last executing test programs:

6m57.20497557s ago: executing program 1 (id=6):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000680)={[{@errors_continue}, {@delalloc}, {@data_err_ignore}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@data_err_ignore}, {@nojournal_checksum}]}, 0x1, 0x4ef, &(0x7f0000000180)="$eJzs3M9vFdUeAPDv3PbSAo9HH49HAg+1gMbGxBYKCgs3mJi40MSIC1k2bSGVCxjahZBGLonBNYl7w9K408StLo0r/wBcuDAxJETZAG68Zu6dub29P3p7S2nT3s8nGThn5sycc2bmzD0zpzMB9K3R9J8k4l8RcS8i9taiyxOM1v57/HBx+snDxekoVyrn/kiq6R6l8Uy+3u4sMlaIKHyWNG7wbh6Yv37j0lSpNHstytX4xMLljyfmr994de7y1MXZi7NXJs+cOXXyxOnXJ19rLvJw10olrbPSej069OnVwwffPn/n3enB5o011qOjfK0/y12TRr5vO3ipcXvbwJ6GcNJar5sbWhhWbTg7DYtp+18sHT1fm520a0PA9lKpVCpDnReXK81utcwBtqwkNrsEwObIf+jT+998qs0pbkT3Y9M9OFu7AXr0cLFyM2L6cb3+g1HI0hSb7m9TK/SZejIaER+W//oynWKl5xC/rlOGAEDf++Fs1g1Moqn/V4gDDen+nY2hjETEfyJiX0T8NyL2R8T/IpalXSaJqKyQ//7mGfX8v81GEQr311q31Uj7f29kY1v5lOWbJxkZyGJ7IvIO8+zxbJ+MRXHowlxp9kSH7e/okn9j/y+d0vzzvmBWjvuDTZ3NmamFqbXVttWDWxGHBpvrnwymBy4fxkki4mBEHOphuyMN4blXvjpcjzTdVnSvf1Wl7XDEOoyfVe5GvFw7/uVYdvyXckwaxycLLeOTE8NRmj0+kZ4Fx9vm8dPPt9/rlH/X+n/3W/Mqb53+/tzTVrsuPf67Gs7/yMdvl+o/kkQk9fHa+YjKQG953P7l8+p2R4+1Llvr+b8j+aAaztvXJ1MLC9dOROxI3mmdP7m0bh7P06f1HzvWvv3vy9ZJ98T/IyI9iZ+LiOcjBvKyH4mIoxHRpmp1P7754kedlq3y/H9m0vrPtL3+LTv+S+P1qwzkK6dzBi4dufekw8Ujq//elY//qWpoLOLv6Hj9S5ZdIlZb0qfegQAAALAFFKL6t/+F8Xq4UBgfrz0D2h+7CqWr8wsvRMSVmdo7AiNRLFyYK83mD+RGopjkzz9HGuKTTfGT2XPjLwZ2VuPj01dLM5tdeehzu6ttPmlp/6nfe3zOC2xB2+g9NKBH3dr/gTsbVBBgw/n9h/7V0P47fdmi7C9lYHvy+w/9q137vxlfr/jugmsGbH0VbRn62srtv/v3NoGtazDer4errz37+Cf0Df1/6Eu9vtffW6Ay1H7RcLT5YsDwsynGzjZ5bUog7Vmt4waLEbG6xDvXkkXeBez8hYdCbxscitZFA7HSWkn77zhERLnjWule6VqeiwfW/eTPv4my3qfNN0vttLjKw/20Aff7AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAtvJPAAAA//8tL8+m")
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000580), 0xaad80)
unshare(0x2a020600)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x3, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8)
connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000001, @mcast2, 0x6}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001ac0)=ANY=[], 0x0}, 0x94)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
write(r0, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000080)=[@timestamp, @timestamp, @timestamp, @mss={0x2, 0x10001}], 0x4)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10)
setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @loopback}}, 0x0, 0x0, 0x24, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8)
setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4)
connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {0x0, 0x4101}}}, 0x1c}}, 0x0)
r4 = inotify_init1(0x0)
r5 = inotify_add_watch(r4, &(0x7f0000000200)='.\x00', 0x44000160)
r6 = dup(r4)
inotify_rm_watch(r6, r5)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000002000)=ANY=[@ANYBLOB="14000000000000000a5c000000030a01030000000000000000050000000900010073797a30000000000900030073797a320000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000140000001100010000000000000000000000000a"], 0x84}}, 0x0)
mount_setattr(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000001c0)={0x98, 0x70, 0x40000, {r6}}, 0x20)

