last executing test programs:

1m14.432792775s ago: executing program 0 (id=395):
socket$netlink(0x10, 0x3, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
timerfd_create(0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x3, &(0x7f0000000380)=@framed, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0))
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000060001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x240080d0)

1m13.350054168s ago: executing program 0 (id=408):
socket(0x10, 0x803, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
shutdown(0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x101001, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x4, 0x4, 0x4, 0x10000, 0x808, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3000000, 0xffffffff}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0x10)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4c, 0xf3, 0x8, [0x0, 0x0, 0x0, 0xc, 0x5, 0x0, 0x0, 0x40000002]}})

1m13.081994671s ago: executing program 0 (id=403):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x28, 0x0, 0x2, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}]}, 0x28}}, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
listen(0xffffffffffffffff, 0xd3)
r3 = syz_open_dev$loop(&(0x7f0000000000), 0x6, 0x109081)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000340)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
lchown(&(0x7f0000000040)='.\x00', 0xee00, 0x0)
lsetxattr$security_selinux(&(0x7f0000000080)='.\x00', &(0x7f00000000c0), &(0x7f0000000100)='system_u:object_r:systemd_logger_exec_t:s0\x00', 0x2b, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_all\x00', 0x275a, 0x0)
write$binfmt_misc(r4, 0x0, 0x0)
ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}})
r5 = fsmount(r4, 0x0, 0x3)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'})

1m12.667481642s ago: executing program 0 (id=405):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000100)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@dioread_lock}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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")
r2 = syz_io_uring_setup(0x10d3, &(0x7f0000000000)={0x0, 0x7f32, 0x0, 0x1, 0x34f}, &(0x7f00000000c0)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x8a100, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8})
io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f00000001c0)={0x79c, r0, 0x32, {0xb, 0x100004000}, 0x2}, 0x1)

1m12.367016737s ago: executing program 0 (id=409):
socket$nl_route(0x10, 0x3, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x78)
close(0xffffffffffffffff)
write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50)
r0 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x8, 0x306}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @xdp}, 0x94)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0})
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff], 0x57)
io_uring_enter(r0, 0x3516, 0xc2de, 0x8, 0x0, 0x0)

1m11.611936434s ago: executing program 0 (id=415):
socket(0x10, 0x803, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
shutdown(0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x101001, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x4, 0x4, 0x4, 0x10000, 0x808, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3000000, 0xffffffff}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', <r2=>0x0})
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4c, 0xf3, 0x8, [0x0, 0x0, 0x0, 0xc, 0x5, 0x0, 0x0, 0x40000002]}})

1m11.529901178s ago: executing program 32 (id=415):
socket(0x10, 0x803, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
shutdown(0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x101001, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x4, 0x4, 0x4, 0x10000, 0x808, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3000000, 0xffffffff}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', <r2=>0x0})
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4c, 0xf3, 0x8, [0x0, 0x0, 0x0, 0xc, 0x5, 0x0, 0x0, 0x40000002]}})

6.593862926s ago: executing program 3 (id=736):
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$unix(0x1, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r4=>0x0})
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f0000000200)={0x1d, r4}, 0x10)
sendmsg$can_bcm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r4, @ANYRES64=r3, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0)
sendmsg$sock(r5, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000000), 0x5, &(0x7f00000008c0)=[@timestamping={{0x14}}], 0x18}, 0x0)

6.580820226s ago: executing program 4 (id=737):
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8005, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
dup(0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[], 0xff2e)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x3, 0xffffffff)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xaffffffeffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x0)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x70}}, 0x0)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000)

5.49560981s ago: executing program 3 (id=744):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xe}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4)
recvmmsg(r3, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0)

4.825895252s ago: executing program 2 (id=746):
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000880)='./file0\x00', 0x100c404, &(0x7f0000000280)=ANY=[], 0x1, 0x1ff, &(0x7f0000000580)="$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")
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000180)='./file7/file0\x00', 0x1b4247c, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRESOCT=r1], 0x0, 0x0, &(0x7f0000000000))
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000380)=ANY=[@ANYBLOB="400000000c0601030000000000000000000000090500010007000000080009400000000f09000200"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x22040000)
socket$nl_netfilter(0x10, 0x3, 0xc)
read(0xffffffffffffffff, &(0x7f0000000240)=""/157, 0x9d)
r3 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0xa102)
ioctl$SG_GET_VERSION_NUM(r3, 0x2282, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x7, 0x10, 0x7ff, 0x8, {{0xd, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x15, 0x4, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop, @lsrr={0x83, 0x7, 0xf0, [@rand_addr=0x64010100]}, @lsrr={0x83, 0x17, 0xbb, [@multicast1, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @empty]}]}}}}})

4.554259376s ago: executing program 1 (id=747):
r0 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$peekuser(0x3, r0, 0x1a8)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xfffffffffffffffd, @perf_bp={0x0, 0x4}, 0x0, 0x10002, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0x14, 0x30, 0x871a15abc695fa3d, 0x70bd2d}, 0x14}}, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100))
r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)='memory.swap.max\x00', 0x2, 0x0)
ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000001ec0)={0x0, "4292e73cd743f48edb69a9fb697e2d76"})
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000000)=0x4)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x508}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)

4.551081206s ago: executing program 3 (id=757):
socket(0xa, 0x3, 0xff)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0x1b, "0062ba7d820700000000000000000000096304"})
r1 = syz_open_pts(r0, 0x80)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = dup3(r1, r0, 0x80000)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r3 = io_uring_setup(0x1c6e, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x2, 0xd, 0x0, r2})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xe}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0)
write$binfmt_script(r2, &(0x7f0000000000)={'#! ', './file1'}, 0xb)

4.525479957s ago: executing program 2 (id=748):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
socket$inet_mptcp(0x2, 0x1, 0x106)
futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x1)
close(0x3)
socket$inet6_sctp(0xa, 0x1, 0x84)
close(r0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r3, 0x84, 0x81, &(0x7f0000000280), 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c)
sendto$inet6(r3, &(0x7f00000004c0)="b0", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c)

4.447931481s ago: executing program 3 (id=749):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0xffffffff}, [@TCA_NETEM_DELAY_DIST={0xa, 0x2, "f051513ab3b5"}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x7fffffffffffffff, 0x10001, 0x800, 0x35d, 0x8000000000000000}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff5644d, 0x70b923, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {}, {0xe, 0xb}, {0xf, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0x0, 0x32, 0x5, 0xa, 0x2, 0x9, 0xd, 0x1, 0xfffffffb, {0xffff1c72, 0x23, 0x7, 0xc, 0xfffffffe, 0x7583}}}}]}, 0x78}}, 0x20048040)

4.320806128s ago: executing program 4 (id=751):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r0, &(0x7f0000000280), 0x10)
r1 = syz_clone(0x21000200, 0x0, 0x0, 0x0, 0x0, 0x0)
rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f0000000480)={0x26, 0x0, 0xfffffffb})
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCXONC(r2, 0x540a, 0x3)
getpid()
r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x19105d55dfc078f, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0)
write$binfmt_script(r6, &(0x7f00000000c0)={'#! ', './file0'}, 0xb)
sendfile(r6, r4, 0x0, 0x40001)
sendfile(r6, r5, 0x0, 0x7ffff000)

4.025945312s ago: executing program 1 (id=752):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000880)={[{@noacl}, {@delalloc}, {@nodioread_nolock}, {@lazytime}, {@usrjquota_path={'usrjquota', 0x3d, './bus'}}, {@mb_optimize_scan}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@noinit_itable}, {@nodioread_nolock}, {@noquota}]}, 0x0, 0x524, &(0x7f0000000c00)="$eJzs3c1vI2cZAPBnnMRxsmmTlh4AQbu0hQWt1km8bVT1AOWEEKqE6BGkNiTeKIoTR/momhCp6ZkrEr3CkT+Ac7lw54LgxqUcKvERFTVIHIxmPE69G3tjbT7s2r+fNJp55534ed8kM6/n8ccbwMi6HRHHEVGMiHciYjbfn+RLvNFc0uM+OzlaOT05Wkmi0XjrX0lWn+6Ltp9J3cofsxQRP/lBxM+T83F3Dw43lmu16k5ent/b3J7fPTi8t765vFZdq25VKkuLSwuv3X+1cmV9fWGzmG99/eM/HX/nF2mzZvI97f24Ss2uT5zFSY1HxI+uI1gfjOX9Kfa7ITyRQkQ8GxEvZuf/bIxlf00AYJg1GrPRmG0vAwDDLrIcWFIo57mAmSgUyuVmDu+5mC7U6rt7dx/U97dWm7myuZgoPFivVRfyXOFcTCRpeTHb/rxceaR8PyKeiYhfTU5l5fJKvbbax+c9ADDKbj0y/v9nsjn+AwBDrtTvBgAAN2qqffxvNBrvP1Tb4Z27AMBQcP8PAKOnx/FfMgAAhkhz/J/qdzMAgBsk/w8Ao8f4DwAj5cdvvpkujdP8+69X3z3Y36i/e2+1urtR3txfKa/Ud7bLa/X6WvadPZsXPV6tXt9efCX235v77vZu63nF/tbe29n3er9dnch2HF9zrwCAx3nmhY/+mqQj8utT2RJtczlM9LVlwHUr9LsBQN+MXXSAW3UYWmb7gtF1iXt86QEYEhd9trfU6QNCrQlEgC+kO1+R/4dR1Zb/9y5gGDEX5v+BoSX/D6Or0Uh6nfM/ej0QABhscvxAl9f/n83Xv8tfHPjZ6qNHfHidrQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDB1pr/t5zPBT4ThUK5HPFURMzFRPJgvVZdiIinI+IvkxOTaXmxz20GAC6r8EmSz/91Z/blmYeqnr91ttmaJ/C95b29nT9HFJN/T6blYkTsffjWr7P9lZttOQDQm9Y4na3bbuQ/OzlaaS032Z5/fD8iSs34pyfFOD2LPx7j2bqUPfeY/jQptv9c0pa7uIzjDyLiy536n8RMlgNpznw6/WmSt6cpjf3UjcYvPBS/kNU11+nv4ktX0BYYNR+l1583Op1/hbidrTuf/6XsCnV5+fUvfaiV0+wa+Hn81vVvrEP89Jy/3WuMV/74w+bW1Pm6DyK+Oh7Rin3adv1pxU+6xH+5x/h/+9rzL3ara/wm4k50jt8ea35vc3t+9+Dw3vrm8lp1rbpVqSwtLi28dv/VynyWo57vPhr88/W7T3erS/s/3SV+qWv/38/2fbPH/v/2f+/89BuPif/tl9rif3KU1xTiua7xm/fj3+ox/vL070vd6tL4q136f9Hf/26P8T/+++G5acMBgP7ZPTjcWK7VqjsDtBGlgWjGIG20ch+D0p5uG6VrbmH6OxiMnp7f+N5Fx/zhimIVo3PVL1/q+E/SaDxRrG5XjKvIugGD4Oykj4j/9rsxAAAAAAAAAAAAAABARzfx6ah+9xEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDh9f8AAAD//wUJyWU=")
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa0c42, 0x1c8)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5193bb672974593497c186a80e00", "0000b226", "000200000040e000"}, 0x38)
socket$inet(0x2, 0x4000000000000001, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1b, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe1, 0x4, @perf_bp={0x0}, 0x4, 0x400004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$eJzs3c1vVFUbAPDnzkwLpe9rKzEqLkyjIZAoLS1g8GMBe0LwY+fGSgtBho/QGi2aWBLcmBg3LkhcuRD/CyW6dWXiwoUbV4akGsNGY3TMnbkzDO1MOy0dbu39/ZLbOeeeOz3nQp85Z+49ZyaAwhpLf5Qi9kTE5SRipK2sElnhWOO4O7+/fzrdkqjVXv0tiSTb1zw+yR6Hsyf/PRLx/TdJ7C6vrHdu4er56Wp19kqWn5i/cHlibuHqgXMXps/Onp29OPXc1NEjh48cnTx4X+dXakufuP7WOyMfnXz9i8/+Sia//OlkEsfi1zONsvbz2CxjMRZ/1GofLN+f/rse3ezKclJu/Z3clSzfwZZVyWJkMCIei5Eot/1vjsSHL+faOKCvaklEDSioRPxDQTXHAc339r29Dy71eVQCPAhLx9OfAx3iv9K4NhijMRARe5c9r8MlvQ1J6/ju25PX0y36dB0O6Gzx2o4stTz+k3psjsbOem7XndI913nTEcCp7DHd/8oG6x9blhf/8OAsXouIxzuN/9eO/zfa4v/NDdYv/gEAAAAAAGDz3DoeEc92uv9Xyu7N7Yyn6vf/ksb9vx/urhA8tgn1r33/r3R7E6oBOlg6HvFSx/m/rTm+o+Us9//GbMDkzLnq7MGIeCgi9sfAjjQ/uUodBz7efaNbWfv8v3RL62/OBczacbuy497nzEzPT9/POQMNS9cinqh0n/+T9v9Je/+fSV8PLvdYx+69N091K1s7/oF+qX0esa9j/5+0jklW/3yOifp4YKI5Kljpyfc++apb/eIf8pP2/7tWj//RpP3zeubW9/sHI+LQQqXWrXyj4//B5LVy8/en3p2en78yGTGYnFi5f2p9bYbtqhkPzXhJ43//06tf/2uN/9vicCgiFnus89F/hn/uVqb/h/yk8T+zrv5//Ympm6Nfd6u/t/7/cL1P35/tcf0PVtdrgObdTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4LypFxP8iKY230qXS+HjEcEQ8ErtK1Utz88+cufT2xZm0rP79/6XmN/2ONPJJ8/v/R9vyU8vyhyLi4Yj4tDxUz4+fvlSdyfvkAQAAAAAAAAAAAAAAAAAAYIsY7rL+P/VLOe/WAX1XyR7FOxRPJe8GALkR/1Bc4h+KS/xDcYl/KK4Nxr/bBbAN6P+hqAZ6O2xnv9sB5EH/DwAAAAAA28qtF5+/kUTE4gtD9S01mJW1bgwO5dU6oJ9KeTcAyI05vFBcpv5AcfU4+RfYxpJW6s9ap/Lus/+T/jQIAAAAAAAAAAAAAFhh355bP665/h/Ylqz/h+Ky/h+Ky/p/KC7v8YG1VvFb/w8AAAAAAAAAAAAA+ZtbuHp+ulqdvSIhsdUSAxGxBZqRQ2Iw//DM+YUJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABo+TcAAP//Swsk/Q==")
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000200)=@assoc_value, &(0x7f0000000480)=0x8)
r4 = socket(0x2, 0x5, 0x0)
sendmmsg$inet(r4, &(0x7f0000000bc0)=[{{&(0x7f0000000640)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000840)='\a', 0x1}], 0x1}}], 0x1, 0x0)

4.025294182s ago: executing program 3 (id=763):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0xc}, 0x95b0, 0x4d, 0x800020, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x77a3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
openat$ptp0(0xffffffffffffff9c, 0x0, 0x129081, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000353000/0x1000)=nil, 0x1000, 0x1000000, 0x4000010, 0xffffffffffffffff, 0x8000000)
close(0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
pipe2(&(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x84000)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x2002, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2)
readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/73, 0xfffffd8d}], 0x1)
writev(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="19", 0x3a4e1e905c56cdb7}], 0x1)
mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil)
madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15)
socket$inet6(0xa, 0x2, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)

3.934603596s ago: executing program 5 (id=753):
socket(0xa, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r0, 0x0, 0x4800)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000080654d97"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_audit(0x10, 0x3, 0x9)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x4000000)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x14, 0x0, 0x11004, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r3 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0xeae7, 0x1000, 0x6, 0x39a}, &(0x7f0000000000)=<r4=>0x0, &(0x7f0000000080)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r2, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20000044})
io_uring_enter(r3, 0x2afd, 0x308b, 0xc, 0x0, 0x0)

3.354846905s ago: executing program 5 (id=754):
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
syz_emit_ethernet(0x68, &(0x7f00000009c0)=ANY=[@ANYBLOB="fffff0ffffffaaaaaaaaaa000800451b005a00000000002f907800000000e0000001248081000000000010000800000086dd007f080088be0000000010008000010000000000000008fb21eb0000000120182e74"], 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20030, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
r2 = getpid()
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x2200008, &(0x7f0000000280)={[{@stripe={'stripe', 0x3d, 0x9}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x586, &(0x7f00000003c0)="$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")
setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x835, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xe00, 0xe}, 0x80, 0x0}, 0x4800)
r3 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setns(r3, 0x66020000)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
write$tun(0xffffffffffffffff, &(0x7f0000000100)={@val={0x8, 0x800}, @val={0x0, 0x1, 0x6, 0x4, 0x7, 0x48}, @ipv4=@igmp={{0x5, 0x4, 0x0, 0x11, 0x1c, 0x67, 0x0, 0x30, 0x2, 0x0, @local, @remote}, {0x1e, 0xd2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}}}, 0x2a)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
wait4(0x0, 0x0, 0x20000000, 0x0)
syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1818e58, &(0x7f00000003c0), 0x2a, 0x63f, &(0x7f0000000d80)="$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")

3.086374968s ago: executing program 2 (id=755):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x400000, 0x0, 0x100, 0x0, 0x0})
socket$inet6(0xa, 0x1, 0x8010800000000084)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000080)=0xb, 0x8, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3)

3.086170668s ago: executing program 4 (id=756):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
ioprio_set$pid(0x2, 0x0, 0x0)
r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x0)
fchdir(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd)
sendfile(r4, r4, 0x0, 0xe3aa6ea)
linkat(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1400)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x12, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0)
bind$l2tp6(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)

2.983980213s ago: executing program 1 (id=758):
openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={0x735980, 0x0, 0x38}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x41, 0x2c8, &(0x7f0000000580)="$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")
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4db, 0x20081, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x9, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000180)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10)
sendmmsg$inet(r3, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0)

