last executing test programs:

8.291286555s ago: executing program 3 (id=2902):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = fsmount(0xffffffffffffffff, 0x1, 0x70)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0xa, 0x7fe}, 0x11, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
r3 = socket$netlink(0x10, 0x3, 0x10)
r4 = socket$inet6(0xa, 0x5, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, 0x0}}], 0x1, 0x1)
r5 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000080)={r6, 0x7, 0x6000, 0x7, 0x7ff, 0xff}, &(0x7f00000000c0)=0x14)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r3, 0x1, 0x8, 0x0, 0x0)
r7 = getpid()
sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x8080)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x3c, r9, 0x1, 0x70bd27, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}]}, 0x3c}, 0x1, 0x600, 0x0, 0x408d0}, 0x30)

7.436376886s ago: executing program 3 (id=2903):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x50d, &(0x7f0000000600)="$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")
socket$kcm(0xa, 0x1, 0x106)
r3 = socket$inet6(0x10, 0x2, 0x4)
sendto$inet6(r3, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0)
madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66)

5.984739458s ago: executing program 1 (id=2910):
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00')
preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/54, 0x36}, {&(0x7f0000000380)=""/73, 0x49}], 0x2, 0x1, 0x3)
ioctl$HIDIOCSREPORT(r0, 0x400c4808, &(0x7f0000000100)={0x3, 0x2, 0x9})
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000b40)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&\x00'], 0x10)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r7, 0x0, 0x19, 0x0, 0x0)
remap_file_pages(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000008, 0x81, 0x40000)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20)
sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x4003e80, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0)

5.981959888s ago: executing program 3 (id=2911):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = socket(0x2, 0x80805, 0x0)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0)
select(0x20000088, &(0x7f0000000080), 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x300}, &(0x7f0000000200)={0x0, 0x2710})
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x20, 0x80, 0x0, 0x0, {{0x12, 0x4, 0x2, 0x2a, 0x48, 0x6a, 0x0, 0x0, 0x4, 0x0, @multicast1, @broadcast, {[@generic={0x7, 0x2}, @noop, @rr={0x7, 0x7, 0xf2, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @noop, @end, @ra={0x94, 0x4}, @lsrr={0x83, 0x23, 0x56, [@rand_addr=0x64010101, @loopback, @loopback, @multicast1, @multicast1, @multicast1, @dev={0xac, 0x14, 0x14, 0x1d}, @empty]}]}}}}})
r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4)
unshare(0x6a040000)

5.949535227s ago: executing program 0 (id=2912):
set_mempolicy(0x1, &(0x7f0000000e80)=0x1ff, 0x7582)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
recvfrom$x25(0xffffffffffffffff, &(0x7f0000000000)=""/45, 0x2d, 0x12000, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1)
fspick(0xffffffffffffffff, 0x0, 0xf0961890b4faa8d0)
setuid(0xee00)
r0 = socket$netlink(0x10, 0x3, 0x4)
write(r0, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x0)
set_mempolicy(0x4000, &(0x7f0000000200)=0x7, 0x2)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000ffffffff180800002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000400008500000004000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
syz_clone(0xc30e3400, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0)

5.74287217s ago: executing program 2 (id=2914):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0xa, [@var={0x7, 0x0, 0x0, 0xe, 0x1, 0x1}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x30, 0x2e, 0x2e, 0x1e]}}, 0x0, 0x32}, 0x28)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xb, 0x9}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x4005}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@usrquota}]}, 0x1, 0x50f, &(0x7f0000000dc0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42041, 0x0)
open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006001420000000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x20000004)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10)
bind$tipc(r1, 0x0, 0x0)
recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000140)=""/27, 0x1b}, {0x0}, {&(0x7f00000002c0)=""/191, 0xbf}, {&(0x7f0000000380)=""/4096, 0x1000}], 0x4, &(0x7f00000013c0)=""/144, 0x90}, 0x3)

4.963815084s ago: executing program 1 (id=2916):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000580)}], 0x1}, 0x4048055)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="b40000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c0002800500010000000000440002802c00018014000300fe8000200000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000600034000040000080007400000040018000680140004002001000000"], 0xb4}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000070000000060a010400000000000000000100000008000b40000000000900010073797a30000000004800048020000180070001007274000014000280080001400000000d080002400000000124000180090001006d657461000000001400028008000140000000100800024000000005140000001100"], 0xf8}}, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r6)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x14)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, r6, 0x6, '\x00', r7, 0xffffffffffffffff, 0x1, 0x2, 0x4}, 0x50)
prlimit64(0x0, 0x7, 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r3, 0x4, 0x0, @void}, 0x10)

4.910685773s ago: executing program 4 (id=2917):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x4080)
r0 = syz_clone(0x600, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$setsig(0x4203, r0, 0x7, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x2, 0xf, 0x8, 0x41}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0xffffffffffffffd4, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r1}, 0x38)
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_pidfd_open(r2, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r3, &(0x7f0000000080), &(0x7f0000001540)=""/155, 0x20}, 0x6a)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
sendmsg$key(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f00000002c0)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

4.8366912s ago: executing program 4 (id=2918):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = fsmount(0xffffffffffffffff, 0x1, 0x70)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0xa, 0x7fe}, 0x11, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
r3 = socket$netlink(0x10, 0x3, 0x10)
r4 = socket$inet6(0xa, 0x5, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, 0x0}}], 0x1, 0x1)
r5 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000080)={r6, 0x7, 0x6000, 0x7, 0x7ff, 0xff}, &(0x7f00000000c0)=0x14)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r3, 0x1, 0x8, 0x0, 0x0)
r7 = getpid()
sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x8080)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x3c, r9, 0x1, 0x70bd27, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}]}, 0x3c}, 0x1, 0x600, 0x0, 0x408d0}, 0x30)

4.83538668s ago: executing program 3 (id=2928):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200c093, 0x2, @perf_bp={0x0, 0x8}, 0x24, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000000206efffffffffffffff0000070000000c000780080012400000ffff0500010006000000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004000)
socket$nl_route(0x10, 0x3, 0x0)
unshare(0x6a040000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0)
unshare(0x48060080)

4.702456186s ago: executing program 1 (id=2919):
syz_open_dev$loop(&(0x7f0000000440), 0x0, 0x2dc2)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x109111, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0xa}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x46, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x30040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xe}, 0x6037, 0x44005, 0x4, 0x8, 0x80000000, 0x1, 0x8, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000400)={&(0x7f0000000000)=""/57, 0x120c000, 0x800, 0x0, 0x1}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071117000000000008510000002000000850000000000000095000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x7, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94)
socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800), 0x4)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x6ac03)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x22, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xaf)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
ptrace$cont(0x21, r2, 0x80000001, 0x4)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="25000000031401002abd7000fedbdf25090002"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)

4.657682984s ago: executing program 2 (id=2920):
socket$kcm(0x2, 0x5, 0x84)
socket$packet(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
modify_ldt$write(0x1, &(0x7f00000000c0), 0x10)
modify_ldt$read(0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
r2 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r2, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5865}, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = dup(r4)
ioctl$TIOCL_SETSEL(r5, 0x541c, 0x0)

4.579604732s ago: executing program 0 (id=2921):
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, 0x1412, 0x0, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x48}}, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080))
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
set_mempolicy(0x4005, &(0x7f0000000080)=0x10000000004, 0xd)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c)
recvfrom$inet6(r3, &(0x7f0000000380)=""/86, 0x56, 0x30022, 0x0, 0x0)
r4 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1, 0x1000000000000}}], 0x48}, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb601288763"], 0xffdd)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r5, 0xffffffffffffffff, 0x0)

4.558920911s ago: executing program 2 (id=2922):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYRES16, @ANYRES8, @ANYRESOCT, @ANYRESOCT, @ANYRES8], 0xc0}}, 0x800)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a2, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x4, &(0x7f00000002c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7f}}]}, 0x1, 0x4c0, &(0x7f0000000f00)="$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")
write$cgroup_devices(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000002480)=0x3)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000540)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0x10)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0)

4.316781213s ago: executing program 1 (id=2923):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x45e, &(0x7f0000000b40)={[{@data_err_ignore}, {@min_batch_time={'min_batch_time', 0x3d, 0x80000000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6c}}, {@lazytime}, {@grpquota}, {@nodiscard}]}, 0x3, 0x453, &(0x7f0000000f80)="$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")
sched_setscheduler(0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
mknodat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x100, 0x82b)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0)
fcntl$notify(r5, 0x402, 0x8)
renameat2(r5, &(0x7f0000000440)='./file0\x00', r5, &(0x7f0000000000)='./file7\x00', 0x4)

4.21894517s ago: executing program 0 (id=2924):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc)
socket(0x2, 0x80805, 0x0)
fallocate(r1, 0x28, 0x8, 0xffffffffffffffff)
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000300)='./file2\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1, 0x29b, &(0x7f0000000ac0)="$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")
pwrite64(0xffffffffffffffff, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
rename(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140)='./file2\x00')

3.61813289s ago: executing program 2 (id=2925):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200c093, 0x2, @perf_bp={0x0, 0x8}, 0x24, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

3.03459992s ago: executing program 4 (id=2926):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200c093, 0x2, @perf_bp={0x0, 0x8}, 0x24, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)

2.811611653s ago: executing program 4 (id=2927):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x200008, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0x3, 0xffffffffffffffff, 0x1)
syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f00000005c0)=ANY=[@ANYBLOB='utf8,uid=', @ANYRESHEX=0x0, @ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00\x00al,nocompress,showassoc,map=acorn,map=normal,block=0x0000000000000800,utf8,map=off,dmode=0x0000000000009fbc,iocharset=default,fowner<', @ANYRESDEC=0x0, @ANYRES32], 0x2, 0xa2f, &(0x7f0000000ec0)="$eJzs3c9vHGf5APBn1nbiuFWStvn2W6K2nqQkdVvjrG2aYPUAjnftbLG9yHakRBya0jgoiqHQgtRWSKQS4oCoQAJx4VZx4lSpF3pBvcENLnBAQv0XKk7hZDSzu/bau+u1Xcd208/H2t358cz7PvNj581OducNPl9WT2wYW13NH7scv/rHfciYQ+xy6ZP3P3gve7x7N45ET7yY/CmiPyLSiN6IeCKib6q0UJ3rUtCdiBsR8XFEEhFHo/a6LTci+VU8vD7+cSS/z+rt6Mh2S6abVb7QDvr4AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAwyiZKhWLo8mRqMxfvZbWRKQtpkoL1SRWV1vnNJap+Sjv9Tv56BcPdak3Iske0d/f6Or7iVPrsx+PiPRsPFkbezLvkDz6452HHj/50mO9hcbynbL5TI52KLYnWjbMm2+/c+fVlZXlN3ZYRf9ucztkZsrzlcVqZW5yppxWFqvpxMWLxQtXphfT6cpsefH64lJ5Lp1aKE8uVRfSoann0tGJifG0PHK9enV+pjQyW25MvPSVsWLxYvryyLfKkwuL1fkLL48sTl2pzM5W5mfymGx2FnMpOxC/WVlKl8qTc2l66/bK8vimnFp2UxY02m1NsqCxbkFjxbGx0dGxsdF3671nr024+OLEi5eKxd7iJtEScZ8OWg6XY5138/04jcOuFGrtf8RsVGI+rsa1SNv+TUUpFqIacx3m1zXa/3MXylvW29z+11v53qbZp7Ons/F0fbS/Q/vfIZf9+3sz3o534k68GiuxEsvxxoFn1PqX7ZEO84591rJnohzzUYnFqEYl5mIyn5LWp6QxERfjYhTjlbgSg7EYaUxHJWajHItxPRZjKcr5ETUVC1GOyViKaixEGkMxFc9FGqMxERMxHmmUYySuRzWuxnzMRCkm81Juxe18u49vkeNa0Oh2gsa2CGppzHfc/pdb/w3JF8zen8Rhl1br7f+R7qFDU/uREAAAALDnvvTXOH7q0b/8OyKJp/Lr8tOV2XLxoNMCAAAA9lASScST2VNfNvpUJD7/AwAAwIMmyX9jl0TEQAzWhhq/hHIRAAAAAB4Q+e16no5kcH2Cz/8AAADwgFm7x37tSsDaPXav9TSmdr0LfzLcuP1verP2erMeUS9iYLoyWx6Zqs6+NBrn87sM5L80aCmtJyLpy39+8HycqUWdGYi72evAeolZnf1Z1OjIS6PxfJytr8jQM9nLM0NtIsdqkc/WIp9tjuyJDZHjWSQAPOjObtEe1+6x3739fz6GaxHDp/Mmv/d0mza4qGUFgMNirY+d/9a7NGvT/tcjnu7U/n91i8//WcSjcWuw9pWCkXgtXo+VuBnDUf/GwWC7Uhu9EdS+hjDcdDUgt+lqwED9Kwt/v1SI4ZbrAf1r69ocuxxjMVy/InCsPr9+7SBZi00aOYzXAnruww4AgANwdst2eHvt/3CXz/8DvlIIAIfKWg/22x3IFtp2cG3goNcRANhIKw0AAAAAAAAAAAAAAAAAAAAAAAAAAAB7b1s38P/b+YiVleWInXYWsIOBk5un9O8kw60HCnF/cm4z0Hv/q9hqoGfnvTNsc+AfXWO+HjsuOdvHB7OhDHQbOOATEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPsiiehpN71wNH8pRsSF/c7pfrp70AnslXR3iyX34l68Fcf3Oh0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAgC+6+v3/C1F7fag2KXoLEeci4kZEfPugc9xL9w46gQPzvfy56f7/hYi+WE2it7bbI+mbKi1U57LdnxzN5n/y/gfvZY/uZbf2qpB3H1HY1LlEvYamKX0bl3okX2qgtPzmnR+9/oO0dDk/MC8vTc+W5mYWvrEe+HjyYa0LhOZuEBr5/uTcn3/dNPlIvfIPszVtb3O903m9pdZ6/7/d0h3q3YbbK8tjWU1L5WtLP/7+7beaZj0aZyKeGYoY2ljTd7NHh5rObN6eGyWfJj9Pjsfv4ka+/7Otkawm2S46ka//sVu3V5ZHXnt95eZaTj/dkNPJGIyImxH9289pMD+ftJUfdYW+rNZiHpQ9nepS3paaShztsF0fyQ+ZgR2tQ9p5HXL5du94cDUyGm+b0W9++Fic3/GePr/1nm4v+TT5V3Il/hk/a+r/o5Dt/3PR9t3Zpog8sulIaZ63YQsUapH5mo81z3hlc5lbbDj23C/jO/G1tf1faDr/1/fV/pyPmmps/76I2Pn74g8nWlqUdXmLdGpTi1Q/+7RdoH8tz1O1qA55/l+8ENF7ekdnlBe6nFH2/v1fr+/uUPwn7ur/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOPySiJ520wsR5yLiZEScyMbTiNXNMXd3UV9hINlNmntmNzkfZklv26lNK7pxjZN7cS/eiuP7kBoAAAAAAAAA++By6ZP3P3gve+T/H98TXy7U56QRvRFxMvlt31RpoTrXpaC+iBuN/9Lv31kON7Knh9fHP87Gnuiy0MF+fQAAPtf+FwAA//822GxX")
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfffffdff, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x43201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0xd}, 0x640, 0x5, 0x0, 0x8, 0x2, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
accept(0xffffffffffffffff, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
kexec_load(0xfffffffffffffffc, 0x1, &(0x7f0000000900)=[{0x0, 0x0, 0x200400000}], 0x0)

2.71401136s ago: executing program 1 (id=2938):
socket$netlink(0x10, 0x3, 0x4)
syz_io_uring_setup(0x132a, 0x0, 0x0, 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
fsopen(0x0, 0x0)
socket$inet6(0xa, 0x2, 0x0)
socket(0x10, 0x803, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000004140100000000000000000008000300000000000800", @ANYRES64=r0], 0x20}, 0x1, 0x0, 0x0, 0x4008055}, 0x814)

2.71349417s ago: executing program 2 (id=2929):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200c093, 0x2, @perf_bp={0x0, 0x8}, 0x24, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000000206efffffffffffffff0000070000000c000780080012400000ffff0500010006000000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004000)
socket$nl_route(0x10, 0x3, 0x0)
unshare(0x6a040000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0)

2.259165815s ago: executing program 0 (id=2930):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200c093, 0x2, @perf_bp={0x0, 0x8}, 0x24, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)

