last executing test programs:

23.81203197s ago: executing program 2 (id=297):
r0 = socket(0x1e, 0x4, 0x0) (async, rerun: 64)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400000008d7460001"], 0x48) (rerun: 64)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r1, &(0x7f0000000040), 0x0}, 0x20)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) (async)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async, rerun: 64)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async, rerun: 64)
recvmmsg(r2, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000480)=""/4085, 0xff5}], 0x1}, 0xbe58}], 0x1, 0x7ffeedc0, 0x0) (async, rerun: 64)
r3 = socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 64)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="60000000031401002dbd7000fbfbdf250900020073797a31000000000800410062786c6f"], 0x60}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1213, &(0x7f0000000600)="$eJzs3E9rXFUYB+A3Y2rS1PxRa7Vd6AtuxMWlycKVIEFSkAwotRFaQbg1Ex0yzpTcITAiVldu/Ryu3Ql+g2z8DO6y6bIL8UrvNG1SU4vQZMQ+z2Luyz3nxzkHhoEz3HP33/3xq+2tqtgqh9GamorWrYi8m5HRigOvr4+v12+sr7bba1czr6xeW34nMxfe+PXTb2Yi4twnPy/8MhN7S5/t31n5fe/C3sX9P6992a2yW2V/MMwybw4Gw/JmbyE3u9V2kflRr1NWnez2q87OofZObr0dEaMs+5vzc7d2OlWVZX+U251RDgc53Bll+UXZ7WdRFDk/FzzWmSd32fjpbl3XEXV9Jp6Puq7rszEX5+KFmI+F+C4iXoyX4uU4H6/EhXg1XouLTa/TmD4AAAAAAAAAAAAAAAAAAAA8O/7p/P9iLDn/DwAAAAAAAAAAAAAAAAAAAKfg4+s31lfb7bWrmbMRvR92N3Y3xtdx+9K9j1504nIsxh/RnP4fG9dXPmivXc7GUnzfu30/f3t347kmv3qQX25eJ3A/P920HeSXx/k8mp+JuXv5reg2+ZVYjPPHj79ybH423nrzUL6Ixfjt8xhELzabsR/mv13OfP/D9iP5S00/AAAA+D8o8oFj9+9F8bj2cf7B/vrJ/w88sr+ejkvTk107EdXo6+2y1evsNEXvoJj9252TK+IUx3q6RcSduilmjja1TmjQVkx8yYeKqf/GNBRPpzgbR+9M+peJ0/DwazDpmQAAAAAAAAAAAPBvnPBzhdNxzJNl701mqQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzFDhwLAAAAAAjzt06jYwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCoAAP//qH3FUA==")
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
ppoll(&(0x7f00000000c0)=[{r4, 0x4}, {r4}], 0x2, 0x0, 0x0, 0x0) (async, rerun: 32)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000000000)={0x0, 0xa, 0x40000}, 0x20) (async, rerun: 32)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) (async)
io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0) (async)
close_range(r2, 0xffffffffffffffff, 0x0)

23.759134583s ago: executing program 2 (id=299):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x100}, 0x94) (async)
r1 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) (rerun: 32)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000980)) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ip6gretap0\x00', <r6=>0x0}) (async)
r7 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) (async)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x9, &(0x7f00000001c0), &(0x7f0000000200)=0x14) (async, rerun: 64)
r9 = socket(0x2a, 0x2, 0x0) (rerun: 64)
getsockname$packet(r9, &(0x7f00000001c0)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, &(0x7f00000004c0)) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000)
sendmsg$nl_route_sched(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xfffa, 0xfff3}, {0x0, 0xffe0}, {0x10, 0x4}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x4, 0xfff3}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048001}, 0x4044) (async)
sendmsg$ETHTOOL_MSG_WOL_SET(r4, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="58010000", @ANYRES16=r5, @ANYBLOB="000427bd7000fbdbdf250a0000003800018008000100", @ANYRES32=r6, @ANYBLOB="08000300030000001400020067656e6576653100000000000000000008000100", @ANYRES32=r8, @ANYBLOB="0800030000000000be000300581028b559569e5d7c4c09e88acf0e6149610d23f386cd26c953fc434a604b64a780c536eef1a8421376070ae54d17ece7af556aeaa9d14df37116696451dad59990b314f844061437c25162b4b86032443fbbe8589463be7cab128fea4a23289a14b91e59f186ec571b7fcadc42a825349e19031bad5dd680a7377b61f216b96ac96facc39f03cf794b3c2688af29754962b96f4e055bebf06c95ced6925300fdde4af3c9af569aabf84a87e9b6e8e2f1a5133308698680a20000004c000180080003000100000008000300010000001400020073797a6b616c6c65723100000000000008000100", @ANYRES32=r10, @ANYBLOB="14000200766900745f77456669300000000000000800030002000000cc2562061f6dcdf898befd22700c27e3a72819aea4b4e12c85a9cef04671cc8bcec174f53839e8a35912"], 0x158}, 0x1, 0x0, 0x0, 0x8000}, 0x90) (async, rerun: 64)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) (rerun: 64)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x49, 0x100000, 0x3, 0x3}, 0x10) (async)
r11 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r11) (async)
readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1)
ptrace$setregs(0xd, r11, 0x2, &(0x7f0000000180)) (async)
ptrace$cont(0x21, r11, 0x80000001, 0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00')

23.571828074s ago: executing program 2 (id=301):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = gettid()
r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x88604, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x20000, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0x4}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) (async)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000040)=0x2)

23.509030428s ago: executing program 2 (id=303):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000100000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="00800000000000000045a9000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xf}, 0x50)
r2 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ipvlan0\x00'})
r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
r5 = socket$tipc(0x1e, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'vlan0\x00'})
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x40002, 0x0, 0x1, 0x0, &(0x7f0000000080))
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./bus/file0\x00', 0x80008, 0x0, 0x0, 0x0, &(0x7f0000000000))
r6 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000001c0)=0x10)
rename(&(0x7f0000000100)='./bus/file0\x00', &(0x7f0000000080)='./mnt\x00')
bind$tipc(r5, &(0x7f0000000200)=@name={0x1e, 0x2, 0x3, {{0x42, 0x4}, 0x4}}, 0x10)
bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x206}}, 0x10)
r7 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r7, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
bind$tipc(r5, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10)
r8 = socket$tipc(0x1e, 0x2, 0x0)
r9 = syz_io_uring_complete(0x0)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r9, 0x5760, 0x0)
bind$tipc(r8, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0xfffffffd}}, 0x10)
fchmod(r8, 0x1)
bind$tipc(r7, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x20000003}}, 0x10)
bind$tipc(r7, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10)
r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r9)
sendmsg$BATADV_CMD_SET_HARDIF(r6, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB="390000002a2c528ba8bffb1324ef4a62537f75e3d4d740e17e1e8c99ac3e6f90e4332a6b61820c842e0b1df7961f7cb3f120fc51108c73", @ANYRES16=r10, @ANYBLOB="000229bd7000fedbdf251000000005003800fc000000050033000200000008003c00050000000a000900aaaaaaaaaabb0000"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x800)
bind$tipc(r5, 0x0, 0x0)

23.340106237s ago: executing program 2 (id=305):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000002c0), &(0x7f0000000040)=0x8)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4)
setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x2000000000000133, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd8f}, 0x90)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

23.019597675s ago: executing program 2 (id=308):
r0 = socket$key(0xf, 0x3, 0x2)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@errors_remount}]}, 0x4, 0x523, &(0x7f00000018c0)="$eJzs3cFvG1kZAPBvnLhJs+mmC3sABGxZFgqq6iTubrTqhfYCQlUlRMWJQxsSN4pi11Hsiib0kB65V6ISJ+A/4MYBqScO3LjBjUs5IBWoQA0SB6MZT1I3sZNAnbiJfz9pMvPeTP29F/e953mR5wUwtC5ExGZEnImIOxExlecn+RbX2lt63csXDxe2XjxcSKLVuvX3JDuf5kXHv0m9k7/meER8/zsRP0r2xm2sb6zMV6uVtTw93aytTjfWNy4vF/Kc8tzs3MynVz4p962uH9R+/fzbyzd+8NvffOnZHza/+ZO0WJM/PZed66xHP7WrXozJjrzRiLhxFMEGZDT//8PJk7a2z0TEh1n7n4qR7N0EAE6zVmsqWlOdaQDgtEvv/ycjKZTyuYDJKBRKpfYc3vsxUajWG81LU/X79xYjm8M6H8XC3eVqZSafKzwfxSRNz2bHr9Ll19KPK1ci4r2IeDx2NjtfWqhXFwf5wQcAhtg7u8b/f421x/9OxUEVDgA4OuODLgAAcOyM/wAwfIz/ADB8/ofx37cDAeCUcP8PAMPH+A8Aw+fA8f/R8ZQDADgW37t5M91aW+3nX28/qfvyYqWxUqrdXygt1NdWS0v1+lK1UlpotQ56vWq9vjr78U6ysb5xu1a/f695e7k2v1S5XfEsAQAYvPc+ePqndNDfvHo226JjLQdjNZxuhUEXABiYkUEXABgY3+eB4XWIe3zTAHDKdVmity2fIEh6XfDE4q9wUl38vPl/GFZvMv9v7gBOtv9v/v9bfS8HcPyM4TC8Wq3Emv8AMGTM8QM9//6f6/mIkCf9LwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcFJPZlhRK2Vrgm+nPQqkUcS4izkcxubtcrcxExLsR8cex4lianh10oQGAN1T4a5Kv/3Vx6qPJ3WfPJP8ey/YR8eOf3/rZg/lmc202zf/HTn7zSZp/trlWPjOICgAAna7tzcrG73K+77iRf/ni4cL2dpxFfH69vbhoGncr39pnRmM0249HMSIm/pnk6bb088pIH+JvPoqIz23XfzwedESYzOZA2iuf7o6fxj7X9/idv//d8Quv1beQnUv3xex38dnYVTjgQE+vt/vJvO2lTTxvf4W4kO27t//xrId6c2n/lzbXrT39X2Gn/xvZEz/J2vyFnfT+JXn+8e++uyezNdU+9yjiC6Pd4ic78ZPu/W/xo0PW8c9f/PKHvc61fhFxsWv9t1ekrmXd7HSztjrdWN+4vFybX6osVe6Vy3OzczOfXvmkPJ3NUbd//r5bjL9dvfRur/hp/Sd6xB/fv/7xtUPW/5f/ufPDr+wT/xtf7f7+v79P/HRM/Poh489PXOu5fHcaf7FH/Q94/+PSIeM/+8vG4iEvBQCOQWN9Y2W+Wq2sHXCQftY86BoHhz9I7+3fgmJkB7EZ0a8XzCYlIqLrNekn6rejykd1kAws+q/6/YKD7pmAo/aq0Q+6JAAAAAAAAAAAAAAAQC+N9Y2Vse7f1urbwaDrCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOn13wAAAP//KHnENg==")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2901401, 0x0, 0x0, 0x0, &(0x7f000009de00))
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x101042, 0x0)
pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
preadv2(r2, &(0x7f0000000300)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, 0x0, 0xffffffff, 0x0)
ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f00000000c0)={'wg2\x00', 0x9})
unlink(&(0x7f0000000040)='./file1\x00')
sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="02030002100000000000080008000000fd0000000000000005000600000000000a004e24000000012001000000000000000000000000000201000000000000000200010000000000000000000000000005000500000000000a"], 0x80}, 0x1, 0x7}, 0x0)
socket$key(0xf, 0x3, 0x2) (async)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@errors_remount}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") (async)
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2901401, 0x0, 0x0, 0x0, &(0x7f000009de00)) (async)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") (async)
openat(0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x101042, 0x0) (async)
pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) (async)
open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) (async)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) (async)
preadv2(r2, &(0x7f0000000300)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, 0x0, 0xffffffff, 0x0) (async)
ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f00000000c0)={'wg2\x00', 0x9}) (async)
unlink(&(0x7f0000000040)='./file1\x00') (async)
sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="02030002100000000000080008000000fd0000000000000005000600000000000a004e24000000012001000000000000000000000000000201000000000000000200010000000000000000000000000005000500000000000a"], 0x80}, 0x1, 0x7}, 0x0) (async)

22.957172059s ago: executing program 32 (id=308):
r0 = socket$key(0xf, 0x3, 0x2)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@errors_remount}]}, 0x4, 0x523, &(0x7f00000018c0)="$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")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2901401, 0x0, 0x0, 0x0, &(0x7f000009de00))
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x101042, 0x0)
pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
preadv2(r2, &(0x7f0000000300)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, 0x0, 0xffffffff, 0x0)
ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f00000000c0)={'wg2\x00', 0x9})
unlink(&(0x7f0000000040)='./file1\x00')
sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="02030002100000000000080008000000fd0000000000000005000600000000000a004e24000000012001000000000000000000000000000201000000000000000200010000000000000000000000000005000500000000000a"], 0x80}, 0x1, 0x7}, 0x0)
socket$key(0xf, 0x3, 0x2) (async)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@errors_remount}]}, 0x4, 0x523, &(0x7f00000018c0)="$eJzs3cFvG1kZAPBvnLhJs+mmC3sABGxZFgqq6iTubrTqhfYCQlUlRMWJQxsSN4pi11Hsiib0kB65V6ISJ+A/4MYBqScO3LjBjUs5IBWoQA0SB6MZT1I3sZNAnbiJfz9pMvPeTP29F/e953mR5wUwtC5ExGZEnImIOxExlecn+RbX2lt63csXDxe2XjxcSKLVuvX3JDuf5kXHv0m9k7/meER8/zsRP0r2xm2sb6zMV6uVtTw93aytTjfWNy4vF/Kc8tzs3MynVz4p962uH9R+/fzbyzd+8NvffOnZHza/+ZO0WJM/PZed66xHP7WrXozJjrzRiLhxFMEGZDT//8PJk7a2z0TEh1n7n4qR7N0EAE6zVmsqWlOdaQDgtEvv/ycjKZTyuYDJKBRKpfYc3vsxUajWG81LU/X79xYjm8M6H8XC3eVqZSafKzwfxSRNz2bHr9Ll19KPK1ci4r2IeDx2NjtfWqhXFwf5wQcAhtg7u8b/f421x/9OxUEVDgA4OuODLgAAcOyM/wAwfIz/ADB8/ofx37cDAeCUcP8PAMPH+A8Aw+fA8f/R8ZQDADgW37t5M91aW+3nX28/qfvyYqWxUqrdXygt1NdWS0v1+lK1UlpotQ56vWq9vjr78U6ysb5xu1a/f695e7k2v1S5XfEsAQAYvPc+ePqndNDfvHo226JjLQdjNZxuhUEXABiYkUEXABgY3+eB4XWIe3zTAHDKdVmity2fIEh6XfDE4q9wUl38vPl/GFZvMv9v7gBOtv9v/v9bfS8HcPyM4TC8Wq3Emv8AMGTM8QM9//6f6/mIkCf9LwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcFJPZlhRK2Vrgm+nPQqkUcS4izkcxubtcrcxExLsR8cex4lianh10oQGAN1T4a5Kv/3Vx6qPJ3WfPJP8ey/YR8eOf3/rZg/lmc202zf/HTn7zSZp/trlWPjOICgAAna7tzcrG73K+77iRf/ni4cL2dpxFfH69vbhoGncr39pnRmM0249HMSIm/pnk6bb088pIH+JvPoqIz23XfzwedESYzOZA2iuf7o6fxj7X9/idv//d8Quv1beQnUv3xex38dnYVTjgQE+vt/vJvO2lTTxvf4W4kO27t//xrId6c2n/lzbXrT39X2Gn/xvZEz/J2vyFnfT+JXn+8e++uyezNdU+9yjiC6Pd4ic78ZPu/W/xo0PW8c9f/PKHvc61fhFxsWv9t1ekrmXd7HSztjrdWN+4vFybX6osVe6Vy3OzczOfXvmkPJ3NUbd//r5bjL9dvfRur/hp/Sd6xB/fv/7xtUPW/5f/ufPDr+wT/xtf7f7+v79P/HRM/Poh489PXOu5fHcaf7FH/Q94/+PSIeM/+8vG4iEvBQCOQWN9Y2W+Wq2sHXCQftY86BoHhz9I7+3fgmJkB7EZ0a8XzCYlIqLrNekn6rejykd1kAws+q/6/YKD7pmAo/aq0Q+6JAAAAAAAAAAAAAAAQC+N9Y2Vse7f1urbwaDrCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOn13wAAAP//KHnENg==") (async)
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2901401, 0x0, 0x0, 0x0, &(0x7f000009de00)) (async)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") (async)
openat(0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x101042, 0x0) (async)
pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) (async)
open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) (async)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) (async)
preadv2(r2, &(0x7f0000000300)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, 0x0, 0xffffffff, 0x0) (async)
ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f00000000c0)={'wg2\x00', 0x9}) (async)
unlink(&(0x7f0000000040)='./file1\x00') (async)
sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="02030002100000000000080008000000fd0000000000000005000600000000000a004e24000000012001000000000000000000000000000201000000000000000200010000000000000000000000000005000500000000000a"], 0x80}, 0x1, 0x7}, 0x0) (async)

19.941716942s ago: executing program 3 (id=329):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents(r1, 0xfffffffffffffffd, 0x58)
r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
getsockname$packet(r2, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000140)=0x4)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000000c0)={0x26f, 0x9, 0x2, 0x0, 0x0, [{{r0}, 0x2}, {{r1}, 0x7e6}]})
symlinkat(0x0, 0xffffffffffffff9c, 0x0)
r3 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r4)
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000080)='proc\x00', 0x1000000, 0x0)
r5 = syz_open_procfs(r3, &(0x7f0000000100)='map_files\x00')
r6 = socket(0x40000000015, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, 0x0)
fchdir(r5)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0xfff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000380)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@usrjquota}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x785, &(0x7f0000001c00)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x40800}, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=<r7=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000021000/0x3000)=nil, 0x3000, 0x200000e)
timer_settime(r7, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
setreuid(0x0, 0xee00)
setrlimit(0x40000000000008, &(0x7f00000002c0)={0x4, 0x9})
r8 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil)
shmctl$SHM_LOCK(r8, 0xb)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a48000000060a01040000000000000000020000061c000400180001800e000100627974656f72646572000000040002800904010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x70}}, 0x20044004)

18.445084358s ago: executing program 4 (id=346):
syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x80c406, &(0x7f0000000100)=ANY=[@ANYRES16=0x0, @ANYRESHEX, @ANYRES8, @ANYRESOCT], 0xff, 0x2d3, &(0x7f0000000e80)="$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")
setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0)
lgetxattr(0x0, 0x0, 0x0, 0x0)
r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fchdir(0xffffffffffffffff)
r1 = inotify_init()
inotify_add_watch(r1, &(0x7f0000000440)='.\x00', 0x449)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents64(r2, 0x0, 0x0)