1.892405867s ago: executing program 2 (id=759):
prlimit64(0x0, 0x8, &(0x7f0000000080), 0x0)
mlock2(&(0x7f0000341000/0x3000)=nil, 0x3000, 0x1)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000001900010000000000000000000a1000000004fe00002e000008001e8001"], 0x2c}, 0x1, 0x0, 0x0, 0x4000090}, 0x4000050)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xffff, 0xffff}, {0x5, 0x7ff9}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x841)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
lseek(0xffffffffffffffff, 0x8000000000000000, 0x3)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bond0\x00', <r4=>0x0})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x6, 0x6}, 0x0, 0x10000, 0xda, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x7000000)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1ba20, 0x40a38}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_LINKMODE={0x5, 0x11, 0x1}]}, 0x4c}}, 0x8000002)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0)

1.6249643s ago: executing program 1 (id=760):
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000880)='./file0\x00', 0x100c404, &(0x7f0000000280)=ANY=[], 0x1, 0x1ff, &(0x7f0000000580)="$eJzs3buKE1EYAOA/2VzFYjtBEEYstFrUJ1iRFcSAsJJCO0ErU+02WZvdx/AVfC8fQLZKI0fiTC7m5hrMjK7f1+Sf858/5zIwSZOTFLkvtz5Fp1OL+mEcxqgW+1GPiYsAAK6TUUrxNe1VPQ0AoET5539uTZdvJU8JANixV6/fvHjS6x0dZ1kn4vJi2B/289c8/+x57+hh9sP+rOpyOOzvTfOPssXvDuN8M24U+cd5fTZNtyKi34oH9/L8OPf0ZS/7ub4d73a8dgAAAAAAAAAAAAAAAAAAAAAAqMqdyCZWnu9zcLCY7xb5/GrufKCF83sacbtRXM6OB0rnZSwKAAAAAAAAAAAAAAAAAAAA/jGnZx8/vB0M3p/MgnZEzLc0VvRZH9SKN562tH6rvOygHtuVd4tlbjFordii3S6wu/rmXiWIxt9yd7YNsqWW+h/f8O7G7U1pHMTK8smxGGvLWxGxefT7x1eaajOWUqOU0uDz3ZPTs0gby2fPiHapTyQAAAAAAAAAAAAAAAAAAPh/zf3qe0mnigkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAVm//8/DpZbNgbnEXEzftl5MlYzOpWuFQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgOvrewAAAP//M04ZOg==")
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000180)='./file7/file0\x00', 0x1b4247c, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRESOCT=r1], 0x0, 0x0, &(0x7f0000000000))
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000380)=ANY=[@ANYBLOB="400000000c0601030000000000000000000000090500010007000000080009400000000f09000200"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x22040000)
socket$nl_netfilter(0x10, 0x3, 0xc)
read(0xffffffffffffffff, &(0x7f0000000240)=""/157, 0x9d)
r3 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0xa102)
ioctl$SG_GET_VERSION_NUM(r3, 0x2282, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x7, 0x10, 0x7ff, 0x8, {{0xd, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x15, 0x4, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop, @lsrr={0x83, 0x7, 0xf0, [@rand_addr=0x64010100]}, @lsrr={0x83, 0x17, 0xbb, [@multicast1, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @empty]}]}}}}})

1.62469733s ago: executing program 4 (id=761):
socket(0xa, 0x3, 0xff)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0x1b, "0062ba7d820700000000000000000000096304"})
syz_open_pts(r0, 0x80)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
read(r0, &(0x7f00000005c0)=""/228, 0xe4)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r1 = io_uring_setup(0x1c6e, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x2, 0xd})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xe}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)={'#! ', './file1'}, 0xb)

1.511044916s ago: executing program 4 (id=762):
socket(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$eJzs3M1rXFUbAPDn3kymaZv3nfTlRawbIyItiNOkkmKLYCsVNy4E3QoN6aSETD9IIjVpFhP9B0RdC24EtSgu7LobRbdutN0qLoQisVEQ0cidjyQ2mTS1M70x/f3gzD3nnpl5nmcuM/cemJkA7luD2U0asT8iTiURpeb+NCKK9V5fRK1xv6XF+bFfF+fHklhefumnJJKIuLk4P9Z6rqS53dsc9EXE188m8b831sednp2bHK1WK1PN8aGZsxcOTc/OPTFxdvRM5Uzl3PCRp0YOjxwZOjrSsVp/++74lV8eef6H2u8f/nH557ffT+J49Dfn1tbRKYMxuPKarFWIiNFOB8tJT7OetXUmhds8KO1yUgAAtJWuuYZ7IErRE6sXb6X4/JtckwMAAAA6YrknYhkAAADY4RLrfwAAANjhWt8DuLk4P9Zq+X4j4d66cSIiBhr1LzVbY6YQtfq2L3ojYs/NJNb+rDVpPOyuDUbE99ePfpK16NLvkDdTW4iIBzc6/km9/oH6r7jX159GxFAH4g/eMv431X+8A/Hzrh+A+9PVE40T2frzX7py/RMbnP8KG5y7/om8z3+t67+lddd/q/X3tLn+e3GLMS598O7FdnNZ/U9fee7jVsviZ9u7KuoO3FiIeKiwUf3JSv1Jm/pPbTFG6c+LlXZzede//F7Egdi4/pZk8/8nOjQ+Ua0MNW43jLHw1chH7eLnXX92/Pe0qb/1/0/tjv+FLcZ45eTJT9ftvL7a3bz+9Mdi8nK9V2zueW10ZmZqOKKYvLB+/+HNc2ndp/UcWf0HH938/b9R/dlnQq35OmRrgYXmNhu/fkvMZy5f+qxdPq31X57H/3Sb47+2/i8L64//m1uM8dgXbx1sN7d2/Zu1LH5rLQwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALWlE9EeSllf6aVouR+yNiP/HnrR6fnrm8fHzr547nc1FDERvOj5RrQxFRKkxTrLxcL2/Oj58y/jJiNgXEe+UdtfH5bHz1dN5Fw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCKvRHRH0lajog0IpZKaVou550VAAAA0HEDeScAAAAAdJ31PwAAAOx81v8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB02b6Hr15LIqJ2bHe9ZYrNud5cMwO6Lc07ASA3PXknAOSmkHcCQG7ucI3vcgF2oOQ2831tZ3Z1PBcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtq8D+69eSyKidmx3vWWKzbneXDMDui3NOwEgNz2bTRbuXR7AvectDvcva3wguc183+p9an+f2dW1nAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYfvrrLUnLEVFs7iuXI/4TEQPRm4xPVCtDEfHfiPi21LsrGw/nnDMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACdNz07NzlarVamsk4azc7KHp3VTtJ4xWrbJR+du+wUY1uksU07eX8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQh+nZucnRarUyNZ13JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDepmfnJker1cpUFzt51wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH7+CgAA//9gfgp0")
open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4)
lremovexattr(&(0x7f0000000100)='./file1\x00', &(0x7f0000000400)=ANY=[])

1.410067581s ago: executing program 2 (id=764):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0xcb, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0)
connect$inet(r3, &(0x7f0000000280)={0x2, 0xfffd, @multicast1}, 0x10)
sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0)

1.348517334s ago: executing program 3 (id=765):
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300))
socketpair$unix(0x1, 0x1, 0x0, 0x0)
capset(0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fffff}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054)
write$nci(r0, &(0x7f0000000240)=@NCI_OP_CORE_RESET_NTF={0x0, 0x1, 0x3, 0x0, 0x9, {0x45, 0xfe, 0x20, 0x2, 0x7, 0x4}}, 0xc)
write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14)
write$nci(r0, &(0x7f0000000e80)=@NCI_OP_RF_DISCOVER_MAP_RSP={0x1, 0x0, 0x2, 0x0, 0x30, 0x1}, 0x5c)

1.306967996s ago: executing program 1 (id=766):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00000004000000dd000000"], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x23, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1e0411, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x1}, 0x6025, 0x4008, 0xb, 0x3, 0x80, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x4000, &(0x7f0000000240)={[{@noinit_itable}]}, 0x1, 0x512, &(0x7f0000000c40)="$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")

1.286820947s ago: executing program 5 (id=767):
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x25dfdbfd, {}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}}, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0)
capset(0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000c40)={0x73622a85, 0x0, 0x1})
socket$inet6_tcp(0xa, 0x1, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x7, 0x20000000)

502.810355ms ago: executing program 1 (id=768):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r0, &(0x7f0000000280), 0x10)
r1 = syz_clone(0x21000200, 0x0, 0x0, 0x0, 0x0, 0x0)
rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f0000000480)={0x26, 0x0, 0xfffffffb})
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCXONC(r2, 0x540a, 0x3)
getpid()
r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x19105d55dfc078f, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0)
write$binfmt_script(r6, &(0x7f00000000c0)={'#! ', './file0'}, 0xb)
sendfile(r6, r4, 0x0, 0x40001)
sendfile(r6, r5, 0x0, 0x7ffff000)

502.560486ms ago: executing program 4 (id=769):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f00000000c0), 0x10)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0xc0400, 0x0)
r3 = dup2(r1, r2)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r3)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
r4 = getpid()
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000000000000100000000000000000000007700000000"])
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xdffffeffffffffff, 0xffffffffffffffff, 0x1)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r7, 0xffffffffffffffff, 0x1e, 0x0, @val=@perf_event={0x400}}, 0x18)
sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000400)={0x0, 0x100000, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0xb0)

378.239542ms ago: executing program 2 (id=770):
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = mq_open(&(0x7f0000000580)='!\x7f\x00\xca\x00\x00\x00\f\x00vt\x00\x01E!\x05\x99\xb7|`', 0x6e93ebbbcc0884f2, 0x61, &(0x7f0000000480)={0x0, 0x2, 0x7})
mq_timedreceive(r2, &(0x7f0000000700)=""/200, 0xc8, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x38}}, 0x10)
r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xff2e)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000002100)=0xc)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)

344.688683ms ago: executing program 5 (id=771):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x7, 0x0, 0x2, 0x3, 0x0, 0x800}, 0x20)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00'})
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20)
setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'dummy0\x00', <r3=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
recvmmsg(r1, &(0x7f0000007900)=[{{&(0x7f00000002c0)=@ieee802154, 0x80, &(0x7f0000000380)=[{&(0x7f0000000240)=""/41, 0x29}, {&(0x7f0000000440)=""/102, 0x66}], 0x2, &(0x7f00000004c0)=""/252, 0xfc}, 0x4}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000005c0)=""/232, 0xe8}, {&(0x7f00000006c0)=""/194, 0xc2}], 0x2}, 0x1ff}, {{&(0x7f0000000800)=@generic, 0x80, &(0x7f0000000900)=[{&(0x7f0000000880)=""/101, 0x65}], 0x1, &(0x7f0000000940)=""/130, 0x82}, 0x5}, {{&(0x7f0000000a00)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000a80)=""/154, 0x9a}, {&(0x7f0000000b40)=""/38, 0x26}, {&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f0000000b80)=""/249, 0xf9}, {&(0x7f0000000c80)=""/60, 0x3c}, {&(0x7f0000000cc0)=""/52, 0x34}, {&(0x7f0000000d00)=""/244, 0xf4}], 0x7, &(0x7f0000000e80)=""/211, 0xd3}, 0xb}, {{&(0x7f0000000f80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000001080)=[{&(0x7f0000001000)=""/111, 0x6f}, {&(0x7f00000025c0)=""/159, 0x9f}, {&(0x7f0000002680)=""/172, 0xac}], 0x3, &(0x7f0000002740)=""/149, 0x95}, 0x4}, {{&(0x7f0000002800)=@tipc=@name, 0x80, &(0x7f00000010c0)=[{&(0x7f0000002880)=""/203, 0xcb}, {&(0x7f0000002980)=""/239, 0xef}], 0x2, &(0x7f0000002a80)=""/190, 0xbe}, 0x9}, {{&(0x7f0000002b40)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000005f80)=[{&(0x7f0000002bc0)}, {&(0x7f0000002c00)=""/255, 0xff}, {&(0x7f0000002d00)=""/12, 0xc}, {&(0x7f0000002d40)=""/77, 0x4d}, {&(0x7f0000002dc0)=""/4096, 0x1000}, {&(0x7f0000003dc0)=""/4096, 0x1000}, {&(0x7f0000004dc0)=""/134, 0x86}, {&(0x7f0000004e80)=""/4096, 0x1000}, {&(0x7f0000005e80)}, {&(0x7f0000005ec0)=""/188, 0xbc}], 0xa, &(0x7f0000006040)=""/236, 0xec}, 0x2}, {{&(0x7f0000006140)=@isdn, 0x80, &(0x7f00000063c0)=[{&(0x7f00000061c0)=""/89, 0x59}, {&(0x7f0000006240)=""/157, 0x9d}, {&(0x7f0000006300)=""/54, 0x36}, {&(0x7f0000006340)=""/128, 0x80}], 0x4}, 0x5}, {{&(0x7f0000006400)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000007880)=[{&(0x7f0000006480)=""/4096, 0x1000}, {&(0x7f0000007480)=""/246, 0xf6}, {&(0x7f0000007580)=""/209, 0xd1}, {&(0x7f0000007680)=""/129, 0x81}, {&(0x7f0000007740)=""/106, 0x6a}, {&(0x7f00000077c0)=""/139, 0x8b}], 0x6}, 0x4}], 0x9, 0x122, &(0x7f0000007b40)={0x77359400})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'dummy0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0)

130.058814ms ago: executing program 5 (id=772):
socket$kcm(0x10, 0x400000002, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
socket$kcm(0x29, 0x2, 0x0)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xb, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
mmap(&(0x7f00007ce000/0x3000)=nil, 0x3000, 0x0, 0x30, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r1 = syz_io_uring_setup(0x10c2, &(0x7f0000000040)={0x0, 0x815e, 0x180, 0x0, 0x2fe}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000000)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_pidfd_open(0x0, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x42, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0)

0s ago: executing program 5 (id=773):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0xffffffff}, [@TCA_NETEM_DELAY_DIST={0xa, 0x2, "f051513ab3b5"}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x7fffffffffffffff, 0x10001, 0x800, 0x35d, 0x8000000000000000}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff5644d, 0x70b923, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {}, {0xe, 0xb}, {0xf, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0x0, 0x32, 0x5, 0xa, 0x2, 0x9, 0xd, 0x1, 0xfffffffb, {0xffff1c72, 0x23, 0x7, 0xc, 0xfffffffe, 0x7583}}}}]}, 0x78}}, 0x20048040)

kernel console output (not intermixed with test programs):