6m56.032524713s ago: executing program 1 (id=13):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0ec, 0x0, 0x0, 0x3, 0x6, 0x2008001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x3)
kexec_load(0x0, 0x0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x48, &(0x7f0000000400)=0x3e1c, 0x4)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)={0x2c, r4, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r4, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_TX_USECS={0x8}, @ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0x10000}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x596}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x7fff}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x5}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x8983}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x1}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x1}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4001890}, 0x41)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000002010102ff00000000000000000000090c7fa5e5e266b769ecfce1b7db691121001980e123020020016dce"], 0x20}, 0x1, 0x0, 0x0, 0xa880}, 0x24000840)

6m54.847886516s ago: executing program 1 (id=16):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
recvmmsg(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x12022, 0x0)
sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="100000000114a73a"], 0x5c}}, 0x0)

6m54.192557504s ago: executing program 1 (id=17):
r0 = socket$rds(0x15, 0x5, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCGREP(r1, 0x80084523, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001d00010000000000ffdbdf252d"], 0x1c}}, 0x0)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_SETVESABLANK(r3, 0x541c, &(0x7f0000000540))
bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
personality(0x87bf5ac905ea0f7f)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f00000004c0)={{<r4=>r1, &(0x7f00000000c0)='/dev/input/event#\x00', 0x0, &(0x7f0000000200)={@_ha_fsid={[0x3, 0xf8e0]}, {0x2, 0x40ad, 0x6, 0x9}}, 0xd84, &(0x7f0000000240), &(0x7f0000000280)=0xdc}, {[0x2, 0x9, 0x6, 0x6]}, 0x7, 0xf9, &(0x7f00000003c0)=""/249})
fcntl$setsig(r4, 0xa, 0x29)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x110, r5, 0x0)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r7 = socket(0x2, 0x2, 0x1)
io_setup(0x9, &(0x7f0000001e80)=<r8=>0x0)
io_submit(r8, 0x1, &(0x7f0000001fc0)=[&(0x7f0000001f80)={0x0, 0x0, 0x0, 0x1, 0x8eb9, r7, 0x0}])
r9 = socket$kcm(0x11, 0x2, 0x300)
setsockopt$sock_attach_bpf(r9, 0x1, 0x28, &(0x7f0000000000), 0x4)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0400000004060102000000000000000001000008b72c443275dd4e3ba26e5dbdc262cc94934b94ea4dc685d22fc24a7763bb0af4877f4f7d86341fa843da42758a0af0c1a026d0e4f0057ee32da2c0957640ecff5b221490ff01dba4074795601940e3381f7deae7923d8cbeeed22d5b1139660ffeaafb8979ce0eb35fbdcdbf054e22584f7f02444f662284cddd04ee3671263cf69a666386a627d9c1febe565cbf839fe9cd88f629980341"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20000880)
r11 = dup(r6)
bind$inet(r11, &(0x7f0000001ec0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
write$P9_RWRITE(r5, &(0x7f0000000080)={0xb, 0x77, 0x1, 0x46d}, 0xb)
sendmsg$rds(r0, &(0x7f00000020c0)={&(0x7f0000000640)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000001e40)=[@mask_cswp={0x58, 0x118, 0x9, {{0x7f, 0x3}, 0x0, 0x0, 0x7, 0x4, 0xef, 0x3, 0xc, 0x7}}, @zcopy_cookie={0x13, 0x114, 0xc, 0xf}], 0x70, 0x20008011}, 0x0)

