last executing test programs:

7.78407643s ago: executing program 4 (id=714):
r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0x8e382)
ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000004c0)={0x0, {}, 0x0, {}, 0x8f, 0x5, 0x0, 0xd, "b3da395cc1eb051e99086eb412b24aa21ae636f31ecac2633f8aa6b4577493ab4f86a46336d4f8a13621d4684d13f27ec54f52f4abbd7f7a3a62f434b03903d2", "c5bc3e1492333a99dced1b33b04e933806647aa9c61c0b61c380f3a94047cf4d", [0x547]})
sendfile(r0, r0, 0x0, 0x24002de8)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x2, 0x6, 0x518, 0x0, 0xe0, 0x1b0, 0x378, 0x2a8, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe0, 0x0, {0x7a00000010000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x12, 0x1}, {0xffffffffffffffff, 0x5, 0xc}, {0xffffffffffffffff, 0x4}, 0x6, 0x7ff}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0xa}, [0x0, 0xffffffff, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff], 'macvlan0\x00', 'wg0\x00', {}, {}, 0x6, 0x7f, 0x4}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x2, 0x5}, {0x2, 0x4, 0x4}}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x48000000, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@empty, @private0, [0xff, 0x0, 0xffffff00, 0xffffffff], [0xffffff00, 0xffffff, 0xff, 0xffffffff], 'geneve0\x00', 'xfrm0\x00', {0xff}, {}, 0x3a, 0x5, 0x0, 0x8}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x1b}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @private0, [0xff, 0xffffffff, 0x7f7fff00, 0xffffffff], [0xff000000, 0xcf16d9bfdc28978c, 0x0, 0xffffffff], 'veth0\x00', 'dvmrp1\x00', {0xff}, {}, 0x2c, 0x0, 0x6, 0x8}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0xfd}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x578)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f00000017c0)='./file1\x00', 0x0, &(0x7f0000000140)={[{@nouid32}, {@user_xattr}, {@jqfmt_vfsold}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x40}}]}, 0x1, 0xb8b, &(0x7f0000002080)="$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")
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}, {0x2, 0x0, @broadcast}, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1})
r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r3)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
fsetxattr$system_posix_acl(r5, &(0x7f0000000b40)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYRES16=r5, @ANYRES32=0x0, @ANYRESOCT=r1, @ANYRES32=0x0, @ANYBLOB="02000500", @ANYRES32=r0, @ANYBLOB="0400eed30000000008000200", @ANYRES32=0x0, @ANYBLOB="f4000404", @ANYRES32=0xee00, @ANYBLOB="10000000000000002000000000000000"], 0x4c, 0x1)
sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
io_submit(0x0, 0x0, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000900)=ANY=[@ANYBLOB="400100001a000100feffffff00010000ac1e0101000000000000000000000000ac1414bb000000000000000000000000000107174e2300050a0000203a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc02000000000000000000000000000108000000000000009201000000000010a39b000000000000ffff0000000000001c250800000000000520000000000000fcffffffffffffff0400000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffefffffffc030000000000007d00000005350000020001002000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001d00"], 0x140}}, 0x844)
socket$caif_stream(0x25, 0x1, 0x1)
r8 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x4885, 0x100, 0x3, 0x1d}, &(0x7f00000000c0)=<r9=>0x0, &(0x7f0000000600))
r10 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r10, 0x6, 0xc, 0x0, &(0x7f0000000100))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
io_uring_enter(r8, 0x3516, 0x3e000000, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x378}}, 0x0)

6.138757456s ago: executing program 1 (id=721):
r0 = getpid()
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
r1 = syz_open_procfs(r0, &(0x7f00000003c0)='net/mcfilter6\x00')
syz_io_uring_setup(0x88b, &(0x7f0000000140)={0x0, 0x3cfa, 0x2, 0x0, 0x20002a1}, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
r2 = socket$phonet_pipe(0x23, 0x5, 0x2)
syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x2010, 0xffffffffffffffff, 0xb3c13000)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x20000000)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000", 0x17}], 0x1}, 0x0)
syz_read_part_table(0x104b, &(0x7f0000001080)="$eJzsz7ENwjAUBNBLSEAwCzUzsEDmiViHwShp6fjIUeiogeK9wtJZd5YcfuqYbbLL/p3n5DDksqZHVVXfjx+G3a2d5yFJLZI+yZhs2oOLdlH305RubbVdqvKseSlM12/8EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+3SsAAP//iicZfA==")
r4 = dup(r2)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$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")
sendmsg$IPSET_CMD_GET_BYNAME(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x38, 0xe, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0xc0)
memfd_create(&(0x7f00000011c0)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?&^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xe3\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05V%$6\x9fU\x86\xbe\xcbx\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8\x83\x87+nM\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x10M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xdc\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5W\xfb\x82\xac\x19,\\D\x91T\xfd\x9c\xb8\x8b\x88\xa5\xcc\x8fI\x00\xf0\xc9%\n\xa7\xd6\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xecA\x92\xaf\xa4Xl\v\xa5\xca\v|\xe2L\xac\x80\xc7\x15\x96fh\x83\x15\xc7\xea\xd5\xe8\x89W\x11\xd7oC\xe4\x06\xa8[O\xe6\x1d=\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\v)\x06B\xf0\xed\x91 )y\xb4\xba\xba\xb7\xbc\xc3\xad\xf1\x92/(A=A\x8b\xa5\xb0\x89\x9e5\x12\xa4\x9a\va\xdf\xf4\xea\xc6\xc7\x10g\x1d\xd5\xb0\xbb\xd2\xfc]fC\x8d\x0f\xa6q\x0f\xef\x90\xfe\x94k\xf1\xb8\xfa\xbbb\xb1\x03\x99\xf7\xfd\'\xae\x906\xe0\xaa\xdbtWWH\xa4L\xb5pe,\xdfN\x0f8\t\xe7X_H\xd4\xe3\xb2,oj\xac\xd7\xbd\xd0\xadW\x1f<\xd0\b\x00\x00\x00\x00/ \xe4]@\xf7mA\xe8\xd1\xf4:\xb3\xeb\x81\xb9\x018\x1c\x95%o\x05x\x1a\x90\xf4\x03\xe7\xe9\xa9', 0x7)
lseek(r1, 0x2000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a)
mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0)
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x3b80ed, &(0x7f0000000040)={[{@size={'size', 0x3d, [0x38, 0x67]}}, {@inode32}]})

6.074268634s ago: executing program 3 (id=723):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f0000000440)="7f", 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c)
rmdir(&(0x7f0000000080)='./cgroup/../file0\x00')
perf_event_open(&(0x7f00000002c0)={0x4, 0x80, 0xe5, 0x0, 0x0, 0xfd, 0x0, 0x5, 0x4020, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={&(0x7f0000000040), 0xc}, 0x4, 0x1, 0x10000, 0x2, 0x3, 0x80000001, 0x2, 0x0, 0x40, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xfffffffffffffffd)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f00000005c0)=0x474c, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="010000000500000006000000ffff000005000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32], 0x50)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xe, 0x31, 0xffffffffffffffff, 0xf5b64000)
modify_ldt$write2(0x11, &(0x7f0000000200)={0x77b, 0x0, 0x0, 0x1}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x80008000, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_int(r1, 0x0, 0x14, &(0x7f0000000080)=0xcd, 0x4)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)
recvmmsg(r1, &(0x7f0000007c00), 0x0, 0x45833af92e4a39fe, 0x0)
listen(0xffffffffffffffff, 0x0)
getpriority(0x2, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80)
pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5405, 0x0, 0x4)
sendfile(r2, r2, 0x0, 0x7a680000)
sendmmsg$inet6(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)="534b0ac01bd0edcbe8a5dea438bc", 0xe}], 0x1}}], 0x1, 0x4000000)

5.795503323s ago: executing program 4 (id=724):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f0000000440)="7f", 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c)
rmdir(&(0x7f0000000080)='./cgroup/../file0\x00')
perf_event_open(&(0x7f00000002c0)={0x4, 0x80, 0xe5, 0x0, 0x0, 0xfd, 0x0, 0x5, 0x4020, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={&(0x7f0000000040), 0xc}, 0x4, 0x1, 0x10000, 0x2, 0x3, 0x80000001, 0x2, 0x0, 0x40, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xfffffffffffffffd)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f00000005c0)=0x474c, 0x4)
setsockopt$inet_int(r1, 0x0, 0x7, &(0x7f00000000c0)=0x2, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="010000000500000006000000ffff000005000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32], 0x50)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xe, 0x31, 0xffffffffffffffff, 0xf5b64000)
modify_ldt$write2(0x11, &(0x7f0000000200)={0x77b, 0x0, 0x0, 0x1}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x80008000, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_int(r1, 0x0, 0x14, &(0x7f0000000080)=0xcd, 0x4)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)
recvmmsg(r1, &(0x7f0000007c00)=[{{0x0, 0x0, 0x0}, 0xfffffffd}], 0x1, 0x45833af92e4a39fe, 0x0)
listen(0xffffffffffffffff, 0x0)
getpriority(0x2, 0x0)
r2 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0x80)
pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5405, 0x0, 0x4)
sendfile(r2, r2, 0x0, 0x7a680000)
sendmmsg$inet6(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)="534b0ac01bd0edcbe8a5dea438bc", 0xe}], 0x1}}], 0x1, 0x4000000)

5.735109111s ago: executing program 0 (id=726):
r0 = getpid()
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r1, 0x0, 0x30)
r2 = syz_open_procfs(r0, &(0x7f00000003c0)='net/mcfilter6\x00')
syz_io_uring_setup(0x88b, &(0x7f0000000140)={0x0, 0x3cfa, 0x2, 0x0, 0x20002a1}, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x61, 0x0, 0x0, 0x40, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x5, 0x4dd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
r4 = socket$phonet_pipe(0x23, 0x5, 0x2)
syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x2010, 0xffffffffffffffff, 0xb3c13000)
r5 = socket$kcm(0x10, 0x2, 0x0)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
syz_read_part_table(0x104b, &(0x7f0000001080)="$eJzsz7ENwjAUBNBLSEAwCzUzsEDmiViHwShp6fjIUeiogeK9wtJZd5YcfuqYbbLL/p3n5DDksqZHVVXfjx+G3a2d5yFJLZI+yZhs2oOLdlH305RubbVdqvKseSlM12/8EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+3SsAAP//iicZfA==")
r7 = dup(r4)
syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$eJzs281rHOUfAPDvTLKb9teX5FfrS2vVaBGCYtKkVXvwolQQqSjooR5jsi2h20aaKLYWm4p4EqSgZ/Eo+hd4E0HUk+DVkycpFO2lrafITGaSTbp5odlk0+7nAzP7PDPP7Dzfnbdnn2c3gI7Vn82SiJ0R8UdE9M5lFxfon3u5ef3i2K3rF8eSmJ198+8kL3fj+sWxsmi53Y4iM5BGpJ8kxU4Wmzp/4fRovV47V+SHps+8OzR1/sIz758ZPVU7VTs7cvTokcPDzz838mxL4sziurH/o8kD+155+8prYyeuvPPLd1l9dxbrG+Nolf4s8H9mc0vXPdnqnbXZrnzek8+T7jZXhjXriojscFXy6783umLh4PXGyx+3tXLAhsqeTT3Lr56ZBe5hSay1ZKXhngHc/coHffb9t5w2odmxZVx7ce4LUBb3zWKaW9MdaVGmMv/9tvX6I+LEzL9fZVNsUD8EAECjz8a+PF6Nnvjw1revZm2P3vk1aTyQv/6Zz3cXYyh9EfH/iNgTEfdFxN6IuD8iL/tgRDy0zvrc3v5Jr67zLVeUtf9eKMa2Frf/ytZf9HUVuV15/JXk5ES9dqj4TAai0pPlh1fYxw/Hfv98uXWN7b9syvZftgWLelztXtJBNz46PRqV9US94NrliP3dzeJP5kcCkojYFxH757da0wDP7jIx8dQ3B5YrtHr8K2jBONPs11l4M1n8M7Ek/lLSOD45cdv45NC2qNcODZVnxe1+/e3TN5bb/7rib4FrtbnXhuO/tEhf0jheO9Xa/d/h+Z9Wk7fyceZqMeb4wej09LnhiGpyPM9Xi7L58pGFbct8WT47/wcONr/+9xTbZPE/HBHZSfxIRDwaEY8VdX88Ip6IiIMrxPjzS6vHH2mbjv/liPGm97/583/J8T9/4XR5a1xYsmKi6/RP3y+3/7Ud/yN5aqBYkt//VtGsOt1NqnynnxsAAADcTdL8N/BJOjifTtPBwbnf8O+N/6X1yanpp09Ovnd2fO638n1RScuert6iP7Q+Ua8NJzPFO1aSY1GvjRR9xWV/6eGi3/iLru15fnBssj7e5tih0+1Y5vrP/NXV7toBG2x706Uj1U2vCNAGS8fR08XZS6+HmwHcq/xfGzrXKtd/uln1ADaf5z90rmbX/6UleWMBcG/y/IfO5fqHDpX+2O4aAG3k+Q8dadU/77cnsa1xSXXlwtUtUueWJbbqQckTEWUi3RL1kdigRLvvTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK3xXwAAAP//uIXZzg==")
sendmsg$IPSET_CMD_GET_BYNAME(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x38, 0xe, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0xc0)
memfd_create(&(0x7f00000011c0)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?&^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xe3\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05V%$6\x9fU\x86\xbe\xcbx\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8\x83\x87+nM\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x10M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xdc\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5W\xfb\x82\xac\x19,\\D\x91T\xfd\x9c\xb8\x8b\x88\xa5\xcc\x8fI\x00\xf0\xc9%\n\xa7\xd6\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xecA\x92\xaf\xa4Xl\v\xa5\xca\v|\xe2L\xac\x80\xc7\x15\x96fh\x83\x15\xc7\xea\xd5\xe8\x89W\x11\xd7oC\xe4\x06\xa8[O\xe6\x1d=\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\v)\x06B\xf0\xed\x91 )y\xb4\xba\xba\xb7\xbc\xc3\xad\xf1\x92/(A=A\x8b\xa5\xb0\x89\x9e5\x12\xa4\x9a\va\xdf\xf4\xea\xc6\xc7\x10g\x1d\xd5\xb0\xbb\xd2\xfc]fC\x8d\x0f\xa6q\x0f\xef\x90\xfe\x94k\xf1\xb8\xfa\xbbb\xb1\x03\x99\xf7\xfd\'\xae\x906\xe0\xaa\xdbtWWH\xa4L\xb5pe,\xdfN\x0f8\t\xe7X_H\xd4\xe3\xb2,oj\xac\xd7\xbd\xd0\xadW\x1f<\xd0\b\x00\x00\x00\x00/ \xe4]@\xf7mA\xe8\xd1\xf4:\xb3\xeb\x81\xb9\x018\x1c\x95%o\x05x\x1a\x90\xf4\x03\xe7\xe9\xa9', 0x7)
lseek(r2, 0x2000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a)
mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0)
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x3b80ed, &(0x7f0000000040)={[{@size={'size', 0x3d, [0x38, 0x67]}}, {@inode32}]})

5.178032219s ago: executing program 1 (id=728):
r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0x8e382)
ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000004c0)={0x0, {}, 0x0, {}, 0x8f, 0x5, 0x0, 0xd, "b3da395cc1eb051e99086eb412b24aa21ae636f31ecac2633f8aa6b4577493ab4f86a46336d4f8a13621d4684d13f27ec54f52f4abbd7f7a3a62f434b03903d2", "c5bc3e1492333a99dced1b33b04e933806647aa9c61c0b61c380f3a94047cf4d", [0x547]})
sendfile(r0, r0, 0x0, 0x24002de8)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x2, 0x6, 0x518, 0x0, 0xe0, 0x1b0, 0x378, 0x2a8, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe0, 0x0, {0x7a00000010000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x12, 0x1}, {0xffffffffffffffff, 0x5, 0xc}, {0xffffffffffffffff, 0x4}, 0x6, 0x7ff}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0xa}, [0x0, 0xffffffff, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff], 'macvlan0\x00', 'wg0\x00', {}, {}, 0x6, 0x7f, 0x4}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x2, 0x5}, {0x2, 0x4, 0x4}}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x48000000, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@empty, @private0, [0xff, 0x0, 0xffffff00, 0xffffffff], [0xffffff00, 0xffffff, 0xff, 0xffffffff], 'geneve0\x00', 'xfrm0\x00', {0xff}, {}, 0x3a, 0x5, 0x0, 0x8}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x1b}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @private0, [0xff, 0xffffffff, 0x7f7fff00, 0xffffffff], [0xff000000, 0xcf16d9bfdc28978c, 0x0, 0xffffffff], 'veth0\x00', 'dvmrp1\x00', {0xff}, {}, 0x2c, 0x0, 0x6, 0x8}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0xfd}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x578)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f00000017c0)='./file1\x00', 0x0, &(0x7f0000000140)={[{@nouid32}, {@user_xattr}, {@jqfmt_vfsold}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x40}}]}, 0x1, 0xb8b, &(0x7f0000002080)="$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")
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0xd, @remote}, {0x2, 0x4e22, @remote}, {0x2, 0x0, @loopback}, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x26})
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r2)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
io_submit(0x0, 0x0, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000900)=ANY=[@ANYBLOB="400100001a000100feffffff00010000ac1e0101000000000000000000000000ac1414bb000000000000000000000000000107174e2300050a0000203a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc02000000000000000000000000000108000000000000009201000000000010a39b000000000000ffff0000000000001c250800000000000520000000000000fcffffffffffffff0400000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffefffffffc030000000000007d00000005350000020001002000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001d00"], 0x140}}, 0x844)
io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f0000000040)={&(0x7f0000002000)={[{0x0, 0x0, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r7, 0x6, 0xc, 0x0, &(0x7f0000000100))
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
io_uring_enter(0xffffffffffffffff, 0x3516, 0x3e000000, 0x0, 0x0, 0x0)

4.70258627s ago: executing program 1 (id=730):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto, @typedef={0x0, 0x0, 0x0, 0x10, 0x4}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20)