2.152285331s ago: executing program 1 (id=2931):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = socket(0x2, 0x80805, 0x0)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0)
select(0x20000088, &(0x7f0000000080), 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x300}, &(0x7f0000000200)={0x0, 0x2710})
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x20, 0x80, 0x0, 0x0, {{0x12, 0x4, 0x2, 0x2a, 0x48, 0x6a, 0x0, 0x0, 0x4, 0x0, @multicast1, @broadcast, {[@generic={0x7, 0x2}, @noop, @rr={0x7, 0x7, 0xf2, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @noop, @end, @ra={0x94, 0x4}, @lsrr={0x83, 0x23, 0x56, [@rand_addr=0x64010101, @loopback, @loopback, @multicast1, @multicast1, @multicast1, @dev={0xac, 0x14, 0x14, 0x1d}, @empty]}]}}}}})
r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4)
unshare(0x6a040000)

2.108099039s ago: executing program 3 (id=2932):
clock_gettime(0x6, &(0x7f0000000000)={<r0=>0x0, <r1=>0x0})
clock_settime(0x0, &(0x7f0000000040)={r0, r1+10000000})
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000205f"], 0x0, 0x34}, 0x20)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={0x14, 0x1, 0x2, 0x3, 0x0, 0x0, {0xa, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1800}}, &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94)

1.967632095s ago: executing program 0 (id=2933):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x58, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x4, 0x300}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}, [@TCA_NETEM_DELAY_DIST={0x6, 0x2, "9f2b"}, @TCA_NETEM_LOSS={0xfffffffffffffe4d}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840)
syz_emit_ethernet(0x6e, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x38, 0x3a, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9379, {0x6, 0x6, ':yE', 0x2, 0x3a, 0x0, @private2={0xfc, 0x2, '\x00', 0x5}, @private1, [], "8029335287b7a081"}}}}}}}, 0x0)
open(0x0, 0x66842, 0x21)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x25, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x3, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff)
sigaltstack(&(0x7f0000000480)={&(0x7f0000004000)=""/4126, 0x80000001, 0x101e}, 0x0)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
recvmmsg(r0, &(0x7f0000000ac0), 0x40000000000007f, 0x2000, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)

392.942763ms ago: executing program 4 (id=2934):
r0 = socket$inet(0xa, 0x801, 0x84)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000380)={'filter\x00', 0x7, 0x4, 0x408, 0x100, 0x100, 0x100, 0x320, 0x320, 0x320, 0x4, &(0x7f0000000000), {[{{@arp={@private=0xa010101, @local, 0xff, 0x0, 0x10, 0x10, {@mac=@multicast, {[0x0, 0xff, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@remote, {[0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}}, 0x5, 0x3913, 0x6, 0x9f, 0x3000, 0xfffc, 'veth1_to_bridge\x00', 'pimreg0\x00', {}, {0xff}, 0x0, 0x10}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x37, 0x7, {0x9}}}}, {{@arp={@empty, @private=0xa010100, 0xffffffff, 0x0, 0x7, 0x2, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff, 0xff]}}, 0xfffb, 0x9, 0x199, 0x8, 0x5, 0x3, 'veth0_to_bond\x00', 'gre0\x00', {}, {0xff}, 0x0, 0x80}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @mac=@local, @initdev={0xac, 0x1e, 0xa7, 0x0}, @private=0xa010102, 0xf}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @mac, @remote, @broadcast, 0xf, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x458)
connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000002900), 0x0, 0x0, 0x0, 0x200080d4}}], 0x1, 0x10)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x4000)
sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, r2, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x5}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'ip6_vti0\x00'}, @mon_options]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x40000)
bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x18)
connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e20}, 0x18)
r5 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x24018880)

345.622001ms ago: executing program 3 (id=2935):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000180)={[{@nodioread_nolock}, {@debug}, {@journal_checksum}]}, 0x0, 0x5fd, &(0x7f00000006c0)="$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")
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280)={[{@errors_remount}, {@usrquota}, {@minixdf}, {@nombcache}]}, 0x1, 0x51a, &(0x7f0000000f00)="$eJzs3c9vI1cdAPCvnThxfnSTlh4AQbu0hQWt1km8bVT1AOWIUCVEjyBtQ+KNothxFDulCXtIz1yRqMSJHvkDOPfEgRsXBDcuywGJHxFog8TBaMaTrDdrb6xNYqfx5yON5r2ZWX+/L868t36O/QIYWTcj4iAiJiLig4iYy47nsi3ebW/JdY8OH6weHT5YzUWr9f4/c+n55Fh0/JvETPaYxYj44acRP8k9Hbext7+5Uq1WdrL6QrO2vdDY27+zUVtZr6xXtsrl5aXlxbfvvlW+sLa+WpvISl99+IeDb/0sSWs2O9LZjovUbnrhJE5iPCK+fxnBhmAsa8/EsBPhueQj4qWIeC29/+diLH02AYDrrNWai9ZcZx0AuO7y6RxYLl/K5gJmI58vldpzeC/HdL5abzRv36/vbq2158rmo5C/v1GtLGZzhfNRyCX1pbT8uF4+Vb8bES9GxC8mp9J6abVeXRvmf3wAYITNnBr//zPZHv8BgGuuOOwEAICB6zH+Hww6DwBgcLz+B4DRY/wHgNFTTL/DYWrYaQAAA+T1PwCMHuM/AIyUH7z3XrK1jrLvv177cG93s/7hnbVKY7NU210trdZ3tkvr9fp6+p09tbMer1qvby+9GbsfzX97u9FcaOzt36vVd7ea99Lv9b5XKaRX+WQBAAzTi69+9udcMiK/M5Vu0bGWQ2GomQGXLT/sBIChGetRBq4/q33B6DrHa3zTA3BNdFmi9wnF6PIBoVar1bq8lIBLdutL5v9hVHXM//srYBgx5vxhdJn/h9HVauX6XfM/+r0QALjazPEDPd7/fynb/yZ7c+DHa6ev+OQyswIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICr7Xj931K2Fvhs5POlUsQLETEfhdz9jWplMSJuRMSfJguTSX1pyDkDAOeV/1suW//r1twbs0+cemXmpDgRET/91fu//Gil2dz5Y8RE7l+Tx8ebn2THy4PPHgA42/E4ne47Xsg/OnywerwNMp+/fzciiu34R4cTcXQSfzzG030xChEx/e9cVm/LdcxdnMfBxxHxxW7tz8VsOgfSXvn0dPwk9gsDjZ9/In4+PdfeJz+LL1xALjBqPkv6n3e73X/5uJnuu9//xbSHOr+s/0seavUo7QMfxz/u/8Z69H83+43x5u++1y5NPX3u44gvj0ccxz7q6H+O4+d6xH+jz/h/+corr/U61/p1xK3oHr8z1kKztr3Q2Nu/s1FbWa+sV7bK5eWl5cW3775VXkjnqBd6jwb/eOf2jV7nkvZP94hfPKP9X++z/Z/+74Mffe0Z8b/5erf4+Xj5GfGTMfEbfcZfmf5tsde5JP5aj/af9fzf7jP+w7/uP7VsOAAwPI29/c2VarWy86zCjaOIs675XBaiv4t/n/2wrkTOI11InoUrkEbXwnc6jszEJcaa6HEz/vz19q/pZETnL3ar9VyxevUYFzHrBlwFJzd9RPx32MkAAAAAAAAAAAAAAABdDeLTUcNuIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANfX/wMAAP//jMfJaQ==")
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c)
bind$inet6(r1, 0x0, 0x0)
sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r2 = openat(r0, 0x0, 0x602800, 0x61)
r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
write(r3, 0x0, 0x0)
sendfile(r3, r2, 0x0, 0x3ffff)
msgget$private(0x0, 0x790)
setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f00000000c0)=0x1, 0x4)
sendfile(r3, r2, 0x0, 0x7ffff000)

285.410279ms ago: executing program 2 (id=2936):
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0x28e, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1a000000}, 0x48)
r0 = socket(0x10, 0x803, 0x0)
getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
r1 = socket$packet(0x2d, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r2=>0x0})
syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @random="8a0a63cdec59", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @remote}}}}, 0x0)
sendto$packet(r1, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14)
r3 = socket$netlink(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x100, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r3)
sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x24000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0x124, r6, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x342a}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xffffffff}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffe33}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x19, 0x31}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xd, 0x21}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x4}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x80000001}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_vlan\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffff}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0xac3cad7acb74c65b}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x90}, 0x20040000)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e402010902"], 0x0)
syz_open_procfs(0x0, 0x0)
getpeername$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000180)=0x10)
syz_usb_connect$uac1(0x1, 0xdb, &(0x7f00000004c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc9, 0x3, 0x1, 0x5, 0x20, 0xd2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x342b, 0x39}, [@processing_unit={0x7, 0x24, 0x7, 0x3, 0x1, 0xc}, @feature_unit={0xb, 0x24, 0x6, 0x2, 0x3, 0x2, [0x0, 0x8], 0x60}, @mixer_unit={0x5, 0x24, 0x4, 0x2, 0x1}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x1ff, 0x1, 0x4, 0xce}, @selector_unit={0x5, 0x24, 0x5, 0x6, 0xff}, @selector_unit={0xa, 0x24, 0x5, 0x6, 0x10, "a28972f5e3"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x4, 0x7, 0x8, 'wO'}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x8, 0x10, 0xf9, {0x7, 0x25, 0x1, 0xc, 0x0, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0xe6, 0x9, 0x2, "3341d8228df650"}, @as_header={0x7, 0x24, 0x1, 0x0, 0x7, 0x1002}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x2, 0x7, 0xd, "dcc2d1b1331f036c"}, @as_header={0x7, 0x24, 0x1, 0x1, 0x10, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x9, 0xc5, 0x6, {0x7, 0x25, 0x1, 0xc, 0x7, 0x8}}}}}}}}]}}, &(0x7f00000006c0)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x310, 0x6, 0x3, 0xfa, 0xff, 0x80}, 0x103, &(0x7f0000000740)={0x5, 0xf, 0x103, 0x2, [@generic={0x6f, 0x10, 0xa, "83b726df289295e59e5ba65b943e86d9c0d9973c693364891ab566cd52d5aabe1d1705c7101b2f97cd7bb1a1b2673baa14cf9e6019199f8cee5491bbef4180bf124f0b460144d3380da4212726ab6d1160de9d8039f5b76124c8df6d30a95e02fad181abaf3454c9e913ef72"}, @generic={0x8f, 0x10, 0x2, "b6c0e23e01f3c07b7946805225d89bc2ed0431c2a1ea51152298fa4bce498abdff405fc3e382f702c94832c93c35a85dc6a527ad35f8b48620573e417479a71e71c55f2ecbe5b0829fd72d6d80179b907230c59f4a1b8bdd5c1b892c752ba01e260c713d5aa320a71543b6ff4aa4bcc8a495d674fe75339cfb1fd2b8dcb2cee132bbbee1788793304e79fe60"}]}, 0x1, [{0x72, &(0x7f0000000640)=@string={0x72, 0x3, "a9a5b18ac25a06718aeb3a61e1eb0afe391d8a1ac2be6f93dc26bac202e38f3752774804529df048efde183f9f2843957bf10d88c093c9026b0af4aaf73a4f0888186be93fe5abf77d747dc4dc842e3d7595abb576ca8c640eb3160ec034ea880fb91c53e5fcb98f2de23dd86284d419"}}]})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r5, 0x0, 0x0}, 0x10)

254.843998ms ago: executing program 4 (id=2937):
syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x6}}]}, 0x1, 0x50f, &(0x7f0000000dc0)="$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")
socket$packet(0x11, 0x2, 0x300)
mount$tmpfs(0x0, &(0x7f0000001880)='.\x00', &(0x7f00000018c0), 0x1, 0x0)
io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000)
mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8000, 0x0, 0x800, 0x0)
syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000140)={[{@init_itable_val={'init_itable', 0x3d, 0x101}}, {@stripe={'stripe', 0x3d, 0x61}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@minixdf}, {@nodiscard}, {@nomblk_io_submit}, {@acl}, {@nojournal_checksum}, {@resuid}]}, 0x1, 0xbb4, &(0x7f00000017c0)="$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")
r0 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8000c61)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
sendfile(r2, r2, 0x0, 0xe3aa6ea)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3)
socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, &(0x7f0000000200))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x100, 0x62)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0x40086610, &(0x7f00000004c0)={@desc={0x1, 0x0, @desc1}})
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x145843)

0s ago: executing program 0 (id=2939):
r0 = socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/mnt\x00')
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x80000001, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, &(0x7f00000005c0), 0x10)
recvmmsg(r4, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0x1000}], 0x1}, 0x8000}], 0x3fffffffffffdfc, 0x10002, 0x0)
sendmsg$can_bcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0)
setsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, &(0x7f0000000180)=0x2, 0x4)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x989680}}, 0x0)
add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r3)
add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
socket(0x80000000000000a, 0x2, 0x0)
socket(0x80000000000000a, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef409", 0x63}], 0x1}, 0x48002)

kernel console output (not intermixed with test programs):