18.435429149s ago: executing program 4 (id=347):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1) (async)
pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
ioctl$TIOCGRS485(r2, 0x542e, &(0x7f0000000140)) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) (async)
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x7}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002)
io_setup(0x8, &(0x7f0000004200)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000004540)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0xfffc, r6, 0x0}]) (async)
r8 = openat$selinux_user(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
io_cancel(r7, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x2, 0x6, r8, &(0x7f0000000440)="64145d457366a4150b83", 0xa, 0x480000000000, 0x0, 0x1, r2}, &(0x7f00000004c0)) (async)
sendto$packet(r5, &(0x7f0000003440)="a1ee018fc15558b3789c5ae8fbf5", 0xe, 0x4001, &(0x7f0000003540)={0x11, 0xf5, r4, 0x1, 0xa9}, 0x14) (async)
r9 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6gretap0\x00', <r10=>0x0})
r11 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x1000000, {0x0, 0x0, 0x0, r10, {0x5, 0x3}, {0xffe0}, {0x8}}}, 0x24}}, 0x40004) (async)
r12 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f0000000b80)=@raw={'raw\x00', 0x3c1, 0x3, 0xb58, 0x978, 0xc8, 0x8, 0x978, 0x5803, 0xa88, 0x2e8, 0x2e8, 0xa88, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x948, 0x978, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x3, 0x2}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x0, 0x3}, {0xff, 0x1}, {0xf113, 0x2}, {0xabb, 0x2}, {0x9, 0x3}, {0x4, 0x1}, {0x3}, {0x2, 0x2}, {0x3, 0x2}, {0x1, 0x5}, {0xffffffff, 0x2}], [{0x401, 0x4d}, {0x7, 0x6}, {0x1, 0xfffffffb}, {0xcb, 0x622}, {0x8000, 0xfffffff3}, {0x4e, 0x10000}, {0x200}, {0x3, 0xdf}, {0x8, 0xfffff800}, {0x1, 0x2}, {0xe9b8, 0x9}], 0x3, 0x1a}, {[{0x0, 0x1}, {0x3, 0x1}, {0x2c, 0x1}, {0x5, 0x3}, {0x1, 0x1}, {0x12}, {0x45cd}, {0x6}, {0x7, 0x1}, {0x80000000, 0x2}, {0x6a, 0x3}], [{0x1, 0xe}, {0xffff, 0x5}, {0x2, 0x401}, {0x2, 0x3}, {0xfffffffd}, {0x6, 0x8}, {0x100, 0x4ada}, {0x7ad, 0x2}, {0x7, 0x1}, {0xfffffffc, 0x10000}, {0x0, 0x10}], 0x8, 0x2}, {[{0x7, 0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {0x400}, {0x8}, {0x7ff, 0x2}, {}, {0x8}, {0x6, 0x1}, {0xae, 0x3}], [{0x7fff, 0x6}, {0x2, 0x5}, {0x80000001, 0x1}, {0x1aa, 0x3211}, {0x0, 0x2}, {0x8, 0x4}, {0x4, 0x2}, {0x3, 0x9}, {0x2a54, 0x5}, {0x5, 0x7f}, {0xf2c, 0x3}], 0x2, 0xa}, {[{0x8c}, {0xf}, {0x1, 0x2}, {0x80000001, 0x1}, {0x4, 0x1}, {}, {0x78f, 0x3}, {0x8000, 0x3}, {0x9, 0x1}, {0x5, 0x3}, {0x1, 0x3}], [{0x10001, 0x2}, {0x9, 0x7}, {0x8, 0xffff}, {0x10000, 0x9}, {0xffffffff, 0x1ff}, {0x4}, {0x7, 0x6}, {0x8000, 0x200}, {0x231, 0x4}, {0x7, 0x8}, {0x4, 0xf}], 0x3, 0xb}, {[{0x7, 0x2}, {0xb4e}, {0x2, 0x3}, {0x2, 0x2}, {0x0, 0x2}, {0x3, 0x1}, {0xb, 0x3}, {0x3}, {0x10001, 0x1}, {0x4, 0x3}, {0x8, 0x3}], [{0x80000000, 0xc13}, {0xf, 0x9c1c}, {0xfffffdef, 0x6}, {0x7ff, 0x385}, {0xb271, 0x1a}, {0x7bd, 0x4}, {0x5ea, 0xf3}, {0x0, 0x4}, {0x4, 0x7}, {0x3, 0x1}, {0x4, 0x1}], 0x8, 0x8}, {[{0x4, 0x2}, {0x7fffffff, 0x1}, {0x1}, {0xda8}, {0x6}, {0x4}, {0xc3, 0x1}, {0x9}, {0x7fffffff, 0x2}, {0x5}, {0x2}], [{0x8, 0x9}, {0x3, 0x2}, {0xad, 0x8000}, {0x5, 0x8}, {0x24000, 0xfffeffff}, {0x40, 0x81}, {0x1, 0x4}, {0x2, 0x8}, {0x0, 0x7}, {0x2c114d41, 0xb}, {0xc46, 0x9}], 0x6, 0x6}, {[{0x8000, 0x3}, {0x923, 0x3}, {0x4, 0x2}, {0x5, 0x2}, {0x7f}, {0xffffffff}, {0x5}, {0xf3}, {0x7ff000, 0x2}, {0x2, 0x1}, {0x9}], [{0xf6, 0x3ff}, {0x0, 0x4}, {0xccd, 0x7}, {0x0, 0x40}, {0x0, 0x8001}, {0x3, 0x8000005}, {0xe, 0xffff5dfb}, {0x40, 0x2}, {0xd, 0x1}, {0xffff, 0x1}, {0x3, 0x4}], 0x3, 0x9}, {[{0x100, 0x2}, {0xe, 0x2}, {}, {0xca8, 0x3}, {0xdd11, 0x1}, {0x0, 0x3}, {0x4}, {0x4, 0x2}, {0x2, 0x1}, {0xfffffff7}, {0x200, 0x2}], [{0x8b58, 0xfff}, {0x8, 0x2}, {0x40, 0x9}, {0x5, 0x4}, {0xfffffffe, 0x9}, {0xce531f10, 0xf60}, {0xffff, 0x3}, {0x8, 0x6}, {0x2, 0x4}, {0x6, 0xa39}, {0x200, 0x1ff}], 0x3, 0x9}, {[{0x6, 0x3}, {0x4, 0x1}, {0x3b0e, 0x2}, {0x3ff}, {0xe4c}, {0x0, 0x2}, {0x7}, {0x5}, {0x2, 0x1}, {0x8}, {0xfff, 0x1}], [{0x7, 0x8000}, {0x6, 0x19}, {0x7, 0x4}, {0x9, 0x4}, {0xfffffffa, 0x1000}, {0x42b8, 0x1}, {0x1, 0xb8}, {0x6, 0x2}, {0x1, 0x2}, {0x5}, {0x6926, 0x1}], 0xa, 0x3}, {[{0x40}, {0x9}, {0x4}, {0x4, 0x3}, {0x1, 0x2}, {0x3, 0x3}, {0x78, 0x1}, {0xd, 0x1}, {0x242, 0x3}, {0x6}, {0x0, 0x1}], [{0x6, 0x3ff}, {0x6, 0x1d03}, {0x12, 0x8001}, {0xff, 0x80000000}, {0x52f, 0x10000}, {0x7fffffff, 0x1}, {0x10000, 0x4}, {0x7, 0x2}, {0x80000001, 0x3}, {0x6, 0x7a}, {0xfffffffd, 0x3}], 0x8, 0x2}, {[{0x7, 0x3}, {0x9e, 0x3}, {0x2, 0x3}, {0x5, 0x1}, {0x5, 0x2}, {0x9, 0x3}, {0xc85}, {0x1, 0x2}, {0x0, 0x1}, {0x3, 0x2}, {0x8, 0x3}], [{0x64, 0x7fff}, {0x8, 0x2}, {0x1, 0x7fff}, {0xffffff00, 0x10}, {0xda, 0x2}, {0x5, 0xd686}, {0x6, 0x1}, {0x3, 0x4}, {0x4, 0x7}, {0x8, 0x1}, {0x44, 0x2}], 0x6, 0x8}], 0x1, 0x1}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@mcast1, @loopback, [0xff, 0xffffff00, 0xffffff00, 0xffffff00], [0xffffff00, 0x0, 0xff000000, 0xff], 'sit0\x00', 'caif0\x00', {}, {}, 0x67, 0x3, 0x6, 0x20}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xbb8) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r11)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x4, 0x81, 0x0, 0x7ffc1ffb}]})
pipe2$9p(&(0x7f00000001c0), 0x0)

18.348553444s ago: executing program 4 (id=350):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
r0 = gettid()
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
read(r2, &(0x7f0000000080)=""/1, 0x1)
sendfile(r1, r2, &(0x7f00000002c0)=0x9, 0xe) (async)
sendfile(r1, r2, &(0x7f00000002c0)=0x9, 0xe)
openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async)
r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_io_uring_complete(0x0) (async)
r5 = syz_io_uring_complete(0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x61, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a70000000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000d2c00128014110180090001006c6173740000000004000280140001800c000100636f756e746572000400028008000340000001"], 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'veth0_virt_wifi\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'veth0_virt_wifi\x00', <r9=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03ef000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r9], 0x54}}, 0x0)
r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0)
ioctl$TIOCVHANGUP(r10, 0x5437, 0x0) (async)
ioctl$TIOCVHANGUP(r10, 0x5437, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r11 = socket$nl_route(0x10, 0x3, 0x0)
dup3(r11, r10, 0x0) (async)
dup3(r11, r10, 0x0)
syz_socket_connect_nvme_tcp() (async)
r12 = syz_socket_connect_nvme_tcp()
r13 = io_uring_setup(0x5415, &(0x7f00000006c0)={0x0, 0x2185, 0x40, 0x3, 0x3be})
r14 = socket$isdn(0x22, 0x3, 0x23)
r15 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r15, 0x10e, 0xc, &(0x7f0000000300)={0x7fffffff, 0xfc}, 0x10) (async)
setsockopt$netlink_NETLINK_TX_RING(r15, 0x10e, 0xc, &(0x7f0000000300)={0x7fffffff, 0xfc}, 0x10)
sendmsg$kcm(r15, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000200)="a1a2c802cf3eeb20b3726d4f506977eb26ee26b613a59e044080d08f55265dc69b22a1aa442ab5ea0abc81316dd42674ceefd4cf4c40b75bf5d73841900626764647591d116edea284a2ee4b269ec903eb4f6838095d7af7177a3824cbc1f4c13a8ec8a001595dcb4826a98f61a02ce92a49f2b32fdd7e4047f1ff49", 0x7c}, {&(0x7f0000000280)="c6ac90bba394661b276a910e653f2bf68839fe174614e3112019a6942e804e341ac6947cdc38", 0x26}, {&(0x7f00000002c0)="50c940171cffc4f56d9c373bb2efe0994a4576d66d49d5fe01c0f10a37e6ce874f4ee57026324b69cc9aa9d926e3dbeb41148f388e193147f9f58068eff971c3ade560ba4792599f8901e1ee6896aef12bb18332be28ccb725b0163314144569b411bcf6ebdaf971c0c35e1ac069152d3e7a205abd5121b0702f575012443d739c3b64f218554ec917e1c14a66ef0309e2b11093ec10525ca7f45178e4bb19a864ab824ffc5108741e1dccde9cad851137ee88", 0xb3}, {&(0x7f0000000380)="e5ba7ce8114e3658ba2e455848638604d7355b9bb257d9130fc7e3c7340028f26657e4b693ca8ca7330b836d0d1e15e5376e0cd74bcdafc4a37557ab8791906261eda30c7909f48d1c123c9bce7db9", 0x4f}], 0x4, &(0x7f0000000740)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r2, r3]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r4]}}, @rights={{0x30, 0x1, 0x1, [r5, r6, r7, r8, r11, r12, r13, r14]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r15]}}], 0x100, 0x20008000}, 0x4040)
sigaltstack(&(0x7f00000000c0)={&(0x7f00000012c0)=""/4086, 0x0, 0xff6}, 0x0)
rt_sigqueueinfo(r0, 0x21, &(0x7f0000000000))
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x19}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)

18.040398462s ago: executing program 4 (id=354):
r0 = socket(0x11, 0x3, 0x0) (async)
perf_event_open(0x0, 0x0, 0x8000, 0xffffffffffffffff, 0x1) (async)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x1b8)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00')
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) (async)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) (async)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40012100) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) (async)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x80, 0x0, 0x7ffc1ffb}]})
shutdown(0xffffffffffffffff, 0x1) (async)
r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) (async)
chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) (async)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xfff2}, {}, {0x10, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x405}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0xe6a7}, "fe"}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61}, 0x94) (async)
sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3f011400dcdc14"], 0xdd12}], 0x1}, 0x20040051)
socket$inet_mptcp(0x2, 0x1, 0x106)

17.999191234s ago: executing program 4 (id=356):
syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x80c406, &(0x7f0000000100)=ANY=[@ANYRES16=0x0, @ANYRESHEX, @ANYRES8, @ANYRESOCT], 0xff, 0x2d3, &(0x7f0000000e80)="$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")
setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0)
lgetxattr(0x0, 0x0, 0x0, 0x0)
r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x1)
fchdir(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
lseek(r2, 0x7fffdfff, 0x2)
getdents64(r2, 0x0, 0x0)

17.54604767s ago: executing program 4 (id=358):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4)
r3 = socket(0x2, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00', <r4=>0x0})
sendto$packet(r2, &(0x7f0000000140)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0xffa9, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r4, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14)
read(r2, &(0x7f00000000c0)=""/226, 0xe2) (async, rerun: 64)
r5 = dup(r1) (rerun: 64)
ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000240)={0x80, 0x6, 0x103, 0x0, 0x0, 0xfffffffe, 0x0}) (async)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) (async)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000900000007"], 0x48)
r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_script(r8, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) (async)
io_setup(0x3ff, 0x0)
getdents64(0xffffffffffffffff, 0xffffffffffffffff, 0xa3a743e7de85212) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500004000002020207b1af8ff00001e00bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x2000004, 0x0, 0x0, 0x1f00, 0x3d, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x200008, 0x5, 0x20000}, 0x10}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800800000000000850a602200000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r9], 0x4c}}, 0x0) (async, rerun: 64)
r10 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64)
sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r7, 0x0, &(0x7f0000001700)=""/53}, 0x20) (async, rerun: 64)
fcntl$getflags(r6, 0x401) (rerun: 64)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3000000002030102000000000000000002000007090002000002000502000000080003400000000108e8f6ff00000023"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x40080)

17.514276312s ago: executing program 33 (id=358):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4)
r3 = socket(0x2, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00', <r4=>0x0})
sendto$packet(r2, &(0x7f0000000140)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0xffa9, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r4, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14)
read(r2, &(0x7f00000000c0)=""/226, 0xe2) (async, rerun: 64)
r5 = dup(r1) (rerun: 64)
ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000240)={0x80, 0x6, 0x103, 0x0, 0x0, 0xfffffffe, 0x0}) (async)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) (async)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000900000007"], 0x48)
r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_script(r8, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) (async)
io_setup(0x3ff, 0x0)
getdents64(0xffffffffffffffff, 0xffffffffffffffff, 0xa3a743e7de85212) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500004000002020207b1af8ff00001e00bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x2000004, 0x0, 0x0, 0x1f00, 0x3d, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x200008, 0x5, 0x20000}, 0x10}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800800000000000850a602200000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r9], 0x4c}}, 0x0) (async, rerun: 64)
r10 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64)
sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r7, 0x0, &(0x7f0000001700)=""/53}, 0x20) (async, rerun: 64)
fcntl$getflags(r6, 0x401) (rerun: 64)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3000000002030102000000000000000002000007090002000002000502000000080003400000000108e8f6ff00000023"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x40080)

16.659863421s ago: executing program 3 (id=364):
r0 = eventfd2(0x0, 0x180801)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe)
syz_open_pts(r1, 0xa842)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x88, 0x88, 0x6, [@float={0xc, 0x0, 0x0, 0x10, 0xc}, @typedef={0x2, 0x0, 0x0, 0x8, 0x5}, @union={0x3, 0x6, 0x0, 0x5, 0x1, 0x5, [{0x7, 0x1, 0x9}, {0x5, 0x0, 0x1}, {0xb, 0x1, 0x1}, {0x3, 0x2, 0x95ad}, {0x4, 0x2, 0x2}, {0xb, 0x1, 0x2}]}, @decl_tag={0xa, 0x0, 0x0, 0x11, 0x2, 0x6}, @func={0xf, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x2e, 0x4f, 0x30, 0x30]}}, &(0x7f0000000200)=""/116, 0xa6, 0x74, 0x0, 0x6, 0x10000, @value=r2}, 0x28)
io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000080)=r0, 0x1)
ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000000)={0xf1, 0x2000000000000000, 0x1, 0x0, 0x0, [{{r0}, 0x1}]})
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x9)

16.138598131s ago: executing program 3 (id=365):
perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x29, 0x1, 0x0, 0x7, 0x0, 0xb, 0x80510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x100fb8, 0x6, 0x0, 0x4, 0xa, 0x8020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x20000000000000f9, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
r0 = gettid()
ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0)
process_vm_writev(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0xe, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4004080)

7.068355543s ago: executing program 3 (id=461):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0xfffe, @empty, 'tunl0\x00'}}, 0x1e)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="44000000135cf4956e467eb09e00000007000000", @ANYRES32=r1, @ANYBLOB], 0x44}}, 0xc011)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x5, 0x20005, 0xb, 0x0, 0x0, 0x0, 0xcd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
symlinkat(0x0, 0xffffffffffffff9c, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x48000)

3.866959817s ago: executing program 3 (id=491):
r0 = socket$igmp6(0xa, 0x3, 0x2)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f0000000000), 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', <r2=>0x0})
sendmsg$can_bcm(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0)
sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r2}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x1, 0x222, 0x6, {0x0, 0x2710}, {}, {0x3, 0x1, 0x1}, 0x1, @can={{0x3}, 0x3, 0x1, 0x0, 0x0, "ea1ee06e4a675d1c"}}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, 0x4, 0x8, 0x4, 0x100, 0x7, 0x4000002, r2})
accept4$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000100)=0x1c, 0x80000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0xffffffff}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0xff46}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000001, 0x12, r4, 0x100000000)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYRES64=r3, @ANYRESOCT=0x0, @ANYBLOB="8300040000020200240012800b000100677265746170000014000280060003000a0000000600260000000000"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4840)

2.897592553s ago: executing program 3 (id=504):
r0 = socket(0x10, 0x803, 0x0)
setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000040)=0x3, 0x4)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
r1 = io_uring_setup(0x4401, &(0x7f0000000100)={0x0, 0x33c3, 0x1000, 0x1, 0x278})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x37}]}]}, 0x58}}, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000180)={0x40, 0x0, &(0x7f0000000080)=[r0, r0, r0, r2, r0]}, 0x5)
r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf84b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={0x0}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x200003, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, 0x2, 0x7, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4804)
sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f00000001c0)={0x9, 0x14}, 0x2)
setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000000)=0x3, 0x4)
recvmmsg(r0, &(0x7f0000000c40)=[{{0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)=""/23, 0x17}, 0x80009}], 0x16c, 0x10002, 0x0)

2.630457768s ago: executing program 5 (id=508):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
ftruncate(r1, 0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000001080)={[{@discard}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@quota}]}, 0x3, 0x43a, &(0x7f0000001100)="$eJzs28tvG1UXAPAzfrRfX19CVR59AIGCqHgkTVpKF2xAILEACQkWZRmStCp1G9QEiVYRBITKCqFK7BFLJP4CVrBBwAqJLexRpQpl08LKaOyZxHYcNzFOnOLfT5r23plr3XM8c+07c+MABtZI+k8SsTcifouIoXq1ucFI/b/bSwtTfy0tTCVRrb7xZ1Jrd2tpYSpvmr9uT14pRRQ+SeJwm37nrly9MFmpzFzO6mPzF98dm7ty9ZnzFyfPzZybuTRx+vTJE+PPnZp4tid5pnndOvTB7JGDr7x1/bWpM9ff/umbJM+/JY8eGel08PFqtcfd9de+hnJS6mMgbEixPkyjXBv/Q1GMlZM3FC9/3NfggE1VrVar9619eLEK/Icl0e8IgP7Iv+jT+99826Kpx7Zw84X6DVCa9+1sqx8pRSFrU265v+2lkYg4s/j3l+kWm/McAgCgyXfp/OfpdvO/QjQ+F/p/toYyHBH3RMT+iDgVEQci4t6IWtv7I+KBDfbfukiyev5TuNFVYuuUzv+ez9a2mud/+ewvhotZbV8t/3Jy9nxl5nj2nhyL8s60Pt6hj+9f+vXztY41zv/SLe0/nwtmcdwo7Wx+zfTk/GRziN27+VHEoVK7/JPllYAkIg5GxKEu+zj/5NdH1jp25/w76ME6U/WriCfq538xWvLPJZ3XJ8f+F5WZ42P5VbHaz79ce32t/v9V/j2Qnv/dba//5fyHk8b12rmN93Ht90/XvKfp9vrfkbzZtO/9yfn5y+MRO5JX60E37p9oaTex0j7N/9jR9uN/f6y8E4cjIr2IH4yIhyLi4Sz2RyLi0Yg42iH/H1987J3u899caf7TGzr/K4Ud0bqnfaF44Ydvmzod3kj+6fk/WSsdy/Ysf/51sJ64uruaAQAA4O5TiIi9kRRGl8uFwuho/W/4D8TuQmV2bv6ps7PvXZqu/0ZgOMqF/EnXUMPz0PHstj6vT7TUT2TPjb8o7qrVR6dmK9P9Th4G3J4otR3/qT+K/Y4O2HR+rwWDy/iHwWX8w+Ay/mFwtRn/u/oRB7D12n3/f9iHOICt1zL+LfvBAHH/D4PL+IfBZfzDQJrbFXf+kbyCwqpCFLZFGOssfFbeFmHcRYV+fzIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0xj8BAAD//3g65pw=")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80)
pwritev2(r2, &(0x7f0000000080), 0x0, 0x5405, 0xfffffffc, 0x4)
sendfile(r3, r3, 0x0, 0x7a680000)
timer_create(0x2, 0x0, &(0x7f0000000100))

2.583562551s ago: executing program 5 (id=509):
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, 0x0, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) (rerun: 64)
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
r3 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r3, &(0x7f00000001c0)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e22, 0x0, @mcast2, 0x80000004}}, 0x24) (async, rerun: 64)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64)
unshare(0x60000480)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x30, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50)