4.228470352s ago: executing program 1 (id=731):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000280)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0xfc, 0x8, 0xfffff00c}, {0x6, 0xb8, 0x2, 0xffff}]}, 0x10)
r1 = fsopen(0x0, 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0)
r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc)
r6 = add_key(&(0x7f0000000080)='rxrpc\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r5)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xd40bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x1ff, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xe, 0xffffffffffffffff, 0xa)
connect$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0xe, 0x29, @multicast}, 0x10)
keyctl$invalidate(0x15, r6)
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='nodots,allow_utime=000000000034,usefree,check=strict,dots,\x00'/70], 0x1, 0x1f8, &(0x7f0000000580)="$eJzs2j1rW1cYB/BzZRe/4ZdS2mIvPbQd2uVSeywdbIoNpYKW1iq0heJrLLdCqmR0NUilg+ZO/QiZQ8ZsgeAv4O+QIZsJOJk85YZEid9whiTIMvj3W+7D/XO55+HA4RnO4Tf//13fzdPdrBNKSRJKq6EfjpOwEErhlX748vOvH//386+/fb9WLq//FOPG2ubySoxx7pP7v/9759P9zswvd+fuTYSDhT8Oj1YeHnx0sHj4dPOvWh5reWy2OjGL261WJ9tuVONOLa+nMf7YqGZ5NdaaebV9Lt8ttfb2ejFr7sxO77WreR6zZi/Wq73YacVOuxezP7NaM6ZpGmenA++icvu4KMJR8d5WKIpi6laY2Q+zD8J8SN6PyQeryYdbycf9ZPGoKOZHvVSGwv7fbGcO9ckQHvW7lW5l8BzkG9+V17+KLyycfvWk262MneTLgzyezyfC9Mt85dJ8Mnzx2SB/nn37Q/lCvhR2ht8+AMCNk8YTl853afq6fFCdmQ8vzG/jYWn8ytrgLeW9f+pZo1FtKxSKa1dMXuG/JkIIp29CKMZGfToxbKe7P+qVAAAAAAAAAAAA8CaGf69watQtAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA19yzAAAA///MEHW3")
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYRES8=r5, @ANYRES64=0x0, @ANYRESOCT=r4, @ANYBLOB="675da369860b91b8bdf6e301d593a0e1da0e205b724e"], 0x4, 0x263, &(0x7f0000000880)="$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")
rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000001900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
syz_emit_ethernet(0x86, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb080045"], 0x0)

4.16015301s ago: executing program 0 (id=732):
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x10000, &(0x7f0000000200)=ANY=[@ANYBLOB='nodots,fmask=00000000000000000006675,dots,uid=', @ANYRESHEX=0xee00, @ANYBLOB=',nodots,nodots,nfs=stale_rw,nodots,dots,nodots,nodots,check=relaxed,fmask=00000000000000000177777,gid=', @ANYRESHEX=0xee00, @ANYBLOB=',allow_utime=00000000000000000000011,tz=UTC,nodots,nodots,dots,umask=p0000000000000000076645,nodots,nodots,nfs=stale_rw,nocase,\x00'], 0x1, 0x1f5, &(0x7f0000000600)="$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")

4.011589022s ago: executing program 3 (id=733):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)

3.899692072s ago: executing program 0 (id=734):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f00000004c0)={[{@dioread_lock}, {@noblock_validity}, {@abort}, {@grpquota}, {@stripe={'stripe', 0x3d, 0x1f5}}, {@grpjquota, 0x2e}, {@barrier}, {@nolazytime}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4aa, &(0x7f0000000c00)="$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")

3.898856021s ago: executing program 4 (id=735):
r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0x8e382)
ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000004c0)={0x0, {}, 0x0, {}, 0x8f, 0x5, 0x0, 0xd, "b3da395cc1eb051e99086eb412b24aa21ae636f31ecac2633f8aa6b4577493ab4f86a46336d4f8a13621d4684d13f27ec54f52f4abbd7f7a3a62f434b03903d2", "c5bc3e1492333a99dced1b33b04e933806647aa9c61c0b61c380f3a94047cf4d", [0x547]})
sendfile(r0, r0, 0x0, 0x24002de8)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x2, 0x6, 0x518, 0x0, 0xe0, 0x1b0, 0x378, 0x2a8, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe0, 0x0, {0x7a00000010000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x12, 0x1}, {0xffffffffffffffff, 0x5, 0xc}, {0xffffffffffffffff, 0x4}, 0x6, 0x7ff}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0xa}, [0x0, 0xffffffff, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff], 'macvlan0\x00', 'wg0\x00', {}, {}, 0x6, 0x7f, 0x4}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x2, 0x5}, {0x2, 0x4, 0x4}}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x48000000, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@empty, @private0, [0xff, 0x0, 0xffffff00, 0xffffffff], [0xffffff00, 0xffffff, 0xff, 0xffffffff], 'geneve0\x00', 'xfrm0\x00', {0xff}, {}, 0x3a, 0x5, 0x0, 0x8}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x1b}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @private0, [0xff, 0xffffffff, 0x7f7fff00, 0xffffffff], [0xff000000, 0xcf16d9bfdc28978c, 0x0, 0xffffffff], 'veth0\x00', 'dvmrp1\x00', {0xff}, {}, 0x2c, 0x0, 0x6, 0x8}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0xfd}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x578)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f00000017c0)='./file1\x00', 0x0, &(0x7f0000000140)={[{@nouid32}, {@user_xattr}, {@jqfmt_vfsold}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x40}}]}, 0x1, 0xb8b, &(0x7f0000002080)="$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")
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0xd, @remote}, {0x2, 0x4e22, @remote}, {0x2, 0x0, @loopback}, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x26})
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}, {0x2, 0x0, @broadcast}, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1})
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
fsetxattr$system_posix_acl(r4, &(0x7f0000000b40)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYRES16=r4, @ANYRES32=0x0, @ANYRESOCT=r1, @ANYRES32=0x0, @ANYBLOB="02000500", @ANYRES32=r0, @ANYBLOB="0400eed30000000008000200", @ANYRES32=0x0, @ANYBLOB="f4000404", @ANYRES32=0xee00, @ANYBLOB="10000000000000002000000000000000"], 0x4c, 0x1)
sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
io_submit(0x0, 0x0, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000900)=ANY=[@ANYBLOB="400100001a000100feffffff00010000ac1e0101000000000000000000000000ac1414bb000000000000000000000000000107174e2300050a0000203a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc02000000000000000000000000000108000000000000009201000000000010a39b000000000000ffff0000000000001c250800000000000520000000000000fcffffffffffffff0400000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffefffffffc030000000000007d00000005350000020001002000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001d00"], 0x140}}, 0x844)
socket$caif_stream(0x25, 0x1, 0x1)
r7 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x4885, 0x100, 0x3, 0x1d}, &(0x7f00000000c0)=<r8=>0x0, &(0x7f0000000600))
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r9, 0x6, 0xc, 0x0, &(0x7f0000000100))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
io_uring_enter(r7, 0x3516, 0x3e000000, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a3000000000e4000000160a01000000000000000000010000010900010073797a30000000000900020073797a3000000000b80003800800014000000000a400038014000100776c616e3000000000000000000000001400010076657468305f746f5f62617461647600140001006d6163766c616e3100000000000000001400010076657468310000000000000000000000140001006772653000000000000000000000000014000100776c616e3100000000000000000000009400010076657468315f766972745f77696669001400010076657468305f746f5f626f6e6400000008000240000000064c020000180a0101000b000000000000010000000900010073797a3000000000e800038008000140000000000000014000000000cc0003801400010069703665727370616e3000000000000014000100776732000000000000000000000000001400010076657468305f6d61637674617000000014000100626f6e645f736c6176655f310000000014000100626f6e645f736c6176655f300000000014000100636169663000000000000000000000001400010070696d726567300000000000000000001400010070696d726567310000000000000000001400010076657468315f746f5f7465616d000000140001007465616d5f736c6176655f300000000008000140000000200900020073797a30000000001001038008000140000008"], 0x378}}, 0x0)

3.763424387s ago: executing program 2 (id=736):
r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0x8e382)
ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000004c0)={0x0, {}, 0x0, {}, 0x8f, 0x5, 0x0, 0xd, "b3da395cc1eb051e99086eb412b24aa21ae636f31ecac2633f8aa6b4577493ab4f86a46336d4f8a13621d4684d13f27ec54f52f4abbd7f7a3a62f434b03903d2", "c5bc3e1492333a99dced1b33b04e933806647aa9c61c0b61c380f3a94047cf4d", [0x547]})
sendfile(r0, r0, 0x0, 0x24002de8)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x2, 0x6, 0x518, 0x0, 0xe0, 0x1b0, 0x378, 0x2a8, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe0, 0x0, {0x7a00000010000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x12, 0x1}, {0xffffffffffffffff, 0x5, 0xc}, {0xffffffffffffffff, 0x4}, 0x6, 0x7ff}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0xa}, [0x0, 0xffffffff, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff], 'macvlan0\x00', 'wg0\x00', {}, {}, 0x6, 0x7f, 0x4}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x2, 0x5}, {0x2, 0x4, 0x4}}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x48000000, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@empty, @private0, [0xff, 0x0, 0xffffff00, 0xffffffff], [0xffffff00, 0xffffff, 0xff, 0xffffffff], 'geneve0\x00', 'xfrm0\x00', {0xff}, {}, 0x3a, 0x5, 0x0, 0x8}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x1b}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @private0, [0xff, 0xffffffff, 0x7f7fff00, 0xffffffff], [0xff000000, 0xcf16d9bfdc28978c, 0x0, 0xffffffff], 'veth0\x00', 'dvmrp1\x00', {0xff}, {}, 0x2c, 0x0, 0x6, 0x8}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0xfd}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x578)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f00000017c0)='./file1\x00', 0x0, &(0x7f0000000140)={[{@nouid32}, {@user_xattr}, {@jqfmt_vfsold}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x40}}]}, 0x1, 0xb8b, &(0x7f0000002080)="$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")
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0xd, @remote}, {0x2, 0x4e22, @remote}, {0x2, 0x0, @loopback}, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x26})
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}, {0x2, 0x0, @broadcast}, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1})
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
fsetxattr$system_posix_acl(r4, &(0x7f0000000b40)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYRES16=r4, @ANYRES32=0x0, @ANYRESOCT=r1, @ANYRES32=0x0, @ANYBLOB="02000500", @ANYRES32=r0, @ANYBLOB="0400eed30000000008000200", @ANYRES32=0x0, @ANYBLOB="f4000404", @ANYRES32=0xee00, @ANYBLOB="10000000000000002000000000000000"], 0x4c, 0x1)
sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
io_submit(0x0, 0x0, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000900)=ANY=[@ANYBLOB="400100001a000100feffffff00010000ac1e0101000000000000000000000000ac1414bb000000000000000000000000000107174e2300050a0000203a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc02000000000000000000000000000108000000000000009201000000000010a39b000000000000ffff0000000000001c250800000000000520000000000000fcffffffffffffff0400000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffefffffffc030000000000007d00000005350000020001002000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001d00"], 0x140}}, 0x844)
r7 = socket$caif_stream(0x25, 0x1, 0x1)
r8 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x4885, 0x100, 0x3, 0x1d}, &(0x7f00000000c0)=<r9=>0x0, &(0x7f0000000600)=<r10=>0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(r8, 0x16, &(0x7f0000000040)={&(0x7f0000002000)={[{0x0, 0x0, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1)
r11 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r11, 0x6, 0xc, 0x0, &(0x7f0000000100))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r9, r10, &(0x7f0000000b00)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r7, 0x0, 0x0, 0x0, 0x40002202, 0x1, {0x1}})
io_uring_enter(r8, 0x3516, 0x3e000000, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x378}}, 0x0)

3.704431486s ago: executing program 3 (id=737):
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000680)=ANY=[@ANYRES32=0x1, @ANYRES32, @ANYRES32], 0x20)

3.667600379s ago: executing program 3 (id=738):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0)
prlimit64(r0, 0xc, &(0x7f0000000180)={0x8, 0x6}, &(0x7f0000000f80))
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x24, 0x4, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8}]}, 0x24}}, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'})
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd708", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0xfe, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0xff}}]}}}]}, 0x48}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x242, &(0x7f0000000300)="$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")
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2901401, 0x0, 0x0, 0x0, &(0x7f000009de00))
rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00')
sendmsg$ETHTOOL_MSG_COALESCE_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="01cfb98940000000002513000000180001801400020073797a5f74756e"], 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x90)
socket$nl_xfrm(0x10, 0x3, 0x6)

3.299886551s ago: executing program 0 (id=739):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0})
acct(0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2)
r4 = bpf$ITER_CREATE(0xb, 0x0, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
setsockopt$sock_attach_bpf(r5, 0x10f, 0x8a, &(0x7f00000001c0)=r4, 0x4)
mbind(&(0x7f0000673000/0x1000)=nil, 0x1000, 0x3, &(0x7f00000009c0)=0x7, 0x3, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b5, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x8031, 0xffffffffffffffff, 0xc6140000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9)
set_mempolicy(0x0, 0x0, 0x1)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0xfffffffffffffffe, 0x0)
r7 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})

2.735165937s ago: executing program 3 (id=740):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0)
prlimit64(r0, 0xc, &(0x7f0000000180)={0x8, 0x6}, &(0x7f0000000f80))
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x24, 0x4, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8}]}, 0x24}}, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'})
syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd708", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x96}]}}}}}}}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x242, &(0x7f0000000300)="$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")
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2901401, 0x0, 0x0, 0x0, &(0x7f000009de00))
rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00')
sendmsg$ETHTOOL_MSG_COALESCE_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="01cfb98940000000002513000000180001801400020073797a5f74756e"], 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x90)
socket$nl_xfrm(0x10, 0x3, 0x6)

2.552559843s ago: executing program 4 (id=741):
syz_read_part_table(0x1065, &(0x7f0000001080)="$eJzsz7FtwmAQBeCX/HGcdFaUJdJ5BTdpktZ7ZIRILMAGVBQgJqFjCpYAgYwpEAMAxfdVd6d3J124q6e0F90hmW2G4vkqlHVSkmm9K/Vp9LP/S/KfZNIN4Zfku0q6JvO31dfnx3nzt82ie03VVHkfL237MZ2Ukn55qz8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4JEdAwAA//80aQ4p")

2.031591346s ago: executing program 2 (id=742):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000540)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x19}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.832824539s ago: executing program 2 (id=743):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
inotify_init1(0x80000)
openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_lsm={0x1d, 0x5, &(0x7f0000000540)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}], &(0x7f0000000680)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f00000007c0)=[r1, r1, 0xffffffffffffffff], &(0x7f00000008c0)=[{0x4, 0x5, 0x4, 0x5}], 0x10, 0x7d4a}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="740000002d0001002abd70000000000008000000", @ANYRES32, @ANYBLOB], 0x74}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000f00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x2e}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x200400, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

1.641161033s ago: executing program 3 (id=744):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000280)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0xfc, 0x8, 0xfffff00c}, {0x6, 0xb8, 0x2, 0xffff}]}, 0x10)
r1 = fsopen(0x0, 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0)
r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc)
r5 = add_key(&(0x7f0000000080)='rxrpc\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r4)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xd40bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x1ff, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xe, 0xffffffffffffffff, 0xa)
connect$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0xe, 0x29, @multicast}, 0x10)
ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0)
keyctl$invalidate(0x15, r5)
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='nodots,allow_utime=000000000034,usefree,check=strict,dots,\x00'/70], 0x1, 0x1f8, &(0x7f0000000580)="$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")
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYRES8=r4, @ANYRES64=0x0, @ANYRESOCT=r3, @ANYBLOB="675da369860b91b8bdf6e301d593a0e1da0e205b724e"], 0x4, 0x263, &(0x7f0000000880)="$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")
rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000001900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r6 = inotify_init()
inotify_add_watch(r6, &(0x7f0000000000)='./file0\x00', 0x4000080a)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
open(&(0x7f0000000000)='./file0\x00', 0xc0, 0xa0)
syz_emit_ethernet(0x86, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb080045"], 0x0)

1.588887724s ago: executing program 2 (id=745):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f0000000440)="7f", 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c)
rmdir(&(0x7f0000000080)='./cgroup/../file0\x00')
perf_event_open(&(0x7f00000002c0)={0x4, 0x80, 0xe5, 0x0, 0x0, 0xfd, 0x0, 0x5, 0x4020, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={&(0x7f0000000040), 0xc}, 0x4, 0x1, 0x10000, 0x2, 0x3, 0x80000001, 0x2, 0x0, 0x40, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xfffffffffffffffd)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f00000005c0)=0x474c, 0x4)
setsockopt$inet_int(r1, 0x0, 0x7, &(0x7f00000000c0)=0x2, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="010000000500000006000000ffff000005000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32], 0x50)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xe, 0x31, 0xffffffffffffffff, 0xf5b64000)
modify_ldt$write2(0x11, &(0x7f0000000200)={0x77b, 0x0, 0x0, 0x1}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x80008000, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_int(r1, 0x0, 0x14, &(0x7f0000000080)=0xcd, 0x4)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)
recvmmsg(r1, &(0x7f0000007c00)=[{{0x0, 0x0, 0x0}, 0xfffffffd}], 0x1, 0x45833af92e4a39fe, 0x0)
listen(0xffffffffffffffff, 0x0)
getpriority(0x2, 0x0)
r2 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0x80)
pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5405, 0x0, 0x4)
sendfile(r2, r2, 0x0, 0x7a680000)
sendmmsg$inet6(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)="534b0ac01bd0edcbe8a5dea438bc", 0xe}], 0x1}}], 0x1, 0x4000000)

1.377955075s ago: executing program 1 (id=746):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0)
prlimit64(r0, 0xc, &(0x7f0000000180)={0x8, 0x6}, &(0x7f0000000f80))
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x24, 0x4, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8}]}, 0x24}}, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'})
syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd708", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x96}]}}}}}}}}, 0x0)
sendmsg$nl_route(r4, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x242, &(0x7f0000000300)="$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")
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2901401, 0x0, 0x0, 0x0, &(0x7f000009de00))
rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00')
sendmsg$ETHTOOL_MSG_COALESCE_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="01cfb98940000000002513000000180001801400020073797a5f74756e"], 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x90)
socket$nl_xfrm(0x10, 0x3, 0x6)

