)
[  160.466729][ T5765] loop0: detected capacity change from 0 to 256
[  160.496570][ T5765] FAT-fs (loop0): Directory bread(block 64) failed
[  160.503397][ T5765] FAT-fs (loop0): Directory bread(block 65) failed
[  160.510068][ T5765] FAT-fs (loop0): Directory bread(block 66) failed
[  160.516894][ T5765] FAT-fs (loop0): Directory bread(block 67) failed
[  160.523804][ T5765] FAT-fs (loop0): Directory bread(block 68) failed
[  160.530467][ T5765] FAT-fs (loop0): Directory bread(block 69) failed
[  160.537154][ T5765] FAT-fs (loop0): Directory bread(block 70) failed
[  160.543886][ T5765] FAT-fs (loop0): Directory bread(block 71) failed
[  160.550628][ T5765] FAT-fs (loop0): Directory bread(block 72) failed
[  160.557184][ T5765] FAT-fs (loop0): Directory bread(block 73) failed
[  161.562169][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state
[  161.597211][ T5775] veth0_to_team: left promiscuous mode
[  161.668740][ T5775] ipip0: left promiscuous mode
[  162.210895][ T4956] Bluetooth: hci0: command 0x1003 tx timeout
[  162.211222][ T3538] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  162.771931][ T5786] syzkaller0: entered promiscuous mode
[  162.777422][ T5786] syzkaller0: entered allmulticast mode
[  162.819486][ T5787] loop3: detected capacity change from 0 to 512
[  162.829989][ T5782] loop2: detected capacity change from 0 to 1024
[  162.839899][ T5787] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  162.857820][ T5790] syzkaller0: entered promiscuous mode
[  162.874215][ T5790] syzkaller0: entered allmulticast mode
[  162.888240][ T5787] EXT4-fs (loop3): 1 truncate cleaned up
[  162.897830][ T5787] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  162.945894][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.990859][ T5782] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  163.011280][ T5799] syzkaller0: entered promiscuous mode
[  163.031571][ T5799] syzkaller0: entered allmulticast mode
[  163.049415][ T5799] 0: reclassify loop, rule prio 0, protocol 800
[  163.329110][ T5782] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4222: comm syz.2.647: Allocating blocks 497-513 which overlap fs metadata
[  163.348779][ T5782] EXT4-fs (loop2): Remounting filesystem read-only
[  163.382146][ T5810] loop3: detected capacity change from 0 to 256
[  163.425667][ T5810] FAT-fs (loop3): Directory bread(block 64) failed
[  163.433594][ T5810] FAT-fs (loop3): Directory bread(block 65) failed
[  163.459942][ T5810] FAT-fs (loop3): Directory bread(block 66) failed
[  163.478780][ T5780] EXT4-fs (loop2): pa ffff888100683e70: logic 304, phys. 433, len 5
[  163.491636][ T5810] FAT-fs (loop3): Directory bread(block 67) failed
[  163.503218][ T5810] FAT-fs (loop3): Directory bread(block 68) failed
[  163.509944][ T5810] FAT-fs (loop3): Directory bread(block 69) failed
[  163.514041][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.517077][ T5810] FAT-fs (loop3): Directory bread(block 70) failed
[  163.532389][ T5810] FAT-fs (loop3): Directory bread(block 71) failed
[  163.538995][ T5810] FAT-fs (loop3): Directory bread(block 72) failed
[  163.546264][ T5810] FAT-fs (loop3): Directory bread(block 73) failed
[  163.593737][ T5814] loop1: detected capacity change from 0 to 256
[  163.658637][ T5814] FAT-fs (loop1): Directory bread(block 64) failed
[  163.665355][ T5814] FAT-fs (loop1): Directory bread(block 65) failed
[  163.671936][ T5814] FAT-fs (loop1): Directory bread(block 66) failed
[  163.678456][ T5814] FAT-fs (loop1): Directory bread(block 67) failed
[  163.685049][ T5814] FAT-fs (loop1): Directory bread(block 68) failed
[  163.691676][ T5814] FAT-fs (loop1): Directory bread(block 69) failed
[  163.698456][ T5814] FAT-fs (loop1): Directory bread(block 70) failed
[  163.705101][ T5814] FAT-fs (loop1): Directory bread(block 71) failed
[  163.711937][ T5814] FAT-fs (loop1): Directory bread(block 72) failed
[  163.718459][ T5814] FAT-fs (loop1): Directory bread(block 73) failed
[  164.062596][ T5810] syz.3.653: attempt to access beyond end of device
[  164.062596][ T5810] loop3: rw=2049, sector=1224, nr_sectors = 32 limit=256
[  164.077110][ T5810] syz.3.653: attempt to access beyond end of device
[  164.077110][ T5810] loop3: rw=2049, sector=1288, nr_sectors = 32 limit=256
[  164.091971][ T5810] syz.3.653: attempt to access beyond end of device
[  164.091971][ T5810] loop3: rw=2049, sector=1352, nr_sectors = 32 limit=256
[  164.106967][ T5810] syz.3.653: attempt to access beyond end of device
[  164.106967][ T5810] loop3: rw=2049, sector=1416, nr_sectors = 32 limit=256
[  164.136743][ T5810] syz.3.653: attempt to access beyond end of device
[  164.136743][ T5810] loop3: rw=2049, sector=1480, nr_sectors = 8 limit=256
[  164.241871][  T129] kworker/u8:5: attempt to access beyond end of device
[  164.241871][  T129] loop3: rw=1, sector=1224, nr_sectors = 4 limit=256
[  164.380378][ T5820] loop3: detected capacity change from 0 to 8192
[  165.034666][ T5825] SELinux: security_context_str_to_sid (defcontext) failed with errno=-22
[  165.126445][ T5824] xt_CT: No such helper "pptp"
[  165.522194][   T28] audit: type=1400 audit(1772844803.927:657): avc:  denied  { write } for  pid=5833 comm="syz.4.658" name="001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  165.565381][   T28] audit: type=1400 audit(1772844803.967:658): avc:  denied  { map } for  pid=5833 comm="syz.4.658" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  165.678936][   T28] audit: type=1400 audit(1772844804.087:659): avc:  denied  { read } for  pid=5841 comm="syz.0.661" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  165.708504][   T28] audit: type=1400 audit(1772844804.117:660): avc:  denied  { open } for  pid=5841 comm="syz.0.661" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  165.750006][ T5842] netlink: 4 bytes leftover after parsing attributes in process `syz.0.661'.
[  165.828825][   T28] audit: type=1400 audit(1772844804.227:661): avc:  denied  { map } for  pid=5845 comm="syz.3.663" path="socket:[29294]" dev="sockfs" ino=29294 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  165.867719][   T28] audit: type=1400 audit(1772844804.237:662): avc:  denied  { read } for  pid=5845 comm="syz.3.663" path="socket:[29294]" dev="sockfs" ino=29294 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  165.891650][   T28] audit: type=1400 audit(1772844804.237:663): avc:  denied  { ioctl } for  pid=5843 comm="syz.2.662" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=29297 ioctlcmd=0xf50a scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  165.955068][   T28] audit: type=1400 audit(1772844804.367:664): avc:  denied  { read } for  pid=5847 comm="syz.0.665" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  165.977979][ T5848] loop0: detected capacity change from 0 to 128
[  165.986733][   T28] audit: type=1400 audit(1772844804.367:665): avc:  denied  { open } for  pid=5847 comm="syz.0.665" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  166.029588][   T28] audit: type=1400 audit(1772844804.367:666): avc:  denied  { ioctl } for  pid=5847 comm="syz.0.665" path="/dev/uhid" dev="devtmpfs" ino=253 ioctlcmd=0x941b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  166.117018][ T5852] syzkaller0: entered promiscuous mode
[  166.123189][ T5852] syzkaller0: entered allmulticast mode
[  166.274552][ T5865] loop0: detected capacity change from 0 to 512
[  166.284381][ T5865] EXT4-fs (loop0): external journal device major/minor numbers have changed
[  166.297452][ T5865] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  166.312029][ T5865] block device autoloading is deprecated and will be removed.
[  166.320101][ T5865] EXT4-fs (loop0): couldn't read superblock of external journal
[  166.354205][ T5865] loop0: detected capacity change from 0 to 512
[  166.361540][ T5865] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  166.394136][ T5869] xt_hashlimit: size too large, truncated to 1048576
[  166.420666][ T5865] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  166.439194][ T5874] netlink: 28 bytes leftover after parsing attributes in process `syz.4.674'.
[  166.448386][ T5865] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.672: bg 0: block 248: padding at end of block bitmap is not set
[  166.462773][ T5865] loop0: lost filesystem error report for type 5 error -117
[  166.462951][ T5865] EXT4-fs error (device loop0): ext4_acquire_dquot:7001: comm syz.0.672: Failed to acquire dquot type 1
[  166.481421][    C1] EXT4-fs (loop0): error count since last fsck: 1
[  166.481441][    C1] EXT4-fs (loop0): last error at time 1772844804: ext4_validate_block_bitmap:441
[  166.489846][ T5877] netlink: 8 bytes leftover after parsing attributes in process `syz.4.674'.