6m53.774765998s ago: executing program 1 (id=20):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xfffff000)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400), 0x68381)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x0, 0x5, 0x0, 'queue1\x00'})
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000380))
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x800)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
r5 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r5, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0204000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0)
setsockopt$sock_attach_bpf(r5, 0x1, 0x23, &(0x7f0000000000), 0x4)
recvmsg(r5, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x7, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES16=r2], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe, 0x0, @perf_bp={0x0, 0x9}, 0x17008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x7}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
r8 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x0)
readv(r8, &(0x7f0000000ec0)=[{&(0x7f0000000700)=""/230, 0xe6}], 0x1)
syz_open_dev$usbfs(&(0x7f0000000240), 0x10, 0x80100)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)

6m53.132017636s ago: executing program 1 (id=24):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000680)={[{@errors_continue}, {@delalloc}, {@data_err_ignore}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@data_err_ignore}, {@nojournal_checksum}]}, 0x1, 0x4ef, &(0x7f0000000180)="$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")
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000580), 0xaad80)
unshare(0x2a020600)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x3, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8)
connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000001, @mcast2, 0x6}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001ac0)=ANY=[], 0x0}, 0x94)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
write(r0, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000080)=[@timestamp, @timestamp, @timestamp, @mss={0x2, 0x10001}], 0x4)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10)
setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @loopback}}, 0x0, 0x0, 0x24, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8)
setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4)
connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {0x0, 0x4101}}}, 0x1c}}, 0x0)
r4 = inotify_init1(0x0)
r5 = inotify_add_watch(r4, &(0x7f0000000200)='.\x00', 0x44000160)
r6 = dup(r4)
inotify_rm_watch(r6, r5)
mount_setattr(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000001c0)={0x98, 0x70, 0x40000, {r6}}, 0x20)

6m37.849773608s ago: executing program 32 (id=24):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000680)={[{@errors_continue}, {@delalloc}, {@data_err_ignore}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@data_err_ignore}, {@nojournal_checksum}]}, 0x1, 0x4ef, &(0x7f0000000180)="$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")
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000580), 0xaad80)
unshare(0x2a020600)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x3, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8)
connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000001, @mcast2, 0x6}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001ac0)=ANY=[], 0x0}, 0x94)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
write(r0, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000080)=[@timestamp, @timestamp, @timestamp, @mss={0x2, 0x10001}], 0x4)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10)
setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @loopback}}, 0x0, 0x0, 0x24, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8)
setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4)
connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {0x0, 0x4101}}}, 0x1c}}, 0x0)
r4 = inotify_init1(0x0)
r5 = inotify_add_watch(r4, &(0x7f0000000200)='.\x00', 0x44000160)
r6 = dup(r4)
inotify_rm_watch(r6, r5)
mount_setattr(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000001c0)={0x98, 0x70, 0x40000, {r6}}, 0x20)

6m5.209178825s ago: executing program 3 (id=558):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000080)=0x2001, 0x4)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0x8c, 0x100040, 0xe, 0x2, 0x2, 0x2, 0x0, 0x0, 0x6, 0x21})
r2 = fsopen(&(0x7f0000000880)='sockfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f00000001c0)={<r4=>0xffffffffffffffff}, 0x0)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}})
setreuid(0x0, 0xee00)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000580)={{0x80}, 'port0\x00', 0x71, 0x100c75, 0x7, 0x4, 0x1ff, 0x3, 0xb597, 0x0, 0x1})
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xa, 0x4, &(0x7f00000008c0)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94)
ppoll(&(0x7f00000002c0)=[{r0, 0x50e}], 0x1, 0x0, 0x0, 0x0)
r6 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r6, {0x5}}, './file0\x00'})

6m5.134274797s ago: executing program 3 (id=560):
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000f3ff000000850000002f0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000100b0000850000000800000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0}, 0x94)

6m4.997203548s ago: executing program 3 (id=562):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7a}}, {@init_itable}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x47)
ioctl$FITRIM(r0, 0x40e8662e, &(0x7f0000000240)={0x4f1, 0xd000040, 0xffffffffffff8000})