:5385): avc:  denied  { read } for  pid=9678 comm="syz.4.1927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  267.404149][ T9669] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  267.611887][ T7432] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  267.624339][ T7432] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  267.639380][ T7432] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  267.666578][ T7432] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  267.723538][   T28] audit: type=1400 audit(1776389492.675:5386): avc:  denied  { read write } for  pid=9690 comm="syz.1.1929" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  267.782244][   T28] audit: type=1400 audit(1776389492.705:5387): avc:  denied  { open } for  pid=9690 comm="syz.1.1929" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  268.185668][ T9698] loop0: detected capacity change from 0 to 512
[  268.268616][ T9698] EXT4-fs: Ignoring removed i_version option
[  268.354260][ T9698] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  268.746698][   T28] audit: type=1326 audit(1776389493.685:5388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9710 comm="syz.1.1934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f566f1ac819 code=0x7ffc0000
[  268.825469][   T28] audit: type=1326 audit(1776389493.685:5389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9710 comm="syz.1.1934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f566f1ac819 code=0x7ffc0000
[  268.853842][   T28] audit: type=1326 audit(1776389493.685:5390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9710 comm="syz.1.1934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f566f1ac819 code=0x7ffc0000
[  268.898717][   T28] audit: type=1326 audit(1776389493.695:5391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9710 comm="syz.1.1934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f566f1ac819 code=0x7ffc0000
[  268.922978][   T28] audit: type=1326 audit(1776389493.695:5392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9710 comm="syz.1.1934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f566f1ac819 code=0x7ffc0000
[  268.947262][   T28] audit: type=1326 audit(1776389493.695:5393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9710 comm="syz.1.1934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f566f1ac819 code=0x7ffc0000
[  268.972057][   T28] audit: type=1326 audit(1776389493.695:5394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9710 comm="syz.1.1934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f566f1ac819 code=0x7ffc0000
[  269.006373][ T9716] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1936'.
[  269.226656][ T9719] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9719 comm=syz.4.1936
[  269.275343][ T9698] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.1931: invalid block
[  269.357114][ T9698] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  269.367799][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  269.383736][    C0] EXT4-fs (loop0): initial error at time 1776389494: ext4_get_branch:178: inode 11: block 4294967295
[  269.394684][    C0] EXT4-fs (loop0): last error at time 1776389494: ext4_get_branch:178: inode 11: block 4294967295
[  269.421000][ T9698] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.1931: invalid indirect mapped block 4294967295 (level 1)
[  269.456790][ T9698] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  269.457037][ T9698] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.1931: invalid indirect mapped block 4294967295 (level 1)
[  269.510611][ T9698] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  269.554264][ T9698] EXT4-fs (loop0): 2 truncates cleaned up
[  269.618598][ T9698] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  270.867668][ T9753] loop1: detected capacity change from 0 to 8192
[  270.892911][ T9756] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1946'.
[  271.076100][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  271.129223][ T9764] syzkaller0: entered promiscuous mode
[  271.146953][ T9764] syzkaller0: entered allmulticast mode
[  271.157213][ T9764] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 65487
[  275.444802][ T9810] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1964'.
[  275.529471][ T9816] loop1: detected capacity change from 0 to 128
[  275.634942][ T9816] bio_check_eod: 22 callbacks suppressed
[  275.634967][ T9816] syz.1.1965: attempt to access beyond end of device
[  275.634967][ T9816] loop1: rw=2049, sector=153, nr_sectors = 8 limit=128
[  275.655359][ T9816] syz.1.1965: attempt to access beyond end of device
[  275.655359][ T9816] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128
[  275.669840][ T9816] syz.1.1965: attempt to access beyond end of device
[  275.669840][ T9816] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128
[  275.683781][ T9816] syz.1.1965: attempt to access beyond end of device
[  275.683781][ T9816] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128
[  275.698924][ T9816] syz.1.1965: attempt to access beyond end of device
[  275.698924][ T9816] loop1: rw=2049, sector=217, nr_sectors = 8 limit=128
[  275.725490][ T9816] syz.1.1965: attempt to access beyond end of device
[  275.725490][ T9816] loop1: rw=2049, sector=233, nr_sectors = 8 limit=128
[  275.740055][ T9816] syz.1.1965: attempt to access beyond end of device
[  275.740055][ T9816] loop1: rw=2049, sector=249, nr_sectors = 8 limit=128
[  275.779735][ T9816] syz.1.1965: attempt to access beyond end of device
[  275.779735][ T9816] loop1: rw=2049, sector=265, nr_sectors = 8 limit=128
[  275.809295][ T9816] syz.1.1965: attempt to access beyond end of device
[  275.809295][ T9816] loop1: rw=2049, sector=281, nr_sectors = 8 limit=128
[  275.880539][ T9816] syz.1.1965: attempt to access beyond end of device
[  275.880539][ T9816] loop1: rw=2049, sector=297, nr_sectors = 8 limit=128
[  277.621129][ T9861] netlink: 'syz.0.1980': attribute type 10 has an invalid length.
[  277.679545][ T9861] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1980'.
[  277.818939][ T9861] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  277.861536][ T9866] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1981'.
[  277.919445][ T9861] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  277.965245][ T9861] hsr0: entered promiscuous mode
[  278.012314][ T9861] bridge0: port 4(hsr0) entered blocking state
[  278.023254][ T9861] bridge0: port 4(hsr0) entered disabled state
[  278.031289][ T9861] hsr0: entered allmulticast mode
[  278.037235][ T9861] hsr_slave_0: entered allmulticast mode
[  278.047133][ T9861] hsr_slave_1: entered allmulticast mode
[  278.245217][ T9872] loop1: detected capacity change from 0 to 128
[  278.344253][ T9870] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1983'.
[  280.202472][ T9887] loop1: detected capacity change from 0 to 1024
[  280.222565][ T9884] loop0: detected capacity change from 0 to 1024
[  280.240605][ T9887] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  280.294087][ T9884] EXT4-fs (loop0): filesystem too large to mount safely on this system
[  280.313405][ T9887] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.1987: Invalid block bitmap block 0 in block_group 0
[  280.385116][ T9887] loop1: lost filesystem error report for type 5 error -117
[  280.388633][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  280.402616][    C1] EXT4-fs (loop1): initial error at time 280: ext4_read_block_bitmap_nowait:483
[  280.411717][    C1] EXT4-fs (loop1): last error at time 280: ext4_read_block_bitmap_nowait:483
[  280.425759][ T9887] __quota_error: 27 callbacks suppressed
[  280.425776][ T9887] Quota error (device loop1): write_blk: dquota write failed
[  280.469443][ T9887] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  280.484701][ T9887] EXT4-fs error (device loop1): ext4_acquire_dquot:7028: comm syz.1.1987: Failed to acquire dquot type 0
[  280.518641][ T9887] loop1: lost filesystem error report for type 5 error -117
[  280.518840][ T9887] EXT4-fs error (device loop1): ext4_free_blocks:6724: comm syz.1.1987: Freeing blocks not in datazone - block = 0, count = 4096
[  280.544262][ T9887] loop1: lost filesystem error report for type 5 error -117
[  280.544594][ T9887] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.1987: Invalid inode bitmap blk 0 in block_group 0
[  280.566857][ T8395] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-7
[  280.576470][ T8395] EXT4-fs error (device loop1): ext4_release_dquot:7064: comm kworker/u8:19: Failed to release dquot type 0
[  280.589334][ T8395] loop1: lost filesystem error report for type 5 error -117
[  280.589474][ T9887] loop1: lost filesystem error report for type 5 error -117
[  280.597221][ T9887] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem
[  280.614445][ T9887] loop1: lost filesystem error report for type 5 error -117
[  280.636334][ T9887] EXT4-fs (loop1): 1 orphan inode deleted
[  280.667682][ T9887] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  280.795438][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  281.040748][ T9907] loop1: detected capacity change from 0 to 512
[  281.047637][ T9907] EXT4-fs: Ignoring removed i_version option
[  281.146884][ T9907] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  281.191654][ T9907] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.1993: invalid block
[  281.221117][ T9907] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  281.225228][ T9907] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1993: invalid indirect mapped block 4294967295 (level 1)
[  281.234531][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  281.234553][    C1] EXT4-fs (loop1): initial error at time 281: ext4_get_branch:178: inode 11: block 4294967295
[  281.234582][    C1] EXT4-fs (loop1): last error at time 281: ext4_get_branch:178: inode 11: block 4294967295
[  281.399283][ T9907] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  281.399507][ T9907] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1993: invalid indirect mapped block 4294967295 (level 1)
[  281.457844][ T9907] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  281.458212][ T9907] EXT4-fs (loop1): 2 truncates cleaned up
[  281.515851][ T9907] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  281.968431][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  282.161335][ T9919] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1998'.
[  282.177324][ T9921] Invalid ELF header magic: != ELF
[  282.188713][   T28] audit: type=1400 audit(282.143:5422): avc:  denied  { module_load } for  pid=9914 comm="syz.1.1997" path=2F6D656D66643AFD0F6D33232F202864656C6574656429 dev="hugetlbfs" ino=30215 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=system permissive=1
[  282.219247][ T9919] syz_tun: left allmulticast mode
[  282.224412][ T9919] syz_tun: left promiscuous mode
[  282.230519][ T9919] bridge0: port 4(syz_tun) entered disabled state
[  282.239822][ T9919] gretap0: left allmulticast mode
[  282.244943][ T9919] gretap0: left promiscuous mode
[  282.250176][ T9919] bridge0: port 3(gretap0) entered disabled state
[  282.262672][ T9919] bridge_slave_1: left allmulticast mode
[  282.276199][ T9919] bridge_slave_1: left promiscuous mode
[  282.298816][ T9919] bridge0: port 2(bridge_slave_1) entered disabled state
[  282.339960][ T9926] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  282.368186][ T9919] bridge_slave_0: left allmulticast mode
[  282.399182][ T9919] bridge_slave_0: left promiscuous mode
[  282.438937][ T9919] bridge0: port 1(bridge_slave_0) entered disabled state
[  282.483583][ T9919] bond0: (slave bridge0): Releasing backup interface
[  282.982069][   T28] audit: type=1326 audit(282.953:5423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9939 comm="syz.1.2005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f566f1ac819 code=0x7ffc0000
[  283.038644][   T28] audit: type=1326 audit(282.953:5424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9939 comm="syz.1.2005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f566f1ac819 code=0x7ffc0000
[  283.084532][ T9948] audit: audit_backlog=65 > audit_backlog_limit=64
[  283.107869][   T28] audit: type=1326 audit(282.953:5425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9939 comm="syz.1.2005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f566f1ac819 code=0x7ffc0000
[  283.117861][ T9948] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64
[  283.160775][   T28] audit: type=1326 audit(282.953:5426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9939 comm="syz.1.2005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f566f1ac819 code=0x7ffc0000
[  283.648696][ T9933] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2002'.
[  283.677734][ T9933] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2002'.
[  283.708084][ T9933] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2002'.
[  283.738742][ T9933] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2002'.
[  283.765977][ T9933] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2002'.
[  283.797024][ T9933] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2002'.
[  283.825260][ T9933] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2002'.
[  283.855358][ T9933] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2002'.
[  283.874950][ T9933] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2002'.
[  284.344804][ T9973] loop0: detected capacity change from 0 to 1024
[  285.172402][ T9980] x_tables: duplicate entry at hook 3
[  285.295144][ T9987] loop0: detected capacity change from 0 to 512
[  285.309077][ T9980] loop1: detected capacity change from 0 to 512
[  285.316125][ T9987] EXT4-fs: Ignoring removed i_version option
[  285.401283][ T9987] EXT4-fs: Ignoring removed bh option
[  285.417054][ T9980] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  285.460607][ T9987] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  285.473517][ T9980] EXT4-fs (loop1): 1 truncate cleaned up
[  285.542639][ T9993] EXT4-fs error (device loop0): ext4_lookup:1785: inode #12: comm syz.0.2016: iget: bad i_size value: 2533274857506816
[  285.554868][ T9993] EXT4-fs error (device loop0): ext4_lookup:1785: inode #12: comm syz.0.2016: iget: bad i_size value: 2533274857506816
[  285.991427][ T9980] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  286.236051][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  286.297435][T10006] netlink: 'syz.0.2021': attribute type 1 has an invalid length.
[  286.314540][T10006] 8021q: adding VLAN 0 to HW filter on device bond7
[  286.741526][T10014] macvlan0: entered promiscuous mode
[  286.759731][T10014] macvlan0: entered allmulticast mode
[  286.773049][T10014] bond7: entered promiscuous mode
[  286.785320][T10014] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  286.805855][T10014] bond7: left promiscuous mode
[  286.811846][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  286.830806][T10006] bond7: (slave bridge3): Enslaving as an active interface with a down link
[  288.805795][T10022] autofs4:pid:10022:validate_dev_ioctl: path string terminator missing for cmd(0xc018937b)
[  290.165831][   T28] kauditd_printk_skb: 137 callbacks suppressed
[  290.165855][   T28] audit: type=1326 audit(290.133:5563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10065 comm="syz.3.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940b98c819 code=0x7ffc0000
[  290.250853][T10067] batadv_slave_0: Caught tx_queue_len zero misconfig
[  290.295244][   T28] audit: type=1326 audit(290.173:5564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10065 comm="syz.3.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f940b98c819 code=0x7ffc0000
[  290.410813][   T28] audit: type=1326 audit(290.173:5565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10065 comm="syz.3.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940b98c819 code=0x7ffc0000
[  290.531624][   T28] audit: type=1326 audit(290.173:5566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10065 comm="syz.3.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940b98c819 code=0x7ffc0000
[  290.664707][   T28] audit: type=1326 audit(290.173:5567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10065 comm="syz.3.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f940b98c819 code=0x7ffc0000
[  290.799371][   T28] audit: type=1326 audit(290.173:5568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10065 comm="syz.3.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940b98c819 code=0x7ffc0000
[  291.058454][   T28] audit: type=1326 audit(290.173:5569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10065 comm="syz.3.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940b98c819 code=0x7ffc0000
[  291.107252][   T28] audit: type=1326 audit(290.173:5570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10065 comm="syz.3.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f940b98c819 code=0x7ffc0000
[  291.240538][   T28] audit: type=1326 audit(290.173:5571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10065 comm="syz.3.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940b98c819 code=0x7ffc0000
[  291.330800][   T28] audit: type=1326 audit(290.173:5572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10065 comm="syz.3.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940b98c819 code=0x7ffc0000
[  291.627629][T10106] __nla_validate_parse: 14 callbacks suppressed
[  291.627649][T10106] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2046'.
[  292.119848][T10111] loop0: detected capacity change from 0 to 4096
[  292.129754][T10111] EXT4-fs: Ignoring removed bh option
[  292.152271][T10111] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  293.087669][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  293.089707][T10127] loop1: detected capacity change from 0 to 512
[  293.115273][T10127] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  293.190990][T10131] loop0: detected capacity change from 0 to 128
[  293.777141][T10139] netlink: 'syz.3.2054': attribute type 1 has an invalid length.
[  293.791793][T10139] bond9: entered promiscuous mode
[  293.797122][T10139] 8021q: adding VLAN 0 to HW filter on device bond9
[  293.817002][T10139] ipvlan2: entered allmulticast mode
[  293.822634][T10139] bond9: entered allmulticast mode
[  293.834635][T10139] ipvlan3: entered allmulticast mode
[  293.849717][T10139] bond9: (slave bridge8): making interface the new active one
[  293.857501][T10139] bridge8: entered promiscuous mode
[  293.863903][T10139] bridge8: entered allmulticast mode
[  293.889613][T10139] bond9: (slave bridge8): Enslaving as an active interface with an up link
[  294.059386][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  294.304903][T10155] loop0: detected capacity change from 0 to 1024
[  294.346729][T10155] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  294.379895][T10155] EXT4-fs error (device loop0): ext4_generic_delete_entry:2666: inode #12: block 7: comm syz.0.2059: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0
[  294.401827][T10155] EXT4-fs error (device loop0) in ext4_delete_inline_entry:1705: Corrupt filesystem
[  295.178610][   T28] kauditd_printk_skb: 1141 callbacks suppressed
[  295.178630][   T28] audit: type=1326 audit(295.123:6714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10149 comm="syz.1.2056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f566f1a6597 code=0x7ffc0000
[  295.249093][   T28] audit: type=1326 audit(295.123:6715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10149 comm="syz.1.2056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f566f14db99 code=0x7ffc0000
[  295.273170][   T28] audit: type=1326 audit(295.123:6716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10149 comm="syz.1.2056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f566f1a6597 code=0x7ffc0000