[  166.497269][ T5865] loop0: lost filesystem error report for type 5 error -117
[  166.506744][ T5865] EXT4-fs (loop0): 1 truncate cleaned up
[  166.520401][ T5865] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  166.539108][ T5865] EXT4-fs error (device loop0): ext4_acquire_dquot:7001: comm syz.0.672: Failed to acquire dquot type 1
[  166.608893][ T5857] lo speed is unknown, defaulting to 1000
[  166.630047][ T5895] netlink: 20 bytes leftover after parsing attributes in process `syz.2.676'.
[  166.639361][ T5895] batadv_slave_0: Caught tx_queue_len zero misconfig
[  166.653933][ T5897] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  166.653933][ T5897] The task syz.0.672 (5897) triggered the difference, watch for misbehavior.
[  166.721952][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  166.795796][ T5895] loop2: detected capacity change from 0 to 1024
[  166.910833][ T5895] EXT4-fs: Ignoring removed mblk_io_submit option
[  166.930276][ T5904] loop0: detected capacity change from 0 to 512
[  166.947344][ T5904] ext3: Unknown parameter 'fsmagic'
[  167.447698][ T5895] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  167.461935][ T5895] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  167.489083][ T5895] EXT4-fs error (device loop2): ext4_map_blocks:818: inode #15: comm syz.2.676: lblock 0 mapped to illegal pblock 0 (length 1)
[  167.550016][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  167.592040][ T5922] syzkaller0: entered promiscuous mode
[  167.597788][ T5922] syzkaller0: entered allmulticast mode
[  167.672626][ T5924] lo speed is unknown, defaulting to 1000
[  167.741870][ T5928] lo speed is unknown, defaulting to 1000
[  167.794357][ T5931] v: renamed from ip6_vti0
[  167.842068][ T5933] loop2: detected capacity change from 0 to 512
[  167.871313][ T5933] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  167.895692][ T5933] EXT4-fs (loop2): 1 truncate cleaned up
[  167.907515][ T5933] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  167.919796][ T5918] x_tables: duplicate entry at hook 1
[  167.929981][ T5917] loop3: detected capacity change from 0 to 32768
[  168.063825][ T5940] syzkaller0: entered promiscuous mode
[  168.069408][ T5940] syzkaller0: entered allmulticast mode
[  168.713824][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.728706][ T5946] delete_channel: no stack
[  168.796026][ T5968] loop3: detected capacity change from 0 to 1024
[  168.811273][ T5968] EXT4-fs (loop3): unsupported descriptor size 832
[  168.873027][ T5971] loop2: detected capacity change from 0 to 512
[  168.880202][ T5971] EXT4-fs (loop2): external journal device major/minor numbers have changed
[  168.893879][ T5971] EXT4-fs (loop2): couldn't read superblock of external journal
[  168.929035][ T5973] loop3: detected capacity change from 0 to 2048
[  168.944150][ T5975] syzkaller0: entered promiscuous mode
[  168.944175][ T5973] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  168.949723][ T5975] syzkaller0: entered allmulticast mode
[  169.053261][ T5973] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.694: bg 0: block 234: padding at end of block bitmap is not set
[  169.068285][ T5973] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 266 with error 28
[  169.080939][ T5973] EXT4-fs (loop3): This should not happen!! Data will be lost
[  169.080939][ T5973] 
[  169.090810][ T5973] EXT4-fs (loop3): Total free blocks count 0
[  169.093858][ T5983] loop0: detected capacity change from 0 to 1024
[  169.096880][ T5973] EXT4-fs (loop3): Free/Dirty block details
[  169.110827][ T5973] EXT4-fs (loop3): free_blocks=0
[  169.115263][ T5983] EXT4-fs: inline encryption not supported
[  169.116589][ T5973] EXT4-fs (loop3): dirty_blocks=272
[  169.127270][ T5973] EXT4-fs (loop3): Block reservation details
[  169.133514][ T5973] EXT4-fs (loop3): i_reserved_data_blocks=17
[  169.146098][ T5985] netlink: 'syz.1.697': attribute type 1 has an invalid length.
[  169.160056][ T5983] EXT4-fs: Ignoring removed nobh option
[  169.180236][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  169.190850][ T5983] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a803c129, mo2=0002]
[  169.208573][ T5983] System zones: 0-1, 3-12
[  169.223388][ T5983] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  169.402505][ T5998] loop3: detected capacity change from 0 to 128
[  169.600384][ T6001] netlink: 12 bytes leftover after parsing attributes in process `syz.3.702'.
[  169.734042][ T6004] syzkaller0: entered promiscuous mode
[  169.748869][ T6004] syzkaller0: entered allmulticast mode
[  169.770775][ T6004] 0: reclassify loop, rule prio 0, protocol 800
[  169.939873][ T6006] loop3: detected capacity change from 0 to 512
[  169.963940][ T5990] loop1: detected capacity change from 0 to 764
[  170.376536][ T5990] Symlink component flag not implemented
[  170.393543][ T5990] Symlink component flag not implemented (116)
[  170.632698][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.424524][ T6006] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002]
[  171.436159][ T6006] EXT4-fs (loop3): orphan cleanup on readonly fs
[  171.449630][ T6006] EXT4-fs warning (device loop3): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  171.483926][ T6006] EXT4-fs (loop3): Cannot turn on quotas: error -22
[  171.608428][ T6006] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #13: comm syz.3.704: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  171.626727][ T6006] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  171.632086][ T6006] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.704: couldn't read orphan inode 13 (err -117)
[  171.641478][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  171.641562][    C1] EXT4-fs (loop3): last error at time 1772844810: ext4_ext_check_inode:521: inode 13
[  172.232681][ T6006] loop3: lost filesystem error report for type 5 error -117
[  172.311070][ T6028] loop4: detected capacity change from 0 to 256
[  172.499600][ T6028] FAT-fs (loop4): Directory bread(block 64) failed
[  172.506175][ T6028] FAT-fs (loop4): Directory bread(block 65) failed
[  172.512775][ T6028] FAT-fs (loop4): Directory bread(block 66) failed
[  172.519387][ T6028] FAT-fs (loop4): Directory bread(block 67) failed
[  172.526203][ T6028] FAT-fs (loop4): Directory bread(block 68) failed
[  172.532861][ T6028] FAT-fs (loop4): Directory bread(block 69) failed
[  172.539518][ T6028] FAT-fs (loop4): Directory bread(block 70) failed
[  172.546261][ T6028] FAT-fs (loop4): Directory bread(block 71) failed
[  172.552841][ T6028] FAT-fs (loop4): Directory bread(block 72) failed
[  172.559517][ T6028] FAT-fs (loop4): Directory bread(block 73) failed
[  173.057664][ T6006] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  173.072913][ T6006] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  173.508792][ T6033] loop1: detected capacity change from 0 to 128
[  174.055659][   T28] kauditd_printk_skb: 171 callbacks suppressed
[  174.055748][   T28] audit: type=1400 audit(1772844812.327:834): avc:  denied  { read } for  pid=6029 comm="syz.2.710" name="file0" dev="tmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  174.100697][   T28] audit: type=1400 audit(1772844812.327:835): avc:  denied  { open } for  pid=6029 comm="syz.2.710" path="/135/file0" dev="tmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  174.230054][ T6038] loop4: detected capacity change from 0 to 512
[  174.290321][ T6040] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100)
[  174.298443][ T6040] FAT-fs (loop1): Filesystem has been set read-only
[  174.305330][ T6040] syz.1.711: attempt to access beyond end of device
[  174.305330][ T6040] loop1: rw=8912896, sector=2065, nr_sectors = 8 limit=128
[  174.319406][ T6040] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100)
[  174.327472][ T6040] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100)
[  174.642151][ T6040] syz.1.711: attempt to access beyond end of device
[  174.642151][ T6040] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128
[  174.655858][ T6040] syz.1.711: attempt to access beyond end of device
[  174.655858][ T6040] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128
[  174.669709][ T6040] syz.1.711: attempt to access beyond end of device
[  174.669709][ T6040] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128
[  174.683405][ T6040] syz.1.711: attempt to access beyond end of device
[  174.683405][ T6040] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128
[  174.697264][ T6040] syz.1.711: attempt to access beyond end of device
[  174.697264][ T6040] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128
[  174.711178][ T6040] syz.1.711: attempt to access beyond end of device
[  174.711178][ T6040] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128
[  174.724945][ T6040] syz.1.711: attempt to access beyond end of device
[  174.724945][ T6040] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128
[  174.738705][ T6040] syz.1.711: attempt to access beyond end of device
[  174.738705][ T6040] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128
[  174.752559][ T6040] syz.1.711: attempt to access beyond end of device
[  174.752559][ T6040] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128
[  174.961611][ T6037] loop3: detected capacity change from 0 to 128
[  175.007452][   T28] audit: type=1326 audit(1772844813.407:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6035 comm="syz.3.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1893d1c799 code=0x7ffc0000
[  175.052759][ T6044] syzkaller0: left promiscuous mode
[  175.085761][   T28] audit: type=1326 audit(1772844813.417:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6035 comm="syz.3.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1893d1c799 code=0x7ffc0000
[  175.170513][   T28] audit: type=1326 audit(1772844813.417:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6035 comm="syz.3.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f1893d1c799 code=0x7ffc0000
[  175.189789][ T6038] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  175.205568][ T6038] EXT4-fs (loop4): 1 truncate cleaned up
[  175.211809][ T6038] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  175.251936][   T28] audit: type=1326 audit(1772844813.447:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6035 comm="syz.3.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1893d1c799 code=0x7ffc0000
[  175.275438][   T28] audit: type=1326 audit(1772844813.447:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6035 comm="syz.3.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1893d1c799 code=0x7ffc0000
[  175.298977][   T28] audit: type=1326 audit(1772844813.457:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6035 comm="syz.3.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1893d1c799 code=0x7ffc0000
[  175.375133][   T28] audit: type=1326 audit(1772844813.457:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6035 comm="syz.3.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1893d1c799 code=0x7ffc0000
[  175.423897][   T28] audit: type=1326 audit(1772844813.457:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6035 comm="syz.3.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1893d1c799 code=0x7ffc0000
[  175.829561][ T6050] loop2: detected capacity change from 0 to 1024
[  175.852802][ T6050] EXT4-fs: inline encryption not supported
[  175.863155][ T6050] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  176.146588][ T6059] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4222: comm syz.2.716: Allocating blocks 385-513 which overlap fs metadata
[  176.186813][ T6059] EXT4-fs (loop2): Remounting filesystem read-only
[  176.532801][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  176.674025][ T6065] loop3: detected capacity change from 0 to 4096
[  176.683071][ T6065] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  176.714178][ T6065] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  176.806549][ T6069] loop0: detected capacity change from 0 to 128
[  176.874205][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  176.925392][ T6075] loop3: detected capacity change from 0 to 164
[  176.947322][ T6075] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  177.232327][ T6081] loop3: detected capacity change from 0 to 256
[  177.359292][ T6081] FAT-fs (loop3): Directory bread(block 64) failed
[  177.366032][ T6081] FAT-fs (loop3): Directory bread(block 65) failed
[  177.372583][ T6081] FAT-fs (loop3): Directory bread(block 66) failed
[  177.379293][ T6081] FAT-fs (loop3): Directory bread(block 67) failed
[  177.385998][ T6081] FAT-fs (loop3): Directory bread(block 68) failed
[  177.392738][ T6081] FAT-fs (loop3): Directory bread(block 69) failed
[  177.399425][ T6081] FAT-fs (loop3): Directory bread(block 70) failed
[  177.406013][ T6081] FAT-fs (loop3): Directory bread(block 71) failed
[  177.412729][ T6081] FAT-fs (loop3): Directory bread(block 72) failed
[  177.419253][ T6081] FAT-fs (loop3): Directory bread(block 73) failed
[  178.320177][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  178.358388][ T6087] netlink: 4 bytes leftover after parsing attributes in process `syz.0.724'.