1.370049404s ago: executing program 4 (id=747):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = inotify_init1(0x80000)
inotify_add_watch(r1, &(0x7f0000000580)='./cgroup\x00', 0x60000726)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_lsm={0x1d, 0x5, &(0x7f0000000540)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}], &(0x7f0000000680)='GPL\x00', 0x5, 0xb1, &(0x7f00000006c0)=""/177, 0x0, 0x15, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x5, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f00000007c0)=[r3, r3, 0xffffffffffffffff], &(0x7f00000008c0)=[{0x4, 0x5, 0x4, 0x5}], 0x10, 0x7d4a}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000f00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x2e}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff)
syz_clone(0x200400, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
open_by_handle_at(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000020000000a000000000000170900000000006a139a4e728224f96dcf79147b475be6b046b33bf0852c"], 0x4240)
r6 = socket$l2tp6(0xa, 0x2, 0x73)
sendto$inet6(r6, &(0x7f0000000100)="8cae17ca2109f8004225f063d7fc4084e4349687139cfaaf473112273e589692dde5b3f757e42ac4ea12ac6f3311f474986e044b3ff4bca449ab88b28faea33c2f93f6fc1353ffbc66fef9d511de2fbcb965ac59b0976c2d25b1341f764068a1e83680ae97e64a5bbbba936f03ee384ecc53d4d117359f22745b3ed75db9efd4bf2d60da9f1fd8b1016f6c82e243992d7eb1964463721a9a7096d909472482707e423e6f267704e5d83e6305d28c51e564d94f43c6ffae8058bf1d0df729762bdd801e4359f75faa189113adc55f9bad8c340b02bb1b79ed32703d7adb6a705b9ec025d1a1f716434ced56ab5b", 0xed, 0x20000000, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a030000000000000000000009"], 0x0, 0x56}, 0x28)

590.62787ms ago: executing program 0 (id=748):
mq_open(0x0, 0x2, 0x2, 0x0)

543.794091ms ago: executing program 4 (id=749):
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x0, 0xa, 0xfffffffb, 0x14, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x0, 0x1}, 0x48)

496.339122ms ago: executing program 0 (id=750):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="6c0100001000130700000000fcdbdf25640101010000000000000000000000007f00000100000000000000000000000000000020001d00"/64, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffff7f000001000000fe320000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff080000000000000001000000000000000900000000000000ffffff7f0000000042050000000000003b00000000000000fdffffffffffff7ffcffffffffffffffe2eb0000000000000200000000000000010000002cbd7000003500000a00040050000000000000001c00040007004e244e200000ac14142e00000000000000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000060"], 0x16c}, 0x1, 0x0, 0x0, 0x4000880}, 0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={'tunl0\x00', {0x2, 0x4e23, @broadcast}})
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x25, 0x359, &(0x7f0000000bc0)="$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")
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0xfffff801, @ipv4={'\x00', '\xff\xff', @remote}, 0x9}, 0x1c)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
read(r3, &(0x7f0000000440)=""/138, 0x8a)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), r3)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r5=>0x0})
sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="11072abd7000ffdbdf250500000008000300", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}})
ioctl$FS_IOC_FIEMAP(r6, 0xc020660b, &(0x7f0000000340)=ANY=[@ANYBLOB="08000000000000150800000000a70900060000f4035800000000000000000000241be30eec6fcae99a1b5de4cbdfffc6e155a7b7cb7c284e04054f968239e976b791ae9acce5"])
fsconfig$FSCONFIG_SET_FLAG(r6, 0x0, &(0x7f00000001c0)='async\x00', 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
socket(0x25, 0x3, 0x7)

461.318486ms ago: executing program 1 (id=751):
r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0x8e382)
ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000004c0)={0x0, {}, 0x0, {}, 0x8f, 0x5, 0x0, 0xd, "b3da395cc1eb051e99086eb412b24aa21ae636f31ecac2633f8aa6b4577493ab4f86a46336d4f8a13621d4684d13f27ec54f52f4abbd7f7a3a62f434b03903d2", "c5bc3e1492333a99dced1b33b04e933806647aa9c61c0b61c380f3a94047cf4d", [0x547]})
sendfile(r0, r0, 0x0, 0x24002de8)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x2, 0x6, 0x518, 0x0, 0xe0, 0x1b0, 0x378, 0x2a8, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe0, 0x0, {0x7a00000010000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x12, 0x1}, {0xffffffffffffffff, 0x5, 0xc}, {0xffffffffffffffff, 0x4}, 0x6, 0x7ff}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0xa}, [0x0, 0xffffffff, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff], 'macvlan0\x00', 'wg0\x00', {}, {}, 0x6, 0x7f, 0x4}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x2, 0x5}, {0x2, 0x4, 0x4}}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x48000000, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@empty, @private0, [0xff, 0x0, 0xffffff00, 0xffffffff], [0xffffff00, 0xffffff, 0xff, 0xffffffff], 'geneve0\x00', 'xfrm0\x00', {0xff}, {}, 0x3a, 0x5, 0x0, 0x8}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x1b}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @private0, [0xff, 0xffffffff, 0x7f7fff00, 0xffffffff], [0xff000000, 0xcf16d9bfdc28978c, 0x0, 0xffffffff], 'veth0\x00', 'dvmrp1\x00', {0xff}, {}, 0x2c, 0x0, 0x6, 0x8}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0xfd}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x578)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f00000017c0)='./file1\x00', 0x0, &(0x7f0000000140)={[{@nouid32}, {@user_xattr}, {@jqfmt_vfsold}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x40}}]}, 0x1, 0xb8b, &(0x7f0000002080)="$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")
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0xd, @remote}, {0x2, 0x4e22, @remote}, {0x2, 0x0, @loopback}, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x26})
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}, {0x2, 0x0, @broadcast}, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1})
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
fsetxattr$system_posix_acl(r4, &(0x7f0000000b40)='system.posix_acl_access\x00', &(0x7f0000000e40)=ANY=[@ANYRES16=r4, @ANYRES32=0x0, @ANYRESOCT=r1, @ANYRES32=0x0, @ANYBLOB="02000500", @ANYRES32=r0, @ANYBLOB="0400eed30000000008000200", @ANYRES32=0x0, @ANYBLOB="f4000404", @ANYRES32=0xee00, @ANYBLOB="10000000000000002000000000000000"], 0x4c, 0x1)
sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c00000020010000000000000000000000000002000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c61746500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000240009000f000000000000008100000000000000000000000001000000000000f1745a55f32469d7888c3fa9691f31e3f5c420fd65ddb457b5b01cc707ca440e1c4e4eab6d2966efd8aa964ca72e37b11e5de4cd9e6a6a0298cfcea1e074a28fc282dd668aefc3d2f808b9e6f3d61104f590cd4314d46254cb896dc9f02cf55f02dfa1ab868784992af560e91b0e5ec327450b6778372f10ec0a91295c1833aded4791dd5d2124b70e2fb9ae8274a0169ebe2532ee28400e87bf6a49f0546dbd3c8576f0ab"], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
io_submit(0x0, 0x0, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000900)=ANY=[@ANYBLOB="400100001a000100feffffff00010000ac1e0101000000000000000000000000ac1414bb000000000000000000000000000107174e2300050a0000203a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc02000000000000000000000000000108000000000000009201000000000010a39b000000000000ffff0000000000001c250800000000000520000000000000fcffffffffffffff0400000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffefffffffc030000000000007d00000005350000020001002000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001d00"], 0x140}}, 0x844)
r7 = socket$caif_stream(0x25, 0x1, 0x1)
r8 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x4885, 0x100, 0x3, 0x1d}, &(0x7f00000000c0)=<r9=>0x0, &(0x7f0000000600)=<r10=>0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(r8, 0x16, &(0x7f0000000040)={&(0x7f0000002000)={[{0x0, 0x0, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1)
r11 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r11, 0x6, 0xc, 0x0, &(0x7f0000000100))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r9, r10, &(0x7f0000000b00)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r7, 0x0, 0x0, 0x0, 0x40002202, 0x1, {0x1}})
io_uring_enter(r8, 0x3516, 0x3e000000, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x378}}, 0x0)

353.814036ms ago: executing program 2 (id=752):
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x0, 0x685e}, 0x102801, 0x9, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
modify_ldt$write2(0x11, &(0x7f00000001c0)={0x4, 0xffffffffdfffefff, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x10)

0s ago: executing program 2 (id=753):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = inotify_init1(0x80000)
inotify_add_watch(r1, &(0x7f0000000580)='./cgroup\x00', 0x60000726)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x1}, 0x50)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_lsm={0x1d, 0x0, 0x0, &(0x7f0000000680)='GPL\x00', 0x5, 0xb1, &(0x7f00000006c0)=""/177, 0x0, 0x15, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x5, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f00000007c0)=[r2, r2, 0xffffffffffffffff], &(0x7f00000008c0)=[{0x4, 0x5, 0x4, 0x5}], 0x10, 0x7d4a}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="740000002d0001002abd70000000000008000000", @ANYRES32, @ANYBLOB], 0x74}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000f00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x2e}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4)
syz_clone(0x200400, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000020000000a000000000000170900000000006a139a4e728224f96dcf79147b475be6b046b33bf0852c"], 0x4240)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="8cae17ca2109f8004225f063d7fc4084e4349687139cfaaf473112273e589692dde5b3f757e42ac4ea12ac6f3311f474986e044b3ff4bca449ab88b28faea33c2f93f6fc1353ffbc66fef9d511de2fbcb965ac59b0976c2d25b1341f764068a1e83680ae97e64a5bbbba936f03ee384ecc53d4d117359f22745b3ed75db9efd4bf2d60da9f1fd8b1016f6c82e243992d7eb1964463721a9a7096d909472482707e423e6f267704e5d83e6305d28c51e564d94f43c6ffae8058bf1d0df729762bdd801e4359f75faa189113adc55f9bad8c340b02bb1b79ed32703d7adb6a705b9ec025d1a1f716434ced56ab5b", 0xed, 0x20000000, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a030000000000000000000009"], 0x0, 0x56}, 0x28)

kernel console output (not intermixed with test programs):

