last executing test programs:

3.272140043s ago: executing program 4 (id=189):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000002980)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
fstat(r0, &(0x7f0000000000))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0)
ftruncate(r1, 0x8800000)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRES16=0x0, @ANYRES16, @ANYRES8], 0x1, 0x36e, &(0x7f0000000c00)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0xc0185879, &(0x7f0000000040)={@desc={0x1, 0x0, @desc4}})

3.142271214s ago: executing program 4 (id=191):
syz_emit_ethernet(0x60, &(0x7f00000002c0)={@link_local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x2a, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev, @dev, [{0x19}]}}}}}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0xc4, 0x2, 0x1, 0x3, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_NAT_DST={0xb0, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_PROTO={0x4c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @remote}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast2}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0xa880}, 0x24000840)

3.085271605s ago: executing program 2 (id=195):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xb}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000900)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0)

3.027756176s ago: executing program 4 (id=197):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7a}}, {@init_itable}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$eJzs289vFFUcAPDvzNJiKdiK+IOCWkVj44+WFlQOXjSaeNDERA94rG0hlYUaWhMhjVZj8GhIvBuPJv4FnvRi1JOJV70bEmJ6AT2tmd2ZdrvdLW3ZdtH9fJKB92be5n2/O/N238zrBtC1hrN/koj9EfF7RAzUqmsbDNf+u7m8OPX38uJUEpXKW38l1XY3lheniqbF6/rzykgakX6WxJEm/c5funxuslyeuZjXxxbOvz82f+nys7PnJ8/OnJ25MHHq1MkT4y88P/FcW/LMYrox9NHc0cOvvXP1janTV9/9+dukyL8hjzYZ3ujgE5VKm7vrrAN15WRPBwNhS0oRkZ2unur4H4hSrJ68gXj1044GB+yoSqVS6W99eKkC/I8l0ekIgM4ovuiz+99i26Wpxx3h+ku1G6As75v5Fvm8KM3b9DTc37bTcEScXvrnq2yLnXkOAQCwxvfZ/OeZZvO/NO6va3d3vjY0GBH3RMTBiLg3Ig5FxH0R1bYPRMSDW+y/cZFk/fwnvbatxDYpm/+9mK9t1c//svxzg6W8dqCaf09yZrY8czx/T0aiZ29WH9+gjx9e+e2LVsfq53/ZlvVfzAXzOK7t2bv2NdOTC5O3k3O9659EDO1pln+yshKQRMThiBjaZh+zT31ztNWxW+e/gTasM1W+jniydv6XoiH/QrLx+uTYXVGeOT5WXBXr/fLrlTdb9X9b+bdBdv73Nb3+V/IfTOrXa+e33seVPz5veU+z3eu/N3m7Wu7N9304ubBwcTyiN3m9FnT9/onV1xb1on2W/8ix5uP/YKy+E0ciIruIH4qIhyPikTz2RyPisYg4tkH+P738+Hvbz39nZflPb+n8rxZ6o3FP80Lp3I/frel0cCv5Z+f/ZLU0ku/ZzOffZuLa3tUMAAAA/z1pROyPJB1dKafp6Gjt7+UPxb60PDe/8PSZuQ8uTNd+IzAYPWnxpGug7nnoeH5bX9QnGuon8ufGX5b6qvXRqbnydKeThy7X32L8Z/4sdTo6YMf5vRZ0L+MfupfxD93L+Ifu1WT893UiDmD3Nfv+/7gDcQC7r2H8W/aDLuL+H7qX8Q/dy/iHrjTfF7f+kbyCwrpCpHdEGAo7VOj0JxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB7/BsAAP//vujqxw==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x47)
ioctl$FITRIM(r0, 0x40e8662e, &(0x7f0000000240)={0x4f1, 0xd000040, 0xffffffffffff8000})

2.853566998s ago: executing program 4 (id=201):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}, 0x1c)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c)
syz_emit_ethernet(0x9a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb86dd6a00000000641100fc000000000000000000000000000001ff020000000001000000000000000001731d4e20"], 0x0)

2.846692638s ago: executing program 2 (id=202):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async)
sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000000c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010022000000fedbdf250e00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990003000000190002002b000e002a01062d1a4000ffffffffff80000300120000000100f7ffffff02760600490f00070000"], 0x54}}, 0x0)

2.845790538s ago: executing program 2 (id=204):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x74}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18000000}, 0x94)

2.744598889s ago: executing program 3 (id=206):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000f80000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x5}, 0x94)

2.718486579s ago: executing program 2 (id=207):
openat$uhid(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0)
socket(0x400000000010, 0x3, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
io_setup(0x202, &(0x7f0000000200))
bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000340)={0x28, 0x0, 0x2616}, 0x10)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
fcntl$lock(r0, 0x1, &(0x7f0000000300)={0x2, 0x1, 0x1, 0x7fffffffffffffff})
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0)
syz_usb_connect$uac1(0x0, 0x9e, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a001000fe800580607ee622", 0x2e}], 0x1}, 0x0)
syz_io_uring_setup(0x2da7, &(0x7f0000000000)={0x0, 0x2e1a, 0x8, 0x3, 0x1ce}, &(0x7f0000000080), 0x0, &(0x7f0000000100))

2.66744513s ago: executing program 4 (id=208):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='reno', 0x4)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0xfffffffffffffcf2, 0xfa00, {0x5, &(0x7f00000000c0)={<r2=>0xffffffffffffffff}, 0x106, 0x1}}, 0x8a)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0)
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0x1, 0x3, 0x5}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f00000000c0)={0x4, 0x8})
readv(r4, &(0x7f0000001480)=[{&(0x7f0000003140)=""/4093, 0xffd}, {0x0}], 0x2)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20)
writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {&(0x7f0000000080), r2, r3}}, 0x18)
socket$inet6(0xa, 0x40000080806, 0x0)
socket$inet6(0xa, 0x2, 0x0)
add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
set_mempolicy(0x6, 0x0, 0xe0)
perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
r5 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x79, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x11feb0, 0x8, 0x20da, 0x0, 0x0, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001940)=@newtaction={0xf18, 0x30, 0xb, 0x0, 0x0, {}, [{0xf04, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xeb8, 0x2, 0x0, 0x0, {{0xa}, {0xe8c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x3, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x0, 0x3}, {0xe, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x40080003}, {0x3, 0x3, 0x80, 0x0, 0xacc8, 0x2}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4, 0x1000000}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x0, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffc, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x6, 0x40000003, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff417, 0x1, 0x3ff, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0x3, 0x3, 0x3ff, 0x1, 0x400}, {0x1, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x6, 0x1, 0x3, 0x4}, {0x6, 0x100, 0x108b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000, 0xcb06}, {0x4e2, 0x6ae, 0x2, 0x100, 0x5, 0xd}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x6}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x2, 0x0, 0x1}, {0x2, 0x8, 0x10000002, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0x1}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x87c, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x8, 0x8, 0x8, 0xff}, {0x6, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0x40, 0x2, 0x89, 0x2}, {0x2, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x8, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100, 0x3ff, 0x0, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x6, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xfff, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x8000400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x2000007f, 0x8}, {0x5, 0x25b, 0x0, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x0, 0xa, 0x8, 0x5, 0x7}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x5}, {0x7f, 0x8, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff7, 0x5, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x6, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0xb, 0x8, 0x7}, {0xfff, 0x21, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x9, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x8000006, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0x3, 0x4, 0x7, 0x7}, {0x4, 0x61c5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0x1, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x36b6800}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0xae82}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdc}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x2, 0x101, 0xef}, {0x70a0, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x402, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d8, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x0, 0x7fff, 0x7, 0x8081, 0x8, 0x5}, {0x7e, 0x800, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x202, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xfffffff9}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8a, 0x19}], [{0x1}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x3}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x68, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf18}}, 0x0)
r7 = fsopen(&(0x7f0000000240)='sysfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)
r8 = fsmount(r7, 0x0, 0xb)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0)
setresuid(0x0, 0xee01, 0x0)
fsconfig$FSCONFIG_SET_PATH(r7, 0x3, &(0x7f0000000180)='\x00', &(0x7f00000001c0)='./file0\x00', r8)

2.65812151s ago: executing program 3 (id=209):
socket$inet_udp(0x2, 0x2, 0x0)
r0 = perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0xa)
mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0x2)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000001c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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")
r1 = io_uring_setup(0x68af, &(0x7f0000000480)={0x0, 0x0, 0x1880, 0x1})
r2 = msgget$private(0x0, 0x100)
msgctl$IPC_RMID(r2, 0x0)
r3 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3f, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c90000000000000000e000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000)
close_range(r1, 0xffffffffffffffff, 0x0)

2.167621365s ago: executing program 3 (id=213):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001940)=@newtaction={0xeb8, 0x30, 0xb, 0x600, 0x0, {}, [{0xea4, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe58, 0x2, 0x0, 0x0, {{0xa}, {0xe2c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x3, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x0, 0x3}, {0xe, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x40080003}, {0x3, 0x3, 0x80, 0x0, 0xacc8, 0x2}, {0x1, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4, 0x1000000}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x0, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffc, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x6, 0x40000003, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff417, 0x1, 0x3ff, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0x3, 0x3, 0x3ff, 0x1, 0x400}, {0x1, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8005, 0x87, 0x6, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000, 0xcb06}, {0x4e2, 0x6ae, 0x2, 0x100, 0x5, 0xd}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x6}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0xe4ff, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x2, 0x0, 0x1}, {0x2, 0x8, 0x10000002, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0x1}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x87c, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x8, 0x8, 0x8, 0xff}, {0x6, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0x40, 0x2, 0x89, 0x2}, {0x2, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x8, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100, 0x3ff, 0x0, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x6, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xfff, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x8000400}, {0x7fff, 0x80b3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x2000007f, 0x8}, {0x5, 0x25b, 0x0, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x7}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x5}, {0x7f, 0x8, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff7, 0x5, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x6, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0xb, 0x8, 0x7}, {0xfff, 0x21, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x9, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x8000006, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0x3, 0x4, 0x7, 0x7}, {0x4, 0x61c5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0xfffffffe, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x36b6800}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0xae82}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdc}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x800003, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x70a0, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x1ff, 0xc000000, 0x402, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d8, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x0, 0x7fff, 0x7, 0x8081, 0x8, 0x5}, {0x7e, 0x800, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x202, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xfffffff9}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8a, 0x19}], [{0x1}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5}, {0x3}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x3}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x1}, {0x0, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x8, 0x5, 0x0, 0x1, [{0x4}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb8}}, 0x0)

2.160704816s ago: executing program 4 (id=214):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x300, 0xed}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing}, 0x94)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'erspan0\x00', <r3=>0x0})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'gretap0\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r3], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@init_itable}, {@barrier}, {@quota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}]}, 0x1, 0x783, &(0x7f0000001340)="$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")
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x80552, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x8}, 0x102260, 0x10000, 0x0, 0x1, 0x5, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x2000000020000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mknod$loop(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1)

2.036097777s ago: executing program 0 (id=216):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x8, 0x11000, 0x0, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="44000000100001000000000000000000000000ff", @ANYRES32=r1, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c0002"], 0x44}, 0x1, 0x2}, 0x40000)

2.035723527s ago: executing program 1 (id=217):
unshare(0x22020600)
r0 = syz_open_dev$evdev(0x0, 0xfffffffffffffffc, 0x822b01)
ioctl$EVIOCSMASK(r0, 0x40104593, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000036c0)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201000000000018a118000c000600142603600e1208000f0100810401a8001600200001400300600803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c13223e3f52a98516277ce06bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68a", 0xd2}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500120000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xb, &(0x7f0000001a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ee1}}]}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x18, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e657665000034000280050003000300000006000500", @ANYRES32], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
socket(0x10, 0x803, 0x2)
r6 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r6, 0x0, 0x0)

2.030789637s ago: executing program 0 (id=218):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300100000000000fbdbdf2500000000000000000000000000000001ac1414bb00000000000000000000000000000004000000000a0060803b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000400000000000000000000000000000000000000000000000700000000190000fdffffffffffffff02000000000000000000000000000000feffffff3acd84fab593de61000000000000000000000000000000000000000006000000c06b"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c)
syz_emit_ethernet(0x42, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
setsockopt$packet_int(r2, 0x107, 0x10, 0x0, 0x0)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40000, 0x0, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRESHEX=r3, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x20008800)
bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000140)=0x8, 0x4)
connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000100)=0xffffca0d)
close(r6)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000001ac0)={'filter\x00', 0x4, "d71c67b1"}, &(0x7f0000001b40)=0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080))
ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x208082, 0x0)
close(r8)