[  178.445695][ T6094] loop0: detected capacity change from 0 to 256
[  178.460791][ T6094] FAT-fs (loop0): Directory bread(block 64) failed
[  178.477609][ T6094] FAT-fs (loop0): Directory bread(block 65) failed
[  178.489671][ T6094] FAT-fs (loop0): Directory bread(block 66) failed
[  178.496523][ T6094] FAT-fs (loop0): Directory bread(block 67) failed
[  178.503260][ T6094] FAT-fs (loop0): Directory bread(block 68) failed
[  178.509916][ T6094] FAT-fs (loop0): Directory bread(block 69) failed
[  178.517158][ T6094] FAT-fs (loop0): Directory bread(block 70) failed
[  178.525554][ T6094] FAT-fs (loop0): Directory bread(block 71) failed
[  178.540585][ T6094] FAT-fs (loop0): Directory bread(block 72) failed
[  178.547481][ T6094] FAT-fs (loop0): Directory bread(block 73) failed
[  178.716070][ T6098] loop0: detected capacity change from 0 to 512
[  178.734257][ T6098] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  178.748464][ T6098] EXT4-fs (loop0): 1 truncate cleaned up
[  178.755219][ T6098] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  178.954319][ T6107] loop4: detected capacity change from 0 to 1024
[  178.958246][ T6109] syzkaller0: entered promiscuous mode
[  178.972929][ T6109] syzkaller0: entered allmulticast mode
[  178.995202][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  179.028600][ T6107] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  179.189794][ T6107] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4222: comm syz.4.733: Allocating blocks 497-513 which overlap fs metadata
[  179.220266][ T6107] EXT4-fs (loop4): Remounting filesystem read-only
[  179.245441][ T6106] EXT4-fs (loop4): pa ffff888100683e70: logic 304, phys. 433, len 5
[  179.282063][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  179.363854][ T6120] set_capacity_and_notify: 1 callbacks suppressed
[  179.363906][ T6120] loop4: detected capacity change from 0 to 4096
[  179.390836][ T6120] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  179.430796][ T6120] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  179.505211][   T28] kauditd_printk_skb: 29 callbacks suppressed
[  179.505227][   T28] audit: type=1326 audit(1772844817.917:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6119 comm="syz.4.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff9e6fc799 code=0x7ffc0000
[  179.584831][   T28] audit: type=1326 audit(1772844817.957:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6119 comm="syz.4.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff9e6fc799 code=0x7ffc0000
[  179.635344][ T6126] loop2: detected capacity change from 0 to 128
[  179.660727][   T28] audit: type=1326 audit(1772844817.957:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6119 comm="syz.4.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff9e6fc799 code=0x7ffc0000
[  179.797262][   T28] audit: type=1326 audit(1772844817.957:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6119 comm="syz.4.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff9e6fc799 code=0x7ffc0000
[  179.845811][   T28] audit: type=1326 audit(1772844817.957:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6119 comm="syz.4.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7eff9e6fc799 code=0x7ffc0000
[  179.908723][   T28] audit: type=1326 audit(1772844818.317:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6119 comm="syz.4.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff9e6fc799 code=0x7ffc0000
[  179.948649][   T28] audit: type=1326 audit(1772844818.317:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6119 comm="syz.4.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff9e6fc799 code=0x7ffc0000
[  180.171709][   T28] audit: type=1326 audit(1772844818.587:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6125 comm="syz.2.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6be712c799 code=0x7ffc0000
[  180.195954][   T28] audit: type=1326 audit(1772844818.617:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6125 comm="syz.2.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6be712c799 code=0x7ffc0000
[  180.237171][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  180.282667][ T6137] loop1: detected capacity change from 0 to 164
[  180.307033][ T6137] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  180.461886][ T6145] loop4: detected capacity change from 0 to 256
[  180.484009][ T6145] FAT-fs (loop4): Directory bread(block 64) failed
[  180.485172][   T28] audit: type=1400 audit(1772844818.887:882): avc:  denied  { shutdown } for  pid=6143 comm="syz.3.743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  180.490989][ T6145] FAT-fs (loop4): Directory bread(block 65) failed
[  180.528348][ T6145] FAT-fs (loop4): Directory bread(block 66) failed
[  180.536046][ T6145] FAT-fs (loop4): Directory bread(block 67) failed
[  180.543357][ T6145] FAT-fs (loop4): Directory bread(block 68) failed
[  180.551398][ T6145] FAT-fs (loop4): Directory bread(block 69) failed
[  180.558392][ T6145] FAT-fs (loop4): Directory bread(block 70) failed
[  180.572234][ T6148] loop1: detected capacity change from 0 to 256
[  180.630702][ T6148] FAT-fs (loop1): Directory bread(block 64) failed
[  180.637378][ T6148] FAT-fs (loop1): Directory bread(block 65) failed
[  180.644195][ T6148] FAT-fs (loop1): Directory bread(block 66) failed
[  180.650775][ T6148] FAT-fs (loop1): Directory bread(block 67) failed
[  180.657610][ T6148] FAT-fs (loop1): Directory bread(block 68) failed
[  180.664270][ T6148] FAT-fs (loop1): Directory bread(block 69) failed
[  180.671049][ T6148] FAT-fs (loop1): Directory bread(block 70) failed
[  180.677582][ T6148] FAT-fs (loop1): Directory bread(block 71) failed
[  180.684260][ T6148] FAT-fs (loop1): Directory bread(block 72) failed
[  180.690896][ T6148] FAT-fs (loop1): Directory bread(block 73) failed
[  180.856759][ T6145] FAT-fs (loop4): Directory bread(block 71) failed
[  180.875815][ T6145] FAT-fs (loop4): Directory bread(block 72) failed
[  180.883396][ T6145] FAT-fs (loop4): Directory bread(block 73) failed
[  181.178693][ T6145] bio_check_eod: 68836 callbacks suppressed
[  181.178719][ T6145] syz.4.741: attempt to access beyond end of device
[  181.178719][ T6145] loop4: rw=2049, sector=1224, nr_sectors = 32 limit=256
[  181.346731][ T6145] syz.4.741: attempt to access beyond end of device
[  181.346731][ T6145] loop4: rw=2049, sector=1288, nr_sectors = 8 limit=256
[  181.373707][   T41] kworker/u8:2: attempt to access beyond end of device
[  181.373707][   T41] loop4: rw=8388609, sector=1224, nr_sectors = 4 limit=256
[  181.387986][   T41] buffer_io_error: 1 callbacks suppressed
[  181.387998][   T41] Buffer I/O error on dev loop4, logical block 306, lost async page write
[  181.979032][ T6164] loop1: detected capacity change from 0 to 512
[  181.988109][ T6164] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  182.014225][ T6164] EXT4-fs (loop1): 1 truncate cleaned up
[  182.041851][ T6164] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  182.069138][ T6159] loop4: detected capacity change from 0 to 8192
[  182.083090][ T6170] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6170 comm=syz.0.750
[  182.106274][ T6159] msdos: Unknown parameter 'noLots'
[  182.952827][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  183.008946][ T6177] loop0: detected capacity change from 0 to 4096
[  183.043305][ T6177] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  183.061298][ T6177] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  183.061432][ T6182] loop1: detected capacity change from 0 to 128
[  183.082338][ T6180] loop4: detected capacity change from 0 to 8192
[  183.228548][ T6186] netlink: 68 bytes leftover after parsing attributes in process `syz.3.755'.