.460404][ T4684] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  123.556296][ T4684] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  123.569693][ T4680] netlink: 40 bytes leftover after parsing attributes in process `syz.3.268'.
[  123.747565][ T4690] __nla_validate_parse: 1 callbacks suppressed
[  123.747584][ T4690] netlink: 40 bytes leftover after parsing attributes in process `syz.2.269'.
[  123.786836][ T4690] netlink: 260 bytes leftover after parsing attributes in process `syz.2.269'.
[  123.796617][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.856595][ T4693] set_capacity_and_notify: 1 callbacks suppressed
[  123.856611][ T4693] loop3: detected capacity change from 0 to 736
[  124.110033][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.972894][ T4711] loop3: detected capacity change from 0 to 128
[  125.311664][   T28] kauditd_printk_skb: 7 callbacks suppressed
[  125.311679][   T28] audit: type=1400 audit(1773246043.657:333): avc:  denied  { unmount } for  pid=3316 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1
[  125.602955][ T4717] loop1: detected capacity change from 0 to 128
[  125.725531][ T4722] loop3: detected capacity change from 0 to 512
[  125.867389][ T4722] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  125.903272][ T4722] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  125.970016][ T4722] netlink: 4 bytes leftover after parsing attributes in process `syz.3.278'.
[  126.042908][ T4730] loop2: detected capacity change from 0 to 256
[  126.118992][ T4722] EXT4-fs (loop3): shut down requested (0)
[  126.139773][ T4730] FAT-fs (loop2): Directory bread(block 64) failed
[  126.151231][ T4722] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop3 ino=15
[  126.163434][   T28] audit: type=1400 audit(1773246044.507:334): avc:  denied  { read } for  pid=2983 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  126.172115][ T4730] FAT-fs (loop2): Directory bread(block 65) failed
[  126.201022][ T4722] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop3 ino=15
[  126.205316][ T4733] SET target dimension over the limit!
[  126.221301][   T28] audit: type=1400 audit(1773246044.507:335): avc:  denied  { search } for  pid=2983 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  126.227859][ T4722] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop3 ino=15
[  126.289395][ T4730] FAT-fs (loop2): Directory bread(block 66) failed
[  126.326844][   T28] audit: type=1400 audit(1773246044.507:336): avc:  denied  { search } for  pid=2983 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  126.337867][ T4730] FAT-fs (loop2): Directory bread(block 67) failed
[  126.367136][   T28] audit: type=1400 audit(1773246044.507:337): avc:  denied  { add_name } for  pid=2983 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  126.394005][ T4733] loop0: detected capacity change from 0 to 4096
[  126.433889][ T4730] FAT-fs (loop2): Directory bread(block 68) failed
[  126.446989][ T4733] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  126.463631][ T4736] SET target dimension over the limit!
[  126.471643][ T4734] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  126.484643][ T4734] loop4: detected capacity change from 0 to 512
[  126.545085][ T4730] FAT-fs (loop2): Directory bread(block 69) failed
[  126.557403][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  126.628716][ T4736] loop1: detected capacity change from 0 to 4096
[  126.638918][ T4736] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  126.656901][ T4730] FAT-fs (loop2): Directory bread(block 70) failed
[  126.663680][ T4730] FAT-fs (loop2): Directory bread(block 71) failed
[  126.669541][   T28] audit: type=1400 audit(1773246044.507:338): avc:  denied  { create } for  pid=2983 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  126.688349][ T4730] FAT-fs (loop2): Directory bread(block 72) failed
[  126.699564][ T4730] FAT-fs (loop2): Directory bread(block 73) failed
[  126.699880][ T4733] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  126.756793][   T28] audit: type=1400 audit(1773246044.507:339): avc:  denied  { append open } for  pid=2983 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  126.757145][ T4736] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  126.793513][   T28] audit: type=1400 audit(1773246044.507:340): avc:  denied  { getattr } for  pid=2983 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  126.826815][   T28] audit: type=1400 audit(1773246044.567:341): avc:  denied  { write } for  pid=4721 comm="syz.3.278" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  126.956817][   T28] audit: type=1400 audit(1773246044.677:342): avc:  denied  { setattr } for  pid=4721 comm="syz.3.278" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  127.083710][ T4744] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  127.100859][ T4744] loop3: detected capacity change from 0 to 512
[  127.279748][ T4746] netlink: 40 bytes leftover after parsing attributes in process `syz.1.282'.
[  127.293903][ T4747] netlink: 40 bytes leftover after parsing attributes in process `syz.0.281'.
[  127.461271][ T4746] netlink: 260 bytes leftover after parsing attributes in process `syz.1.282'.
[  127.503896][ T4747] netlink: 260 bytes leftover after parsing attributes in process `syz.0.281'.
[  127.554528][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.587017][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.935478][ T4755] loop3: detected capacity change from 0 to 128
[  129.377835][ T4767] loop4: detected capacity change from 0 to 128
[  131.355681][ T4786] loop1: detected capacity change from 0 to 128
[  131.394755][ T4788] SET target dimension over the limit!
[  131.473774][ T4788] loop0: detected capacity change from 0 to 4096
[  131.501549][ T4788] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  131.608078][ T4788] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  131.752662][ T4788] netlink: 40 bytes leftover after parsing attributes in process `syz.0.293'.
[  131.817179][ T4788] netlink: 260 bytes leftover after parsing attributes in process `syz.0.293'.
[  131.891665][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.255975][ T4792] SET target dimension over the limit!
[  132.480755][ T4792] loop3: detected capacity change from 0 to 4096
[  132.561420][ T4798] loop4: detected capacity change from 0 to 128
[  132.713906][ T4792] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  132.766394][ T4796] loop0: detected capacity change from 0 to 1024
[  132.986821][ T4792] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  133.009233][ T4796] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback.
[  133.041996][ T4796] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  133.099457][ T4796] EXT4-fs (loop0): shut down requested (0)
[  133.384083][ T4804] netlink: 40 bytes leftover after parsing attributes in process `syz.3.295'.
[  133.405971][ T4804] netlink: 260 bytes leftover after parsing attributes in process `syz.3.295'.
[  133.490792][ T4811] lo speed is unknown, defaulting to 1000
[  133.593289][ T4813] loop1: detected capacity change from 0 to 128
[  134.389347][ T4817] loop2: detected capacity change from 0 to 128
[  134.744489][ T4796] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop0 ino=15
[  134.786484][ T4796] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop0 ino=15
[  134.823993][ T4818] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop0 ino=15
[  134.833838][   T28] kauditd_printk_skb: 3 callbacks suppressed
[  134.833852][   T28] audit: type=1400 audit(1773246053.187:346): avc:  denied  { read } for  pid=4793 comm="syz.0.294" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  134.836425][ T4796] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop0 ino=15
[  134.840385][ T4818] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop0 ino=15
[  134.969152][   T28] audit: type=1400 audit(1773246053.197:347): avc:  denied  { open } for  pid=4793 comm="syz.0.294" path="/60/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  135.075130][ T4822] netlink: 80 bytes leftover after parsing attributes in process `syz.4.302'.
[  135.094040][ T4824] loop2: detected capacity change from 0 to 128
[  135.108629][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.130445][   T28] audit: type=1400 audit(1773246054.477:348): avc:  denied  { ioctl } for  pid=4823 comm="syz.2.301" path="socket:[8101]" dev="sockfs" ino=8101 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  137.167823][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  137.247086][ T4838] netlink: 14 bytes leftover after parsing attributes in process `syz.0.304'.
[  138.318113][ T4841] loop3: detected capacity change from 0 to 128
[  138.636968][ T4848] SET target dimension over the limit!
[  138.662120][ T4850] loop3: detected capacity change from 0 to 256
[  138.696542][ T4848] loop1: detected capacity change from 0 to 4096
[  138.719337][ T4850] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  138.755206][ T4848] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  138.780214][ T4848] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  138.815488][ T4850] netlink: 'syz.3.308': attribute type 39 has an invalid length.
[  138.863458][ T4848] netlink: 40 bytes leftover after parsing attributes in process `syz.1.306'.
[  138.873750][ T4848] netlink: 260 bytes leftover after parsing attributes in process `syz.1.306'.
[  138.981335][ T4858] FAT-fs (loop3): error, invalid FAT chain (i_pos 196, last_block 8200)
[  138.997489][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.049339][ T4858] FAT-fs (loop3): Filesystem has been set read-only
[  139.146809][   T28] audit: type=1400 audit(1773246057.487:349): avc:  denied  { mount } for  pid=4859 comm="syz.1.309" name="/" dev="configfs" ino=1061 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  139.216070][   T28] audit: type=1400 audit(1773246057.527:350): avc:  denied  { search } for  pid=4859 comm="syz.1.309" name="/" dev="configfs" ino=1061 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  139.296806][   T28] audit: type=1400 audit(1773246057.527:351): avc:  denied  { setattr } for  pid=4859 comm="syz.1.309" name="/" dev="configfs" ino=1061 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  139.460837][ T4850] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2057)
[  139.566278][ T4870] loop0: detected capacity change from 0 to 128
[  140.277623][ T4875] loop3: detected capacity change from 0 to 128
[  140.343822][ T4871] SET target dimension over the limit!
[  140.679251][ T4881] netlink: 80 bytes leftover after parsing attributes in process `syz.3.315'.
[  140.693311][ T4880] loop0: detected capacity change from 0 to 512
[  140.727682][ T4876] loop4: detected capacity change from 0 to 4096
[  140.753434][ T4880] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  140.786837][ T4880] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it
[  140.819183][ T4880] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.314: Corrupt directory, running e2fsck is recommended
[  140.849309][ T4884] xt_policy: output policy not valid in PREROUTING and INPUT
[  140.886824][ T4876] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  140.979113][ T4880] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117
[  140.987450][ T4880] EXT4-fs error (device loop0): ext4_iget_extra_inode:5025: inode #15: comm syz.0.314: corrupted in-inode xattr: e_name out of bounds
[  141.027570][ T4876] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  141.056926][ T4880] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  141.062578][ T4880] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.314: couldn't read orphan inode 15 (err -117)
[  141.071788][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  141.071814][    C0] EXT4-fs (loop0): initial error at time 1773246059: ext4_iget_extra_inode:5025: inode 15
[  141.071864][    C0] EXT4-fs (loop0): last error at time 1773246059: ext4_iget_extra_inode:5025: inode 15
[  141.244593][ T4880] loop0: lost filesystem error report for type 5 error -117
[  141.297722][ T4880] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  141.640651][ T4887] bridge0: port 2(bridge_slave_1) entered disabled state
[  141.648092][ T4887] bridge0: port 1(bridge_slave_0) entered disabled state
[  141.659761][ T4900] netlink: 40 bytes leftover after parsing attributes in process `syz.4.312'.
[  141.821734][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  141.842612][ T4900] netlink: 260 bytes leftover after parsing attributes in process `syz.4.312'.
[  141.908912][ T4887] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  141.944249][ T4887] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  142.125833][ T4904] loop0: detected capacity change from 0 to 128
[  142.220902][ T4906] SET target dimension over the limit!
[  142.488035][ T4906] loop3: detected capacity change from 0 to 4096
[  142.574167][ T4906] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  142.613891][ T4906] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  142.627042][ T2142] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  142.637131][ T2142] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  142.690013][ T4893] lo speed is unknown, defaulting to 1000
[  142.717509][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  142.726675][ T4907] netlink: 40 bytes leftover after parsing attributes in process `syz.3.320'.
[  142.735732][ T4907] netlink: 260 bytes leftover after parsing attributes in process `syz.3.320'.
[  142.737141][   T36] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  142.777818][  T116] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  142.892026][ T4912] netlink: 14 bytes leftover after parsing attributes in process `syz.4.321'.
[  143.043559][   T28] audit: type=1400 audit(1773246061.387:352): avc:  denied  { bind } for  pid=4891 comm="syz.2.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  143.077274][   T28] audit: type=1400 audit(1773246061.427:353): avc:  denied  { listen } for  pid=4891 comm="syz.2.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  143.137251][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  143.148712][ T4893] loop2: detected capacity change from 0 to 1024
[  143.258216][ T4921] netlink: 80 bytes leftover after parsing attributes in process `syz.3.323'.
[  143.286142][ T4893] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  143.310593][   T28] audit: type=1400 audit(1773246061.657:354): avc:  denied  { watch watch_reads } for  pid=4891 comm="syz.2.318" path="/63/file1" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  143.469519][ T4894] Illegal XDP return value 479690752 on prog  (id 155) dev N/A, expect packet loss!
[  143.543310][   T28] audit: type=1400 audit(1773246061.817:355): avc:  denied  { read } for  pid=4891 comm="syz.2.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  143.789496][ T4930] SET target dimension over the limit!
[  143.814017][ T4931] loop3: detected capacity change from 0 to 128
[  143.917269][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  144.150485][ T4935] netlink: 80 bytes leftover after parsing attributes in process `syz.1.327'.
[  144.196051][ T4933] loop0: detected capacity change from 0 to 4096
[  144.253106][ T4933] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  144.269441][ T4933] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  144.538212][ T4943] loop2: detected capacity change from 0 to 128
[  144.979423][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  145.015669][ T4946] netlink: 'syz.3.329': attribute type 2 has an invalid length.
[  145.036284][ T4946] netlink: 14 bytes leftover after parsing attributes in process `syz.3.329'.
[  145.106055][ T4948] loop3: detected capacity change from 0 to 128
[  145.213697][ T4951] SET target dimension over the limit!
[  145.242483][ T4953] loop2: detected capacity change from 0 to 512
[  145.260712][ T4953] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  145.282400][ T4951] loop4: detected capacity change from 0 to 4096
[  145.318625][ T4953] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it
[  145.342256][ T4951] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  145.374413][ T4953] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.330: Corrupt directory, running e2fsck is recommended
[  145.401220][ T4951] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  145.451039][ T4953] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117
[  145.488630][ T4953] EXT4-fs error (device loop2): ext4_iget_extra_inode:5025: inode #15: comm syz.2.330: corrupted in-inode xattr: e_name out of bounds
[  145.533151][ T4959] siw: device registration error -23
[  145.539983][ T4959] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  145.556572][ T4959] loop0: detected capacity change from 0 to 512
[  145.716021][ T4960] netlink: 40 bytes leftover after parsing attributes in process `syz.4.331'.
[  145.733323][ T4953] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  145.733758][ T4953] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.330: couldn't read orphan inode 15 (err -117)
[  145.743303][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  145.743326][    C1] EXT4-fs (loop2): initial error at time 1773246064: ext4_iget_extra_inode:5025: inode 15
[  145.743381][    C1] EXT4-fs (loop2): last error at time 1773246064: ext4_iget_extra_inode:5025: inode 15
[  145.901961][ T4960] netlink: 260 bytes leftover after parsing attributes in process `syz.4.331'.
[  145.954140][ T4953] loop2: lost filesystem error report for type 5 error -117
[  145.960920][ T4953] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  146.110697][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.138583][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.221259][ T4966] netlink: 80 bytes leftover after parsing attributes in process `syz.4.334'.
[  146.279843][ T4967] loop3: detected capacity change from 0 to 128
[  147.005220][ T4978] loop3: detected capacity change from 0 to 4096
[  147.037496][   T28] audit: type=1400 audit(1773246065.377:356): avc:  denied  { name_bind } for  pid=4979 comm="syz.4.337" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[  147.183425][ T4978] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  147.216497][   T28] audit: type=1400 audit(1773246065.387:357): avc:  denied  { lock } for  pid=4979 comm="syz.4.337" path="socket:[9372]" dev="sockfs" ino=9372 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[  147.484035][   T28] audit: type=1400 audit(1773246065.387:358): avc:  denied  { create } for  pid=4979 comm="syz.4.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  147.531161][   T28] audit: type=1400 audit(1773246065.417:359): avc:  denied  { connect } for  pid=4979 comm="syz.4.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  147.777910][   T28] audit: type=1400 audit(1773246065.907:360): avc:  denied  { rename } for  pid=4977 comm="syz.3.336" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  147.942615][   T28] audit: type=1400 audit(1773246066.057:361): avc:  denied  { link } for  pid=4977 comm="syz.3.336" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  148.192976][ T4995] loop2: detected capacity change from 0 to 128
[  148.217682][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  148.984012][   T28] audit: type=1400 audit(1773246066.247:362): avc:  denied  { create } for  pid=4977 comm="syz.3.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  149.075118][ T4997] loop4: detected capacity change from 0 to 128
[  149.103080][   T28] audit: type=1400 audit(1773246066.357:363): avc:  denied  { create } for  pid=4977 comm="syz.3.336" name=747275737465642E20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  149.186523][ T4999] netlink: 80 bytes leftover after parsing attributes in process `syz.2.343'.
[  149.248675][ T5001] SET target dimension over the limit!
[  149.321229][ T5001] loop3: detected capacity change from 0 to 4096
[  149.374131][ T5001] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  149.478769][ T5005] SET target dimension over the limit!
[  149.507174][ T5001] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  149.601157][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.618215][ T5011] loop4: detected capacity change from 0 to 256
[  149.687526][ T5011] FAT-fs (loop4): Directory bread(block 64) failed
[  149.694306][ T5011] FAT-fs (loop4): Directory bread(block 65) failed
[  149.701181][ T5011] FAT-fs (loop4): Directory bread(block 66) failed
[  149.707883][ T5011] FAT-fs (loop4): Directory bread(block 67) failed
[  149.714479][ T5011] FAT-fs (loop4): Directory bread(block 68) failed
[  149.721337][ T5011] FAT-fs (loop4): Directory bread(block 69) failed
[  149.728280][ T5011] FAT-fs (loop4): Directory bread(block 70) failed
[  149.734947][ T5011] FAT-fs (loop4): Directory bread(block 71) failed
[  149.741676][ T5011] FAT-fs (loop4): Directory bread(block 72) failed
[  149.748318][ T5011] FAT-fs (loop4): Directory bread(block 73) failed
[  149.909137][ T5005] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  150.123723][ T5005] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  150.438784][ T5015] netlink: 40 bytes leftover after parsing attributes in process `syz.0.345'.
[  150.540409][ T5015] netlink: 260 bytes leftover after parsing attributes in process `syz.0.345'.
[  150.554907][ T5017] set_capacity_and_notify: 1 callbacks suppressed
[  150.554998][ T5017] loop3: detected capacity change from 0 to 512
[  150.600092][ T5017] ext4: Unknown parameter 'nouser_xattr'
[  150.634426][ T5017] loop3: detected capacity change from 0 to 512
[  150.674905][ T5017] EXT4-fs: Ignoring removed i_version option
[  150.705428][ T5017] EXT4-fs: Ignoring removed bh option
[  150.713708][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.738895][ T5017] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  150.787121][ T5017] ext4 filesystem being mounted at /68/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  150.978259][ T5023] loop0: detected capacity change from 0 to 128
[  151.057806][ T5024] netlink: 'syz.3.346': attribute type 10 has an invalid length.
[  151.398813][ T5042] netlink: 80 bytes leftover after parsing attributes in process `syz.4.348'.
[  151.423407][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.765507][ T5068] siw: device registration error -23
[  151.774219][ T5068] loop3: detected capacity change from 0 to 512
[  151.833171][ T5067] loop1: detected capacity change from 0 to 128
[  152.097867][ T5071] SET target dimension over the limit!
[  152.191370][ T5071] loop0: detected capacity change from 0 to 4096