1.974546487s ago: executing program 3 (id=219):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
close(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0xbf}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70)
getrlimit(0x0, 0x0)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202)
write$sndseq(r6, 0x0, 0x0)
io_submit(0x0, 0x1, &(0x7f00000012c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2004, 0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, 0x6}])
r7 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57)
r8 = socket$netlink(0x10, 0x3, 0x0)
writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800200000000000000000", 0x39}], 0x1)
writev(r8, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1)
setsockopt$inet_mreqsrc(r7, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f0000000180)={0x2b1, @time={0x3ff, 0x3}, 0x3, {0x1, 0xfc}, 0x0, 0x0, 0x7})

1.917342258s ago: executing program 1 (id=220):
r0 = socket(0x10, 0x3, 0x0)
unshare(0x400)
r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x82)
fsetxattr$security_capability(r2, &(0x7f0000000100), 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x58, 0x24, 0x10, 0x3, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x3ff, 0xc}, [@TCA_NETEM_DELAY_DIST={0x6, 0x2, "9f2b"}, @TCA_NETEM_LOSS={0x4}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4046191}, 0x8840)

1.80414682s ago: executing program 1 (id=221):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000006300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) (fail_nth: 1)

1.432083094s ago: executing program 0 (id=222):
r0 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000100)=0x60)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'})
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a8004000f8ff070006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0)
writev(r1, &(0x7f00000002c0)=[{&(0x7f00000000c0)="4f3bfde51b257f40", 0x8}], 0x1)
r3 = socket(0xe, 0x3, 0x1003a)
setsockopt$MRT6_DEL_MIF(r3, 0x29, 0xc8, 0x0, 0xc000000)
r4 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r4, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x2, 0x2}}, 0x10)
sendmsg$tipc(r4, &(0x7f0000000580)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x43, 0x2}, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20041011}, 0x14)
setsockopt$inet6_int(r3, 0x29, 0xcb, 0x0, 0x0)

1.336952465s ago: executing program 1 (id=223):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000ab4000000060a010400000000000000000a0000010900010073797a31000000004c000480340001800b000100746172676574000024000280080003009ac4200008f50240000000000d000100434c41535349465900000000140001800b00010064796e7365740000040002800900020073797a32000000003c000580080001400000890d080001400000001c080002"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040)

1.243928356s ago: executing program 2 (id=224):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0) (async)
r2 = socket$unix(0x1, 0x5, 0x0) (async)
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x37, 0x0, &(0x7f0000000900)="b44c80630562443108347301af47fa0ff9b11fe7d5fe008c6392009c5bbd04080000000000000fae7a6a53200386ce51dec4a4effb9de8", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3}, 0x50) (async)
r3 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x200)
ioctl$FIBMAP(r3, 0x1, &(0x7f0000000040)=0x85)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x8, 0x7}, {}, {0x3, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x400}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x5c}}, 0x800)

1.042944708s ago: executing program 1 (id=225):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(r2, 0x800448d3, &(0x7f0000000440)={@none, 0x30, 0x7, 0x81, 0x100, 0xf, "f83d6b0cefbba9793e25b630b30c56ca9f7f96e62561931c9caab0e5ba2ab7595f66dda78a27520ee5624f71e6f59897754fd749b77dacdbd6abd50f4763726196939ebe3d62254c940edcd84c4a86ff265320538472f0d93e1fe91b4871d81b93a389446d8d022a74724fffbb0505cfd6593f41acec40f3363b0a077c9956dd"})
fcntl$notify(r2, 0x402, 0x80000027)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="500000000906010200000000c9a0fd516d46671f0900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414190c000280080001406401010124d5644523512c69c6afa09c4aa1f3d8b08eed186f536e2118bf1d7c3d70b1c01c4d6712310b4b432ecc736070cd6d0bfc5de4b1"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5758661d46}, 0x4)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfc, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000007060108000000000000000000005f000500010006"], 0x1c}}, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa00e1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xa}, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r3 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x190)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x30, 0xf, &(0x7f0000000300)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @printk={@ld={0x18, 0x0}, {}, {0x5, 0x1, 0xb, 0x1, 0x2, 0xffff}, {}, {0x5, 0x0, 0xb, 0x2, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0xa4}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xae, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x11}, 0x94)

339.043906ms ago: executing program 0 (id=226):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newsa={0xf0, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x1, 0x0, 0x3, 0x2, 0x0, 0xa0, 0x3a, 0x0, 0xffffffffffffffff}, {@in=@remote, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, {0x0, 0xd, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x7, 0x2}, 0x70bd29, 0x0, 0x2, 0x2, 0x0, 0x28}}, 0xf0}, 0x1, 0x20000000, 0x0, 0xc0}, 0x840)

299.417896ms ago: executing program 1 (id=227):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x104)
unshare(0x20060400)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x6, 0x40000000000008}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000001c0), 0x0, 0x40010002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioprio_set$uid(0x0, 0x0, 0x0)
r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4)
socket$inet(0x2, 0x2, 0x1)
syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1008014, &(0x7f0000000140)=ANY=[], 0x3, 0x805, &(0x7f0000001580)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1fd)
unshare(0x44040200)
r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000100)=0x30)
ioctl$PTP_PEROUT_REQUEST2(r6, 0x40383d0c, &(0x7f0000000040)={{0x400000000000005, 0x5}, {0x80, 0x1fc}, 0x400, 0x6})
r7 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$restrict_keyring(0x1d, r7, &(0x7f0000000080)='cifs.idmap\x00', &(0x7f00000002c0)='key_or_keyring:\xd8Ou\xed\xd7\x92\x83\f\xb9\r\xa8^\v\xeayK>\xe4r\xd3H\xf7\xda_\xaf\xb6K\xa0\xb6j\xb0Pc\xfd\x04\xf0\xc1\xf2\xc5\xf6\xe7~:X\xbb65\xa0\xa8\xe7\x01\x15\xe9<8+\xcf\xadF~\xc3o\x04\xf6<6-A\x9a1\xa3le\xaf\v\xbe\xe9n\xf4\xe7#\xfd\x95\x9e\xf4\xde\xc4\x9f\xbd\x88uU\x96?7-\x89Oq\x131j\x8f\xa4\x982\t\xe8\xa4\xea\xe1\x84Fk\xa4\x86~&Q\xda\xf6\x04\x1b\f\x90+\xff\xcf\x05u&>/]o\x9e\x91S\x85Nq\x91\xa8[\xda\rO\xcc\x1a\x9ah\xe3\x80\'\xe7|:\xbc\x16>M\xd2_r\xeenTf\xde\x98\xb5\xe9<\x8f;\t\xf9=\x91\x14\x95\x97\xcdmG%\xed\t\xa7N\xb4\x85@\xe9\xeb,\"\xd5R\xcb\x03\xc0\xbe\xe2\x14\xe3\x84\xf3\xa2:Z\xa6\xc4\xfb2\xd2\xaa\x89\x12\xc3)m\xc5j\xaf\xe5n|\xfcD\xfc\xb5R\x1d\x87\xcfW5\xc7!\\\x11\x88\xa5\ar\x88\x0f\xcf\xa2qC\xfc\x18\xa0\t_\xb4\xfdK\xb2\xa8\x9f\xfd\xcc\x90yn\xe1L\xe8M/\xd9ea(\x8by\x9d\xc5E\x83\xc3~a\x1cHV\xf4\xbd\n\x90\xd2\xb6\xff\xea\xeb\xb6}\x12\x1c\"^F\xc5{\xf7\rS\xb39\xf7\xb7\xeb\xef;\xfc\xc6\xefa\x06\x00\x00\x00\x00\x00\x00\x00\x9e\x02\xc3\xe8\"Y\xfa\x8a\xc2K\x05[\xb3\xde\xb4\xc7\xf9*F\xdd\xcaeG0\x9a@\x99~r\\\xe0\x9e\xf8\xe8\x95\xbek\xbc\xbe\x84\xd9.\xd1HX\x8c\xacv\xe0\x80#\xee\x12\x12\x8a0\x04\x11B\x1f1\xbf\x9f\xfa!\x14\xaa\xee\xd9\xc9-\xfaQl\xfc\xc6hf\x8c\x1e\x97\xee\xc1\xabL\xf2\xe3\a,\xcb\xb1\n\x10\xa1Y\xee\x94\xaf%.{}\xbdQ\xca\xc3\xce\xbco\xe9\xe2T\xdd\txA\x12\xf5Ni\x1d\x0e\xa0<\xb4\x0e\xec\xed\x1eK\x9f\xb6\xf8]\x05],(\xa4w\x11\xb4U\x04\x95\x90\xf9nA;w\xf5\x1fA-`\xaeS\x87\xd9\xb7\x92:xH\xe2\xed\xe2I\tS\x89`?\xfdJ\x0e\xb2m\xc2\x1b\xa8%\x1c1')
pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x0)
dup(r8)

236.101857ms ago: executing program 2 (id=228):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1c917, &(0x7f00000004c0)={[{@nodelalloc}, {@noblock_validity}, {@inlinecrypt}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}, {@minixdf}, {@resgid={'resgid', 0x3d, 0xee01}}, {@noinit_itable}, {@noinit_itable}, {@journal_dev={'journal_dev', 0x3d, 0xafb}, 0x32}]}, 0x9d, 0x4ed, &(0x7f0000000a40)="$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")

221.336658ms ago: executing program 0 (id=229):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xf, &(0x7f00000007c0)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x1, 0x24}, {0x6, 0x0, 0x0, 0xb}}, [], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

198.297968ms ago: executing program 0 (id=230):
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_clone(0x81000000, 0x0, 0x0, 0x0, 0x0, 0x0)
getpriority(0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
rt_sigqueueinfo(r0, 0x9, &(0x7f00000003c0)={0x41, 0xfffffffd, 0x430})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100000000000020000800000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000040)={<r3=>0x0, 0x3, 0x20, 0x2, 0xfff}, &(0x7f0000000080)=0x18)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000000c0)={r3, 0x2fc8}, 0x8)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x8, &(0x7f0000000140)=[{0x6, 0xd, 0x7, 0x8}, {0x9, 0x47, 0x8, 0xf9c}, {0x4, 0x5, 0xb7, 0x7ff}, {0x8, 0x5, 0x1, 0x1}, {0x8, 0x9, 0x9, 0x5}, {0x0, 0x3, 0xc8, 0x5}, {0x7, 0x4, 0x8, 0x588}, {0x8000, 0x81, 0x8, 0x2}]})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680))
r6 = socket(0x400000000010, 0x3, 0x0)
write(r6, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030011000500e1000c1e0309000800a000", 0x33a)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000008000000000000000800e2ff940000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[], &(0x7f00000001c0)='syzkaller\x00'}, 0x94)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', <r8=>0x0})
r9 = gettid()
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x39, 0x1, 0x0, 0x0, 0x0, 0x0, 0x90281, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x2}, 0x8020, 0x40, 0x0, 0x4, 0x2, 0x7ffffffc, 0x3fc, 0x0, 0x10, 0x0, 0x4}, r9, 0xf, 0xffffffffffffffff, 0xa)
r10 = socket(0x1d, 0x6, 0x4)
r11 = socket$inet_sctp(0x2, 0x1, 0x84)
open_by_handle_at(r11, &(0x7f0000000100)=@xfs={0x1c, 0x81, {0xe0000000000, 0x3, 0x1, 0x4}}, 0x82000)
write(r10, 0x0, 0x0)
r12 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r12, 0x29, 0x23, &(0x7f0000000040), 0xcf)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r7, r8, 0x25, 0x0, @val=@iter={0x0}}, 0x20)
sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@bridge_newneigh={0x94, 0x1c, 0x400, 0x70bd2e, 0x25dfdbfc, {0x1c, 0x0, 0x0, r8, 0x80, 0x0, 0x5}, [@NDA_MASTER={0x8, 0x9, 0x1}, @NDA_MASTER={0x8, 0x9, 0x911}, @NDA_DST_IPV6={0x14, 0x1, @empty}, @NDA_LINK_NETNSID={0x8, 0xa, 0x4}, @NDA_FLAGS_EXT={0x8}, @NDA_CACHEINFO={0x14, 0x3, {0x4, 0x81, 0x7, 0xc}}, @NDA_LLADDR={0xa, 0x2, @random="3cd686154fe2"}, @NDA_LINK_NETNSID={0x8, 0xa, 0x1}, @NDA_VLAN={0x6, 0x5, 0x2}, @NDA_DST_IPV6={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x30}}]}, 0x94}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000304000000000000000100000300", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e00000062000280080040"], 0x3c}}, 0x0)