e data=ordered instead of data journaling mode
[   78.502735][ T4506] netlink: 4 bytes leftover after parsing attributes in process `syz.4.270'.
[   78.526477][ T4489] infiniband syz0: set active
[   78.542993][ T4506] hsr_slave_1 (unregistering): left promiscuous mode
[   78.551710][ T4501] EXT4-fs (loop1): 1 truncate cleaned up
[   78.558677][ T4489] infiniband syz0: added lo
[   78.563598][   T10] lo speed is unknown, defaulting to 1000
[   78.569947][ T4501] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   78.599491][ T4489] RDS/IB: syz0: added
[   78.606029][ T4489] smc: adding ib device syz0 with port count 1
[   78.612551][ T4489] smc:    ib device syz0 port 1 has no pnetid
[   78.618861][ T4322] lo speed is unknown, defaulting to 1000
[   78.625987][ T4489] lo speed is unknown, defaulting to 1000
[   78.675201][ T4510] syzkaller0: entered promiscuous mode
[   78.681574][ T4510] syzkaller0: entered allmulticast mode
[   78.757895][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.771123][ T4489] lo speed is unknown, defaulting to 1000
[   78.807053][ T4512] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   78.926497][ T4489] lo speed is unknown, defaulting to 1000
[   78.973253][ T4519] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[   79.003419][ T3306] Alternate GPT is invalid, using primary GPT.
[   79.009904][ T3306]  loop1: p2 p3 p7
[   79.020403][ T4517] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[   79.025437][ T4518] Alternate GPT is invalid, using primary GPT.
[   79.044179][ T4489] lo speed is unknown, defaulting to 1000
[   79.050250][ T4518]  loop1: p2 p3 p7
[   79.061801][ T4517] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(8)
[   79.068423][ T4517] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   79.146838][ T4517] vhci_hcd vhci_hcd.0: Device attached
[   79.191155][ T4489] lo speed is unknown, defaulting to 1000
[   79.293910][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.321000][   T10] vhci_hcd vhci_hcd.4: vhci_device speed not set
[   79.391066][   T10] usb 9-3: new full-speed USB device number 3 using vhci_hcd
[   80.130977][ T4520] vhci_hcd: connection reset by peer
[   80.150671][ T3823] vhci_hcd vhci_hcd.4: stop threads
[   80.178578][ T3823] vhci_hcd vhci_hcd.4: release socket
[   80.256038][ T3823] vhci_hcd vhci_hcd.4: disconnect device
[   80.518884][ T4540] set_capacity_and_notify: 8 callbacks suppressed
[   80.518902][ T4540] loop3: detected capacity change from 0 to 512
[   80.609489][ T4540] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002]
[   80.647366][ T4540] EXT4-fs (loop3): orphan cleanup on readonly fs
[   80.691907][ T4540] EXT4-fs warning (device loop3): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[   80.753543][ T4540] EXT4-fs (loop3): Cannot turn on quotas: error -22
[   80.772605][ T4540] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #13: comm syz.3.278: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[   80.853943][ T4540] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[   80.854125][ T4540] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.278: couldn't read orphan inode 13 (err -117)
[   80.863382][    C0] EXT4-fs (loop3): error count since last fsck: 1
[   80.863406][    C0] EXT4-fs (loop3): last error at time 1773693575: ext4_ext_check_inode:521: inode 13
[   80.971072][   T28] kauditd_printk_skb: 4 callbacks suppressed
[   80.971086][   T28] audit: type=1400 audit(1773693575.801:447): avc:  denied  { read } for  pid=4547 comm="syz.4.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   81.016502][ T4540] loop3: lost filesystem error report for type 5 error -117
[   81.017152][ T4540] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   81.113985][   T28] audit: type=1400 audit(1773693575.931:448): avc:  denied  { setopt } for  pid=4547 comm="syz.4.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   81.155754][ T4550] netlink: 168 bytes leftover after parsing attributes in process `syz.4.281'.
[   81.168774][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.219273][ T4552] tipc: Started in network mode
[   81.233012][ T4552] tipc: Node identity 367037d0dd7, cluster identity 4711
[   81.261653][ T4552] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   81.281036][ T4552] syzkaller0: entered promiscuous mode
[   81.300656][ T4552] syzkaller0: entered allmulticast mode
[   81.322599][ T4552] tipc: Resetting bearer <eth:syzkaller0>
[   81.338725][ T4551] tipc: Resetting bearer <eth:syzkaller0>
[   81.353504][ T4551] tipc: Disabling bearer <eth:syzkaller0>
[   81.562016][ T4557] lo speed is unknown, defaulting to 1000
[   81.580956][ T4561] netlink: 'syz.3.283': attribute type 1 has an invalid length.
[   81.900792][ T4563] bond0: (slave geneve2): making interface the new active one
[   81.924064][ T4563] bond0: (slave geneve2): Enslaving as an active interface with an up link
[   81.963530][ T1709] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20004 - 0
[   81.990474][ T1709] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20004 - 0
[   82.024671][ T1709] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20004 - 0
[   82.046639][ T1709] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20004 - 0
[   82.441679][ T4573] SELinux:  Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped).
[   82.452380][   T28] audit: type=1400 audit(1773693577.271:449): avc:  denied  { mac_admin } for  pid=4572 comm="syz.2.289" capability=33  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   83.015059][   T28] audit: type=1400 audit(1773693577.381:450): avc:  denied  { relabelto } for  pid=4572 comm="syz.2.289" name="50" dev="tmpfs" ino=270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0"
[   83.289196][ T4581] loop0: detected capacity change from 0 to 1024
[   83.296156][   T28] audit: type=1400 audit(1773693577.401:451): avc:  denied  { associate } for  pid=4572 comm="syz.2.289" name="50" dev="tmpfs" ino=270 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:systemd_logger_exec_t:s0"
[   83.324217][ T4581] EXT4-fs: Ignoring removed nobh option
[   83.329863][ T4581] EXT4-fs: Ignoring removed nomblk_io_submit option
[   83.359509][   T28] audit: type=1400 audit(1773693577.651:452): avc:  denied  { write } for  pid=4572 comm="syz.2.289" name="50" dev="tmpfs" ino=270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0"
[   83.409953][ T4581] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   83.450385][   T28] audit: type=1400 audit(1773693577.661:453): avc:  denied  { add_name } for  pid=4572 comm="syz.2.289" name="cpuacct.usage_all" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0"
[   83.477318][   T28] audit: type=1400 audit(1773693577.661:454): avc:  denied  { associate } for  pid=4572 comm="syz.2.289" name="cpuacct.usage_all" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   83.499957][   T28] audit: type=1400 audit(1773693578.181:455): avc:  denied  { remove_name } for  pid=3313 comm="syz-executor" name="cpuacct.usage_all" dev="tmpfs" ino=275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0"
[   83.528904][   T28] audit: type=1400 audit(1773693578.181:456): avc:  denied  { unlink } for  pid=3313 comm="syz-executor" name="cpuacct.usage_all" dev="tmpfs" ino=275 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   83.761546][ T4600] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4600 comm=syz.1.297
[   83.808566][ T4588] loop4: detected capacity change from 0 to 512
[   83.825386][ T4588] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002]
[   83.833456][ T4588] System zones: 0-2, 18-18, 34-34
[   83.840052][ T4588] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters
[   83.869341][ T4588] EXT4-fs (loop4): Remounting filesystem read-only
[   83.875964][    C0] EXT4-fs (loop4): error count since last fsck: 1
[   83.875984][    C0] EXT4-fs (loop4): initial error at time 1773693578: ext4_mb_generate_buddy:1315
[   83.876014][    C0] EXT4-fs (loop4): last error at time 1773693578: ext4_mb_generate_buddy:1315
[   83.901102][ T4588] EXT4-fs (loop4): 1 truncate cleaned up
[   83.907288][ T4588] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   83.919831][ T4588] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   83.940529][ T3811] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   83.951250][ T3811] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   83.962057][ T3811] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started
[   84.324410][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.398231][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.687751][   T10] usb 9-3: enqueue for inactive port 2
[   84.693397][   T10] usb 9-3: enqueue for inactive port 2
[   84.761270][   T10] vhci_hcd vhci_hcd.4: vhci_device speed not set
[   85.184861][ T4636] netlink: 4 bytes leftover after parsing attributes in process `syz.2.306'.
[   85.217604][ T4636] bond_slave_0: entered promiscuous mode
[   85.223324][ T4636] bond_slave_1: entered promiscuous mode
[   85.243780][ T4636] macvlan2: entered promiscuous mode
[   85.249290][ T4636] bond0: entered promiscuous mode
[   85.255507][ T4636] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   86.034409][   T28] kauditd_printk_skb: 11 callbacks suppressed
[   86.034427][   T28] audit: type=1400 audit(1773693580.871:460): avc:  denied  { create } for  pid=4649 comm="syz.3.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   86.120660][   T28] audit: type=1400 audit(1773693580.871:461): avc:  denied  { bind } for  pid=4649 comm="syz.3.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   86.184193][ T4655] loop1: detected capacity change from 0 to 256
[   86.223528][ T4653] loop0: detected capacity change from 0 to 4096
[   86.246888][ T4655] FAT-fs (loop1): Directory bread(block 1285) failed
[   86.276563][ T4653] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   86.291140][ T4655] FAT-fs (loop1): Directory bread(block 1286) failed
[   86.309325][ T4653] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #15: comm syz.0.310: corrupted inode contents
[   86.339792][ T4655] FAT-fs (loop1): Directory bread(block 1287) failed
[   86.347159][ T4653] EXT4-fs error (device loop0): ext4_dirty_inode:6450: inode #15: comm syz.0.310: mark_inode_dirty error
[   86.382112][ T4655] FAT-fs (loop1): Directory bread(block 1288) failed
[   86.391671][ T4644] loop4: detected capacity change from 0 to 32768
[   86.399595][ T4653] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #15: comm syz.0.310: corrupted inode contents
[   86.444293][ T4653] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #15: comm syz.0.310: mark_inode_dirty error
[   86.455961][   T28] audit: type=1400 audit(1773693581.281:462): avc:  denied  { remove_name } for  pid=4652 comm="syz.0.310" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   86.464370][ T4661] netlink: 6032 bytes leftover after parsing attributes in process `syz.0.310'.
[   86.512382][   T28] audit: type=1400 audit(1773693581.281:463): avc:  denied  { rename } for  pid=4652 comm="syz.0.310" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   86.535752][ T4653] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #15: comm syz.0.310: corrupted inode contents
[   86.556704][   T28] audit: type=1400 audit(1773693581.281:464): avc:  denied  { unlink } for  pid=4652 comm="syz.0.310" name="file3" dev="loop0" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   86.629697][   T28] audit: type=1400 audit(1773693581.431:465): avc:  denied  { name_bind } for  pid=4652 comm="syz.0.310" src=19996 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[   86.630606][ T4653] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #15: comm syz.0.310: mark_inode_dirty error
[   86.875825][   T28] audit: type=1400 audit(1773693581.711:466): avc:  denied  { bind } for  pid=4652 comm="syz.0.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   87.522196][   T28] audit: type=1400 audit(1773693581.781:467): avc:  denied  { setopt } for  pid=4652 comm="syz.0.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   87.767892][ T4653] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #15: comm syz.0.310: corrupted inode contents
[   87.800137][   T28] audit: type=1400 audit(1773693581.801:468): avc:  denied  { accept } for  pid=4652 comm="syz.0.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   87.821897][ T4653] EXT4-fs error (device loop0): ext4_truncate:4587: inode #15: comm syz.0.310: mark_inode_dirty error
[   87.855466][ T4653] EXT4-fs error (device loop0) in ext4_setattr:5983: Corrupt filesystem
[   87.871740][ T4659] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #15: comm syz.0.310: corrupted inode contents
[   87.900996][   T28] audit: type=1400 audit(1773693582.731:469): avc:  denied  { setattr } for  pid=4652 comm="syz.0.310" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   87.962928][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   87.977136][ T4680] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4680 comm=syz.3.320
[   88.032737][ T4682] loop0: detected capacity change from 0 to 128
[   88.077665][ T4684] loop3: detected capacity change from 0 to 512
[   88.090066][ T4674] loop2: detected capacity change from 0 to 1024
[   88.098485][ T4684] EXT4-fs: dax option not supported
[   88.172821][ T4674] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002]
[   88.198748][ T4674] System zones: 0-1, 3-8
[   88.205928][ T4691] netlink: 4 bytes leftover after parsing attributes in process `syz.4.322'.
[   88.217393][ T4691] macvlan2: entered promiscuous mode
[   88.238430][ T4691] bond0: entered promiscuous mode
[   88.265863][ T4692] loop3: detected capacity change from 0 to 128
[   88.279259][ T4674] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   88.293872][ T4691] bond_slave_0: entered promiscuous mode
[   88.304290][ T4691] bond_slave_1: entered promiscuous mode
[   88.310627][ T4691] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   88.320462][ T4674] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   88.601449][ T4697] netlink: 16 bytes leftover after parsing attributes in process `syz.0.324'.
[   88.667786][ T4699] loop0: detected capacity change from 0 to 1024
[   88.697572][ T4699] EXT4-fs: Ignoring removed oldalloc option
[   88.724202][ T4699] EXT4-fs: Ignoring removed bh option
[   88.753795][ T4699] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   88.996785][ T4705] loop4: detected capacity change from 0 to 256
[   89.129671][ T4707] netlink: 24 bytes leftover after parsing attributes in process `syz.3.327'.
[   89.189105][ T4708] netlink: 16 bytes leftover after parsing attributes in process `syz.4.326'.
[   89.219555][ T4707] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4707 comm=syz.3.327
[   89.413777][   T36] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:2: bg 0: block 112: padding at end of block bitmap is not set
[   89.443280][   T36] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28
[   89.446338][ T4715] lo speed is unknown, defaulting to 1000
[   89.509197][   T36] EXT4-fs (loop2): This should not happen!! Data will be lost
[   89.509197][   T36] 
[   89.519332][   T36] EXT4-fs (loop2): Total free blocks count 0
[   89.525517][   T36] EXT4-fs (loop2): Free/Dirty block details
[   89.531680][   T36] EXT4-fs (loop2): free_blocks=0
[   89.536738][   T36] EXT4-fs (loop2): dirty_blocks=16
[   89.542219][   T36] EXT4-fs (loop2): Block reservation details
[   89.548243][   T36] EXT4-fs (loop2): i_reserved_data_blocks=1
[   89.558054][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   89.568424][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.658688][ T4718] loop2: detected capacity change from 0 to 4096
[   89.666293][ T4720] syzkaller0: entered promiscuous mode
[   89.677510][ T4720] syzkaller0: entered allmulticast mode
[   89.694264][ T4718] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   89.717701][ T4718] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.330: corrupted inode contents
[   89.761305][ T4718] EXT4-fs error (device loop2): ext4_dirty_inode:6450: inode #15: comm syz.2.330: mark_inode_dirty error
[   89.781829][ T4718] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.330: corrupted inode contents
[   89.794110][ T4718] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #15: comm syz.2.330: mark_inode_dirty error
[   89.805809][ T4718] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.330: corrupted inode contents
[   89.817988][ T4718] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #15: comm syz.2.330: mark_inode_dirty error
[   89.829832][ T4718] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.330: corrupted inode contents
[   89.842078][ T4718] EXT4-fs error (device loop2): ext4_truncate:4587: inode #15: comm syz.2.330: mark_inode_dirty error
[   89.871171][ T4718] EXT4-fs error (device loop2) in ext4_setattr:5983: Corrupt filesystem
[   89.891505][ T4723] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.330: corrupted inode contents
[   89.939360][ T4729] tipc: Started in network mode
[   89.954680][ T4729] tipc: Node identity 3a149ee5b9e4, cluster identity 4711
[   89.955953][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.972457][ T4729] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   89.981076][ T4729] syzkaller0: entered promiscuous mode
[   89.986641][ T4729] syzkaller0: entered allmulticast mode
[   90.052681][ T4729] tipc: Resetting bearer <eth:syzkaller0>
[   90.059594][ T4728] tipc: Resetting bearer <eth:syzkaller0>
[   90.074172][ T4728] tipc: Disabling bearer <eth:syzkaller0>
[   90.190531][ T4741] EXT4-fs: Ignoring removed oldalloc option
[   90.242381][ T4741] ext2: Unknown parameter 'smackfsdef'
[   90.321585][ T4745] netlink: 'syz.2.334': attribute type 1 has an invalid length.
[   90.722587][ T4749] netlink: 24 bytes leftover after parsing attributes in process `syz.0.340'.
[   90.756999][ T4749] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4749 comm=syz.0.340
[   91.261019][   T28] kauditd_printk_skb: 16 callbacks suppressed
[   91.261045][   T28] audit: type=1400 audit(1773693586.071:486): avc:  denied  { execute } for  pid=4750 comm="syz.4.341" path="/77/hugetlb.1GB.usage_in_bytes" dev="tmpfs" ino=426 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   91.686675][ T4767] lo speed is unknown, defaulting to 1000
[   91.915242][ T4773] set_capacity_and_notify: 2 callbacks suppressed
[   91.915261][ T4773] loop0: detected capacity change from 0 to 1024
[   91.931390][ T4773] EXT4-fs: Ignoring removed oldalloc option
[   91.937382][ T4773] EXT4-fs: Ignoring removed bh option
[   92.084108][ T4773] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   92.230499][   T28] audit: type=1400 audit(1773693587.061:487): avc:  denied  { mount } for  pid=4779 comm="syz.1.348" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   92.393784][ T4785] bridge_slave_0: left allmulticast mode
[   92.399468][ T4785] bridge_slave_0: left promiscuous mode
[   92.423490][ T4785] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.431396][ T4785] bridge_slave_1: left allmulticast mode
[   92.460236][ T4785] bridge_slave_1: left promiscuous mode
[   92.466100][ T4785] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.493755][ T4785] bond0: (slave bond_slave_0): Releasing backup interface