1.585977139s ago: executing program 5 (id=516):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xff07, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x78}}, 0x2000c000)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, <r1=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r3=>0x0})
bind$can_raw(r2, &(0x7f0000000040)={0x1d, r3}, 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=@bloom_filter={0x1e, 0x655f, 0xd4, 0x100, 0x8000, 0x1, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x3, 0xb}, 0x50)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000d80), 0x28000, 0x0)
r6 = epoll_create(0x7)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000e40)={0x30000008})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000014c0)={0x18, 0x14, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xff}, [@exit, @call={0x85, 0x0, 0x0, 0xa9}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @map_idx={0x18, 0x1, 0x5, 0x0, 0xe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xaf}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x4}]}, &(0x7f0000000240)='syzkaller\x00', 0x400000, 0x1000, &(0x7f00000003c0)=""/4096, 0x40f00, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x9, 0x1}, 0x8, 0x10, &(0x7f00000013c0)={0x1, 0x7, 0x0, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[r4, r5, 0x1], 0x0, 0x10, 0x4a}, 0x94)

1.583400079s ago: executing program 5 (id=519):
r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_init_net_socket$llc(0x1a, 0x3, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x10}, 0x4, 0x0, 0x10000, 0x5, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
io_setup(0x8, &(0x7f0000002740)=<r2=>0x0)
io_pgetevents(r2, 0x2, 0x2, &(0x7f0000000000)=[{}, {}], &(0x7f0000000080)={0x0, 0x989680}, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0xf2de1000)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x44, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_bp={0x0, 0x1}, 0x419, 0x40000000, 0x0, 0x8, 0x103fb, 0x1ff, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0xb)
r3 = getpid()
process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0)
semop(0x0, 0x0, 0x1f4)
mount_setattr(0xffffffffffffffff, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0x85, 0x20000}, 0x20)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
io_uring_enter(0xffffffffffffffff, 0x2ccc, 0x571a, 0x1a, &(0x7f0000000000)={[0x474]}, 0x8)
syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
syz_init_net_socket$llc(0x1a, 0x3, 0x0) (async)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x10}, 0x4, 0x0, 0x10000, 0x5, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) (async)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) (async)
io_setup(0x8, &(0x7f0000002740)) (async)
io_pgetevents(r2, 0x2, 0x2, &(0x7f0000000000)=[{}, {}], &(0x7f0000000080)={0x0, 0x989680}, 0x0) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0xf2de1000) (async)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x44, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_bp={0x0, 0x1}, 0x419, 0x40000000, 0x0, 0x8, 0x103fb, 0x1ff, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0xb) (async)
getpid() (async)
process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) (async)
semop(0x0, 0x0, 0x1f4) (async)
mount_setattr(0xffffffffffffffff, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0x85, 0x20000}, 0x20) (async)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async)
io_uring_enter(0xffffffffffffffff, 0x2ccc, 0x571a, 0x1a, &(0x7f0000000000)={[0x474]}, 0x8) (async)
syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) (async)

1.582938079s ago: executing program 0 (id=520):
r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x80000003, 0x200)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_iso={0x0, {0x1, 0x1}, 0x49f, 0xc0, 0x0, 0x0, 0x2, 0x60000, 0x0, 0x800, 0x8, 0x0})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r2, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x4, 0x77}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x10)

1.582470459s ago: executing program 6 (id=521):
syz_read_part_table(0x1064, &(0x7f0000001080)="$eJzsz8FNw0AUBNCxMbYsLNECF4QogUJogx64wo0LPUSpJDWkkUhRNlo7biHJ4b3DaPfPaqUfbmrM4fujHrrX7TIppUlKkoe8tNPv3NVojmmbx3T/Sd6GOnlaP5nGfn7V9ct9N6zN3/7nK0P65FK9z/lc41Taz83VFgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAO3YOAAD//9c9DtI=")

1.56367399s ago: executing program 1 (id=522):
syz_mount_image$msdos(&(0x7f0000000480), &(0x7f0000000200)='./file0\x00', 0x14814, &(0x7f0000000640)=ANY=[], 0x1, 0x20e, &(0x7f0000000d00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4842, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x80)
getdents64(r1, &(0x7f0000002fc0)=""/4113, 0x1011)
pipe(&(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0xffffffff80000000)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d711873000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
lseek(r0, 0x2, 0x3)

1.484078455s ago: executing program 0 (id=523):
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x1a, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x3736, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94)
r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
mknodat$loop(r1, &(0x7f0000000080)='./file0\x00', 0x40, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59)
close(0x3)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f0000000000)={'nat\x00', 0x0, 0x0, 0x0, [0x0, 0xa, 0x2, 0x4, 0xfa, 0xe]}, &(0x7f0000000080)=0x78)

1.39500329s ago: executing program 1 (id=524):
r0 = accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x81800)
setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmmsg$inet(r1, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000037c0)='-', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000003d80)=[{&(0x7f0000003ac0)="bb", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000004200)=[{&(0x7f00000000c0)='^', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000005380)=[{&(0x7f0000004280)="81", 0x1}], 0x1}}], 0x4, 0x60cd894)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r2, 0xffffffffffffffff, 0x100000000000000)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0xa, 0x2)
set_mempolicy(0x6005, &(0x7f00000001c0)=0x1003, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0, 0x40000000})
r5 = syz_io_uring_setup(0x64d, &(0x7f00000006c0)={0x0, 0x11f8, 0x8, 0x0, 0x3b7}, &(0x7f0000000500)=<r6=>0x0, &(0x7f0000000080)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000580)=[{&(0x7f0000000780)=""/201, 0xc9}], 0x1)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_UNLINKAT={0x24, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200})
io_uring_enter(r5, 0xd12, 0xd9bd, 0x9, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r3, &(0x7f0000000280)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x1, 0x0, 0x17}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xfc0, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @echo_reply={0x0, 0x0, 0x0, 0x68, 0x6, "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"}}}, 0xfce)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x6a0a4000)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r9, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r9, 0x0, 0x30, &(0x7f0000000840)=ANY=[@ANYBLOB="020000000000000002004e24e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000200ffffac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x210)
setsockopt$inet_group_source_req(r9, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x0, @private=0xa010102}}}, 0x108)
sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2458a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000044}, 0x4000040)

1.38977146s ago: executing program 6 (id=525):
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0a00000004000000060000000b"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000940), &(0x7f0000000a40), 0x401, r0}, 0x38) (async)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x44, 0x30, 0x9, 0x0, 0x0, {}, [{0x30, 0x1, [@m_bpf={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x44}}, 0x440d7)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000380009000000000000000000040000000400000014"], 0x2c}}, 0x0)

1.20002899s ago: executing program 6 (id=526):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x3, &(0x7f0000000140)={[{@errors_remount}, {@noload}, {@noblock_validity}, {@bsdgroups}, {@nobarrier}]}, 0x1, 0x625, &(0x7f0000000800)="$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")
r0 = eventfd2(0x0, 0x80000)
ppoll(&(0x7f0000000140)=[{r0, 0x1}, {r0, 0x221}], 0x2, 0x0, 0x0, 0x0)
write(r0, &(0x7f0000000000)="164ebab7e8abc2d6", 0x8)
r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000280), 0x802, 0x0)
writev(r1, &(0x7f0000000040), 0x1)
ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000000))

1.064367848s ago: executing program 1 (id=527):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef={0x0, 0x0, 0x0, 0x8, 0x3}]}}, 0x0, 0x26, 0x0, 0x1, 0x8}, 0x28)
r0 = socket$nl_route(0x10, 0x3, 0x0)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f00000000c0)={0x14, 0x69, 0x1, {0x20, 0x0, 0x6}}, 0x14)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1120}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c855}, 0x0)

935.172806ms ago: executing program 6 (id=528):
lgetxattr(0x0, 0x0, 0x0, 0x0)
r0 = fsopen(0x0, 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x1)
fchdir(r1)
r2 = inotify_init()
inotify_add_watch(r2, &(0x7f0000000440)='.\x00', 0x449)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents64(r3, 0x0, 0x0)

875.92777ms ago: executing program 5 (id=529):
getcwd(&(0x7f0000000080)=""/31, 0x1f) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000040)={@val={0x0, 0x22f0}, @void, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@val, {0x8100, 0x0, 0x0, 0x20}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x17c1, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x4, 0x100}}}}}}}}, 0x3e)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7f, 0x7f, 0xa, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xc, 0x5}, {0xe}]}, @struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x7, [{0xf, 0x1, 0x67}, {0x8, 0x4, 0x8}]}, @float={0x6, 0x0, 0x0, 0x10, 0x8}, @const={0xa, 0x0, 0x0, 0xa, 0x2}, @restrict={0xd, 0x0, 0x0, 0xb, 0x1}, @datasec={0xa, 0x1, 0x0, 0xf, 0x3, [{0x2, 0x6, 0x3}], "aa4d50"}]}, {0x0, [0x61, 0x2e, 0x30, 0x61, 0x5f, 0x5f, 0x2e, 0x30]}}, &(0x7f0000000280)=""/220, 0xa2, 0xdc}, 0x28)

830.468682ms ago: executing program 1 (id=530):
r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18)
ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000080)={0x6, 0xe8e})
syz_emit_ethernet(0x3b6, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0)

821.630333ms ago: executing program 6 (id=531):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000180)={[{@orlov}]}, 0xfe, 0x269, &(0x7f0000000200)="$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") (async)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000100)=0x3f015764)

763.905486ms ago: executing program 0 (id=532):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x9)
sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="80000000150a01"], 0x80}, 0x1, 0x0, 0x0, 0x4000001}, 0x1)
pipe(&(0x7f0000000480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="80000000"], 0x80}}, 0x0)
socket$netlink(0x10, 0x3, 0x14)
r3 = socket$netlink(0x10, 0x3, 0xc)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000080)={0x1, 0x6}, 0x4)
splice(r1, 0x0, r3, 0x0, 0x10d00, 0xf)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
close(r0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a3100b1c60008000540000000020900020073797a310000000008000a40fffffffc0c00098008000140000000010800084000000001140000001100010000000000000000000100000a"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0)
ioctl$TIOCSPTLCK(r5, 0x40045431, &(0x7f0000000000))
ioctl$TIOCGPTPEER(r5, 0x5441, 0x9)
sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x3, 0x9, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2404, 0x400000, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6)
r8 = perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x30004, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0xc40, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, &(0x7f00000000c0)={0x9, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r9 = openat$cgroup(r8, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0)
mkdirat$cgroup(r9, &(0x7f0000000080)='syz1\x00', 0x1ff)
socket$inet6_sctp(0xa, 0x1, 0x84)

763.477136ms ago: executing program 5 (id=533):
set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'bond0\x00', <r2=>0x0})
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0x1}, 0x4) (async)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x1, 0x70bd29, 0x25dfdbfa, {0x0, 0x0, 0x0, r2, 0x8013, 0x1b223}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_ACTIVE={0x5, 0x1d, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c8e0}, 0xc094) (async)
sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c)

727.547768ms ago: executing program 1 (id=534):
r0 = socket$netlink(0x10, 0x3, 0x0)
add_key(&(0x7f0000000240)='keyring\x00', 0x0, &(0x7f00000002c0)="36bd54e8", 0x4, 0xfffffffffffffffd)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
poll(&(0x7f00000000c0)=[{r0, 0x2000}, {r1, 0x104a}, {r0, 0x2}, {r1, 0x124}, {r1, 0x1}, {r0, 0x4101}, {r0, 0x50}, {r0, 0x240}, {r0, 0x8000}, {r0, 0x100}], 0xa, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0x3)
ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x1)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20)
sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="280000001e002102000000000000000007000000140019801000f3800c002880060041"], 0x28}}, 0x0)

639.924383ms ago: executing program 0 (id=535):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x7}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 64)
r0 = socket$kcm(0x10, 0x2, 0x4) (rerun: 64)
close(r0)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000400eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8080) (async)
r1 = socket(0x2, 0x3, 0xff)
setsockopt$inet_int(r1, 0x0, 0x3, 0x0, 0x0) (async)
getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000080)={'filter\x00', 0x0, 0x3, 0x1000, [0x8000000000000001, 0x0, 0x9, 0x9, 0x9, 0xb881], 0x4, &(0x7f0000000040)=[{}, {}, {}, {}], &(0x7f00000015c0)=""/4096}, &(0x7f00000001c0)=0x78)
sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) (async, rerun: 32)
r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x1) (rerun: 32)
writev(r2, &(0x7f0000000140)=[{&(0x7f0000000040)='\a', 0x1}, {0x0}], 0x2) (async, rerun: 64)
recvfrom$inet(r1, 0x0, 0x14, 0x10060, 0x0, 0x0) (rerun: 64)
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x2204806, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xfa, 0x69f, &(0x7f0000000f00)="$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") (async, rerun: 64)
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x200026, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) (rerun: 64)

536.646129ms ago: executing program 6 (id=536):
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
r1 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0), 0x4) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60}, {}, {0x3}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0)

286.975724ms ago: executing program 1 (id=537):
r0 = socket(0x2a, 0x5, 0x0)
getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000000)={@private, @private, <r1=>0x0}, &(0x7f0000000040)=0xc)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@private2}}, &(0x7f0000000180)=0xe8)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@empty, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e21, 0x5, 0x4e23, 0x6, 0x2, 0x0, 0x120, 0x32, r1, r3}, {0xe, 0x40, 0x6, 0x5, 0x7, 0x4, 0x3e, 0x9a}, {0x4, 0xf, 0xb, 0xffff}, 0x0, 0x6e6bbf, 0x0, 0x1, 0x0, 0x2}, {{@in6=@remote, 0x4d5, 0x2b}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x3504, 0x0, 0x1, 0xa2, 0x5, 0x4606f742, 0x7}}, 0xe8)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x74006}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@newneigh={0x64, 0x1c, 0x400, 0x70bd2b, 0x25dfdbfc, {0x2, 0x0, 0x0, r1, 0x80, 0x61, 0x2}, [@NDA_FLAGS_EXT={0x8}, @NDA_PROTOCOL={0x5, 0xc, 0x13}, @NDA_DST_IPV4={0x8, 0x1, @empty}, @NDA_CACHEINFO={0x14, 0x3, {0x7fff, 0xcf, 0x6, 0x4}}, @NDA_CACHEINFO={0x14, 0x3, {0x40, 0x1000, 0x2, 0xda}}, @NDA_FLAGS_EXT={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x8840)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', <r5=>r2, 0x2f, 0x6, 0x7, 0x4, 0x0, @dev={0xfe, 0x80, '\x00', 0x17}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x7, 0x626, 0x6}})
getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000004c0)=0x49, &(0x7f0000000500)=0x4)
ioctl$BTRFS_IOC_QUOTA_RESCAN(r4, 0x4040942c, &(0x7f0000000540)={0x0, 0x9, [0x3, 0x5, 0x8, 0x10001, 0x6, 0x80000000]})
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r4, 0x8982, &(0x7f0000000580))
setsockopt$inet6_tcp_TLS_RX(r0, 0x11a, 0x2, &(0x7f00000005c0)=@gcm_256={{0x304}, "e403cf6b3e319675", "3d8a0c38a37132752f0c15d461b1b730d208331672cf778fb9783d383886eb2e", "5421e360", "8015e401e25c47d3"}, 0x38)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x18, 0x2, &(0x7f0000000600)=@raw=[@alu={0x4, 0x1, 0x9, 0x0, 0x8, 0x30}, @call={0x85, 0x0, 0x0, 0xbb}], &(0x7f0000000640)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000680)=""/4096, 0x41000, 0x20, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000001680)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000016c0)={0x3, 0x10, 0x4, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001700)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], 0x0, 0x10, 0x400}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001ac0)={r6, 0xe0, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000001800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r7=>0x0, 0x0, 0x0, 0x0, 0x3, 0x6, &(0x7f0000001840)=[0x0, 0x0, 0x0], &(0x7f0000001880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x2e, &(0x7f00000018c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001900), &(0x7f0000001940), 0x8, 0x11, 0x8, 0x8, &(0x7f0000001980)}}, 0x10)
setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001b00)={0x5}, 0x4)
socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000001b40)=0x60, 0x2)
r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001b80), 0x4040, 0x0)
socket$key(0xf, 0x3, 0x2)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r4, &(0x7f0000001cc0)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c00)={0x48, 0x2, 0x7, 0x301, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFACCT_FILTER={0x2c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x200}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7ff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfff}]}, @NFACCT_FLAGS={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040800}, 0x2810)
io_setup(0x8001, &(0x7f0000001d00))
syz_io_uring_setup(0x1fb8, &(0x7f0000001d40)={0x0, 0x69ae, 0x200, 0x1, 0x1, 0x0, r8}, &(0x7f0000001dc0), &(0x7f0000001e00))
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001e80), r8)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000021c0)={r6, 0xe0, &(0x7f00000020c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001ec0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r10=>0x0, 0x0, 0x0, 0x0, 0x9, 0x7, &(0x7f0000001f00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001f80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x2b, &(0x7f0000001fc0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000002000), &(0x7f0000002040), 0x8, 0x38, 0x8, 0x8, &(0x7f0000002080)}}, 0x10)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000002200)={@rand_addr, <r11=>0x0}, &(0x7f0000002240)=0x14)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000002440)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002400)={&(0x7f0000002280)={0x170, r9, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x4040880}, 0x4100)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$devlink(&(0x7f00000024c0), r0)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r12, &(0x7f0000002640)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002600)={&(0x7f0000002500)={0x100, r13, 0x2, 0x70bd2a, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0x100}, 0x1, 0x0, 0x0, 0x5}, 0x40810)
io_setup(0x2, &(0x7f0000002680)=<r14=>0x0)
io_destroy(r14)

121.599113ms ago: executing program 0 (id=538):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x2b, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4756000)
syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') (async)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00')
getdents64(r0, &(0x7f00000008c0)=""/4096, 0x1000) (async)
getdents64(r0, &(0x7f00000008c0)=""/4096, 0x1000)

0s ago: executing program 0 (id=539):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b4000000000b00007910000000000000c310000401000000950074000000000031fb0d3a42319fa204399d17d34e075fdcda533ab1aa71ab1d764152e63925789381db3fe455e8dadc7dcf81189517730bed5d8036168bd2e27cc611027d29066927603deb92de3141e8ed7ac5b8902070213cdfdc506c4890cdeb50347c32060581172b94c6ba22a2b58eb6cbad46ed6e7964a2ba103b0b36f790bb41931f9a3d4dd127c1b4e49f7468f5e623950c4f67581c92ef9e7e8ece17d566c93a114d68c577d694b9844e0d9e306404cfc3bfbead9e1b96c6a6cb639bca6d"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48)
io_uring_setup(0x6af2, &(0x7f0000000000)={0x0, 0x3ae8, 0x20, 0x1, 0x19b})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r2=>0x0})
r3 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r3, &(0x7f0000000000)={0x1d, r2}, 0x10)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {0xb}, {0x0, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x8041}, 0x40044)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@restrict={0x6, 0x0, 0x0, 0xb, 0x5}]}, {0x0, [0x30]}}, &(0x7f0000000680)=""/183, 0x27, 0xb7, 0x1, 0x6}, 0x28)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x4, '\x00', r2, r4, 0x4, 0x5, 0x1}, 0x50)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'ip6_vti0\x00', <r5=>0x0, 0x2f, 0x1, 0x7, 0xd, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, 0x1, 0x7800, 0x4, 0x1}})
r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r7, &(0x7f0000000140)='2', 0x1, 0x8080c61)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xb9a, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x3}, 0x50)
r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8001, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{0xffffffffffffffff, <r10=>0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r0}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x6, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8001}, [@btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f00000000c0)='GPL\x00', 0x8b94, 0x0, 0x0, 0x41000, 0xa, '\x00', r5, 0x0, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x7}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000500)=[r7, r8, r9, r10], &(0x7f0000000540)=[{0x4, 0x5, 0x2, 0x9}, {0x2, 0x2, 0xe, 0x8}, {0x1, 0x5, 0x0, 0x8}, {0x1, 0x1, 0xb, 0x9}], 0x10, 0x7fffffff}, 0x94)

kernel console output (not intermixed with test programs):