6m4.472637824s ago: executing program 3 (id=566):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000011c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5b9, &(0x7f0000000680)="$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")
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x6340, 0x1000, 0x20da, 0x4, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
r2 = gettid()
timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x11, 0x4, @tid=r2}, &(0x7f0000000000)=<r3=>0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x17008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex(&(0x7f0000000240)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x31}, 0x94)
syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file1\x00', 0x0, &(0x7f0000000000)={[{@nobarrier}, {@noinit_itable}, {@i_version}, {@init_itable}]}, 0x1, 0x74f, &(0x7f0000001040)="$eJzs3M9rHOUbAPBnpknTb5t+N4IH8SRUrFC7SVO1JyHiuVDoH1DDZhJCJtmQ3dQmBtp68CAIKoI/etH/wIsieCn9HxTBm4IHQWsaD4KHyGw2id3upqlNOho/H5jM876zM8/7ZIeXHdh3A/jPeqr4k0QMRsSFiKi0+9OIONyKjkRc23jdndWV2trqSi2J9fWLt5PitFbf5rWS9v5YtE6JJyLiVn/EqTfuzdtYWp4Zz/Nsod0ebs7ODzeWlk9Pz45PZVPZ3OjIyNmzL46+8PzIntX69uuf/fLWl698/fG52T9euv3cRBJjrbqjo469tPE/6Y+xjv65/UhWoqTsAQAAsCvF5/xDEdHX+pRaiUOtCAAAADhI1gfWAQAAgAMvibJHAAAAAOyvze8B3FldqW1uj/L7Bz+/HBFD22uL17by97XWEEccif6IOLqW3LUyIdk4DR7KtesRcXOsy/2ftO+/BzSwHXauXLdG+p/nZjH/jHWb/9Kt+Se6zD99m7+d8JA257+1e+a/7fyHesx/F3aZY2Dh5Dc981+PeLKvW/5kK3/SI/+ru8z/+eB33/c6tv5pxMnonv+vuXb4fYjhyek8a//tmuPEF1dP7VT/0V75k53rn99l/T/cGJ3qNZcU+Z89sfP73y1/cU+80x5HGhHvtvdF+72OHM/cGvlop/onetR/v/f/k14XvXp386s3l3/s9VIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoJo2IwUjS6lacptVqxLGIeDyOpnm90Tw1WV+cmyiORQxFfzo5nWcjEVHZaCdF+0wr3m6PdrTPRsRjEfF+5X+tdrVWzyfKLh4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAtxyJiMJK0GhFpRPxWSdNqtexRAQAAAHtuqOwBAAAAAPvO8z8AAAAcfA/y/H99H8cBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHGgXzp8vtvW11ZVa0Z64vLQ4U798eiJrzFRnF2vVWn1hvjpVr0/lWbVWn73f9fJ6ff5czC1eGW5mjeZwY2n50mx9ca55aXp2fCq7lPU/kqoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4UIOtLUmrEZG24jStViOOR8RQ9CeT03k2EhH/j4hvK/0DRftM2YMGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgzzWWlmfG8zxbuDs43j7c5ZBAIDj4QckTEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAApWgsLc+M53m20Ch7JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJQr/SmJiGI7WXl6sPPo4eT3SmsfEa/duPjBlfFmc+FM0f/rVn/zw3b/aBnjBwAAADptPqe3n+PTsscDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8ezSWlmfG8zxb2Meg7BoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/588AAAD//6PjyPE=")
r4 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x181)
ioctl$EXT4_IOC_MOVE_EXT(r5, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x8000200000000000, 0x0, 0x85c, 0x5})
ftruncate(r4, 0x2007ffc)
syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000001f40)=ANY=[@ANYBLOB="000000004c900200290000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000ffffffffffffffff00000000000000000095000600000000000000000000000000000000000000000000000000000000ffffffff"])
r6 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000100)="133a7c64c17cf945cc61fc75d69a954489ae2460f89627549f948724f2da09c635a6ce90c0f6b1d477f5eb4dfcbac142a5892ef75e95c6e19d08abfd27ef5ffc20310094c65e04bc1b449cad4d6b18cd79e724a297a6790628fb56a2a9fc3fb8c30268d65807b91735", 0x69, 0x0)
keyctl$setperm(0x5, r6, 0x1020)