[   92.520485][ T4785] bond_slave_0: left promiscuous mode
[   92.578962][ T4785] bond0: (slave bond_slave_1): Releasing backup interface
[   92.801215][ T4785] bond_slave_1: left promiscuous mode
[   92.875274][ T4785] team0: Port device team_slave_0 removed
[   92.937284][ T4785] team0: Port device team_slave_1 removed
[   92.990533][ T4785] batman_adv: batadv0: Removing interface: batadv_slave_0
[   93.078278][ T4785] batman_adv: batadv0: Removing interface: batadv_slave_1
[   93.093595][ T4778] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4222: comm syz.0.347: Allocating blocks 1-17 which overlap fs metadata
[   93.107638][ T4785] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   93.141132][ T4773] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4222: comm syz.0.347: Allocating blocks 1-17 which overlap fs metadata
[   93.336343][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.564603][ T4804] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[   93.633668][ T4801] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[   93.660695][ T4801] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(8)
[   93.667247][ T4801] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   93.675160][ T4801] vhci_hcd vhci_hcd.0: Device attached
[   93.851578][ T4325] vhci_hcd vhci_hcd.3: vhci_device speed not set
[   93.895520][ T4818] lo speed is unknown, defaulting to 1000
[   93.931469][ T4325] usb 7-3: new full-speed USB device number 2 using vhci_hcd
[   94.119928][   T28] audit: type=1400 audit(1773693588.951:488): avc:  denied  { wake_alarm } for  pid=4824 comm="syz.2.362" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   94.799543][   T28] audit: type=1400 audit(1773693589.631:489): avc:  denied  { connect } for  pid=4831 comm="syz.4.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   94.944628][ T4806] vhci_hcd: connection reset by peer
[   94.961604][ T3811] vhci_hcd vhci_hcd.3: stop threads
[   95.051478][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   95.120282][ T3811] vhci_hcd vhci_hcd.3: release socket
[   95.158811][ T3811] vhci_hcd vhci_hcd.3: disconnect device
[   95.190562][ T4839] syzkaller0: entered promiscuous mode
[   95.196110][ T4839] syzkaller0: entered allmulticast mode
[   95.232973][ T4835] loop4: detected capacity change from 0 to 4096
[   95.254428][ T4835] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   95.309058][ T4835] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #15: comm syz.4.365: corrupted inode contents
[   95.332289][ T4835] EXT4-fs error (device loop4): ext4_dirty_inode:6450: inode #15: comm syz.4.365: mark_inode_dirty error
[   95.359344][ T4835] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #15: comm syz.4.365: corrupted inode contents
[   95.381223][ T4835] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #15: comm syz.4.365: mark_inode_dirty error
[   95.401204][ T4835] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #15: comm syz.4.365: corrupted inode contents
[   95.431352][ T4835] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #15: comm syz.4.365: mark_inode_dirty error
[   95.461193][ T4835] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #15: comm syz.4.365: corrupted inode contents
[   95.501158][ T4835] EXT4-fs error (device loop4): ext4_truncate:4587: inode #15: comm syz.4.365: mark_inode_dirty error
[   95.521216][ T4835] EXT4-fs error (device loop4) in ext4_setattr:5983: Corrupt filesystem
[   95.530299][ T4843] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #15: comm syz.4.365: corrupted inode contents
[   95.577885][ T4845] syzkaller0: entered promiscuous mode
[   95.586987][ T4845] syzkaller0: entered allmulticast mode
[   95.606714][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   95.932142][ T4858] team0: Port device dummy0 removed
[   95.947186][ T4858] bridge_slave_0: left allmulticast mode
[   95.954455][ T4858] bridge_slave_0: left promiscuous mode
[   95.961236][   T28] audit: type=1400 audit(1773693590.791:490): avc:  denied  { read } for  pid=4854 comm="syz.0.374" path="socket:[12764]" dev="sockfs" ino=12764 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   95.986311][ T4858] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.003264][ T4858] bridge_slave_1: left allmulticast mode
[   96.008984][ T4858] bridge_slave_1: left promiscuous mode
[   96.039573][ T4858] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.075846][ T4858] .`: (slave bond_slave_0): Releasing backup interface
[   96.168606][ T4858] .`: (slave bond_slave_1): Releasing backup interface
[   96.230051][ T4858] team0: Port device team_slave_0 removed
[   96.272703][ T4858] team0: Port device team_slave_1 removed
[   96.504376][ T4858] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   96.550965][ T4858] batman_adv: batadv0: Removing interface: batadv_slave_0
[   96.575960][ T4858] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   96.583550][ T4858] batman_adv: batadv0: Removing interface: batadv_slave_1
[   96.593349][ T4858] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   96.662747][ T4855] Set syz1 is full, maxelem 65536 reached
[   97.321175][   T28] audit: type=1400 audit(1773693592.121:491): avc:  denied  { write } for  pid=4870 comm="syz.3.378" path="socket:[13421]" dev="sockfs" ino=13421 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   97.617097][ T4878] loop3: detected capacity change from 0 to 4096
[   97.763947][ T4878] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   97.881283][ T4878] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.382: corrupted inode contents
[   97.964952][ T4878] EXT4-fs error (device loop3): ext4_dirty_inode:6450: inode #15: comm syz.3.382: mark_inode_dirty error
[   97.986221][ T4878] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.382: corrupted inode contents
[   97.998487][ T4878] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #15: comm syz.3.382: mark_inode_dirty error
[   98.010276][ T4878] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.382: corrupted inode contents
[   98.026197][ T4878] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #15: comm syz.3.382: mark_inode_dirty error
[   98.037978][ T4878] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.382: corrupted inode contents
[   98.052772][ T4878] EXT4-fs error (device loop3): ext4_truncate:4587: inode #15: comm syz.3.382: mark_inode_dirty error
[   98.091249][ T4878] EXT4-fs error (device loop3) in ext4_setattr:5983: Corrupt filesystem
[   98.181819][ T4888] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.382: corrupted inode contents
[   98.299204][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.404532][ T4899] loop4: detected capacity change from 0 to 512
[   98.503489][ T4899] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   98.719683][ T4899] EXT4-fs error (device loop4): ext4_empty_dir:3078: inode #12: comm syz.4.389: Directory block failed checksum
[   98.738943][ T4899] netlink: 'syz.4.389': attribute type 13 has an invalid length.
[   98.777094][   T28] audit: type=1400 audit(1773693593.511:492): avc:  denied  { rmdir } for  pid=4898 comm="syz.4.389" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   98.972010][ T4325] usb 7-3: enqueue for inactive port 2
[   98.979852][ T4325] usb 7-3: enqueue for inactive port 2
[   99.060970][ T4325] vhci_hcd vhci_hcd.3: vhci_device speed not set
[   99.109940][ T4905] loop0: detected capacity change from 0 to 1024
[   99.119168][ T4905] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869)
[   99.138723][ T4905] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   99.180213][ T4905] EXT4-fs error (device loop0): ext4_get_journal_inode:5863: inode #8: comm syz.0.390: inode has both inline data and extents flags
[   99.220734][ T4905] loop0: lost file I/O error report for ino 8 type 5 pos 0x0 len 0x0 error -117
[   99.220960][ T4905] EXT4-fs (loop0): no journal found
[   99.235247][    C0] EXT4-fs (loop0): error count since last fsck: 1
[   99.235270][    C0] EXT4-fs (loop0): initial error at time 1773693594: ext4_get_journal_inode:5863: inode 8
[   99.235319][    C0] EXT4-fs (loop0): last error at time 1773693594: ext4_get_journal_inode:5863: inode 8
[   99.399961][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.575744][   T28] audit: type=1400 audit(1773693594.401:493): avc:  denied  { name_bind } for  pid=4908 comm="syz.4.392" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[  100.090779][ T4925] team0 (unregistering): Port device team_slave_0 removed
[  100.103249][ T4925] team0 (unregistering): Port device team_slave_1 removed
[  100.633477][ T4925] team0 (unregistering): Port device bridge0 removed
[  100.993331][ T4938] loop1: detected capacity change from 0 to 1024
[  101.029483][ T4938] EXT4-fs: Ignoring removed nobh option
[  101.052829][ T4938] EXT4-fs: Ignoring removed nomblk_io_submit option
[  101.094095][ T4933] team0 (unregistering): Port device team_slave_1 removed
[  101.114750][ T4938] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  101.135077][   T28] audit: type=1400 audit(1773693595.971:494): avc:  denied  { link } for  pid=4935 comm="syz.1.400" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  101.242076][ T4949] netlink: 'syz.4.402': attribute type 1 has an invalid length.
[  101.692617][ T4957] loop0: detected capacity change from 0 to 2048
[  101.723000][ T4957] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  101.741100][ T4957] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  101.836633][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.897019][ T3315] EXT4-fs error (device loop0): ext4_readdir:265: inode #2: block 16: comm syz-executor: path /83/file0: bad entry in directory: directory entry overrun - offset=108, inode=646161, rec_len=4096, size=4096 fake=0
[  101.918878][ T3315] EXT4-fs (loop0): Remounting filesystem read-only
[  101.923957][ T4964] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  101.941488][ T4964] syzkaller0: entered promiscuous mode
[  101.948743][ T4964] syzkaller0: entered allmulticast mode
[  101.964718][ T4964] tipc: Resetting bearer <eth:syzkaller0>
[  102.007113][ T4963] tipc: Resetting bearer <eth:syzkaller0>
[  102.026983][ T4963] tipc: Disabling bearer <eth:syzkaller0>
[  102.167841][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.837484][   T28] audit: type=1400 audit(1773693597.671:495): avc:  denied  { read write } for  pid=4984 comm="syz.2.416" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  102.990668][   T28] audit: type=1400 audit(1773693597.701:496): avc:  denied  { open } for  pid=4984 comm="syz.2.416" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  103.044761][ T1709] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.134132][ T1709] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.212758][ T1709] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.247744][ T4987] lo speed is unknown, defaulting to 1000
[  103.290726][ T1709] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.441680][ T1709] bridge_slave_1: left allmulticast mode
[  103.447541][ T1709] bridge_slave_1: left promiscuous mode
[  103.453974][ T1709] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.480000][ T1709] bridge_slave_0: left allmulticast mode
[  103.485837][ T1709] bridge_slave_0: left promiscuous mode
[  103.492723][ T1709] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.639710][ T1709] bond1 (unregistering): (slave bridge1): Releasing backup interface
[  103.647998][ T1709] bridge1 (unregistering): left promiscuous mode
[  103.660990][ T1709] bridge1 (unregistering): left allmulticast mode
[  103.717931][ T1709] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  103.732662][ T1709] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  103.753876][ T1709] bond0 (unregistering): Released all slaves
[  103.762042][ T1709] bond1 (unregistering): Released all slaves
[  103.786828][ T4987] chnl_net:caif_netlink_parms(): no params data found
[  103.819736][ T1709] tipc: Left network mode
[  103.869224][ T4987] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.879521][ T4987] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.887852][ T4987] bridge_slave_0: entered allmulticast mode
[  103.895038][ T4987] bridge_slave_0: entered promiscuous mode
[  103.901858][ T4987] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.909077][ T4987] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.916420][ T4987] bridge_slave_1: entered allmulticast mode
[  103.924015][ T4987] bridge_slave_1: entered promiscuous mode
[  103.955310][ T1709] hsr_slave_0: left promiscuous mode
[  103.961169][ T1709] hsr_slave_1: left promiscuous mode
[  103.966933][ T1709] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  103.974547][ T1709] batman_adv: batadv0: Removing interface: batadv_slave_0
[  103.982632][ T1709] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  103.990027][ T1709] batman_adv: batadv0: Removing interface: batadv_slave_1
[  104.001020][ T1709] veth1_macvtap: left promiscuous mode
[  104.006516][ T1709] veth0_macvtap: left promiscuous mode
[  104.012498][ T1709] veth1_vlan: left promiscuous mode
[  104.017767][ T1709] veth0_vlan: left promiscuous mode
[  104.116424][ T3811] smc: removing ib device syz0
[  104.124209][ T4987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  104.136326][   T10] lo speed is unknown, defaulting to 1000
[  104.142213][   T10] syz0: Port: 1 Link DOWN
[  104.148291][ T4987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  104.185766][ T4987] team0: Port device team_slave_0 added
[  104.196301][ T4987] team0: Port device team_slave_1 added
[  104.227116][ T4987] batman_adv: batadv0: Adding interface: batadv_slave_0
[  104.237894][ T4987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  104.266868][ T4987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  104.278655][ T4987] batman_adv: batadv0: Adding interface: batadv_slave_1
[  104.285844][ T4987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  104.312042][ T4987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  104.329063][   T28] audit: type=1400 audit(1773693599.161:497): avc:  denied  { create } for  pid=5006 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  104.385415][   T28] audit: type=1400 audit(1773693599.161:498): avc:  denied  { write } for  pid=5006 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=3396 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  104.395246][ T4987] hsr_slave_0: entered promiscuous mode
[  104.417491][   T28] audit: type=1400 audit(1773693599.161:499): avc:  denied  { append } for  pid=5006 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=3396 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  104.432505][ T4987] hsr_slave_1: entered promiscuous mode
[  104.442696][   T28] audit: type=1400 audit(1773693599.201:500): avc:  denied  { unlink } for  pid=5017 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=3396 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  104.449025][ T4987] debugfs: 'hsr0' already exists in 'hsr'
[  104.476673][ T4987] Cannot create hsr debugfs directory
[  104.561427][ T4987] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  104.570473][ T4987] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  104.581688][ T4987] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  104.590701][ T4987] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  104.644469][ T4987] 8021q: adding VLAN 0 to HW filter on device bond0
[  104.659869][ T4987] 8021q: adding VLAN 0 to HW filter on device team0
[  104.670654][ T3823] bridge0: port 1(bridge_slave_0) entered blocking state
[  104.677829][ T3823] bridge0: port 1(bridge_slave_0) entered forwarding state
[  104.689495][ T1709] bridge0: port 2(bridge_slave_1) entered blocking state
[  104.696595][ T1709] bridge0: port 2(bridge_slave_1) entered forwarding state
[  104.716937][ T4987] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  104.728238][ T4987] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  104.800126][ T4987] 8021q: adding VLAN 0 to HW filter on device batadv0
[  104.934056][ T4987] veth0_vlan: entered promiscuous mode
[  104.942948][ T4987] veth1_vlan: entered promiscuous mode
[  104.962374][ T4987] veth0_macvtap: entered promiscuous mode
[  104.969837][ T4987] veth1_macvtap: entered promiscuous mode
[  104.982310][ T4987] batman_adv: batadv0: Interface activated: batadv_slave_0
[  104.997523][ T4987] batman_adv: batadv0: Interface activated: batadv_slave_1
[  105.009053][ T3811] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  105.020288][ T3811] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  105.029216][ T3811] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  105.041481][ T3811] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  105.130019][   T28] audit: type=1400 audit(1773693599.961:501): avc:  denied  { allowed } for  pid=5096 comm="syz.3.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  105.156964][ T5094] loop2: detected capacity change from 0 to 4096
[  105.239492][ T5093] loop1: detected capacity change from 0 to 512
[  105.381893][ T5093] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  105.413337][ T5094] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  105.443529][ T5094] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.430: corrupted inode contents
[  105.456204][ T5094] EXT4-fs error (device loop2): ext4_dirty_inode:6450: inode #15: comm syz.2.430: mark_inode_dirty error
[  105.468276][ T5094] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.430: corrupted inode contents
[  105.480493][ T5094] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #15: comm syz.2.430: mark_inode_dirty error
[  105.492343][ T5094] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.430: corrupted inode contents
[  105.504796][ T5094] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #15: comm syz.2.430: mark_inode_dirty error
[  105.516337][ T5094] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.430: corrupted inode contents
[  105.535311][ T5094] EXT4-fs error (device loop2): ext4_truncate:4587: inode #15: comm syz.2.430: mark_inode_dirty error
[  105.547214][ T5094] EXT4-fs error (device loop2) in ext4_setattr:5983: Corrupt filesystem
[  105.575444][   T28] audit: type=1400 audit(1773693600.411:502): avc:  denied  { create } for  pid=5106 comm="syz.4.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  105.595370][ T5093] EXT4-fs (loop1): 1 truncate cleaned up
[  105.741430][   T28] audit: type=1400 audit(1773693600.581:503): avc:  denied  { setopt } for  pid=5106 comm="syz.4.421" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  105.744800][ T5103] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.430: corrupted inode contents
[  105.783728][ T5093] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  105.806014][ T5094] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.430'.
[  105.817868][   T28] audit: type=1400 audit(1773693600.651:504): avc:  denied  { bind } for  pid=5091 comm="syz.2.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  106.043588][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.132530][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.565674][ T5127] netlink: 'syz.1.422': attribute type 1 has an invalid length.