 adding VLAN 0 to HW filter on device team0
[   37.709772][ T3310] 8021q: adding VLAN 0 to HW filter on device team0
[   37.717741][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.724973][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   37.734866][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.742021][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   37.765710][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.772835][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   37.784224][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.791396][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   37.800591][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.807648][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   37.833294][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.840451][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   37.856614][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0
[   37.883371][ T3311] 8021q: adding VLAN 0 to HW filter on device team0
[   37.911375][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.918560][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[   37.941135][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.948246][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   37.969726][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0
[   38.011592][ T3311] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   38.022189][ T3311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   38.078573][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0
[   38.148640][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0
[   38.164135][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0
[   38.181412][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0
[   38.261547][ T3313] veth0_vlan: entered promiscuous mode
[   38.281394][ T3313] veth1_vlan: entered promiscuous mode
[   38.306930][ T3320] veth0_vlan: entered promiscuous mode
[   38.333799][ T3313] veth0_macvtap: entered promiscuous mode
[   38.343975][ T3320] veth1_vlan: entered promiscuous mode
[   38.359401][ T3313] veth1_macvtap: entered promiscuous mode
[   38.380849][ T3310] veth0_vlan: entered promiscuous mode
[   38.398776][ T3311] veth0_vlan: entered promiscuous mode
[   38.407716][ T3311] veth1_vlan: entered promiscuous mode
[   38.420383][ T3319] veth0_vlan: entered promiscuous mode
[   38.426967][ T3310] veth1_vlan: entered promiscuous mode
[   38.438370][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0
[   38.454157][ T3311] veth0_macvtap: entered promiscuous mode
[   38.466693][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1
[   38.476059][ T3319] veth1_vlan: entered promiscuous mode
[   38.482516][ T3310] veth0_macvtap: entered promiscuous mode
[   38.494237][ T3320] veth0_macvtap: entered promiscuous mode
[   38.504174][ T3310] veth1_macvtap: entered promiscuous mode
[   38.511093][ T3311] veth1_macvtap: entered promiscuous mode
[   38.517575][   T37] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   38.526715][   T37] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   38.542106][   T37] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   38.554402][ T3320] veth1_macvtap: entered promiscuous mode
[   38.562577][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0
[   38.570041][   T37] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   38.581003][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1
[   38.598993][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0
[   38.608452][   T31] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   38.618039][   T31] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   38.628615][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0
[   38.647661][ T3319] veth0_macvtap: entered promiscuous mode
[   38.656528][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1
[   38.664186][   T31] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   38.675368][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1
[   38.686391][ T3313] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   38.720124][   T31] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   38.732075][ T3319] veth1_macvtap: entered promiscuous mode
[   38.750893][   T31] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   38.776126][   T31] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   38.793805][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0
[   38.812275][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   38.825291][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   38.849020][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1
[   38.869002][ T3491] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'.
[   38.875193][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   38.886363][   T29] kauditd_printk_skb: 37 callbacks suppressed
[   38.886399][   T29] audit: type=1400 audit(1769719373.014:109): avc:  denied  { open } for  pid=3487 comm="syz.3.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   38.911449][   T29] audit: type=1400 audit(1769719373.014:110): avc:  denied  { kernel } for  pid=3487 comm="syz.3.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   38.949482][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   38.954604][   T29] audit: type=1400 audit(1769719373.084:111): avc:  denied  { prog_run } for  pid=3487 comm="syz.3.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   38.974839][ T3491] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3491 comm=syz.1.2
[   39.001056][ T3488] loop3: detected capacity change from 0 to 512
[   39.007749][ T3488] EXT4-fs: Ignoring removed oldalloc option
[   39.013730][   T29] audit: type=1400 audit(1769719373.144:112): avc:  denied  { tracepoint } for  pid=3492 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   39.039495][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.075719][   T29] audit: type=1400 audit(1769719373.174:113): avc:  denied  { create } for  pid=3489 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   39.087378][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.096202][   T29] audit: type=1400 audit(1769719373.184:114): avc:  denied  { write } for  pid=3489 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   39.113418][ T3488] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.6: Parent and EA inode have the same ino 15
[   39.173268][   T29] audit: type=1400 audit(1769719373.304:115): avc:  denied  { write } for  pid=3499 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   39.184619][    C1] hrtimer: interrupt took 86922 ns
[   39.202807][ T3493] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[   39.212242][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.223971][ T3488] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   39.273813][ T3488] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.6: Parent and EA inode have the same ino 15
[   39.292268][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.307003][ T3488] EXT4-fs (loop3): 1 orphan inode deleted
[   39.314136][ T3488] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   39.336074][   T29] audit: type=1400 audit(1769719373.464:116): avc:  denied  { mount } for  pid=3487 comm="syz.3.6" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   39.361109][ T3507] loop4: detected capacity change from 0 to 128
[   39.366630][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.378697][   T31] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.430082][ T3502] loop1: detected capacity change from 0 to 1024
[   39.439125][ T3502] EXT4-fs: Ignoring removed orlov option
[   39.444933][ T3502] EXT4-fs: Ignoring removed nomblk_io_submit option
[   39.460910][   T29] audit: type=1400 audit(1769719373.524:117): avc:  denied  { ioctl } for  pid=3503 comm="syz.2.3" path="socket:[4980]" dev="sockfs" ino=4980 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   39.486184][   T29] audit: type=1400 audit(1769719373.534:118): avc:  denied  { mount } for  pid=3506 comm="syz.4.7" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   39.512730][ T3488] netlink: 16386 bytes leftover after parsing attributes in process `syz.3.6'.
[   39.512726][ T3502] ext4: Unknown parameter 'subj_role'
[   39.573193][ T3488] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6'.
[   39.640354][ T3525] loop2: detected capacity change from 0 to 512
[   39.659801][ T3525] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   39.673043][ T3525] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[   39.711203][ T3525] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.11: bg 0: block 255: padding at end of block bitmap is not set
[   39.727125][ T3525] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6689: Corrupt filesystem
[   39.737691][ T3525] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.11: invalid indirect mapped block 1 (level 1)
[   39.758440][ T3525] EXT4-fs (loop2): 1 truncate cleaned up
[   39.769390][ T3525] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   39.783784][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.791426][ T3525] capability: warning: `syz.2.11' uses deprecated v2 capabilities in a way that may be insecure
[   39.853043][ T3536] bond1: option min_links: invalid value (18446744073709551601)
[   39.860818][ T3536] bond1: option min_links: allowed values 0 - 2147483647
[   39.869247][ T3536] bond1 (unregistering): Released all slaves
[   39.889094][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.964622][ T3523] loop0: detected capacity change from 0 to 32768
[   40.032012][ T3545] loop3: detected capacity change from 0 to 512
[   40.044379][ T3556] loop1: detected capacity change from 0 to 128
[   40.055810][ T3545] =======================================================
[   40.055810][ T3545] WARNING: The mand mount option has been deprecated and
[   40.055810][ T3545]          and is ignored by this kernel. Remove the mand
[   40.055810][ T3545]          option from the mount to silence this warning.
[   40.055810][ T3545] =======================================================
[   40.101603][ T3556] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   40.114956][ T3556] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   40.186541][ T3564] netlink: 45 bytes leftover after parsing attributes in process `syz.3.23'.
[   40.257048][ T3570] tipc: Started in network mode
[   40.261971][ T3570] tipc: Node identity 4, cluster identity 4711
[   40.268357][ T3570] tipc: Node number set to 4
[   40.279127][ T3572] loop4: detected capacity change from 0 to 512
[   40.316793][ T3573] netlink: 52 bytes leftover after parsing attributes in process `syz.2.22'.
[   40.333029][ T3572] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   40.355358][ T3572] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   40.377585][ T3578] loop3: detected capacity change from 0 to 512
[   40.391457][ T3578] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[   40.414139][ T3578] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.27: bg 0: block 255: padding at end of block bitmap is not set
[   40.436146][ T3578] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6689: Corrupt filesystem
[   40.453152][   T12] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   40.453155][ T3578] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.27: invalid indirect mapped block 1 (level 1)
[   40.456295][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.493217][ T3578] EXT4-fs (loop3): 1 truncate cleaned up
[   40.506164][ T3578] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   40.559184][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.572657][ T3586] bridge0: port 2(bridge_slave_1) entered disabled state
[   40.580648][ T3586] bridge_slave_1: left allmulticast mode
[   40.586390][ T3586] bridge_slave_1: left promiscuous mode
[   40.592188][ T3586] bridge0: port 2(bridge_slave_1) entered disabled state
[   40.623035][ T3586] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[   40.669862][ T3589] loop1: detected capacity change from 0 to 2048
[   40.691010][ T3589] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   40.708764][ T3589] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   40.899261][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.042532][ T3593] netlink: 8 bytes leftover after parsing attributes in process `syz.0.32'.
[   41.135115][ T3593] bond1: option ad_actor_sys_prio: invalid value (0)
[   41.142740][ T3593] bond1: option ad_actor_sys_prio: allowed values 1 - 65535
[   41.160283][ T3593] bond1 (unregistering): Released all slaves
[   41.221479][ T3607] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   41.234157][ T3607] ext4 filesystem being mounted at /11/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   41.281482][ T3618] syz.1.35 uses obsolete (PF_INET,SOCK_PACKET)
[   41.340666][ T3620] EXT4-fs: inline encryption not supported
[   41.367903][ T3620] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   41.435585][ T3626] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[   41.468390][ T3626] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.41: bg 0: block 255: padding at end of block bitmap is not set
[   41.508567][ T3607] netlink: 8 bytes leftover after parsing attributes in process `syz.3.37'.
[   41.517390][ T3607] netlink: 28 bytes leftover after parsing attributes in process `syz.3.37'.
[   41.535585][ T3626] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6689: Corrupt filesystem
[   41.554925][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.569637][ T3626] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.41: invalid indirect mapped block 1 (level 1)
[   41.600263][ T3607] geneve0: entered promiscuous mode
[   41.605589][ T3607] geneve0: entered allmulticast mode
[   41.612502][ T3635] netlink: 'syz.0.44': attribute type 1 has an invalid length.
[   41.627335][ T3626] EXT4-fs (loop1): 1 truncate cleaned up
[   41.634232][ T3607] Zero length message leads to an empty skb
[   41.642343][ T3626] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   41.719260][ T3643] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.46: bad orphan inode 11862016
[   41.745113][ T3643] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   41.758171][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.792830][ T3643] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   41.852425][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   41.866873][ T3658] SELinux:  Context system_u:object_r:scanner_device_t:s0 is not valid (left unmapped).
[   41.878809][ T3654] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3654 comm=syz.0.50
[   41.900957][ T3661] netlink: 152 bytes leftover after parsing attributes in process `syz.2.53'.
[   41.930409][ T3661] netlink: 24 bytes leftover after parsing attributes in process `syz.2.53'.
[   41.963255][ T3663] ext4: Unknown parameter 'fsname'
[   41.968749][ T3665] EXT4-fs: Ignoring removed oldalloc option
[   41.987093][ T3665] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   42.013094][ T3665] EXT4-fs (loop2): 1 truncate cleaned up
[   42.020297][ T3665] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   42.060081][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.085988][ T3313] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   42.161415][ T3683] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[   42.189549][ T3683] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.57: bg 0: block 255: padding at end of block bitmap is not set
[   42.196528][ T3688] FAT-fs (loop4): Directory bread(block 32) failed
[   42.214751][ T3688] FAT-fs (loop4): Directory bread(block 33) failed
[   42.221324][ T3688] FAT-fs (loop4): Directory bread(block 34) failed
[   42.251884][ T3688] FAT-fs (loop4): Directory bread(block 35) failed
[   42.258780][ T3688] FAT-fs (loop4): Directory bread(block 36) failed
[   42.265611][ T3688] FAT-fs (loop4): Directory bread(block 37) failed
[   42.272217][ T3688] FAT-fs (loop4): Directory bread(block 38) failed
[   42.278990][ T3688] FAT-fs (loop4): Directory bread(block 39) failed
[   42.285701][ T3688] FAT-fs (loop4): Directory bread(block 40) failed
[   42.292303][ T3688] FAT-fs (loop4): Directory bread(block 41) failed
[   42.314529][ T3683] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6689: Corrupt filesystem
[   42.325721][ T3688] netlink: zone id is out of range
[   42.330871][ T3688] netlink: zone id is out of range
[   42.336609][ T3683] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.57: invalid indirect mapped block 1 (level 1)
[   42.350570][ T3688] netlink: zone id is out of range
[   42.356141][ T3688] netlink: zone id is out of range
[   42.361564][ T3683] EXT4-fs (loop2): 1 truncate cleaned up
[   42.367483][ T3688] netlink: zone id is out of range
[   42.372632][ T3688] netlink: zone id is out of range
[   42.377888][ T3688] netlink: zone id is out of range
[   42.383014][ T3688] netlink: zone id is out of range
[   42.388264][ T3688] netlink: zone id is out of range
[   42.393399][ T3688] netlink: zone id is out of range
[   42.412627][ T3683] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   42.428111][ T3700] netlink: 'syz.1.67': attribute type 16 has an invalid length.
[   42.469050][ T3706] geneve2: entered promiscuous mode
[   42.490057][   T37] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[   42.499070][   T37] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[   42.511590][   T37] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[   42.524526][ T3711] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3711 comm=syz.3.70
[   42.537992][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.622509][   T37] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[   42.635146][ T3718] netlink: 'syz.0.69': attribute type 5 has an invalid length.
[   42.755144][ T3732] 9p: Bad value for 'rfdno'
[   42.988231][ T3773] program syz.0.80 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   43.044917][ T3785] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[   43.078340][ T3785] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.82: bg 0: block 255: padding at end of block bitmap is not set
[   43.120974][ T3785] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6689: Corrupt filesystem
[   43.134950][ T3785] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.82: invalid indirect mapped block 1 (level 1)
[   43.175968][ T3785] EXT4-fs (loop2): 1 truncate cleaned up
[   43.197560][ T3785] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   43.400356][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.756133][ T3829] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[   43.912462][ T3839] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0)
[   43.965207][ T3839] bond1 (unregistering): Released all slaves
[   43.972150][ T3830] syz.2.86 (3830) used greatest stack depth: 10224 bytes left
[   43.991270][   T29] kauditd_printk_skb: 207 callbacks suppressed
[   43.991286][   T29] audit: type=1400 audit(1769719378.124:326): avc:  denied  { create } for  pid=3845 comm="syz.3.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   44.120717][   T29] audit: type=1400 audit(1769719378.154:327): avc:  denied  { bind } for  pid=3845 comm="syz.3.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   44.166838][   T29] audit: type=1400 audit(1769719378.304:328): avc:  denied  { ioctl } for  pid=3845 comm="syz.3.98" path="socket:[6374]" dev="sockfs" ino=6374 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   44.340276][ T3860] __nla_validate_parse: 7 callbacks suppressed
[   44.340294][ T3860] netlink: 8 bytes leftover after parsing attributes in process `syz.3.102'.
[   44.355469][ T3860] netlink: 8 bytes leftover after parsing attributes in process `syz.3.102'.
[   44.366360][ T3852] netlink: 68 bytes leftover after parsing attributes in process `syz.0.99'.
[   44.376923][   T29] audit: type=1400 audit(1769719378.474:329): avc:  denied  { create } for  pid=3859 comm="syz.3.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   44.455823][ T3860] netlink: 56 bytes leftover after parsing attributes in process `syz.3.102'.
[   44.481672][ T3860] set_capacity_and_notify: 12 callbacks suppressed
[   44.481688][ T3860] loop3: detected capacity change from 0 to 512
[   44.555908][ T3860] ext4: Bad value for 'resgid'
[   44.560810][ T3860] ext4: Bad value for 'resgid'
[   44.574709][ T3864] netlink: 'syz.1.103': attribute type 16 has an invalid length.
[   44.582543][ T3864] netlink: 'syz.1.103': attribute type 17 has an invalid length.
[   44.604326][   T29] audit: type=1400 audit(1769719378.734:330): avc:  denied  { create } for  pid=3870 comm="syz.0.104" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=xdp_socket permissive=1
[   44.878050][ T3891] loop4: detected capacity change from 0 to 512
[   44.935485][ T3891] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[   44.962839][   T29] audit: type=1400 audit(1769719379.094:331): avc:  denied  { setopt } for  pid=3892 comm="syz.3.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   45.020685][   T29] audit: type=1400 audit(1769719379.114:332): avc:  denied  { write } for  pid=3892 comm="syz.3.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   45.043071][ T3891] EXT4-fs (loop4): external journal device major/minor numbers have changed
[   45.050402][ T3898] loop3: detected capacity change from 0 to 512
[   45.066692][ T3898] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.121957][ T3891] EXT4-fs (loop4): failed to open journal device unknown-block(8,0) -16
[   45.147303][ T3898] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   45.225621][ T3898] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #2: comm syz.3.112: corrupted inode contents
[   45.246302][   T29] audit: type=1400 audit(1769719379.384:333): avc:  denied  { ioctl } for  pid=3904 comm="syz.2.114" path="/dev/virtual_nci" dev="devtmpfs" ino=132 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   45.265458][ T3891] netlink: 'syz.4.110': attribute type 12 has an invalid length.
[   45.278783][ T3891] netlink: 132 bytes leftover after parsing attributes in process `syz.4.110'.
[   45.295824][ T3905] loop2: detected capacity change from 0 to 512
[   45.343366][ T3898] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #2: comm syz.3.112: mark_inode_dirty error
[   45.383737][ T3905] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.404632][ T3905] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   45.423414][ T3898] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #2: comm syz.3.112: corrupted inode contents
[   45.447606][   T29] audit: type=1400 audit(1769719379.584:334): avc:  denied  { remove_name } for  pid=3904 comm="syz.2.114" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   45.470272][   T29] audit: type=1400 audit(1769719379.584:335): avc:  denied  { unlink } for  pid=3904 comm="syz.2.114" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   45.524151][ T3917] netlink: 28 bytes leftover after parsing attributes in process `syz.1.116'.