6m3.600319424s ago: executing program 3 (id=580):
openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x0)
syz_usb_disconnect(r0)
perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xb9, 0x1, 0x0, 0x0, 0x0, 0x7fffffffd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_config_ext={0x8, 0x1}, 0x10d0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x101080, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote})
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000080)}, 0x20)
r2 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x1, 0x0, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7)
r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0)
select(0x0, 0x0, 0x0, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'gre0\x00', 0x0})
ppoll(0x0, 0x0, &(0x7f0000000200), 0x0, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000200)=ANY=[@ANYBLOB="aa09000000000000006994c681", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="600200019078000005020000"], 0x0)
getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x1, 0x0, &(0x7f0000000180))
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={<r5=>0xffffffffffffffff, 0x3, 0x5, 0x6})
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x8, 0x0, 0x100200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9, 0x1000}, 0x12881, 0x0, 0x0, 0x9, 0x0, 0x2}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)

6m2.797075413s ago: executing program 3 (id=587):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x3fff, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0xfff1, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0xdc}, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0)

6m2.770563043s ago: executing program 33 (id=587):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x3fff, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0xfff1, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0xdc}, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0)

5m33.089870767s ago: executing program 2 (id=886):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$kcm(0x11, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xb, 0x8}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xd, 0xa}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x810}, 0x14)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r7)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4)

5m32.172336018s ago: executing program 2 (id=892):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10)
bind$tipc(r0, 0x0, 0x0) (fail_nth: 4)

5m31.868557921s ago: executing program 2 (id=896):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180200008010000000000000040000008500fff22e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)

5m31.823898192s ago: executing program 2 (id=899):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCMIWAIT(r0, 0x545c, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x4, @perf_config_ext={0x8, 0x830d}, 0x102302, 0x3, 0xfefffffa, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000e, 0x6c2f2, 0xffffffffffffffff, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
dup2(r1, r1)
mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x2, 0x0, 0xff, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffbffffc, 0x4, @perf_config_ext={0x8, 0x8308}, 0x100041, 0x1, 0xfffffffe, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x41)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5664}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0xb}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x9, 0xfe04}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0)

5m31.622258644s ago: executing program 2 (id=904):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c1300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000048aa008085000000700000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000540)={r0}, 0xc)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20)
connect$l2tp6(r1, &(0x7f0000000f40)={0xa, 0x0, 0x2, @remote, 0x9}, 0x20)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000100)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
connect$l2tp6(r1, &(0x7f0000000040)={0xa, 0x0, 0x5, @local, 0x2}, 0x20)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb3b0000ce220000000004000000e3"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_adj\x00')
recvmsg$unix(r3, &(0x7f0000000440)={&(0x7f0000000080)=@abs, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/76, 0x4c}], 0x1, &(0x7f00000006c0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [<r4=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r5=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x188}, 0x20)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5d30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xac}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000300)={{0x1, 0x1, 0x18, r5, {0xfffffff5, 0xf}}, './file0\x00'})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48)