[  106.972722][ T5115] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.115582][ T5133] syzkaller0: entered promiscuous mode
[  107.121273][ T5133] syzkaller0: entered allmulticast mode
[  107.195752][ T5115] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.295073][ T5115] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.344124][ T5115] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.362696][ T5144] tipc: Started in network mode
[  107.367718][ T5144] tipc: Node identity d2e474f02473, cluster identity 4711
[  107.387855][ T5144] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  107.401806][ T5144] syzkaller0: entered promiscuous mode
[  107.414347][ T5144] syzkaller0: entered allmulticast mode
[  107.438598][ T3823] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  107.448573][ T3823] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  107.470982][ T3823] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  107.495490][ T5144] tipc: Resetting bearer <eth:syzkaller0>
[  107.520099][ T3823] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  107.542837][ T5143] tipc: Resetting bearer <eth:syzkaller0>
[  107.571161][ T5143] tipc: Disabling bearer <eth:syzkaller0>
[  108.149520][ T5157] loop1: detected capacity change from 0 to 1024
[  108.286636][ T5157] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  108.454831][ T5159] loop2: detected capacity change from 0 to 512
[  108.587191][ T5159] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  108.605206][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.630159][ T5165] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  108.656169][ T5159] EXT4-fs (loop2): 1 truncate cleaned up
[  108.664555][ T5165] syzkaller0: entered promiscuous mode
[  108.670054][ T5165] syzkaller0: entered allmulticast mode
[  108.714364][ T5159] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  108.726847][ T5170] bond_slave_0: entered promiscuous mode
[  108.744588][ T5170] bond_slave_1: entered promiscuous mode
[  108.758179][ T5170] vlan2: entered promiscuous mode
[  108.763597][ T5170] bond0: entered promiscuous mode
[  108.775882][ T5168] veth0_vlan: entered allmulticast mode
[  108.805337][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.816538][ T5165] tipc: Resetting bearer <eth:syzkaller0>
[  108.823340][ T5164] tipc: Resetting bearer <eth:syzkaller0>
[  108.849727][ T5164] tipc: Disabling bearer <eth:syzkaller0>
[  109.650625][ T5192] loop5: detected capacity change from 0 to 8192
[  110.004469][ T5203] loop4: detected capacity change from 0 to 256
[  110.163893][ T5203] FAT-fs (loop4): Directory bread(block 64) failed
[  110.178625][ T5203] FAT-fs (loop4): Directory bread(block 65) failed
[  110.191064][ T5203] FAT-fs (loop4): Directory bread(block 66) failed
[  110.197612][ T5203] FAT-fs (loop4): Directory bread(block 67) failed
[  110.263635][ T5207] loop2: detected capacity change from 0 to 256
[  110.476463][ T5207] FAT-fs (loop2): Directory bread(block 64) failed
[  110.483328][ T5207] FAT-fs (loop2): Directory bread(block 65) failed
[  110.489949][ T5207] FAT-fs (loop2): Directory bread(block 66) failed
[  110.496773][ T5207] FAT-fs (loop2): Directory bread(block 67) failed
[  110.503547][ T5207] FAT-fs (loop2): Directory bread(block 68) failed
[  110.510209][ T5207] FAT-fs (loop2): Directory bread(block 69) failed
[  110.516870][ T5207] FAT-fs (loop2): Directory bread(block 70) failed
[  110.523478][ T5207] FAT-fs (loop2): Directory bread(block 71) failed
[  110.530216][ T5207] FAT-fs (loop2): Directory bread(block 72) failed
[  110.536857][ T5207] FAT-fs (loop2): Directory bread(block 73) failed
[  110.579261][ T5207] netlink: 28 bytes leftover after parsing attributes in process `syz.2.453'.
[  110.588332][ T5207] netlink: 2 bytes leftover after parsing attributes in process `syz.2.453'.
[  110.597815][ T5207] netlink: 28 bytes leftover after parsing attributes in process `syz.2.453'.
[  110.606849][ T5207] netlink: 28 bytes leftover after parsing attributes in process `syz.2.453'.
[  110.615867][ T5207] netlink: 2 bytes leftover after parsing attributes in process `syz.2.453'.
[  110.625431][ T5207] netlink: 28 bytes leftover after parsing attributes in process `syz.2.453'.
[  110.634529][ T5207] netlink: 28 bytes leftover after parsing attributes in process `syz.2.453'.
[  110.643585][ T5207] netlink: 2 bytes leftover after parsing attributes in process `syz.2.453'.
[  110.652737][ T5207] netlink: 28 bytes leftover after parsing attributes in process `syz.2.453'.
[  110.798937][ T5203] FAT-fs (loop4): Directory bread(block 68) failed
[  111.026690][ T5203] FAT-fs (loop4): Directory bread(block 69) failed
[  111.048708][ T5203] FAT-fs (loop4): Directory bread(block 70) failed
[  111.081902][ T5203] FAT-fs (loop4): Directory bread(block 71) failed
[  111.111009][ T5203] FAT-fs (loop4): Directory bread(block 72) failed
[  111.117563][ T5203] FAT-fs (loop4): Directory bread(block 73) failed
[  111.266414][ T5211] loop1: detected capacity change from 0 to 128
[  111.421165][ T5216] sg_write: data in/out 25820/46 bytes for SCSI command 0x8-- guessing data in;
[  111.421165][ T5216]    program syz.4.458 not setting count and/or reply_len properly
[  111.625380][ T5216] loop4: detected capacity change from 0 to 512
[  111.662330][ T5216] EXT4-fs: quotafile must be on filesystem root
[  111.891250][ T5226] loop4: detected capacity change from 0 to 512
[  111.918349][ T5226] ext4: Unknown parameter 'noacl'
[  112.044373][ T5213] loop3: detected capacity change from 0 to 512
[  112.109784][   T28] kauditd_printk_skb: 4 callbacks suppressed
[  112.109801][   T28] audit: type=1400 audit(1773693606.941:509): avc:  denied  { getopt } for  pid=5231 comm="syz.1.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  112.183848][ T5213] EXT4-fs (loop3): 1 orphan inode deleted
[  112.213359][ T5238] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  112.233943][ T5238] syzkaller0: entered promiscuous mode
[  112.239520][ T5238] syzkaller0: entered allmulticast mode
[  112.285371][ T5238] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  112.305491][ T1709] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  112.316936][ T5213] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  112.335527][ T5213] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  112.351485][ T1709] EXT4-fs error (device loop3): ext4_release_dquot:7037: comm kworker/u8:6: Failed to release dquot type 1
[  112.368954][ T5238] tipc: Resetting bearer <eth:syzkaller0>
[  112.371020][ T5226] loop4: detected capacity change from 0 to 1024
[  112.383086][ T5241] syzkaller0: entered promiscuous mode
[  112.388744][ T5241] syzkaller0: entered allmulticast mode
[  112.400340][ T5237] tipc: Resetting bearer <eth:syzkaller0>
[  112.410506][ T5237] tipc: Disabling bearer <eth:syzkaller0>
[  112.442018][ T5226] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  112.475058][ T5226] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  112.530845][ T5248] loop5: detected capacity change from 0 to 2048
[  112.539297][ T5226] JBD2: no valid journal superblock found
[  112.552166][ T5226] EXT4-fs (loop4): Could not load journal inode
[  112.563259][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.612055][ T5248] __nla_validate_parse: 21 callbacks suppressed
[  112.612074][ T5248] netlink: 68 bytes leftover after parsing attributes in process `syz.5.467'.
[  112.658508][ T5248] SELinux: security_context_str_to_sid (root) failed with errno=-22
[  112.677587][   T28] audit: type=1400 audit(1773693607.501:510): avc:  denied  { create } for  pid=5247 comm="syz.5.467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  112.891210][   T28] audit: type=1400 audit(1773693607.731:511): avc:  denied  { write } for  pid=5261 comm="syz.4.471" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  113.126337][   T28] audit: type=1400 audit(1773693607.961:512): avc:  denied  { mounton } for  pid=5263 comm="syz.3.472" path="/83/bus" dev="tmpfs" ino=459 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  113.528226][ T5273] loop1: detected capacity change from 0 to 512
[  113.543538][ T5273] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  113.636698][ T5273] EXT4-fs (loop1): 1 truncate cleaned up
[  113.643058][ T5273] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  113.738633][ T5278] unsupported nlmsg_type 40
[  113.806134][   T28] audit: type=1400 audit(1773693608.631:513): avc:  denied  { create } for  pid=5277 comm="syz.2.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  114.091860][   T28] audit: type=1400 audit(1773693608.931:514): avc:  denied  { create } for  pid=5282 comm="syz.3.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  114.502225][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.516331][   T28] audit: type=1400 audit(1773693611.351:515): avc:  denied  { setopt } for  pid=5301 comm="syz.3.484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  116.537411][   T28] audit: type=1400 audit(1773693611.351:516): avc:  denied  { ioctl } for  pid=5301 comm="syz.3.484" path="socket:[14560]" dev="sockfs" ino=14560 ioctlcmd=0xf50b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  116.717802][ T5318] netlink: 8 bytes leftover after parsing attributes in process `syz.3.489'.
[  117.214510][ T5318] loop3: detected capacity change from 0 to 512
[  117.223556][ T5330] capability: warning: `syz.4.491' uses deprecated v2 capabilities in a way that may be insecure
[  117.240016][ T5318] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  117.278379][ T5318] EXT4-fs (loop3): 1 truncate cleaned up
[  117.304861][ T5318] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  117.363893][   T28] audit: type=1326 audit(1773693612.201:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5317 comm="syz.3.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f6043c799 code=0x7ffc0000
[  117.396517][   T28] audit: type=1326 audit(1773693612.221:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5317 comm="syz.3.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f6043c799 code=0x7ffc0000
[  117.421103][   T28] audit: type=1326 audit(1773693612.221:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5317 comm="syz.3.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f6043c799 code=0x7ffc0000
[  117.444571][   T28] audit: type=1326 audit(1773693612.221:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5317 comm="syz.3.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7f1f6043c799 code=0x7ffc0000
[  117.467966][   T28] audit: type=1326 audit(1773693612.221:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5317 comm="syz.3.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f6043c799 code=0x7ffc0000
[  117.492781][   T28] audit: type=1326 audit(1773693612.221:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5317 comm="syz.3.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f6043c799 code=0x7ffc0000
[  117.517380][ T5350] program syz.5.485 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  117.586803][   T28] audit: type=1326 audit(1773693612.221:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5317 comm="syz.3.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f6043c799 code=0x7ffc0000
[  117.665050][   T28] audit: type=1326 audit(1773693612.231:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5317 comm="syz.3.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f1f6043c799 code=0x7ffc0000
[  117.753626][   T28] audit: type=1326 audit(1773693612.231:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5317 comm="syz.3.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f6043c799 code=0x7ffc0000
[  117.785613][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.854257][   T28] audit: type=1326 audit(1773693612.231:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5317 comm="syz.3.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f1f6043c799 code=0x7ffc0000
[  118.248120][ T5367] loop2: detected capacity change from 0 to 512
[  118.502401][ T5364] ipip0: entered promiscuous mode
[  118.536119][ T5367] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  118.644382][ T5367] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  118.838416][ T5377] loop3: detected capacity change from 0 to 4096
[  118.875880][ T5377] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  118.894090][ T5367] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  118.933669][ T5376] loop5: detected capacity change from 0 to 512
[  118.945890][ T5377] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.497: corrupted inode contents
[  118.975642][ T5376] EXT4-fs: Ignoring removed oldalloc option
[  118.987064][ T5377] EXT4-fs error (device loop3): ext4_dirty_inode:6450: inode #15: comm syz.3.497: mark_inode_dirty error
[  119.011121][ T5381] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  119.019564][ T5377] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.497: corrupted inode contents
[  119.037682][ T5377] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #15: comm syz.3.497: mark_inode_dirty error
[  119.049544][ T5377] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.497: corrupted inode contents
[  119.062141][ T5377] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #15: comm syz.3.497: mark_inode_dirty error
[  119.073871][ T5377] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.497: corrupted inode contents
[  119.086194][ T5377] EXT4-fs error (device loop3): ext4_truncate:4587: inode #15: comm syz.3.497: mark_inode_dirty error
[  119.097801][ T5377] EXT4-fs error (device loop3) in ext4_setattr:5983: Corrupt filesystem
[  119.131122][ T5376] EXT4-fs (loop5): 1 truncate cleaned up
[  119.141701][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.186011][ T5376] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  119.283002][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  120.124923][ T5411] loop4: detected capacity change from 0 to 128
[  120.223977][ T4987] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  120.526550][ T5439] loop2: detected capacity change from 0 to 4096
[  120.564001][ T5439] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  120.604992][ T5439] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.510: corrupted inode contents
[  120.664352][ T5439] EXT4-fs error (device loop2): ext4_dirty_inode:6450: inode #15: comm syz.2.510: mark_inode_dirty error
[  120.683858][ T5439] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.510: corrupted inode contents
[  120.695943][ T5439] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #15: comm syz.2.510: mark_inode_dirty error
[  120.709378][ T5439] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.510: corrupted inode contents
[  120.729368][ T5439] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #15: comm syz.2.510: mark_inode_dirty error
[  120.750244][ T5439] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.510: corrupted inode contents
[  120.762563][ T5439] EXT4-fs error (device loop2): ext4_truncate:4587: inode #15: comm syz.2.510: mark_inode_dirty error
[  120.774789][ T5439] EXT4-fs error (device loop2) in ext4_setattr:5983: Corrupt filesystem
[  120.821369][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  120.897892][ T5461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  120.923905][ T5461] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  120.942522][ T5461] netlink: 4 bytes leftover after parsing attributes in process `syz.2.513'.
[  120.969158][ T5461] macvtap1: entered promiscuous mode
[  120.980597][ T5461] macvtap1: entered allmulticast mode
[  120.994792][ T5461] bond0: entered allmulticast mode
[  121.006008][ T5461] bond_slave_0: entered allmulticast mode
[  121.017910][ T5461] bond_slave_1: entered allmulticast mode
[  121.249848][ T5467] syzkaller0: entered promiscuous mode
[  121.258695][ T5467] syzkaller0: entered allmulticast mode
[  121.285490][ T5467] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  121.293251][ T5466] tipc: Resetting bearer <eth:syzkaller0>
[  121.309068][ T5466] tipc: Disabling bearer <eth:syzkaller0>
[  121.441037][ T5473] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  121.515877][ T5473] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  121.527253][ T5473] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  121.542375][ T5471] loop3: detected capacity change from 0 to 512
[  121.720114][ T5471] ------------[ cut here ]------------
[  121.726553][ T5471] EA inode 11 i_nlink=2
[  121.726794][ T5471] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#0: syz.3.518/5471
[  121.744824][ T5471] Modules linked in:
[  121.749745][ T5471] CPU: 0 UID: 0 PID: 5471 Comm: syz.3.518 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  121.763593][ T5471] Tainted: [W]=WARN
[  121.767695][ T5471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  121.778703][ T5471] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350
[  121.786081][ T5471] Code: 54 47 99 ff 4c 8d 2d ad ad 5d 05 49 8d 7e 40 e8 f4 e0 b5 ff 49 8b 6e 40 4c 89 e7 e8 28 dc b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 4f 88 dd 03 66 66 66 66 66 66 2e
[  121.806482][ T5471] RSP: 0018:ffffc9001067b778 EFLAGS: 00010246
[  121.813425][ T5471] RAX: ffff88812e8ede88 RBX: ffff88813dc81788 RCX: ffffffff81c01748
[  121.822014][ T5471] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff871dc4e0
[  121.830276][ T5471] RBP: 000000000000000b R08: 000188813dc8173b R09: 0000000000000000
[  121.838497][ T5471] R10: ffffc9001067b6a8 R11: 0001c9001067b6a8 R12: ffff88813dc81738
[  121.846967][ T5471] R13: ffffffff871dc4e0 R14: ffff88813dc816f0 R15: 0000000000000001
[  121.858038][ T5471] FS:  00007f1f5ee976c0(0000) GS:ffff8882ae8db000(0000) knlGS:0000000000000000
[  121.868425][ T5471] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  121.875753][ T5471] CR2: 0000000034747865 CR3: 0000000128690000 CR4: 00000000003506f0
[  121.886212][ T5471] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  121.896775][ T5471] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  121.906024][ T5471] Call Trace:
[  121.910408][ T5471]  <TASK>
[  121.914474][ T5471]  ext4_xattr_inode_dec_ref_all+0x57c/0x880
[  121.922732][ T5471]  ? errseq_check+0x2c/0x50
[  121.927608][ T5471]  ext4_xattr_delete_inode+0x6c1/0x7a0
[  121.937571][ T5471]  ? ext4_truncate+0x92b/0xb00
[  121.946470][ T5471]  ext4_evict_inode+0xa1f/0xd60
[  121.952778][ T5471]  ? __pfx_ext4_evict_inode+0x10/0x10
[  121.958484][ T5471]  evict+0x2af/0x510
[  121.970804][ T5471]  ? __pfx_ext4_drop_inode+0x10/0x10
[  121.979318][ T5471]  iput+0x41a/0x580
[  121.992961][ T5471]  ext4_process_orphan+0x1a9/0x1c0
[  122.002573][ T5471]  ext4_orphan_cleanup+0x6a8/0xa00
[  122.011128][ T5471]  ext4_fill_super+0x3408/0x37c0
[  122.018236][ T5471]  ? set_blocksize+0x14c/0x270
[  122.026033][ T5471]  ? setup_bdev_super+0x30e/0x370
[  122.035341][ T5471]  ? __pfx_ext4_fill_super+0x10/0x10
[  122.045299][ T5471]  get_tree_bdev_flags+0x291/0x300
[  122.051553][ T5471]  ? __pfx_ext4_fill_super+0x10/0x10
[  122.058329][ T5471]  get_tree_bdev+0x1f/0x30
[  122.065097][ T5471]  ext4_get_tree+0x1c/0x30
[  122.071953][ T5471]  vfs_get_tree+0x57/0x1d0
[  122.076667][ T5471]  do_new_mount+0x288/0x8d0
[  122.083295][ T5471]  path_mount+0x4d0/0xbc0
[  122.091037][ T5471]  __se_sys_mount+0x28c/0x2e0