[  152.209910][ T5071] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  152.239144][ T5071] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  152.321831][   T28] audit: type=1400 audit(1773246070.667:364): avc:  denied  { write } for  pid=5083 comm="syz.4.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  152.373136][ T5085] netlink: 40 bytes leftover after parsing attributes in process `syz.0.352'.
[  152.408653][ T5084] loop4: detected capacity change from 0 to 512
[  152.426805][ T5088] netlink: 80 bytes leftover after parsing attributes in process `syz.3.354'.
[  152.433706][ T5085] netlink: 260 bytes leftover after parsing attributes in process `syz.0.352'.
[  152.820349][ T5084] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  152.909412][ T5084] ------------[ cut here ]------------
[  152.915877][ T5084] EA inode 11 i_nlink=2
[  152.915909][ T5084] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#1: syz.4.353/5084
[  152.931479][ T5084] Modules linked in:
[  152.936822][ T5084] CPU: 1 UID: 0 PID: 5084 Comm: syz.4.353 Not tainted syzkaller #0 PREEMPT(full) 
[  152.946580][ T5084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  152.957635][ T5084] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350
[  152.965016][ T5084] Code: a4 47 99 ff 4c 8d 2d 5d c0 5d 05 49 8d 7e 40 e8 44 e1 b5 ff 49 8b 6e 40 4c 89 e7 e8 78 dc b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 ff 59 dd 03 66 66 66 66 66 66 2e
[  152.985701][ T5084] RSP: 0018:ffffc90001a5f778 EFLAGS: 00010246
[  152.992790][ T5084] RAX: ffff888104203cf8 RBX: ffff88811a8a9be8 RCX: ffffffff81c00598
[  153.001369][ T5084] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff871dc5e0
[  153.010081][ T5084] RBP: 000000000000000b R08: 000188811a8a9b9b R09: 0000000000000000
[  153.018581][ T5084] R10: ffffc90001a5f6a8 R11: 0001c90001a5f6a8 R12: ffff88811a8a9b98
[  153.027501][ T5084] R13: ffffffff871dc5e0 R14: ffff88811a8a9b50 R15: 0000000000000001
[  153.035881][ T5084] FS:  00007f79402076c0(0000) GS:ffff8882ae9dc000(0000) knlGS:0000000000000000
[  153.045697][ T5084] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  153.052643][ T5084] CR2: 0000000034747865 CR3: 000000013a5fc000 CR4: 00000000003506f0
[  153.061582][ T5084] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  153.070451][ T5084] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  153.079362][ T5084] Call Trace:
[  153.083063][ T5084]  <TASK>
[  153.086341][ T5084]  ext4_xattr_inode_dec_ref_all+0x57c/0x880
[  153.093093][ T5084]  ? errseq_check+0x2c/0x50
[  153.098375][ T5084]  ext4_xattr_delete_inode+0x6c1/0x7a0
[  153.104343][ T5084]  ? ext4_truncate+0x92b/0xb00
[  153.109672][ T5084]  ext4_evict_inode+0xa1f/0xd60
[  153.114862][ T5084]  ? __pfx_ext4_evict_inode+0x10/0x10
[  153.121100][ T5084]  evict+0x2af/0x510
[  153.125471][ T5084]  ? __dquot_initialize+0x146/0x7c0
[  153.131282][ T5084]  iput+0x41a/0x580
[  153.135612][ T5084]  ext4_process_orphan+0x1a9/0x1c0
[  153.141410][ T5084]  ext4_orphan_cleanup+0x6a8/0xa00
[  153.147223][ T5084]  ext4_fill_super+0x3408/0x37c0
[  153.152601][ T5084]  ? set_blocksize+0x14c/0x270
[  153.158061][ T5084]  ? setup_bdev_super+0x30e/0x370
[  153.163482][ T5084]  ? __pfx_ext4_fill_super+0x10/0x10
[  153.169342][ T5084]  get_tree_bdev_flags+0x291/0x300
[  153.175132][ T5084]  ? __pfx_ext4_fill_super+0x10/0x10
[  153.181303][ T5084]  get_tree_bdev+0x1f/0x30
[  153.186151][ T5084]  ext4_get_tree+0x1c/0x30
[  153.190973][ T5084]  vfs_get_tree+0x57/0x1d0
[  153.195901][ T5084]  do_new_mount+0x288/0x8d0
[  153.201152][ T5084]  path_mount+0x4d0/0xbc0
[  153.205830][ T5084]  __se_sys_mount+0x28c/0x2e0
[  153.211302][ T5084]  __x64_sys_mount+0x67/0x80
[  153.216509][ T5084]  x64_sys_call+0x2d61/0x3020
[  153.222061][ T5084]  do_syscall_64+0x12c/0x370
[  153.227232][ T5084]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.233539][ T5084] RIP: 0033:0x7f79417ada0a
[  153.238280][ T5084] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  153.258791][ T5084] RSP: 002b:00007f7940206e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  153.267880][ T5084] RAX: ffffffffffffffda RBX: 00007f7940206ee0 RCX: 00007f79417ada0a
[  153.276441][ T5084] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007f7940206ea0
[  153.285102][ T5084] RBP: 00002000000009c0 R08: 00007f7940206ee0 R09: 0000000000800718
[  153.293222][ T5084] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540
[  153.302112][ T5084] R13: 00007f7940206ea0 R14: 000000000000048d R15: 0000200000000200
[  153.310611][ T5084]  </TASK>
[  153.314051][ T5084] ---[ end trace 0000000000000000 ]---
[  153.323913][ T5112] loop3: detected capacity change from 0 to 128
[  153.460997][ T5084] EXT4-fs (loop4): 1 orphan inode deleted
[  153.478098][ T5084] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  153.507949][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  153.830522][ T5124] loop0: detected capacity change from 0 to 256
[  154.779124][ T5128] netlink: 80 bytes leftover after parsing attributes in process `syz.1.359'.
[  157.096507][ T5132] loop2: detected capacity change from 0 to 4096
[  157.221997][ T5124] FAT-fs (loop0): Directory bread(block 64) failed
[  157.228733][ T5124] FAT-fs (loop0): Directory bread(block 65) failed
[  157.235558][ T5124] FAT-fs (loop0): Directory bread(block 66) failed
[  157.242166][ T5124] FAT-fs (loop0): Directory bread(block 67) failed
[  157.248936][ T5124] FAT-fs (loop0): Directory bread(block 68) failed
[  157.255741][ T5124] FAT-fs (loop0): Directory bread(block 69) failed
[  157.262844][ T5124] FAT-fs (loop0): Directory bread(block 70) failed
[  157.269589][ T5124] FAT-fs (loop0): Directory bread(block 71) failed
[  157.276334][ T5124] FAT-fs (loop0): Directory bread(block 72) failed
[  157.283144][ T5124] FAT-fs (loop0): Directory bread(block 73) failed
[  157.541474][ T5132] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  157.645704][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  157.655111][   T28] audit: type=1400 audit(1773246075.997:365): avc:  denied  { add_name } for  pid=5130 comm="syz.2.360" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  157.734373][   T28] audit: type=1400 audit(1773246076.047:366): avc:  denied  { create } for  pid=5138 comm="syz.3.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  157.757519][ T5141] SET target dimension over the limit!
[  157.841842][ T5147] netlink: 80 bytes leftover after parsing attributes in process `syz.3.364'.
[  157.846601][ T5141] loop4: detected capacity change from 0 to 4096
[  157.886776][ T5141] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  157.908232][ T5141] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  158.081752][ T5155] netlink: 40 bytes leftover after parsing attributes in process `syz.4.361'.
[  158.126809][ T5155] netlink: 260 bytes leftover after parsing attributes in process `syz.4.361'.
[  158.249621][ T5159] netlink: 80 bytes leftover after parsing attributes in process `syz.0.366'.
[  158.278511][ T5152] netlink: 12 bytes leftover after parsing attributes in process `syz.1.365'.
[  158.641702][ T5165] SET target dimension over the limit!
[  158.699538][ T5158] netlink: 12 bytes leftover after parsing attributes in process `syz.1.365'.
[  158.730944][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.765190][ T5165] loop0: detected capacity change from 0 to 4096
[  158.782060][ T5165] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  158.833854][ T5170] loop1: detected capacity change from 0 to 512
[  158.871997][ T5170] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  158.897532][ T5170] EXT4-fs (loop1): 1 truncate cleaned up
[  158.903804][ T5170] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  158.916822][ T5165] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  158.950215][ T5170] EXT4-fs error (device loop1): ext4_generic_delete_entry:2666: inode #2: block 13: comm syz.1.370: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  158.971080][   T28] audit: type=1400 audit(1773246077.297:367): avc:  denied  { remove_name } for  pid=5169 comm="syz.1.370" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  158.971651][ T5170] EXT4-fs (loop1): Remounting filesystem read-only
[  159.036822][ T5170] EXT4-fs warning (device loop1): ext4_rename_delete:3729: inode #2: comm syz.1.370: Deleting old file: nlink 5, error=-117
[  159.037889][   T28] audit: type=1400 audit(1773246077.297:368): avc:  denied  { rename } for  pid=5169 comm="syz.1.370" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  159.072708][ T5173] loop4: detected capacity change from 0 to 764
[  159.113656][ T5173] rock: directory entry would overflow storage
[  159.126439][ T5173] rock: sig=0x4f50, size=4, remaining=3
[  159.133580][ T5173] iso9660: Corrupted directory entry in block 6 of inode 1792
[  159.143179][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  159.154162][ T5165] netlink: 40 bytes leftover after parsing attributes in process `syz.0.367'.
[  159.166477][   T28] audit: type=1400 audit(1773246077.297:369): avc:  denied  { rmdir } for  pid=5169 comm="syz.1.370" name="bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  159.168404][ T5165] netlink: 260 bytes leftover after parsing attributes in process `syz.0.367'.
[  159.194437][   T28] audit: type=1400 audit(1773246077.437:370): avc:  denied  { add_name } for  pid=5169 comm="syz.1.370" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  159.258192][   T28] audit: type=1400 audit(1773246077.447:371): avc:  denied  { mount } for  pid=5171 comm="syz.4.368" name="/" dev="loop4" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1
[  159.320698][ T5173] Symlink component flag not implemented
[  159.393809][ T5177] Symlink component flag not implemented (129)
[  159.411445][ T5173] rock: directory entry would overflow storage
[  159.425353][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  159.434459][   T28] audit: type=1400 audit(1773246077.737:372): avc:  denied  { create } for  pid=5171 comm="syz.4.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  159.499779][ T5173] rock: sig=0x4f50, size=4, remaining=3
[  159.510501][ T5185] netlink: 14 bytes leftover after parsing attributes in process `syz.1.372'.
[  159.536298][ T5173] iso9660: Corrupted directory entry in block 6 of inode 1792
[  159.606674][ T5188] loop2: detected capacity change from 0 to 256
[  159.879530][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.149619][ T5195] loop4: detected capacity change from 0 to 128
[  161.233010][ T5208] netlink: 80 bytes leftover after parsing attributes in process `syz.2.380'.
[  161.294381][ T5211] siw: device registration error -23
[  161.301752][ T5211] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  161.318227][ T5211] loop4: detected capacity change from 0 to 512
[  161.524573][ T5210] loop0: detected capacity change from 0 to 128
[  161.686202][ T5213] SET target dimension over the limit!
[  161.716794][ T5213] loop3: detected capacity change from 0 to 4096
[  161.785095][ T5213] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  162.413429][ T5213] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  163.086856][ T5226] siw: device registration error -23
[  163.443961][ T5228] netlink: 80 bytes leftover after parsing attributes in process `syz.0.382'.
[  163.453845][ T5226] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  163.471192][ T5226] loop4: detected capacity change from 0 to 512
[  163.545327][ T5230] netlink: 40 bytes leftover after parsing attributes in process `syz.3.378'.
[  163.636785][ T5230] netlink: 260 bytes leftover after parsing attributes in process `syz.3.378'.
[  163.723046][ T5233] loop2: detected capacity change from 0 to 128
[  163.748797][   T28] audit: type=1400 audit(1773246082.097:373): avc:  denied  { bind } for  pid=5235 comm="syz.4.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  163.777132][ T5236] loop4: detected capacity change from 0 to 512
[  163.784103][ T5236] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  163.795604][ T5236] EXT4-fs (loop4): 1 truncate cleaned up
[  163.801763][ T5236] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  163.819110][ T5236] EXT4-fs error (device loop4): ext4_generic_delete_entry:2666: inode #2: block 13: comm syz.4.384: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  163.839923][ T5236] EXT4-fs (loop4): Remounting filesystem read-only
[  164.088423][   T28] audit: type=1400 audit(1773246082.427:374): avc:  denied  { mount } for  pid=5235 comm="syz.4.384" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  164.137741][ T5242] loop0: detected capacity change from 0 to 128
[  164.230667][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.643959][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.971574][   T28] audit: type=1400 audit(1773246083.287:375): avc:  denied  { name_bind } for  pid=5244 comm="syz.3.386" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  165.598020][ T5266] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  165.625982][ T5266] loop0: detected capacity change from 0 to 512
[  166.117592][ T5270] netlink: 14 bytes leftover after parsing attributes in process `syz.1.391'.
[  166.499731][ T5275] loop2: detected capacity change from 0 to 128
[  166.517700][ T5272] loop1: detected capacity change from 0 to 8192
[  166.528163][ T5277] netlink: 80 bytes leftover after parsing attributes in process `syz.3.393'.
[  166.992631][ T5282] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.096824][ T5282] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.134614][ T5284] netlink: 80 bytes leftover after parsing attributes in process `syz.4.395'.
[  167.240737][ T5286] SET target dimension over the limit!
[  167.278686][ T5282] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.340360][ T5282] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.356800][ T5286] loop2: detected capacity change from 0 to 4096
[  167.364315][ T5290] SET target dimension over the limit!
[  167.397227][ T5286] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  167.427081][   T50] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  167.437302][ T5286] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  167.465293][   T50] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  167.522985][   T50] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  167.557973][ T5297] netlink: 40 bytes leftover after parsing attributes in process `syz.2.396'.
[  167.567978][   T50] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  167.596800][ T5297] netlink: 260 bytes leftover after parsing attributes in process `syz.2.396'.
[  167.607280][ T5290] loop4: detected capacity change from 0 to 4096
[  167.681190][ T5290] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  167.731601][ T5300] loop0: detected capacity change from 0 to 136
[  167.741855][   T28] audit: type=1400 audit(1773246086.077:376): avc:  denied  { bind } for  pid=5291 comm="syz.0.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  167.773173][ T5290] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  167.816408][ T5300] iso9660: Unknown parameter '@
'
[  167.855716][   T28] audit: type=1400 audit(1773246086.077:377): avc:  denied  { bind } for  pid=5291 comm="syz.0.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  168.090115][ T5305] netlink: 40 bytes leftover after parsing attributes in process `syz.4.397'.
[  168.177635][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.189165][ T5305] netlink: 260 bytes leftover after parsing attributes in process `syz.4.397'.
[  168.363928][ T5309] netlink: 14 bytes leftover after parsing attributes in process `syz.2.401'.
[  168.428097][ T5312] siw: device registration error -23
[  168.435279][ T5312] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  168.877906][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.903058][ T5313] set_capacity_and_notify: 2 callbacks suppressed
[  168.903078][ T5313] loop2: detected capacity change from 0 to 8192
[  170.603370][ T5332] netlink: 80 bytes leftover after parsing attributes in process `syz.3.407'.
[  170.627937][ T5329] loop1: detected capacity change from 0 to 128
[  170.858167][ T5341] SET target dimension over the limit!
[  170.919099][ T5341] loop4: detected capacity change from 0 to 4096
[  170.928777][ T5341] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  170.951571][ T5338] loop2: detected capacity change from 0 to 764
[  170.966417][ T5338] iso9660: Unknown parameter '
'
[  170.986822][ T5341] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  170.999083][ T5347] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  171.013169][ T5347] loop3: detected capacity change from 0 to 512
[  171.087523][ T5348] netlink: 36 bytes leftover after parsing attributes in process `syz.2.408'.
[  171.243238][ T5349] netlink: 40 bytes leftover after parsing attributes in process `syz.4.410'.
[  171.357196][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.598647][ T5354] SET target dimension over the limit!
[  173.170014][ T5356] loop4: detected capacity change from 0 to 4096
[  173.336430][ T5356] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  173.355392][   T28] audit: type=1400 audit(1773246091.697:378): avc:  denied  { read write } for  pid=5364 comm="syz.0.414" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  173.404904][ T3421] IPVS: starting estimator thread 0...
[  174.415288][   T28] audit: type=1400 audit(1773246091.727:379): avc:  denied  { open } for  pid=5364 comm="syz.0.414" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  174.709741][ T5356] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  174.722542][   T28] audit: type=1400 audit(1773246091.727:380): avc:  denied  { ioctl } for  pid=5364 comm="syz.0.414" path="/dev/input/event0" dev="devtmpfs" ino=242 ioctlcmd=0x4591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  174.781146][ T5366] IPVS: using max 2304 ests per chain, 115200 per kthread
[  174.812539][ T5382] loop2: detected capacity change from 0 to 512
[  175.038568][ T5385] loop1: detected capacity change from 0 to 128
[  175.269469][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  175.312062][ T5387] __nla_validate_parse: 1 callbacks suppressed
[  175.312133][ T5387] netlink: 14 bytes leftover after parsing attributes in process `syz.0.419'.
[  175.811811][ T5401] loop3: detected capacity change from 0 to 128
[  175.871106][ T5405] netlink: 14 bytes leftover after parsing attributes in process `syz.1.423'.
[  176.182466][ T5410] loop4: detected capacity change from 0 to 128
[  176.528536][ T5415] SET target dimension over the limit!
[  176.567373][ T5415] loop0: detected capacity change from 0 to 4096
[  176.575483][ T5415] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  177.226348][ T5415] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  177.715952][ T5431] netlink: 40 bytes leftover after parsing attributes in process `syz.0.426'.
[  177.865207][   T28] audit: type=1400 audit(1773246096.207:381): avc:  denied  { ioctl } for  pid=5428 comm="syz.3.429" path="socket:[11276]" dev="sockfs" ino=11276 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  177.970987][ T5431] netlink: 260 bytes leftover after parsing attributes in process `syz.0.426'.
[  178.074939][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  178.091929][ T5438] SET target dimension over the limit!
[  178.170775][ T5438] loop1: detected capacity change from 0 to 4096
[  178.181804][ T5438] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  178.231514][ T5438] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  178.358426][ T5447] netlink: 40 bytes leftover after parsing attributes in process `syz.1.430'.
[  178.432042][ T5447] netlink: 260 bytes leftover after parsing attributes in process `syz.1.430'.
[  178.469059][ T5450] siw: device registration error -23
[  178.476774][ T5450] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  178.497075][ T5450] loop3: detected capacity change from 0 to 512
[  178.908837][ T5451] siw: device registration error -23
[  178.915355][ T5451] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  178.925238][ T5451] debugfs: 'netdev@ffff88811a7e3560' already exists in 'ref_tracker'
[  178.940331][ T5451] loop0: detected capacity change from 0 to 512
[  179.463586][ T5457] netlink: 14 bytes leftover after parsing attributes in process `syz.2.436'.
[  179.557445][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  179.738602][ T5461] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  179.802956][ T5461] loop4: detected capacity change from 0 to 512
[  179.812384][ T5465] loop1: detected capacity change from 0 to 128
[  180.697322][ T5475] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.748092][ T5476] netlink: 14 bytes leftover after parsing attributes in process `syz.0.440'.
[  180.765047][ T5478] loop1: detected capacity change from 0 to 128
[  180.865737][ T5475] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  181.476310][ T5475] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  181.710077][ T5475] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  181.824938][  T116] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  181.846350][ T5490] loop1: detected capacity change from 0 to 128
[  181.889324][  T116] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  181.936231][  T116] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  181.948436][ T5492] SET target dimension over the limit!
[  181.956668][ T5493] SET target dimension over the limit!
[  181.974578][  T116] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  182.109182][ T5495] SET target dimension over the limit!
[  182.123126][ T5492] loop2: detected capacity change from 0 to 4096
[  182.135303][ T5493] loop3: detected capacity change from 0 to 4096
[  182.149016][ T5492] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  182.199212][ T5492] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  182.214096][ T5495] loop4: detected capacity change from 0 to 4096
[  182.295478][ T5495] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  182.337145][ T5493] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  182.358899][ T5495] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  182.377937][ T5493] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  182.417498][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  182.723645][ T5507] loop2: detected capacity change from 0 to 128
[  182.779822][ T5509] loop0: detected capacity change from 0 to 128
[  182.873294][ T5508] netlink: 40 bytes leftover after parsing attributes in process `syz.4.445'.