146.945188ms ago: executing program 3 (id=231):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) (async, rerun: 32)
timer_create(0x2, &(0x7f000049efa0)={0x0, 0x0, 0x1}, &(0x7f0000044000)=<r2=>0x0) (rerun: 32)
timer_settime(0x0, 0x1, &(0x7f0000000340)={{}, {0x0, 0x9}}, 0x0) (async)
timer_gettime(r2, &(0x7f0000000000)) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', <r4=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="431f07000b02000008000a00", @ANYRES32=r4, @ANYBLOB="08000500", @ANYRES32=r4, @ANYBLOB="1c0012800b0001006970766c616e"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x40050)

0s ago: executing program 3 (id=232):
pread64(0xffffffffffffffff, 0x0, 0x0, 0x2)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRESOCT], 0x25, 0x359, &(0x7f0000000bc0)="$eJzs3T1onHUYAPDn+ia5JFiTQSg6nW6ClCbioFNCqVDMoJXDr8XDpn7kzkIOD+KQyy1KcVJcBJ3cOujYWRxE3BxcrSBVcbFbocFX3rv3vnJ3Jhkutvj7DeXh+f+f+z/vB33fhOSf15uxdXk2rty+fSvm5wsxs3Z+Le4UYjlORRIdezHWR3Pj8wDAPe5OmsZfacfhsz9Z7Eae/QBw/2o//9883U8Uj1F87YFptAQATNkRv/5/fmz26tTaAgCmaOT5/9jQ8IFv88/0fiYAALh/vfjKq8+tb0RcKpXmI2ofNsqNcjzTH1+/Em9HNTbjXCzFfkTnRaHztpD9++zFjQvnSpnflqOcVTTKEbVmo9x5U1hP2vXFWImlWM7r0159ktWvtOtLEbHXbK8ftUKjPBuL+fo/L8ZmrMZSPDRSH3Fx48JqKf+Acq1b34xoxXz3ILL+z8ZS/PhGXI1qXI6stt//7kqpdD7dGKpvXC+25wEAAAAAAAAAAAAAAAAAAAAAwDScLfUs9/a/SWvNxgeXDk7ojRfb+/t0hvP9gVqd/YHSYnd3nmvJwf2BhvfnaZRn4tR/euQAAAAAAAAAAAAAAAAAAABw76jvzEWlWt3cru+8vzUYNAcy737/1bcL0R2ayUvfSfpVkSeHPqc7ceCTk+gtkfbK02RoTh4kEd3Je5XrN3odD84p9o5ipDwLiiNDhbynSrV6+tFfPx9X9XcW7LUzSYycluGgkK8/MFR7MEvMR8T+pKrJweohc26maTqpfPezXqbbVj0KETNx7DaOEHx3662Hn6yfeaqd+Sbf9OHxJ5Zeuvnpl39sVarR6rRQrc5t1/fTSVcnvxZZJut1dK1k4P4p5Oe5MOZOGB+0+pnWdn2nkvz058uPfPzDgcnJ+PsnHcy8N3mtrw9m5jpBIWK5exL+rdXZMTf/+OC1u0Nn7LCqhaHMmS/WKjd2f/n9qFd54D8JG3UAAAAAAAAAAAAAAAAAAMCJ6P/S73Gqnn5heh0BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMnr//3/gaA1kjlKcLcZo0PFze36xMUXTvRQAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4H/snAAD//82Fa84=")
renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2) (fail_nth: 4)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.212' (ED25519) to the list of known hosts.
[   31.668959][   T28] audit: type=1400 audit(1778284588.182:117): avc:  denied  { mounton } for  pid=3285 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   31.692124][   T28] audit: type=1400 audit(1778284588.202:118): avc:  denied  { mount } for  pid=3285 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   31.692827][ T3285] cgroup: Unknown subsys name 'net'
[   31.720334][   T28] audit: type=1400 audit(1778284588.232:119): avc:  denied  { unmount } for  pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   31.834635][ T3285] cgroup: Unknown subsys name 'cpuset'
[   31.840804][ T3285] cgroup: Unknown subsys name 'rlimit'
[   31.950716][   T28] audit: type=1400 audit(1778284588.462:120): avc:  denied  { setattr } for  pid=3285 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   31.979234][   T28] audit: type=1400 audit(1778284588.462:121): avc:  denied  { create } for  pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   31.991227][ T3290] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   32.000553][   T28] audit: type=1400 audit(1778284588.462:122): avc:  denied  { write } for  pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   32.018596][ T3285] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   32.029579][   T28] audit: type=1400 audit(1778284588.462:123): avc:  denied  { read } for  pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   32.058771][   T28] audit: type=1400 audit(1778284588.462:124): avc:  denied  { read } for  pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[   32.079810][   T28] audit: type=1400 audit(1778284588.462:125): avc:  denied  { mounton } for  pid=3285 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   32.104719][   T28] audit: type=1400 audit(1778284588.462:126): avc:  denied  { mount } for  pid=3285 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   34.197877][ T3297] bridge0: port 1(bridge_slave_0) entered blocking state
[   34.205294][ T3297] bridge0: port 1(bridge_slave_0) entered disabled state
[   34.212687][ T3297] bridge_slave_0: entered allmulticast mode
[   34.219651][ T3297] bridge_slave_0: entered promiscuous mode
[   34.237294][ T3297] bridge0: port 2(bridge_slave_1) entered blocking state
[   34.244624][ T3297] bridge0: port 2(bridge_slave_1) entered disabled state
[   34.252007][ T3297] bridge_slave_1: entered allmulticast mode
[   34.258838][ T3297] bridge_slave_1: entered promiscuous mode
[   34.319699][ T3297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   34.340449][ T3297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   34.358846][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state
[   34.366130][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state
[   34.373304][ T3298] bridge_slave_0: entered allmulticast mode
[   34.379630][ T3298] bridge_slave_0: entered promiscuous mode
[   34.400953][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state
[   34.408178][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state
[   34.415351][ T3298] bridge_slave_1: entered allmulticast mode
[   34.421874][ T3298] bridge_slave_1: entered promiscuous mode
[   34.448144][ T3297] team0: Port device team_slave_0 added
[   34.460823][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state
[   34.468102][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state
[   34.475268][ T3301] bridge_slave_0: entered allmulticast mode
[   34.481800][ T3301] bridge_slave_0: entered promiscuous mode
[   34.493216][ T3297] team0: Port device team_slave_1 added
[   34.499121][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state
[   34.506207][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state
[   34.513467][ T3305] bridge_slave_0: entered allmulticast mode
[   34.519898][ T3305] bridge_slave_0: entered promiscuous mode
[   34.532478][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state
[   34.539619][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state
[   34.547206][ T3301] bridge_slave_1: entered allmulticast mode
[   34.553868][ T3301] bridge_slave_1: entered promiscuous mode
[   34.561269][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   34.574964][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state
[   34.582236][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state
[   34.589964][ T3305] bridge_slave_1: entered allmulticast mode
[   34.596431][ T3305] bridge_slave_1: entered promiscuous mode
[   34.615736][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   34.633398][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state
[   34.640682][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state
[   34.648033][ T3303] bridge_slave_0: entered allmulticast mode
[   34.654757][ T3303] bridge_slave_0: entered promiscuous mode
[   34.669978][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_0
[   34.676977][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   34.703710][ T3297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   34.715604][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   34.724936][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state
[   34.732294][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state
[   34.739861][ T3303] bridge_slave_1: entered allmulticast mode
[   34.746427][ T3303] bridge_slave_1: entered promiscuous mode
[   34.754098][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   34.768034][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_1
[   34.775305][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   34.802342][ T3297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   34.814051][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   34.828585][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   34.842929][ T3298] team0: Port device team_slave_0 added
[   34.850030][ T3298] team0: Port device team_slave_1 added
[   34.884417][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   34.894590][ T3301] team0: Port device team_slave_0 added
[   34.904924][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0
[   34.912267][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   34.938753][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   34.951209][ T3305] team0: Port device team_slave_0 added
[   34.958160][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   34.968583][ T3301] team0: Port device team_slave_1 added
[   34.983596][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1
[   34.990787][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   35.017012][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   35.028717][ T3305] team0: Port device team_slave_1 added
[   35.049052][ T3297] hsr_slave_0: entered promiscuous mode
[   35.055044][ T3297] hsr_slave_1: entered promiscuous mode
[   35.072433][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0
[   35.079448][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   35.105591][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   35.116783][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1
[   35.123737][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   35.150438][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   35.164671][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0
[   35.171750][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   35.197781][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   35.209317][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1
[   35.216431][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   35.242898][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   35.254723][ T3303] team0: Port device team_slave_0 added
[   35.279484][ T3303] team0: Port device team_slave_1 added
[   35.315678][ T3301] hsr_slave_0: entered promiscuous mode
[   35.321947][ T3301] hsr_slave_1: entered promiscuous mode
[   35.328024][ T3301] debugfs: 'hsr0' already exists in 'hsr'
[   35.333797][ T3301] Cannot create hsr debugfs directory
[   35.350302][ T3298] hsr_slave_0: entered promiscuous mode
[   35.356881][ T3298] hsr_slave_1: entered promiscuous mode
[   35.362797][ T3298] debugfs: 'hsr0' already exists in 'hsr'
[   35.368752][ T3298] Cannot create hsr debugfs directory
[   35.381986][ T3305] hsr_slave_0: entered promiscuous mode
[   35.388240][ T3305] hsr_slave_1: entered promiscuous mode
[   35.394262][ T3305] debugfs: 'hsr0' already exists in 'hsr'
[   35.400086][ T3305] Cannot create hsr debugfs directory
[   35.405891][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0
[   35.413045][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   35.439179][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   35.450423][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1
[   35.457691][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   35.483730][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   35.571750][ T3303] hsr_slave_0: entered promiscuous mode
[   35.577924][ T3303] hsr_slave_1: entered promiscuous mode
[   35.583746][ T3303] debugfs: 'hsr0' already exists in 'hsr'
[   35.589611][ T3303] Cannot create hsr debugfs directory
[   35.717517][ T3297] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   35.726327][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   35.736829][ T3297] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   35.745780][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   35.756328][ T3297] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   35.765228][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   35.774927][ T3297] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   35.783836][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   35.804921][ T3298] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   35.815300][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   35.822896][ T3298] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   35.831705][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   35.839268][ T3298] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   35.847926][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   35.855800][ T3298] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   35.864592][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   35.894827][ T3305] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   35.903756][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   35.911508][ T3305] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   35.920198][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   35.929048][ T3305] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   35.937761][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   35.945850][ T3305] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   35.954580][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   35.993607][ T3301] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   36.002892][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   36.011313][ T3301] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   36.020286][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   36.028088][ T3301] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   36.036761][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   36.045758][ T3301] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   36.054057][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   36.074229][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0