[  122.100149][ T5471]  __x64_sys_mount+0x67/0x80
[  122.107456][ T5471]  x64_sys_call+0x2d61/0x3020
[  122.112510][ T5471]  do_syscall_64+0x12c/0x370
[  122.119327][ T5471]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  122.126156][ T5471] RIP: 0033:0x7f1f6043da0a
[  122.132143][ T5471] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  122.152532][ T5471] RSP: 002b:00007f1f5ee96e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  122.161125][ T5471] RAX: ffffffffffffffda RBX: 00007f1f5ee96ee0 RCX: 00007f1f6043da0a
[  122.169265][ T5471] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007f1f5ee96ea0
[  122.179879][ T5471] RBP: 00002000000009c0 R08: 00007f1f5ee96ee0 R09: 0000000000800718
[  122.188364][ T5471] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540
[  122.197011][ T5471] R13: 00007f1f5ee96ea0 R14: 000000000000048d R15: 0000200000000200
[  122.210371][ T5471]  </TASK>
[  122.219444][ T5471] ---[ end trace 0000000000000000 ]---
[  122.243033][ T5471] EXT4-fs (loop3): 1 orphan inode deleted
[  122.266651][ T5471] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  122.476814][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.080891][ T5494] 8021q: adding VLAN 0 to HW filter on device bond2
[  123.101195][   T28] kauditd_printk_skb: 8 callbacks suppressed
[  123.101217][   T28] audit: type=1400 audit(1773693617.801:535): avc:  denied  { write } for  pid=5488 comm="syz.3.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  123.312409][ T5492] loop3: detected capacity change from 0 to 128
[  123.417751][   T28] audit: type=1400 audit(1773693618.251:536): avc:  denied  { remount } for  pid=5488 comm="syz.3.524" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[  124.424929][ T5501] syzkaller0: entered promiscuous mode
[  124.434819][ T5501] syzkaller0: entered allmulticast mode
[  124.448443][ T5510] syzkaller0: entered promiscuous mode
[  124.454136][ T5510] syzkaller0: entered allmulticast mode
[  124.577840][   T28] audit: type=1400 audit(1773693619.411:537): avc:  denied  { setopt } for  pid=5513 comm="syz.1.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  124.656357][ T5516] delete_channel: no stack
[  124.662321][ T5516] delete_channel: no stack
[  124.678761][   T28] audit: type=1400 audit(1773693619.491:538): avc:  denied  { create } for  pid=5515 comm="syz.5.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  124.995082][ T5505] loop2: detected capacity change from 0 to 512
[  125.034731][   T28] audit: type=1400 audit(1773693619.861:539): avc:  denied  { create } for  pid=5526 comm="syz.5.534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  125.103718][ T5505] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities
[  125.567392][ T5534] syzkaller0: entered promiscuous mode
[  125.581040][ T5534] syzkaller0: entered allmulticast mode
[  125.822696][ T5538] netlink: 4 bytes leftover after parsing attributes in process `syz.4.538'.
[  126.305091][ T5546] syzkaller0: entered promiscuous mode
[  126.311938][ T5546] syzkaller0: entered allmulticast mode
[  126.320560][ T5545] syzkaller0: entered promiscuous mode
[  126.326121][ T5545] syzkaller0: entered allmulticast mode
[  126.388613][   T28] audit: type=1400 audit(1773693621.221:540): avc:  denied  { ioctl } for  pid=5541 comm="syz.5.540" path="socket:[15967]" dev="sockfs" ino=15967 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  127.365073][   T28] audit: type=1326 audit(1773693622.191:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5573 comm="syz.2.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22d1f9c799 code=0x7ffc0000
[  127.419151][   T28] audit: type=1326 audit(1773693622.191:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5573 comm="syz.2.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22d1f9c799 code=0x7ffc0000
[  127.459394][ T5577] loop5: detected capacity change from 0 to 128
[  127.517272][   T28] audit: type=1326 audit(1773693622.221:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5573 comm="syz.2.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f22d1f9c799 code=0x7ffc0000
[  127.625446][   T28] audit: type=1326 audit(1773693622.231:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5573 comm="syz.2.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22d1f9c799 code=0x7ffc0000
[  127.687310][ T5582] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  127.706470][ T5582] syzkaller0: entered promiscuous mode
[  127.723149][ T5582] syzkaller0: entered allmulticast mode
[  127.771807][ T5582] tipc: Resetting bearer <eth:syzkaller0>
[  127.789394][ T5581] tipc: Resetting bearer <eth:syzkaller0>
[  127.797445][ T5581] tipc: Disabling bearer <eth:syzkaller0>
[  127.923369][ T5588] syzkaller0: entered promiscuous mode
[  127.942639][ T5588] syzkaller0: entered allmulticast mode
[  128.051892][ T5590] process 'syz.3.556' launched '/dev/fd/4' with NULL argv: empty string added
[  128.099025][   T36] bio_check_eod: 40 callbacks suppressed
[  128.099040][   T36] kworker/u8:2: attempt to access beyond end of device
[  128.099040][   T36] loop5: rw=1, sector=249, nr_sectors = 792 limit=128
[  128.128179][   T36] kworker/u8:2: attempt to access beyond end of device
[  128.128179][   T36] loop5: rw=1, sector=241, nr_sectors = 8 limit=128
[  128.172485][ T5598] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma?
[  128.218140][ T5598] loop5: detected capacity change from 0 to 512
[  128.273056][ T5598] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  128.285835][ T5598] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  128.357573][ T5609] Set syz1 is full, maxelem 2 reached
[  128.463970][ T5612] loop2: detected capacity change from 0 to 128
[  128.602824][ T5612] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  129.150470][ T4987] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.183161][ T5613] netlink: 'syz.3.561': attribute type 1 has an invalid length.
[  129.370568][   T28] kauditd_printk_skb: 35 callbacks suppressed
[  129.370660][   T28] audit: type=1400 audit(1773693624.201:580): avc:  denied  { read } for  pid=5620 comm="syz.2.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  129.416391][   T28] audit: type=1400 audit(1773693624.241:581): avc:  denied  { write } for  pid=5614 comm="syz.5.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  129.498926][   T28] audit: type=1400 audit(1773693624.331:582): avc:  denied  { read write } for  pid=5626 comm="syz.4.567" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  129.514320][ T5624] loop3: detected capacity change from 0 to 1024
[  129.577536][   T28] audit: type=1400 audit(1773693624.331:583): avc:  denied  { open } for  pid=5626 comm="syz.4.567" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  129.615258][ T5635] netlink: 'syz.5.568': attribute type 4 has an invalid length.
[  129.642294][ T5634] loop4: detected capacity change from 0 to 1024
[  129.649250][ T5634] EXT4-fs: Ignoring removed oldalloc option
[  129.660816][ T5634] ext2: Unknown parameter 'smackfsdef'
[  129.674497][ T5624] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002]
[  129.742904][ T5641] syzkaller0: entered promiscuous mode
[  129.757419][ T5641] syzkaller0: entered allmulticast mode
[  129.766322][ T5624] System zones: 0-1, 3-8
[  129.789843][ T5624] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  129.802298][ T5624] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  129.817428][ T5643] loop1: detected capacity change from 0 to 2048
[  129.852533][ T5643] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  130.056807][   T28] audit: type=1400 audit(1773693624.841:584): avc:  denied  { read } for  pid=5650 comm="syz.5.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  130.087439][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  130.162752][ T5655] netlink: 'syz.3.576': attribute type 10 has an invalid length.
[  130.201112][ T5655] netlink: 55 bytes leftover after parsing attributes in process `syz.3.576'.
[  130.312104][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.367230][ T5663] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65386 sclass=netlink_route_socket pid=5663 comm=syz.3.579
[  130.474624][ T5665] syzkaller0: entered promiscuous mode
[  130.480269][ T5665] syzkaller0: entered allmulticast mode
[  131.882963][ T5688] syzkaller0: entered promiscuous mode
[  131.888632][ T5688] syzkaller0: entered allmulticast mode
[  133.483028][ T5691] loop3: detected capacity change from 0 to 256
[  134.637841][ T5691] FAT-fs (loop3): Directory bread(block 64) failed
[  134.644566][ T5691] FAT-fs (loop3): Directory bread(block 65) failed
[  134.651209][ T5691] FAT-fs (loop3): Directory bread(block 66) failed
[  134.657876][ T5691] FAT-fs (loop3): Directory bread(block 67) failed
[  134.664464][ T5691] FAT-fs (loop3): Directory bread(block 68) failed
[  134.671069][ T5691] FAT-fs (loop3): Directory bread(block 69) failed
[  134.677696][ T5691] FAT-fs (loop3): Directory bread(block 70) failed
[  134.684294][ T5691] FAT-fs (loop3): Directory bread(block 71) failed
[  134.690889][ T5691] FAT-fs (loop3): Directory bread(block 72) failed
[  134.697513][ T5691] FAT-fs (loop3): Directory bread(block 73) failed
[  135.292909][ T5709] loop4: detected capacity change from 0 to 256
[  135.321002][ T5709] vfat: Unknown parameter '0xffffffffffffffff˙˙˙˙˙˙˙˙˙˙18446744073709551615˙˙˙˙˙˙˙˙'
[  135.984525][   T28] audit: type=1400 audit(1773693630.791:585): avc:  denied  { mount } for  pid=5710 comm="syz.2.593" name="/" dev="rpc_pipefs" ino=16290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1
[  136.073589][ T5717] netlink: 'syz.3.594': attribute type 1 has an invalid length.
[  136.081437][ T5717] netlink: 'syz.3.594': attribute type 2 has an invalid length.
[  136.089204][ T5717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.594'.
[  136.256446][ T5724] syz_tun: entered allmulticast mode
[  136.275260][ T5721] syz_tun: left allmulticast mode
[  136.280950][   T28] audit: type=1400 audit(1773693631.111:586): avc:  denied  { ioctl } for  pid=5721 comm="syz.3.596" path="socket:[15126]" dev="sockfs" ino=15126 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  136.320118][   T28] audit: type=1400 audit(1773693631.151:587): avc:  denied  { ioctl } for  pid=5728 comm="syz.4.598" path="pid:[4026532383]" dev="nsfs" ino=4026532383 ioctlcmd=0xb706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  136.419153][   T28] audit: type=1400 audit(1773693631.251:588): avc:  denied  { connect } for  pid=5735 comm="syz.2.600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  136.729054][ T5749] loop4: detected capacity change from 0 to 128
[  136.996368][ T5752] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100)
[  137.004375][ T5752] FAT-fs (loop4): Filesystem has been set read-only
[  137.011058][ T5752] syz.4.603: attempt to access beyond end of device
[  137.011058][ T5752] loop4: rw=8912896, sector=2065, nr_sectors = 8 limit=128
[  137.024951][ T5752] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100)
[  137.032901][ T5752] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100)
[  137.042177][ T5752] syz.4.603: attempt to access beyond end of device
[  137.042177][ T5752] loop4: rw=8388608, sector=2065, nr_sectors = 8 limit=128
[  137.058432][ T5752] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100)
[  137.066447][ T5752] syz.4.603: attempt to access beyond end of device
[  137.066447][ T5752] loop4: rw=8912896, sector=2065, nr_sectors = 8 limit=128
[  137.080166][ T5752] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100)
[  137.088133][ T5752] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100)
[  137.096052][ T5752] syz.4.603: attempt to access beyond end of device
[  137.096052][ T5752] loop4: rw=8388608, sector=2065, nr_sectors = 8 limit=128
[  137.110165][ T5752] syz.4.603: attempt to access beyond end of device
[  137.110165][ T5752] loop4: rw=8388608, sector=2065, nr_sectors = 8 limit=128
[  137.124255][ T5752] syz.4.603: attempt to access beyond end of device
[  137.124255][ T5752] loop4: rw=8388608, sector=2065, nr_sectors = 8 limit=128
[  137.138115][ T5752] syz.4.603: attempt to access beyond end of device
[  137.138115][ T5752] loop4: rw=8388608, sector=2065, nr_sectors = 8 limit=128
[  137.151924][ T5752] syz.4.603: attempt to access beyond end of device
[  137.151924][ T5752] loop4: rw=8388608, sector=2065, nr_sectors = 8 limit=128
[  137.165921][ T5752] syz.4.603: attempt to access beyond end of device
[  137.165921][ T5752] loop4: rw=8388608, sector=2065, nr_sectors = 8 limit=128
[  137.179759][ T5752] syz.4.603: attempt to access beyond end of device
[  137.179759][ T5752] loop4: rw=8388608, sector=2065, nr_sectors = 8 limit=128
[  137.496139][ T5753] Buffer I/O error on dev loop4, logical block 2065, async page read
[  137.504407][ T5753] Buffer I/O error on dev loop4, logical block 2066, async page read
[  137.512520][ T5753] Buffer I/O error on dev loop4, logical block 2067, async page read
[  137.520617][ T5753] Buffer I/O error on dev loop4, logical block 2068, async page read
[  137.528766][ T5753] Buffer I/O error on dev loop4, logical block 2069, async page read
[  137.537058][ T5753] Buffer I/O error on dev loop4, logical block 2070, async page read
[  137.545172][ T5753] Buffer I/O error on dev loop4, logical block 2071, async page read
[  137.553334][ T5753] Buffer I/O error on dev loop4, logical block 2072, async page read
[  137.561468][ T5753] Buffer I/O error on dev loop4, logical block 2065, async page read
[  137.569564][ T5753] Buffer I/O error on dev loop4, logical block 2066, async page read
[  137.817089][ T5759] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma?
[  137.846576][ T5759] loop3: detected capacity change from 0 to 512
[  137.924984][ T5763] loop2: detected capacity change from 0 to 256
[  137.957599][ T5762] loop5: detected capacity change from 0 to 512
[  138.018903][ T5763] FAT-fs (loop2): Directory bread(block 64) failed
[  138.025674][ T5763] FAT-fs (loop2): Directory bread(block 65) failed
[  138.032375][ T5763] FAT-fs (loop2): Directory bread(block 66) failed
[  138.039074][ T5763] FAT-fs (loop2): Directory bread(block 67) failed
[  138.045845][ T5763] FAT-fs (loop2): Directory bread(block 68) failed
[  138.052526][ T5763] FAT-fs (loop2): Directory bread(block 69) failed
[  138.059257][ T5763] FAT-fs (loop2): Directory bread(block 70) failed
[  138.065841][ T5763] FAT-fs (loop2): Directory bread(block 71) failed
[  138.072421][ T5763] FAT-fs (loop2): Directory bread(block 72) failed
[  138.079104][ T5763] FAT-fs (loop2): Directory bread(block 73) failed
[  138.215751][ T5759] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  138.242520][ T5762] EXT4-fs: Ignoring removed bh option
[  138.269983][ T5762] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  138.331677][ T5759] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  138.390092][ T5762] EXT4-fs (loop5): 1 truncate cleaned up
[  138.456779][ T5762] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  138.787564][ T4987] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.824897][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.884095][   T28] audit: type=1400 audit(1773693633.711:589): avc:  denied  { write } for  pid=5775 comm="syz.5.608" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  139.001380][ T5778] netlink: 4 bytes leftover after parsing attributes in process `syz.5.608'.
[  139.808410][ T5769] loop4: detected capacity change from 0 to 1024
[  139.921099][ T5769] EXT4-fs: Ignoring removed orlov option
[  139.973359][ T5769] EXT4-fs (loop4): stripe (9) is not aligned with cluster size (16), stripe is disabled
[  140.061416][ T5794] loop5: detected capacity change from 0 to 1024
[  140.074209][ T5794] EXT4-fs: Ignoring removed oldalloc option
[  140.080232][ T5794] ext2: Unknown parameter 'smackfsdef'
[  140.118607][ T5769] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  140.245057][ T5800] syzkaller0: entered promiscuous mode
[  140.250621][ T5800] syzkaller0: entered allmulticast mode
[  140.383275][   T28] audit: type=1400 audit(1773693635.221:590): avc:  denied  { sqpoll } for  pid=5806 comm="syz.5.615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  140.890007][ T5816] netlink: 6040 bytes leftover after parsing attributes in process `syz.2.618'.
[  140.972696][   T28] audit: type=1326 audit(1773693635.811:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5819 comm="syz.5.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f086641c799 code=0x7ffc0000
[  141.042933][   T28] audit: type=1326 audit(1773693635.811:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5819 comm="syz.5.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f086641c799 code=0x7ffc0000
[  141.112082][   T28] audit: type=1326 audit(1773693635.831:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5819 comm="syz.5.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f086641c799 code=0x7ffc0000
[  141.142604][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  141.206162][ T5824] loop3: detected capacity change from 0 to 128
[  141.220131][ T5824] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  141.232415][   T28] audit: type=1326 audit(1773693635.831:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5819 comm="syz.5.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f086641c799 code=0x7ffc0000
[  141.256099][ T5824] ext4 filesystem being mounted at /125/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  141.277001][   T28] audit: type=1326 audit(1773693635.831:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5819 comm="syz.5.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f086641c799 code=0x7ffc0000
[  141.353607][   T28] audit: type=1326 audit(1773693635.831:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5819 comm="syz.5.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f086641c799 code=0x7ffc0000
[  141.911078][   T28] audit: type=1326 audit(1773693635.831:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5819 comm="syz.5.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f086641c799 code=0x7ffc0000
[  141.934504][   T28] audit: type=1326 audit(1773693635.831:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5819 comm="syz.5.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f086641c799 code=0x7ffc0000
[  141.957757][   T28] audit: type=1326 audit(1773693635.831:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5819 comm="syz.5.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f086641c799 code=0x7ffc0000
[  141.981054][   T28] audit: type=1326 audit(1773693635.831:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5819 comm="syz.5.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f086641c799 code=0x7ffc0000
[  142.015124][   T28] audit: type=1326 audit(1773693635.831:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5819 comm="syz.5.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0866416517 code=0x7ffc0000
[  142.834471][ T3318] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  143.663791][ T4325] IPVS: starting estimator thread 0...
[  143.750985][ T5853] IPVS: using max 2448 ests per chain, 122400 per kthread
[  144.349360][ T5866] netlink: 'syz.1.632': attribute type 1 has an invalid length.
[  144.388559][ T5868] loop3: detected capacity change from 0 to 512