[  182.899535][ T5510] netlink: 40 bytes leftover after parsing attributes in process `syz.3.443'.
[  183.025396][ T5508] netlink: 260 bytes leftover after parsing attributes in process `syz.4.445'.
[  183.051486][ T5510] netlink: 260 bytes leftover after parsing attributes in process `syz.3.443'.
[  183.146028][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  183.171203][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  183.435157][ T5519] netlink: 14 bytes leftover after parsing attributes in process `syz.2.451'.
[  183.825685][ T5530] loop1: detected capacity change from 0 to 128
[  184.620803][ T5536] netlink: 80 bytes leftover after parsing attributes in process `syz.3.454'.
[  184.629746][   T28] audit: type=1400 audit(1773246102.967:382): avc:  denied  { name_connect } for  pid=5533 comm="syz.0.455" dest=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hi_reserved_port_t tclass=sctp_socket permissive=1
[  184.888366][   T28] audit: type=1400 audit(1773246103.217:383): avc:  denied  { bind } for  pid=5533 comm="syz.0.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  184.911574][ T5540] loop1: detected capacity change from 0 to 512
[  184.931754][   T28] audit: type=1400 audit(1773246103.277:384): avc:  denied  { setopt } for  pid=5533 comm="syz.0.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  185.004976][ T5534] netlink: 4 bytes leftover after parsing attributes in process `syz.0.455'.
[  185.015767][   T28] audit: type=1400 audit(1773246103.307:385): avc:  denied  { write } for  pid=5533 comm="syz.0.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  185.178441][ T5551] loop1: detected capacity change from 0 to 128
[  185.188237][   T28] audit: type=1400 audit(1773246103.537:386): avc:  denied  { mounton } for  pid=5549 comm="syz.4.459" path="/89/file0" dev="tmpfs" ino=541 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  185.232271][ T5546] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.320253][ T5552] netlink: 14 bytes leftover after parsing attributes in process `syz.3.458'.
[  185.431347][ T5546] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.473333][   T28] audit: type=1400 audit(1773246103.817:387): avc:  denied  { bind } for  pid=5549 comm="syz.4.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  185.530026][   T28] audit: type=1400 audit(1773246103.847:388): avc:  denied  { write } for  pid=5549 comm="syz.4.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  185.594035][ T5557] SET target dimension over the limit!
[  185.644597][ T5554] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities
[  185.697415][ T5557] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  185.730232][ T5557] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  185.755268][ T5546] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.765368][   T28] audit: type=1400 audit(1773246103.987:389): avc:  denied  { mounton } for  pid=5549 comm="syz.4.459" path="/89/file0" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  185.849476][ T5550] set_capacity_and_notify: 4 callbacks suppressed
[  185.849541][ T5550] loop4: detected capacity change from 0 to 128
[  185.923047][ T5550] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  185.930135][ T5546] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.947538][ T5563] loop1: detected capacity change from 0 to 128
[  185.970458][ T5550] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  186.107240][ T5564] netlink: 40 bytes leftover after parsing attributes in process `syz.2.460'.
[  186.280644][ T4238] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  186.303479][ T4238] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  186.315351][ T5564] netlink: 260 bytes leftover after parsing attributes in process `syz.2.460'.
[  186.324609][   T28] audit: type=1400 audit(1773246104.667:390): avc:  denied  { ioctl } for  pid=5549 comm="syz.4.459" path="/89/file1/file1" dev="loop4" ino=12 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  186.357445][   T30] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  186.387613][   T30] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  186.484163][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  186.541680][ T3321] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  186.571073][   T28] audit: type=1400 audit(1773246104.907:391): avc:  denied  { unmount } for  pid=3321 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  186.775979][ T5571] loop4: detected capacity change from 0 to 128
[  187.106275][ T5580] netlink: 228 bytes leftover after parsing attributes in process `syz.2.465'.
[  187.169973][ T5577] lo speed is unknown, defaulting to 1000
[  187.209741][ T5585] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0
[  187.236562][ T5586] netlink: 12 bytes leftover after parsing attributes in process `syz.3.466'.
[  187.246143][ T5586] netlink: 12 bytes leftover after parsing attributes in process `syz.3.466'.
[  187.288824][ T5588] netlink: 80 bytes leftover after parsing attributes in process `syz.2.468'.
[  187.388351][ T5591] netlink: 80 bytes leftover after parsing attributes in process `syz.3.469'.
[  187.649739][ T5605] SET target dimension over the limit!
[  187.675185][ T5605] loop3: detected capacity change from 0 to 4096
[  187.734062][ T5606] siw: device registration error -23
[  187.741226][ T5606] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  187.782231][ T5606] loop4: detected capacity change from 0 to 512
[  187.838788][ T5605] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  188.142508][ T5605] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  188.291869][ T5601] loop2: detected capacity change from 0 to 457
[  188.312396][ T5610] netlink: 40 bytes leftover after parsing attributes in process `syz.3.472'.
[  188.455430][ T5610] netlink: 260 bytes leftover after parsing attributes in process `syz.3.472'.
[  188.589665][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  188.626106][ T5612] netlink: 12 bytes leftover after parsing attributes in process `syz.4.473'.
[  188.671298][ T5615] loop3: detected capacity change from 0 to 512
[  188.690168][ T5615] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  188.759222][ T5615] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  189.001312][ T5623] loop0: detected capacity change from 0 to 128
[  189.231990][ T5627] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.294177][ T5627] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.387573][ T5627] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.493996][ T5627] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.864961][ T5638] loop1: detected capacity change from 0 to 4096
[  189.941249][ T5638] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  190.295259][ T5644] loop2: detected capacity change from 0 to 764
[  190.442826][ T5644] rock: directory entry would overflow storage
[  190.469380][ T5644] rock: sig=0x4f50, size=4, remaining=3
[  190.494033][ T5644] iso9660: Corrupted directory entry in block 6 of inode 1792
[  190.836915][ T5652] FAT-fs (loop4): Directory bread(block 64) failed
[  190.843781][ T5652] FAT-fs (loop4): Directory bread(block 65) failed
[  190.850544][ T5652] FAT-fs (loop4): Directory bread(block 66) failed
[  190.857434][ T5652] FAT-fs (loop4): Directory bread(block 67) failed
[  190.864032][ T5652] FAT-fs (loop4): Directory bread(block 68) failed
[  190.870651][ T5652] FAT-fs (loop4): Directory bread(block 69) failed
[  190.877356][ T5652] FAT-fs (loop4): Directory bread(block 70) failed
[  190.884014][ T5652] FAT-fs (loop4): Directory bread(block 71) failed
[  190.890838][ T5652] FAT-fs (loop4): Directory bread(block 72) failed
[  190.897563][ T5652] FAT-fs (loop4): Directory bread(block 73) failed
[  191.668528][ T5656] __nla_validate_parse: 3 callbacks suppressed
[  191.668544][ T5656] netlink: 80 bytes leftover after parsing attributes in process `syz.0.484'.
[  192.172996][ T5644] Symlink component flag not implemented
[  192.243384][ T5648] Symlink component flag not implemented (129)
[  192.394649][ T5644] rock: directory entry would overflow storage
[  192.447006][ T5644] rock: sig=0x4f50, size=4, remaining=3
[  192.467763][ T5644] iso9660: Corrupted directory entry in block 6 of inode 1792
[  192.656955][ T4238] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  192.741522][ T5666] siw: device registration error -23
[  192.748855][ T5666] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  192.820275][ T5667] set_capacity_and_notify: 1 callbacks suppressed
[  192.820291][ T5667] loop0: detected capacity change from 0 to 512
[  192.910491][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  193.160074][ T4238] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  193.175014][ T4238] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  193.202307][ T4238] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  193.339676][ T5676] SET target dimension over the limit!
[  193.363449][ T5676] loop3: detected capacity change from 0 to 4096
[  193.427030][ T5676] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  193.608851][ T5676] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  193.653086][ T5685] tipc: Can't bind to reserved service type 0
[  193.894366][ T5689] pimreg: entered allmulticast mode
[  194.001275][ T5689] loop0: detected capacity change from 0 to 512
[  194.044479][ T5689] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  194.096167][ T5689] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  194.110734][ T5689] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  194.589856][   T28] kauditd_printk_skb: 1 callbacks suppressed
[  194.589873][   T28] audit: type=1400 audit(1773246111.997:393): avc:  denied  { create } for  pid=5672 comm="syz.1.497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1
[  194.627785][ T5685] loop1: detected capacity change from 0 to 136
[  195.176876][ T5693] siw: device registration error -23
[  195.370536][ T5693] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  195.386321][ T5693] loop4: detected capacity change from 0 to 512
[  195.492485][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  195.503946][ T5685] Attempt to read inode for relocated directory
[  195.523126][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  195.602204][ T5669] netlink: 12 bytes leftover after parsing attributes in process `syz.2.487'.
[  195.644028][ T5696] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.688469][ T5699] netlink: 14 bytes leftover after parsing attributes in process `syz.0.492'.
[  195.707923][ T5669] netlink: 12 bytes leftover after parsing attributes in process `syz.2.487'.
[  195.762578][ T5702] netlink: 80 bytes leftover after parsing attributes in process `syz.4.493'.
[  195.797840][ T5696] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.857011][ T5699] loop0: detected capacity change from 0 to 8192
[  195.989566][ T5696] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.046962][ T5709] netlink: 80 bytes leftover after parsing attributes in process `syz.2.505'.
[  196.098280][ T5696] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.390359][ T4238] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  196.419442][ T4238] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  196.928442][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  196.946993][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  197.144468][ T5723] SET target dimension over the limit!
[  197.363242][ T5723] loop4: detected capacity change from 0 to 4096
[  197.391196][ T5723] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  197.416439][ T5729] loop3: detected capacity change from 0 to 256
[  197.576494][ T5729] FAT-fs (loop3): Directory bread(block 64) failed
[  197.583306][ T5729] FAT-fs (loop3): Directory bread(block 65) failed
[  197.590227][ T5729] FAT-fs (loop3): Directory bread(block 66) failed
[  197.597122][ T5729] FAT-fs (loop3): Directory bread(block 67) failed
[  197.603899][ T5729] FAT-fs (loop3): Directory bread(block 68) failed
[  197.610582][ T5729] FAT-fs (loop3): Directory bread(block 69) failed
[  197.617442][ T5729] FAT-fs (loop3): Directory bread(block 70) failed
[  197.624089][ T5729] FAT-fs (loop3): Directory bread(block 71) failed
[  197.630758][ T5729] FAT-fs (loop3): Directory bread(block 72) failed
[  197.637728][ T5729] FAT-fs (loop3): Directory bread(block 73) failed
[  198.178638][ T5723] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  198.229068][ T5735] netlink: 14 bytes leftover after parsing attributes in process `syz.2.499'.
[  198.412590][ T5736] loop0: detected capacity change from 0 to 764
[  198.554074][ T5736] rock: directory entry would overflow storage
[  198.587301][ T5740] netlink: 40 bytes leftover after parsing attributes in process `syz.4.508'.
[  198.596421][ T5736] rock: sig=0x4f50, size=4, remaining=3
[  198.617252][ T5736] iso9660: Corrupted directory entry in block 6 of inode 1792
[  198.688596][ T5741] Symlink component flag not implemented
[  198.696856][ T5740] netlink: 260 bytes leftover after parsing attributes in process `syz.4.508'.
[  198.728611][ T5741] Symlink component flag not implemented (129)
[  198.767228][ T5741] rock: directory entry would overflow storage
[  198.841197][ T5741] rock: sig=0x4f50, size=4, remaining=3
[  198.885289][ T5741] iso9660: Corrupted directory entry in block 6 of inode 1792
[  199.097254][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.208465][ T5746] SET target dimension over the limit!
[  199.364554][ T5746] loop0: detected capacity change from 0 to 4096
[  199.391596][ T5746] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  199.478836][ T5746] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  199.493478][ T5753] siw: device registration error -23
[  199.502593][ T5753] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  199.519417][ T5758] netlink: 80 bytes leftover after parsing attributes in process `syz.1.504'.
[  199.543249][ T5759] siw: device registration error -23
[  199.550401][ T5759] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  199.567574][ T5759] loop4: detected capacity change from 0 to 512
[  199.804715][ T5746] netlink: 40 bytes leftover after parsing attributes in process `syz.0.502'.
[  199.923893][ T5746] netlink: 260 bytes leftover after parsing attributes in process `syz.0.502'.
[  200.009796][ T5764] lo speed is unknown, defaulting to 1000
[  200.040131][ T5767] loop2: detected capacity change from 0 to 2048
[  200.057175][ T5767] EXT4-fs: Ignoring removed i_version option
[  200.088382][ T5767] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  200.120189][ T5771] SET target dimension over the limit!
[  200.127910][ T5767] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  200.202848][   T28] audit: type=1400 audit(1773246118.547:394): avc:  denied  { map } for  pid=5763 comm="syz.2.506" path="/101/file1/memory.events" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  200.241457][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.260103][ T5771] loop3: detected capacity change from 0 to 4096
[  200.319686][ T5773] SET target dimension over the limit!
[  200.327372][ T5771] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  200.387317][ T5771] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  200.403563][ T5773] loop4: detected capacity change from 0 to 4096
[  200.426580][ T5773] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  200.487677][ T5773] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  200.561169][ T5781] netlink: 40 bytes leftover after parsing attributes in process `syz.3.509'.
[  200.610800][ T5781] netlink: 260 bytes leftover after parsing attributes in process `syz.3.509'.
[  200.655243][ T5782] netlink: 14 bytes leftover after parsing attributes in process `syz.1.511'.
[  200.727180][ T5784] netlink: 40 bytes leftover after parsing attributes in process `syz.4.510'.
[  200.736780][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.897458][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.934081][ T5791] SET target dimension over the limit!
[  200.971935][ T5794] SET target dimension over the limit!
[  200.989562][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.070955][ T5796] loop2: detected capacity change from 0 to 256
[  201.108991][ T5794] loop4: detected capacity change from 0 to 4096
[  201.119250][ T5791] loop0: detected capacity change from 0 to 4096
[  201.153496][ T5791] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  201.166412][ T5796] FAT-fs (loop2): IO charset cp852 not found
[  201.172813][ T5794] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  201.195675][ T5791] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  201.297992][ T5794] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  201.965812][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.200187][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.255100][ T5819] loop2: detected capacity change from 0 to 8192
[  202.723562][ T5830] siw: device registration error -23
[  202.729679][ T5830] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  203.067667][   T28] audit: type=1400 audit(1773246121.407:395): avc:  denied  { block_suspend } for  pid=5833 comm="syz.1.521" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  203.212716][   T28] audit: type=1400 audit(1773246121.547:396): avc:  denied  { checkpoint_restore } for  pid=5833 comm="syz.1.521" capability=40  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  203.375352][ T5840] __nla_validate_parse: 7 callbacks suppressed
[  203.375370][ T5840] netlink: 80 bytes leftover after parsing attributes in process `syz.4.522'.
[  203.477517][ T5848] SET target dimension over the limit!
[  203.569272][ T5848] set_capacity_and_notify: 2 callbacks suppressed
[  203.569288][ T5848] loop3: detected capacity change from 0 to 4096
[  203.617096][ T5848] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  203.684151][ T5865] SET target dimension over the limit!
[  203.729677][ T5865] loop0: detected capacity change from 0 to 4096
[  203.754685][ T5848] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  203.786318][ T5865] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  203.841414][ T5865] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  203.986560][ T5882] netlink: 40 bytes leftover after parsing attributes in process `syz.3.524'.
[  204.005714][ T5882] netlink: 260 bytes leftover after parsing attributes in process `syz.3.524'.
[  204.124930][ T5890] siw: device registration error -23
[  204.131839][ T5890] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  204.148871][ T5890] loop4: detected capacity change from 0 to 512
[  204.329585][ T5891] netlink: 40 bytes leftover after parsing attributes in process `syz.0.526'.
[  204.536323][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.541368][ T5891] netlink: 260 bytes leftover after parsing attributes in process `syz.0.526'.
[  204.642324][ T5899] SET target dimension over the limit!
[  204.653012][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.750662][ T5905] SET target dimension over the limit!
[  204.834740][ T5899] loop3: detected capacity change from 0 to 4096
[  204.921742][ T5899] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  205.209754][ T5905] loop0: detected capacity change from 0 to 4096
[  205.320655][ T5905] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  205.331809][ T5899] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  205.484891][ T5905] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  205.543821][ T5916] netlink: 14 bytes leftover after parsing attributes in process `syz.2.531'.
[  205.637528][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.688811][ T5930] netlink: 40 bytes leftover after parsing attributes in process `syz.3.528'.
[  205.721018][ T5930] netlink: 260 bytes leftover after parsing attributes in process `syz.3.528'.
[  205.990676][ T5943] siw: device registration error -23
[  205.998283][ T5943] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  206.013971][ T5943] loop4: detected capacity change from 0 to 512
[  206.091354][ T5945] loop0: detected capacity change from 0 to 128
[  206.586584][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  206.840253][ T5997] siw: device registration error -23
[  206.847394][ T5997] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  206.863754][ T5997] loop3: detected capacity change from 0 to 512
[  206.948771][ T5999] netlink: 14 bytes leftover after parsing attributes in process `syz.1.536'.
[  207.295173][ T6005] siw: device registration error -23
[  207.302371][ T6005] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  207.332894][ T6005] loop0: detected capacity change from 0 to 512
[  207.740017][ T6008] SET target dimension over the limit!
[  207.799759][ T6008] loop3: detected capacity change from 0 to 4096
[  207.809917][ T6008] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  207.829580][ T6010] SET target dimension over the limit!
[  207.847433][ T6008] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  207.941615][ T6010] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  208.027205][ T6016] netlink: 40 bytes leftover after parsing attributes in process `syz.3.538'.
[  208.032620][ T6010] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  208.074450][   T28] audit: type=1400 audit(1773246126.417:397): avc:  denied  { bind } for  pid=6013 comm="syz.0.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  208.194681][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.208205][ T6018] lo speed is unknown, defaulting to 1000
[  208.404177][ T6025] __nla_validate_parse: 1 callbacks suppressed
[  208.404196][ T6025] netlink: 80 bytes leftover after parsing attributes in process `syz.1.542'.
[  208.441672][ T6020] netlink: 40 bytes leftover after parsing attributes in process `syz.2.539'.
[  208.501750][ T6020] netlink: 260 bytes leftover after parsing attributes in process `syz.2.539'.
[  209.135247][ T6034] SET target dimension over the limit!
[  209.243577][ T6034] set_capacity_and_notify: 1 callbacks suppressed
[  209.243600][ T6034] loop0: detected capacity change from 0 to 4096
[  209.266168][ T6034] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  209.293446][ T6034] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  209.317068][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  209.418746][ T6035] netlink: 40 bytes leftover after parsing attributes in process `syz.0.544'.
[  209.428109][ T6035] netlink: 260 bytes leftover after parsing attributes in process `syz.0.544'.
[  209.504786][ T6039] SET target dimension over the limit!
[  209.705167][ T6039] loop1: detected capacity change from 0 to 4096