[   36.104714][ T3297] 8021q: adding VLAN 0 to HW filter on device team0
[   36.116849][ T3303] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   36.125920][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   36.133543][ T3303] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   36.141986][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   36.150016][ T3303] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   36.158684][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   36.166645][ T3303] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   36.175637][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   36.191919][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.199162][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   36.217248][  T219] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.224551][  T219] bridge0: port 2(bridge_slave_1) entered forwarding state
[   36.240966][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0
[   36.269172][ T3298] 8021q: adding VLAN 0 to HW filter on device team0
[   36.290553][  T324] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.297839][  T324] bridge0: port 1(bridge_slave_0) entered forwarding state
[   36.307403][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0
[   36.317160][ T3297] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   36.333572][  T324] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.340769][  T324] bridge0: port 2(bridge_slave_1) entered forwarding state
[   36.354986][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0
[   36.367271][ T3305] 8021q: adding VLAN 0 to HW filter on device team0
[   36.390402][   T30] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.397607][   T30] bridge0: port 1(bridge_slave_0) entered forwarding state
[   36.413047][ T3301] 8021q: adding VLAN 0 to HW filter on device team0
[   36.425055][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.432259][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   36.448517][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.455619][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   36.468944][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.476049][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   36.513486][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0
[   36.558735][ T3303] 8021q: adding VLAN 0 to HW filter on device team0
[   36.578946][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.586522][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   36.607750][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.614997][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[   36.661216][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0
[   36.778941][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0
[   36.844584][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0
[   36.869013][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0
[   36.877791][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0
[   36.894478][ T3297] veth0_vlan: entered promiscuous mode
[   36.910772][ T3297] veth1_vlan: entered promiscuous mode
[   36.946397][ T3297] veth0_macvtap: entered promiscuous mode
[   36.958929][ T3297] veth1_macvtap: entered promiscuous mode
[   36.979524][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0
[   36.992021][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1
[   37.001826][ T3298] veth0_vlan: entered promiscuous mode
[   37.013298][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   37.022461][   T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   37.033038][ T3298] veth1_vlan: entered promiscuous mode
[   37.047735][   T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   37.062828][ T3433] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   37.090817][   T28] kauditd_printk_skb: 13 callbacks suppressed
[   37.090896][   T28] audit: type=1400 audit(1778284593.602:140): avc:  denied  { mounton } for  pid=3297 comm="syz-executor" path="/root/syzkaller.oVqi5m/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[   37.129511][   T28] audit: type=1400 audit(1778284593.642:141): avc:  denied  { mount } for  pid=3297 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   37.133856][ T3303] veth0_vlan: entered promiscuous mode
[   37.152113][   T28] audit: type=1400 audit(1778284593.642:142): avc:  denied  { mounton } for  pid=3297 comm="syz-executor" path="/root/syzkaller.oVqi5m/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   37.167998][ T3305] veth0_vlan: entered promiscuous mode
[   37.185178][   T28] audit: type=1400 audit(1778284593.642:143): avc:  denied  { mount } for  pid=3297 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   37.205029][ T3305] veth1_vlan: entered promiscuous mode
[   37.216094][   T28] audit: type=1400 audit(1778284593.642:144): avc:  denied  { mounton } for  pid=3297 comm="syz-executor" path="/root/syzkaller.oVqi5m/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   37.220985][ T3298] veth0_macvtap: entered promiscuous mode
[   37.249128][   T28] audit: type=1400 audit(1778284593.642:145): avc:  denied  { mounton } for  pid=3297 comm="syz-executor" path="/root/syzkaller.oVqi5m/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4796 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[   37.280623][ T3297] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   37.283478][ T3303] veth1_vlan: entered promiscuous mode
[   37.298747][   T28] audit: type=1400 audit(1778284593.642:146): avc:  denied  { unmount } for  pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   37.312943][ T3298] veth1_macvtap: entered promiscuous mode
[   37.330008][   T28] audit: type=1400 audit(1778284593.642:147): avc:  denied  { mounton } for  pid=3297 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[   37.356913][ T3305] veth0_macvtap: entered promiscuous mode
[   37.378140][ T3305] veth1_macvtap: entered promiscuous mode
[   37.392971][   T28] audit: type=1400 audit(1778284593.642:148): avc:  denied  { mount } for  pid=3297 comm="syz-executor" name="/" dev="gadgetfs" ino=4797 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[   37.404514][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0
[   37.423223][   T28] audit: type=1400 audit(1778284593.872:149): avc:  denied  { read write } for  pid=3297 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   37.433841][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0
[   37.457035][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1
[   37.478077][   T60] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   37.505208][   T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   37.515318][  T324] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   37.544985][  T324] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   37.560480][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1
[   37.580615][  T324] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   37.589876][  T324] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   37.609537][  T324] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   37.622685][  T324] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   37.822215][ T3511] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2'.
[   37.831245][ T3511] netlink: 'syz.1.2': attribute type 1 has an invalid length.
[   38.466259][ T3507] syz.0.1 (3507) used greatest stack depth: 10880 bytes left
[   38.618306][ T3303] veth0_macvtap: entered promiscuous mode
[   38.636575][ T3303] veth1_macvtap: entered promiscuous mode
[   38.651550][ T3301] veth0_vlan: entered promiscuous mode
[   38.692515][ T3301] veth1_vlan: entered promiscuous mode
[   38.718960][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0
[   38.754477][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1
[   38.799618][ T3301] veth0_macvtap: entered promiscuous mode
[   38.819079][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   38.845354][ T3301] veth1_macvtap: entered promiscuous mode
[   38.872606][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   38.909117][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   38.933551][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   38.967390][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.013304][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.051966][   T60] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.075413][   T60] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.125012][   T60] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.163873][   T60] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.308494][ T3518] loop3: detected capacity change from 0 to 512
[   39.366702][ T3518] EXT4-fs warning (device loop3): dx_probe:801: inode #2: comm syz.3.4: Unrecognised inode hash code 255
[   39.390116][ T3518] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.4: Corrupt directory, running e2fsck is recommended
[   39.422343][ T3518] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[   39.435610][ T3518] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.4: corrupted in-inode xattr: e_name out of bounds
[   39.454617][ T3518] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   39.456278][ T3518] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.4: couldn't read orphan inode 15 (err -117)
[   39.466207][    C1] EXT4-fs (loop3): error count since last fsck: 1
[   39.466256][    C1] EXT4-fs (loop3): initial error at time 1778284595: ext4_iget_extra_inode:5128: inode 15
[   39.466369][    C1] EXT4-fs (loop3): last error at time 1778284595: ext4_iget_extra_inode:5128: inode 15
[   39.506635][ T3518] loop3: lost filesystem error report for type 5 error -117
[   39.513129][ T3518] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   39.533820][ T3539] loop2: detected capacity change from 0 to 512
[   39.613080][ T3539] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.9: iget: bad i_size value: 38620345925642
[   39.629619][ T3528] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication
[   39.664005][ T3539] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   39.664847][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.674415][    C1] EXT4-fs (loop2): error count since last fsck: 1
[   39.674440][    C1] EXT4-fs (loop2): initial error at time 1778284596: ext4_orphan_get:1397: inode 15
[   39.674480][    C1] EXT4-fs (loop2): last error at time 1778284596: ext4_orphan_get:1397: inode 15
[   39.704326][ T3539] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.9: couldn't read orphan inode 15 (err -117)
[   39.772400][ T3539] loop2: lost filesystem error report for type 5 error -117
[   39.776177][ T3550] loop3: detected capacity change from 0 to 512
[   39.778804][ T3539] EXT4-fs (loop2): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback.
[   39.832499][ T3550] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   39.866670][ T3558] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11'.
[   39.871692][ T3554] capability: warning: `syz.0.12' uses 32-bit capabilities (legacy support in use)
[   39.903780][ T3554] program syz.0.12 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   39.952927][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.008521][ T3563] loop1: detected capacity change from 0 to 2048
[   40.062038][ T3563] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   40.119751][ T3563] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[   40.178845][ T3563] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28
[   40.224542][ T3563] EXT4-fs (loop1): This should not happen!! Data will be lost
[   40.224542][ T3563] 
[   40.235551][ T3563] EXT4-fs (loop1): Total free blocks count 0
[   40.260229][ T3563] EXT4-fs (loop1): Free/Dirty block details
[   40.275123][ T3563] EXT4-fs (loop1): free_blocks=2415919504
[   40.302202][ T3563] EXT4-fs (loop1): dirty_blocks=48
[   40.316600][ T3563] EXT4-fs (loop1): Block reservation details
[   40.329669][ T3563] EXT4-fs (loop1): i_reserved_data_blocks=3
[   40.372998][ T3572] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000.
[   40.387488][ T3575] loop4: detected capacity change from 0 to 1764
[   40.449945][ T3563] syz.1.13 (3563) used greatest stack depth: 9728 bytes left
[   40.456531][ T3575] bridge_slave_0: left allmulticast mode
[   40.467588][ T3575] bridge_slave_0: left promiscuous mode
[   40.468365][ T3297] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[   40.496527][ T3575] bridge0: port 1(bridge_slave_0) entered disabled state
[   40.541453][ T3575] bridge_slave_1: left allmulticast mode
[   40.571775][ T3579] loop1: detected capacity change from 0 to 512
[   40.580868][ T3575] bridge_slave_1: left promiscuous mode
[   40.591157][ T3579] EXT4-fs: Ignoring removed oldalloc option
[   40.610606][ T3575] bridge0: port 2(bridge_slave_1) entered disabled state
[   40.636607][ T3579] EXT4-fs (loop1): 1 truncate cleaned up
[   40.650982][ T3575] bond0: (slave bond_slave_0): Releasing backup interface
[   40.655512][ T3579] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   40.689012][ T3575] bond0: (slave bond_slave_1): Releasing backup interface
[   40.714752][ T3575] team0: Port device team_slave_0 removed
[   40.726255][ T3575] team0: Port device team_slave_1 removed