[   45.533351][ T3898] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.112: mark_inode_dirty error
[   45.561651][ T3917] netlink: 5 bytes leftover after parsing attributes in process `syz.1.116'.
[   45.587217][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.609136][ T3926] loop4: detected capacity change from 0 to 512
[   45.620431][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.663615][ T3929] loop2: detected capacity change from 0 to 1024
[   45.663837][ T3932] SELinux: failed to load policy
[   45.694384][ T3929] ext3: Unknown parameter 'subj_user'
[   45.712868][ T3929] netlink: 4 bytes leftover after parsing attributes in process `syz.2.118'.
[   45.745079][ T3926] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   45.764769][ T3938] netlink: 12 bytes leftover after parsing attributes in process `syz.2.118'.
[   45.797238][ T3940] loop3: detected capacity change from 0 to 512
[   45.812576][ T3929] loop2: detected capacity change from 0 to 2048
[   45.914833][ T3303]  loop2: p2 < > p4
[   45.918726][ T3303] loop2: partition table partially beyond EOD, truncated
[   45.929765][ T3303] loop2: p2 start 4278190080 is beyond EOD, truncated
[   45.936873][ T3303] loop2: p4 size 8192 extends beyond EOD, truncated
[   46.014466][ T3929]  loop2: p2 < > p4
[   46.018505][ T3929] loop2: partition table partially beyond EOD, truncated
[   46.031909][ T3929] loop2: p2 start 4278190080 is beyond EOD, truncated
[   46.038829][ T3929] loop2: p4 size 8192 extends beyond EOD, truncated
[   46.096234][ T3938] netlink: 24 bytes leftover after parsing attributes in process `syz.2.118'.
[   46.117594][ T3001]  loop2: p2 < > p4
[   46.121459][ T3001] loop2: partition table partially beyond EOD, truncated
[   46.139006][ T3001] loop2: p2 start 4278190080 is beyond EOD, truncated
[   46.145979][ T3001] loop2: p4 size 8192 extends beyond EOD, truncated
[   46.204619][ T3954] Illegal XDP return value 4294967274 on prog  (id 36) dev syz_tun, expect packet loss!
[   46.407269][ T3970] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22
[   46.415773][ T3970] netdevsim netdevsim4: Direct firmware load for . failed with error -22
[   46.432653][ T3297] udevd[3297]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[   46.514165][ T3976] SELinux: security_context_str_to_sid (ÛO*3�Äö!ÛL;‚¹Ò(xë?8°€>${ÓSº¡7®#ÊîßÈ!g’³.&[nÙ¦ú»9ì£P9\E±T•WqÁ›3¨H*Ø
8çÆYYL¤œÖäGœRÃ!IªÆ*·¹ò'õæœCDÊÙX
[   46.514165][ T3976] êÁs0dnîphóòë5L0µÙ�ë| 
qòÎü–õD8Ä1ÀŽò‹ûA{ꈆ†nK„P) failed with errno=-22
[   46.642956][ T3985] loop1: detected capacity change from 0 to 512
[   46.655431][ T3985] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   46.695834][ T3985] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[   46.730348][ T3985] EXT4-fs (loop1): 1 truncate cleaned up
[   46.788750][ T3985] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   46.863736][ T3990] netlink: 'syz.4.135': attribute type 4 has an invalid length.
[   46.875035][ T3990] netlink: 'syz.4.135': attribute type 4 has an invalid length.
[   46.909058][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.125639][ T4000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   47.133551][ T3997] support for the xor transformation has been removed.
[   47.140221][ T4000] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   47.166039][ T4000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   47.179716][ T4000] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   47.277494][ T4001] loop3: detected capacity change from 0 to 512
[   47.300051][ T4001] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended
[   47.314848][ T4001] EXT4-fs (loop3): Errors on filesystem, clearing orphan list.
[   47.324349][ T4001] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   47.357797][ T4000] EXT4-fs warning (device loop3): dx_probe:837: inode #2: comm syz.3.139: Unimplemented hash flags: 0x0001
[   47.369343][ T4000] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.139: Corrupt directory, running e2fsck is recommended
[   47.384812][ T4000] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 3: comm syz.3.139: path /32/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=196612, size=1024 fake=0
[   47.496857][ T4006] netlink: 'syz.0.140': attribute type 3 has an invalid length.
[   47.504594][ T4006] netlink: 'syz.0.140': attribute type 4 has an invalid length.
[   47.729384][ T4022] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[   47.739262][ T4022] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.147: bg 0: block 255: padding at end of block bitmap is not set
[   47.811507][ T4028] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   47.811890][ T4022] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6689: Corrupt filesystem
[   47.837392][ T4028] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 2: comm syz.4.148: lblock 2 mapped to illegal pblock 2 (length 1)
[   47.843677][ T4022] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.147: invalid indirect mapped block 1 (level 1)
[   47.866497][ T4022] EXT4-fs (loop2): 1 truncate cleaned up
[   47.872518][ T4022] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   47.890691][ T4028] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 48: comm syz.4.148: lblock 0 mapped to illegal pblock 48 (length 1)
[   47.934246][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.955232][ T4028] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.148: Failed to acquire dquot type 0
[   47.994655][ T4028] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem
[   48.005906][ T3500] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 280 vs 220 free clusters
[   48.035661][ T4033] netlink: 'syz.2.150': attribute type 4 has an invalid length.
[   48.044710][ T4028] EXT4-fs error (device loop4): ext4_evict_inode:253: inode #11: comm syz.4.148: mark_inode_dirty error
[   48.074814][ T4028] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -117)
[   48.096586][ T4028] EXT4-fs (loop4): 1 orphan inode deleted
[   48.102772][ T4028] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   48.115279][   T37] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1)
[   48.144541][   T37] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:2: Failed to release dquot type 0
[   48.226224][ T4037] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5)
[   48.232886][ T4037] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[   48.240553][ T4037] vhci_hcd vhci_hcd.0: Device attached
[   48.260893][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.265491][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.287557][ T3320] EXT4-fs error (device loop4): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0
[   48.322562][ T3320] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem
[   48.344677][ T4044] vhci_hcd: connection closed
[   48.349109][ T3335] vhci_hcd vhci_hcd.1: stop threads
[   48.359221][ T3335] vhci_hcd vhci_hcd.1: release socket
[   48.364782][ T3335] vhci_hcd vhci_hcd.1: disconnect device
[   48.378386][ T3320] EXT4-fs error (device loop4): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error
[   48.433502][ T4049] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   48.798268][ T4070] mmap: syz.4.160 (4070) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   48.998917][   T29] kauditd_printk_skb: 163 callbacks suppressed
[   48.998935][   T29] audit: type=1326 audit(1769719383.134:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4065 comm="syz.0.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5021baeb9 code=0x7ffc0000
[   49.028725][   T29] audit: type=1326 audit(1769719383.134:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4065 comm="syz.0.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5021baeb9 code=0x7ffc0000
[   49.035759][ T4078] ieee802154 phy0 wpan0: encryption failed: -22
[   49.120488][   T29] audit: type=1400 audit(1769719383.174:498): avc:  denied  { write } for  pid=4077 comm="syz.1.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   49.140439][   T29] audit: type=1326 audit(1769719383.204:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4065 comm="syz.0.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc50217b78e code=0x7ffc0000
[   49.163745][   T29] audit: type=1326 audit(1769719383.204:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4065 comm="syz.0.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc50217b78e code=0x7ffc0000
[   49.187151][   T29] audit: type=1326 audit(1769719383.204:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4065 comm="syz.0.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7fc5021baeb9 code=0x7ffc0000
[   49.210562][   T29] audit: type=1326 audit(1769719383.204:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4065 comm="syz.0.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5021baeb9 code=0x7ffc0000
[   49.234149][   T29] audit: type=1326 audit(1769719383.204:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4065 comm="syz.0.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5021baeb9 code=0x7ffc0000
[   49.258172][   T29] audit: type=1326 audit(1769719383.204:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4065 comm="syz.0.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc50217b78e code=0x7ffc0000
[   49.281687][   T29] audit: type=1326 audit(1769719383.214:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4065 comm="syz.0.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc50217b78e code=0x7ffc0000
[   49.473607][ T4093] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[   49.526602][ T4093] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.166: bg 0: block 255: padding at end of block bitmap is not set
[   49.550057][ T4093] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6689: Corrupt filesystem
[   49.715600][ T4093] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.166: invalid indirect mapped block 1 (level 1)
[   49.742865][ T4093] EXT4-fs (loop1): 1 truncate cleaned up
[   49.793858][ T4100] __nla_validate_parse: 10 callbacks suppressed
[   49.793941][ T4100] netlink: 24 bytes leftover after parsing attributes in process `syz.2.168'.
[   49.825612][ T4093] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   49.893593][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.017219][ T4112] SELinux: failed to load policy
[   50.336572][ T4122] x_tables: duplicate underflow at hook 2
[   50.372926][ T4124] 9p: Bad value for 'rfdno'
[   50.443871][ T4128] netlink: 56 bytes leftover after parsing attributes in process `syz.4.177'.
[   50.748692][ T4155] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   50.888347][ T4155] set_capacity_and_notify: 4 callbacks suppressed
[   50.888364][ T4155] loop4: detected capacity change from 0 to 512
[   50.925854][ T4157] netlink: 24 bytes leftover after parsing attributes in process `syz.2.185'.
[   51.019776][ T4155] netlink: 'syz.4.186': attribute type 2 has an invalid length.
[   51.045268][ T4155] netlink: 8 bytes leftover after parsing attributes in process `syz.4.186'.
[   51.067264][ T4159] loop1: detected capacity change from 0 to 512
[   51.253920][ T4170] loop4: detected capacity change from 0 to 512
[   51.375644][ T4170] EXT4-fs warning (device loop4): ext4_xattr_inode_get:560: inode #11: comm syz.4.191: EA inode hash validation failed
[   51.412952][ T4170] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.191: corrupted inode contents
[   51.475105][ T4178] FAULT_INJECTION: forcing a failure.
[   51.475105][ T4178] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   51.488377][ T4178] CPU: 0 UID: 0 PID: 4178 Comm: syz.1.192 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   51.488411][ T4178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   51.488432][ T4178] Call Trace:
[   51.488444][ T4178]  <TASK>
[   51.488455][ T4178]  __dump_stack+0x1d/0x30
[   51.488500][ T4178]  dump_stack_lvl+0x95/0xd0
[   51.488525][ T4178]  dump_stack+0x15/0x1b
[   51.488552][ T4178]  should_fail_ex+0x263/0x280
[   51.488603][ T4178]  should_fail+0xb/0x20
[   51.488630][ T4178]  should_fail_usercopy+0x1a/0x20
[   51.488741][ T4178]  _copy_from_user+0x1c/0xb0
[   51.488792][ T4178]  ___sys_sendmsg+0xc1/0x1e0
[   51.488901][ T4178]  __x64_sys_sendmsg+0xd4/0x160
[   51.488929][ T4178]  x64_sys_call+0x17ba/0x3000
[   51.488954][ T4178]  do_syscall_64+0xc0/0x2a0
[   51.489013][ T4178]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   51.489044][ T4178] RIP: 0033:0x7fb712ffaeb9
[   51.489133][ T4178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   51.489157][ T4178] RSP: 002b:00007fb711a57028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   51.489181][ T4178] RAX: ffffffffffffffda RBX: 00007fb713275fa0 RCX: 00007fb712ffaeb9
[   51.489195][ T4178] RDX: 0000000020000010 RSI: 0000200000000080 RDI: 0000000000000003
[   51.489207][ T4178] RBP: 00007fb711a57090 R08: 0000000000000000 R09: 0000000000000000
[   51.489237][ T4178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   51.489280][ T4178] R13: 00007fb713276038 R14: 00007fb713275fa0 R15: 00007ffd41886a48
[   51.489301][ T4178]  </TASK>
[   51.546688][ T4170] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #15: comm syz.4.191: mark_inode_dirty error
[   51.705061][ T4170] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.191: corrupted inode contents
[   51.749947][ T4170] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3001: inode #15: comm syz.4.191: mark_inode_dirty error
[   51.772617][ T4170] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3004: inode #15: comm syz.4.191: mark inode dirty (error -117)
[   51.824337][ T4190] netlink: 4 bytes leftover after parsing attributes in process `syz.2.198'.
[   51.834540][ T4170] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -117)
[   51.843623][ T4170] EXT4-fs (loop4): 1 orphan inode deleted
[   51.872167][ T4170] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   51.884454][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.891643][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.138552][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.601077][ T4225] netlink: 'syz.0.206': attribute type 15 has an invalid length.
[   52.616891][ T4228] loop1: detected capacity change from 0 to 256
[   52.714832][ T4235] geneve2: entered promiscuous mode
[   52.730372][ T4232] x_tables: duplicate underflow at hook 3
[   52.809748][ T4242] loop2: detected capacity change from 0 to 512
[   52.974757][ T4245] loop3: detected capacity change from 0 to 512
[   53.228401][ T4245] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   53.345993][ T4245] batadv_slave_0: entered promiscuous mode
[   53.470721][ T4244] batadv_slave_0: left promiscuous mode
[   53.689367][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.893052][ T4258] loop3: detected capacity change from 0 to 512
[   54.002812][ T4258] EXT4-fs (loop3): revision level too high, forcing read-only mode
[   54.094553][ T4258] EXT4-fs (loop3): orphan cleanup on readonly fs
[   54.124651][ T4264] syzkaller0: entered allmulticast mode
[   54.165051][ T4258] __quota_error: 240 callbacks suppressed
[   54.165071][ T4258] Quota error (device loop3): v2_read_file_info: Free block number 8 out of range (1, 6).
[   54.184708][ T4264] syzkaller0: entered promiscuous mode
[   54.203830][ T4264] syzkaller0 (unregistering): left allmulticast mode
[   54.210625][ T4264] syzkaller0 (unregistering): left promiscuous mode
[   54.257875][ T4258] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   54.464616][ T4258] EXT4-fs (loop3): Cannot turn on quotas: error -117
[   54.492262][ T4258] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.216: corrupted inode contents
[   54.537144][ T4258] EXT4-fs (loop3): Remounting filesystem read-only
[   54.618313][ T4258] EXT4-fs (loop3): 1 truncate cleaned up
[   54.631369][ T4258] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   55.015527][   T29] audit: type=1400 audit(1769719389.154:743): avc:  denied  { setopt } for  pid=4255 comm="syz.3.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   55.234823][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.483835][   T29] audit: type=1400 audit(1769719389.614:744): avc:  denied  { create } for  pid=4307 comm="syz.3.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[   55.527338][   T29] audit: type=1400 audit(1769719389.634:745): avc:  denied  { setopt } for  pid=4307 comm="syz.3.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[   55.582895][ T4316] process 'syz.3.229' launched '/dev/fd/169' with NULL argv: empty string added
[   55.584934][ T4311] loop1: detected capacity change from 0 to 128
[   55.654163][   T29] audit: type=1400 audit(1769719389.784:746): avc:  denied  { execute_no_trans } for  pid=4314 comm="syz.3.229" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1070 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   56.004844][ T4330] capability: warning: `syz.1.230' uses 32-bit capabilities (legacy support in use)
[   56.479319][   T29] audit: type=1400 audit(1769719390.614:747): avc:  denied  { create } for  pid=4336 comm="syz.0.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[   56.500812][ T4338] netlink: 4 bytes leftover after parsing attributes in process `syz.0.231'.
[   56.550798][   T29] audit: type=1400 audit(1769719390.634:748): avc:  denied  { ioctl } for  pid=4336 comm="syz.0.231" path="socket:[8417]" dev="sockfs" ino=8417 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[   56.877676][ T4344] loop4: detected capacity change from 0 to 512
[   56.928455][ T4344] EXT4-fs: Ignoring removed mblk_io_submit option
[   56.935162][ T4344] EXT4-fs: Ignoring removed bh option
[   57.015363][ T4355] netlink: 28 bytes leftover after parsing attributes in process `syz.1.236'.
[   57.065215][   T29] audit: type=1400 audit(1769719391.204:749): avc:  denied  { mount } for  pid=4354 comm="syz.1.236" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[   57.145108][   T29] audit: type=1400 audit(1769719391.284:750): avc:  denied  { unmount } for  pid=3310 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[   57.158786][ T4344] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[   57.297195][ T4344] loop4: detected capacity change from 0 to 512
[   57.679264][ T4379] netlink: 28 bytes leftover after parsing attributes in process `syz.0.241'.
[   57.716559][   T29] audit: type=1400 audit(1769719391.854:751): avc:  denied  { relabelfrom } for  pid=4360 comm="syz.3.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[   57.850312][ T4387] loop1: detected capacity change from 0 to 128
[   57.938925][ T4379] netlink: 80 bytes leftover after parsing attributes in process `syz.0.241'.
[   58.343478][ T4344] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended
[   58.428705][ T4405] loop3: detected capacity change from 0 to 128
[   58.638956][ T4344] EXT4-fs (loop4): Errors on filesystem, clearing orphan list.
[   58.647250][ T4405] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   58.665119][ T4344] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   58.763724][ T4405] ext4 filesystem being mounted at /53/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   58.916464][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.967420][ T4423] loop2: detected capacity change from 0 to 128
[   58.989388][ T4421] loop4: detected capacity change from 0 to 1024
[   59.065027][ T4421] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   59.162698][ T4428] netlink: 36 bytes leftover after parsing attributes in process `syz.2.255'.
[   59.180021][   T29] kauditd_printk_skb: 36 callbacks suppressed
[   59.180037][   T29] audit: type=1400 audit(1769719393.314:788): avc:  denied  { append } for  pid=4420 comm="syz.4.253" path="/49/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/cgroup.stat" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   59.232522][ T4421] SELinux:  Context @ is not valid (left unmapped).
[   59.284975][   T29] audit: type=1400 audit(1769719393.364:789): avc:  denied  { mac_admin } for  pid=4420 comm="syz.4.253" capability=33  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   59.305894][   T29] audit: type=1326 audit(1769719393.364:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4427 comm="syz.2.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa91f3aeb9 code=0x7ffc0000
[   59.310990][ T4428] netlink: 36 bytes leftover after parsing attributes in process `syz.2.255'.
[   59.329165][   T29] audit: type=1326 audit(1769719393.364:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4427 comm="syz.2.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa91f3aeb9 code=0x7ffc0000
[   59.361380][   T29] audit: type=1400 audit(1769719393.374:792): avc:  denied  { relabelto } for  pid=4420 comm="syz.4.253" name="cgroup.stat" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="@"
[   59.445247][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   59.464808][ T4431] loop2: detected capacity change from 0 to 1024
[   59.485088][   T29] audit: type=1326 audit(1769719393.444:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4427 comm="syz.2.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7ffa91f3aeb9 code=0x7ffc0000
[   59.508543][   T29] audit: type=1326 audit(1769719393.444:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4427 comm="syz.2.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa91f3aeb9 code=0x7ffc0000
[   59.530581][ T4431] EXT4-fs: Mount option(s) incompatible with ext2
[   59.532369][   T29] audit: type=1326 audit(1769719393.444:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4427 comm="syz.2.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ffa91f3aeb9 code=0x7ffc0000
[   59.561664][   T29] audit: type=1326 audit(1769719393.444:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4427 comm="syz.2.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa91f3aeb9 code=0x7ffc0000
[   59.584978][   T29] audit: type=1326 audit(1769719393.444:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4427 comm="syz.2.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7ffa91f3aeb9 code=0x7ffc0000
[   59.641280][ T4433] netlink: 48 bytes leftover after parsing attributes in process `syz.2.257'.
[   59.651762][ T4435] SELinux:  Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped).
[   59.681312][ T3313] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   59.708549][ T4437] netlink: 40 bytes leftover after parsing attributes in process `syz.4.256'.
[   59.821879][ T4443] netlink: 'syz.1.261': attribute type 4 has an invalid length.
[   59.848207][ T4447] loop4: detected capacity change from 0 to 512
[   59.875651][ T4447] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0007-000000000000 r/w without journal. Quota mode: writeback.