[  183.250911][ T6186] netlink: 32 bytes leftover after parsing attributes in process `syz.3.755'.
[  183.291046][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  183.309883][ T6185] SELinux:  policydb magic number 0x100 does not match expected magic number 0xf97cff8c
[  183.340927][ T6185] SELinux: failed to load policy
[  183.379988][ T6188] FAT-fs (loop0): Directory bread(block 64) failed
[  183.399942][ T6188] FAT-fs (loop0): Directory bread(block 65) failed
[  183.415638][ T6188] FAT-fs (loop0): Directory bread(block 66) failed
[  183.429454][ T6188] FAT-fs (loop0): Directory bread(block 67) failed
[  183.445351][ T6188] FAT-fs (loop0): Directory bread(block 68) failed
[  183.460653][ T6188] FAT-fs (loop0): Directory bread(block 69) failed
[  183.480695][ T6188] FAT-fs (loop0): Directory bread(block 70) failed
[  183.488329][ T6188] FAT-fs (loop0): Directory bread(block 71) failed
[  183.515866][ T6188] FAT-fs (loop0): Directory bread(block 72) failed
[  183.529202][ T6188] FAT-fs (loop0): Directory bread(block 73) failed
[  183.645418][ T6195] syz.0.757: attempt to access beyond end of device
[  183.645418][ T6195] loop0: rw=2049, sector=1224, nr_sectors = 32 limit=256
[  183.676187][ T6195] syz.0.757: attempt to access beyond end of device
[  183.676187][ T6195] loop0: rw=2049, sector=1288, nr_sectors = 32 limit=256
[  183.704617][ T6195] syz.0.757: attempt to access beyond end of device
[  183.704617][ T6195] loop0: rw=2049, sector=1352, nr_sectors = 32 limit=256
[  183.734204][ T6195] syz.0.757: attempt to access beyond end of device
[  183.734204][ T6195] loop0: rw=2049, sector=1416, nr_sectors = 32 limit=256
[  183.766223][ T6195] syz.0.757: attempt to access beyond end of device
[  183.766223][ T6195] loop0: rw=2049, sector=1480, nr_sectors = 32 limit=256
[  183.780009][ T6195] syz.0.757: attempt to access beyond end of device
[  183.780009][ T6195] loop0: rw=2049, sector=1544, nr_sectors = 32 limit=256
[  183.794142][ T6195] syz.0.757: attempt to access beyond end of device
[  183.794142][ T6195] loop0: rw=2049, sector=1608, nr_sectors = 32 limit=256
[  184.053033][ T6203] netlink: 68 bytes leftover after parsing attributes in process `syz.0.762'.
[  184.062166][ T6203] netlink: 16 bytes leftover after parsing attributes in process `syz.0.762'.
[  184.071525][ T6203] netlink: 16 bytes leftover after parsing attributes in process `syz.0.762'.
[  184.241140][ T6210] FAT-fs (loop2): Directory bread(block 64) failed
[  184.248001][ T6210] FAT-fs (loop2): Directory bread(block 65) failed
[  184.254799][ T6210] FAT-fs (loop2): Directory bread(block 66) failed
[  184.261381][ T6210] FAT-fs (loop2): Directory bread(block 67) failed
[  184.268179][ T6210] FAT-fs (loop2): Directory bread(block 68) failed
[  184.274769][ T6210] FAT-fs (loop2): Directory bread(block 69) failed
[  184.281653][ T6210] FAT-fs (loop2): Directory bread(block 70) failed
[  184.288640][ T6210] FAT-fs (loop2): Directory bread(block 71) failed
[  184.295517][ T6210] FAT-fs (loop2): Directory bread(block 72) failed
[  184.302197][ T6210] FAT-fs (loop2): Directory bread(block 73) failed
[  184.316225][ T6211] SELinux:  policydb magic number 0x100 does not match expected magic number 0xf97cff8c
[  184.503783][ T6211] SELinux: failed to load policy
[  185.601669][ T6222] set_capacity_and_notify: 3 callbacks suppressed
[  185.601723][ T6222] loop2: detected capacity change from 0 to 512
[  185.614382][ T6217] syzkaller0: entered promiscuous mode
[  185.641467][ T6217] syzkaller0: entered allmulticast mode
[  185.641826][ T6218] netlink: 68 bytes leftover after parsing attributes in process `syz.3.765'.
[  185.656726][ T6218] netlink: 16 bytes leftover after parsing attributes in process `syz.3.765'.
[  185.665977][ T6218] netlink: 16 bytes leftover after parsing attributes in process `syz.3.765'.
[  185.682542][ T6218] SELinux:  policydb magic number 0x100 does not match expected magic number 0xf97cff8c
[  185.692447][ T6222] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  185.702501][ T6218] SELinux: failed to load policy
[  185.760557][ T6222] EXT4-fs (loop2): 1 truncate cleaned up
[  185.804430][ T6222] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  185.925604][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  185.961564][ T6228] loop4: detected capacity change from 0 to 128
[  185.985153][ T6235] loop1: detected capacity change from 0 to 4096
[  185.996347][ T6235] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  186.016640][ T6235] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  186.034222][   T28] kauditd_printk_skb: 33 callbacks suppressed
[  186.034235][   T28] audit: type=1326 audit(1772844824.447:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6227 comm="syz.4.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff9e6fc799 code=0x7ffc0000
[  186.068897][ T6242] loop3: detected capacity change from 0 to 512
[  186.100728][ T6242] EXT4-fs (loop3): can't mount with commit=, fs mounted w/o journal
[  186.130568][   T28] audit: type=1326 audit(1772844824.477:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6234 comm="syz.1.769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e148dc799 code=0x7ffc0000
[  186.154384][   T28] audit: type=1326 audit(1772844824.477:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6234 comm="syz.1.769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e148dc799 code=0x7ffc0000
[  186.178033][   T28] audit: type=1326 audit(1772844824.477:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6234 comm="syz.1.769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f0e148dc799 code=0x7ffc0000
[  186.202562][   T28] audit: type=1326 audit(1772844824.477:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6227 comm="syz.4.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff9e6fc799 code=0x7ffc0000
[  186.226275][   T28] audit: type=1326 audit(1772844824.487:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6227 comm="syz.4.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7eff9e6fc799 code=0x7ffc0000
[  186.261066][   T28] audit: type=1326 audit(1772844824.487:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6227 comm="syz.4.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff9e6fc799 code=0x7ffc0000
[  186.285752][   T28] audit: type=1326 audit(1772844824.487:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6227 comm="syz.4.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff9e6fc799 code=0x7ffc0000
[  186.309666][   T28] audit: type=1326 audit(1772844824.487:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6227 comm="syz.4.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7eff9e6fc799 code=0x7ffc0000
[  186.357852][   T28] audit: type=1326 audit(1772844824.487:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6227 comm="syz.4.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff9e6fc799 code=0x7ffc0000
[  186.530841][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  186.565066][ T6248] loop1: detected capacity change from 0 to 256
[  187.046247][ T6248] FAT-fs (loop1): Directory bread(block 64) failed
[  187.058271][ T6248] FAT-fs (loop1): Directory bread(block 65) failed
[  187.070510][ T6248] FAT-fs (loop1): Directory bread(block 66) failed
[  187.079252][ T6248] FAT-fs (loop1): Directory bread(block 67) failed
[  187.093145][ T6248] FAT-fs (loop1): Directory bread(block 68) failed
[  187.106993][ T6248] FAT-fs (loop1): Directory bread(block 69) failed
[  187.119856][ T6248] FAT-fs (loop1): Directory bread(block 70) failed
[  187.139944][ T6248] FAT-fs (loop1): Directory bread(block 71) failed
[  187.153935][ T6248] FAT-fs (loop1): Directory bread(block 72) failed
[  187.176035][ T6248] FAT-fs (loop1): Directory bread(block 73) failed
[  187.319254][ T6254] netlink: 68 bytes leftover after parsing attributes in process `syz.3.777'.
[  187.331536][ T6256] bio_check_eod: 32 callbacks suppressed
[  187.331551][ T6256] syz.1.774: attempt to access beyond end of device
[  187.331551][ T6256] loop1: rw=2049, sector=1224, nr_sectors = 32 limit=256
[  187.357363][ T6254] netlink: 16 bytes leftover after parsing attributes in process `syz.3.777'.
[  187.367526][ T6254] netlink: 16 bytes leftover after parsing attributes in process `syz.3.777'.