[   40.739059][ T3575] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   40.747065][ T3575] batman_adv: batadv0: Removing interface: batadv_slave_0
[   40.755840][ T3575] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   40.763524][ T3575] batman_adv: batadv0: Removing interface: batadv_slave_1
[   40.776019][ T3575] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   40.988151][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-00a1-0000-000000000000.
[   41.262056][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.393735][ T3562] Set syz1 is full, maxelem 65536 reached
[   41.455378][ T3598] loop3: detected capacity change from 0 to 512
[   41.497432][ T3598] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.22: corrupted in-inode xattr: invalid ea_ino
[   41.523503][ T3598] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   41.523740][ T3598] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.22: couldn't read orphan inode 15 (err -117)
[   41.533164][    C0] EXT4-fs (loop3): error count since last fsck: 1
[   41.533186][    C0] EXT4-fs (loop3): initial error at time 1778284598: ext4_iget_extra_inode:5128: inode 15
[   41.533217][    C0] EXT4-fs (loop3): last error at time 1778284598: ext4_iget_extra_inode:5128: inode 15
[   41.575857][ T3598] loop3: lost filesystem error report for type 5 error -117
[   41.578228][ T3598] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   41.604912][ T3605] loop1: detected capacity change from 0 to 512
[   41.627835][ T3598] SELinux: failed to load policy
[   41.647059][ T3605] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.23: iget: bad i_size value: 38620345925642
[   41.667193][ T3605] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   41.672060][ T3605] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.23: couldn't read orphan inode 15 (err -117)
[   41.681526][    C0] EXT4-fs (loop1): error count since last fsck: 1
[   41.681549][    C0] EXT4-fs (loop1): initial error at time 1778284598: ext4_orphan_get:1397: inode 15
[   41.681586][    C0] EXT4-fs (loop1): last error at time 1778284598: ext4_orphan_get:1397: inode 15
[   41.736983][ T3602] loop4: detected capacity change from 0 to 512
[   41.745589][ T3605] loop1: lost filesystem error report for type 5 error -117
[   41.749155][ T3602] ext4: Bad value for 'max_batch_time'
[   41.764134][ T3605] EXT4-fs (loop1): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback.
[   41.801007][ T3602] loop4: detected capacity change from 0 to 512
[   41.813543][ T3602] ext2: Unknown parameter 'subj_role'
[   41.838356][ T3602] =======================================================
[   41.838356][ T3602] WARNING: The mand mount option has been deprecated and
[   41.838356][ T3602]          and is ignored by this kernel. Remove the mand
[   41.838356][ T3602]          option from the mount to silence this warning.
[   41.838356][ T3602] =======================================================
[   41.905268][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.970184][ T3573] Set syz1 is full, maxelem 65536 reached
[   42.102495][ T3609] bridge_slave_0: left allmulticast mode
[   42.112700][ T3609] bridge_slave_0: left promiscuous mode
[   42.136558][ T3609] bridge0: port 1(bridge_slave_0) entered disabled state
[   42.148071][   T28] kauditd_printk_skb: 75 callbacks suppressed
[   42.148089][   T28] audit: type=1400 audit(1778284598.662:225): avc:  denied  { create } for  pid=3615 comm="syz.0.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[   42.170141][ T3616] netlink: 8 bytes leftover after parsing attributes in process `syz.0.27'.
[   42.194066][ T3609] bridge_slave_1: left allmulticast mode
[   42.194731][   T28] audit: type=1400 audit(1778284598.662:226): avc:  denied  { ioctl } for  pid=3615 comm="syz.0.27" path="socket:[3919]" dev="sockfs" ino=3919 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[   42.210394][ T3609] bridge_slave_1: left promiscuous mode
[   42.283167][ T3609] bridge0: port 2(bridge_slave_1) entered disabled state
[   42.310270][ T3609] bond0: (slave bond_slave_0): Releasing backup interface
[   42.346007][ T3609] bond0: (slave bond_slave_1): Releasing backup interface
[   42.388295][ T3609] team0: Port device team_slave_0 removed
[   42.418186][ T3609] team0: Port device team_slave_1 removed
[   42.438210][ T3609] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   42.465426][ T3609] batman_adv: batadv0: Removing interface: batadv_slave_0
[   42.497171][ T3609] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   42.526189][ T3609] batman_adv: batadv0: Removing interface: batadv_slave_1
[   42.546503][ T3609] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   42.620025][ T3596] Set syz1 is full, maxelem 65536 reached
[   42.727290][   T28] audit: type=1400 audit(1778284599.242:227): avc:  denied  { mount } for  pid=3621 comm="syz.2.29" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   42.754637][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-00a1-0000-000000000000.
[   42.799424][   T28] audit: type=1400 audit(1778284599.282:228): avc:  denied  { mounton } for  pid=3621 comm="syz.2.29" path="/5/file0/file0" dev="loop2" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1
[   42.801653][ T3629] netlink: 16 bytes leftover after parsing attributes in process `syz.4.33'.
[   42.881496][   T28] audit: type=1400 audit(1778284599.392:229): avc:  denied  { create } for  pid=3632 comm="syz.1.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   42.907664][   T28] audit: type=1400 audit(1778284599.422:230): avc:  denied  { write } for  pid=3632 comm="syz.1.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   42.927313][ T3629] netlink: 108 bytes leftover after parsing attributes in process `syz.4.33'.
[   42.955228][   T28] audit: type=1400 audit(1778284599.472:231): avc:  denied  { create } for  pid=3634 comm="syz.1.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   42.961215][ T3629] netlink: 16 bytes leftover after parsing attributes in process `syz.4.33'.
[   43.020369][   T28] audit: type=1400 audit(1778284599.492:232): avc:  denied  { getopt } for  pid=3634 comm="syz.1.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   43.042704][ T3631] FAT-fs (loop0): Directory bread(block 64) failed
[   43.049939][ T3631] FAT-fs (loop0): Directory bread(block 65) failed
[   43.057731][ T3631] FAT-fs (loop0): Directory bread(block 66) failed
[   43.074266][ T3631] FAT-fs (loop0): Directory bread(block 67) failed
[   43.076556][ T3637] process 'syz.1.36' launched '/dev/fd/6' with NULL argv: empty string added
[   43.090639][ T3631] FAT-fs (loop0): Directory bread(block 68) failed
[   43.097747][   T28] audit: type=1400 audit(1778284599.592:233): avc:  denied  { execute } for  pid=3636 comm="syz.1.36" dev="tmpfs" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   43.125267][ T3631] FAT-fs (loop0): Directory bread(block 69) failed
[   43.133738][ T3631] FAT-fs (loop0): Directory bread(block 70) failed
[   43.140542][ T3631] FAT-fs (loop0): Directory bread(block 71) failed
[   43.147828][ T3631] FAT-fs (loop0): Directory bread(block 72) failed
[   43.162746][   T28] audit: type=1400 audit(1778284599.612:234): avc:  denied  { execute_no_trans } for  pid=3636 comm="syz.1.36" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   43.187133][ T3644] Driver unsupported XDP return value 0 on prog  (id 4) dev N/A, expect packet loss!
[   43.202620][ T3631] FAT-fs (loop0): Directory bread(block 73) failed
[   43.337053][ T3652] netlink: 'syz.1.40': attribute type 10 has an invalid length.
[   43.345104][ T3652] bridge0: port 2(bridge_slave_1) entered disabled state
[   43.352490][ T3652] bridge0: port 1(bridge_slave_0) entered disabled state
[   43.391127][ T3653] sit0: entered allmulticast mode
[   43.399935][ T3653] sit0: entered promiscuous mode
[   43.767452][ T3661] EXT4-fs (loop4): VFS: Found ext4 filesystem with invalid superblock checksum.  Run e2fsck?
[   43.795565][ T3289] udevd[3289]: incorrect ext4 checksum on /dev/loop4
[   43.817940][ T3289] udevd[3289]: incorrect ext4 checksum on /dev/loop4
[   44.086770][ T3674] No such timeout policy "syz0"
[   44.101577][ T3671] EXT4-fs: Ignoring removed nomblk_io_submit option
[   44.137185][ T3671] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   44.197435][ T3679] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[   44.198137][ T3671] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e854c018, mo2=0003]
[   44.210953][ T3679] System zones: 
[   44.214674][ T3671] System zones: 0-1, 3-36
[   44.226927][ T3679] 0-1, 3-36
[   44.235981][ T3683] syz.3.53: attempt to access beyond end of device
[   44.235981][ T3683] loop3: rw=2051, sector=128, nr_sectors = 913 limit=128
[   44.252720][ T3688] iso9660: Unknown parameter 'de'
[   44.258690][ T3675] netlink: 'syz.2.47': attribute type 8 has an invalid length.
[   44.273397][ T3679] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.52: bad orphan inode 134217728
[   44.278788][ T3675] netlink: 4 bytes leftover after parsing attributes in process `syz.2.47'.
[   44.286655][ T3679] loop0: lost filesystem error report for type 5 error -117
[   44.287095][ T3679] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   44.296679][ T3688] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   44.306819][ T3671] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   44.389467][ T3695] set_capacity_and_notify: 9 callbacks suppressed
[   44.389553][ T3695] loop3: detected capacity change from 0 to 128
[   44.412216][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.414751][ T3675] erspan0: entered promiscuous mode
[   44.479931][ T3675] gretap0: entered promiscuous mode
[   44.491280][ T3695] FAT-fs (loop3): bogus sectors per cluster 0
[   44.504978][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.515840][ T3700] loop4: detected capacity change from 0 to 256
[   44.521518][ T3695] FAT-fs (loop3): Can't find a valid FAT filesystem
[   44.559766][ T3675] erspan0: left promiscuous mode
[   44.589163][ T3695] loop3: detected capacity change from 0 to 512
[   44.630090][ T3708] netlink: 324 bytes leftover after parsing attributes in process `syz.4.58'.
[   44.640593][ T3695] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.55: invalid indirect mapped block 256 (level 2)
[   44.690936][ T3695] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   44.692688][ T3695] EXT4-fs (loop3): 2 truncates cleaned up
[   44.697264][ T3675] gretap0: left promiscuous mode
[   44.702001][    C0] EXT4-fs (loop3): error count since last fsck: 1
[   44.702022][    C0] EXT4-fs (loop3): initial error at time 1778284601: ext4_free_branches:1023: inode 11
[   44.702054][    C0] EXT4-fs (loop3): last error at time 1778284601: ext4_free_branches:1023: inode 11
[   44.752236][ T3695] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   44.795883][ T3717] loop0: detected capacity change from 0 to 512
[   44.889436][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.916449][ T3717] loop0: detected capacity change from 0 to 128
[   44.950734][ T3717] vfat: Unknown parameter 'ÿÿÿÿaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'
[   44.978604][ T3719] loop3: detected capacity change from 0 to 512
[   44.989407][ T3719] EXT4-fs: Ignoring removed oldalloc option
[   44.999443][ T3719] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   45.040544][ T3719] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   45.067507][ T3719] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2860: Unable to expand inode 11. Delete some EAs or run e2fsck.
[   45.128297][ T3719] EXT4-fs (loop3): 1 truncate cleaned up
[   45.175083][ T3719] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.281861][ T3697] syz.1.54 (3697) used greatest stack depth: 9528 bytes left
[   45.310087][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.323352][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.364334][ T3736] loop3: detected capacity change from 0 to 1024
[   45.372393][ T3736] EXT4-fs: test_dummy_encryption option not supported
[   45.494784][ T3740] netlink: 4 bytes leftover after parsing attributes in process `syz.0.68'.
[   45.564916][ T3740] hsr_slave_1 (unregistering): left promiscuous mode
[   45.813811][ T3744] loop3: detected capacity change from 0 to 512
[   46.044958][ T3748] loop2: detected capacity change from 0 to 512
[   46.435693][ T3731] IPv6: sit1: Disabled Multicast RS
[   46.456182][ T3752] netlink: 12 bytes leftover after parsing attributes in process `syz.0.72'.
[   46.665467][ T3744] EXT4-fs (loop3): 1 orphan inode deleted
[   46.689744][ T3744] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   46.709690][ T3744] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   46.734091][  T219] EXT4-fs error (device loop3): ext4_release_dquot:7070: comm kworker/u8:5: Failed to release dquot type 1
[   46.761185][ T3759] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=3759 comm=syz.4.74
[   47.129574][ T3748] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   47.180248][   T28] kauditd_printk_skb: 24 callbacks suppressed