[  209.822426][ T6045] loop2: detected capacity change from 0 to 512
[  209.833891][ T6043] loop3: detected capacity change from 0 to 128
[  210.111837][ T6039] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  210.113499][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  210.147475][ T6039] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  210.266002][ T6050] netlink: 40 bytes leftover after parsing attributes in process `syz.1.546'.
[  210.296945][ T6050] netlink: 260 bytes leftover after parsing attributes in process `syz.1.546'.
[  210.486127][ T6056] SET target dimension over the limit!
[  210.557249][ T6058] siw: device registration error -23
[  210.564986][ T6058] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  210.584331][ T6058] loop0: detected capacity change from 0 to 512
[  210.994494][ T6059] siw: device registration error -23
[  211.001656][ T6059] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  211.017790][ T6059] loop3: detected capacity change from 0 to 512
[  211.419677][ T6056] loop2: detected capacity change from 0 to 4096
[  211.445717][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  211.470717][ T6056] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  211.602146][ T6056] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  211.851907][ T6070] loop0: detected capacity change from 0 to 256
[  211.973806][ T6066] netlink: 80 bytes leftover after parsing attributes in process `syz.3.554'.
[  213.617165][ T6060] netlink: 40 bytes leftover after parsing attributes in process `syz.2.551'.
[  213.626088][ T6060] netlink: 260 bytes leftover after parsing attributes in process `syz.2.551'.
[  213.874858][ T6070] FAT-fs (loop0): Directory bread(block 64) failed
[  213.881567][ T6070] FAT-fs (loop0): Directory bread(block 65) failed
[  213.888235][ T6070] FAT-fs (loop0): Directory bread(block 66) failed
[  213.894873][ T6070] FAT-fs (loop0): Directory bread(block 67) failed
[  213.901454][ T6070] FAT-fs (loop0): Directory bread(block 68) failed
[  213.908241][ T6070] FAT-fs (loop0): Directory bread(block 69) failed
[  213.914809][ T6070] FAT-fs (loop0): Directory bread(block 70) failed
[  213.921545][ T6070] FAT-fs (loop0): Directory bread(block 71) failed
[  213.928200][ T6070] FAT-fs (loop0): Directory bread(block 72) failed
[  213.934833][ T6070] FAT-fs (loop0): Directory bread(block 73) failed
[  213.983388][ T6067] netlink: 4 bytes leftover after parsing attributes in process `syz.0.552'.
[  214.112329][ T6067] team0: Port device team_slave_0 removed
[  214.329173][ T6084] loop1: detected capacity change from 0 to 128
[  215.300138][ T6097] loop1: detected capacity change from 0 to 128
[  215.346633][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  215.519771][ T6102] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.599041][ T6102] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.764104][ T6104] loop2: detected capacity change from 0 to 128
[  215.841545][ T6102] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.041666][ T6102] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.195621][ T6116] loop2: detected capacity change from 0 to 512
[  216.322290][ T5961] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  216.405444][ T5961] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  216.492271][ T5961] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  216.557998][ T5973] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  216.590284][ T6118] SET target dimension over the limit!
[  216.646461][ T6118] loop1: detected capacity change from 0 to 4096
[  216.681287][ T6118] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  216.719057][ T6118] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  216.911586][ T6123] netlink: 40 bytes leftover after parsing attributes in process `syz.1.563'.
[  216.987270][ T6123] netlink: 260 bytes leftover after parsing attributes in process `syz.1.563'.
[  217.081690][ T6126] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.111524][ T6128] loop2: detected capacity change from 0 to 512
[  217.422246][ T6131] SET target dimension over the limit!
[  217.520611][ T6131] loop0: detected capacity change from 0 to 4096
[  217.537789][ T6131] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  217.548110][ T6129] netlink: 14 bytes leftover after parsing attributes in process `syz.3.565'.
[  217.563509][ T6131] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  217.576529][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  217.599209][ T6126] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.762116][ T6126] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.774800][ T6136] loop2: detected capacity change from 0 to 512
[  217.838046][ T6144] netlink: 40 bytes leftover after parsing attributes in process `syz.0.566'.
[  218.112675][ T6143] SET target dimension over the limit!
[  218.145023][ T6126] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.254626][ T6144] netlink: 260 bytes leftover after parsing attributes in process `syz.0.566'.
[  218.289521][ T6134] loop3: detected capacity change from 0 to 8192
[  218.432342][ T6147] loop1: detected capacity change from 0 to 4096
[  218.477205][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  218.486598][ T6147] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  218.545007][ T5978] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  218.573074][ T6147] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  218.767800][ T5978] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  218.782703][ T5978] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  219.264680][ T5978] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  219.379447][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  219.539047][ T6164] set_capacity_and_notify: 1 callbacks suppressed
[  219.539102][ T6164] loop4: detected capacity change from 0 to 128
[  219.612131][ T6168] loop0: detected capacity change from 0 to 2048
[  219.737400][ T3301]  loop0: p1 < > p4 < >
[  219.776407][ T6168]  loop0: p1 < > p4 < >
[  219.844100][ T3774] udevd[3774]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[  219.856068][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[  220.949000][ T6185] SET target dimension over the limit!
[  221.163668][ T6185] loop1: detected capacity change from 0 to 4096
[  221.327627][ T6191] netlink: 80 bytes leftover after parsing attributes in process `syz.3.581'.
[  221.684092][ T6185] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  222.020656][ T6185] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  222.590855][ T6199] loop3: detected capacity change from 0 to 128
[  222.601461][ T6201] SET target dimension over the limit!
[  222.628719][ T6201] loop4: detected capacity change from 0 to 4096
[  222.707193][ T6201] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  223.385719][ T6201] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  223.423069][ T6205] netlink: 40 bytes leftover after parsing attributes in process `syz.1.579'.
[  223.628859][ T6205] netlink: 260 bytes leftover after parsing attributes in process `syz.1.579'.
[  223.698482][ T6212] loop0: detected capacity change from 0 to 128
[  223.830373][ T6215] netlink: 40 bytes leftover after parsing attributes in process `syz.4.583'.
[  224.017792][ T6217] siw: device registration error -23
[  224.024053][ T6217] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  224.040956][ T6217] loop3: detected capacity change from 0 to 512
[  224.191159][ T6215] netlink: 260 bytes leftover after parsing attributes in process `syz.4.583'.
[  224.518056][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  224.533847][ T6220] netlink: 14 bytes leftover after parsing attributes in process `syz.2.587'.
[  224.726418][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  225.714893][ T6238] random: crng reseeded on system resumption
[  225.721501][   T28] audit: type=1400 audit(1773246144.057:398): avc:  denied  { write } for  pid=6237 comm="syz.4.592" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  225.774638][ T6242] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6242 comm=syz.4.592
[  225.804783][ T6243] siw: device registration error -23
[  225.811922][ T6243] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  225.829575][ T6243] loop3: detected capacity change from 0 to 512
[  225.875492][ T6242] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=6242 comm=syz.4.592
[  226.227275][   T28] audit: type=1400 audit(1773246144.057:399): avc:  denied  { open } for  pid=6237 comm="syz.4.592" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  226.253499][ T6247] loop1: detected capacity change from 0 to 512
[  226.269960][ T6247] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  226.283531][ T6247] EXT4-fs error (device loop1): ext4_init_orphan_info:618: comm syz.1.594: orphan file block 0: bad magic
[  226.295533][ T6247] loop1: lost filesystem error report for type 5 error -117
[  226.296742][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  226.310559][    C1] EXT4-fs (loop1): initial error at time 1773246144: ext4_init_orphan_info:618
[  226.319590][    C1] EXT4-fs (loop1): last error at time 1773246144: ext4_init_orphan_info:618
[  226.337107][ T6247] EXT4-fs (loop1): mount failed
[  227.139667][ T6260] SET target dimension over the limit!
[  227.419785][ T6266] SET target dimension over the limit!
[  227.444256][ T6266] loop1: detected capacity change from 0 to 4096
[  227.451857][ T6266] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  227.464649][ T6262] loop0: detected capacity change from 0 to 4096
[  227.521526][ T6270] SET target dimension over the limit!
[  227.559145][ T6262] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  227.567939][ T6266] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  227.657869][ T6275] loop3: detected capacity change from 0 to 128
[  227.750737][ T6274] loop4: detected capacity change from 0 to 4096
[  227.760653][ T6274] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  227.773582][ T6274] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  227.797469][ T6266] netlink: 40 bytes leftover after parsing attributes in process `syz.1.600'.
[  227.882712][ T6262] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  227.945793][ T6266] netlink: 260 bytes leftover after parsing attributes in process `syz.1.600'.
[  227.966347][ T6274] netlink: 40 bytes leftover after parsing attributes in process `syz.4.601'.
[  228.134230][ T6274] netlink: 260 bytes leftover after parsing attributes in process `syz.4.601'.
[  228.146957][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  228.267335][ T6262] netlink: 40 bytes leftover after parsing attributes in process `syz.0.598'.
[  228.332554][ T6262] netlink: 260 bytes leftover after parsing attributes in process `syz.0.598'.
[  228.392351][ T6283] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  228.407187][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  228.432736][ T6287] netlink: 14 bytes leftover after parsing attributes in process `syz.3.603'.
[  228.501206][ T6283] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  228.526562][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  228.711952][ T6283] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.040922][ T6301] loop0: detected capacity change from 0 to 128
[  229.339449][ T6283] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.645228][ T6307] loop2: detected capacity change from 0 to 512
[  229.711875][   T36] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  229.777869][ T5971] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  229.864743][ T5971] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  229.948186][ T5971] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  230.000135][ T6309] SET target dimension over the limit!
[  230.074547][ T6309] loop1: detected capacity change from 0 to 4096
[  230.156915][ T6309] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  230.196547][ T6309] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  230.417621][ T6316] loop2: detected capacity change from 0 to 512
[  230.427591][ T6316] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  230.468742][ T6319] EXT4-fs (loop3): 1 orphan inode deleted
[  230.477420][ T6319] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  230.497735][ T6316] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0
[  230.512483][ T6319] ext4 filesystem being mounted at /129/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  230.548309][ T6316] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0
[  230.588395][ T6325] netlink: 40 bytes leftover after parsing attributes in process `syz.1.609'.
[  230.591436][ T6316] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.611: Failed to acquire dquot type 1
[  230.607333][ T6325] netlink: 260 bytes leftover after parsing attributes in process `syz.1.609'.
[  230.634199][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  230.663321][ T6316] loop2: lost filesystem error report for type 5 error -5
[  230.664674][ T6316] EXT4-fs (loop2): 1 truncate cleaned up
[  230.671966][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  230.671983][    C0] EXT4-fs (loop2): last error at time 1773246149: ext4_acquire_dquot:7001
[  230.761377][ T6316] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  230.819420][ T6329] SET target dimension over the limit!
[  230.888726][ T6330] set_capacity_and_notify: 1 callbacks suppressed
[  230.888766][ T6330] loop4: detected capacity change from 0 to 128
[  231.117416][ T6329] loop3: detected capacity change from 0 to 4096
[  231.153786][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  231.172794][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  231.228229][ T6329] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  231.354084][ T6329] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  231.364697][ T6334] SET target dimension over the limit!
[  231.391740][ T6334] loop2: detected capacity change from 0 to 4096
[  231.430206][ T6329] netlink: 40 bytes leftover after parsing attributes in process `syz.3.614'.
[  231.468686][ T6334] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  231.520860][ T6334] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  231.592889][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  231.854981][ T6353] loop3: detected capacity change from 0 to 512
[  231.880303][ T6353] EXT4-fs warning (device loop3): ext4_enable_quotas:7236: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix.
[  231.927286][ T6353] EXT4-fs (loop3): mount failed
[  232.221073][ T6359] siw: device registration error -23
[  232.228193][ T6359] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  232.244744][ T6359] loop3: detected capacity change from 0 to 512
[  232.505701][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  233.269886][ T6375] loop0: detected capacity change from 0 to 256
[  233.331758][ T6375] FAT-fs (loop0): IO charset cp852 not found
[  233.403545][ T6378] loop3: detected capacity change from 0 to 256
[  233.669480][ T6378] FAT-fs (loop3): Directory bread(block 64) failed
[  233.676084][ T6378] FAT-fs (loop3): Directory bread(block 65) failed
[  233.682779][ T6378] FAT-fs (loop3): Directory bread(block 66) failed
[  233.689678][ T6378] FAT-fs (loop3): Directory bread(block 67) failed
[  233.696302][ T6378] FAT-fs (loop3): Directory bread(block 68) failed
[  233.702973][ T6378] FAT-fs (loop3): Directory bread(block 69) failed
[  233.709601][ T6378] FAT-fs (loop3): Directory bread(block 70) failed
[  233.716412][ T6378] FAT-fs (loop3): Directory bread(block 71) failed
[  233.723108][ T6378] FAT-fs (loop3): Directory bread(block 72) failed
[  233.729686][ T6378] FAT-fs (loop3): Directory bread(block 73) failed
[  235.005067][ T6388] SET target dimension over the limit!
[  235.433878][ T6399] loop2: detected capacity change from 0 to 512
[  235.912200][ T6393] loop1: detected capacity change from 0 to 4096
[  235.919456][ T6393] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  235.961348][ T6393] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  235.987875][   T28] audit: type=1400 audit(1773246154.337:400): avc:  denied  { kexec_image_load } for  pid=6404 comm="syz.4.630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[  236.123835][ T6407] __nla_validate_parse: 4 callbacks suppressed
[  236.123876][ T6407] netlink: 14 bytes leftover after parsing attributes in process `syz.3.632'.
[  236.581220][ T6393] netlink: 40 bytes leftover after parsing attributes in process `syz.1.626'.
[  236.619177][ T6415] loop3: detected capacity change from 0 to 8192
[  236.854821][ T6393] netlink: 260 bytes leftover after parsing attributes in process `syz.1.626'.
[  236.991577][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  237.067027][ T6421] capability: warning: `syz.2.637' uses deprecated v2 capabilities in a way that may be insecure
[  237.309254][ T6432] loop4: detected capacity change from 0 to 512
[  237.398580][ T6432] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.639: invalid block
[  237.471736][ T6432] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  237.471939][ T6432] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.639: invalid indirect mapped block 4294967295 (level 1)
[  237.481157][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  237.481177][    C0] EXT4-fs (loop4): initial error at time 1773246155: ext4_get_branch:178: inode 11: block 4294967295
[  237.481218][    C0] EXT4-fs (loop4): last error at time 1773246155: ext4_get_branch:178: inode 11: block 4294967295
[  237.523493][ T6432] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  237.526737][ T6432] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.639: invalid indirect mapped block 4294967295 (level 1)
[  237.549943][ T6432] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  237.550387][ T6432] EXT4-fs (loop4): 2 truncates cleaned up
[  237.697266][ T6432] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  237.883605][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  238.189135][ T6447] siw: device registration error -23
[  238.202657][ T6447] loop4: detected capacity change from 0 to 512
[  239.519052][ T6459] siw: device registration error -23
[  239.525952][ T6459] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  239.596736][ T6460] loop4: detected capacity change from 0 to 512
[  239.761552][ T6462] loop1: detected capacity change from 0 to 128
[  239.882318][ T6462] FAT-fs (loop1): bogus number of reserved sectors
[  239.899033][ T6462] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  239.908453][ T6462] FAT-fs (loop1): Can't find a valid FAT filesystem
[  240.451663][ T6464] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.630529][ T6472] netlink: 14 bytes leftover after parsing attributes in process `syz.0.646'.
[  240.834976][ T6464] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.917758][ T6480] siw: device registration error -23
[  240.924548][ T6480] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  240.939671][ T6480] loop4: detected capacity change from 0 to 512
[  241.125224][ T6464] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.237284][ T6475] loop2: detected capacity change from 0 to 8192
[  241.337419][ T6483] netlink: 80 bytes leftover after parsing attributes in process `syz.1.652'.
[  241.474838][ T6464] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.494887][ T6475]  loop2: p1 p2 p4[DM]
[  241.499341][ T6475] loop2: p1 size 67898881 extends beyond EOD, truncated
[  241.602344][ T6475] loop2: p4 start 393224 is beyond EOD, truncated
[  241.968863][ T6496] siw: device registration error -23
[  241.995805][ T6496] loop4: detected capacity change from 0 to 512
[  242.097003][ T5978] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  242.161633][ T5978] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  242.247776][ T6499] loop2: detected capacity change from 0 to 512
[  242.282849][ T5978] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  242.403870][ T6499] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  242.424376][ T5978] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  242.444281][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  242.451377][ T3774] udevd[3774]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[  242.476865][ T6499] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  242.485089][ T6499] EXT4-fs (loop2): invalid inodes per group: 10
[  242.485089][ T6499] 
[  242.518679][ T3774] udevd[3774]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[  242.529137][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  242.694139][ T6502] loop4: detected capacity change from 0 to 164
[  242.940145][ T6511] siw: device registration error -23
[  242.947677][ T6511] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  242.963180][ T6511] loop0: detected capacity change from 0 to 512
[  244.922821][ T6531] loop2: detected capacity change from 0 to 512
[  245.189220][ T6534] SET target dimension over the limit!
[  245.406451][ T6534] loop1: detected capacity change from 0 to 4096
[  245.436943][ T6534] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  245.489989][ T6534] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  245.589130][ T6540] netlink: 80 bytes leftover after parsing attributes in process `syz.0.666'.
[  245.666363][ T6542] capability: warning: `syz.4.667' uses 32-bit capabilities (legacy support in use)
[  245.752436][ T6535] netlink: 40 bytes leftover after parsing attributes in process `syz.1.665'.
[  245.836789][ T6535] netlink: 260 bytes leftover after parsing attributes in process `syz.1.665'.
[  245.979362][ T6551] siw: device registration error -23
[  245.993530][ T6551] loop4: detected capacity change from 0 to 512
[  246.467225][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  246.550732][ T6560] loop2: detected capacity change from 0 to 128
[  246.568229][ T6559] loop1: detected capacity change from 0 to 164
[  246.687740][ T6559] isofs_fill_super: root inode is not a directory. Corrupted media?
[  246.765085][ T6562] siw: device registration error -23
[  246.780452][ T6562] loop0: detected capacity change from 0 to 512
[  247.427694][ T6568] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  247.519845][ T6569] netlink: 14 bytes leftover after parsing attributes in process `syz.3.670'.
[  247.638184][ T6573] SET target dimension over the limit!
[  247.700342][ T6573] loop0: detected capacity change from 0 to 4096