[  295.296450][   T28] audit: type=1326 audit(295.123:6717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10149 comm="syz.1.2056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f566f14db99 code=0x7ffc0000
[  295.320117][   T28] audit: type=1326 audit(295.123:6718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10149 comm="syz.1.2056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f566f1a6597 code=0x7ffc0000
[  295.344475][   T28] audit: type=1326 audit(295.123:6719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10149 comm="syz.1.2056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f566f14db99 code=0x7ffc0000
[  295.368435][   T28] audit: type=1326 audit(295.123:6720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10149 comm="syz.1.2056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f566f1a6597 code=0x7ffc0000
[  295.391472][   T28] audit: type=1326 audit(295.123:6721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10149 comm="syz.1.2056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f566f14db99 code=0x7ffc0000
[  295.415129][   T28] audit: type=1326 audit(295.123:6722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10149 comm="syz.1.2056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f566f1a6597 code=0x7ffc0000
[  295.440384][   T28] audit: type=1326 audit(295.123:6723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10149 comm="syz.1.2056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f566f14db99 code=0x7ffc0000
[  295.702402][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  295.994909][T10179] pimreg: entered allmulticast mode
[  296.672928][T10189] loop1: detected capacity change from 0 to 512
[  297.028387][T10189] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  297.161268][T10189] EXT4-fs (loop1): 1 truncate cleaned up
[  297.167582][T10189] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  297.396404][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  298.560150][T10207] tipc: Failed to remove unknown binding: 66,0,0/0:1731338125/1731338126
[  298.572927][T10207] tipc: Failed to remove unknown binding: 66,0,0/0:1731338125/1731338126
[  298.635040][T10215] netlink: 'syz.0.2075': attribute type 21 has an invalid length.
[  302.807017][T10256] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  303.683476][T10265] autofs4:pid:10265:validate_dev_ioctl: path string terminator missing for cmd(0xc018937b)
[  304.377964][T10296] loop1: detected capacity change from 0 to 1764
[  304.394650][T10296] iso9660: Unknown parameter 'fowner<18446744073709551615'
[  304.700358][T10308] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2102'.
[  304.740485][T10308] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2102'.
[  304.778621][T10308] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2102'.
[  304.874571][T10317] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2104'.
[  306.107224][T10358] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10358 comm=syz.2.2118
[  307.854193][T10385] loop1: detected capacity change from 0 to 1024
[  307.948596][T10385] EXT4-fs (loop1): filesystem too large to mount safely on this system
[  308.159507][   T28] kauditd_printk_skb: 981 callbacks suppressed
[  308.159602][   T28] audit: type=1400 audit(308.123:7705): avc:  denied  { write } for  pid=10389 comm="syz.2.2127" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1
[  310.358917][T10435] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2140'.
[  310.372089][T10434] loop0: detected capacity change from 0 to 512
[  310.385273][T10435] batman_adv: batadv0: Removing interface: batadv_slave_0
[  310.510164][T10434] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  311.060613][T10442] pimreg: entered allmulticast mode
[  311.143280][T10446] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2144'.
[  311.375722][T10456] syzkaller0: entered promiscuous mode
[  311.402662][T10456] syzkaller0: entered allmulticast mode
[  311.596260][T10464] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2149'.
[  312.363369][T10474] netlink: 'syz.3.2155': attribute type 18 has an invalid length.
[  313.265873][T10475] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  313.278621][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  313.370829][T10475] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  313.996400][T10497] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  314.149135][T10481] pimreg: entered allmulticast mode
[  314.207581][T10502] loop0: detected capacity change from 0 to 512
[  314.233056][T10475] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  314.267874][T10502] loop0: detected capacity change from 0 to 128
[  314.371074][T10507] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2174'.
[  314.388272][T10475] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  314.522614][ T1567] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  314.560448][ T1567] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  314.569761][   T28] audit: type=1400 audit(314.543:7706): avc:  denied  { execstack } for  pid=10515 comm="syz.2.2166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  314.604113][ T8395] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  314.627557][ T8395] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  314.655649][T10521] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2176'.
[  314.709164][T10523] netlink: 'syz.2.2167': attribute type 18 has an invalid length.
[  314.766681][T10525] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2168'.
[  314.820402][T10528] tipc: Failed to remove unknown binding: 66,0,0/0:752365746/752365747
[  315.650440][   T28] audit: type=1400 audit(315.623:7707): avc:  denied  { ioctl } for  pid=10542 comm="syz.1.2178" path="/dev/uhid" dev="devtmpfs" ino=253 ioctlcmd=0x941b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  315.684538][T10543] loop1: detected capacity change from 0 to 128
[  315.818754][T10540] loop0: detected capacity change from 0 to 512
[  316.213024][T10540] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  317.118848][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  317.193089][T10561] tipc: Failed to remove unknown binding: 66,0,0/0:3600376846/3600376847
[  317.346808][T10556] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2180'.
[  317.375706][T10556] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2180'.
[  317.440142][T10564] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2184'.
[  317.685365][T10571] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2186'.
[  317.793361][T10576] netlink: 'syz.0.2181': attribute type 18 has an invalid length.
[  317.868154][   T28] audit: type=1400 audit(317.823:7708): avc:  denied  { unmount } for  pid=10572 comm="syz.3.2187" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  318.563562][T10594] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2194'.
[  318.818113][T10601] tipc: Failed to remove unknown binding: 66,0,0/0:483704795/483704796
[  319.339160][T10610] netlink: 'syz.2.2198': attribute type 18 has an invalid length.
[  320.917623][T10613] netlink: 'syz.2.2199': attribute type 1 has an invalid length.
[  321.041276][T10613] 8021q: adding VLAN 0 to HW filter on device bond5
[  321.049805][T10619] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2199'.
[  321.060011][T10613] bond4: (slave bond5): making interface the new active one
[  321.069303][T10613] bond4: (slave bond5): Enslaving as an active interface with an up link
[  321.111580][T10616] bond4: (slave gretap1): Enslaving as a backup interface with an up link
[  321.216353][T10621] loop1: detected capacity change from 0 to 8192
[  321.233022][T10627] netlink: 676 bytes leftover after parsing attributes in process `syz.0.2202'.
[  321.249202][T10619] 8021q: adding VLAN 0 to HW filter on device bond4
[  321.261547][T10620] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2201'.
[  321.301058][T10613] vlan3: entered promiscuous mode
[  321.306869][T10621]  loop1: p1 < > p2 p4 < p5 >
[  321.312908][T10623] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  321.322747][T10621] loop1: partition table partially beyond EOD, truncated
[  321.322894][T10621] loop1: p1 start 134217728 is beyond EOD, truncated
[  321.322915][T10621] loop1: p2 size 591360 extends beyond EOD, truncated
[  321.324679][T10621] loop1: p5 size 591360 extends beyond EOD, 
[  321.331006][T10613] bond4: entered promiscuous mode
[  321.345335][T10621] truncated
[  321.384807][T10629] syz.0.2202(10629): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored.
[  321.400686][T10613] bond5: entered promiscuous mode
[  321.416848][ T2999]  loop1: p1 < > p2 p4 < p5 >
[  321.421772][ T2999] loop1: partition table partially beyond EOD, truncated
[  321.440030][ T2999] loop1: p1 start 134217728 is beyond EOD, truncated
[  321.446943][ T2999] loop1: p2 size 591360 extends beyond EOD, truncated
[  321.477894][ T2999] loop1: p5 size 591360 extends beyond EOD, truncated
[  321.807649][T10640] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2205'.
[  321.820064][T10639] tipc: Failed to remove unknown binding: 66,0,0/0:3967591552/3967591553
[  322.571256][T10649] netlink: 'syz.0.2209': attribute type 18 has an invalid length.
[  322.586034][T10645] xt_CT: No such helper "snmp_trap"
[  323.128349][T10673] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2216'.
[  323.233899][T10664] syzkaller0: entered promiscuous mode
[  323.282116][T10664] syzkaller0: entered allmulticast mode
[  323.460903][T10682] loop0: detected capacity change from 0 to 1024
[  323.487112][T10682] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  323.487087][T10683] loop1: detected capacity change from 0 to 4096
[  323.487412][T10683] EXT4-fs: Ignoring removed bh option
[  323.530748][T10683] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  323.598124][   T28] audit: type=1400 audit(323.553:7709): avc:  denied  { map } for  pid=10680 comm="syz.0.2220" path="/421/file1/cgroup.controllers" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  323.640955][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  323.683123][T10695] netlink: 'syz.0.2223': attribute type 18 has an invalid length.
[  323.781680][T10700] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2222'.
[  323.814237][T10702] netlink: 'syz.2.2226': attribute type 1 has an invalid length.
[  323.896612][T10702] veth9: entered promiscuous mode
[  323.910364][T10702] bond6: (slave veth9): Enslaving as a backup interface with a down link
[  323.949386][T10702] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2226'.
[  323.959878][T10702] 8021q: adding VLAN 0 to HW filter on device bond6
[  324.133267][T10717] bridge4: entered promiscuous mode
[  324.139942][T10717] bridge4: entered allmulticast mode
[  324.221593][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  324.589005][T10722] loop1: detected capacity change from 0 to 512
[  324.621358][T10722] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[  324.635800][T10722] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2
[  324.654692][T10722] EXT4-fs (loop1): 1 truncate cleaned up
[  324.662461][T10722] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  324.851194][T10730] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters
[  324.869632][T10730] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=46724 sclass=netlink_xfrm_socket pid=10730 comm=syz.1.2230
[  324.906497][T10731] loop0: detected capacity change from 0 to 1024
[  324.917517][   T28] audit: type=1400 audit(324.883:7710): avc:  denied  { write } for  pid=10721 comm="syz.1.2230" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  324.939215][T10731] EXT4-fs: Ignoring removed bh option
[  324.940978][T10731] EXT4-fs (loop0): bad geometry: bigalloc file system with non-zero first_data_block
[  324.940978][T10731] 
[  324.990744][T10731] loop0: detected capacity change from 0 to 128
[  325.053814][T10731] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  325.159371][T10737] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2234'.
[  325.216824][T10731] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2232'.
[  325.491642][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  325.523718][ T3317] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  325.881255][T10754] loop1: detected capacity change from 0 to 512
[  325.888172][T10754] EXT4-fs: Ignoring removed i_version option
[  326.881577][T10763] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2241'.
[  326.902787][T10754] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  326.925637][T10765] 0ªî{X¹¦: left promiscuous mode
[  326.932733][T10754] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.2240: invalid block
[  326.945434][T10765] bridge0: port 3(
30ªî{X¹¦) entered disabled state
[  326.949022][T10754] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  326.957086][T10754] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.2240: invalid indirect mapped block 4294967295 (level 1)
[  326.966487][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  326.966508][    C1] EXT4-fs (loop1): initial error at time 326: ext4_get_branch:178: inode 11: block 4294967295
[  326.966545][    C1] EXT4-fs (loop1): last error at time 326: ext4_get_branch:178: inode 11: block 4294967295
[  327.035264][T10765] bond0: (slave bridge0): Releasing backup interface
[  327.068627][T10765] bridge_slave_0: left allmulticast mode
[  327.074465][T10765] bridge_slave_0: left promiscuous mode
[  327.080548][T10754] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  327.082102][T10765] bridge0: port 1(bridge_slave_0) entered disabled state
[  327.084547][T10754] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.2240: invalid indirect mapped block 4294967295 (level 1)
[  327.121782][T10773] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2242'.
[  327.124064][T10754] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  327.132237][T10765] bridge_slave_1: left allmulticast mode
[  327.150469][T10754] EXT4-fs (loop1): 2 truncates cleaned up
[  327.156737][T10754] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  327.158760][T10765] bridge_slave_1: left promiscuous mode
[  327.176181][T10765] bridge0: port 2(bridge_slave_1) entered disabled state
[  327.193613][T10765] bond0: (slave bond_slave_0): Releasing backup interface
[  327.216782][T10765] bond0: (slave bond_slave_1): Releasing backup interface
[  327.254265][T10752] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1332: inode #12: block 7: comm syz.1.2240: path /447/file0/file0: bad entry in directory: directory entry overrun - offset=196864, inode=4278190093, rec_len=196860, size=60 fake=0
[  327.320675][T10765] team0: Port device team_slave_0 removed
[  327.370511][T10765] team0: Port device team_slave_1 removed
[  327.371441][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  327.376794][T10765] batman_adv: batadv0: Removing interface: batadv_slave_0
[  327.411044][T10765] batman_adv: batadv0: Removing interface: batadv_slave_1
[  327.929896][T10765] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  328.024092][T10767] team0: Mode changed to "loadbalance"
[  328.211938][T10787] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2247'.
[  328.478969][T10785] loop1: detected capacity change from 0 to 1024
[  328.524148][T10785] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  329.336984][T10793] tipc: Failed to remove unknown binding: 66,0,0/0:405022659/405022660
[  329.790832][T10785] System zones: 0-1, 3-36
[  329.926162][T10785] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.2246: bad orphan inode 134217728
[  329.957692][T10785] loop1: lost filesystem error report for type 5 error -117
[  329.978690][T10785] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  330.765696][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  331.063776][T10822] loop0: detected capacity change from 0 to 512
[  331.112254][T10822] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  331.223300][T10822] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.2260: bg 0: block 104: invalid block bitmap
[  331.270431][T10822] loop0: lost filesystem error report for type 5 error -117
[  331.277755][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  331.291975][    C0] EXT4-fs (loop0): initial error at time 331: ext4_validate_block_bitmap:432
[  331.300992][    C0] EXT4-fs (loop0): last error at time 331: ext4_validate_block_bitmap:432
[  331.340675][T10822] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6685: Corrupt filesystem
[  331.369171][T10822] loop0: lost filesystem error report for type 5 error -117
[  331.372322][T10822] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2260: invalid indirect mapped block 1 (level 1)
[  331.595962][T10829] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2264'.
[  331.753882][T10822] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  331.764061][T10822] EXT4-fs (loop0): 1 truncate cleaned up
[  331.822525][T10822] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  331.940252][   T28] audit: type=1400 audit(331.723:7711): avc:  denied  { mount } for  pid=10843 comm="syz.1.2259" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  332.640581][   T28] audit: type=1400 audit(332.563:7712): avc:  denied  { ioctl } for  pid=10821 comm="syz.0.2260" path="/431/file1/file1" dev="loop0" ino=18 ioctlcmd=0x6611 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  332.733232][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  332.798653][   T28] audit: type=1400 audit(332.603:7713): avc:  denied  { map } for  pid=10821 comm="syz.0.2260" path="pipe:[2466]" dev="pipefs" ino=2466 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[  332.977063][   T28] audit: type=1400 audit(332.603:7714): avc:  denied  { execute } for  pid=10821 comm="syz.0.2260" path="pipe:[2466]" dev="pipefs" ino=2466 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[  333.950936][   T28] audit: type=1400 audit(332.903:7715): avc:  denied  { write } for  pid=10862 comm="syz.3.2274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  334.935785][T10869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2272'.
[  335.023587][T10873] tipc: Failed to remove unknown binding: 66,0,0/0:2679105556/2679105557
[  335.340879][   T28] audit: type=1400 audit(335.303:7716): avc:  denied  { shutdown } for  pid=10880 comm="syz.1.2280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  335.400251][T10885] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 4, id = 0
[  335.475525][T10890] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2282'.
[  335.640021][T10890] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2282'.
[  335.893575][T10890] usb usb1: usbfs: process 10890 (syz.1.2282) did not claim interface 0 before use
[  336.520849][T10912] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2289'.
[  336.581283][T10924] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2293'.
[  336.609765][T10924] bridge0 (unregistering): left promiscuous mode
[  336.694619][   T28] audit: type=1326 audit(336.663:7717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10939 comm="syz.1.2297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f566f1ac819 code=0x7ffc0000
[  336.723605][   T28] audit: type=1326 audit(336.693:7718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10939 comm="syz.1.2297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f566f1ac819 code=0x7ffc0000
[  336.773220][   T28] audit: type=1326 audit(336.693:7719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10939 comm="syz.1.2297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f566f1ac819 code=0x7ffc0000
[  336.826989][   T28] audit: type=1326 audit(336.693:7720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10939 comm="syz.1.2297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f566f1ac819 code=0x7ffc0000