[   47.180267][   T28] audit: type=1400 audit(1778284603.692:259): avc:  denied  { bpf } for  pid=3758 comm="syz.4.74" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   47.235538][   T28] audit: type=1400 audit(1778284603.632:258): avc:  denied  { perfmon } for  pid=3758 comm="syz.4.74" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   47.257185][   T28] audit: type=1400 audit(1778284603.722:260): avc:  denied  { create } for  pid=3758 comm="syz.4.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[   47.277794][   T28] audit: type=1400 audit(1778284603.732:261): avc:  denied  { getopt } for  pid=3758 comm="syz.4.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[   47.317592][ T3767] bridge_slave_0: left allmulticast mode
[   47.323547][ T3767] bridge_slave_0: left promiscuous mode
[   47.329464][ T3767] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.511847][ T3767] bridge_slave_1: left allmulticast mode
[   47.517802][ T3767] bridge_slave_1: left promiscuous mode
[   47.523608][ T3767] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.531150][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.554932][ T3767] bond0: (slave bond_slave_0): Releasing backup interface
[   47.564759][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.574873][ T3767] bond0: (slave bond_slave_1): Releasing backup interface
[   47.586451][ T3767] team0: Port device team_slave_0 removed
[   47.597397][ T3767] team0: Port device team_slave_1 removed
[   47.604516][ T3767] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   47.611935][ T3767] batman_adv: batadv0: Removing interface: batadv_slave_0
[   47.620488][ T3767] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   47.628267][ T3767] batman_adv: batadv0: Removing interface: batadv_slave_1
[   47.638111][ T3767] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   47.708077][ T3782] netlink: 36 bytes leftover after parsing attributes in process `syz.1.81'.
[   47.709021][ T3780] netdevsim netdevsim2 netdevsim0: IPsec offload requires 128 bit authentication
[   47.809343][   T28] audit: type=1400 audit(1778284604.322:262): avc:  denied  { lock } for  pid=3785 comm="syz.2.83" path="socket:[5418]" dev="sockfs" ino=5418 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   47.841526][ T3786] loop2: detected capacity change from 0 to 512
[   47.849019][   T28] audit: type=1400 audit(1778284604.322:263): avc:  denied  { read write } for  pid=3792 comm="syz.1.87" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   47.863535][ T3786] EXT4-fs: Ignoring removed nobh option
[   47.873696][   T28] audit: type=1400 audit(1778284604.322:264): avc:  denied  { open } for  pid=3792 comm="syz.1.87" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   47.890407][ T3786] ext4: Bad value for 'resgid'
[   47.907047][ T3786] ext4: Bad value for 'resgid'
[   47.920450][   T28] audit: type=1400 audit(1778284604.322:265): avc:  denied  { ioctl } for  pid=3792 comm="syz.1.87" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   47.937034][ T3799] syz.4.86 uses obsolete (PF_INET,SOCK_PACKET)
[   47.953584][   T28] audit: type=1400 audit(1778284604.422:266): avc:  denied  { read write } for  pid=3793 comm="syz.4.86" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[   47.955137][ T3801] EXT4-fs: Ignoring removed nobh option
[   47.994142][   T28] audit: type=1400 audit(1778284604.422:267): avc:  denied  { open } for  pid=3793 comm="syz.4.86" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[   48.041573][ T3801] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   48.139582][ T3801] EXT4-fs (loop3): 1 truncate cleaned up
[   48.151210][ T3801] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   48.253992][ T3801] EXT4-fs (loop3): shut down requested (0)
[   48.286518][ T3801] capability: warning: `syz.3.88' uses deprecated v2 capabilities in a way that may be insecure
[   48.356494][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.526592][ T3840] netlink: 8 bytes leftover after parsing attributes in process `syz.3.95'.
[   48.573846][ T3842] program syz.2.97 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   48.585371][ T3842] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[   48.768625][ T3860] netlink: 16 bytes leftover after parsing attributes in process `syz.1.103'.
[   48.791588][ T3860] netlink: 108 bytes leftover after parsing attributes in process `syz.1.103'.
[   48.811435][ T3860] netlink: 16 bytes leftover after parsing attributes in process `syz.1.103'.
[   49.043209][ T3864] bridge0: port 2(bridge_slave_1) entered listening state
[   49.056481][ T3864] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.086395][ T3868] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   49.206097][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.551227][ T3882] netlink: 24 bytes leftover after parsing attributes in process `syz.0.110'.
[   50.596350][ T3893] set_capacity_and_notify: 3 callbacks suppressed
[   50.596369][ T3893] loop1: detected capacity change from 0 to 512
[   50.611033][ T3893] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   50.627469][ T3893] EXT4-fs (loop1): 1 truncate cleaned up
[   50.633820][ T3893] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   50.868571][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.885702][ T3904] netlink: 324 bytes leftover after parsing attributes in process `syz.3.117'.
[   50.909555][ T3906] netlink: 12 bytes leftover after parsing attributes in process `syz.4.119'.
[   51.325855][ T3934] loop1: detected capacity change from 0 to 512
[   51.338306][ T3934] EXT4-fs warning (device loop1): read_mmp_block:111: Error -117 while reading MMP block 0
[   51.424167][ T3936] netlink: 'syz.2.127': attribute type 4 has an invalid length.
[   51.479269][ T3937] netlink: 'syz.2.127': attribute type 4 has an invalid length.
[   52.221246][ T3940] loop1: detected capacity change from 0 to 512
[   52.236235][ T3940] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[   52.265578][ T3940] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters
[   52.280647][ T3940] __quota_error: 32 callbacks suppressed
[   52.280662][ T3940] Quota error (device loop1): write_blk: dquota write failed
[   52.287873][    C0] EXT4-fs (loop1): error count since last fsck: 1
[   52.287894][    C0] EXT4-fs (loop1): initial error at time 1778284608: ext4_mb_generate_buddy:1317
[   52.287921][    C0] EXT4-fs (loop1): last error at time 1778284608: ext4_mb_generate_buddy:1317
[   52.321500][ T3940] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5
[   52.330697][ T3940] Quota error (device loop1): write_blk: dquota write failed
[   52.338180][ T3940] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota
[   52.348189][ T3940] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.129: Failed to acquire dquot type 1
[   52.360848][ T3940] loop1: lost filesystem error report for type 5 error -28
[   52.362936][ T3940] EXT4-fs (loop1): 1 truncate cleaned up
[   52.376906][ T3940] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   52.450447][   T28] audit: type=1400 audit(1778284608.962:300): avc:  denied  { write } for  pid=3931 comm="syz.1.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   52.716192][ T3940] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   52.748655][ T3948] loop4: detected capacity change from 0 to 512
[   52.755694][ T3948] EXT4-fs: inline encryption not supported
[   52.767509][ T3948] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[   52.797851][ T3948] EXT4-fs (loop4): orphan cleanup on readonly fs
[   52.823152][ T3948] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[   52.841611][ T3948] EXT4-fs (loop4): Cannot turn on quotas: error -22
[   52.855435][ T3948] EXT4-fs error (device loop4): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[   52.872036][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.881230][    C1] EXT4-fs (loop4): error count since last fsck: 1
[   52.881249][    C1] EXT4-fs (loop4): initial error at time 1778284609: mb_free_blocks:2049: inode 12: block 14
[   52.881309][    C1] EXT4-fs (loop4): last error at time 1778284609: mb_free_blocks:2049: inode 12: block 14
[   52.916813][ T3957] netlink: 24 bytes leftover after parsing attributes in process `syz.3.134'.
[   52.926876][ T3948] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #12: comm syz.4.131: corrupted inode contents
[   52.944809][ T3948] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[   52.946982][ T3948] EXT4-fs error (device loop4): ext4_dirty_inode:6587: inode #12: comm syz.4.131: mark_inode_dirty error
[   52.980673][ T3948] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[   52.981513][ T3948] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #12: comm syz.4.131: corrupted inode contents
[   53.015683][ T3948] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[   53.016606][ T3948] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #12: comm syz.4.131: mark_inode_dirty error
[   53.029572][ T3964] loop0: detected capacity change from 0 to 128
[   53.037966][ T3948] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[   53.071162][ T3964] syz.0.138: attempt to access beyond end of device
[   53.071162][ T3964] loop0: rw=2051, sector=128, nr_sectors = 913 limit=128
[   53.100179][ T3948] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #12: comm syz.4.131: corrupted inode contents
[   53.138758][ T3948] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[   53.139229][ T3948] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem
[   53.175713][ T3948] loop4: lost filesystem error report for type 5 error -117
[   53.176090][ T3948] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #12: comm syz.4.131: corrupted inode contents
[   53.237209][ T3968] loop0: detected capacity change from 0 to 512
[   53.249300][ T3948] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[   53.249532][ T3948] EXT4-fs error (device loop4): ext4_truncate:4690: inode #12: comm syz.4.131: mark_inode_dirty error
[   53.317015][ T3948] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[   53.317610][ T3948] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem
[   53.336529][ T3972] loop1: detected capacity change from 0 to 2048
[   53.346416][ T3968] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   53.364755][ T3948] loop4: lost filesystem error report for type 5 error -117
[   53.370046][ T3948] EXT4-fs (loop4): 1 truncate cleaned up
[   53.390599][ T3972] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   53.404868][ T3948] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   53.432066][   T28] audit: type=1400 audit(1778284609.932:301): avc:  denied  { write } for  pid=3971 comm="syz.1.142" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   53.469830][ T3962] loop2: detected capacity change from 0 to 1024
[   53.492803][   T28] audit: type=1400 audit(1778284609.932:302): avc:  denied  { read } for  pid=3971 comm="syz.1.142" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1
[   53.492863][   T28] audit: type=1400 audit(1778284609.932:303): avc:  denied  { write } for  pid=3971 comm="syz.1.142" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   53.492890][   T28] audit: type=1400 audit(1778284609.942:304): avc:  denied  { write } for  pid=3971 comm="syz.1.142" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   53.715052][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.727380][ T3962] EXT4-fs: Ignoring removed mblk_io_submit option
[   53.762300][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.772171][ T3962] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   53.784356][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.816064][ T3962] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   53.870537][ T3982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.144'.
[   53.940905][   T28] audit: type=1400 audit(1778284610.452:305): avc:  denied  { getopt } for  pid=3988 comm="syz.4.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   53.970717][ T3994] loop0: detected capacity change from 0 to 128
[   53.985796][ T3994] syz.0.150: attempt to access beyond end of device
[   53.985796][ T3994] loop0: rw=2051, sector=128, nr_sectors = 913 limit=128
[   54.012714][ T3962] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #11: comm syz.2.137: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[   54.039803][ T3962] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   54.044075][    C1] EXT4-fs (loop2): error count since last fsck: 1
[   54.061953][    C1] EXT4-fs (loop2): initial error at time 1778284610: ext4_ext_check_inode:521: inode 11
[   54.075634][    C1] EXT4-fs (loop2): last error at time 1778284610: ext4_ext_check_inode:521: inode 11
[   54.109800][ T3962] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.137: couldn't read orphan inode 11 (err -117)
[   54.165898][ T4001] loop0: detected capacity change from 0 to 256
[   54.173056][ T3962] loop2: lost filesystem error report for type 5 error -117
[   54.308013][ T4004] FAT-fs (loop4): Directory bread(block 64) failed
[   54.325235][ T4004] FAT-fs (loop4): Directory bread(block 65) failed
[   54.357903][ T4004] FAT-fs (loop4): Directory bread(block 66) failed
[   54.371693][ T3962] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   54.402643][ T4008] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   54.404510][ T4004] FAT-fs (loop4): Directory bread(block 67) failed
[   54.437086][ T4004] FAT-fs (loop4): Directory bread(block 68) failed
[   54.444868][ T4004] FAT-fs (loop4): Directory bread(block 69) failed