[  247.747568][ T6568] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  247.836803][ T6573] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  248.027606][ T6573] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  248.066757][ T6568] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  248.189073][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  248.306338][ T6568] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  248.421117][ T6584] siw: device registration error -23
[  248.436405][ T6584] loop1: detected capacity change from 0 to 512
[  248.559527][   T36] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  248.633949][   T36] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  248.734645][   T36] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  248.876271][ T5978] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  249.386335][ T6594] siw: device registration error -23
[  249.401343][ T6594] loop1: detected capacity change from 0 to 512
[  249.951067][ T6598] siw: device registration error -23
[  249.958663][ T6598] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  249.975591][ T6598] loop3: detected capacity change from 0 to 512
[  250.250707][ T6600] netlink: 80 bytes leftover after parsing attributes in process `syz.2.683'.
[  251.338354][ T6619] loop3: detected capacity change from 0 to 256
[  252.088590][ T6619] FAT-fs (loop3): Directory bread(block 64) failed
[  252.095312][ T6619] FAT-fs (loop3): Directory bread(block 65) failed
[  252.102104][ T6619] FAT-fs (loop3): Directory bread(block 66) failed
[  252.108772][ T6619] FAT-fs (loop3): Directory bread(block 67) failed
[  252.115524][ T6619] FAT-fs (loop3): Directory bread(block 68) failed
[  252.122260][ T6619] FAT-fs (loop3): Directory bread(block 69) failed
[  252.129017][ T6619] FAT-fs (loop3): Directory bread(block 70) failed
[  252.135605][ T6619] FAT-fs (loop3): Directory bread(block 71) failed
[  252.142307][ T6619] FAT-fs (loop3): Directory bread(block 72) failed
[  252.148952][ T6619] FAT-fs (loop3): Directory bread(block 73) failed
[  252.313168][ T6619] netlink: 4 bytes leftover after parsing attributes in process `syz.3.687'.
[  252.392028][ T6619] team0: Port device team_slave_0 removed
[  252.492007][ T6624] loop2: detected capacity change from 0 to 164
[  252.747221][ T6624] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  252.902303][ T6628] loop2: detected capacity change from 0 to 1764
[  252.957139][ T6628] iso9660: Unexpected value for 'showassoc'
[  253.066465][ T6630] loop2: detected capacity change from 0 to 512
[  253.620316][ T6633] syz.2.694 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  253.672738][ T6633] CPU: 1 UID: 0 PID: 6633 Comm: syz.2.694 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  253.672840][ T6633] Tainted: [W]=WARN
[  253.672849][ T6633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  253.672874][ T6633] Call Trace:
[  253.672883][ T6633]  <TASK>
[  253.672893][ T6633]  __dump_stack+0x1d/0x30
[  253.672926][ T6633]  dump_stack_lvl+0x95/0xd0
[  253.672949][ T6633]  dump_stack+0x15/0x1b
[  253.673033][ T6633]  dump_header+0x80/0x240
[  253.673079][ T6633]  oom_kill_process+0x295/0x350
[  253.673109][ T6633]  out_of_memory+0x97d/0xb80
[  253.673132][ T6633]  try_charge_memcg+0x62e/0xa10
[  253.673172][ T6633]  mem_cgroup_swapin_charge_folio+0x103/0x1f0
[  253.673279][ T6633]  __swap_cache_prepare_and_add+0x386/0x530
[  253.673315][ T6633]  swap_cache_alloc_folio+0xa2/0x120
[  253.673390][ T6633]  swap_cluster_readahead+0x26e/0x3d0
[  253.673468][ T6633]  swapin_readahead+0xde/0x840
[  253.673495][ T6633]  ? __rcu_read_unlock+0x4e/0x70
[  253.673521][ T6633]  ? __perf_event_task_sched_in+0xa65/0xad0
[  253.673553][ T6633]  ? __list_add_valid_or_report+0x38/0xe0
[  253.673611][ T6633]  ? __rcu_read_unlock+0x4e/0x70
[  253.673635][ T6633]  ? swap_cache_get_folio+0x26f/0x280
[  253.673666][ T6633]  do_swap_page+0x30d/0x2220
[  253.673775][ T6633]  ? __schedule+0x93c/0xd40
[  253.673802][ T6633]  ? __rcu_read_lock+0x36/0x50
[  253.673821][ T6633]  ? pte_offset_map_rw_nolock+0x19e/0x200
[  253.673922][ T6633]  handle_mm_fault+0xb46/0x3020
[  253.673959][ T6633]  ? vma_start_read+0x1c7/0x2c0
[  253.674051][ T6633]  do_user_addr_fault+0x62f/0x1050
[  253.674090][ T6633]  ? trace_page_fault_user+0x1f/0xe0
[  253.674121][ T6633]  exc_page_fault+0x62/0xa0
[  253.674204][ T6633]  asm_exc_page_fault+0x26/0x30
[  253.674234][ T6633] RIP: 0033:0x7f120cbc78c3
[  253.674251][ T6633] Code: 25 00 03 00 00 e8 9d 50 06 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 53 49 89 ca 64 48 8b 1c 25 10 00 00 00 8b 83 08 03 00 00 <80> 3d ee 5d 29 00 00 75 44 a8 01 75 40 a8 10 75 3c 41 51 4c 8d 9b
[  253.674309][ T6633] RSP: 002b:00007fff90b52720 EFLAGS: 00010246
[  253.674329][ T6633] RAX: 0000000000000000 RBX: 0000555572a85500 RCX: 0000000000000000
[  253.674345][ T6633] RDX: 00007fff90b52760 RSI: 0000000000000000 RDI: 0000000000000000
[  253.674362][ T6633] RBP: 00007f120ce87da0 R08: 0000000000000000 R09: 0000000000000000
[  253.674374][ T6633] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000003e087
[  253.674386][ T6633] R13: 00007f120ce85fac R14: 000000000003dd7c R15: 00007fff90b52890
[  253.674483][ T6633]  </TASK>
[  253.674495][ T6633] memory: usage 307200kB, limit 307200kB, failcnt 3418
[  253.939896][ T6633] memory+swap: usage 264244kB, limit 9007199254740988kB, failcnt 0
[  253.947944][ T6633] kmem: usage 259580kB, limit 9007199254740988kB, failcnt 0
[  253.955253][ T6633] Memory cgroup stats for /syz2:
[  253.955626][ T6633] cache 0
[  253.963732][ T6633] rss 24576
[  253.976734][ T6633] shmem 0
[  253.979730][ T6633] mapped_file 0
[  253.983203][ T6633] dirty 0
[  253.986155][ T6633] writeback 12288
[  253.996769][ T6633] workingset_refault_anon 17
[  254.001408][ T6633] workingset_refault_file 1522
[  254.006193][ T6633] swap 4468736
[  254.026719][ T6633] swapcached 10813440
[  254.030756][ T6633] pgpgin 425892
[  254.034240][ T6633] pgpgout 425879
[  254.056748][ T6633] pgfault 292479
[  254.060606][ T6633] pgmajfault 11
[  254.064126][ T6633] inactive_anon 20480
[  254.076733][ T6633] active_anon 32768
[  254.080593][ T6633] inactive_file 0
[  254.084244][ T6633] active_file 0
[  254.126739][ T6633] unevictable 0
[  254.130329][ T6633] hierarchical_memory_limit 314572800
[  254.135806][ T6633] hierarchical_memsw_limit 9223372036854771712
[  254.166746][ T6633] total_cache 0
[  254.170263][ T6633] total_rss 24576
[  254.173926][ T6633] total_shmem 0
[  254.196816][ T6633] total_mapped_file 0
[  254.200913][ T6633] total_dirty 0
[  254.204407][ T6633] total_writeback 12288
[  254.220280][ T6633] total_workingset_refault_anon 17
[  254.225438][ T6633] total_workingset_refault_file 1522
[  254.256741][ T6633] total_swap 4468736
[  254.266782][ T6633] total_swapcached 10813440
[  254.271313][ T6633] total_pgpgin 425892
[  254.275345][ T6633] total_pgpgout 425879
[  254.306733][ T6633] total_pgfault 292479
[  254.310869][ T6633] total_pgmajfault 11
[  254.314998][ T6633] total_inactive_anon 20480
[  254.349871][ T6633] total_active_anon 32768
[  254.365148][ T6633] total_inactive_file 0
[  254.369521][ T6633] total_active_file 0
[  254.373608][ T6633] total_unevictable 0
[  254.400181][ T6633] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.81,pid=3868,uid=0
[  254.480875][ T6633] Memory cgroup out of memory: Killed process 3868 (syz.2.81) total-vm:98532kB, anon-rss:1232kB, file-rss:24896kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000
[  254.670177][ T6656] siw: device registration error -23
[  254.681979][ T6656] loop1: detected capacity change from 0 to 512
[  255.199777][ T6662] SET target dimension over the limit!
[  255.241866][ T6662] loop2: detected capacity change from 0 to 4096
[  255.257497][ T6662] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  255.349300][ T6662] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  255.699395][ T6672] loop1: detected capacity change from 0 to 512
[  255.775004][ T6672] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal
[  255.852919][ T6675] netlink: 40 bytes leftover after parsing attributes in process `syz.2.700'.
[  255.944581][ T6675] netlink: 260 bytes leftover after parsing attributes in process `syz.2.700'.
[  255.995955][ T6677] loop3: detected capacity change from 0 to 512
[  256.018042][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  256.167680][ T6677] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  256.227269][ T6677] EXT4-fs (loop3): group descriptors corrupted!
[  256.238719][ T6685] siw: device registration error -23
[  256.252656][ T6685] loop1: detected capacity change from 0 to 512
[  256.374766][ T6682] loop2: detected capacity change from 0 to 2048
[  256.493961][ T6682] Alternate GPT is invalid, using primary GPT.
[  256.526324][ T6682]  loop2: p2 p3 p7
[  256.640087][ T3001] Alternate GPT is invalid, using primary GPT.
[  256.660551][ T3001]  loop2: p2 p3 p7
[  256.739215][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[  256.743092][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory
[  256.760618][ T3774] udevd[3774]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  256.935132][ T3774] udevd[3774]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  256.975647][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[  256.995367][ T6696] loop2: detected capacity change from 0 to 512
[  257.009785][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory
[  257.448750][ T6695] SET target dimension over the limit!
[  257.523953][ T6700] siw: device registration error -23
[  257.537112][ T6700] loop1: detected capacity change from 0 to 512
[  257.962262][ T6695] loop3: detected capacity change from 0 to 4096
[  258.016897][ T6695] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  258.163150][ T6695] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  258.222442][ T6706] netlink: 80 bytes leftover after parsing attributes in process `syz.1.712'.
[  258.324660][ T6709] SET target dimension over the limit!
[  258.406298][ T6709] loop0: detected capacity change from 0 to 4096
[  258.540058][ T6709] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  258.576827][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  258.624048][ T6719] SET target dimension over the limit!
[  258.633177][ T6722] SET target dimension over the limit!
[  258.690853][ T6722] loop2: detected capacity change from 0 to 4096
[  258.998164][ T6709] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  259.047449][ T6722] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  259.279286][ T6722] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  259.360035][ T6719] loop4: detected capacity change from 0 to 4096
[  259.373627][ T6727] loop3: detected capacity change from 0 to 512
[  259.389222][ T6728] netlink: 40 bytes leftover after parsing attributes in process `syz.0.713'.
[  259.416790][ T6728] netlink: 260 bytes leftover after parsing attributes in process `syz.0.713'.
[  259.478289][ T6719] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  259.517753][ T6719] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  259.605271][ T6727] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #3: comm syz.3.715: corrupted inode contents
[  259.634079][ T6733] loop1: detected capacity change from 0 to 8192
[  259.642173][ T6734] netlink: 40 bytes leftover after parsing attributes in process `syz.2.727'.
[  259.691979][ T6733]  loop1: p1 p2 p4[DM]
[  259.706771][ T6733] loop1: p1 size 67898881 extends beyond EOD, truncated
[  259.707322][ T6727] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  259.716702][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  259.732263][    C1] EXT4-fs (loop3): initial error at time 1773246178: ext4_do_update_inode:5569: inode 3
[  259.742042][    C1] EXT4-fs (loop3): last error at time 1773246178: ext4_do_update_inode:5569: inode 3
[  259.752523][ T6735] netlink: 40 bytes leftover after parsing attributes in process `syz.4.714'.
[  259.761850][ T6727] EXT4-fs (loop3): Remounting filesystem read-only
[  259.762019][ T6734] netlink: 260 bytes leftover after parsing attributes in process `syz.2.727'.
[  259.778021][ T6727] Quota error (device loop3): write_blk: dquota write failed
[  259.779275][ T6733] loop1: p4 start 393224 is beyond EOD, truncated
[  259.788662][ T6727] Quota error (device loop3): qtree_write_dquot: Error -30 occurred while creating quota
[  259.802177][ T6735] netlink: 260 bytes leftover after parsing attributes in process `syz.4.714'.
[  259.802916][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  259.873593][ T6727] EXT4-fs (loop3): 1 truncate cleaned up
[  259.891074][ T3774] udevd[3774]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[  259.907989][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  259.933422][ T6727] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  260.006988][ T6727] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  260.039109][ T6740] tmpfs: Bad value for 'mpol'
[  260.046098][   T28] audit: type=1400 audit(1773246178.387:401): avc:  denied  { mounton } for  pid=6739 comm="syz.0.719" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[  260.141643][ T6744] loop0: detected capacity change from 0 to 512
[  260.156869][   T28] audit: type=1400 audit(1773246178.437:402): avc:  denied  { allowed } for  pid=6738 comm="syz.1.721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  260.197176][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  260.216116][   T28] audit: type=1400 audit(1773246178.437:403): avc:  denied  { sqpoll } for  pid=6738 comm="syz.1.721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  260.257816][ T6744] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  260.447332][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  260.467155][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  260.473056][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  261.134560][ T6762] SET target dimension over the limit!
[  261.316950][ T6762] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  261.338425][ T6762] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  261.649569][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  261.750074][ T6771] set_capacity_and_notify: 2 callbacks suppressed
[  261.750091][ T6771] loop2: detected capacity change from 0 to 512
[  262.212059][ T6778] loop0: detected capacity change from 0 to 256
[  262.245755][ T6778] msdos: Bad value for 'tz'
[  262.324660][ T6782] loop0: detected capacity change from 0 to 512
[  262.426730][ T6782] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  262.496327][ T6787] SET target dimension over the limit!
[  262.496990][ T6782] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it
[  262.526878][ T6787] loop4: detected capacity change from 0 to 4096
[  262.534039][ T6787] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  262.590990][ T6782] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.734: Corrupt directory, running e2fsck is recommended
[  262.605196][ T6787] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  262.630043][ T6782] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2
[  262.638264][ T6782] EXT4-fs error (device loop0): ext4_iget_extra_inode:5025: inode #15: comm syz.0.734: corrupted in-inode xattr: invalid ea_ino
[  262.651846][ T6782] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  262.652112][ T6782] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.734: couldn't read orphan inode 15 (err -117)
[  262.661401][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  262.661432][    C0] EXT4-fs (loop0): initial error at time 1773246180: ext4_iget_extra_inode:5025: inode 15
[  262.661471][    C0] EXT4-fs (loop0): last error at time 1773246180: ext4_iget_extra_inode:5025: inode 15
[  262.747573][ T6793] SET target dimension over the limit!
[  262.763646][ T6782] loop0: lost filesystem error report for type 5 error -117
[  262.773553][ T6782] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  262.857779][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  262.874389][ T6796] siw: device registration error -23
[  262.888483][ T6796] loop3: detected capacity change from 0 to 512
[  262.971502][ T6797] netlink: 40 bytes leftover after parsing attributes in process `syz.4.735'.
[  263.081046][ T6798] loop1: detected capacity change from 0 to 128
[  263.116372][ T6793] loop2: detected capacity change from 0 to 4096
[  263.223283][ T6797] netlink: 260 bytes leftover after parsing attributes in process `syz.4.735'.
[  263.283449][ T6793] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  263.497398][ T6793] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  263.618304][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  263.636837][ T6803] netlink: 40 bytes leftover after parsing attributes in process `syz.2.736'.
[  263.737412][ T6803] netlink: 260 bytes leftover after parsing attributes in process `syz.2.736'.
[  263.873837][ T6807] siw: device registration error -23
[  263.880883][ T6807] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  263.895888][ T6807] loop3: detected capacity change from 0 to 512
[  264.186501][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  264.390105][ T6810] loop4: detected capacity change from 0 to 8192
[  264.397910][ T6814] netlink: 80 bytes leftover after parsing attributes in process `syz.2.743'.
[  264.460743][ T3301]  loop4: p1 p3 p4[EZD]
[  264.465269][ T3301] loop4: p1 start 262144 is beyond EOD, truncated
[  264.478692][ T3301] loop4: p3 start 331781 is beyond EOD, truncated
[  264.496451][ T3301] loop4: p4 size 197376 extends beyond EOD, truncated
[  264.523569][ T6810]  loop4: p1 p3 p4[EZD]
[  264.542310][ T6810] loop4: p1 start 262144 is beyond EOD, truncated
[  264.550082][   T28] audit: type=1400 audit(1773246182.887:404): avc:  denied  { create } for  pid=6813 comm="syz.2.743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  264.586382][ T6810] loop4: p3 start 331781 is beyond EOD, truncated
[  264.666894][ T6810] loop4: p4 size 197376 extends beyond EOD, truncated
[  264.899286][ T6826] loop3: detected capacity change from 0 to 128
[  264.928150][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[  265.080928][ T6832] siw: device registration error -23
[  265.512870][   T28] audit: type=1400 audit(1773246183.847:405): avc:  denied  { write } for  pid=6825 comm="syz.4.747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  265.874286][ T6846] SET target dimension over the limit!
[  265.907582][ T6841] FAT-fs (loop0): Directory bread(block 64) failed
[  265.914158][ T6841] FAT-fs (loop0): Directory bread(block 65) failed
[  265.920864][ T6841] FAT-fs (loop0): Directory bread(block 66) failed
[  265.927470][ T6841] FAT-fs (loop0): Directory bread(block 67) failed
[  265.934101][ T6841] FAT-fs (loop0): Directory bread(block 68) failed
[  265.940684][ T6841] FAT-fs (loop0): Directory bread(block 69) failed
[  265.947326][ T6841] FAT-fs (loop0): Directory bread(block 70) failed
[  265.953982][ T6841] FAT-fs (loop0): Directory bread(block 71) failed
[  265.960625][ T6841] FAT-fs (loop0): Directory bread(block 72) failed
[  265.967407][ T6841] FAT-fs (loop0): Directory bread(block 73) failed
[  266.275653][ T6843] ==================================================================
[  266.283881][ T6843] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping
[  266.291728][ T6843] 
[  266.294074][ T6843] write to 0xffffea00047fefd8 of 8 bytes by task 6774 on cpu 0:
[  266.301706][ T6843]  __filemap_remove_folio+0x201/0x310
[  266.307145][ T6843]  filemap_remove_folio+0x6d/0x1d0
[  266.312289][ T6843]  truncate_inode_folio+0x42/0x50
[  266.317428][ T6843]  shmem_undo_range+0x26d/0xb10
[  266.322300][ T6843]  shmem_evict_inode+0x12e/0x510
[  266.327263][ T6843]  evict+0x2af/0x510
[  266.331187][ T6843]  iput+0x41a/0x580
[  266.335002][ T6843]  dentry_unlink_inode+0x24f/0x260
[  266.340216][ T6843]  __dentry_kill+0x13f/0x460
[  266.344875][ T6843]  finish_dput+0x2b/0x200
[  266.349229][ T6843]  dput+0x52/0x60
[  266.352885][ T6843]  __fput+0x444/0x650
[  266.356881][ T6843]  ____fput+0x1c/0x30
[  266.360882][ T6843]  task_work_run+0x130/0x1a0
[  266.365535][ T6843]  do_exit+0x4ae/0x1600
[  266.369716][ T6843]  do_group_exit+0xfe/0x140
[  266.374233][ T6843]  get_signal+0xe54/0xf60
[  266.378749][ T6843]  arch_do_signal_or_restart+0x96/0x450
[  266.384590][ T6843]  irqentry_exit+0xf7/0x520
[  266.389132][ T6843]  asm_exc_page_fault+0x26/0x30
[  266.394173][ T6843] 
[  266.396506][ T6843] read to 0xffffea00047fefd8 of 8 bytes by task 6843 on cpu 1:
[  266.404052][ T6843]  folio_mapping+0xa1/0xe0
[  266.408570][ T6843]  evict_folios+0xdfa/0x35c0
[  266.413206][ T6843]  try_to_shrink_lruvec+0x81b/0xbf0
[  266.418444][ T6843]  shrink_lruvec+0x255/0x1c60
[  266.423164][ T6843]  shrink_node+0x67a/0x2130
[  266.427764][ T6843]  do_try_to_free_pages+0x408/0xc80
[  266.433073][ T6843]  try_to_free_mem_cgroup_pages+0x1f5/0x470
[  266.439003][ T6843]  try_charge_memcg+0x37e/0xa10
[  266.443885][ T6843]  obj_cgroup_charge_pages+0x23/0xc0
[  266.449198][ T6843]  __memcg_kmem_charge_page+0x9e/0x170
[  266.454665][ T6843]  __alloc_frozen_pages_noprof+0x18a/0x360
[  266.460569][ T6843]  __alloc_pages_noprof+0x9/0x20
[  266.465512][ T6843]  __vmalloc_node_range_noprof+0x9ea/0x12b0
[  266.471417][ T6843]  bpf_map_area_alloc+0xfa/0x140
[  266.476384][ T6843]  bloom_map_alloc+0x1b8/0x2c0
[  266.481189][ T6843]  map_create+0x862/0xda0
[  266.485529][ T6843]  __sys_bpf+0x5c8/0x7e0
[  266.489886][ T6843]  __x64_sys_bpf+0x41/0x50
[  266.494323][ T6843]  x64_sys_call+0x10cb/0x3020
[  266.499011][ T6843]  do_syscall_64+0x12c/0x370
[  266.503605][ T6843]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  266.509592][ T6843] 
[  266.511915][ T6843] value changed: 0xffff88811b91c4d8 -> 0x0000000000000000
[  266.519018][ T6843] 
[  266.521336][ T6843] Reported by Kernel Concurrency Sanitizer on:
[  266.527481][ T6843] CPU: 1 UID: 0 PID: 6843 Comm: syz.4.749 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  266.538330][ T6843] Tainted: [W]=WARN
[  266.542130][ T6843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  266.552207][ T6843] ==================================================================
[  266.585786][ T6851] netlink: 80 bytes leftover after parsing attributes in process `syz.2.753'.
[  266.674864][ T6846] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  266.694914][ T6846] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  266.907070][ T6857] netlink: 40 bytes leftover after parsing attributes in process `syz.1.751'.
[  266.926741][ T6857] netlink: 260 bytes leftover after parsing attributes in process `syz.1.751'.
[  267.067107][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.