[  187.377702][ T6261] SELinux:  policydb magic number 0x100 does not match expected magic number 0xf97cff8c
[  187.387620][ T6256] syz.1.774: attempt to access beyond end of device
[  187.387620][ T6256] loop1: rw=2049, sector=1288, nr_sectors = 32 limit=256
[  187.400551][ T6261] SELinux: failed to load policy
[  187.650562][ T6256] syz.1.774: attempt to access beyond end of device
[  187.650562][ T6256] loop1: rw=2049, sector=1352, nr_sectors = 32 limit=256
[  187.768033][ T6256] syz.1.774: attempt to access beyond end of device
[  187.768033][ T6256] loop1: rw=2049, sector=1416, nr_sectors = 32 limit=256
[  187.938439][ T6256] syz.1.774: attempt to access beyond end of device
[  187.938439][ T6256] loop1: rw=2049, sector=1480, nr_sectors = 8 limit=256
[  188.020516][   T57] kworker/u8:4: attempt to access beyond end of device
[  188.020516][   T57] loop1: rw=1, sector=1224, nr_sectors = 4 limit=256
[  188.307001][ T6278] loop3: detected capacity change from 0 to 256
[  188.447814][ T6278] FAT-fs (loop3): Directory bread(block 64) failed
[  188.454582][ T6278] FAT-fs (loop3): Directory bread(block 65) failed
[  188.461268][ T6278] FAT-fs (loop3): Directory bread(block 66) failed
[  188.467916][ T6278] FAT-fs (loop3): Directory bread(block 67) failed
[  188.474732][ T6278] FAT-fs (loop3): Directory bread(block 68) failed
[  188.481584][ T6278] FAT-fs (loop3): Directory bread(block 69) failed
[  188.488228][ T6278] FAT-fs (loop3): Directory bread(block 70) failed
[  188.494929][ T6278] FAT-fs (loop3): Directory bread(block 71) failed
[  188.501575][ T6278] FAT-fs (loop3): Directory bread(block 72) failed
[  188.508217][ T6278] FAT-fs (loop3): Directory bread(block 73) failed
[  189.159174][ T6280] netlink: 44 bytes leftover after parsing attributes in process `syz.4.783'.
[  189.221425][ T6280] netlink: 43 bytes leftover after parsing attributes in process `syz.4.783'.
[  189.291903][ T6280] netlink: 'syz.4.783': attribute type 5 has an invalid length.
[  189.347676][ T6280] netlink: 43 bytes leftover after parsing attributes in process `syz.4.783'.
[  189.793042][ T6281] loop4: detected capacity change from 0 to 512
[  189.803004][ T6281] EXT4-fs: Ignoring removed nobh option
[  189.816506][ T6281] EXT4-fs (loop4): orphan cleanup on readonly fs
[  189.840055][ T6281] EXT4-fs warning (device loop4): ext4_xattr_inode_get:560: inode #11: comm syz.4.783: EA inode hash validation failed
[  189.881396][ T6284] syzkaller0: entered promiscuous mode
[  189.894251][ T6281] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  189.908580][ T6284] syzkaller0: entered allmulticast mode
[  189.942826][ T6281] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #15: comm syz.4.783: corrupted inode contents
[  189.954808][ T6281] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  189.960437][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  189.976150][    C0] EXT4-fs (loop4): initial error at time 1772844828: ext4_do_update_inode:5569: inode 15
[  189.986092][    C0] EXT4-fs (loop4): last error at time 1772844828: ext4_do_update_inode:5569: inode 15
[  189.995715][ T6281] EXT4-fs error (device loop4): ext4_dirty_inode:6450: inode #15: comm syz.4.783: mark_inode_dirty error
[  190.007017][ T6281] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  190.007619][ T6281] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #15: comm syz.4.783: corrupted inode contents
[  190.029363][ T6281] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  190.029528][ T6281] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2999: inode #15: comm syz.4.783: mark_inode_dirty error
[  190.100970][ T6281] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  190.101179][ T6281] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3002: inode #15: comm syz.4.783: mark inode dirty (error -117)
[  190.170026][ T6281] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  190.170710][ T6281] EXT4-fs warning (device loop4): ext4_evict_inode:275: xattr delete (err -117)
[  190.215321][ T6288] loop0: detected capacity change from 0 to 512
[  190.230521][ T6281] EXT4-fs (loop4): 1 orphan inode deleted
[  190.236690][ T6281] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  190.261937][ T6288] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  190.290999][ T6288] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  190.326832][ T6290] loop1: detected capacity change from 0 to 128
[  190.336115][ T6288] EXT4-fs (loop0): 1 truncate cleaned up
[  190.347286][ T6288] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  190.479095][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  190.526808][ T6294] loop3: detected capacity change from 0 to 4096
[  190.561860][ T6294] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  190.593687][ T6294] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  190.690921][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  190.754503][ T6299] netlink: 104 bytes leftover after parsing attributes in process `syz.0.788'.
[  190.820382][ T6302] loop0: detected capacity change from 0 to 512
[  190.847026][ T6302] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  190.879962][ T6302] ext4 filesystem being mounted at /158/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  190.977838][ T6312] loop1: detected capacity change from 0 to 512
[  190.997437][ T6312] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  191.015562][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  191.030984][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  191.060515][ T6312] EXT4-fs (loop1): 1 truncate cleaned up
[  191.073452][ T6312] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  191.089092][ T6318] loop0: detected capacity change from 0 to 256
[  191.115496][ T6318] FAT-fs (loop0): Directory bread(block 64) failed
[  191.133708][ T6318] FAT-fs (loop0): Directory bread(block 65) failed
[  191.140695][ T6318] FAT-fs (loop0): Directory bread(block 66) failed
[  191.147499][ T6318] FAT-fs (loop0): Directory bread(block 67) failed
[  191.154415][ T6318] FAT-fs (loop0): Directory bread(block 68) failed
[  191.161581][ T6318] FAT-fs (loop0): Directory bread(block 69) failed
[  191.168310][ T6318] FAT-fs (loop0): Directory bread(block 70) failed
[  191.308366][   T28] kauditd_printk_skb: 35 callbacks suppressed
[  191.308379][   T28] audit: type=1326 audit(1772844829.717:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6311 comm="syz.1.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e148dc799 code=0x7ffc0000
[  191.354084][ T6318] FAT-fs (loop0): Directory bread(block 71) failed
[  191.409935][ T6318] FAT-fs (loop0): Directory bread(block 72) failed
[  191.464512][ T6318] FAT-fs (loop0): Directory bread(block 73) failed
[  191.514882][   T28] audit: type=1326 audit(1772844829.757:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6311 comm="syz.1.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e148dc799 code=0x7ffc0000
[  191.539998][   T28] audit: type=1326 audit(1772844829.757:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6311 comm="syz.1.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e148dc799 code=0x7ffc0000
[  191.612727][   T28] audit: type=1326 audit(1772844829.757:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6311 comm="syz.1.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7f0e148dc799 code=0x7ffc0000
[  191.637046][   T28] audit: type=1326 audit(1772844829.767:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6311 comm="syz.1.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e148dc799 code=0x7ffc0000
[  191.691756][   T28] audit: type=1326 audit(1772844829.767:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6311 comm="syz.1.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e148dc799 code=0x7ffc0000
[  191.716491][   T28] audit: type=1326 audit(1772844829.767:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6311 comm="syz.1.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e148dc799 code=0x7ffc0000
[  191.740771][ T6318] syz.0.792: attempt to access beyond end of device
[  191.740771][ T6318] loop0: rw=2049, sector=1224, nr_sectors = 32 limit=256
[  191.754792][ T6318] syz.0.792: attempt to access beyond end of device
[  191.754792][ T6318] loop0: rw=2049, sector=1288, nr_sectors = 32 limit=256
[  191.769409][ T6318] syz.0.792: attempt to access beyond end of device
[  191.769409][ T6318] loop0: rw=2049, sector=1352, nr_sectors = 32 limit=256
[  191.783541][   T28] audit: type=1326 audit(1772844829.767:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6311 comm="syz.1.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e148dc799 code=0x7ffc0000
[  191.807801][ T6318] syz.0.792: attempt to access beyond end of device
[  191.807801][ T6318] loop0: rw=2049, sector=1416, nr_sectors = 32 limit=256
[  191.835820][   T28] audit: type=1326 audit(1772844829.767:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6311 comm="syz.1.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e148dc799 code=0x7ffc0000
[  191.882390][   T28] audit: type=1326 audit(1772844829.777:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6311 comm="syz.1.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f0e148dc799 code=0x7ffc0000
[  191.981502][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  192.011909][ T6335] lo: entered allmulticast mode
[  193.696192][ T6351] bridge0: entered promiscuous mode
[  193.701471][ T6351] macvlan2: entered promiscuous mode
[  193.890812][ T6357] netlink: 'syz.3.804': attribute type 1 has an invalid length.
[  194.700643][ T6357] 8021q: adding VLAN 0 to HW filter on device bond4
[  194.721407][ T6361] bond4: (slave gretap2): making interface the new active one
[  194.741932][ T6361] bond4: (slave gretap2): Enslaving as an active interface with an up link
[  194.929156][ T6360] netlink: 60 bytes leftover after parsing attributes in process `syz.0.802'.
[  195.000030][ T6357] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6357 comm=syz.3.804
[  195.039627][ T6367] netlink: 'syz.2.806': attribute type 1 has an invalid length.