[  337.000467][   T28] kauditd_printk_skb: 67 callbacks suppressed
[  337.000482][   T28] audit: type=1326 audit(336.973:7788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10939 comm="syz.1.2297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f566f1ac819 code=0x7ffc0000
[  337.422122][T10979] loop1: detected capacity change from 0 to 512
[  337.695189][T10979] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.2301: inode has both inline data and extents flags
[  337.710647][T10979] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  337.710845][T10979] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.2301: couldn't read orphan inode 15 (err -117)
[  337.720186][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  337.720209][    C1] EXT4-fs (loop1): initial error at time 337: ext4_orphan_get:1397: inode 15
[  337.720241][    C1] EXT4-fs (loop1): last error at time 337: ext4_orphan_get:1397: inode 15
[  337.762461][T10979] loop1: lost filesystem error report for type 5 error -117
[  337.811467][T10979] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  337.892896][   T28] audit: type=1400 audit(337.863:7789): avc:  denied  { remount } for  pid=10966 comm="syz.1.2301" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  337.917499][T10979] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000.
[  337.942170][T11011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2307'.
[  338.022392][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  338.069124][T11018] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2310'.
[  338.091260][T11018] bridge_slave_1: left allmulticast mode
[  338.097011][T11018] bridge_slave_1: left promiscuous mode
[  338.116462][T11018] bridge0: port 2(bridge_slave_1) entered disabled state
[  338.127615][T11018] bridge_slave_0: left allmulticast mode
[  338.136228][T11018] bridge_slave_0: left promiscuous mode
[  338.143101][T11018] bridge0: port 1(bridge_slave_0) entered disabled state
[  338.153803][T11018] bond0: (slave bridge0): Releasing backup interface
[  338.202045][T11025] bridge_slave_0: left allmulticast mode
[  338.208592][T11025] bridge_slave_0: left promiscuous mode
[  338.214314][T11025] bridge0: port 1(bridge_slave_0) entered disabled state
[  338.222544][T11025] bridge_slave_1: left allmulticast mode
[  338.228597][T11025] bridge_slave_1: left promiscuous mode
[  338.234342][T11025] bridge0: port 2(bridge_slave_1) entered disabled state
[  338.243211][T11025] team_slave_0: left promiscuous mode
[  338.252430][T11025] team0: Port device team_slave_0 removed
[  338.266221][T11025] team_slave_1: left promiscuous mode
[  338.285361][T11025] team0: Port device team_slave_1 removed
[  338.295210][T11025] batman_adv: batadv0: Removing interface: batadv_slave_0
[  338.306103][   T28] audit: type=1400 audit(338.283:7790): avc:  denied  { bind } for  pid=11021 comm="syz.4.2312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  338.326118][T11025] batman_adv: batadv0: Removing interface: batadv_slave_1
[  338.334473][T11025] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  338.407684][T11007] netlink: 'syz.3.2306': attribute type 20 has an invalid length.
[  339.410011][   T28] audit: type=1400 audit(338.513:7791): avc:  denied  { ioctl } for  pid=11027 comm="syz.1.2313" path="socket:[32577]" dev="sockfs" ino=32577 ioctlcmd=0x48d7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  339.971145][   T28] audit: type=1400 audit(339.853:7792): avc:  denied  { create } for  pid=11043 comm="syz.1.2318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  341.076878][T11085] 0ªî{X¹¦: left promiscuous mode
[  341.086251][T11085] Ÿë
: port 1(
30ªî{X¹¦) entered disabled state
[  341.272451][T11085] bond6: (slave bond0): Releasing active interface
[  341.289786][T11085] bond0: (slave bond_slave_0): Releasing backup interface
[  341.410625][T11085] bond0: (slave bond_slave_1): Releasing backup interface
[  341.433631][T11085] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  343.031778][T11159] loop0: detected capacity change from 0 to 512
[  343.063784][T11159] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  343.964950][T11185] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2354'.
[  344.123625][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  344.483972][T11193] netlink: 'syz.0.2347': attribute type 1 has an invalid length.
[  344.521657][T11193] bond8: entered promiscuous mode
[  344.538206][T11193] 8021q: adding VLAN 0 to HW filter on device bond8
[  344.589670][T11202] ipvlan0: entered allmulticast mode
[  344.595116][T11202] bond8: entered allmulticast mode
[  344.595280][T11196] loop1: detected capacity change from 0 to 512
[  344.614133][T11193] ipvlan1: entered allmulticast mode
[  344.623301][T11193] bond8: (slave bridge5): making interface the new active one
[  344.623324][T11193] bridge5: entered promiscuous mode
[  344.623545][T11193] bridge5: entered allmulticast mode
[  344.625409][T11193] bond8: (slave bridge5): Enslaving as an active interface with an up link
[  344.802262][T11205] loop0: detected capacity change from 0 to 512
[  344.812633][T11205] EXT4-fs: Ignoring removed i_version option
[  344.812728][T11205] EXT4-fs: Ignoring removed nomblk_io_submit option
[  344.814021][T11205] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.2352: bad orphan inode 1
[  344.814047][T11205] loop0: lost filesystem error report for type 5 error -117
[  344.814656][T11205] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  346.188739][T11196] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  346.283356][T11196] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.2349: bg 0: block 104: invalid block bitmap
[  346.415626][T11196] loop1: lost filesystem error report for type 5 error -117
[  346.428229][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  346.443917][    C1] EXT4-fs (loop1): initial error at time 346: ext4_validate_block_bitmap:432
[  346.454008][    C1] EXT4-fs (loop1): last error at time 346: ext4_validate_block_bitmap:432
[  346.527758][T11196] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6685: Corrupt filesystem
[  346.570885][   T28] audit: type=1400 audit(346.483:7793): avc:  denied  { getopt } for  pid=11224 comm="syz.3.2358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  346.593259][T11196] loop1: lost filesystem error report for type 5 error -117
[  346.643591][T11196] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.2349: invalid indirect mapped block 1 (level 1)
[  346.680805][T11196] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  346.681492][T11196] EXT4-fs (loop1): 1 truncate cleaned up
[  346.787951][T11196] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  346.983818][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  348.041249][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  348.436498][T11263] loop0: detected capacity change from 0 to 1024
[  348.450383][T11263] EXT4-fs (loop0): filesystem too large to mount safely on this system
[  348.721641][T11284] netlink: 'syz.1.2379': attribute type 1 has an invalid length.
[  348.745771][T11284] bond11: entered promiscuous mode
[  348.757916][T11284] 8021q: adding VLAN 0 to HW filter on device bond11
[  348.809082][T11284] ipvlan4: entered allmulticast mode
[  348.820291][T11284] bond11: entered allmulticast mode
[  348.832945][T11284] ipvlan5: entered allmulticast mode
[  348.863365][T11284] bond11: (slave bridge0): making interface the new active one
[  348.874104][T11284] bridge0: entered promiscuous mode
[  348.880890][T11284] bridge0: entered allmulticast mode
[  348.889235][T11284] bond11: (slave bridge0): Enslaving as an active interface with an up link
[  349.075346][T11304] loop1: detected capacity change from 0 to 8192
[  349.406088][T11304] netlink: 'syz.1.2392': attribute type 20 has an invalid length.
[  349.839596][T11363] loop0: detected capacity change from 0 to 1024
[  349.868909][T11363] EXT4-fs (loop0): filesystem too large to mount safely on this system
[  351.135623][T11374] pimreg: entered allmulticast mode
[  351.519571][T11385] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2394'.
[  353.245951][T11409] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  354.748975][T11439] loop1: detected capacity change from 0 to 128
[  358.258500][T11483] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11483 comm=syz.1.2421
[  359.347317][T11507] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2439'.
[  359.369232][T11507] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2439'.
[  359.379923][T11507] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2439'.
[  359.460400][   T28] audit: type=1400 audit(359.433:7794): avc:  denied  { bind } for  pid=11513 comm="syz.1.2433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  359.978011][   T28] audit: type=1400 audit(359.923:7795): avc:  denied  { write } for  pid=11513 comm="syz.1.2433" path="socket:[34545]" dev="sockfs" ino=34545 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  360.364918][T11530] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  360.379008][T11534] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2441'.
[  360.407215][T11536] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2440'.
[  360.453292][T11536] batman_adv: batadv0: Removing interface: batadv_slave_0
[  360.663952][T11546] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2446'.
[  360.699371][T11546] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2446'.
[  360.720700][T11546] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2446'.
[  362.591639][T11628] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2459'.
[  362.621616][T11630] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2457'.
[  363.192468][T11632] Invalid ELF header magic: != ELF
[  363.343911][T11636] netlink: 'syz.2.2460': attribute type 6 has an invalid length.
[  363.416744][T11646] netlink: 'syz.4.2475': attribute type 10 has an invalid length.
[  363.439469][T11646] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  363.451478][T11648] loop0: detected capacity change from 0 to 512
[  363.463697][T11648] EXT4-fs: Ignoring removed bh option
[  363.463774][T11648] EXT4-fs: Ignoring removed mblk_io_submit option
[  363.475875][T11648] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  363.482699][T11647] Invalid ELF header magic: != ELF
[  363.491741][T11646] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  363.518756][T11646] hsr0: entered promiscuous mode
[  363.527582][T11646] bridge0: port 1(hsr0) entered blocking state
[  363.534828][T11646] bridge0: port 1(hsr0) entered disabled state
[  363.542792][T11646] hsr0: entered allmulticast mode
[  363.549964][T11646] hsr_slave_0: entered allmulticast mode
[  363.555858][T11646] hsr_slave_1: entered allmulticast mode
[  363.604304][T11648] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  363.635128][T11648] EXT4-fs (loop0): orphan cleanup on readonly fs
[  363.639042][T11653] netlink: 'syz.2.2477': attribute type 10 has an invalid length.
[  363.697434][T11653] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  363.705568][T11648] Quota error (device loop0): do_insert_tree: Free block already used in tree: block 4
[  363.722877][T11653] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  363.748430][T11653] hsr0: entered promiscuous mode
[  363.750580][T11648] Quota error (device loop0): qtree_write_dquot: Error -5 occurred while creating quota
[  363.809012][T11648] EXT4-fs error (device loop0): ext4_acquire_dquot:7028: comm syz.0.2462: Failed to acquire dquot type 1
[  363.827277][T11648] loop0: lost filesystem error report for type 5 error -5
[  363.838050][    C1] EXT4-fs (loop0): error count since last fsck: 1
[  363.852911][T11648] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.2462: Invalid block bitmap block 0 in block_group 0
[  363.853188][    C1] EXT4-fs (loop0): last error at time 363: ext4_acquire_dquot:7028
[  363.891968][T11648] loop0: lost filesystem error report for type 5 error -117
[  363.896425][T11648] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.2462: Invalid block bitmap block 0 in block_group 0
[  363.978786][T11648] loop0: lost filesystem error report for type 5 error -117
[  363.981336][T11648] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.2462: Invalid block bitmap block 0 in block_group 0
[  364.090250][T11648] loop0: lost filesystem error report for type 5 error -117
[  364.090592][T11648] Quota error (device loop0): write_blk: dquota write failed
[  364.108668][T11648] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota
[  364.150228][T11648] EXT4-fs error (device loop0): ext4_acquire_dquot:7028: comm syz.0.2462: Failed to acquire dquot type 1
[  364.162862][T11648] loop0: lost filesystem error report for type 5 error -28
[  364.171257][T11648] Quota error (device loop0): write_blk: dquota write failed
[  364.189921][T11648] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota
[  364.223342][T11648] EXT4-fs error (device loop0): ext4_acquire_dquot:7028: comm syz.0.2462: Failed to acquire dquot type 1
[  364.237540][T11648] loop0: lost filesystem error report for type 5 error -28
[  364.237983][T11648] EXT4-fs (loop0): 1 orphan inode deleted
[  364.278477][T11648] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  364.370695][T11648] syz.0.2462 (11648) used greatest stack depth: 7680 bytes left
[  364.380742][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  364.874419][T11664] loop1: detected capacity change from 0 to 512
[  364.933550][T11664] EXT4-fs: Ignoring removed bh option
[  365.030494][T11664] EXT4-fs: Ignoring removed mblk_io_submit option
[  365.050788][T11664] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  365.225548][T11664] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  365.251010][T11664] EXT4-fs (loop1): orphan cleanup on readonly fs
[  365.281939][T11664] Quota error (device loop1): do_insert_tree: Free block already used in tree: block 4
[  365.337422][T11664] Quota error (device loop1): qtree_write_dquot: Error -5 occurred while creating quota
[  365.491617][T11664] EXT4-fs error (device loop1): ext4_acquire_dquot:7028: comm syz.1.2482: Failed to acquire dquot type 1
[  365.549322][T11664] loop1: lost filesystem error report for type 5 error -5
[  365.557739][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  365.571586][    C0] EXT4-fs (loop1): last error at time 365: ext4_acquire_dquot:7028
[  365.597828][T11664] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.2482: Invalid block bitmap block 0 in block_group 0
[  365.650892][T11664] loop1: lost filesystem error report for type 5 error -117
[  365.667433][T11664] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.2482: Invalid block bitmap block 0 in block_group 0
[  366.051036][T11664] loop1: lost filesystem error report for type 5 error -117
[  366.089805][T11664] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.2482: Invalid block bitmap block 0 in block_group 0
[  366.319893][T11664] loop1: lost filesystem error report for type 5 error -117
[  366.325080][T11664] Quota error (device loop1): write_blk: dquota write failed
[  366.464955][T11664] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota
[  366.483113][T11725] __nla_validate_parse: 7 callbacks suppressed
[  366.483127][T11725] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2478'.
[  366.509008][T11664] EXT4-fs error (device loop1): ext4_acquire_dquot:7028: comm syz.1.2482: Failed to acquire dquot type 1
[  366.543975][T11725] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2478'.
[  366.644263][T11664] Quota error (device loop1): write_blk: dquota write failed
[  366.644286][T11664] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota
[  366.644306][T11664] EXT4-fs error (device loop1): ext4_acquire_dquot:7028: comm syz.1.2482: Failed to acquire dquot type 1
[  366.644521][T11664] EXT4-fs (loop1): 1 orphan inode deleted
[  366.664231][T11664] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  367.066276][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  367.072172][T11725] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2478'.
[  367.191035][T11739] loop1: detected capacity change from 0 to 512
[  367.206371][T11739] EXT4-fs: Ignoring removed nobh option
[  367.237428][T11739] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  367.953197][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  369.605323][T11756] loop1: detected capacity change from 0 to 512
[  369.664171][T11756] FAT-fs (loop1): Directory bread(block 199916) failed
[  369.679631][T11780] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2495'.
[  369.690803][T11756] FAT-fs (loop1): Directory bread(block 199917) failed
[  369.703188][T11780] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2495'.
[  369.713936][T11756] FAT-fs (loop1): Directory bread(block 199918) failed
[  369.752875][T11780] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2495'.
[  369.769581][T11756] FAT-fs (loop1): Directory bread(block 199919) failed
[  369.888041][T11756] FAT-fs (loop1): Directory bread(block 199920) failed
[  369.904085][T11756] FAT-fs (loop1): Directory bread(block 199921) failed
[  369.936341][T11756] FAT-fs (loop1): Directory bread(block 199922) failed
[  370.010091][T11756] FAT-fs (loop1): Directory bread(block 199923) failed
[  370.029051][T11789] netlink: 'syz.2.2498': attribute type 27 has an invalid length.
[  370.159986][T11789] hsr0: left promiscuous mode
[  370.166406][T11793] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2497'.
[  370.179766][T11789] bond1: left allmulticast mode
[  370.184769][T11789] bridge1: left promiscuous mode
[  370.199772][T11789] bridge1: left allmulticast mode
[  370.208860][T11789] vlan2: left allmulticast mode
[  370.213863][T11789] bond2: left allmulticast mode
[  370.329303][T11789] geneve2: left allmulticast mode
[  370.431158][T11789] veth7: left allmulticast mode
[  370.505432][T11789] ipip0: left promiscuous mode
[  370.590628][T11789] team1: left promiscuous mode
[  370.669075][T11789] team1: left allmulticast mode
[  370.749683][T11789] veth9: left promiscuous mode
[  370.932313][T11794] 8021q: adding VLAN 0 to HW filter on device bond0
[  370.970005][T11794] 8021q: adding VLAN 0 to HW filter on device team0
[  371.008553][T11794] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  371.706988][T11814] netlink: 'syz.0.2503': attribute type 2 has an invalid length.
[  371.735436][T11814] netlink: 'syz.0.2503': attribute type 1 has an invalid length.
[  372.125444][T11827] loop1: detected capacity change from 0 to 1024
[  372.174577][T11827] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  372.335582][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  374.632527][T11850] netlink: 'syz.1.2513': attribute type 10 has an invalid length.
[  374.664612][T11850] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2513'.
[  374.724714][T11850] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  374.752083][T11850] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  374.785358][T11850] hsr0: entered promiscuous mode
[  375.578835][T11874] loop0: detected capacity change from 0 to 512
[  375.656497][T11874] FAT-fs (loop0): Directory bread(block 199916) failed
[  375.681493][T11874] FAT-fs (loop0): Directory bread(block 199917) failed
[  375.712270][T11874] FAT-fs (loop0): Directory bread(block 199918) failed
[  375.739365][T11874] FAT-fs (loop0): Directory bread(block 199919) failed
[  375.760725][T11874] FAT-fs (loop0): Directory bread(block 199920) failed
[  375.802262][T11874] FAT-fs (loop0): Directory bread(block 199921) failed
[  375.835655][T11874] FAT-fs (loop0): Directory bread(block 199922) failed
[  375.864643][T11874] FAT-fs (loop0): Directory bread(block 199923) failed
[  376.796344][T11939] loop1: detected capacity change from 0 to 256