[  144.399505][ T5866] netlink: 'syz.1.632': attribute type 2 has an invalid length.
[  144.428901][ T5866] netlink: 4 bytes leftover after parsing attributes in process `syz.1.632'.
[  144.440881][ T5868] EXT4-fs (loop3): external journal device major/minor numbers have changed
[  144.497987][ T5868] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  144.563908][ T5868] block device autoloading is deprecated and will be removed.
[  144.725039][ T5868] EXT4-fs (loop3): couldn't read superblock of external journal
[  145.190395][ T5868] loop3: detected capacity change from 0 to 512
[  145.285217][ T5868] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  146.326838][ T5868] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  146.341951][ T5868] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.634: bg 0: block 248: padding at end of block bitmap is not set
[  146.356378][ T5868] loop3: lost filesystem error report for type 5 error -117
[  146.356575][ T5868] __quota_error: 3325 callbacks suppressed
[  146.356590][ T5868] Quota error (device loop3): write_blk: dquota write failed
[  146.363911][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  146.363931][    C1] EXT4-fs (loop3): last error at time 1773693641: ext4_validate_block_bitmap:441
[  146.401175][ T5868] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  146.431287][ T5868] EXT4-fs error (device loop3): ext4_acquire_dquot:7001: comm syz.3.634: Failed to acquire dquot type 1
[  146.490102][ T5894] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma?
[  146.515438][ T5868] loop3: lost filesystem error report for type 5 error -117
[  146.516080][ T5868] EXT4-fs (loop3): 1 truncate cleaned up
[  146.535001][ T5894] loop4: detected capacity change from 0 to 512
[  146.655370][ T5868] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  146.712678][ T5894] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  146.725730][ T5894] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  146.737138][   T28] audit: type=1400 audit(1773693641.571:3927): avc:  denied  { setattr } for  pid=5867 comm="syz.3.634" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  146.737175][ T5868] Quota error (device loop3): write_blk: dquota write failed
[  147.070600][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.084814][ T5868] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota
[  147.180849][ T5868] EXT4-fs error (device loop3): ext4_acquire_dquot:7001: comm syz.3.634: Failed to acquire dquot type 1
[  147.364008][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  147.377265][ T5909] loop4: detected capacity change from 0 to 128
[  147.762408][ T5915] loop3: detected capacity change from 0 to 512
[  147.802216][ T5915] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  147.854549][ T5915] EXT4-fs (loop3): 1 truncate cleaned up
[  147.883274][ T5915] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  148.280178][ T5929] loop1: detected capacity change from 0 to 128
[  148.308162][ T5929] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  148.329630][ T5929] ext4 filesystem being mounted at /125/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  148.408694][ T5926] loop4: detected capacity change from 0 to 512
[  148.513546][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  148.525357][ T5926] EXT4-fs: Ignoring removed bh option
[  148.541622][ T5934] tipc: Started in network mode
[  148.544655][ T5926] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  148.546527][ T5934] tipc: Node identity 0eaab59e1ce9, cluster identity 4711
[  148.546579][ T5934] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  148.547203][ T5934] syzkaller0: entered promiscuous mode
[  148.597144][ T5934] syzkaller0: entered allmulticast mode
[  148.746778][ T5933] tipc: Resetting bearer <eth:syzkaller0>
[  148.755088][ T5933] tipc: Disabling bearer <eth:syzkaller0>
[  148.938900][ T5926] EXT4-fs (loop4): 1 truncate cleaned up
[  150.111093][ T5947] loop5: detected capacity change from 0 to 128
[  150.269943][ T5926] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  150.461233][ T5947] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  150.787910][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.146688][ T3314] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  151.674284][ T5967] loop1: detected capacity change from 0 to 128
[  151.899993][ T5973] loop5: detected capacity change from 0 to 2048
[  151.942924][ T5973] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  151.955700][ T5973] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  152.270230][ T5979] loop4: detected capacity change from 0 to 512
[  152.316424][ T5979] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  152.343908][ T4987] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  152.436037][ T5979] EXT4-fs (loop4): 1 truncate cleaned up
[  152.517321][ T5979] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  152.698958][ T5992] syzkaller0: entered promiscuous mode
[  152.870937][ T5992] syzkaller0: entered allmulticast mode
[  152.933013][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  153.011610][ T5999] loop3: detected capacity change from 0 to 128
[  153.031536][ T6002] netlink: 6040 bytes leftover after parsing attributes in process `syz.5.683'.
[  153.152915][ T6008] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(14)
[  153.159605][ T6008] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  153.177426][ T6008] vhci_hcd vhci_hcd.0: Device attached
[  153.221687][ T6008] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(16)
[  153.228343][ T6008] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  153.261202][ T6008] vhci_hcd vhci_hcd.0: Device attached
[  153.307841][ T6016] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[  153.315786][ T6016] FAT-fs (loop3): Filesystem has been set read-only
[  153.322532][ T6016] bio_check_eod: 11800 callbacks suppressed
[  153.322579][ T6016] syz.3.669: attempt to access beyond end of device
[  153.322579][ T6016] loop3: rw=8912896, sector=2065, nr_sectors = 8 limit=128
[  153.342277][ T6016] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[  153.350150][ T6016] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[  153.362094][ T6017] syz.3.669: attempt to access beyond end of device
[  153.362094][ T6017] loop3: rw=8388608, sector=2065, nr_sectors = 1 limit=128
[  153.376012][ T6017] buffer_io_error: 6022 callbacks suppressed
[  153.376029][ T6017] Buffer I/O error on dev loop3, logical block 2065, async page read
[  153.390125][ T6017] syz.3.669: attempt to access beyond end of device
[  153.390125][ T6017] loop3: rw=8388608, sector=2066, nr_sectors = 1 limit=128
[  153.403810][ T6017] Buffer I/O error on dev loop3, logical block 2066, async page read
[  153.412021][ T6017] syz.3.669: attempt to access beyond end of device
[  153.412021][ T6017] loop3: rw=8388608, sector=2067, nr_sectors = 1 limit=128
[  153.425693][ T6017] Buffer I/O error on dev loop3, logical block 2067, async page read
[  153.433847][ T6017] syz.3.669: attempt to access beyond end of device
[  153.433847][ T6017] loop3: rw=8388608, sector=2068, nr_sectors = 1 limit=128
[  153.447547][ T6017] Buffer I/O error on dev loop3, logical block 2068, async page read
[  153.455672][ T6017] syz.3.669: attempt to access beyond end of device
[  153.455672][ T6017] loop3: rw=8388608, sector=2069, nr_sectors = 1 limit=128
[  153.469435][ T6017] Buffer I/O error on dev loop3, logical block 2069, async page read
[  153.477590][ T6017] syz.3.669: attempt to access beyond end of device
[  153.477590][ T6017] loop3: rw=8388608, sector=2070, nr_sectors = 1 limit=128
[  153.491313][ T6017] Buffer I/O error on dev loop3, logical block 2070, async page read
[  153.499401][ T6017] syz.3.669: attempt to access beyond end of device
[  153.499401][ T6017] loop3: rw=8388608, sector=2071, nr_sectors = 1 limit=128
[  153.513077][ T6017] Buffer I/O error on dev loop3, logical block 2071, async page read
[  153.521232][ T6017] syz.3.669: attempt to access beyond end of device
[  153.521232][ T6017] loop3: rw=8388608, sector=2072, nr_sectors = 1 limit=128
[  153.535086][ T6017] Buffer I/O error on dev loop3, logical block 2072, async page read
[  153.543214][ T6017] syz.3.669: attempt to access beyond end of device
[  153.543214][ T6017] loop3: rw=8388608, sector=2065, nr_sectors = 1 limit=128
[  153.556941][ T6017] Buffer I/O error on dev loop3, logical block 2065, async page read
[  153.565077][ T6017] Buffer I/O error on dev loop3, logical block 2066, async page read
[  153.835859][ T6008] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(18)
[  153.842615][ T6008] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  153.923369][ T6008] vhci_hcd vhci_hcd.0: Device attached
[  154.003772][ T6018] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(21)
[  154.004225][ T6008] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  154.010510][ T6018] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  154.026280][   T10] usb 9-1: new low-speed USB device number 4 using vhci_hcd
[  154.085706][ T6008] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  154.160157][ T6018] vhci_hcd vhci_hcd.0: Device attached
[  154.200986][ T6008] vhci_hcd vhci_hcd.0: pdev(4) rhport(6) sockfd(23)
[  154.207633][ T6008] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  154.295671][ T6008] vhci_hcd vhci_hcd.0: Device attached
[  154.413866][ T6030] vhci_hcd: connection closed
[  154.414158][ T1920] vhci_hcd vhci_hcd.4: stop threads
[  154.424222][ T6012] vhci_hcd: connection closed
[  154.425447][ T6009] vhci_hcd: connection reset by peer
[  154.467575][ T6019] vhci_hcd: connection closed
[  154.467820][ T6015] vhci_hcd: connection closed
[  154.497468][ T1920] vhci_hcd vhci_hcd.4: release socket
[  154.583114][ T1920] vhci_hcd vhci_hcd.4: disconnect device
[  154.630393][ T1920] vhci_hcd vhci_hcd.4: stop threads
[  154.694950][ T1920] vhci_hcd vhci_hcd.4: release socket
[  154.705384][ T6036] loop2: detected capacity change from 0 to 512
[  154.716758][ T1920] vhci_hcd vhci_hcd.4: disconnect device
[  154.738497][ T1920] vhci_hcd vhci_hcd.4: stop threads
[  154.747258][ T6036] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  154.769979][ T1920] vhci_hcd vhci_hcd.4: release socket
[  154.782558][ T6036] ext4 filesystem being mounted at /122/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  154.784015][ T1920] vhci_hcd vhci_hcd.4: disconnect device
[  154.808456][ T1920] vhci_hcd vhci_hcd.4: stop threads
[  154.815682][ T1920] vhci_hcd vhci_hcd.4: release socket
[  154.821302][ T1920] vhci_hcd vhci_hcd.4: disconnect device
[  154.827179][ T1920] vhci_hcd vhci_hcd.4: stop threads
[  154.832658][ T1920] vhci_hcd vhci_hcd.4: release socket
[  154.838282][ T1920] vhci_hcd vhci_hcd.4: disconnect device
[  154.945256][   T28] audit: type=1400 audit(1773693649.771:3928): avc:  denied  { setattr } for  pid=6035 comm="syz.2.679" name=".log" dev="loop2" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  154.989638][ T6040] 8021q: VLANs not supported on bond0
[  154.995484][ T6040] netlink: 14 bytes leftover after parsing attributes in process `syz.3.680'.
[  155.027882][ T6040] .` (unregistering): Released all slaves
[  155.416608][ T6035] syz.2.679 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  155.439858][ T6035] CPU: 0 UID: 0 PID: 6035 Comm: syz.2.679 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  155.439894][ T6035] Tainted: [W]=WARN
[  155.439920][ T6035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  155.439936][ T6035] Call Trace:
[  155.439944][ T6035]  <TASK>
[  155.439954][ T6035]  __dump_stack+0x1d/0x30
[  155.439985][ T6035]  dump_stack_lvl+0x95/0xd0
[  155.440058][ T6035]  dump_stack+0x15/0x1b
[  155.440086][ T6035]  dump_header+0x80/0x240
[  155.440114][ T6035]  oom_kill_process+0x295/0x350
[  155.440138][ T6035]  out_of_memory+0x97d/0xb80
[  155.440172][ T6035]  try_charge_memcg+0x62e/0xa10
[  155.440231][ T6035]  mem_cgroup_swapin_charge_folio+0x103/0x1f0
[  155.440268][ T6035]  __swap_cache_prepare_and_add+0x386/0x530
[  155.440376][ T6035]  swap_cache_alloc_folio+0xa2/0x120
[  155.440408][ T6035]  swap_cluster_readahead+0x26e/0x3d0
[  155.440472][ T6035]  swapin_readahead+0xde/0x840
[  155.440539][ T6035]  ? _raw_spin_unlock+0x9/0x30
[  155.440573][ T6035]  ? swap_put_entries_cluster+0x385/0x3a0
[  155.440605][ T6035]  ? swap_put_entries_cluster+0x161/0x3a0
[  155.440755][ T6035]  ? __rcu_read_unlock+0x4e/0x70
[  155.440783][ T6035]  ? swap_cache_get_folio+0x26f/0x280
[  155.440881][ T6035]  do_swap_page+0x30d/0x2220
[  155.440926][ T6035]  ? css_rstat_updated+0xbb/0x280
[  155.440953][ T6035]  ? __rcu_read_lock+0x36/0x50
[  155.440979][ T6035]  ? pte_offset_map_rw_nolock+0x19e/0x200
[  155.441086][ T6035]  handle_mm_fault+0xb46/0x3020
[  155.441121][ T6035]  ? vma_start_read+0x1c7/0x2c0
[  155.441159][ T6035]  do_user_addr_fault+0x62f/0x1050
[  155.441256][ T6035]  ? fpregs_assert_state_consistent+0xb3/0xe0
[  155.441329][ T6035]  ? arch_exit_to_user_mode_prepare+0x26/0x80
[  155.441362][ T6035]  ? trace_page_fault_user+0x1f/0xe0
[  155.441402][ T6035]  exc_page_fault+0x62/0xa0
[  155.441463][ T6035]  asm_exc_page_fault+0x26/0x30
[  155.441484][ T6035] RIP: 0033:0x7f22d1f578f8
[  155.441500][ T6035] Code: 75 40 a8 10 75 3c 41 51 4c 8d 9b 08 03 00 00 49 89 c9 48 89 f1 41 50 48 8b 74 24 20 49 89 d0 48 89 fa 4c 89 df e8 a8 56 00 00 <8b> 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00
[  155.441572][ T6035] RSP: 002b:00007ffe756c0d70 EFLAGS: 00010246
[  155.441594][ T6035] RAX: 0000000000000000 RBX: 0000555567a4b500 RCX: 00007f22d1f5cfce
[  155.441613][ T6035] RDX: 00007ffe756c0dc0 RSI: 0000000000000000 RDI: 0000000000000000
[  155.441627][ T6035] RBP: 00007f22d2217da0 R08: 0000000000000000 R09: 0000000000000000
[  155.441640][ T6035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000025f6f
[  155.441718][ T6035] R13: 00007f22d221609c R14: 0000000000025da7 R15: 00007f22d2216090
[  155.441755][ T6035]  </TASK>
[  155.695012][ T6035] memory: usage 307200kB, limit 307200kB, failcnt 490
[  155.701832][ T6035] memory+swap: usage 309976kB, limit 9007199254740988kB, failcnt 0
[  155.709840][ T6035] kmem: usage 303076kB, limit 9007199254740988kB, failcnt 0
[  155.719244][ T6035] Memory cgroup stats for /syz2:
[  155.719578][ T6035] cache 4222976
[  155.728211][ T6035] rss 0
[  155.731229][ T6035] shmem 4194304
[  155.734714][ T6035] mapped_file 0
[  155.738190][ T6035] dirty 0
[  155.741488][ T6035] writeback 0
[  155.744786][ T6035] workingset_refault_anon 644
[  155.749479][ T6035] workingset_refault_file 271
[  155.754476][ T6035] swap 2842624
[  155.757880][ T6035] swapcached 4874240
[  155.761969][ T6035] pgpgin 104237
[  155.765478][ T6035] pgpgout 103206
[  155.769033][ T6035] pgfault 116332
[  155.772863][ T6035] pgmajfault 96
[  155.776373][ T6035] inactive_anon 0
[  155.784690][ T6035] active_anon 0
[  155.788187][ T6035] inactive_file 28672
[  155.792554][ T6035] active_file 0
[  155.797448][ T6035] unevictable 4194304
[  155.802293][ T6035] hierarchical_memory_limit 314572800
[  155.807721][ T6035] hierarchical_memsw_limit 9223372036854771712
[  155.818444][ T6035] total_cache 4222976
[  155.822520][ T6035] total_rss 0
[  155.825853][ T6035] total_shmem 4194304
[  155.830618][ T6035] total_mapped_file 0
[  155.834890][ T6035] total_dirty 0
[  155.838413][ T6035] total_writeback 0
[  155.846806][ T6048] loop3: detected capacity change from 0 to 512
[  155.854042][ T6047] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  155.864395][ T6047] syzkaller0: entered promiscuous mode
[  155.869889][ T6047] syzkaller0: entered allmulticast mode
[  155.870701][ T6035] total_workingset_refault_anon 644
[  155.881327][ T6048] ext4: Unknown parameter 'noacl'
[  155.898362][ T6035] total_workingset_refault_file 271
[  155.909921][ T6035] total_swap 2842624
[  155.914083][ T6035] total_swapcached 4874240
[  155.918608][ T6035] total_pgpgin 104237
[  155.922616][ T6035] total_pgpgout 103206
[  155.926755][ T6035] total_pgfault 116332
[  155.930874][ T6035] total_pgmajfault 96
[  155.934902][ T6035] total_inactive_anon 0
[  155.939119][ T6035] total_active_anon 0
[  155.969685][ T6035] total_inactive_file 28672
[  155.985641][ T6035] total_active_file 0
[  155.995763][ T6035] total_unevictable 4194304
[  156.017550][ T6035] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.48,pid=3638,uid=0
[  156.032227][ T6035] Memory cgroup out of memory: Killed process 3638 (syz.2.48) total-vm:96272kB, anon-rss:1236kB, file-rss:20800kB, shmem-rss:0kB, UID:0 pgtables:108kB oom_score_adj:1000
[  156.071181][ T6046] tipc: Resetting bearer <eth:syzkaller0>
[  156.079857][ T6046] tipc: Disabling bearer <eth:syzkaller0>
[  156.095862][ T6042] loop5: detected capacity change from 0 to 512
[  156.102344][ T6036] syz.2.679 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000
[  156.117752][ T6036] CPU: 0 UID: 0 PID: 6036 Comm: syz.2.679 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  156.117791][ T6036] Tainted: [W]=WARN
[  156.117806][ T6036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  156.117823][ T6036] Call Trace:
[  156.117831][ T6036]  <TASK>
[  156.117908][ T6036]  __dump_stack+0x1d/0x30
[  156.117944][ T6036]  dump_stack_lvl+0x95/0xd0
[  156.118042][ T6036]  dump_stack+0x15/0x1b
[  156.118071][ T6036]  dump_header+0x80/0x240
[  156.118104][ T6036]  oom_kill_process+0x295/0x350
[  156.118133][ T6036]  out_of_memory+0x97d/0xb80
[  156.118206][ T6036]  try_charge_memcg+0x62e/0xa10
[  156.118265][ T6036]  obj_cgroup_charge_pages+0x23/0xc0
[  156.118306][ T6036]  __memcg_kmem_charge_page+0x9e/0x170
[  156.118426][ T6036]  __alloc_frozen_pages_noprof+0x18a/0x360
[  156.118514][ T6036]  alloc_pages_mpol+0xb3/0x260
[  156.118594][ T6036]  alloc_pages_noprof+0x8f/0x130
[  156.118635][ T6036]  __vmalloc_node_range_noprof+0xa46/0x12b0
[  156.118686][ T6036]  __kvmalloc_node_noprof+0x3d4/0x650
[  156.118721][ T6036]  ? ip_set_alloc+0x24/0x30
[  156.118837][ T6036]  ? ip_set_alloc+0x24/0x30
[  156.119059][ T6036]  ? __kmalloc_cache_noprof+0x18a/0x410
[  156.119090][ T6036]  ip_set_alloc+0x24/0x30
[  156.119178][ T6036]  hash_netiface_create+0x282/0x740
[  156.119216][ T6036]  ? __pfx_hash_netiface_create+0x10/0x10
[  156.119299][ T6036]  ip_set_create+0x3cf/0x970
[  156.119406][ T6036]  ? __nla_parse+0x40/0x60
[  156.119482][ T6036]  nfnetlink_rcv_msg+0x509/0x5d0
[  156.119552][ T6036]  netlink_rcv_skb+0x123/0x220
[  156.119596][ T6036]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  156.119642][ T6036]  nfnetlink_rcv+0x167/0x1720
[  156.119779][ T6036]  ? __kfree_skb+0x109/0x150
[  156.119817][ T6036]  ? nlmon_xmit+0x4f/0x60
[  156.119844][ T6036]  ? consume_skb+0x4b/0x160
[  156.119918][ T6036]  ? nlmon_xmit+0x4f/0x60
[  156.119941][ T6036]  ? dev_hard_start_xmit+0x3b9/0x3f0
[  156.119983][ T6036]  ? __dev_queue_xmit+0x136c/0x1f20
[  156.120085][ T6036]  ? __dev_queue_xmit+0x148/0x1f20
[  156.120124][ T6036]  ? ref_tracker_free+0x37d/0x3e0
[  156.120247][ T6036]  ? __netlink_deliver_tap+0x4dc/0x500
[  156.120295][ T6036]  netlink_unicast+0x5c0/0x690
[  156.120406][ T6036]  netlink_sendmsg+0x5c8/0x6f0
[  156.120455][ T6036]  ? __pfx_netlink_sendmsg+0x10/0x10
[  156.120576][ T6036]  ____sys_sendmsg+0x563/0x5b0