[  195.109109][ T6370] loop0: detected capacity change from 0 to 512
[  195.134319][ T6370] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  195.183915][ T6366] loop4: detected capacity change from 0 to 512
[  195.191598][ T6370] EXT4-fs (loop0): 1 truncate cleaned up
[  195.197637][ T6370] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  195.223568][ T6366] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  195.235224][ T6372] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6372 comm=syz.2.806
[  195.261706][ T6366] EXT4-fs (loop4): 1 truncate cleaned up
[  195.274685][ T6366] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  195.297106][ T6374] loop3: detected capacity change from 0 to 8192
[  195.331527][ T6374] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  195.356991][ T6374] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  195.372441][ T6367] 8021q: adding VLAN 0 to HW filter on device bond4
[  195.387121][ T6374] FAT-fs (loop3): Filesystem has been set read-only
[  195.404692][ T6374] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  195.407254][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  195.414074][ T6371] bond4: (slave gretap1): making interface the new active one
[  195.429780][ T6374] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  195.431285][ T6371] bond4: (slave gretap1): Enslaving as an active interface with an up link
[  195.452129][ T6374] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  195.463914][ T6374] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  195.473685][ T6374] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  195.483838][ T6374] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  195.493192][ T6374] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  195.502183][ T6374] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  195.511599][ T6374] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  195.603050][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  195.739282][ T6387] loop1: detected capacity change from 0 to 2048
[  196.102887][ T3302]  loop1: p1 < > p4
[  196.118262][ T3302] loop1: p4 start 42180 is beyond EOD, truncated
[  196.138701][ T6387]  loop1: p1 < > p4
[  196.146306][ T6387] loop1: p4 start 42180 is beyond EOD, truncated
[  196.192383][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  196.225910][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  196.266330][ T6402] loop1: detected capacity change from 0 to 1024
[  196.274060][ T6402] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  196.286285][ T6402] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.817: Invalid block bitmap block 0 in block_group 0
[  196.300118][ T6402] loop1: lost filesystem error report for type 5 error -117
[  196.300266][ T6402] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.817: Failed to acquire dquot type 0
[  196.307773][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  196.307797][    C0] EXT4-fs (loop1): initial error at time 1772844834: ext4_read_block_bitmap_nowait:483
[  196.307821][    C0] EXT4-fs (loop1): last error at time 1772844834: ext4_read_block_bitmap_nowait:483
[  196.345097][ T6402] loop1: lost filesystem error report for type 5 error -117
[  196.355108][ T6402] EXT4-fs error (device loop1): ext4_free_blocks:6724: comm syz.1.817: Freeing blocks not in datazone - block = 0, count = 4096
[  196.393917][ T6402] loop1: lost filesystem error report for type 5 error -117
[  196.394983][ T6402] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.817: Invalid inode bitmap blk 0 in block_group 0
[  196.412394][ T6407] syzkaller0: entered promiscuous mode
[  196.415635][  T308] __quota_error: 68 callbacks suppressed
[  196.415649][  T308] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-7
[  196.443617][  T308] EXT4-fs error (device loop1): ext4_release_dquot:7037: comm kworker/u8:6: Failed to release dquot type 0
[  196.455573][ T6402] loop1: lost filesystem error report for type 5 error -117
[  196.456527][ T6402] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem
[  196.473424][ T6409] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  196.480152][  T308] loop1: lost filesystem error report for type 5 error -117
[  196.480301][ T6402] loop1: lost filesystem error report for type 5 error -117
[  196.488258][ T6402] EXT4-fs (loop1): 1 orphan inode deleted
[  196.501996][ T6402] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  196.515710][ T6409] netlink: 44 bytes leftover after parsing attributes in process `syz.0.819'.
[  196.527143][ T6409] tipc: Resetting bearer <eth:syzkaller0>
[  196.571349][ T6413] tipc: Resetting bearer <eth:syzkaller0>
[  196.651053][ T6415] loop4: detected capacity change from 0 to 4096
[  196.668921][ T6415] EXT4-fs: Ignoring removed bh option
[  196.681247][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.701715][ T6415] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  196.806213][ T6422] loop0: detected capacity change from 0 to 512
[  196.855864][ T6422] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  196.888682][ T6422] ext4 filesystem being mounted at /167/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  196.936648][   T28] audit: type=1400 audit(1772844835.347:1037): avc:  denied  { write } for  pid=6421 comm="syz.0.824" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  197.049769][   T28] audit: type=1400 audit(1772844835.457:1038): avc:  denied  { create } for  pid=6421 comm="syz.0.824" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  197.152133][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.920387][ T6435] loop3: detected capacity change from 0 to 8192
[  198.204105][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.347128][ T6446] tipc: Resetting bearer <eth:syzkaller0>
[  198.480696][   T28] audit: type=1400 audit(1772844836.837:1039): avc:  denied  { nlmsg_write } for  pid=6433 comm="syz.3.828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[  198.711149][ T6451] loop2: detected capacity change from 0 to 8192
[  198.771393][   T28] audit: type=1400 audit(1772844837.187:1040): avc:  denied  { map } for  pid=6454 comm="syz.0.833" path="socket:[31387]" dev="sockfs" ino=31387 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  198.798917][ T6455] netlink: 'syz.0.833': attribute type 4 has an invalid length.
[  198.816322][   T28] audit: type=1400 audit(1772844837.187:1041): avc:  denied  { read } for  pid=6454 comm="syz.0.833" path="socket:[31387]" dev="sockfs" ino=31387 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  198.850485][   T28] audit: type=1326 audit(1772844837.187:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6458 comm="syz.4.835" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7eff9e6fc799 code=0x0
[  198.891236][   T28] audit: type=1400 audit(1772844837.287:1043): avc:  denied  { create } for  pid=6456 comm="syz.1.834" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  198.912156][   T28] audit: type=1400 audit(1772844837.297:1044): avc:  denied  { write } for  pid=6456 comm="syz.1.834" name="file0" dev="tmpfs" ino=924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  198.934545][   T28] audit: type=1400 audit(1772844837.297:1045): avc:  denied  { open } for  pid=6456 comm="syz.1.834" path="/168/file0" dev="tmpfs" ino=924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  199.184430][ T6472] loop2: detected capacity change from 0 to 1024
[  199.201656][ T6472] EXT4-fs (loop2): stripe (9) is not aligned with cluster size (16), stripe is disabled
[  199.273950][ T6474] syzkaller0: left promiscuous mode
[  199.336075][ T6474] tipc: Resetting bearer <eth:syzkaller0>
[  199.497727][ T6472] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  199.499306][ T6476] loop1: detected capacity change from 0 to 1024
[  199.593697][ T6476] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  199.670780][ T6476] ext4 filesystem being mounted at /169/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  199.704744][ T6476] EXT4-fs error (device loop1): ext4_map_blocks:818: inode #15: block 3: comm syz.1.840: lblock 3 mapped to illegal pblock 3 (length 1)
[  199.781047][ T6476] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117
[  199.814990][ T6485] netlink: 48 bytes leftover after parsing attributes in process `syz.1.840'.
[  199.824319][ T6476] EXT4-fs (loop1): This should not happen!! Data will be lost
[  199.824319][ T6476] 
[  199.865390][ T6485] IPv6: NLM_F_REPLACE set, but no existing node found!
[  199.875683][ T6478] EXT4-fs error (device loop1): ext4_ext_remove_space:2954: inode #15: comm syz.1.840: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  199.946382][ T6478] EXT4-fs error (device loop1) in ext4_setattr:5983: Corrupt filesystem
[  200.170989][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  200.495418][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.504551][ T6495] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6495 comm=syz.3.845
[  200.844523][ T6505] loop3: detected capacity change from 0 to 4096
[  200.882701][ T6505] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  201.071710][ T6511] syzkaller0: entered promiscuous mode
[  201.077405][ T6511] syzkaller0: entered allmulticast mode
[  201.122271][ T6514] netlink: 'syz.0.849': attribute type 1 has an invalid length.
[  201.197215][ T6509] netlink: 60 bytes leftover after parsing attributes in process `syz.2.846'.
[  201.439008][ T6517] loop2: detected capacity change from 0 to 164
[  201.450934][ T6522] netlink: 28 bytes leftover after parsing attributes in process `syz.0.849'.
[  201.520064][ T6517] iso9660: Corrupted directory entry in block 2 of inode 1920
[  201.671476][ T6518] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  201.690187][ T6525] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  201.731378][ T6519] veth3: entered promiscuous mode
[  201.743043][ T6519] bond3: (slave veth3): Enslaving as a backup interface with a down link
[  201.764522][ T6522] 8021q: adding VLAN 0 to HW filter on device bond3
[  201.771332][ T3620] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  201.813413][ T6527] loop2: detected capacity change from 0 to 512
[  201.858813][ T6527] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  201.905469][ T3620] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  201.918917][ T6533] macvlan2: left promiscuous mode
[  201.942423][ T6527] EXT4-fs (loop2): 1 truncate cleaned up
[  202.395446][ T6527] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  202.456140][   T28] kauditd_printk_skb: 1 callbacks suppressed
[  202.456156][   T28] audit: type=1400 audit(1772844840.867:1047): avc:  denied  { write } for  pid=6537 comm="syz.1.855" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  202.561529][ T6538] loop1: detected capacity change from 0 to 1024
[  202.616764][ T6538] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback.