[   59.898346][ T4447] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   60.009071][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0007-000000000000.
[   60.063445][ T4464] loop4: detected capacity change from 0 to 256
[   60.093498][ T4464] FAT-fs (loop4): Directory bread(block 517) failed
[   60.144710][ T4464] FAT-fs (loop4): Directory bread(block 518) failed
[   60.151398][ T4464] FAT-fs (loop4): Directory bread(block 519) failed
[   60.224240][ T4488] netlink: 'syz.2.275': attribute type 4 has an invalid length.
[   60.224567][ T4464] FAT-fs (loop4): Directory bread(block 520) failed
[   60.264536][ T4464] FAT-fs (loop4): Directory bread(block 521) failed
[   60.287243][ T4464] FAT-fs (loop4): Directory bread(block 522) failed
[   60.293977][ T4464] FAT-fs (loop4): Directory bread(block 523) failed
[   60.322239][ T4493] netlink: 'syz.2.276': attribute type 21 has an invalid length.
[   60.325024][ T4464] FAT-fs (loop4): Directory bread(block 524) failed
[   60.341536][ T4493] netlink: 'syz.2.276': attribute type 4 has an invalid length.
[   60.364521][ T4464] FAT-fs (loop4): Directory bread(block 525) failed
[   60.371361][ T4464] FAT-fs (loop4): Directory bread(block 526) failed
[   60.421945][ T4501] loop2: detected capacity change from 0 to 736
[   60.438467][ T4502] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[   60.455421][ T4502] netlink: 24 bytes leftover after parsing attributes in process `syz.1.279'.
[   60.474554][ T4502] tipc: Started in network mode
[   60.479485][ T4502] tipc: Node identity e0000001, cluster identity 4711
[   60.486352][ T4502] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   60.542594][ T4504] netlink: 16 bytes leftover after parsing attributes in process `syz.4.280'.
[   60.654753][ T4511] hsr_slave_0: left promiscuous mode
[   60.660785][ T4511] hsr_slave_1: left promiscuous mode
[   60.789824][ T4518] bond1: option packets_per_slave: mode dependency failed, not supported in mode broadcast(3)
[   60.805656][ T4518] bond1 (unregistering): Released all slaves
[   60.866377][ T4527] macvlan0: entered allmulticast mode
[   60.871801][ T4527] veth1_vlan: entered allmulticast mode
[   60.878145][ T4527] veth1_vlan: left allmulticast mode
[   60.886098][ T4527] macvlan0 (unregistering): left allmulticast mode
[   60.971040][ T4539] netlink: 'syz.2.288': attribute type 3 has an invalid length.
[   61.079783][ T4548] batadv1: entered promiscuous mode
[   61.130316][ T4546] rtc_cmos 00:00: Alarms can be up to one day in the future
[   61.374774][ T4574] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   61.510026][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   61.589135][ T4584] tipc: Can't bind to reserved service type 1
[   61.819700][   T10] rtc_cmos 00:00: Alarms can be up to one day in the future
[   61.827567][   T10] rtc_cmos 00:00: Alarms can be up to one day in the future
[   61.835338][   T10] rtc_cmos 00:00: Alarms can be up to one day in the future
[   61.843084][   T10] rtc_cmos 00:00: Alarms can be up to one day in the future
[   61.850478][   T10] rtc rtc0: __rtc_set_alarm: err=-22
[   61.902483][ T4594] set_capacity_and_notify: 3 callbacks suppressed
[   61.902578][ T4594] loop4: detected capacity change from 0 to 128
[   62.065649][ T4595] lo: entered promiscuous mode
[   62.091850][ T4598] loop4: detected capacity change from 0 to 512
[   62.138661][  T310] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.195244][ T4598] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   62.218786][ T4598] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   62.236389][  T310] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.299670][ T4595] syz.1.302 (4595) used greatest stack depth: 9832 bytes left
[   62.310792][  T310] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.370958][  T310] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.396807][ T4598] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   62.413984][ T4610] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.439612][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   62.561243][ T4621] loop4: detected capacity change from 0 to 1024
[   62.574765][  T310] bridge_slave_1: left allmulticast mode
[   62.580449][  T310] bridge_slave_1: left promiscuous mode
[   62.586178][  T310] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.615498][  T310] bridge_slave_0: left allmulticast mode
[   62.621234][  T310] bridge_slave_0: left promiscuous mode
[   62.627008][  T310] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.641355][ T4621] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   62.717462][ T4621] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: comm syz.4.313: inode #778331508: comm syz.4.313: iget: illegal inode #
[   62.766266][ T4621] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.313: error while reading EA inode 778331508 err=-117
[   62.835204][ T4630] EXT4-fs error (device loop4): ext4_xattr_block_list:766: inode #15: comm syz.4.313: corrupted xattr block 113: invalid header
[   62.866965][  T310] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   62.886060][  T310] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   62.896084][ T4621] xt_socket: unknown flags 0x50
[   62.908009][  T310] bond0 (unregistering): Released all slaves
[   62.977355][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   62.991391][  T310] hsr_slave_0: left promiscuous mode
[   63.000110][  T310] hsr_slave_1: left promiscuous mode
[   63.010746][  T310] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   63.018330][  T310] batman_adv: batadv0: Removing interface: batadv_slave_0
[   63.036569][  T310] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   63.044098][  T310] batman_adv: batadv0: Removing interface: batadv_slave_1
[   63.080456][  T310] veth1_macvtap: left promiscuous mode
[   63.114525][  T310] veth0_macvtap: left promiscuous mode
[   63.120132][  T310] veth1_vlan: left promiscuous mode
[   63.164518][  T310] veth0_vlan: left promiscuous mode
[   63.357220][ T4664] loop4: detected capacity change from 0 to 128
[   63.399738][  T310] team0 (unregistering): Port device team_slave_1 removed
[   63.421603][  T310] team0 (unregistering): Port device team_slave_0 removed
[   63.664277][ T4602] chnl_net:caif_netlink_parms(): no params data found
[   63.858669][ T4602] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.865972][ T4602] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.902369][ T4669] netlink: 'syz.3.315': attribute type 21 has an invalid length.
[   63.932965][ T4602] bridge_slave_0: entered allmulticast mode
[   63.954400][ T4602] bridge_slave_0: entered promiscuous mode
[   63.993459][ T4602] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.000623][ T4602] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.052113][ T4602] bridge_slave_1: entered allmulticast mode
[   64.067501][ T4602] bridge_slave_1: entered promiscuous mode
[   64.121719][ T4699] loop1: detected capacity change from 0 to 128
[   64.131380][ T4602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.151853][ T4602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.249294][ T4709] loop1: detected capacity change from 0 to 1024
[   64.256840][ T4602] team0: Port device team_slave_0 added
[   64.263596][ T4602] team0: Port device team_slave_1 added
[   64.310248][ T4709] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   64.328878][ T4602] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.335880][ T4602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.361816][ T4602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.535316][ T4602] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.542339][ T4602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.568482][ T4602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.645661][ T4602] hsr_slave_0: entered promiscuous mode
[   64.664948][ T4602] hsr_slave_1: entered promiscuous mode
[   64.719553][   T29] kauditd_printk_skb: 128 callbacks suppressed
[   64.719568][   T29] audit: type=1326 audit(1769719398.854:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4730 comm="syz.4.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40b8daeb9 code=0x7ffc0000
[   64.820666][ T4734] __nla_validate_parse: 5 callbacks suppressed
[   64.820691][ T4734] netlink: 264 bytes leftover after parsing attributes in process `syz.4.328'.
[   64.834509][   T29] audit: type=1326 audit(1769719398.884:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4730 comm="syz.4.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fc40b8daeb9 code=0x7ffc0000
[   64.859235][   T29] audit: type=1326 audit(1769719398.884:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4730 comm="syz.4.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40b8daeb9 code=0x7ffc0000
[   64.882566][   T29] audit: type=1326 audit(1769719398.884:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4730 comm="syz.4.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40b8daeb9 code=0x7ffc0000
[   64.905725][ T4734] netlink: 'syz.4.328': attribute type 11 has an invalid length.
[   64.905828][   T29] audit: type=1326 audit(1769719398.884:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4730 comm="syz.4.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc40b8daeb9 code=0x7ffc0000
[   64.913539][ T4734] netlink: 44 bytes leftover after parsing attributes in process `syz.4.328'.
[   64.936812][   T29] audit: type=1326 audit(1769719398.884:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4730 comm="syz.4.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40b8daeb9 code=0x7ffc0000
[   64.936849][   T29] audit: type=1326 audit(1769719398.884:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4730 comm="syz.4.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40b8daeb9 code=0x7ffc0000
[   64.992309][   T29] audit: type=1326 audit(1769719398.884:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4730 comm="syz.4.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc40b8daeb9 code=0x7ffc0000
[   65.015865][   T29] audit: type=1326 audit(1769719398.884:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4730 comm="syz.4.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40b8daeb9 code=0x7ffc0000
[   65.039513][   T29] audit: type=1326 audit(1769719398.884:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4730 comm="syz.4.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40b8daeb9 code=0x7ffc0000
[   65.151855][ T4602] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   65.170955][ T4602] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   65.200965][ T4743] loop4: detected capacity change from 0 to 1024
[   65.209582][ T4602] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   65.223934][ T4602] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   65.247673][ T4743] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   65.283159][ T4602] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.348114][ T4602] 8021q: adding VLAN 0 to HW filter on device team0
[   65.395396][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.402565][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.455630][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.462779][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.678041][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   65.692536][ T4602] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.757233][ T4771] loop4: detected capacity change from 0 to 128
[   65.954007][ T4602] veth0_vlan: entered promiscuous mode
[   65.967583][ T4602] veth1_vlan: entered promiscuous mode
[   65.995662][ T4787] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   66.016197][ T4602] veth0_macvtap: entered promiscuous mode
[   66.023868][ T4602] veth1_macvtap: entered promiscuous mode
[   66.052537][ T4602] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.082166][ T4602] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.102675][  T310] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.115650][ T4790] loop4: detected capacity change from 0 to 128
[   66.126373][  T310] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.165608][  T310] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.175112][  T310] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.239966][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   66.268488][ T4797] netlink: 112 bytes leftover after parsing attributes in process `syz.4.335'.
[   66.277554][ T4797] netlink: 8 bytes leftover after parsing attributes in process `syz.4.335'.
[   66.342123][ T4804] netlink: 'syz.1.337': attribute type 10 has an invalid length.
[   66.376985][ T4804] veth0_vlan: entered allmulticast mode
[   66.420857][ T4804] veth0_vlan: left promiscuous mode
[   66.445727][ T4804] veth0_vlan: entered promiscuous mode
[   66.454113][ T4804] team0: Device veth0_vlan failed to register rx_handler
[   66.484475][ T4817] netlink: 12 bytes leftover after parsing attributes in process `syz.4.341'.
[   66.485465][ T4804] syz.1.337 (4804) used greatest stack depth: 9792 bytes left
[   66.522789][ T4819] netlink: 4 bytes leftover after parsing attributes in process `syz.5.340'.
[   66.592531][ T4825] loop4: detected capacity change from 0 to 128
[   66.631695][ T4813] EXT4-fs: Ignoring removed mblk_io_submit option
[   66.708149][ T4813] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal
[   66.892152][ T4850] net_ratelimit: 40 callbacks suppressed
[   66.892170][ T4850] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   67.070684][ T4860] netlink: 76 bytes leftover after parsing attributes in process `syz.0.355'.
[   67.817576][ T4872] chnl_net:caif_netlink_parms(): no params data found
[   67.888478][ T4872] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.895671][ T4872] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.913121][ T4872] bridge_slave_0: entered allmulticast mode
[   67.930129][ T4872] bridge_slave_0: entered promiscuous mode
[   67.938556][ T4872] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.945703][ T4872] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.954148][ T4872] bridge_slave_1: entered allmulticast mode
[   67.960728][ T4872] bridge_slave_1: entered promiscuous mode
[   67.978329][ T4872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.988957][ T4872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   68.009441][ T4872] team0: Port device team_slave_0 added
[   68.019696][ T4872] team0: Port device team_slave_1 added
[   68.067884][ T4888] netlink: 104 bytes leftover after parsing attributes in process `syz.5.360'.
[   68.088661][ T4872] batman_adv: batadv0: Adding interface: batadv_slave_0
[   68.095673][ T4872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   68.121630][ T4872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   68.173839][ T4872] batman_adv: batadv0: Adding interface: batadv_slave_1
[   68.180868][ T4872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   68.207156][ T4872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   68.297759][ T4872] hsr_slave_0: entered promiscuous mode
[   68.340364][ T4887] syz.5.360 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000
[   68.354497][ T4887] CPU: 0 UID: 0 PID: 4887 Comm: syz.5.360 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   68.354529][ T4887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   68.354546][ T4887] Call Trace:
[   68.354553][ T4887]  <TASK>
[   68.354578][ T4887]  __dump_stack+0x1d/0x30
[   68.354612][ T4887]  dump_stack_lvl+0x95/0xd0
[   68.354638][ T4887]  dump_stack+0x15/0x1b
[   68.354658][ T4887]  dump_header+0x80/0x240
[   68.354683][ T4887]  oom_kill_process+0x295/0x350
[   68.354797][ T4887]  out_of_memory+0x97d/0xb80
[   68.354833][ T4887]  try_charge_memcg+0x62e/0xa10
[   68.354892][ T4887]  obj_cgroup_charge_pages+0x23/0xc0
[   68.354927][ T4887]  __memcg_kmem_charge_page+0x9e/0x170
[   68.355041][ T4887]  __alloc_frozen_pages_noprof+0x18a/0x350
[   68.355081][ T4887]  alloc_pages_mpol+0xb3/0x260
[   68.355125][ T4887]  alloc_pages_noprof+0x8f/0x130
[   68.355168][ T4887]  __vmalloc_node_range_noprof+0xa46/0x12b0
[   68.355275][ T4887]  __kvmalloc_node_noprof+0x471/0x680
[   68.355313][ T4887]  ? ip_set_alloc+0x24/0x30
[   68.355349][ T4887]  ? ip_set_alloc+0x24/0x30
[   68.355472][ T4887]  ? __slab_alloc+0x25/0x50
[   68.355507][ T4887]  ip_set_alloc+0x24/0x30
[   68.355536][ T4887]  hash_netiface_create+0x282/0x740
[   68.355576][ T4887]  ? __pfx_hash_netiface_create+0x10/0x10
[   68.355693][ T4887]  ip_set_create+0x3cf/0x970
[   68.355752][ T4887]  ? __nla_parse+0x40/0x60
[   68.355902][ T4887]  nfnetlink_rcv_msg+0x509/0x5d0
[   68.355960][ T4887]  netlink_rcv_skb+0x123/0x220
[   68.356021][ T4887]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[   68.356122][ T4887]  nfnetlink_rcv+0x167/0x1720
[   68.356235][ T4887]  ? __kfree_skb+0x109/0x150
[   68.356275][ T4887]  ? nlmon_xmit+0x4f/0x60
[   68.356321][ T4887]  ? consume_skb+0x49/0x140
[   68.356402][ T4887]  ? nlmon_xmit+0x4f/0x60
[   68.356446][ T4887]  ? dev_hard_start_xmit+0x3a8/0x3e0
[   68.356498][ T4887]  ? __dev_queue_xmit+0x139a/0x1f20
[   68.356563][ T4887]  ? __dev_queue_xmit+0x148/0x1f20
[   68.356613][ T4887]  ? ref_tracker_free+0x37d/0x3e0
[   68.356659][ T4887]  ? __netlink_deliver_tap+0x4dc/0x500
[   68.356764][ T4887]  netlink_unicast+0x5c0/0x690
[   68.356798][ T4887]  netlink_sendmsg+0x5c8/0x6f0
[   68.356828][ T4887]  ? __pfx_netlink_sendmsg+0x10/0x10
[   68.356931][ T4887]  ____sys_sendmsg+0x5af/0x600
[   68.357008][ T4887]  ___sys_sendmsg+0x195/0x1e0
[   68.357048][ T4887]  __x64_sys_sendmsg+0xd4/0x160
[   68.357081][ T4887]  x64_sys_call+0x17ba/0x3000
[   68.357117][ T4887]  do_syscall_64+0xc0/0x2a0
[   68.357277][ T4887]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   68.357308][ T4887] RIP: 0033:0x7f5e18cbaeb9
[   68.357334][ T4887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   68.357353][ T4887] RSP: 002b:00007f5e17717028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   68.357426][ T4887] RAX: ffffffffffffffda RBX: 00007f5e18f35fa0 RCX: 00007f5e18cbaeb9
[   68.357450][ T4887] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004
[   68.357506][ T4887] RBP: 00007f5e18d28c1f R08: 0000000000000000 R09: 0000000000000000
[   68.357519][ T4887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   68.357531][ T4887] R13: 00007f5e18f36038 R14: 00007f5e18f35fa0 R15: 00007fff294dcfd8
[   68.357560][ T4887]  </TASK>
[   68.357569][ T4887] memory: usage 307200kB, limit 307200kB, failcnt 147
[   68.469016][ T4872] hsr_slave_1: entered promiscuous mode
[   68.471364][ T4887] memory+swap: usage 307364kB, limit 9007199254740988kB, failcnt 0
[   68.495167][ T4872] debugfs: 'hsr0' already exists in 'hsr'
[   68.496427][ T4887] kmem: usage 307172kB, limit 9007199254740988kB, failcnt 0
[   68.501126][ T4872] Cannot create hsr debugfs directory
[   68.715221][ T4887] Memory cgroup stats for /syz5:
[   68.756120][ T4872] netdevsim netdevsim6 netdevsim0: renamed from eth0
[   68.780359][ T4872] netdevsim netdevsim6 netdevsim1: renamed from eth1
[   68.794624][ T4887] cache 0
[   68.797643][ T4887] rss 16384
[   68.800788][ T4887] shmem 0
[   68.803749][ T4887] mapped_file 0
[   68.807416][ T4887] dirty 0
[   68.810377][ T4887] writeback 0
[   68.813681][ T4887] workingset_refault_anon 1
[   68.818261][ T4887] workingset_refault_file 0
[   68.822795][ T4887] swap 167936
[   68.826169][ T4887] swapcached 28672
[   68.829908][ T4887] pgpgin 428
[   68.833120][ T4887] pgpgout 421
[   68.836485][ T4887] pgfault 782
[   68.839854][ T4887] pgmajfault 0
[   68.843233][ T4887] inactive_anon 28672
[   68.847264][ T4887] active_anon 0
[   68.850780][ T4887] inactive_file 0
[   68.855061][ T4887] active_file 0
[   68.858551][ T4887] unevictable 0
[   68.862050][ T4887] hierarchical_memory_limit 314572800
[   68.867835][ T4887] hierarchical_memsw_limit 9223372036854771712
[   68.874022][ T4887] total_cache 0
[   68.877522][ T4887] total_rss 16384
[   68.881226][ T4887] total_shmem 0
[   68.884719][ T4887] total_mapped_file 0
[   68.888749][ T4887] total_dirty 0
[   68.892259][ T4887] total_writeback 0
[   68.896200][ T4887] total_workingset_refault_anon 1
[   68.901303][ T4887] total_workingset_refault_file 0
[   68.906447][ T4887] total_swap 167936
[   68.910267][ T4887] total_swapcached 28672
[   68.914616][ T4887] total_pgpgin 428
[   68.918352][ T4887] total_pgpgout 421
[   68.922178][ T4887] total_pgfault 782
[   68.926113][ T4887] total_pgmajfault 0
[   68.930116][ T4887] total_inactive_anon 28672
[   68.934661][ T4887] total_active_anon 0
[   68.938664][ T4887] total_inactive_file 0
[   68.942910][ T4887] total_active_file 0
[   68.946981][ T4887] total_unevictable 0
[   68.951013][ T4887] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.360,pid=4886,uid=0
[   68.965674][ T4887] Memory cgroup out of memory: Killed process 4886 (syz.5.360) total-vm:94132kB, anon-rss:1204kB, file-rss:22412kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[   68.986093][ T4872] netdevsim netdevsim6 netdevsim2: renamed from eth2
[   69.009390][ T4872] netdevsim netdevsim6 netdevsim3: renamed from eth3
[   69.066785][ T4887] syz.5.360 (4887) used greatest stack depth: 7464 bytes left
[   69.153753][ T4872] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.197586][ T4872] 8021q: adding VLAN 0 to HW filter on device team0
[   69.208001][ T4913] set_capacity_and_notify: 1 callbacks suppressed
[   69.208031][ T4913] loop5: detected capacity change from 0 to 128
[   69.237406][  T310] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.244606][  T310] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.256398][  T310] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.263628][  T310] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.354256][ T4915] netlink: 'syz.5.369': attribute type 3 has an invalid length.
[   69.362026][ T4915] netlink: 'syz.5.369': attribute type 1 has an invalid length.
[   69.369719][ T4915] netlink: 60387 bytes leftover after parsing attributes in process `syz.5.369'.
[   69.460139][ T4872] 8021q: adding VLAN 0 to HW filter on device batadv0
[   69.474009][ T4922] loop5: detected capacity change from 0 to 2048
[   69.545930][ T3297] Alternate GPT is invalid, using primary GPT.
[   69.552292][ T3297]  loop5: p2 p3 p7
[   69.588716][ T4922] Alternate GPT is invalid, using primary GPT.
[   69.595218][ T4922]  loop5: p2 p3 p7
[   69.731856][ T3297] udevd[3297]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory
[   69.733785][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory
[   69.752774][ T3546] udevd[3546]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory
[   69.763559][   T29] kauditd_printk_skb: 41 callbacks suppressed
[   69.763576][   T29] audit: type=1326 audit(1769719403.894:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4942 comm="syz.1.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb712ffaeb9 code=0x7ffc0000