[  376.919634][T11946] netlink: 277 bytes leftover after parsing attributes in process `syz.2.2533'.
[  377.015378][T11939] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  377.037105][T11941] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  379.359879][T11941] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  379.523113][T11964] syzkaller0: entered promiscuous mode
[  379.544930][T11964] syzkaller0: entered allmulticast mode
[  379.663658][T11968] lo: Caught tx_queue_len zero misconfig
[  379.957648][T11981] netlink: 'syz.0.2530': attribute type 1 has an invalid length.
[  379.995888][T11981] 8021q: adding VLAN 0 to HW filter on device bond9
[  380.052119][T11981] bond9: (slave veth7): Enslaving as an active interface with a down link
[  380.086219][T11937] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008)
[  380.104608][T11941] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  380.119295][T11937] FAT-fs (loop1): Filesystem has been set read-only
[  380.126646][T11937] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008)
[  380.141091][T11981] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2530'.
[  380.154050][T11941] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  380.206695][ T7872] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  380.225597][ T7872] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  380.255502][ T7872] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  380.299096][ T7872] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  380.738433][T12010] loop1: detected capacity change from 0 to 1764
[  382.067061][T12036] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  382.268221][T12036] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2545'.
[  382.508295][T12047] netlink: 'syz.1.2547': attribute type 14 has an invalid length.
[  382.606409][T12052] loop1: detected capacity change from 0 to 512
[  382.651363][T12054] bridge0: entered promiscuous mode
[  382.651471][T12054] bridge0: entered allmulticast mode
[  383.079502][T12052] loop1: detected capacity change from 0 to 128
[  383.414842][T12065] loop1: detected capacity change from 0 to 512
[  383.486638][T12065] ext4: Unknown parameter 'subj_user'
[  383.653592][T12073] loop0: detected capacity change from 0 to 512
[  383.681651][T12073] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2
[  383.703567][T12073] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2
[  383.736226][T12073] EXT4-fs (loop0): 1 truncate cleaned up
[  383.749641][T12073] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  383.886694][T12085] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters
[  383.911171][T12084] netlink: 'syz.4.2558': attribute type 1 has an invalid length.
[  383.963034][T12073] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=46724 sclass=netlink_xfrm_socket pid=12073 comm=syz.0.2554
[  383.991245][T12084] 8021q: adding VLAN 0 to HW filter on device bond6
[  383.998256][T12084] bond5: (slave bond6): making interface the new active one
[  383.998538][T12084] bond5: (slave bond6): Enslaving as an active interface with an up link
[  384.080924][T12089] netlink: 'syz.3.2559': attribute type 14 has an invalid length.
[  384.295022][T12084] bond5: (slave gretap1): Enslaving as a backup interface with an up link
[  384.309402][T12084] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2558'.
[  384.311481][T12084] 8021q: adding VLAN 0 to HW filter on device bond5
[  384.336204][T12084] vlan3: entered promiscuous mode
[  384.336236][T12084] bond5: entered promiscuous mode
[  384.336251][T12084] bond6: entered promiscuous mode
[  384.685840][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  384.704215][T12118] netlink: 'syz.3.2562': attribute type 27 has an invalid length.
[  384.745135][T12118] 0ªî{X¹¦: left allmulticast mode
[  384.771077][   T28] audit: type=1400 audit(384.743:7796): avc:  denied  { connect } for  pid=12125 comm="syz.4.2564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  384.814334][T12118] geneve2: left promiscuous mode
[  384.824518][T12118] bond4: left promiscuous mode
[  384.833904][T12118] bridge4: left promiscuous mode
[  384.911799][T12118] vlan2: left allmulticast mode
[  384.977566][T12118] bond4: left allmulticast mode
[  384.999698][T12118] bridge4: left allmulticast mode
[  385.007003][T12118] bond5: left promiscuous mode
[  385.075596][T12118] bond5: left allmulticast mode
[  385.170785][T12118] bond6: left promiscuous mode
[  385.199396][T12118] bond6: left allmulticast mode
[  385.334875][T12118] bond9: left promiscuous mode
[  385.350105][T12118] bridge8: left promiscuous mode
[  385.361505][T12118] ipvlan2: left allmulticast mode
[  385.377612][T12118] ipvlan3: left allmulticast mode
[  385.392755][T12118] bond9: left allmulticast mode
[  385.408245][T12118] bridge8: left allmulticast mode
[  385.468864][T12115] ip6gre1: entered allmulticast mode
[  385.517047][   T36] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  385.529827][   T36] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  385.553315][T12127] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  385.787891][ T8403] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  385.799309][   T36] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  386.850030][   T36] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  387.231895][T12245] loop0: detected capacity change from 0 to 512
[  387.346910][T12245] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  387.632296][T12251] netlink: 'syz.3.2572': attribute type 14 has an invalid length.
[  387.817073][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  387.953852][   T28] audit: type=1400 audit(387.923:7797): avc:  denied  { accept } for  pid=12257 comm="syz.4.2575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  388.093879][T12274] netlink: 'syz.2.2581': attribute type 1 has an invalid length.
[  388.298543][T12298] veth0_to_hsr: Caught tx_queue_len zero misconfig
[  388.339541][T12298] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2587'.
[  388.549505][T12323] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2589'.
[  388.581993][T12297] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  388.593323][T12297] block device autoloading is deprecated and will be removed.
[  389.201061][T12346] openvswitch: netlink: Missing key (keys=1000040, expected=2000)
[  389.603901][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  389.695693][T12386] netlink: 'syz.4.2596': attribute type 27 has an invalid length.
[  389.725890][   T28] audit: type=1400 audit(389.693:7798): avc:  denied  { write } for  pid=12390 comm="syz.0.2597" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1
[  389.766755][T12384] xt_CT: No such helper "snmp_trap"
[  389.776437][T12386] bridge1: left promiscuous mode
[  389.796834][T12386] bridge1: left allmulticast mode
[  389.824415][T12386] macvlan2: left promiscuous mode
[  389.829888][T12386] macvlan2: left allmulticast mode
[  389.843748][T12386] vlan2: left promiscuous mode
[  389.857933][T12386] bond3: left promiscuous mode
[  389.883869][T12386] bridge3: left promiscuous mode
[  389.893982][T12405] netlink: 277 bytes leftover after parsing attributes in process `syz.1.2601'.
[  389.894338][T12402] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2600'.
[  389.905976][T12386] vlan2: left allmulticast mode
[  389.905997][T12386] bond3: left allmulticast mode
[  389.906012][T12386] bridge3: left allmulticast mode
[  389.908666][T12386] sit2: left allmulticast mode
[  389.980251][T12386] bond4: left promiscuous mode
[  389.985570][T12386] ipvlan2: left allmulticast mode
[  389.996209][T12386] ipvlan3: left allmulticast mode
[  390.006184][T12386] bond4: left allmulticast mode
[  390.062347][T12393] 8021q: adding VLAN 0 to HW filter on device team0
[  390.072524][T12393] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  390.105330][T12401] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2596'.
[  390.161116][ T8397] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  390.170633][ T8397] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  390.186094][ T8397] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  390.197439][ T8397] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  392.600853][T12453] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2612'.
[  394.767313][T12473] netlink: 'syz.1.2614': attribute type 27 has an invalid length.
[  394.863964][T12479] 0ªî{X¹¦: left allmulticast mode
[  395.442568][T12479] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  395.687026][T12492] loop0: detected capacity change from 0 to 1024
[  395.695795][T12492] EXT4-fs (loop0): bad geometry: bigalloc file system with non-zero first_data_block
[  395.695795][T12492] 
[  396.116978][T12473] wg2: left promiscuous mode
[  396.196597][T12473] wg2: left allmulticast mode
[  396.248967][T12473] hsr0: left promiscuous mode
[  396.285298][T12473] xfrm1: left promiscuous mode
[  396.320668][T12473] xfrm1: left allmulticast mode
[  396.370067][T12473] vlan2: left allmulticast mode
[  396.411522][T12473] bond4: left allmulticast mode
[  396.456954][T12473] geneve2: left allmulticast mode
[  396.596966][T12473] bond5: left promiscuous mode
[  396.936733][T12473] bond5: left allmulticast mode
[  396.955205][T12473] bridge1: left promiscuous mode
[  396.961947][T12473] bridge1: left allmulticast mode
[  396.977883][T12473] bridge2: left promiscuous mode
[  396.982954][T12473] bridge2: left allmulticast mode
[  396.994777][T12473] veth11: left promiscuous mode
[  397.006031][T12473] veth11: left allmulticast mode
[  397.016302][T12473] vlan3: left allmulticast mode
[  397.027616][T12473] bridge3: left allmulticast mode
[  397.038172][T12473] ipvlan2: left allmulticast mode
[  397.053490][T12473] bond8: left allmulticast mode
[  397.079243][T12473] bridge4: left allmulticast mode
[  397.089451][T12473] veth15: left allmulticast mode
[  397.106266][T12473] veth17: left allmulticast mode
[  397.128112][T12473] bond10: left promiscuous mode
[  397.137443][T12473] bridge5: left promiscuous mode
[  397.154754][T12473] ipvlan3: left allmulticast mode
[  397.161888][T12473] bond10: left allmulticast mode
[  397.171414][T12473] bridge5: left allmulticast mode
[  397.338026][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  397.351312][T12502] loop0: detected capacity change from 0 to 1024
[  397.360395][T12502] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  397.366707][T12492] openvswitch: netlink: Missing key (keys=1000040, expected=2000)
[  397.372621][T12502] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.2632: Invalid block bitmap block 0 in block_group 0
[  397.394827][T12502] fserror_report: 2 callbacks suppressed
[  397.394844][T12502] loop0: lost filesystem error report for type 5 error -117
[  397.400914][T12502] Quota error (device loop0): write_blk: dquota write failed
[  397.403139][T12473] bond11: left promiscuous mode
[  397.408269][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  397.408288][    C0] EXT4-fs (loop0): initial error at time 2000000007: ext4_read_block_bitmap_nowait:483
[  397.408312][    C0] EXT4-fs (loop0): last error at time 2000000007: ext4_read_block_bitmap_nowait:483
[  397.408518][T12502] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  397.408570][T12502] EXT4-fs error (device loop0): ext4_acquire_dquot:7028: comm syz.0.2632: Failed to acquire dquot type 0
[  397.408635][T12502] loop0: lost filesystem error report for type 5 error -117
[  397.408776][T12502] EXT4-fs error (device loop0): ext4_free_blocks:6724: comm syz.0.2632: Freeing blocks not in datazone - block = 0, count = 4096
[  397.408806][T12502] loop0: lost filesystem error report for type 5 error -117
[  397.409012][T12502] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.2632: Invalid inode bitmap blk 0 in block_group 0
[  397.409039][T12502] loop0: lost filesystem error report for type 5 error -117
[  397.409107][T12502] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem
[  397.409144][T12502] loop0: lost filesystem error report for type 5 error -117
[  397.422303][T12502] EXT4-fs (loop0): 1 orphan inode deleted
[  397.422719][T12502] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  397.457781][ T7872] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-7
[  397.481112][T12473] bridge0: left promiscuous mode
[  397.516783][ T7872] EXT4-fs error (device loop0): ext4_release_dquot:7064: comm kworker/u8:12: Failed to release dquot type 0
[  397.593836][T12473] ipvlan4: left allmulticast mode
[  397.600227][T12473] ipvlan5: left allmulticast mode
[  397.605302][T12473] bond11: left allmulticast mode
[  397.612358][T12473] bridge0: left allmulticast mode
[  397.619746][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  397.631973][T12487] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2614'.
[  397.647611][T12500] bridge4: entered promiscuous mode
[  397.654661][T12500] bridge4: entered allmulticast mode
[  400.217606][T12525] loop1: detected capacity change from 0 to 1024
[  400.289639][T12525] EXT4-fs: Ignoring removed nomblk_io_submit option
[  400.342999][T12525] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869)
[  400.416217][T12525] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  400.447064][T12531] netlink: 'syz.0.2631': attribute type 14 has an invalid length.
[  400.460892][T12526] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2628'.
[  400.510928][T12525] EXT4-fs (loop1): filesystem has both journal inode and journal device!
[  401.578699][T12535] loop0: detected capacity change from 0 to 512
[  401.638282][T12535] EXT4-fs: Ignoring removed i_version option
[  401.647796][T12535] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  401.781877][T12535] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2634: invalid indirect mapped block 4294967295 (level 1)
[  401.789810][T12549] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2638'.
[  401.850767][T12535] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  401.857740][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  401.873545][    C0] EXT4-fs (loop0): initial error at time 2000000011: ext4_free_branches:1023: inode 11
[  401.883293][    C0] EXT4-fs (loop0): last error at time 2000000011: ext4_free_branches:1023: inode 11
[  401.914342][T12535] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2634: invalid indirect mapped block 4294967295 (level 1)
[  401.997856][T12535] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  402.013065][T12535] EXT4-fs (loop0): 2 truncates cleaned up
[  402.124495][T12535] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  402.308987][T12555] loop1: detected capacity change from 0 to 512
[  402.352906][T12559] netlink: 'syz.3.2643': attribute type 1 has an invalid length.
[  402.370051][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  402.395733][T12559] 8021q: adding VLAN 0 to HW filter on device bond10
[  402.419030][T12555] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  402.429772][T12561] delete_channel: no stack
[  402.544994][T12555] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.2639: invalid block
[  402.621329][T12572] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2645'.
[  402.636299][T12559] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2643'.
[  402.636536][T12555] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  402.661938][T12567] bond10: (slave veth9): Enslaving as an active interface with a down link
[  402.688018][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  402.695605][    C0] EXT4-fs (loop1): initial error at time 2000000012: ext4_get_branch:178: inode 11: block 4294967295
[  402.699176][T12555] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.2639: invalid indirect mapped block 4294967295 (level 1)
[  402.708308][    C0] EXT4-fs (loop1): last error at time 2000000012: ext4_get_branch:178: inode 11: block 4294967295
[  402.713317][T12571] bond10: (slave dummy0): making interface the new active one
[  402.713810][T12571] dummy0: entered promiscuous mode
[  402.714059][T12571] bond10: (slave dummy0): Enslaving as an active interface with an up link
[  402.898709][T12576] loop0: detected capacity change from 0 to 256
[  402.974742][T12576] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  403.063235][T12555] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  403.064119][T12559] bond10: (slave dummy0): Releasing active interface
[  403.068264][T12555] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.2639: invalid indirect mapped block 4294967295 (level 1)
[  403.084335][T12559] dummy0 (unregistering): left promiscuous mode
[  403.174618][T12555] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  403.177639][T12555] EXT4-fs (loop1): 2 truncates cleaned up
[  403.274319][T12555] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  403.311209][T12575] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008)
[  403.319626][T12575] FAT-fs (loop0): Filesystem has been set read-only
[  403.326567][T12575] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008)
[  403.428055][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  403.499856][T12584] loop0: detected capacity change from 0 to 512
[  403.525704][T12584] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  403.544284][T12586] loop1: detected capacity change from 0 to 512
[  403.553536][T12584] EXT4-fs error (device loop0): xattr_find_entry:337: inode #15: comm syz.0.2651: corrupted xattr entries
[  403.581543][T12584] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  403.581821][T12584] EXT4-fs (loop0): 1 truncate cleaned up
[  403.591145][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  403.591164][    C0] EXT4-fs (loop0): initial error at time 2000000013: xattr_find_entry:337: inode 15
[  403.591196][    C0] EXT4-fs (loop0): last error at time 2000000013: xattr_find_entry:337: inode 15
[  403.696855][T12584] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  404.041277][   T28] audit: type=1400 audit(2000000013.780:7799): avc:  denied  { watch } for  pid=12582 comm="syz.0.2651" path="/506/file0" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  404.070933][   T28] audit: type=1400 audit(2000000013.790:7800): avc:  denied  { rename } for  pid=12582 comm="syz.0.2651" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  404.195002][T12595] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2654'.
[  404.223833][T12598] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2663'.
[  404.328270][T12601] loop1: detected capacity change from 0 to 128
[  404.368834][T12601] msdos: Bad value for 'gid'
[  404.386897][T12601] msdos: Bad value for 'gid'
[  404.431002][T12601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2655'.
[  404.505544][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  404.537258][T12603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2655'.
[  404.561271][T12603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2655'.
[  404.579172][T12603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2655'.
[  404.588193][T12598] Set syz1 is full, maxelem 65536 reached
[  404.660039][T12603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2655'.
[  404.803162][T12616] loop0: detected capacity change from 0 to 512
[  404.830757][T12609] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2659'.
[  405.484249][T12616] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  405.574102][T12616] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2661: invalid indirect mapped block 4294967295 (level 1)
[  405.634294][T12616] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  405.638411][T12616] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2661: invalid indirect mapped block 4294967295 (level 1)
[  405.649731][    C1] EXT4-fs (loop0): error count since last fsck: 1