[  202.641059][ T6538] ext4 filesystem being mounted at /172/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  202.694636][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  202.941235][ T6546] netlink: 4 bytes leftover after parsing attributes in process `syz.1.856'.
[  202.960256][ T6547] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[  203.038615][ T6549] netlink: 7 bytes leftover after parsing attributes in process `syz.4.858'.
[  203.069713][ T6553] loop1: detected capacity change from 0 to 512
[  203.629791][ T6560] loop0: detected capacity change from 0 to 8192
[  203.670677][ T6560] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  203.805969][   T28] audit: type=1400 audit(1772844842.217:1048): avc:  denied  { mounton } for  pid=6558 comm="syz.0.861" path="/177/file2/bus" dev="loop0" ino=39 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1
[  204.028094][ T6553] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  204.042336][ T6553] EXT4-fs (loop1): 1 truncate cleaned up
[  204.048371][ T6553] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  204.141003][ T6561] loop0: detected capacity change from 8192 to 0
[  204.148659][ T6560] Buffer I/O error on dev loop0, logical block 34, lost sync page write
[  204.182860][ T6560] Buffer I/O error on dev loop0, logical block 2, lost sync page write
[  204.203054][ T6560] Buffer I/O error on dev loop0, logical block 65, lost sync page write
[  204.220184][ T6560] Buffer I/O error on dev loop0, logical block 85, lost async page write
[  204.238106][ T6560] Buffer I/O error on dev loop0, logical block 97, lost async page write
[  204.257554][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.267209][ T6560] Buffer I/O error on dev loop0, logical block 98, lost async page write
[  204.310579][ T6560] Buffer I/O error on dev loop0, logical block 99, lost async page write
[  204.341390][ T6560] Buffer I/O error on dev loop0, logical block 100, lost async page write
[  204.362479][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.371616][ T6560] Buffer I/O error on dev loop0, logical block 101, lost async page write
[  204.380109][ T6560] Buffer I/O error on dev loop0, logical block 102, lost async page write
[  204.404223][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.435278][ T3313] FAT-fs (loop0): Directory bread(block 65) failed
[  204.478825][ T6568] syzkaller0: entered promiscuous mode
[  204.488914][ T6568] syzkaller0: entered allmulticast mode
[  204.508484][   T57] FAT-fs (loop0): unable to read inode block for updating (i_pos 1052)
[  204.520366][ T5272] FAT-fs (loop0): unable to read inode block for updating (i_pos 1052)
[  204.528800][ T5272] FAT-fs (loop0): unable to read inode block for updating (i_pos 1052)
[  204.537164][ T5272] FAT-fs (loop0): Failed to update on disk inode for unused fallocated blocks, inode could be corrupted. Please run fsck
[  204.555510][ T5903] tipc: Resetting bearer <eth:syzkaller0>
[  204.565873][ T5903] tipc: Disabling bearer <eth:syzkaller0>
[  204.966113][ T6584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  204.974790][ T6584] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  205.076594][   T28] audit: type=1400 audit(1772844843.477:1049): avc:  denied  { setopt } for  pid=6572 comm="syz.3.867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  205.209687][ T6585] tipc: Enabled bearer <udp:syz2>, priority 10
[  205.906986][   T28] audit: type=1400 audit(1772844844.317:1050): avc:  denied  { mounton } for  pid=6592 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  205.944100][ T6587] tipc: Enabled bearer <eth:veth0_macvtap>, priority 0
[  206.046825][ T6599] loop2: detected capacity change from 0 to 128
[  206.091950][   T28] audit: type=1400 audit(1772844844.507:1051): avc:  denied  { read } for  pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[  206.125710][   T28] audit: type=1400 audit(1772844844.537:1052): avc:  denied  { search } for  pid=3038 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  206.151601][ T6592] lo speed is unknown, defaulting to 1000
[  206.189369][   T57] bond1 (unregistering): (slave ip6erspan0): Releasing active interface
[  206.210461][   T28] audit: type=1400 audit(1772844844.537:1053): avc:  denied  { search } for  pid=3038 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  206.213333][   T57] bond3 (unregistering): (slave ip6gretap1): Removing an active aggregator
[  206.252309][   T57] bond3 (unregistering): (slave ip6gretap1): Releasing backup interface
[  206.276998][   T57] bond3 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 5a:7c:01:55:6f:38 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  206.382872][   T28] audit: type=1400 audit(1772844844.537:1054): avc:  denied  { search } for  pid=3038 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  206.424407][   T57] bond0 (unregistering): Released all slaves
[  206.430633][   T28] audit: type=1400 audit(1772844844.537:1055): avc:  denied  { read } for  pid=3038 comm="dhcpcd" name="n26" dev="tmpfs" ino=7413 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  206.433317][   T57] bond1 (unregistering): Released all slaves
[  206.500813][   T28] audit: type=1400 audit(1772844844.537:1056): avc:  denied  { open } for  pid=3038 comm="dhcpcd" path="/run/udev/data/n26" dev="tmpfs" ino=7413 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  206.643955][ T6633] netlink: 'syz.4.876': attribute type 32 has an invalid length.
[  206.792648][   T57] bond2 (unregistering): Released all slaves
[  206.824919][   T57] bond3 (unregistering): (slave veth3): Releasing backup interface
[  206.864462][   T57] bond3 (unregistering): Released all slaves
[  206.867589][ T6635] netlink: 4 bytes leftover after parsing attributes in process `syz.3.877'.
[  206.885894][ T6635] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  206.893673][ T6635] batman_adv: batadv0: Removing interface: batadv_slave_0
[  206.915375][ T6635] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  206.923081][ T6635] batman_adv: batadv0: Removing interface: batadv_slave_1
[  206.948643][   T57] tipc: Left network mode
[  206.973907][ T6637] netlink: 4 bytes leftover after parsing attributes in process `syz.2.878'.
[  206.983200][ T6637] netlink: 4 bytes leftover after parsing attributes in process `syz.2.878'.
[  206.996435][   T57] hsr_slave_0: left promiscuous mode
[  207.002537][   T57] hsr_slave_1: left promiscuous mode
[  207.048156][ T6640] netlink: 'syz.2.880': attribute type 1 has an invalid length.
[  207.092576][ T6640] 8021q: adding VLAN 0 to HW filter on device bond5
[  207.102997][ T6640] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6640 comm=syz.2.880
[  207.191760][ T6644] bridge0: entered allmulticast mode
[  207.259957][ T6656] bridge_slave_0: left allmulticast mode
[  207.271280][ T6656] bridge_slave_0: left promiscuous mode
[  207.281449][ T6656] bridge0: port 1(bridge_slave_0) entered disabled state
[  207.331213][ T6592] chnl_net:caif_netlink_parms(): no params data found
[  207.412543][ T6592] bridge0: port 1(bridge_slave_0) entered blocking state
[  207.419773][ T6592] bridge0: port 1(bridge_slave_0) entered disabled state
[  207.427292][ T6592] bridge_slave_0: entered allmulticast mode
[  207.434034][ T6592] bridge_slave_0: entered promiscuous mode
[  207.441153][ T6592] bridge0: port 2(bridge_slave_1) entered blocking state
[  207.448302][ T6592] bridge0: port 2(bridge_slave_1) entered disabled state
[  207.455778][ T6592] bridge_slave_1: entered allmulticast mode
[  207.462627][ T6592] bridge_slave_1: entered promiscuous mode
[  207.556927][   T28] kauditd_printk_skb: 25 callbacks suppressed
[  207.556943][   T28] audit: type=1400 audit(1772844845.967:1082): avc:  denied  { write } for  pid=6665 comm="syz.2.882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  207.655148][ T6686] loop3: detected capacity change from 0 to 1024
[  207.683341][ T6686] EXT4-fs: inline encryption not supported
[  207.831851][ T6686] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  207.868078][ T6676] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.883129][ T6592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  207.895746][ T6592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  207.949567][   T57] IPVS: stop unused estimator thread 0...