[   54.451448][ T4004] FAT-fs (loop4): Directory bread(block 70) failed
[   54.481590][ T4004] FAT-fs (loop4): Directory bread(block 71) failed
[   54.489773][ T4004] FAT-fs (loop4): Directory bread(block 72) failed
[   54.497393][ T4004] FAT-fs (loop4): Directory bread(block 73) failed
[   54.504339][ T3962] EXT4-fs (loop2): shut down requested (1)
[   54.576497][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.649765][ T4015] FAT-fs (loop0): Directory bread(block 64) failed
[   54.660281][ T4013] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.157: iget: bad i_size value: 38620345925642
[   54.700557][ T4015] FAT-fs (loop0): Directory bread(block 65) failed
[   54.726052][ T4013] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   54.727661][ T4013] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.157: couldn't read orphan inode 15 (err -117)
[   54.737397][    C0] EXT4-fs (loop4): error count since last fsck: 1
[   54.737418][    C0] EXT4-fs (loop4): initial error at time 1778284611: ext4_orphan_get:1397: inode 15
[   54.737449][    C0] EXT4-fs (loop4): last error at time 1778284611: ext4_orphan_get:1397: inode 15
[   54.790704][ T4015] FAT-fs (loop0): Directory bread(block 66) failed
[   54.805341][ T4013] loop4: lost filesystem error report for type 5 error -117
[   54.806022][ T4013] EXT4-fs (loop4): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback.
[   54.822414][ T4015] FAT-fs (loop0): Directory bread(block 67) failed
[   54.855378][ T4015] FAT-fs (loop0): Directory bread(block 68) failed
[   54.881782][ T4015] FAT-fs (loop0): Directory bread(block 69) failed
[   54.898665][ T4013] EXT4-fs (loop4): shut down requested (0)
[   54.906732][ T4015] FAT-fs (loop0): Directory bread(block 70) failed
[   54.931238][ T4015] FAT-fs (loop0): Directory bread(block 71) failed
[   54.942492][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-00a1-0000-000000000000.
[   54.960180][ T4015] FAT-fs (loop0): Directory bread(block 72) failed
[   54.967657][ T4015] FAT-fs (loop0): Directory bread(block 73) failed
[   54.977009][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.996304][ T4015] FAULT_INJECTION: forcing a failure.
[   54.996304][ T4015] name failslab, interval 1, probability 0, space 0, times 1
[   55.025809][ T4015] CPU: 1 UID: 0 PID: 4015 Comm: syz.0.156 Not tainted syzkaller #0 PREEMPT(full) 
[   55.025854][ T4015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[   55.025868][ T4015] Call Trace:
[   55.025876][ T4015]  <TASK>
[   55.025885][ T4015]  __dump_stack+0x1d/0x30
[   55.025915][ T4015]  dump_stack_lvl+0x95/0xd0
[   55.025994][ T4015]  dump_stack+0x15/0x1b
[   55.026014][ T4015]  should_fail_ex+0x263/0x280
[   55.026046][ T4015]  should_failslab+0x8c/0xb0
[   55.026135][ T4015]  kmem_cache_alloc_noprof+0x66/0x3f0
[   55.026172][ T4015]  ? do_getname+0x2e/0x1c0
[   55.026195][ T4015]  do_getname+0x2e/0x1c0
[   55.026216][ T4015]  __se_sys_renameat2+0x38/0x1c0
[   55.026239][ T4015]  __x64_sys_renameat2+0x67/0x80
[   55.026415][ T4015]  x64_sys_call+0x2a12/0x3020
[   55.026462][ T4015]  do_syscall_64+0x12c/0x3b0
[   55.026494][ T4015]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   55.026519][ T4015] RIP: 0033:0x7f1bae1ecdd9
[   55.026602][ T4015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   55.026620][ T4015] RSP: 002b:00007f1bacc3f028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c
[   55.026645][ T4015] RAX: ffffffffffffffda RBX: 00007f1bae465fa0 RCX: 00007f1bae1ecdd9
[   55.026661][ T4015] RDX: ffffffffffffff9c RSI: 0000200000000440 RDI: ffffffffffffff9c
[   55.026678][ T4015] RBP: 00007f1bacc3f090 R08: 0000000000000002 R09: 0000000000000000
[   55.026740][ T4015] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001
[   55.026754][ T4015] R13: 00007f1bae466038 R14: 00007f1bae465fa0 R15: 00007fff1c199d28
[   55.026846][ T4015]  </TASK>
[   55.075095][ T3992] Set syz1 is full, maxelem 65536 reached
[   55.243377][ T4023] syz.2.162: attempt to access beyond end of device
[   55.243377][ T4023] loop2: rw=2051, sector=128, nr_sectors = 913 limit=128
[   55.293689][ T4029] netlink: 28 bytes leftover after parsing attributes in process `syz.0.163'.
[   55.343239][ T4029] bond1 (unregistering): Released all slaves
[   55.530264][ T4038] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   55.678755][ T4044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.168'.
[   55.861083][ T4049] set_capacity_and_notify: 6 callbacks suppressed
[   55.861171][ T4049] loop0: detected capacity change from 0 to 1764
[   55.961463][ T4049] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   56.082350][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   56.105556][ T4025] loop1: detected capacity change from 0 to 512
[   56.259782][ T4057] loop2: detected capacity change from 0 to 2048
[   56.269577][ T4061] loop4: detected capacity change from 0 to 128
[   56.277323][ T4025] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   56.315176][ T4061] syz.4.175: attempt to access beyond end of device
[   56.315176][ T4061] loop4: rw=2051, sector=128, nr_sectors = 913 limit=128
[   56.352147][ T4066] FAULT_INJECTION: forcing a failure.
[   56.352147][ T4066] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   56.365809][ T4066] CPU: 0 UID: 0 PID: 4066 Comm: syz.3.176 Not tainted syzkaller #0 PREEMPT(full) 
[   56.365843][ T4066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[   56.365857][ T4066] Call Trace:
[   56.365865][ T4066]  <TASK>
[   56.365891][ T4066]  __dump_stack+0x1d/0x30
[   56.365919][ T4066]  dump_stack_lvl+0x95/0xd0
[   56.365944][ T4066]  dump_stack+0x15/0x1b
[   56.366044][ T4066]  should_fail_ex+0x263/0x280
[   56.366076][ T4066]  should_fail+0xb/0x20
[   56.366181][ T4066]  should_fail_usercopy+0x1a/0x20
[   56.366214][ T4066]  _copy_from_user+0x1c/0xb0
[   56.366290][ T4066]  ___sys_sendmsg+0xc1/0x1e0
[   56.366329][ T4066]  __x64_sys_sendmsg+0xd4/0x160
[   56.366416][ T4066]  x64_sys_call+0x194c/0x3020
[   56.366444][ T4066]  do_syscall_64+0x12c/0x3b0
[   56.366477][ T4066]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   56.366502][ T4066] RIP: 0033:0x7f1d2973cdd9
[   56.366532][ T4066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   56.366603][ T4066] RSP: 002b:00007f1d28197028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   56.366628][ T4066] RAX: ffffffffffffffda RBX: 00007f1d299b5fa0 RCX: 00007f1d2973cdd9
[   56.366645][ T4066] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003
[   56.366694][ T4066] RBP: 00007f1d28197090 R08: 0000000000000000 R09: 0000000000000000
[   56.366709][ T4066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   56.366724][ T4066] R13: 00007f1d299b6038 R14: 00007f1d299b5fa0 R15: 00007ffd2bf80268
[   56.366746][ T4066]  </TASK>
[   56.537069][ T4057] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   56.561732][ T4057] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000.
[   56.617747][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   56.624865][ T4025] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.161: iget: bad i_size value: 38620345925642
[   56.638153][ T4077] netlink: 16 bytes leftover after parsing attributes in process `syz.3.181'.
[   56.641519][ T4025] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   56.655706][ T4077] netlink: 108 bytes leftover after parsing attributes in process `syz.3.181'.
[   56.655727][ T4077] netlink: 16 bytes leftover after parsing attributes in process `syz.3.181'.
[   56.743715][ T4025] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.161: couldn't read orphan inode 15 (err -117)
[   56.744016][    C1] EXT4-fs (loop1): error count since last fsck: 1
[   56.744108][    C1] EXT4-fs (loop1): initial error at time 1778284613: ext4_orphan_get:1397: inode 15
[   56.744197][    C1] EXT4-fs (loop1): last error at time 1778284613: ext4_orphan_get:1397: inode 15
[   56.841289][ T4025] loop1: lost filesystem error report for type 5 error -117
[   56.940572][ T4095] netlink: 12 bytes leftover after parsing attributes in process `syz.3.187'.
[   56.972612][ T4099] loop4: detected capacity change from 0 to 128
[   56.976494][ T4095] netlink: 12 bytes leftover after parsing attributes in process `syz.3.187'.
[   56.979693][ T4097] netlink: 24 bytes leftover after parsing attributes in process `syz.0.188'.
[   56.998093][ T4094] netlink: 12 bytes leftover after parsing attributes in process `syz.3.187'.
[   57.001403][ T4025] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   57.040620][ T4099] syz.4.189: attempt to access beyond end of device
[   57.040620][ T4099] loop4: rw=2051, sector=128, nr_sectors = 913 limit=128
[   57.110652][ T4025] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.161: bg 0: block 5: invalid block bitmap
[   57.169482][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   57.195146][ T4120] loop4: detected capacity change from 0 to 512
[   57.223663][ T4120] EXT4-fs: Ignoring removed oldalloc option
[   57.246884][ T4120] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   57.274931][ T4120] EXT4-fs (loop4): 1 truncate cleaned up
[   57.282162][ T4120] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   57.317029][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   57.353606][ T4127] loop1: detected capacity change from 0 to 512
[   57.376875][ T4127] ------------[ cut here ]------------
[   57.382614][ T4127] EA inode 11 i_nlink=0
[   57.382630][ T4127] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#0: syz.1.199/4127
[   57.398193][ T4127] Modules linked in:
[   57.402121][ T4127] CPU: 0 UID: 0 PID: 4127 Comm: syz.1.199 Not tainted syzkaller #0 PREEMPT(full) 
[   57.411694][ T4127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[   57.422046][ T4127] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350
[   57.428763][ T4127] Code: 14 5e 98 ff 4c 8d 2d 3d 6d 5c 05 49 8d 7e 40 e8 64 1c b6 ff 49 8b 6e 40 4c 89 e7 e8 98 17 b6 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 cf c6 d7 03 66 66 66 66 66 66 2e
[   57.449480][ T4127] RSP: 0018:ffffc90000f9f778 EFLAGS: 00010246
[   57.455732][ T4127] RAX: ffff888105774ef8 RBX: ffff8881005ec178 RCX: ffffffff81c0d078
[   57.464210][ T4127] RDX: 0000000000000000 RSI: 000000000000000b RDI: ffffffff871d3da0
[   57.472513][ T4127] RBP: 000000000000000b R08: 00018881005ec12b R09: 0000000000000000
[   57.480524][ T4127] R10: ffffc90000f9f6a8 R11: 0001c90000f9f6a8 R12: ffff8881005ec128
[   57.488875][ T4127] R13: ffffffff871d3da0 R14: ffff8881005ec0e0 R15: 0000000000000001
[   57.497100][ T4127] FS:  00007fe79729f6c0(0000) GS:ffff8882ae8fb000(0000) knlGS:0000000000000000
[   57.506477][ T4127] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   57.513202][ T4127] CR2: 00007f8885c07dac CR3: 000000011b476000 CR4: 00000000003506f0
[   57.521315][ T4127] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   57.529785][ T4127] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[   57.537878][ T4127] Call Trace:
[   57.541319][ T4127]  <TASK>
[   57.544383][ T4127]  ext4_xattr_inode_dec_ref_all+0x57c/0x8b0
[   57.551130][ T4127]  ? errseq_check+0x2c/0x50
[   57.555928][ T4127]  ext4_xattr_delete_inode+0x6c1/0x7a0
[   57.561673][ T4127]  ? ext4_truncate+0x89f/0xa10
[   57.566803][ T4127]  ext4_evict_inode+0xb16/0xe30
[   57.571835][ T4127]  ? __pfx_ext4_evict_inode+0x10/0x10
[   57.577351][ T4127]  evict+0x2af/0x510
[   57.581304][ T4127]  ? __dquot_initialize+0x146/0x7c0
[   57.586648][ T4127]  iput+0x41a/0x580
[   57.590517][ T4127]  ext4_process_orphan+0x1a9/0x1c0
[   57.595988][ T4127]  ext4_orphan_cleanup+0x69c/0x9f0
[   57.601358][ T4127]  ext4_fill_super+0x3408/0x37c0
[   57.606857][ T4127]  ? set_blocksize+0x14c/0x270
[   57.611532][ T4152] loop3: detected capacity change from 0 to 1024
[   57.612169][ T4127]  ? setup_bdev_super+0x30e/0x370
[   57.623800][ T4127]  ? __pfx_ext4_fill_super+0x10/0x10
[   57.629378][ T4127]  get_tree_bdev_flags+0x291/0x300
[   57.634545][ T4127]  ? __pfx_ext4_fill_super+0x10/0x10
[   57.639958][ T4127]  get_tree_bdev+0x1f/0x30
[   57.641823][ T4152] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[   57.644507][ T4127]  ext4_get_tree+0x1c/0x30
[   57.644569][ T4127]  vfs_get_tree+0x57/0x1d0
[   57.660623][   T28] kauditd_printk_skb: 26 callbacks suppressed
[   57.660721][   T28] audit: type=1400 audit(1778284614.172:332): avc:  denied  { module_request } for  pid=4150 comm="syz.4.208" kmod="net-pf-10-proto-0-type-6" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[   57.662346][ T4127]  do_new_mount+0x288/0x8d0
[   57.683404][ T4152] System zones: 
[   57.691539][ T4127]  path_mount+0x4d0/0xbc0
[   57.696490][ T4152] 0-1
[   57.699756][ T4127]  __se_sys_mount+0x28c/0x2e0
[   57.704401][ T4152] , 3-36
[   57.707125][ T4127]  __x64_sys_mount+0x67/0x80
[   57.711944][ T4152] 
[   57.714915][ T4127]  x64_sys_call+0x2d61/0x3020
[   57.714956][ T4127]  do_syscall_64+0x12c/0x3b0
[   57.720611][ T4152] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.209: bad orphan inode 134217728
[   57.721981][ T4127]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   57.722014][ T4127] RIP: 0033:0x7fe79884e04a
[   57.727223][ T4152] loop3: lost filesystem error report for type 5 error -117