[  156.120676][ T6036]  ___sys_sendmsg+0x195/0x1e0
[  156.120793][ T6036]  __x64_sys_sendmsg+0xd4/0x160
[  156.120842][ T6036]  x64_sys_call+0x194c/0x3020
[  156.120877][ T6036]  do_syscall_64+0x12c/0x370
[  156.120975][ T6036]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  156.121004][ T6036] RIP: 0033:0x7f22d1f9c799
[  156.121024][ T6036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  156.121049][ T6036] RSP: 002b:00007f22d09f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  156.121073][ T6036] RAX: ffffffffffffffda RBX: 00007f22d2215fa0 RCX: 00007f22d1f9c799
[  156.121159][ T6036] RDX: 0000000000000880 RSI: 0000200000000040 RDI: 0000000000000004
[  156.121183][ T6036] RBP: 00007f22d2032c99 R08: 0000000000000000 R09: 0000000000000000
[  156.121201][ T6036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  156.121218][ T6036] R13: 00007f22d2216038 R14: 00007f22d2215fa0 R15: 00007ffe756c0c88
[  156.121302][ T6036]  </TASK>
[  156.447320][ T6053] loop4: detected capacity change from 0 to 287
[  156.457751][ T6036] memory: usage 307168kB, limit 307200kB, failcnt 556
[  156.467848][ T6036] memory+swap: usage 307804kB, limit 9007199254740988kB, failcnt 0
[  156.477826][ T6036] kmem: usage 302960kB, limit 9007199254740988kB, failcnt 0
[  156.487117][ T6036] Memory cgroup stats for /syz2:
[  156.487467][ T6036] cache 4198400
[  156.508829][ T6048] loop3: detected capacity change from 0 to 1024
[  156.513855][ T6053] FAT-fs (loop4): Directory bread(block 71) failed
[  156.521784][ T6053] FAT-fs (loop4): Directory bread(block 72) failed
[  156.528315][ T6053] FAT-fs (loop4): Directory bread(block 73) failed
[  156.534626][ T6042] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  156.534897][ T6053] FAT-fs (loop4): Directory bread(block 74) failed
[  156.534927][ T6053] FAT-fs (loop4): Directory bread(block 75) failed
[  156.535004][ T6053] FAT-fs (loop4): Directory bread(block 76) failed
[  156.535027][ T6053] FAT-fs (loop4): Directory bread(block 77) failed
[  156.535055][ T6053] FAT-fs (loop4): Directory bread(block 78) failed
[  156.535087][ T6053] FAT-fs (loop4): Directory bread(block 79) failed
[  156.535114][ T6053] FAT-fs (loop4): Directory bread(block 80) failed
[  156.541173][ T6048] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  156.608261][ T6048] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  156.630161][ T6048] JBD2: no valid journal superblock found
[  156.637273][ T6048] EXT4-fs (loop3): Could not load journal inode
[  156.645262][ T6042] EXT4-fs (loop5): 1 truncate cleaned up
[  156.645927][ T6036] rss 16384
[  156.646002][ T6036] shmem 4194304
[  156.646075][ T6036] mapped_file 0
[  156.646085][ T6036] dirty 0
[  156.646094][ T6036] writeback 0
[  156.646103][ T6036] workingset_refault_anon 653
[  156.646114][ T6036] workingset_refault_file 271
[  156.646125][ T6036] swap 634880
[  156.646135][ T6036] swapcached 4874240
[  156.646144][ T6036] pgpgin 104246
[  156.646154][ T6036] pgpgout 103215
[  156.676943][ T6042] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  156.724046][ T6036] pgfault 116336
[  156.727707][ T6036] pgmajfault 101
[  156.731479][ T6036] inactive_anon 0
[  156.735621][ T6036] active_anon 24576
[  156.789649][ T6036] inactive_file 0
[  156.793582][ T6036] active_file 4096
[  156.797331][ T6036] unevictable 4194304
[  156.801633][ T6036] hierarchical_memory_limit 314572800
[  156.807131][ T6036] hierarchical_memsw_limit 9223372036854771712
[  156.813481][ T6036] total_cache 4198400
[  156.817627][ T6036] total_rss 16384
[  156.821305][ T6036] total_shmem 4194304
[  156.825404][ T6036] total_mapped_file 0
[  156.829407][ T6036] total_dirty 0
[  156.833016][ T6036] total_writeback 0
[  156.836860][ T6036] total_workingset_refault_anon 653
[  156.842169][ T6036] total_workingset_refault_file 271
[  156.847381][ T6036] total_swap 634880
[  156.860980][ T6036] total_swapcached 4874240
[  156.865520][ T6036] total_pgpgin 104246
[  156.869551][ T6036] total_pgpgout 103215
[  156.874682][ T6036] total_pgfault 116336
[  156.880187][ T6036] total_pgmajfault 101
[  156.886921][ T6061] loop4: detected capacity change from 0 to 512
[  156.895979][ T6061] EXT4-fs (loop4): external journal device major/minor numbers have changed
[  156.905302][ T6061] EXT4-fs (loop4): couldn't read superblock of external journal
[  156.931927][ T6036] total_inactive_anon 0
[  156.938078][ T4987] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  156.938181][ T6036] total_active_anon 24576
[  156.967429][ T6036] total_inactive_file 0
[  157.011348][ T6036] total_active_file 4096
[  157.016889][ T6036] total_unevictable 4194304
[  157.024453][ T6036] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.679,pid=6035,uid=0
[  157.040252][ T6036] Memory cgroup out of memory: Killed process 6035 (syz.2.679) total-vm:94164kB, anon-rss:1316kB, file-rss:22468kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000
[  157.091744][ T6036] syz.2.679 (6036) used greatest stack depth: 5880 bytes left
[  157.121182][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  159.053288][   T10] usb 9-1: enqueue for inactive port 0
[  159.076677][   T10] usb 9-1: enqueue for inactive port 0
[  159.196419][ T6104] loop2: detected capacity change from 0 to 8192
[  159.238912][   T10] vhci_hcd vhci_hcd.4: vhci_device speed not set
[  159.707249][ T6115] loop5: detected capacity change from 0 to 512
[  159.786835][ T6117] loop2: detected capacity change from 0 to 512
[  159.812819][ T6117] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  159.831704][ T6115] ext4: Unknown parameter 'noacl'
[  159.885431][ T6117] EXT4-fs (loop2): 1 truncate cleaned up
[  160.159532][ T6117] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  160.371890][   T28] audit: type=1400 audit(1773693655.211:3929): avc:  denied  { ioctl } for  pid=6127 comm="syz.1.705" path="socket:[16925]" dev="sockfs" ino=16925 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  160.437256][   T28] audit: type=1400 audit(1773693655.271:3930): avc:  denied  { read } for  pid=6127 comm="syz.1.705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  160.459713][ T6130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.705'.
[  160.474537][ T6115] loop5: detected capacity change from 0 to 1024
[  160.496220][ T6115] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  160.509904][ T6115] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  160.522194][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.532639][ T6115] JBD2: no valid journal superblock found
[  160.538862][ T6115] EXT4-fs (loop5): Could not load journal inode
[  161.676928][ T6156] loop3: detected capacity change from 0 to 256
[  161.833585][ T6154] loop5: detected capacity change from 0 to 128
[  161.915659][ T6156] FAT-fs (loop3): Directory bread(block 64) failed
[  161.922480][ T6156] FAT-fs (loop3): Directory bread(block 65) failed
[  161.929125][ T6156] FAT-fs (loop3): Directory bread(block 66) failed
[  161.936101][ T6156] FAT-fs (loop3): Directory bread(block 67) failed
[  161.942886][ T6156] FAT-fs (loop3): Directory bread(block 68) failed
[  161.949452][ T6156] FAT-fs (loop3): Directory bread(block 69) failed
[  161.956484][ T6156] FAT-fs (loop3): Directory bread(block 70) failed
[  161.963146][ T6156] FAT-fs (loop3): Directory bread(block 71) failed
[  161.969883][ T6156] FAT-fs (loop3): Directory bread(block 72) failed
[  161.976477][ T6156] FAT-fs (loop3): Directory bread(block 73) failed
[  162.477091][ T6160] loop1: detected capacity change from 0 to 8192
[  162.908918][ T6170] sch_fq: defrate 7 ignored.
[  162.925585][ T6170] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6170 comm=syz.2.715
[  163.600876][ T6207] loop4: detected capacity change from 0 to 512
[  164.314736][ T6207] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  164.591456][ T6207] EXT4-fs (loop4): 1 truncate cleaned up
[  164.624591][ T6207] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  165.460502][ T6259] loop3: detected capacity change from 0 to 512
[  165.543529][ T6259] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  165.649798][ T6259] EXT4-fs (loop3): 1 truncate cleaned up
[  165.710692][ T6259] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  165.778245][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.810835][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.656821][ T6287] loop1: detected capacity change from 0 to 4096
[  166.678165][ T6289] loop2: detected capacity change from 0 to 128
[  166.692228][ T6287] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  166.836309][ T6287] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #15: comm syz.1.739: corrupted inode contents
[  166.853319][ T6287] EXT4-fs error (device loop1): ext4_dirty_inode:6450: inode #15: comm syz.1.739: mark_inode_dirty error
[  166.872841][ T6287] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #15: comm syz.1.739: corrupted inode contents
[  166.994584][ T6287] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #15: comm syz.1.739: mark_inode_dirty error
[  167.353975][ T6287] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #15: comm syz.1.739: corrupted inode contents
[  167.366695][ T6287] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #15: comm syz.1.739: mark_inode_dirty error
[  167.387572][ T6287] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #15: comm syz.1.739: corrupted inode contents
[  167.399670][ T6287] EXT4-fs error (device loop1): ext4_truncate:4587: inode #15: comm syz.1.739: mark_inode_dirty error
[  167.421744][ T6287] EXT4-fs error (device loop1) in ext4_setattr:5983: Corrupt filesystem
[  167.430787][ T6299] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #15: comm syz.1.739: corrupted inode contents
[  167.461180][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.636915][ T6308] loop2: detected capacity change from 0 to 1024
[  167.659099][ T6308] EXT4-fs: Ignoring removed oldalloc option
[  167.692149][ T6308] EXT4-fs: Ignoring removed bh option
[  167.873805][ T6308] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  168.152550][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.839423][ T6334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.742'.
[  169.377206][ T6348] netlink: 14 bytes leftover after parsing attributes in process `syz.1.743'.
[  169.430534][ T6345] vlan2: entered allmulticast mode
[  169.464491][ T6345] bond0: entered allmulticast mode
[  169.492659][ T6350] loop5: detected capacity change from 0 to 4096
[  169.495125][ T6352] loop2: detected capacity change from 0 to 256
[  169.510368][ T6350] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  169.531374][ T6348] bond0 (unregistering): Released all slaves
[  169.542341][ T6350] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #15: comm syz.5.745: corrupted inode contents
[  169.554603][ T6350] EXT4-fs error (device loop5): ext4_dirty_inode:6450: inode #15: comm syz.5.745: mark_inode_dirty error
[  169.566701][ T6350] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #15: comm syz.5.745: corrupted inode contents
[  169.581849][ T6350] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #15: comm syz.5.745: mark_inode_dirty error
[  169.593617][ T6350] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #15: comm syz.5.745: corrupted inode contents
[  169.605706][ T6350] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #15: comm syz.5.745: mark_inode_dirty error
[  169.617317][ T6350] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #15: comm syz.5.745: corrupted inode contents
[  169.635596][ T6350] EXT4-fs error (device loop5): ext4_truncate:4587: inode #15: comm syz.5.745: mark_inode_dirty error
[  169.647486][ T6350] EXT4-fs error (device loop5) in ext4_setattr:5983: Corrupt filesystem
[  169.692003][ T6352] netlink: 16 bytes leftover after parsing attributes in process `syz.2.746'.
[  169.703320][ T6354] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #15: comm syz.5.745: corrupted inode contents
[  169.840483][ T4987] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  170.106322][ T6376] loop4: detected capacity change from 0 to 1024
[  170.134676][ T6376] EXT4-fs: Ignoring removed oldalloc option
[  170.151655][ T6376] EXT4-fs: Ignoring removed bh option
[  170.164087][ T6376] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  170.354330][ T6385] loop1: detected capacity change from 0 to 512
[  170.369096][ T6385] ext4: Unknown parameter 'noacl'
[  170.778273][ T6385] loop1: detected capacity change from 0 to 1024
[  170.882309][ T6385] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  170.900934][ T6385] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  170.984498][ T6385] JBD2: no valid journal superblock found
[  170.993169][ T6385] EXT4-fs (loop1): Could not load journal inode
[  171.109507][ T6376] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4222: comm syz.4.751: Allocating blocks 1-17 which overlap fs metadata
[  171.133566][ T6381] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4222: comm syz.4.751: Allocating blocks 1-17 which overlap fs metadata
[  171.195181][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.345356][ T6393] loop5: detected capacity change from 0 to 1024
[  171.365266][ T6393] EXT4-fs: Ignoring removed orlov option
[  171.380582][ T6393] EXT4-fs (loop5): stripe (9) is not aligned with cluster size (16), stripe is disabled
[  171.809489][ T6407] loop1: detected capacity change from 0 to 128
[  171.865941][ T6407] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  172.448935][ T6393] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  172.468331][ T6409] vlan2: entered allmulticast mode
[  172.485157][ T6409] netlink: 14 bytes leftover after parsing attributes in process `syz.2.759'.
[  172.507892][ T6409] bond0 (unregistering): left promiscuous mode
[  172.514400][ T6409] bond_slave_0: left promiscuous mode
[  172.519959][ T6409] bond_slave_1: left promiscuous mode
[  172.586993][ T6409] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  172.625426][ T6409] bond_slave_0: left allmulticast mode
[  172.633808][ T6409] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  172.679000][ T6409] bond_slave_1: left allmulticast mode
[  172.702099][ T6409] bond0 (unregistering): Released all slaves
[  172.714015][ T6415] loop1: detected capacity change from 0 to 256
[  172.823387][ T6418] loop4: detected capacity change from 0 to 4096
[  172.872932][ T6415] netlink: 16 bytes leftover after parsing attributes in process `syz.1.760'.
[  172.912448][ T6418] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  172.955055][ T6418] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #15: comm syz.4.762: corrupted inode contents
[  172.991147][ T6418] EXT4-fs error (device loop4): ext4_dirty_inode:6450: inode #15: comm syz.4.762: mark_inode_dirty error
[  173.019782][ T6418] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #15: comm syz.4.762: corrupted inode contents
[  173.031878][ T4987] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  173.072930][ T6418] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #15: comm syz.4.762: mark_inode_dirty error
[  173.091459][ T6418] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #15: comm syz.4.762: corrupted inode contents
[  173.174849][ T6418] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #15: comm syz.4.762: mark_inode_dirty error
[  173.186593][ T6418] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #15: comm syz.4.762: corrupted inode contents
[  173.198968][ T6418] EXT4-fs error (device loop4): ext4_truncate:4587: inode #15: comm syz.4.762: mark_inode_dirty error
[  173.231921][ T6418] EXT4-fs error (device loop4) in ext4_setattr:5983: Corrupt filesystem
[  173.342398][ T6428] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #15: comm syz.4.762: corrupted inode contents
[  173.377725][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  173.470338][ T6430] loop1: detected capacity change from 0 to 512
[  173.556344][ T6430] EXT4-fs (loop1): 1 orphan inode deleted
[  173.577908][ T6430] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  173.590940][   T58] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  173.593902][ T6430] ext4 filesystem being mounted at /146/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  173.600814][   T58] EXT4-fs error (device loop1): ext4_release_dquot:7037: comm kworker/u8:4: Failed to release dquot type 1
[  173.795923][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  173.898905][ T6442] loop1: detected capacity change from 0 to 1024
[  173.945546][ T6442] EXT4-fs: Ignoring removed oldalloc option
[  173.953561][ T6442] EXT4-fs: Ignoring removed bh option
[  173.966463][ T6442] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  174.017896][ T6448] netlink: 4 bytes leftover after parsing attributes in process `syz.5.771'.
[  174.375278][ T6247] ==================================================================
[  174.383511][ T6247] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic
[  174.393031][ T6247] 
[  174.395356][ T6247] write to 0xffff88810c216570 of 22 bytes by task 6454 on cpu 1:
[  174.403084][ T6247]  copy_folio_from_iter_atomic+0x75f/0x1170
[  174.408989][ T6247]  generic_perform_write+0x2c1/0x490
[  174.414299][ T6247]  ext4_buffered_write_iter+0x1ee/0x3c0
[  174.419936][ T6247]  ext4_file_write_iter+0x380/0xfa0
[  174.425306][ T6247]  iter_file_splice_write+0x6c4/0xa80
[  174.430731][ T6247]  direct_splice_actor+0x156/0x2a0
[  174.435849][ T6247]  splice_direct_to_actor+0x311/0x670
[  174.441259][ T6247]  do_splice_direct+0x119/0x1a0
[  174.446119][ T6247]  do_sendfile+0x382/0x650
[  174.450549][ T6247]  __x64_sys_sendfile64+0x105/0x150
[  174.455762][ T6247]  x64_sys_call+0x2dc4/0x3020
[  174.460472][ T6247]  do_syscall_64+0x12c/0x370
[  174.465161][ T6247]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  174.471064][ T6247] 
[  174.473400][ T6247] read to 0xffff88810c216400 of 1024 bytes by task 6247 on cpu 0:
[  174.481221][ T6247]  copy_folio_from_iter_atomic+0x75f/0x1170
[  174.487146][ T6247]  generic_perform_write+0x2c1/0x490
[  174.492566][ T6247]  shmem_file_write_iter+0xc5/0xf0
[  174.497695][ T6247]  lo_rw_aio+0x67d/0x730
[  174.501984][ T6247]  loop_process_work+0x56c/0xac0
[  174.506953][ T6247]  loop_workfn+0x31/0x40
[  174.511215][ T6247]  process_scheduled_works+0x513/0xa10
[  174.516706][ T6247]  worker_thread+0x58a/0x780
[  174.521309][ T6247]  kthread+0x22a/0x280
[  174.525388][ T6247]  ret_from_fork+0x150/0x360
[  174.530009][ T6247]  ret_from_fork_asm+0x1a/0x30
[  174.534792][ T6247] 
[  174.537117][ T6247] Reported by Kernel Concurrency Sanitizer on:
[  174.543266][ T6247] CPU: 0 UID: 0 PID: 6247 Comm: kworker/u8:20 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  174.554392][ T6247] Tainted: [W]=WARN
[  174.558216][ T6247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  174.568361][ T6247] Workqueue: loop1 loop_workfn
[  174.573159][ T6247] ==================================================================
[  174.764988][ T6442] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4222: comm syz.1.768: Allocating blocks 1-17 which overlap fs metadata
[  174.791607][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  175.972376][ T6424] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512