[  207.958421][ T6592] team0: Port device team_slave_0 added
[  207.973933][ T6592] team0: Port device team_slave_1 added
[  207.988150][ T6676] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.032511][ T6592] batman_adv: batadv0: Adding interface: batadv_slave_0
[  208.051463][ T6592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  208.104279][ T6592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  208.127313][ T6676] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.150545][ T6592] batman_adv: batadv0: Adding interface: batadv_slave_1
[  208.157835][ T6592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  208.213018][ T6592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  208.244588][ T6676] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.285255][ T6592] hsr_slave_0: entered promiscuous mode
[  208.301089][ T6592] hsr_slave_1: entered promiscuous mode
[  208.311570][ T6592] debugfs: 'hsr0' already exists in 'hsr'
[  208.327647][ T6592] Cannot create hsr debugfs directory
[  208.359300][  T308] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  208.391785][  T308] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  208.431917][  T308] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  208.511174][  T308] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  208.543513][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.583219][ T6592] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  208.612495][ T6592] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  208.632824][ T6592] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  208.651315][ T6592] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  208.777791][ T6592] 8021q: adding VLAN 0 to HW filter on device bond0
[  208.812889][ T6592] 8021q: adding VLAN 0 to HW filter on device team0
[  208.832755][   T50] bridge0: port 1(bridge_slave_0) entered blocking state
[  208.839987][   T50] bridge0: port 1(bridge_slave_0) entered forwarding state
[  208.873872][   T50] bridge0: port 2(bridge_slave_1) entered blocking state
[  208.881235][   T50] bridge0: port 2(bridge_slave_1) entered forwarding state
[  208.898921][   T28] audit: type=1400 audit(1772844847.307:1083): avc:  denied  { accept } for  pid=6665 comm="syz.2.882" lport=33060 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  209.008623][ T6718] lo speed is unknown, defaulting to 1000
[  209.041816][ T6592] 8021q: adding VLAN 0 to HW filter on device batadv0
[  209.056110][ T6721] loop3: detected capacity change from 0 to 128
[  209.353218][ T6592] veth0_vlan: entered promiscuous mode
[  209.382111][ T6592] veth1_vlan: entered promiscuous mode
[  209.422978][ T6592] veth0_macvtap: entered promiscuous mode
[  209.433767][ T6592] veth1_macvtap: entered promiscuous mode
[  209.455012][ T6592] batman_adv: batadv0: Interface activated: batadv_slave_0
[  209.476552][ T6592] batman_adv: batadv0: Interface activated: batadv_slave_1
[  209.513424][   T50] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  209.535800][   T50] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  209.569051][   T50] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  209.608199][   T50] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  209.644032][   T28] audit: type=1400 audit(1772844848.057:1084): avc:  denied  { mounton } for  pid=6592 comm="syz-executor" path="/root/syzkaller.GeiitL/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[  209.680699][   T28] audit: type=1400 audit(1772844848.087:1085): avc:  denied  { mount } for  pid=6592 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  209.703209][   T28] audit: type=1400 audit(1772844848.087:1086): avc:  denied  { mount } for  pid=6592 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  209.726010][   T28] audit: type=1400 audit(1772844848.087:1087): avc:  denied  { mounton } for  pid=6592 comm="syz-executor" path="/root/syzkaller.GeiitL/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  209.770532][ T6760] netlink: 12 bytes leftover after parsing attributes in process `syz.5.870'.
[  209.791347][   T28] audit: type=1400 audit(1772844848.087:1088): avc:  denied  { mounton } for  pid=6592 comm="syz-executor" path="/root/syzkaller.GeiitL/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=32621 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[  209.868919][   T28] audit: type=1400 audit(1772844848.087:1089): avc:  denied  { mounton } for  pid=6592 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[  209.898243][ T6761] vlan2: entered allmulticast mode
[  209.903640][ T6761] vlan0: entered allmulticast mode
[  209.908868][ T6761] veth0_vlan: entered allmulticast mode
[  209.916411][   T28] audit: type=1400 audit(1772844848.087:1090): avc:  denied  { mount } for  pid=6592 comm="syz-executor" name="/" dev="gadgetfs" ino=4047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  210.448558][ T6772] loop3: detected capacity change from 0 to 512
[  210.459540][ T6772] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  211.274687][   T28] audit: type=1400 audit(1772844849.687:1091): avc:  denied  { wake_alarm } for  pid=6785 comm="syz.1.905" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  211.374556][ T6792] netlink: 2 bytes leftover after parsing attributes in process `syz.5.892'.
[  211.988687][ T6809] lo speed is unknown, defaulting to 1000
[  212.337773][ T6813] loop5: detected capacity change from 0 to 128
[  212.625847][ T6822] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6822 comm=syz.4.906
[  212.936144][ T6825] netlink: 'syz.3.908': attribute type 14 has an invalid length.
[  212.957850][ T6825] netlink: 8 bytes leftover after parsing attributes in process `syz.3.908'.
[  212.992690][ T6825] bond0: option xmit_hash_policy: invalid value (158)
[  215.069189][   T28] kauditd_printk_skb: 46 callbacks suppressed
[  215.069204][   T28] audit: type=1326 audit(1772844853.477:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6837 comm="syz.1.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e148dc799 code=0x7fc00000
[  215.400677][   T28] audit: type=1400 audit(1772844853.807:1139): avc:  denied  { getopt } for  pid=6856 comm="syz.3.918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  215.453233][ T6853] loop2: detected capacity change from 0 to 8192
[  215.517136][ T6863] syzkaller0: entered promiscuous mode
[  215.539191][ T6863] syzkaller0: entered allmulticast mode
[  215.590633][ T6868] tipc: Started in network mode
[  215.624916][ T6868] tipc: Node identity 965d9b5473ea, cluster identity 4711
[  215.756761][ T6868] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  215.778993][ T6874] loop3: detected capacity change from 0 to 512
[  215.818635][ T6870] tipc: Resetting bearer <eth:syzkaller0>
[  215.871499][ T6857] tipc: Resetting bearer <eth:syzkaller0>
[  215.920085][ T6857] tipc: Disabling bearer <eth:syzkaller0>
[  216.261355][ T6881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  216.291261][ T6881] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  216.330307][ T6845] syz.2.911 (6845) used greatest stack depth: 5968 bytes left
[  216.355929][ T6880] lo speed is unknown, defaulting to 1000
[  216.655155][ T6885] netlink: 'syz.5.923': attribute type 14 has an invalid length.
[  216.680743][ T6885] netlink: 8 bytes leftover after parsing attributes in process `syz.5.923'.
[  216.699376][ T6885] bond0: option xmit_hash_policy: invalid value (158)
[  216.739029][ T6888] loop1: detected capacity change from 0 to 128
[  216.780144][ T6890] lo speed is unknown, defaulting to 1000
[  217.540910][ T6897] loop5: detected capacity change from 0 to 128
[  217.580491][   T28] audit: type=1326 audit(1772844855.987:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6895 comm="syz.5.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5af1c799 code=0x7ffc0000
[  217.641047][   T28] audit: type=1326 audit(1772844855.987:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6895 comm="syz.5.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5af1c799 code=0x7ffc0000
[  217.664767][   T28] audit: type=1326 audit(1772844855.987:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6895 comm="syz.5.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f5f5af1c799 code=0x7ffc0000
[  217.688243][   T28] audit: type=1326 audit(1772844855.997:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6895 comm="syz.5.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5af1c799 code=0x7ffc0000
[  217.712132][   T28] audit: type=1326 audit(1772844855.997:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6895 comm="syz.5.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5af1c799 code=0x7ffc0000
[  217.735746][   T28] audit: type=1326 audit(1772844856.027:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6895 comm="syz.5.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5f5af1c799 code=0x7ffc0000
[  217.773896][   T28] audit: type=1326 audit(1772844856.027:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6895 comm="syz.5.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5af1c799 code=0x7ffc0000
[  217.788462][ T6903] IPVS: set_ctl: invalid protocol: 44 100.1.1.0:20002
[  217.824188][   T28] audit: type=1326 audit(1772844856.027:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6895 comm="syz.5.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5af1c799 code=0x7ffc0000
[  217.907191][ T6899] loop2: detected capacity change from 0 to 512
[  217.914266][ T2999] ==================================================================
[  217.922368][ T2999] BUG: KCSAN: data-race in dentry_unlink_inode / step_into_slowpath
[  217.930362][ T2999] 
[  217.932768][ T2999] write to 0xffff88814659f6f0 of 8 bytes by task 3302 on cpu 1:
[  217.940468][ T2999]  dentry_unlink_inode+0x65/0x260
[  217.945487][ T2999]  d_delete+0xc8/0xe0
[  217.949468][ T2999]  d_delete_notify+0x32/0x100
[  217.954304][ T2999]  vfs_unlink+0x289/0x490
[  217.958619][ T2999]  filename_unlinkat+0x1e2/0x410
[  217.963541][ T2999]  __se_sys_unlink+0x2b/0xe0
[  217.968117][ T2999]  __x64_sys_unlink+0x1f/0x30
[  217.972781][ T2999]  x64_sys_call+0x2eb6/0x3020
[  217.977449][ T2999]  do_syscall_64+0x12c/0x370
[  217.982059][ T2999]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  217.987937][ T2999] 
[  217.990330][ T2999] read to 0xffff88814659f6f0 of 8 bytes by task 2999 on cpu 0:
[  217.997952][ T2999]  step_into_slowpath+0x12c/0x4c0
[  218.003036][ T2999]  path_lookupat+0x330/0x500
[  218.007619][ T2999]  filename_lookup+0x190/0x390
[  218.012457][ T2999]  do_readlinkat+0x74/0x2f0
[  218.016955][ T2999]  __x64_sys_readlink+0x47/0x60
[  218.021799][ T2999]  x64_sys_call+0x2b51/0x3020
[  218.026992][ T2999]  do_syscall_64+0x12c/0x370
[  218.031673][ T2999]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  218.037575][ T2999] 
[  218.039901][ T2999] value changed: 0xffff888105df0080 -> 0x0000000000000000
[  218.046995][ T2999] 
[  218.049394][ T2999] Reported by Kernel Concurrency Sanitizer on:
[  218.055532][ T2999] CPU: 0 UID: 0 PID: 2999 Comm: udevd Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  218.065934][ T2999] Tainted: [W]=WARN
[  218.069717][ T2999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  218.079758][ T2999] ==================================================================
[  218.142549][ T6899] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  218.278148][ T6912] netlink: 256 bytes leftover after parsing attributes in process `syz.1.931'.
[  218.427517][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.