5m30.756618914s ago: executing program 2 (id=908):
epoll_create1(0x80000) (async)
r0 = socket$unix(0x1, 0x5, 0x0) (async)
r1 = socket(0x2000000000000021, 0x2, 0x10000000000002)
r2 = socket$kcm(0x21, 0x0, 0x2)
sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x18}, 0x0)
connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x400}}, 0x24) (async)
sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, '$'}], 0x18, 0xe000}, 0x5}], 0x1, 0x0)
pipe(&(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}) (async)
pipe(&(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), 0xffffffffffffffff)
accept4$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14, 0x80000) (async)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r7, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000240)={0x30, r8, 0x1, 0x70bd29, 0x2, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x30}}, 0x40) (async)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r6])
tee(r5, r4, 0x2000200000000, 0x3) (async)
r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
close_range(r9, 0xffffffffffffffff, 0x200000000000000) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(r10, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000000010000000080008000000000008000900000d00001800018014"], 0x3c}}, 0x0)
close(r0) (async)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) (async)
r12 = io_uring_setup(0x6001, &(0x7f0000000280)={0x0, 0x100361c, 0x2, 0x2, 0x1bf, 0x0, r6})
close_range(r12, r12, 0x0) (async)
pselect6(0x40, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x0, &(0x7f0000000240)={0x1f, 0x100000001, 0x715, 0x8000000000000000, 0x2, 0x80000000000004, 0x7fd, 0x20000}, 0x0, 0x0)
unshare(0x22020600) (async)
r13 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async)
clock_gettime(0xfffffffe, &(0x7f00000000c0))
sendfile(r13, r13, 0x0, 0x2)

5m28.36967308s ago: executing program 0 (id=938):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x8, 0x11000, 0x0, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r1, @ANYBLOB="fffe0000000000001c0012800b00010067656e65766500000c0002"], 0x44}, 0x1, 0x2}, 0x40000)

5m28.242301842s ago: executing program 0 (id=942):
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', <r1=>0x0})
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf25e000000100000000008dffffff000000ff02000000000000000000000000000100040b6e4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r1], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014)

5m28.129637803s ago: executing program 0 (id=944):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="70000000100001002abd7000dd86000000000000", @ANYRES32=0x0, @ANYBLOB="ad21000000000000140003006e657464657673696d30000000000000080004"], 0x70}, 0x1, 0x0, 0x0, 0x4048000}, 0x800)