[  405.650143][    C1] EXT4-fs (loop0): initial error at time 2000000015: ext4_free_branches:1023: inode 11
[  405.650431][    C1] EXT4-fs (loop0): last error at time 2000000015: ext4_free_branches:1023: inode 11
[  405.948096][T12616] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  405.952230][T12616] EXT4-fs (loop0): 2 truncates cleaned up
[  406.311700][T12616] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  406.571822][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  406.924761][T12653] random: crng reseeded on system resumption
[  407.500964][T12658] loop0: detected capacity change from 0 to 128
[  407.514069][T12658] msdos: Bad value for 'gid'
[  407.541254][T12658] msdos: Bad value for 'gid'
[  407.571831][T12658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2672'.
[  407.603359][T12658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2672'.
[  407.928339][T12664] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=46724 sclass=netlink_xfrm_socket pid=12664 comm=syz.3.2674
[  408.680120][T12688] loop0: detected capacity change from 0 to 1764
[  409.424073][   T28] audit: type=1400 audit(2000000019.200:7801): avc:  denied  { lock } for  pid=12699 comm="syz.4.2683" path="socket:[38640]" dev="sockfs" ino=38640 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  410.740804][T12716] loop1: detected capacity change from 0 to 512
[  410.755112][T12709] __nla_validate_parse: 3 callbacks suppressed
[  410.755227][T12709] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2687'.
[  410.782428][T12716] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  410.806379][T12709] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2687'.
[  410.825029][T12709] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2687'.
[  410.854224][T12716] EXT4-fs error (device loop1): xattr_find_entry:337: inode #15: comm syz.1.2685: corrupted xattr entries
[  410.867314][T12709] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2687'.
[  410.899573][T12716] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  410.902659][T12716] EXT4-fs (loop1): 1 truncate cleaned up
[  410.911931][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  410.911950][    C1] EXT4-fs (loop1): initial error at time 2000000020: xattr_find_entry:337: inode 15
[  410.911991][    C1] EXT4-fs (loop1): last error at time 2000000020: xattr_find_entry:337: inode 15
[  410.997089][T12709] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2687'.
[  411.900610][T12716] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  412.089918][T12728] delete_channel: no stack
[  412.137801][   T28] audit: type=1400 audit(2000000021.860:7802): avc:  denied  { write } for  pid=12728 comm="syz.2.2691" path="socket:[37601]" dev="sockfs" ino=37601 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  412.565743][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  412.657775][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  412.973861][   T28] audit: type=1400 audit(2000000022.750:7803): avc:  denied  { create } for  pid=12748 comm="syz.3.2699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  413.010050][T12747] lo speed is unknown, defaulting to 1000
[  413.030051][T12747] lo speed is unknown, defaulting to 1000
[  413.049610][T12747] lo speed is unknown, defaulting to 1000
[  413.298210][T12747] infiniband syU×: set down
[  413.302875][ T4864] lo speed is unknown, defaulting to 1000
[  413.318423][T12747] infiniband syU×: added lo
[  413.345611][T12747] RDS/IB: syU×: added
[  413.350481][T12747] smc: adding ib device syU× with port count 1
[  413.356927][T12747] smc:    ib device syU× port 1 has no pnetid
[  413.363193][ T4864] lo speed is unknown, defaulting to 1000
[  413.369409][T12747] lo speed is unknown, defaulting to 1000
[  413.416945][T12747] lo speed is unknown, defaulting to 1000
[  413.611807][T12747] lo speed is unknown, defaulting to 1000
[  413.853996][   T28] audit: type=1400 audit(2000000023.630:7804): avc:  denied  { setopt } for  pid=12759 comm="syz.0.2702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  413.876146][T12747] lo speed is unknown, defaulting to 1000
[  413.912637][T12760] loop0: detected capacity change from 0 to 2048
[  413.953415][T12760] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  413.993275][T12760] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  414.001140][T12747] lo speed is unknown, defaulting to 1000
[  414.060553][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  414.715903][T12768] netlink: 'syz.1.2706': attribute type 14 has an invalid length.
[  415.872005][T12780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2703'.
[  416.506760][T12781] lo speed is unknown, defaulting to 1000
[  417.118814][T12801] lo speed is unknown, defaulting to 1000
[  417.339161][T12809] loop0: detected capacity change from 0 to 512
[  417.396145][T12809] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  417.599032][T12821] netlink: 'syz.3.2718': attribute type 14 has an invalid length.
[  418.461557][T12817] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2717'.
[  418.871803][T12840] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2723'.
[  418.911506][T12839] loop1: detected capacity change from 0 to 2048
[  418.925178][T12841] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2720'.
[  419.044914][T12839] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  419.058499][T12839] ext4 filesystem being mounted at /537/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  419.077808][T12832] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2721: bg 0: block 345: padding at end of block bitmap is not set
[  419.093440][T12832] EXT4-fs (loop1): Remounting filesystem read-only
[  419.131272][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  419.136757][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  419.176327][T12849] loop1: detected capacity change from 0 to 128
[  419.208942][T12849] msdos: Bad value for 'gid'
[  419.218902][T12849] msdos: Bad value for 'gid'
[  419.228770][T12849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2735'.
[  419.330382][T12849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2735'.
[  419.352212][T12849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2735'.
[  419.398720][T12849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2735'.
[  419.426375][T12849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2735'.
[  420.616475][T12870] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2727'.
[  420.836019][   T28] audit: type=1400 audit(2000000030.600:7805): avc:  denied  { setattr } for  pid=12872 comm="syz.1.2729" name="PACKET" dev="sockfs" ino=38924 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  422.073913][T12906] loop0: detected capacity change from 0 to 512
[  422.153257][T12906] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  422.176549][T12910] __nla_validate_parse: 2 callbacks suppressed
[  422.176566][T12910] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2744'.
[  422.177351][T12906] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.2743: invalid block
[  422.255940][T12906] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  422.258028][T12906] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2743: invalid indirect mapped block 4294967295 (level 1)
[  422.267780][    C1] EXT4-fs (loop0): error count since last fsck: 1
[  422.267861][    C1] EXT4-fs (loop0): initial error at time 2000000032: ext4_get_branch:178: inode 11: block 4294967295
[  422.268060][    C1] EXT4-fs (loop0): last error at time 2000000032: ext4_get_branch:178: inode 11: block 4294967295
[  422.305020][T12917] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2746'.
[  422.488123][T12906] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  422.492834][T12906] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2743: invalid indirect mapped block 4294967295 (level 1)
[  422.567321][T12906] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  422.573423][T12906] EXT4-fs (loop0): 2 truncates cleaned up
[  422.582016][T12921] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2747'.
[  422.628382][T12906] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  422.685014][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  422.704101][T12924] netlink: 'syz.0.2748': attribute type 14 has an invalid length.
[  422.989146][T12925] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.2745'.
[  423.001104][T12925] netlink: zone id is out of range
[  423.007123][T12925] netlink: zone id is out of range
[  423.041998][T12925] netlink: zone id is out of range
[  423.185657][T12925] netlink: set zone limit has 8 unknown bytes
[  423.336533][T12931] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2751'.
[  423.355381][T12931] bridge6: port 1(veth0_to_bond) entered blocking state
[  423.363298][T12931] bridge6: port 1(veth0_to_bond) entered disabled state
[  423.370845][T12931] veth0_to_bond: entered allmulticast mode
[  423.378738][T12931] veth0_to_bond: entered promiscuous mode
[  423.389869][T12931] vlan4: entered allmulticast mode
[  423.395139][T12931] ip6gretap0: entered allmulticast mode
[  423.400966][T12931] bridge6: port 2(vlan4) entered blocking state
[  423.407308][T12931] bridge6: port 2(vlan4) entered disabled state
[  423.414497][T12931] vlan4: entered promiscuous mode
[  423.424807][T12931] ip6gretap0: entered promiscuous mode
[  423.576132][T12932] loop0: detected capacity change from 0 to 8192
[  423.588169][T12941] netlink: 'syz.4.2764': attribute type 16 has an invalid length.
[  423.596781][T12941] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2764'.
[  423.607309][T12941] 8021q: adding VLAN 0 to HW filter on device bond0
[  423.809496][T12932]  loop0: p1 < > p2 p4 < p5 >
[  423.921044][T12932] loop0: partition table partially beyond EOD, truncated
[  423.947128][T12943] loop1: detected capacity change from 0 to 1024
[  423.978600][T12943] EXT4-fs (loop1): filesystem too large to mount safely on this system
[  424.041425][T12932] loop0: p1 start 134217728 is beyond EOD, truncated
[  424.094416][T12932] loop0: p2 size 591360 extends beyond EOD, truncated
[  424.102746][T12932] loop0: p5 size 591360 extends beyond EOD, truncated
[  424.595025][T12956] loop1: detected capacity change from 0 to 1024
[  424.654978][T12956] EXT4-fs (loop1): filesystem too large to mount safely on this system
[  425.280925][T12958] loop0: detected capacity change from 0 to 128
[  426.046529][T12958] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  426.060132][T12958] ext4 filesystem being mounted at /525/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  426.405803][T12974] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2760'.
[  427.250556][ T3317] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  427.251949][T12982] loop1: detected capacity change from 0 to 512
[  427.620365][T12982] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  427.743837][T12982] EXT4-fs error (device loop1): xattr_find_entry:337: inode #15: comm syz.1.2767: corrupted xattr entries
[  427.785933][T12982] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  427.786272][T12982] EXT4-fs (loop1): 1 truncate cleaned up
[  427.795633][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  427.795654][    C0] EXT4-fs (loop1): initial error at time 2000000037: xattr_find_entry:337: inode 15
[  427.795685][    C0] EXT4-fs (loop1): last error at time 2000000037: xattr_find_entry:337: inode 15
[  427.992670][T12994] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2768'.
[  428.015942][T12982] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  428.538179][T13010] loop0: detected capacity change from 0 to 512
[  428.613682][T13010] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  428.724386][T13010] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  428.741653][T13010] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2774: bg 0: block 248: padding at end of block bitmap is not set
[  428.759976][T13010] loop0: lost filesystem error report for type 5 error -117
[  428.768139][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  428.784530][    C0] EXT4-fs (loop0): last error at time 2000000038: ext4_validate_block_bitmap:441
[  428.815851][T13010] Quota error (device loop0): write_blk: dquota write failed
[  428.824940][T13010] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota
[  428.837299][T13010] EXT4-fs error (device loop0): ext4_acquire_dquot:7028: comm syz.0.2774: Failed to acquire dquot type 1
[  428.867633][T13010] loop0: lost filesystem error report for type 5 error -28
[  428.868454][T13010] EXT4-fs (loop0): 1 truncate cleaned up
[  428.897759][T13010] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  428.939130][T13010] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 2 index 2
[  428.969400][T13010] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 131074
[  428.980852][T13010] EXT4-fs error (device loop0): ext4_acquire_dquot:7028: comm syz.0.2774: Failed to acquire dquot type 1
[  429.260633][T13010] syz.0.2774 (13010) used greatest stack depth: 7616 bytes left
[  429.563180][T12999] xt_hashlimit: max too large, truncated to 1048576
[  429.591397][T13022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2776'.
[  429.837105][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  430.153427][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  430.496640][T13028] loop1: detected capacity change from 0 to 256
[  430.552432][T13028] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  430.705484][T13038] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2781'.
[  430.718980][T13030] loop0: detected capacity change from 0 to 4096
[  430.789331][T13030] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  430.847170][T13034] bridge4: left promiscuous mode
[  430.858122][T13034] bridge4: left allmulticast mode
[  430.880711][T13038] geneve2: entered promiscuous mode
[  430.932654][T13045] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2780'.
[  431.001060][T13036] lo speed is unknown, defaulting to 1000
[  431.333926][T13027] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008)
[  431.438638][T13027] FAT-fs (loop1): Filesystem has been set read-only
[  431.460137][T13027] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008)
[  431.491740][   T36] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  431.517141][   T36] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  431.532252][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  431.549713][   T36] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  431.559320][   T36] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  431.585698][T13053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2785'.
[  431.692701][T13053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2785'.
[  431.757281][T13053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2785'.
[  431.804493][T13053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2785'.
[  432.068217][T13053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2785'.
[  432.294492][T13068] lo speed is unknown, defaulting to 1000
[  432.331304][T13074] bridge0: entered promiscuous mode
[  432.359712][T13074] bridge0: entered allmulticast mode
[  432.368098][   T28] audit: type=1326 audit(2000000042.140:7806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13071 comm="syz.4.2787" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f179ecec819 code=0x0
[  432.618783][T13064] lo speed is unknown, defaulting to 1000
[  435.080313][T13113] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  435.157028][T13116] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=13116 comm=syz.4.2798
[  435.213893][T13113] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  435.397155][T13113] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  436.221123][T13113] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  436.323197][T13130] netlink: 'syz.0.2804': attribute type 14 has an invalid length.
[  436.350010][ T8404] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  436.372048][ T8404] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  436.395083][ T8404] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  436.446368][T13134] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2805'.
[  436.465656][ T8404] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  436.486839][T13134] bridge6: port 1(veth0_to_bond) entered blocking state
[  436.521274][T13134] bridge6: port 1(veth0_to_bond) entered disabled state
[  436.547098][T13134] veth0_to_bond: entered allmulticast mode
[  436.575271][T13134] veth0_to_bond: entered promiscuous mode
[  436.599307][T13138] vlan0: entered allmulticast mode
[  436.605053][T13138] ip6gretap0: entered allmulticast mode
[  436.735793][T13138] bridge6: port 2(vlan0) entered blocking state
[  436.753936][T13138] bridge6: port 2(vlan0) entered disabled state
[  436.794596][T13138] vlan0: entered promiscuous mode
[  436.825142][T13138] ip6gretap0: entered promiscuous mode
[  436.976687][T13141] lo speed is unknown, defaulting to 1000
[  437.180266][T13145] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2818'.
[  437.357921][T13142] lo speed is unknown, defaulting to 1000
[  438.185190][T13137] lo speed is unknown, defaulting to 1000
[  438.228292][T13151] loop0: detected capacity change from 0 to 4096
[  438.246088][T13151] EXT4-fs: Ignoring removed nomblk_io_submit option
[  438.896030][T13151] EXT4-fs (loop0): stripe (97) is not aligned with cluster size (16), stripe is disabled
[  438.945640][T13159] bond8: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  438.959357][T13159] bond8 (unregistering): Released all slaves
[  439.021249][T13151] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842e018, mo2=0002]
[  439.148816][T13151] System zones: 0-5
[  439.253728][T13151] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  439.332055][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  439.505854][T13174] loop0: detected capacity change from 0 to 512
[  439.530144][T13174] EXT4-fs: inline encryption not supported
[  439.565669][T13174] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  439.613102][T13178] netlink: 'syz.1.2816': attribute type 14 has an invalid length.
[  439.622911][T13174] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal
[  439.902840][T13190] loop1: detected capacity change from 0 to 512
[  439.973473][T13190] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  440.002830][T13185] lo speed is unknown, defaulting to 1000
[  440.004468][T13190] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  440.070758][T13190] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended
[  440.105004][T13190] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  440.136937][T13190] System zones: 0-2, 18-18, 34-35
[  440.143820][T13190] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  440.637161][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  440.652865][   T28] audit: type=1400 audit(2000000050.430:7807): avc:  denied  { ioctl } for  pid=13200 comm="syz.0.2834" path="socket:[40561]" dev="sockfs" ino=40561 ioctlcmd=0x5870 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  440.715367][T13206] lo speed is unknown, defaulting to 1000
[  440.794849][   T28] audit: type=1400 audit(2000000050.570:7808): avc:  denied  { accept } for  pid=13200 comm="syz.0.2834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  440.850271][T13207] lo speed is unknown, defaulting to 1000
[  440.875610][   T28] audit: type=1400 audit(2000000050.650:7809): avc:  denied  { accept } for  pid=13213 comm="syz.2.2828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  440.969308][T13206] loop1: detected capacity change from 0 to 512
[  441.002270][T13206] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  441.096414][T13226] netlink: 'syz.4.2830': attribute type 14 has an invalid length.