[   57.731609][ T4127] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   57.743095][ T4152] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   57.748443][ T4127] RSP: 002b:00007fe79729ee58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   57.748473][ T4127] RAX: ffffffffffffffda RBX: 00007fe79729eee0 RCX: 00007fe79884e04a
[   57.764889][ T4147] netlink: 'syz.2.207': attribute type 10 has an invalid length.
[   57.780520][ T4127] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007fe79729eea0
[   57.780544][ T4127] RBP: 0000200000000180 R08: 00007fe79729eee0 R09: 0000000000000000
[   57.780559][ T4127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000
[   57.780576][ T4127] R13: 00007fe79729eea0 R14: 000000000000047a R15: 0000200000000b40
[   57.780679][ T4127]  </TASK>
[   57.780686][ T4127] ---[ end trace 0000000000000000 ]---
[   57.795505][ T4127] EXT4-fs (loop1): 1 orphan inode deleted
[   57.795909][ T4127] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   57.860795][   T28] audit: type=1400 audit(1778284614.312:333): avc:  denied  { ioctl } for  pid=4126 comm="syz.1.199" path="socket:[6021]" dev="sockfs" ino=6021 ioctlcmd=0x586a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   57.870434][ T4147] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.972574][ T4163] Zero length message leads to an empty skb
[   57.972800][   T28] audit: type=1400 audit(1778284614.482:334): avc:  denied  { mount } for  pid=4150 comm="syz.4.208" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[   58.071496][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.105750][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.343724][   T28] audit: type=1400 audit(1778284614.852:335): avc:  denied  { mount } for  pid=4185 comm="syz.1.220" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   58.387069][ T4187] netlink: 'syz.4.214': attribute type 8 has an invalid length.
[   58.409378][ T4189] FAULT_INJECTION: forcing a failure.
[   58.409378][ T4189] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   58.470071][ T4187] erspan0: entered promiscuous mode
[   58.581766][ T4187] gretap0: entered promiscuous mode
[   58.600633][ T4189] CPU: 1 UID: 0 PID: 4189 Comm: syz.1.221 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[   58.600672][ T4189] Tainted: [W]=WARN
[   58.600681][ T4189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[   58.600764][ T4189] Call Trace:
[   58.600772][ T4189]  <TASK>
[   58.600781][ T4189]  __dump_stack+0x1d/0x30
[   58.600808][ T4189]  dump_stack_lvl+0x95/0xd0
[   58.600841][ T4189]  dump_stack+0x15/0x1b
[   58.600865][ T4189]  should_fail_ex+0x263/0x280
[   58.600970][ T4189]  should_fail+0xb/0x20
[   58.600995][ T4189]  should_fail_usercopy+0x1a/0x20
[   58.601086][ T4189]  _copy_from_user+0x1c/0xb0
[   58.601116][ T4189]  __sys_bpf+0x183/0x7e0
[   58.601149][ T4189]  __x64_sys_bpf+0x41/0x50
[   58.601224][ T4189]  x64_sys_call+0x10cb/0x3020
[   58.601253][ T4189]  do_syscall_64+0x12c/0x3b0
[   58.601286][ T4189]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   58.601312][ T4189] RIP: 0033:0x7fe79884cdd9
[   58.601330][ T4189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   58.601426][ T4189] RSP: 002b:00007fe79729f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   58.601536][ T4189] RAX: ffffffffffffffda RBX: 00007fe798ac5fa0 RCX: 00007fe79884cdd9
[   58.601554][ T4189] RDX: 0000000000000080 RSI: 0000200000000340 RDI: 0000000000000005
[   58.601582][ T4189] RBP: 00007fe79729f090 R08: 0000000000000000 R09: 0000000000000000
[   58.601597][ T4189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   58.601613][ T4189] R13: 00007fe798ac6038 R14: 00007fe798ac5fa0 R15: 00007fffeb498f18
[   58.601700][ T4189]  </TASK>
[   58.773206][ T4195] netlink: 'syz.3.219': attribute type 4 has an invalid length.
[   58.827746][ T4196] netlink: 'syz.3.219': attribute type 4 has an invalid length.
[   58.953558][ T4199] netlink: 'syz.0.222': attribute type 64 has an invalid length.
[   59.003399][ T4202] __nla_validate_parse: 4 callbacks suppressed
[   59.003415][ T4202] netlink: 24 bytes leftover after parsing attributes in process `syz.1.223'.
[   59.142868][ T4210] tipc: Can't bind to reserved service type 1
[   59.149059][   T28] audit: type=1400 audit(1778284615.652:336): avc:  denied  { create } for  pid=4198 comm="syz.0.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   59.219566][   T28] audit: type=1400 audit(1778284615.652:337): avc:  denied  { bind } for  pid=4198 comm="syz.0.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   59.290673][   T28] audit: type=1400 audit(1778284615.682:338): avc:  denied  { write } for  pid=4198 comm="syz.0.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   59.321811][ T4187] erspan0: left promiscuous mode
[   59.486558][ T4187] gretap0: left promiscuous mode
[   59.704606][ T4191] loop4: detected capacity change from 0 to 2048
[   59.876964][ T4212] Set syz1 is full, maxelem 65536 reached
[   59.997140][ T4220] loop2: detected capacity change from 0 to 512
[   60.022177][ T4220] EXT4-fs: inline encryption not supported
[   60.063597][ T4220] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[   60.106873][ T4229] netlink: 12 bytes leftover after parsing attributes in process `syz.3.231'.
[   60.112770][ T4191] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   60.131353][ T4220] EXT4-fs (loop2): orphan cleanup on readonly fs
[   60.136016][ T4191] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   60.153235][ T4220] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[   60.174108][ T4220] EXT4-fs (loop2): Cannot turn on quotas: error -22
[   60.214380][ T4220] EXT4-fs error (device loop2): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[   60.233950][    C0] EXT4-fs (loop2): error count since last fsck: 1
[   60.240543][    C0] EXT4-fs (loop2): initial error at time 1778284616: mb_free_blocks:2049: inode 12: block 14
[   60.250779][    C0] EXT4-fs (loop2): last error at time 1778284616: mb_free_blocks:2049: inode 12: block 14
[   60.269104][ T4220] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #12: comm syz.2.228: corrupted inode contents
[   60.281731][ T4220] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[   60.283128][ T4264] netlink: 4 bytes leftover after parsing attributes in process `syz.0.230'.
[   60.308887][   T28] audit: type=1400 audit(1778284616.812:339): avc:  denied  { create } for  pid=4217 comm="syz.1.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   60.328747][ T4220] EXT4-fs error (device loop2): ext4_dirty_inode:6587: inode #12: comm syz.2.228: mark_inode_dirty error
[   60.340800][   T60] ==================================================================
[   60.340872][ T4220] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[   60.349097][   T60] BUG: KCSAN: data-race in touch_atime / touch_atime
[   60.349137][   T60] 
[   60.349145][   T60] write to 0xffff88811b005e78 of 4 bytes by task 4263 on cpu 1:
[   60.349162][   T60]  touch_atime+0x1d7/0x330
[   60.359139][   T28] audit: type=1400 audit(1778284616.842:340): avc:  denied  { write } for  pid=4169 comm="syz.4.214" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   60.365174][   T60]  shmem_file_read_iter+0x3f4/0x4b0
[   60.365215][   T60]  lo_rw_aio+0x67d/0x730
[   60.365251][   T60]  loop_process_work+0x56c/0xac0
[   60.368050][ T4224] can: request_module (can-proto-4) failed.
[   60.375552][   T60]  loop_workfn+0x31/0x40
[   60.375599][   T60]  process_scheduled_works+0x4f0/0x9c0
[   60.375632][   T60]  worker_thread+0x58a/0x780
[   60.375661][   T60]  kthread+0x22a/0x280
[   60.380705][ T4220] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #12: comm syz.2.228: corrupted inode contents
[   60.402159][   T60]  ret_from_fork+0x146/0x330
[   60.402204][   T60]  ret_from_fork_asm+0x1a/0x30
[   60.402234][   T60] 
[   60.402242][   T60] read to 0xffff88811b005e78 of 4 bytes by task 60 on cpu 0:
[   60.402261][   T60]  touch_atime+0x16c/0x330
[   60.402287][   T60]  shmem_file_read_iter+0x3f4/0x4b0
[   60.412295][   T60]  lo_rw_aio+0x67d/0x730
[   60.418961][   T28] audit: type=1400 audit(1778284616.842:341): avc:  denied  { create } for  pid=4169 comm="syz.4.214" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1
[   60.423403][   T60]  loop_process_work+0x56c/0xac0
[   60.534434][   T60]  loop_rootcg_workfn+0x22/0x30
[   60.539316][   T60]  process_scheduled_works+0x4f0/0x9c0
[   60.545051][   T60]  worker_thread+0x58a/0x780
[   60.549759][   T60]  kthread+0x22a/0x280
[   60.553840][   T60]  ret_from_fork+0x146/0x330
[   60.558453][   T60]  ret_from_fork_asm+0x1a/0x30
[   60.565146][   T60] 
[   60.567472][   T60] value changed: 0x32f1f457 -> 0x336eafef
[   60.573189][   T60] 
[   60.575513][   T60] Reported by Kernel Concurrency Sanitizer on:
[   60.581673][   T60] CPU: 0 UID: 0 PID: 60 Comm: kworker/u8:4 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[   60.592543][   T60] Tainted: [W]=WARN
[   60.596480][   T60] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[   60.606629][   T60] Workqueue: loop3 loop_rootcg_workfn
[   60.612031][   T60] ==================================================================
[   60.629985][ T4187] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.214: bg 0: block 345: padding at end of block bitmap is not set
[   60.646514][ T4218] Symlink component flag not implemented
[   60.653253][ T4220] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[   60.653810][ T4218] Symlink component flag not implemented
[   60.656601][ T4220] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm syz.2.228: mark_inode_dirty error
[   60.680278][ T4187] EXT4-fs (loop4): Remounting filesystem read-only
[   60.687008][ T4220] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[   60.687368][ T4220] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #12: comm syz.2.228: corrupted inode contents
[   60.708800][ T4220] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[   60.709050][ T4220] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem
[   60.710238][ T4259] FAT-fs (loop3): Directory bread(block 64) failed
[   60.718331][ T4220] loop2: lost filesystem error report for type 5 error -117
[   60.718484][ T4220] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #12: comm syz.2.228: corrupted inode contents
[   60.758094][ T4259] FAT-fs (loop3): Directory bread(block 65) failed
[   60.758135][ T4220] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[   60.765172][ T4220] EXT4-fs error (device loop2): ext4_truncate:4690: inode #12: comm syz.2.228: mark_inode_dirty error
[   60.784873][ T4259] FAT-fs (loop3): Directory bread(block 66) failed
[   60.796688][ T4220] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[   60.797095][ T4220] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem
[   60.809188][ T4259] FAT-fs (loop3): Directory bread(block 67) failed
[   60.815656][ T4220] loop2: lost filesystem error report for type 5 error -117
[   60.822634][ T4220] EXT4-fs (loop2): 1 truncate cleaned up
[   60.836746][ T4220] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   60.836835][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.859076][ T4259] FAT-fs (loop3): Directory bread(block 68) failed
[   60.873047][ T4259] FAT-fs (loop3): Directory bread(block 69) failed
[   60.888693][ T4259] FAT-fs (loop3): Directory bread(block 70) failed
[   60.897340][ T4259] FAT-fs (loop3): Directory bread(block 71) failed
[   60.912602][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.921949][ T4259] FAT-fs (loop3): Directory bread(block 72) failed
[   60.951684][ T4259] FAT-fs (loop3): Directory bread(block 73) failed
[   60.961498][ T4259] FAULT_INJECTION: forcing a failure.
[   60.961498][ T4259] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   60.975248][ T4259] CPU: 1 UID: 0 PID: 4259 Comm: syz.3.232 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[   60.975280][ T4259] Tainted: [W]=WARN
[   60.975287][ T4259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[   60.975372][ T4259] Call Trace:
[   60.975379][ T4259]  <TASK>
[   60.975387][ T4259]  __dump_stack+0x1d/0x30
[   60.975411][ T4259]  dump_stack_lvl+0x95/0xd0
[   60.975432][ T4259]  dump_stack+0x15/0x1b
[   60.975495][ T4259]  should_fail_ex+0x263/0x280
[   60.975527][ T4259]  should_fail+0xb/0x20
[   60.975555][ T4259]  should_fail_usercopy+0x1a/0x20
[   60.975638][ T4259]  strncpy_from_user+0x27/0x250
[   60.975726][ T4259]  ? kmem_cache_alloc_noprof+0x18c/0x3f0
[   60.975789][ T4259]  do_getname+0x59/0x1c0
[   60.975857][ T4259]  __se_sys_renameat2+0x38/0x1c0
[   60.975923][ T4259]  __x64_sys_renameat2+0x67/0x80
[   60.976085][ T4259]  x64_sys_call+0x2a12/0x3020
[   60.976101][ T4259]  do_syscall_64+0x12c/0x3b0
[   60.976121][ T4259]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   60.976137][ T4259] RIP: 0033:0x7f1d2973cdd9
[   60.976150][ T4259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   60.976266][ T4259] RSP: 002b:00007f1d28197028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c
[   60.976314][ T4259] RAX: ffffffffffffffda RBX: 00007f1d299b5fa0 RCX: 00007f1d2973cdd9
[   60.976326][ T4259] RDX: ffffffffffffff9c RSI: 0000200000000440 RDI: ffffffffffffff9c
[   60.976416][ T4259] RBP: 00007f1d28197090 R08: 0000000000000002 R09: 0000000000000000
[   60.976425][ T4259] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001
[   60.976434][ T4259] R13: 00007f1d299b6038 R14: 00007f1d299b5fa0 R15: 00007ffd2bf80268
[   60.976447][ T4259]  </TASK>