[   69.794341][ T4947] netlink: 'syz.5.375': attribute type 13 has an invalid length.
[   69.814127][   T29] audit: type=1326 audit(1769719403.924:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4942 comm="syz.1.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb712ffaeb9 code=0x7ffc0000
[   69.829913][ T4950] netlink: 36 bytes leftover after parsing attributes in process `syz.0.376'.
[   69.837476][   T29] audit: type=1326 audit(1769719403.924:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4942 comm="syz.1.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb712ffaeb9 code=0x7ffc0000
[   69.837510][   T29] audit: type=1326 audit(1769719403.924:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4942 comm="syz.1.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7fb712ffaeb9 code=0x7ffc0000
[   69.837543][   T29] audit: type=1326 audit(1769719403.924:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4942 comm="syz.1.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb712ffaeb9 code=0x7ffc0000
[   69.837611][   T29] audit: type=1326 audit(1769719403.924:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4942 comm="syz.1.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb712ffaeb9 code=0x7ffc0000
[   69.837646][   T29] audit: type=1326 audit(1769719403.924:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4942 comm="syz.1.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb712ffaeb9 code=0x7ffc0000
[   69.962764][   T29] audit: type=1326 audit(1769719403.924:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4942 comm="syz.1.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7fb712ffaeb9 code=0x7ffc0000
[   69.986196][   T29] audit: type=1326 audit(1769719403.924:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4942 comm="syz.1.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb712ffaeb9 code=0x7ffc0000
[   70.009551][   T29] audit: type=1326 audit(1769719403.934:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4942 comm="syz.1.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb712ffaeb9 code=0x7ffc0000
[   70.032845][ T4947] gretap0: refused to change device tx_queue_len
[   70.042364][ T4947] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   70.060221][ T4872] veth0_vlan: entered promiscuous mode
[   70.068781][ T1029] kernel write not supported for file bpf-prog (pid: 1029 comm: kworker/1:2)
[   70.098040][ T4872] veth1_vlan: entered promiscuous mode
[   70.123553][ T4954] netlink: 40 bytes leftover after parsing attributes in process `syz.5.377'.
[   70.133500][ T4872] veth0_macvtap: entered promiscuous mode
[   70.153601][ T4872] veth1_macvtap: entered promiscuous mode
[   70.186222][ T4872] batman_adv: batadv0: Interface activated: batadv_slave_0
[   70.217185][ T4872] batman_adv: batadv0: Interface activated: batadv_slave_1
[   70.237859][ T4959] Unsupported ieee802154 address type: 0
[   70.258254][   T53] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.270001][   T53] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.290154][   T53] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.334596][   T53] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.396425][ T4969] netlink: 'syz.6.359': attribute type 1 has an invalid length.
[   70.477756][ T4979] loop1: detected capacity change from 0 to 128
[   70.630952][ T4994] netlink: 'syz.5.383': attribute type 5 has an invalid length.
[   70.730489][ T4994] loop5: detected capacity change from 0 to 8192
[   70.777222][ T3297]  loop5: p1 p3 p4
[   70.781140][ T3297] loop5: p1 start 393225 is beyond EOD, truncated
[   70.781187][ T5007] loop6: detected capacity change from 0 to 128
[   70.823175][ T3297] loop5: p4 size 37048832 extends beyond EOD, truncated
[   70.867194][ T4994]  loop5: p1 p3 p4
[   70.871131][ T4994] loop5: p1 start 393225 is beyond EOD, truncated
[   70.904201][ T4994] loop5: p4 size 37048832 extends beyond EOD, truncated
[   70.942283][ T5016] loop6: detected capacity change from 0 to 1024
[   70.975886][ T3297] udevd[3297]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory
[   70.976956][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory
[   71.010490][ T5016] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   71.057707][ T5024] tipc: Started in network mode
[   71.062606][ T5024] tipc: Node identity , cluster identity 4711
[   71.068752][ T5024] tipc: Failed to obtain node identity
[   71.074220][ T5024] tipc: Enabling of bearer <eth:ip6_vti0> rejected, failed to enable media
[   71.151629][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory
[   71.175613][ T3297] udevd[3297]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory
[   71.203410][ T5031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.395'.
[   71.212322][ T5031] netlink: 24 bytes leftover after parsing attributes in process `syz.0.395'.
[   71.474964][ T5039] loop5: detected capacity change from 0 to 8192
[   71.497240][ T5039] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   71.730537][ T5069] loop5: detected capacity change from 0 to 128
[   71.754728][ T4872] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.768617][ T5071] netlink: 12 bytes leftover after parsing attributes in process `syz.1.407'.
[   71.829634][ T5078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.410'.
[   71.841651][ T5080] netlink: 76 bytes leftover after parsing attributes in process `syz.5.411'.
[   71.853979][ T5078] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.908152][ T5078] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.958182][ T5078] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.018478][ T5078] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.040880][ T5095] loop5: detected capacity change from 0 to 128
[   72.071993][ T5095] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[   72.114643][   T31] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.123228][   T31] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.136183][ T5095] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   72.162153][   T31] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.203316][   T31] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.231555][ T4602] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   72.315901][ T5110] netlink: 4 bytes leftover after parsing attributes in process `syz.0.419'.
[   72.324805][ T5110] bridge_slave_1: left allmulticast mode
[   72.330472][ T5110] bridge_slave_1: left promiscuous mode
[   72.336159][ T5110] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.345392][ T5082] loop1: detected capacity change from 0 to 1024
[   72.354804][ T5110] bridge_slave_0: left allmulticast mode
[   72.360502][ T5110] bridge_slave_0: left promiscuous mode
[   72.366272][ T5110] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.380619][ T5111] netlink: 28 bytes leftover after parsing attributes in process `syz.5.421'.
[   72.394501][ T5082] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   72.453586][ T5082] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #3: block 1: comm syz.1.412: lblock 1 mapped to illegal pblock 1 (length 1)
[   72.512627][ T5115] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869)
[   72.532950][ T5082] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.412: Failed to acquire dquot type 0
[   72.555909][ T5115] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   72.575999][ T5082] EXT4-fs error (device loop1): ext4_free_blocks:6728: comm syz.1.412: Freeing blocks not in datazone - block = 0, count = 4096
[   72.591879][ T5115] EXT4-fs error (device loop5): ext4_get_journal_inode:5849: inode #32: comm syz.5.422: iget: special inode unallocated
[   72.618197][ T5115] EXT4-fs (loop5): Remounting filesystem read-only
[   72.627404][ T5082] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.412: Invalid inode bitmap blk 0 in block_group 0
[   72.646430][ T5115] EXT4-fs (loop5): no journal found
[   72.651751][ T5115] EXT4-fs (loop5): can't get journal size
[   72.667845][ T5082] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem
[   72.681245][ T5115] EXT4-fs (loop5): filesystem is read-only
[   72.692852][ T5082] EXT4-fs (loop1): 1 orphan inode deleted
[   72.701464][ T5115] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[   72.721579][ T5082] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   72.763512][ T4602] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.217844][ T3335] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1)
[   73.247817][ T3335] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:6: Failed to release dquot type 0
[   73.275639][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.492837][ T5137] Attempt to read inode for relocated directory
[   73.570453][ T5140] xt_TCPMSS: Only works on TCP SYN packets
[   73.585603][ T5139] netlink: 88 bytes leftover after parsing attributes in process `syz.5.428'.
[   73.594554][ T5139] netlink: 12 bytes leftover after parsing attributes in process `syz.5.428'.
[   73.609760][  T310] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   73.629098][  T310] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   73.653510][  T310] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   73.689913][  T310] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   74.614934][ T5154] set_capacity_and_notify: 2 callbacks suppressed
[   74.614952][ T5154] loop1: detected capacity change from 0 to 1024
[   74.648756][ T5154] EXT4-fs: Ignoring removed bh option
[   74.715384][ T5154] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   74.869085][ T5154] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.432: Allocating blocks 497-513 which overlap fs metadata
[   74.916679][ T5154] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.432: Allocating blocks 497-513 which overlap fs metadata
[   74.951421][ T5153] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.432: Allocating blocks 497-513 which overlap fs metadata
[   74.985754][ T5152] EXT4-fs (loop1): pa ffff888107a4a150: logic 48, phys. 177, len 21
[   74.993793][ T5152] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1
[   75.125731][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.667103][ T5181] loop1: detected capacity change from 0 to 512
[   75.706189][ T5181] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.436: bad orphan inode 13
[   75.734683][ T5181] ext4_test_bit(bit=12, block=4) = 1
[   75.740033][ T5181] is_bad_inode(inode)=0
[   75.744211][ T5181] NEXT_ORPHAN(inode)=0
[   75.748352][ T5181] max_ino=32
[   75.751567][ T5181] i_nlink=1
[   75.804434][ T5181] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   75.836960][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.917169][   T29] kauditd_printk_skb: 106 callbacks suppressed
[   75.917184][   T29] audit: type=1400 audit(1769719666.053:1078): avc:  denied  { getopt } for  pid=5188 comm="syz.1.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   76.035165][ T5194] __nla_validate_parse: 7 callbacks suppressed
[   76.035180][ T5194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.438'.
[   76.410944][ T5219] loop6: detected capacity change from 0 to 512
[   76.596994][ T5225] netlink: 256 bytes leftover after parsing attributes in process `syz.6.443'.
[   76.606025][ T5225] netlink: 72 bytes leftover after parsing attributes in process `syz.6.443'.
[   76.693799][ T5233] loop6: detected capacity change from 0 to 1024
[   76.804076][ T5233] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   76.839969][ T5249] netlink: 8 bytes leftover after parsing attributes in process `syz.0.447'.
[   76.848856][ T5249] netlink: 20 bytes leftover after parsing attributes in process `syz.0.447'.
[   76.874347][ T5249] geneve2: entered promiscuous mode
[   76.879672][ T5249] geneve2: entered allmulticast mode
[   77.044841][   T29] audit: type=1400 audit(1769719667.183:1079): avc:  denied  { write } for  pid=5263 comm="syz.1.448" name="file0" dev="tmpfs" ino=618 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   77.067338][   T29] audit: type=1400 audit(1769719667.183:1080): avc:  denied  { open } for  pid=5263 comm="syz.1.448" path="/112/file0" dev="tmpfs" ino=618 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   77.194832][   T29] audit: type=1400 audit(1769719667.223:1081): avc:  denied  { ioctl } for  pid=5263 comm="syz.1.448" path="/112/file0" dev="tmpfs" ino=618 ioctlcmd=0x70cf scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   77.302552][   T29] audit: type=1400 audit(1769719667.433:1082): avc:  denied  { getopt } for  pid=5263 comm="syz.1.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   77.393806][ T5278] loop1: detected capacity change from 0 to 128
[   77.420631][ T5285] netlink: 12 bytes leftover after parsing attributes in process `syz.0.452'.
[   77.493098][ T5288] netlink: 12 bytes leftover after parsing attributes in process `syz.5.453'.
[   77.510916][ T5289] vhci_hcd vhci_hcd.2: invalid port number 98
[   77.517079][ T5289] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffc i0062 l0
[   77.615699][ T5296] netlink: 'syz.0.456': attribute type 39 has an invalid length.
[   77.693404][ T5300] loop1: detected capacity change from 0 to 512
[   77.731338][ T5300] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.457: bad orphan inode 13
[   77.769513][ T5303] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[   77.769513][ T5303] The task syz.5.458 (5303) triggered the difference, watch for misbehavior.
[   77.776378][ T5300] ext4_test_bit(bit=12, block=4) = 1
[   77.792411][ T5300] is_bad_inode(inode)=0
[   77.796638][ T5300] NEXT_ORPHAN(inode)=0
[   77.800747][ T5300] max_ino=32
[   77.803973][ T5300] i_nlink=1
[   77.854686][ T5300] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   77.924089][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.960567][ T5308] netlink: 24 bytes leftover after parsing attributes in process `syz.0.459'.
[   77.982923][ T5308] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5308 comm=syz.0.459
[   78.057001][ T4872] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.080168][ T5316] loop6: detected capacity change from 0 to 1024
[   78.098742][ T5316] netlink: 44 bytes leftover after parsing attributes in process `syz.6.462'.
[   78.481274][ T5333] xt_time: invalid argument - start or stop time greater than 23:59:59
[   78.525742][ T5333] loop1: detected capacity change from 0 to 1024
[   78.583723][ T5333] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (24670!=35945)
[   78.601546][ T5333] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   78.630167][ T5333] EXT4-fs (loop1): revision level too high, forcing read-only mode
[   78.664771][ T5333] EXT4-fs (loop1): Can't support bigalloc feature without extents feature
[   78.664771][ T5333] 
[   78.675546][ T5333] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features
[   78.740928][ T5345] netlink: 'syz.5.467': attribute type 1 has an invalid length.
[   78.784904][ T5333] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   78.802643][ T5333] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.837114][ T5345] 8021q: adding VLAN 0 to HW filter on device bond1
[   78.927422][ T4325] syz.3.229 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[   78.938386][ T4325] CPU: 0 UID: 0 PID: 4325 Comm: syz.3.229 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   78.938415][ T4325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   78.938474][ T4325] Call Trace:
[   78.938481][ T4325]  <TASK>
[   78.938509][ T4325]  __dump_stack+0x1d/0x30
[   78.938536][ T4325]  dump_stack_lvl+0x95/0xd0
[   78.938559][ T4325]  dump_stack+0x15/0x1b
[   78.938647][ T4325]  dump_header+0x80/0x240
[   78.938671][ T4325]  oom_kill_process+0x295/0x350
[   78.938697][ T4325]  out_of_memory+0x97d/0xb80
[   78.938723][ T4325]  try_charge_memcg+0x62e/0xa10
[   78.938828][ T4325]  __mem_cgroup_charge+0x65/0x150
[   78.938870][ T4325]  filemap_add_folio+0x110/0x350
[   78.938898][ T4325]  __filemap_get_folio_mpol+0x326/0x680
[   78.938928][ T4325]  filemap_fault+0x473/0xbb0
[   78.939035][ T4325]  ? _raw_spin_lock+0x52/0xa0
[   78.939072][ T4325]  __do_fault+0xbc/0x200
[   78.939098][ T4325]  handle_mm_fault+0x11d7/0x3030
[   78.939188][ T4325]  ? _raw_spin_lock+0x52/0xa0
[   78.939263][ T4325]  ? __pte_offset_map_lock+0x1d9/0x240
[   78.939319][ T4325]  __get_user_pages+0x1023/0x1ea0
[   78.939368][ T4325]  get_dump_page+0xb4/0x240
[   78.939403][ T4325]  dump_user_range+0x148/0xdb0
[   78.939435][ T4325]  elf_core_dump+0x21a2/0x2330
[   78.939526][ T4325]  ? 0xffffffffff600000
[   78.939619][ T4325]  coredump_write+0xacf/0xdf0
[   78.939650][ T4325]  vfs_coredump+0x26bc/0x3120
[   78.939692][ T4325]  ? __memcg_slab_free_hook+0xbc/0x230
[   78.939725][ T4325]  ? proc_coredump_connector+0x160/0x2b0
[   78.939782][ T4325]  ? kmem_cache_free+0xdf/0x380
[   78.939823][ T4325]  get_signal+0xd7b/0xf60
[   78.939854][ T4325]  arch_do_signal_or_restart+0x96/0x450
[   78.939891][ T4325]  irqentry_exit+0xf7/0x510
[   78.939924][ T4325]  asm_exc_page_fault+0x26/0x30
[   78.940023][ T4325] RIP: 0033:0x7f090a0614f7
[   78.940043][ T4325] Code: e8 8e fa ff ff 89 f2 48 8d 3d 15 38 1b 00 48 8d 35 01 38 1b 00 31 c0 e8 e7 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8
[   78.940135][ T4325] RSP: 002b:00007f0908ba6060 EFLAGS: 00010206
[   78.940151][ T4325] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f090a1aaeb9
[   78.940202][ T4325] RDX: 00007f0908ba6080 RSI: 00007f0908ba61b0 RDI: 000000000000000b
[   78.940218][ T4325] RBP: 00007f090a218c1f R08: 0000000000000000 R09: 0000000000000058
[   78.940234][ T4325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   78.940245][ T4325] R13: 00007f090a426218 R14: 00007f090a426180 R15: 00007fff2e743bf8
[   78.940324][ T4325]  </TASK>
[   78.940332][ T4325] memory: usage 307200kB, limit 307200kB, failcnt 27519
[   79.192343][ T4325] memory+swap: usage 432084kB, limit 9007199254740988kB, failcnt 0
[   79.200364][ T4325] kmem: usage 3852kB, limit 9007199254740988kB, failcnt 0
[   79.207513][ T4325] Memory cgroup stats for /syz3:
[   79.248132][ T5345] bond1: (slave veth3): Enslaving as an active interface with a down link
[   79.328282][ T5345] bond1: (slave dummy0): making interface the new active one
[   79.332118][ T5350] loop6: detected capacity change from 0 to 512
[   79.353141][ T5345] dummy0: entered promiscuous mode
[   79.366446][ T5345] bond1: (slave dummy0): Enslaving as an active interface with an up link
[   79.414618][ T5354] bond1 (unregistering): (slave veth3): Releasing active interface
[   79.440849][ T5354] bond1 (unregistering): (slave dummy0): Releasing active interface
[   79.473166][ T5354] bond1 (unregistering): Released all slaves
[   79.497233][ T4325] cache 310538240
[   79.501003][ T4325] rss 40960
[   79.504153][ T4325] shmem 310366208
[   79.507865][ T4325] mapped_file 0
[   79.511345][ T4325] dirty 0
[   79.514311][ T4325] writeback 0
[   79.517657][ T4325] workingset_refault_anon 25
[   79.522259][ T4325] workingset_refault_file 3906
[   79.527200][ T4325] swap 127881216
[   79.530777][ T4325] swapcached 16384
[   79.534634][ T4325] pgpgin 140880
[   79.538209][ T4325] pgpgout 65050
[   79.541710][ T4325] pgfault 21977
[   79.545227][ T4325] pgmajfault 110
[   79.548798][ T4325] inactive_anon 3026944
[   79.552967][ T4325] active_anon 307396608
[   79.557183][ T4325] inactive_file 172032
[   79.561327][ T4325] active_file 0
[   79.564837][ T4325] unevictable 0
[   79.568324][ T4325] hierarchical_memory_limit 314572800
[   79.573721][ T4325] hierarchical_memsw_limit 9223372036854771712
[   79.580044][ T4325] total_cache 310538240
[   79.584238][ T4325] total_rss 40960
[   79.587963][ T4325] total_shmem 310366208
[   79.592133][ T4325] total_mapped_file 0
[   79.596242][ T4325] total_dirty 0
[   79.599740][ T4325] total_writeback 0
[   79.603564][ T4325] total_workingset_refault_anon 25
[   79.608856][ T4325] total_workingset_refault_file 3906
[   79.614161][ T4325] total_swap 127881216
[   79.618265][ T4325] total_swapcached 16384
[   79.622512][ T4325] total_pgpgin 140880
[   79.626540][ T4325] total_pgpgout 65050
[   79.630540][ T4325] total_pgfault 21977
[   79.634571][ T4325] total_pgmajfault 110
[   79.638729][ T4325] total_inactive_anon 3026944
[   79.643433][ T4325] total_active_anon 307396608
[   79.648242][ T4325] total_inactive_file 172032
[   79.652885][ T4325] total_active_file 0
[   79.656988][ T4325] total_unevictable 0
[   79.661057][ T4325] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.229,pid=4327,uid=0
[   79.675671][ T4325] Memory cgroup out of memory: Killed process 4327 (syz.3.229) total-vm:90424kB, anon-rss:1372kB, file-rss:46692kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:1000
[   79.771876][   T29] audit: type=1400 audit(1769719669.903:1083): avc:  denied  { audit_write } for  pid=5363 comm="syz.5.474" capability=29  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[   79.814156][ T5362] loop6: detected capacity change from 0 to 8192
[   79.823123][   T29] audit: type=1107 audit(1769719669.903:1084): pid=5363 uid=0 auid=0 ses=1 subj=root:sysadm_r:sysadm_t msg=''
[   79.859603][ T5362] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   79.872018][ T5362] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[   79.880979][ T5362] FAT-fs (loop6): Filesystem has been set read-only
[   79.890242][ T5352] loop1: detected capacity change from 0 to 512
[   79.898135][ T5362] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[   79.907500][ T5362] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[   79.916903][ T5362] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[   79.926179][ T5362] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[   79.930353][ T5352] EXT4-fs: dax option not supported
[   79.944151][   T29] audit: type=1326 audit(1769719670.073:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5366 comm="syz.5.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e18cbaeb9 code=0x7ffc0000
[   79.967594][   T29] audit: type=1326 audit(1769719670.073:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5366 comm="syz.5.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f5e18cbaeb9 code=0x7ffc0000
[   79.990878][   T29] audit: type=1326 audit(1769719670.073:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5366 comm="syz.5.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e18cbaeb9 code=0x7ffc0000
[   80.004756][ T5362] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[   80.038819][ T5362] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[   80.073323][ T5362] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[   80.091648][ T5371] loop5: detected capacity change from 0 to 512
[   80.104653][ T5362] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[   80.114621][ T5362] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[   80.124950][ T5371] journal_path: Non-blockdev passed as './file1'