[  441.242658][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  441.289274][   T28] audit: type=1400 audit(2000000051.060:7810): avc:  denied  { listen } for  pid=13233 comm="syz.1.2833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  441.369208][T13237] netlink: 'syz.1.2833': attribute type 8 has an invalid length.
[  441.688707][T13248] loop1: detected capacity change from 0 to 256
[  441.913967][T13248] FAT-fs (loop1): Directory bread(block 64) failed
[  441.921059][T13248] FAT-fs (loop1): Directory bread(block 65) failed
[  441.928764][T13248] FAT-fs (loop1): Directory bread(block 66) failed
[  441.935557][T13248] FAT-fs (loop1): Directory bread(block 67) failed
[  441.942267][T13248] FAT-fs (loop1): Directory bread(block 68) failed
[  441.948950][T13248] FAT-fs (loop1): Directory bread(block 69) failed
[  441.955675][T13248] FAT-fs (loop1): Directory bread(block 70) failed
[  441.962968][T13248] FAT-fs (loop1): Directory bread(block 71) failed
[  441.970198][T13248] FAT-fs (loop1): Directory bread(block 72) failed
[  441.976912][T13248] FAT-fs (loop1): Directory bread(block 73) failed
[  442.727777][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  443.389473][T13259] loop0: detected capacity change from 0 to 512
[  443.448799][T13259] EXT4-fs: Ignoring removed oldalloc option
[  443.518434][T13259] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  443.555660][T13259] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.2841: iget: bad i_size value: 38620345925642
[  443.608384][T13259] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  443.608667][T13259] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.2841: couldn't read orphan inode 15 (err -117)
[  443.617968][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  443.617984][    C0] EXT4-fs (loop0): initial error at time 2000000053: ext4_orphan_get:1397: inode 15
[  443.618025][    C0] EXT4-fs (loop0): last error at time 2000000053: ext4_orphan_get:1397: inode 15
[  443.810863][T13259] loop0: lost filesystem error report for type 5 error -117
[  443.811658][T13259] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  443.916764][   T28] audit: type=1400 audit(2000000053.690:7811): avc:  denied  { create } for  pid=13257 comm="syz.0.2841" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  443.989168][T13258] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2841'.
[  444.067169][T13267] netlink: 'syz.3.2843': attribute type 14 has an invalid length.
[  444.097106][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  444.141355][   T28] audit: type=1400 audit(2000000053.760:7812): avc:  denied  { rmdir } for  pid=13257 comm="syz.0.2841" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  444.387296][T13283] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=13283 comm=syz.1.2848
[  444.403491][T13278] lo speed is unknown, defaulting to 1000
[  444.507252][T13283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  444.525559][T13283] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  444.540254][T13285] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2849'.
[  444.553482][T13288] loop0: detected capacity change from 0 to 512
[  444.557208][T13283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  444.584184][T13283] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  444.598385][T13288] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  444.853219][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  446.276533][T13309] loop0: detected capacity change from 0 to 512
[  446.887706][T13309] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  447.425908][T13319] netlink: 'syz.1.2857': attribute type 14 has an invalid length.
[  447.557183][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  447.636932][T13329] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2860'.
[  447.781729][T13323] bridge0: left promiscuous mode
[  447.786831][T13323] bridge0: left allmulticast mode
[  447.792927][T13323] ip6gre1: left allmulticast mode
[  447.918671][T13338] lo speed is unknown, defaulting to 1000
[  448.283025][T13351] bond7: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  448.489686][T13351] bond7 (unregistering): Released all slaves
[  448.898808][T13345] loop0: detected capacity change from 0 to 1024
[  448.949390][T13345] EXT4-fs: Mount option(s) incompatible with ext3
[  448.959968][T13358] loop1: detected capacity change from 0 to 512
[  448.971181][T13358] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  449.150177][T13366] netlink: 'syz.3.2870': attribute type 14 has an invalid length.
[  449.160176][T13358] EXT4-fs error (device loop1): xattr_find_entry:337: inode #15: comm syz.1.2868: corrupted xattr entries
[  449.175779][T13358] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  449.180921][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  449.197702][    C1] EXT4-fs (loop1): initial error at time 2000000058: xattr_find_entry:337: inode 15
[  449.205607][T13358] EXT4-fs (loop1): 1 truncate cleaned up
[  449.207261][    C1] EXT4-fs (loop1): last error at time 2000000058: xattr_find_entry:337: inode 15
[  449.214135][T13358] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  449.787810][T13345] loop0: detected capacity change from 0 to 512
[  449.916846][T13345] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  449.977385][T13345] ext4 filesystem being mounted at /545/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  450.228631][T13389] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2874'.
[  450.346321][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  450.563726][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  451.096938][T13406] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  451.586053][T13415] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2881'.
[  451.617011][T13415] bridge5: port 1(veth0_to_bond) entered blocking state
[  451.624539][T13415] bridge5: port 1(veth0_to_bond) entered disabled state
[  451.633153][T13415] veth0_to_bond: entered allmulticast mode
[  451.643911][T13415] veth0_to_bond: entered promiscuous mode
[  451.678600][T13415] vlan3: entered allmulticast mode
[  451.695109][T13419] loop1: detected capacity change from 0 to 1024
[  451.709229][T13415] ip6gretap0: entered allmulticast mode
[  451.719104][T13419] EXT4-fs: Ignoring removed nomblk_io_submit option
[  451.722121][T13415] bridge5: port 2(vlan3) entered blocking state
[  451.731414][T13419] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869)
[  451.758586][T13419] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  451.768520][T13415] bridge5: port 2(vlan3) entered disabled state
[  451.784002][T13419] EXT4-fs (loop1): filesystem has both journal inode and journal device!
[  451.795623][T13415] vlan3: entered promiscuous mode
[  451.809947][T13415] ip6gretap0: entered promiscuous mode
[  452.027844][   T28] audit: type=1326 audit(451.998:7813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13423 comm="syz.3.2886" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f940b98c819 code=0x0
[  452.672848][T13435] lo speed is unknown, defaulting to 1000
[  452.695854][T13439] loop0: detected capacity change from 0 to 1024
[  452.753065][T13439] EXT4-fs: Ignoring removed nomblk_io_submit option
[  452.873348][T13439] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869)
[  453.005387][T13445] loop1: detected capacity change from 0 to 512
[  453.080314][T13439] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  453.127339][T13445] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  453.381636][T13439] EXT4-fs (loop0): filesystem has both journal inode and journal device!
[  453.602730][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  454.084653][T13454] loop1: detected capacity change from 0 to 1024
[  454.193668][T13454] EXT4-fs: Mount option(s) incompatible with ext3
[  455.222925][T13454] loop1: detected capacity change from 0 to 512
[  456.338259][T13454] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  457.333766][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  457.943600][T13548] loop1: detected capacity change from 0 to 1024
[  457.955972][T13548] EXT4-fs: Ignoring removed nomblk_io_submit option
[  458.018570][T13548] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869)
[  458.029934][T13549] lo speed is unknown, defaulting to 1000
[  458.046592][T13548] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  458.057112][T13548] EXT4-fs (loop1): filesystem has both journal inode and journal device!
[  459.178554][T13553] lo speed is unknown, defaulting to 1000
[  460.032385][T13575] lo speed is unknown, defaulting to 1000
[  460.057431][T13568] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13568 comm=syz.0.2912
[  460.116075][T13578] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  460.291088][T13578] tipc: Failed to remove unknown binding: 66,1,1/0:1787116887/1787116889
[  460.312990][T13581] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2915'.
[  460.341002][T13581] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2915'.
[  460.359192][   T28] audit: type=1400 audit(460.338:7814): avc:  denied  { create } for  pid=13580 comm="syz.4.2915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  460.402689][   T28] audit: type=1400 audit(460.358:7815): avc:  denied  { write } for  pid=13580 comm="syz.4.2915" path="socket:[41820]" dev="sockfs" ino=41820 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  460.701991][T13596] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  460.787491][T13592] lo speed is unknown, defaulting to 1000
[  460.788669][T13605] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2919'.
[  460.832829][T13602] syzkaller0: entered promiscuous mode
[  460.839444][T13602] syzkaller0: entered allmulticast mode
[  460.909278][T13596] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  460.951065][T13610] loop1: detected capacity change from 0 to 512
[  460.958683][T13610] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  460.975161][T13610] EXT4-fs error (device loop1): xattr_find_entry:337: inode #15: comm syz.1.2923: corrupted xattr entries
[  460.989403][T13610] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  460.989724][T13610] EXT4-fs (loop1): 1 truncate cleaned up
[  460.998918][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  460.998947][    C1] EXT4-fs (loop1): initial error at time 460: xattr_find_entry:337: inode 15
[  460.999001][    C1] EXT4-fs (loop1): last error at time 460: xattr_find_entry:337: inode 15
[  461.046204][T13610] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  461.062376][T13596] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  461.291108][T13596] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  461.882872][T13604] lo speed is unknown, defaulting to 1000
[  462.142435][ T8388] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  462.152525][ T8388] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  462.190055][ T8388] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  462.247214][ T1567] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  462.377330][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  462.621519][T13628] netlink: 'syz.1.2938': attribute type 14 has an invalid length.
[  464.039042][T13643] lo: Caught tx_queue_len zero misconfig
[  464.045164][T13643] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2933'.
[  464.360959][T13634] lo speed is unknown, defaulting to 1000
[  464.919302][T13648] x_tables: duplicate underflow at hook 1
[  464.977306][   T28] audit: type=1400 audit(464.948:7816): avc:  denied  { write } for  pid=13647 comm="syz.4.2934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  465.171047][T13664] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=13664 comm=syz.2.2936
[  465.285245][T13660] lo speed is unknown, defaulting to 1000
[  465.316449][T13658] ==================================================================
[  465.324673][T13658] BUG: KCSAN: data-race in rwsem_down_write_slowpath / rwsem_down_write_slowpath
[  465.333910][T13658] 
[  465.336343][T13658] write to 0xffffc90000e8b448 of 1 bytes by task 13660 on cpu 0:
[  465.344087][T13658]  rwsem_down_write_slowpath+0x3dd/0xac0
[  465.349835][T13658]  down_write+0xab/0xc0
[  465.354007][T13658]  kernfs_add_one+0x5a/0x280
[  465.358797][T13658]  __kernfs_create_file+0x145/0x180
[  465.364091][T13658]  sysfs_add_file_mode_ns+0x132/0x1b0
[  465.369472][T13658]  internal_create_group+0x441/0x9e0
[  465.374858][T13658]  sysfs_create_groups+0x3f/0xf0
[  465.379819][T13658]  ib_setup_port_attrs+0xe87/0x1400
[  465.385116][T13658]  add_one_compat_dev+0x297/0x390
[  465.390246][T13658]  rdma_dev_init_net+0x1b9/0x240
[  465.395197][T13658]  ops_init+0x22a/0x2e0
[  465.399362][T13658]  setup_net+0x9f/0x230
[  465.403547][T13658]  copy_net_ns+0x310/0x450
[  465.408062][T13658]  create_new_namespaces+0x20e/0x440
[  465.413377][T13658]  unshare_nsproxy_namespaces+0x115/0x150
[  465.419114][T13658]  ksys_unshare+0x402/0x700
[  465.423635][T13658]  __x64_sys_unshare+0x1f/0x30
[  465.428428][T13658]  x64_sys_call+0x1cef/0x3020
[  465.433218][T13658]  do_syscall_64+0x12c/0x3b0
[  465.437825][T13658]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  465.443828][T13658] 
[  465.446160][T13658] read to 0xffffc90000e8b448 of 1 bytes by task 13658 on cpu 1:
[  465.453805][T13658]  rwsem_down_write_slowpath+0x44f/0xac0
[  465.459451][T13658]  down_write+0xab/0xc0
[  465.463618][T13658]  kernfs_remove_by_name_ns+0x6b/0x110
[  465.469221][T13658]  sysfs_unmerge_group+0x80/0xb0
[  465.474179][T13658]  dpm_sysfs_remove+0x72/0x90
[  465.478968][T13658]  device_del+0x13d/0x790
[  465.483307][T13658]  netdev_unregister_kobject+0x24d/0x270
[  465.489081][T13658]  unregister_netdevice_many_notify+0x128b/0x1650
[  465.495605][T13658]  unregister_netdevice_queue+0x1cd/0x200
[  465.501426][T13658]  nsim_destroy+0x122/0x560
[  465.506048][T13658]  __nsim_dev_port_del+0xd2/0x140
[  465.511137][T13658]  nsim_dev_reload_destroy+0x1a3/0x2c0
[  465.516698][T13658]  nsim_dev_reload_down+0x67/0x80
[  465.521831][T13658]  devlink_reload+0xad/0x590
[  465.526541][T13658]  devlink_nl_reload_doit+0x503/0x960
[  465.532283][T13658]  genl_family_rcv_msg_doit+0x187/0x1f0
[  465.537934][T13658]  genl_rcv_msg+0x432/0x470
[  465.542655][T13658]  netlink_rcv_skb+0x123/0x220
[  465.547624][T13658]  genl_rcv+0x28/0x40
[  465.551703][T13658]  netlink_unicast+0x5a8/0x680
[  465.556595][T13658]  netlink_sendmsg+0x5c8/0x6f0
[  465.561379][T13658]  ____sys_sendmsg+0x563/0x5b0
[  465.566161][T13658]  ___sys_sendmsg+0x195/0x1e0
[  465.570875][T13658]  __x64_sys_sendmsg+0xd4/0x160
[  465.575829][T13658]  x64_sys_call+0x194c/0x3020
[  465.580621][T13658]  do_syscall_64+0x12c/0x3b0
[  465.585222][T13658]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  465.591150][T13658] 
[  465.593607][T13658] value changed: 0x00 -> 0x01
[  465.598293][T13658] 
[  465.600627][T13658] Reported by Kernel Concurrency Sanitizer on:
[  465.607072][T13658] CPU: 1 UID: 0 PID: 13658 Comm: syz.2.2936 Not tainted syzkaller #0 PREEMPT(full) 
[  465.616714][T13658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  465.627040][T13658] ==================================================================
[  467.236275][T13663] syz.4.2937 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0
[  467.252458][T13663] CPU: 0 UID: 0 PID: 13663 Comm: syz.4.2937 Not tainted syzkaller #0 PREEMPT(full) 
[  467.252485][T13663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  467.252496][T13663] Call Trace:
[  467.252517][T13663]  <TASK>
[  467.252526][T13663]  __dump_stack+0x1d/0x30
[  467.252612][T13663]  dump_stack_lvl+0x95/0xd0
[  467.252670][T13663]  dump_stack+0x15/0x1b
[  467.252691][T13663]  dump_header+0x80/0x240
[  467.252712][T13663]  oom_kill_process+0x295/0x350
[  467.252750][T13663]  out_of_memory+0x97d/0xb80
[  467.252846][T13663]  try_charge_memcg+0x62f/0xa10
[  467.252885][T13663]  __mem_cgroup_charge+0x65/0x150
[  467.252909][T13663]  shmem_get_folio_gfp+0x47b/0xd60
[  467.252940][T13663]  shmem_write_begin+0xfc/0x1f0
[  467.252999][T13663]  generic_perform_write+0x183/0x490
[  467.253043][T13663]  shmem_file_write_iter+0xc5/0xf0
[  467.253073][T13663]  iter_file_splice_write+0x6c4/0xa80
[  467.253106][T13663]  ? __pfx_iter_file_splice_write+0x10/0x10
[  467.253130][T13663]  direct_splice_actor+0x156/0x2a0
[  467.253150][T13663]  ? shmem_file_write_iter+0x61/0xf0
[  467.253253][T13663]  splice_direct_to_actor+0x311/0x670
[  467.253277][T13663]  ? __pfx_direct_splice_actor+0x10/0x10
[  467.253427][T13663]  do_splice_direct+0x119/0x1a0
[  467.253451][T13663]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  467.253472][T13663]  do_sendfile+0x382/0x650
[  467.253493][T13663]  __x64_sys_sendfile64+0x105/0x150
[  467.253580][T13663]  x64_sys_call+0x2dc4/0x3020
[  467.253689][T13663]  do_syscall_64+0x12c/0x3b0
[  467.253717][T13663]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  467.253737][T13663] RIP: 0033:0x7f179ecec819
[  467.253753][T13663] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  467.253851][T13663] RSP: 002b:00007f179d726028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  467.253870][T13663] RAX: ffffffffffffffda RBX: 00007f179ef66090 RCX: 00007f179ecec819
[  467.253882][T13663] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006
[  467.253893][T13663] RBP: 00007f179ed82c91 R08: 0000000000000000 R09: 0000000000000000
[  467.253904][T13663] R10: 000000000e3aa6ea R11: 0000000000000246 R12: 0000000000000000
[  467.253977][T13663] R13: 00007f179ef66128 R14: 00007f179ef66090 R15: 00007ffde9856988
[  467.253996][T13663]  </TASK>
[  467.254121][T13663] memory: usage 307200kB, limit 307200kB, failcnt 7755
[  467.496442][T13663] memory+swap: usage 344732kB, limit 9007199254740988kB, failcnt 0
[  467.504479][T13663] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0
[  467.511972][T13663] Memory cgroup stats for /syz4:
[  467.512255][T13663] cache 0
[  467.520853][T13663] rss 0
[  467.523894][T13663] shmem 0
[  467.527073][T13663] mapped_file 0
[  467.530982][T13663] dirty 0
[  467.533941][T13663] writeback 0
[  467.537390][T13663] workingset_refault_anon 5302
[  467.542423][T13663] workingset_refault_file 4419
[  467.547416][T13663] swap 38432768
[  467.551579][T13663] swapcached 108052480
[  467.555657][T13663] pgpgin 431438
[  467.559321][T13663] pgpgout 431436
[  467.562902][T13663] pgfault 469681
[  467.566462][T13663] pgmajfault 875
[  467.570221][T13663] inactive_anon 0
[  467.574020][T13663] active_anon 8192
[  467.578581][T13663] inactive_file 0
[  467.582326][T13663] active_file 0
[  467.585946][T13663] unevictable 0
[  467.589530][T13663] hierarchical_memory_limit 314572800
[  467.594917][T13663] hierarchical_memsw_limit 9223372036854771712
[  467.601243][T13663] total_cache 0
[  467.604729][T13663] total_rss 0
[  467.608808][T13663] total_shmem 0
[  467.612389][T13663] total_mapped_file 0
[  467.616390][T13663] total_dirty 0
[  467.619971][T13663] total_writeback 0
[  467.623877][T13663] total_workingset_refault_anon 5302
[  467.629474][T13663] total_workingset_refault_file 4419
[  467.634859][T13663] total_swap 38432768
[  467.639323][T13663] total_swapcached 108052480
[  467.644032][T13663] total_pgpgin 431438
[  467.648382][T13663] total_pgpgout 431436
[  467.652562][T13663] total_pgfault 469681
[  467.656727][T13663] total_pgmajfault 875
[  467.660853][T13663] total_inactive_anon 0
[  467.665059][T13663] total_active_anon 8192
[  467.669917][T13663] total_inactive_file 0
[  467.674363][T13663] total_active_file 0
[  467.678460][T13663] total_unevictable 0
[  467.682592][T13663] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.2937,pid=13661,uid=0
[  467.698319][T13663] Memory cgroup out of memory: Killed process 13661 (syz.4.2937) total-vm:96344kB, anon-rss:1228kB, file-rss:22344kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:0