[   80.131318][ T5371] EXT4-fs: error: could not find journal device path
[   80.230621][ T5376] tmpfs: Bad value for 'mpol'
[   80.267735][ T5378] netlink: 'syz.5.478': attribute type 21 has an invalid length.
[   80.304597][ T5378] netlink: 132 bytes leftover after parsing attributes in process `syz.5.478'.
[   80.379554][ T5383] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   80.387472][ T5383] batman_adv: batadv0: Removing interface: batadv_slave_0
[   80.396533][ T5385] loop6: detected capacity change from 0 to 128
[   80.409146][ T5385] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   80.428858][ T5385] ext4 filesystem being mounted at /26/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   80.462318][ T5383] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   80.469797][ T5383] batman_adv: batadv0: Removing interface: batadv_slave_1
[   80.692204][ T5385] batadv0: entered promiscuous mode
[   80.801478][ T4872] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   80.916173][ T5414] loop5: detected capacity change from 0 to 128
[   80.922649][ T5408] loop1: detected capacity change from 0 to 512
[   80.937529][ T5413] sch_tbf: burst 22 is lower than device lo mtu (65550) !
[   80.962103][ T5413] sch_tbf: burst 22 is lower than device lo mtu (65550) !
[   80.971978][ T5416] loop5: detected capacity change from 0 to 128
[   80.980170][ T5408] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   80.993064][ T5408] ext4 filesystem being mounted at /120/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   81.051487][   T29] kauditd_printk_skb: 25 callbacks suppressed
[   81.051502][   T29] audit: type=1400 audit(1769719671.183:1113): avc:  denied  { setopt } for  pid=5421 comm="syz.6.490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   81.051988][ T5416] SELinux: failed to load policy
[   81.083492][ T5408] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.485: corrupted xattr block 6: invalid header
[   81.104517][ T5408] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop1 ino=12
[   81.113582][ T5408] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.485: corrupted xattr block 6: invalid header
[   81.113623][ T5423] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.485: corrupted xattr block 6: invalid header
[   81.186346][   T29] audit: type=1400 audit(1769719671.313:1114): avc:  denied  { map } for  pid=5407 comm="syz.1.485" path="socket:[11256]" dev="sockfs" ino=11256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   81.209756][   T29] audit: type=1400 audit(1769719671.323:1115): avc:  denied  { read } for  pid=5407 comm="syz.1.485" path="socket:[11256]" dev="sockfs" ino=11256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   81.245763][ T5408] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop1 ino=12
[   81.257393][ T5423] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop1 ino=12
[   81.295853][ T5408] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.485: corrupted xattr block 6: invalid header
[   81.304676][   T29] audit: type=1400 audit(1769719671.423:1116): avc:  denied  { accept } for  pid=5407 comm="syz.1.485" path="socket:[11256]" dev="sockfs" ino=11256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   81.325906][ T5408] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop1 ino=12
[   81.368521][ T5422] netlink: 'syz.6.490': attribute type 21 has an invalid length.
[   81.376856][ T5422] __nla_validate_parse: 4 callbacks suppressed
[   81.376871][ T5422] netlink: 132 bytes leftover after parsing attributes in process `syz.6.490'.
[   81.414722][ T5427] loop5: detected capacity change from 0 to 1024
[   81.426974][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.459678][   T29] audit: type=1400 audit(1769719671.593:1117): avc:  denied  { accept } for  pid=5428 comm="syz.3.491" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   81.525069][ T5427] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   81.544592][ T5427] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   81.605700][   T29] audit: type=1400 audit(1769719671.743:1118): avc:  denied  { read write } for  pid=5426 comm="syz.5.492" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   81.628473][   T29] audit: type=1400 audit(1769719671.743:1119): avc:  denied  { open } for  pid=5426 comm="syz.5.492" path="/39/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   81.651547][   T29] audit: type=1400 audit(1769719671.743:1120): avc:  denied  { map } for  pid=5426 comm="syz.5.492" path="/39/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   81.674730][   T29] audit: type=1400 audit(1769719671.743:1121): avc:  denied  { execute } for  pid=5426 comm="syz.5.492" path="/39/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   81.712623][ T5427] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.492: bg 0: block 112: padding at end of block bitmap is not set
[   81.727216][ T5427] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 117
[   81.739977][ T5427] EXT4-fs (loop5): This should not happen!! Data will be lost
[   81.739977][ T5427] 
[   81.750291][ T5441] syz_tun: entered allmulticast mode
[   81.766576][ T5426] EXT4-fs error (device loop5): ext4_map_blocks:825: inode #15: block 1: comm syz.5.492: lblock 1 mapped to illegal pblock 1 (length 1)
[   81.781078][ T5426] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #15: block 1: comm syz.5.492: lblock 1 mapped to illegal pblock 1 (length 1)
[   81.795501][ T5426] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #15: block 1: comm syz.5.492: lblock 1 mapped to illegal pblock 1 (length 1)
[   81.809907][ T5426] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #15: block 1: comm syz.5.492: lblock 1 mapped to illegal pblock 1 (length 1)
[   81.824645][ T5441] syz_tun: left allmulticast mode
[   81.863161][   T29] audit: type=1400 audit(1769719671.993:1122): avc:  denied  { map } for  pid=5447 comm="syz.6.498" path="socket:[12343]" dev="sockfs" ino=12343 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1
[   81.889841][ T5426] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #15: block 1: comm syz.5.492: lblock 1 mapped to illegal pblock 1 (length 1)
[   82.030048][ T5426] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #15: block 1: comm syz.5.492: lblock 1 mapped to illegal pblock 1 (length 1)
[   82.073395][ T5472] netlink: 'syz.0.501': attribute type 6 has an invalid length.
[   82.083604][   T37] EXT4-fs error (device loop5): ext4_map_blocks:825: inode #15: comm kworker/u8:2: lblock 0 mapped to illegal pblock 0 (length 1)
[   82.144995][   T37] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[   82.157433][   T37] EXT4-fs (loop5): This should not happen!! Data will be lost
[   82.157433][   T37] 
[   82.198688][ T5426] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #15: comm syz.5.492: lblock 0 mapped to illegal pblock 0 (length 1)
[   82.235383][ T5426] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #15: comm syz.5.492: lblock 0 mapped to illegal pblock 0 (length 1)
[   82.302055][ T4602] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   82.610487][ T5489] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5489 comm=syz.6.503
[   82.778469][ T4332] syz.3.229 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[   82.788367][ T4332] CPU: 0 UID: 0 PID: 4332 Comm: syz.3.229 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   82.788394][ T4332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   82.788408][ T4332] Call Trace:
[   82.788415][ T4332]  <TASK>
[   82.788454][ T4332]  __dump_stack+0x1d/0x30
[   82.788487][ T4332]  dump_stack_lvl+0x95/0xd0
[   82.788512][ T4332]  dump_stack+0x15/0x1b
[   82.788532][ T4332]  dump_header+0x80/0x240
[   82.788617][ T4332]  oom_kill_process+0x295/0x350
[   82.788652][ T4332]  out_of_memory+0x97d/0xb80
[   82.788705][ T4332]  try_charge_memcg+0x62e/0xa10
[   82.788741][ T4332]  __mem_cgroup_charge+0x65/0x150
[   82.788786][ T4332]  shmem_get_folio_gfp+0x47b/0xd60
[   82.788823][ T4332]  shmem_write_begin+0xfc/0x1f0
[   82.788878][ T4332]  generic_perform_write+0x183/0x490
[   82.788925][ T4332]  shmem_file_write_iter+0xc5/0xf0
[   82.788965][ T4332]  __kernel_write_iter+0x319/0x590
[   82.788996][ T4332]  ? __pfx_shmem_file_write_iter+0x10/0x10
[   82.789057][ T4332]  dump_user_range+0xa7d/0xdb0
[   82.789157][ T4332]  elf_core_dump+0x21a2/0x2330
[   82.789272][ T4332]  ? 0xffffffffff600000
[   82.789306][ T4332]  coredump_write+0xacf/0xdf0
[   82.789342][ T4332]  vfs_coredump+0x26bc/0x3120
[   82.789385][ T4332]  ? __memcg_slab_free_hook+0xbc/0x230
[   82.789435][ T4332]  ? proc_coredump_connector+0x160/0x2b0
[   82.789458][ T4332]  ? kmem_cache_free+0xdf/0x380
[   82.789486][ T4332]  get_signal+0xd7b/0xf60
[   82.789524][ T4332]  arch_do_signal_or_restart+0x96/0x450
[   82.789571][ T4332]  irqentry_exit+0xf7/0x510
[   82.789602][ T4332]  asm_exc_page_fault+0x26/0x30
[   82.789628][ T4332] RIP: 0033:0x7f090a0614f7
[   82.789648][ T4332] Code: e8 8e fa ff ff 89 f2 48 8d 3d 15 38 1b 00 48 8d 35 01 38 1b 00 31 c0 e8 e7 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8
[   82.789742][ T4332] RSP: 002b:00007f0908ba6060 EFLAGS: 00010206
[   82.789758][ T4332] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f090a1aaeb9
[   82.789772][ T4332] RDX: 00007f0908ba6080 RSI: 00007f0908ba61b0 RDI: 000000000000000b
[   82.789805][ T4332] RBP: 00007f090a218c1f R08: 0000000000000000 R09: 0000000000000058
[   82.789822][ T4332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   82.789838][ T4332] R13: 00007f090a426218 R14: 00007f090a426180 R15: 00007fff2e743bf8
[   82.789863][ T4332]  </TASK>
[   82.789872][ T4332] memory: usage 307200kB, limit 307200kB, failcnt 30071
[   83.024388][ T4332] memory+swap: usage 430988kB, limit 9007199254740988kB, failcnt 0
[   83.032441][ T4332] kmem: usage 3908kB, limit 9007199254740988kB, failcnt 0
[   83.039658][ T4332] Memory cgroup stats for /syz3:
[   83.042859][ T4332] cache 308748288
[   83.051634][ T4332] rss 888832
[   83.054896][ T4332] shmem 308744192
[   83.058545][ T4332] mapped_file 0
[   83.062023][ T4332] dirty 0
[   83.065029][ T4332] writeback 0
[   83.068408][ T4332] workingset_refault_anon 309
[   83.073174][ T4332] workingset_refault_file 7070
[   83.078023][ T4332] swap 126758912
[   83.081588][ T4332] swapcached 983040
[   83.085491][ T4332] pgpgin 153401
[   83.089083][ T4332] pgpgout 77578
[   83.092610][ T4332] pgfault 23009
[   83.096121][ T4332] pgmajfault 236
[   83.099694][ T4332] inactive_anon 306851840
[   83.104051][ T4332] active_anon 3710976
[   83.108152][ T4332] inactive_file 0
[   83.111803][ T4332] active_file 8192
[   83.115564][ T4332] unevictable 0
[   83.119050][ T4332] hierarchical_memory_limit 314572800
[   83.124486][ T4332] hierarchical_memsw_limit 9223372036854771712
[   83.130740][ T4332] total_cache 308748288
[   83.134969][ T4332] total_rss 888832
[   83.138709][ T4332] total_shmem 308744192
[   83.142997][ T4332] total_mapped_file 0
[   83.147039][ T4332] total_dirty 0
[   83.150517][ T4332] total_writeback 0
[   83.154353][ T4332] total_workingset_refault_anon 309
[   83.159669][ T4332] total_workingset_refault_file 7070
[   83.165084][ T4332] total_swap 126758912
[   83.169171][ T4332] total_swapcached 983040
[   83.173522][ T4332] total_pgpgin 153401
[   83.177587][ T4332] total_pgpgout 77578
[   83.181635][ T4332] total_pgfault 23009
[   83.185790][ T4332] total_pgmajfault 236
[   83.189887][ T4332] total_inactive_anon 306851840
[   83.194925][ T4332] total_active_anon 3710976
[   83.199467][ T4332] total_inactive_file 0
[   83.203646][ T4332] total_active_file 8192
[   83.207950][ T4332] total_unevictable 0
[   83.211950][ T4332] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.229,pid=4320,uid=0
[   83.226705][ T4332] Memory cgroup out of memory: Killed process 4320 (syz.3.229) total-vm:90424kB, anon-rss:1372kB, file-rss:46996kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000
[   83.336317][ T5524] loop1: detected capacity change from 0 to 512
[   83.427293][ T5524] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   83.467794][ T5524] ext4 filesystem being mounted at /124/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   83.529921][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.598890][ T5552] loop1: detected capacity change from 0 to 256
[   83.626246][ T5552] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   83.770582][ T5560] netlink: 'syz.6.525': attribute type 1 has an invalid length.
[   83.786987][ T5555] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[   83.831288][ T5555] bond1 (unregistering): Released all slaves
[   83.891938][ T5564] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869)
[   83.973275][ T5564] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   83.999533][ T5564] EXT4-fs error (device loop6): ext4_get_journal_inode:5849: inode #32: comm syz.6.526: iget: special inode unallocated
[   84.034841][ T5564] EXT4-fs (loop6): Remounting filesystem read-only
[   84.041578][ T5564] EXT4-fs (loop6): no journal found
[   84.046879][ T5564] EXT4-fs (loop6): can't get journal size
[   84.053542][ T5564] EXT4-fs (loop6): filesystem is read-only
[   84.063643][ T5564] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[   84.105634][ T5567] team0: Device vlan2 is already an upper device of the team interface
[   84.154881][ T4872] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.279994][ T5582] EXT4-fs: Ignoring removed orlov option
[   84.302264][ T5582] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   84.321444][ T5588] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[   84.367436][ T5590] netlink: 108 bytes leftover after parsing attributes in process `syz.0.532'.
[   84.377222][ T5582] ext4 filesystem being mounted at /39/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   84.426856][ T5593] pimreg0: tun_chr_ioctl cmd 1074025672
[   84.432564][ T5593] pimreg0: ignored: set checksum disabled
[   84.470777][ T4321] syz.3.229 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[   84.480694][ T4321] CPU: 1 UID: 0 PID: 4321 Comm: syz.3.229 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   84.480769][ T4321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   84.480861][ T4321] Call Trace:
[   84.480868][ T4321]  <TASK>
[   84.480875][ T4321]  __dump_stack+0x1d/0x30
[   84.480984][ T4321]  dump_stack_lvl+0x95/0xd0
[   84.481013][ T4321]  dump_stack+0x15/0x1b
[   84.481039][ T4321]  dump_header+0x80/0x240
[   84.481065][ T4321]  oom_kill_process+0x295/0x350
[   84.481098][ T4321]  out_of_memory+0x97d/0xb80
[   84.481174][ T4321]  try_charge_memcg+0x62e/0xa10
[   84.481223][ T4321]  __mem_cgroup_charge+0x65/0x150
[   84.481287][ T4321]  shmem_get_folio_gfp+0x47b/0xd60
[   84.481326][ T4321]  shmem_write_begin+0xfc/0x1f0
[   84.481412][ T4321]  generic_perform_write+0x183/0x490
[   84.481459][ T4321]  shmem_file_write_iter+0xc5/0xf0
[   84.481541][ T4321]  __kernel_write_iter+0x319/0x590
[   84.481563][ T4321]  ? __pfx_shmem_file_write_iter+0x10/0x10
[   84.481600][ T4321]  dump_user_range+0xa7d/0xdb0
[   84.481699][ T4321]  elf_core_dump+0x21a2/0x2330
[   84.481731][ T4321]  ? 0xffffffffff600000
[   84.481833][ T4321]  coredump_write+0xacf/0xdf0
[   84.481874][ T4321]  vfs_coredump+0x26bc/0x3120
[   84.481910][ T4321]  ? __memcg_slab_free_hook+0xbc/0x230
[   84.482021][ T4321]  ? proc_coredump_connector+0x160/0x2b0
[   84.482085][ T4321]  ? kmem_cache_free+0xdf/0x380
[   84.482120][ T4321]  get_signal+0xd7b/0xf60
[   84.482263][ T4321]  arch_do_signal_or_restart+0x96/0x450
[   84.482300][ T4321]  irqentry_exit+0xf7/0x510
[   84.482409][ T4321]  asm_exc_page_fault+0x26/0x30
[   84.482453][ T4321] RIP: 0033:0x7f090a0614f7
[   84.482476][ T4321] Code: e8 8e fa ff ff 89 f2 48 8d 3d 15 38 1b 00 48 8d 35 01 38 1b 00 31 c0 e8 e7 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8
[   84.482533][ T4321] RSP: 002b:00007f0908ba6060 EFLAGS: 00010206
[   84.482549][ T4321] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f090a1aaeb9
[   84.482564][ T4321] RDX: 00007f0908ba6080 RSI: 00007f0908ba61b0 RDI: 000000000000000b
[   84.482582][ T4321] RBP: 00007f090a218c1f R08: 0000000000000000 R09: 0000000000000058
[   84.482599][ T4321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   84.482615][ T4321] R13: 00007f090a426218 R14: 00007f090a426180 R15: 00007fff2e743bf8
[   84.482649][ T4321]  </TASK>
[   84.482657][ T4321] memory: usage 307200kB, limit 307200kB, failcnt 31098
[   84.716103][ T4321] memory+swap: usage 426560kB, limit 9007199254740988kB, failcnt 0
[   84.724183][ T4321] kmem: usage 3904kB, limit 9007199254740988kB, failcnt 0
[   84.731346][ T4321] Memory cgroup stats for /syz3:
[   84.732491][ T4872] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   84.732894][ T4321] cache 303550464
[   84.750216][ T4321] rss 892928
[   84.753435][ T4321] shmem 303546368
[   84.757122][ T4321] mapped_file 0
[   84.760684][ T4321] dirty 0
[   84.763652][ T4321] writeback 2129920
[   84.767564][ T4321] workingset_refault_anon 309
[   84.772332][ T4321] workingset_refault_file 7070
[   84.777143][ T4321] swap 124964864
[   84.780757][ T4321] swapcached 2666496
[   84.784732][ T4321] pgpgin 153626
[   84.788217][ T4321] pgpgout 78660
[   84.791695][ T4321] pgfault 23030
[   84.795369][ T4321] pgmajfault 236
[   84.799193][ T4321] inactive_anon 1540096
[   84.803422][ T4321] active_anon 303677440
[   84.807709][ T4321] inactive_file 0
[   84.811405][ T4321] active_file 8192
[   84.815163][ T4321] unevictable 0
[   84.818656][ T4321] hierarchical_memory_limit 314572800
[   84.824045][ T4321] hierarchical_memsw_limit 9223372036854771712
[   84.830250][ T4321] total_cache 303550464
[   84.834491][ T4321] total_rss 892928
[   84.839059][ T4321] total_shmem 303546368
[   84.843636][ T4321] total_mapped_file 0
[   84.847670][ T4321] total_dirty 0
[   84.848035][ T5601] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1794 sclass=netlink_route_socket pid=5601 comm=syz.1.537
[   84.851153][ T4321] total_writeback 2129920
[   84.851165][ T4321] total_workingset_refault_anon 309
[   84.873319][ T4321] total_workingset_refault_file 7070
[   84.878747][ T4321] total_swap 124964864
[   84.882827][ T4321] total_swapcached 2666496
[   84.887274][ T4321] total_pgpgin 153626
[   84.891313][ T4321] total_pgpgout 78660
[   84.895395][ T4321] total_pgfault 23030
[   84.899391][ T4321] total_pgmajfault 236
[   84.903470][ T4321] total_inactive_anon 1540096
[   84.908190][ T4321] total_active_anon 303677440
[   84.912879][ T4321] total_inactive_file 0
[   84.917137][ T4321] total_active_file 8192
[   84.922092][ T4321] total_unevictable 0
[   84.926511][ T4321] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.229,pid=4318,uid=0
[   84.941261][ T4321] Memory cgroup out of memory: Killed process 4318 (syz.3.229) total-vm:90424kB, anon-rss:1372kB, file-rss:46876kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000
[   84.989038][ T5606] netlink: 28 bytes leftover after parsing attributes in process `syz.6.536'.
[   84.998072][ T5606] netlink: 28 bytes leftover after parsing attributes in process `syz.6.536'.
[   85.094519][ T4321] ==================================================================
[   85.102666][ T4321] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64
[   85.112522][ T4321] 
[   85.114862][ T4321] read-write to 0xffffffff86a09a00 of 8 bytes by interrupt on cpu 0:
[   85.122962][ T4321]  tick_do_update_jiffies64+0x113/0x1c0
[   85.128533][ T4321]  tick_nohz_handler+0x8d/0x3d0
[   85.133401][ T4321]  __hrtimer_run_queues+0x20f/0x590
[   85.138627][ T4321]  hrtimer_interrupt+0x269/0x810
[   85.143597][ T4321]  __sysvec_apic_timer_interrupt+0x5f/0x1d0
[   85.149525][ T4321]  sysvec_apic_timer_interrupt+0x6f/0x80
[   85.155182][ T4321]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[   85.161186][ T4321]  shrink_slab+0x493/0x880
[   85.165626][ T4321]  shrink_node+0x6cb/0x2000
[   85.170146][ T4321]  do_try_to_free_pages+0x404/0xcc0
[   85.175370][ T4321]  try_to_free_mem_cgroup_pages+0x222/0x470
[   85.181295][ T4321]  try_charge_memcg+0x37e/0xa10
[   85.186172][ T4321]  __mem_cgroup_charge+0x65/0x150
[   85.191231][ T4321]  shmem_get_folio_gfp+0x47b/0xd60
[   85.196378][ T4321]  shmem_write_begin+0xfc/0x1f0
[   85.201256][ T4321]  generic_perform_write+0x183/0x490
[   85.206589][ T4321]  shmem_file_write_iter+0xc5/0xf0
[   85.211732][ T4321]  __kernel_write_iter+0x319/0x590
[   85.216866][ T4321]  dump_user_range+0xa7d/0xdb0
[   85.221666][ T4321]  elf_core_dump+0x21a2/0x2330
[   85.226458][ T4321]  coredump_write+0xacf/0xdf0
[   85.231159][ T4321]  vfs_coredump+0x26bc/0x3120
[   85.235863][ T4321]  get_signal+0xd7b/0xf60
[   85.240214][ T4321]  arch_do_signal_or_restart+0x96/0x450
[   85.245810][ T4321]  irqentry_exit+0xf7/0x510
[   85.250334][ T4321]  asm_exc_page_fault+0x26/0x30
[   85.255207][ T4321] 
[   85.257542][ T4321] read to 0xffffffff86a09a00 of 8 bytes by task 4321 on cpu 1:
[   85.265102][ T4321]  mem_cgroup_flush_stats_ratelimited+0x29/0x70
[   85.271374][ T4321]  count_shadow_nodes+0x6a/0x230
[   85.276379][ T4321]  do_shrink_slab+0x63/0x670
[   85.280994][ T4321]  shrink_slab+0x538/0x880
[   85.285443][ T4321]  shrink_node+0x6cb/0x2000
[   85.289976][ T4321]  do_try_to_free_pages+0x404/0xcc0
[   85.295339][ T4321]  try_to_free_mem_cgroup_pages+0x222/0x470
[   85.301278][ T4321]  try_charge_memcg+0x37e/0xa10
[   85.306152][ T4321]  __mem_cgroup_charge+0x65/0x150
[   85.311211][ T4321]  shmem_get_folio_gfp+0x47b/0xd60
[   85.316347][ T4321]  shmem_write_begin+0xfc/0x1f0
[   85.321236][ T4321]  generic_perform_write+0x183/0x490
[   85.326572][ T4321]  shmem_file_write_iter+0xc5/0xf0
[   85.331744][ T4321]  __kernel_write_iter+0x319/0x590
[   85.336873][ T4321]  dump_user_range+0xa7d/0xdb0
[   85.341835][ T4321]  elf_core_dump+0x21a2/0x2330
[   85.346624][ T4321]  coredump_write+0xacf/0xdf0
[   85.351325][ T4321]  vfs_coredump+0x26bc/0x3120
[   85.356107][ T4321]  get_signal+0xd7b/0xf60
[   85.360477][ T4321]  arch_do_signal_or_restart+0x96/0x450
[   85.366101][ T4321]  irqentry_exit+0xf7/0x510
[   85.370663][ T4321]  asm_exc_page_fault+0x26/0x30
[   85.375564][ T4321] 
[   85.377902][ T4321] value changed: 0x00000000ffffabd7 -> 0x00000000ffffabd8
[   85.385041][ T4321] 
[   85.387401][ T4321] Reported by Kernel Concurrency Sanitizer on:
[   85.393601][ T4321] CPU: 1 UID: 0 PID: 4321 Comm: syz.3.229 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   85.403262][ T4321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   85.413367][ T4321] ==================================================================
[   85.422213][ T5611] netlink: 4 bytes leftover after parsing attributes in process `syz.0.539'.
[   86.236819][ T4318] syz.3.229 (4318) used greatest stack depth: 7328 bytes left
[   87.680906][ T4332] syz.3.229 (4332) used greatest stack depth: 6184 bytes left