5m28.129309363s ago: executing program 0 (id=945):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c00000004000000010000053b3a4b000a00000003b8f1c50800000000000000000000010500000000000001000000000000000b02000000006100302e610061610061"], 0x0, 0xff1e}, 0xfffffffffffffe6e)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x204410, &(0x7f00000000c0)={[{@barrier}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xa}}, {@grpid}]}, 0xfe, 0x4a1, &(0x7f00000001c0)="$eJzs3M1vVFUbAPDn3mnLN+3Li6h8SBWNjR8tLags3Gh0p4mJLnBjUttCKgM1tCRCiFZjcGlI3BvdGKJ/gSvdGHVl4lb3hoQoMQFdmDF35t4yU2ZKW6YdcH6/5JZz5p7pOc+ce+499x6mAXStwexHErE1In6JiP5atrHAYO2f61fPT/x19fxEEpXKq78n1XLXrp6fKIoW79uSZ4bSiPTDJK+k0ezZcyfGy+Wp03l+ZO7k2yOzZ889OX1y/PjU8alTY0eOHD40+szTY0+1Jc4srmu7353Zm/S8fvHliaMX3/zhqzQidu2r7a+P47akWxaSg1ngf1SqFhd7pC2V3Tm21aWTng42hBUpRUTWXb3V8d8fpbjRef3x4gcdbRywprJr04bWu+crwH9YEp1uAdAZxYU+u/8ttnWaetwRrjxXuwHK4r6eb7U9PZHmZXrXsP77IuLo/N+fZlvk/fDP1jWsEADoet9k858nms3/0thVV257voYyEBH/i4gdEfH/iNgZEfdEVMvem89nVqK2NFRayN88/0wvrzq4Zcjmf8/ma1uN879i9hcDpTy3rRp/b3Jsujx1MP9MhqJ3Q5YfXaKOb1/4+eNW+wbr5n/ZltVfzAXzdlzuWfSAbnJ8brxdk9Ir70fs7mkWf7KwEpBExP0RsXtlv3p7kZh+7NLeVoVuHf8S2rDOVPks4tFa/8/HovgLydLrkyMbozx1cKQ4Km72408XXmle+8bbi78Nsv7f3Hj8LyrR/2dSv147u/I6Lvz6Uct7ytUe/33Ja9Ux2Ze/9s743Nzp0Yi+5KVqvuH1sRvvLfJF+Sz+oQPNx/+O/D1Z/HsiIjuI90XEAxGxP2/7gxHxUEQcWCL+759/+K0VxT+9vv0/2fT8t3D8DzT2/8oTpRPffd2q/jz+4mTbov8PV1ND+SvV898ttG5OlKciKpVVH80AAABw98luvLdGkg4vpNN0eLj2f/h3xua0PDM79/ixmTOnJmvfERiI3rR40tWfPw/N7rZHk/n8N9aej47lz4qL56WH8ufGn5Q2VfPDEzPlyQ7HDt1uS4vxn/mt1OnWAWvO97Wgey0e/2mH2gGsP9d/6F7GP3Qv4x+6V934//LMhT3VxHvVn/sXdjRdC1jiL4cAd4dF1/9Ln3eqIcC6M/+H7mX8Q/cy/qEr3c73+juT2JS3/FaF+zrf1NUlvuidLWXx1e1KeiI637DGRKRLlXkjmu8ajIg1aljcER9LuxPJMg715SaOHc+HznIKd/KsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0D7/BgAA//9ajd4t")
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./control\x00', 0xc480, &(0x7f0000000000), 0x1, 0x786, &(0x7f0000000f80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x52)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='.\x00', 0x10000, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @a}})
ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x4, 0x8001, 0x9})
fsopen(0x0, 0x0)
r2 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101})
setsockopt$inet6_group_source_req(r2, 0x29, 0x2d, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private2}}}, 0x108)
socket(0xa, 0x3, 0x3a)
r4 = socket$netlink(0x10, 0x3, 0x12)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syz_tun\x00'})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff)
r6 = syz_clone(0x21100400, &(0x7f0000000040)="7141afaff51c3f7450d1cc9b99def3bb78", 0x11, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000240)="ac4c50505ea0ae7b85962fea4c2c9f0fe358b3a468a31176b01b8c68b95cca5bb8083e11ab3a1629ab6acffa6b9ce74aee79fe655f1c328480f87aa15172999bd59c81f350671ea7d63904dccd5385abebc076c7ea2407c217b7941d1b432d3d25af0631418f8b9b4eafde81ab648b7eea6046c0746d5c80fa5a841f19129fb37be064f3c861881d7ce7b8767cb4c44b9b220004803aa76e952d20f8dffae2cf919f17e6404b8e65fe472b08418ffa5e46b35789f3113a7ece516b63128995e08a2f2e3896228acf6680a074e2fdbb056ceda2469bd4e01bb89a7b7ff1520219839ea3f5f2bf8775b0c3cfbe5e5d4dbdb137a21dfabe")
prlimit64(r6, 0x0, 0x0, &(0x7f0000000200))

5m27.909471166s ago: executing program 0 (id=947):
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
socket$netlink(0x10, 0x3, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101041, 0x15)
syz_emit_ethernet(0x3e, &(0x7f00000003c0)=ANY=[], 0x0)
r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0)
write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d)
socket$key(0xf, 0x3, 0x2)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20004020}, 0x40000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000000180)=@file={0x1}, 0x6e)
listen(r1, 0x1)
r2 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r2, &(0x7f0000000080)=@file={0x1}, 0x6e)

5m27.633385499s ago: executing program 0 (id=949):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="540000301000010428bd70000000400000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e00000020000280080005000300000006001800faff000004001200"], 0x54}}, 0x0)

5m27.633156109s ago: executing program 34 (id=949):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="540000301000010428bd70000000400000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e00000020000280080005000300000006001800faff000004001200"], 0x54}}, 0x0)

5m15.701753193s ago: executing program 35 (id=908):
epoll_create1(0x80000) (async)
r0 = socket$unix(0x1, 0x5, 0x0) (async)
r1 = socket(0x2000000000000021, 0x2, 0x10000000000002)
r2 = socket$kcm(0x21, 0x0, 0x2)
sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x18}, 0x0)
connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x400}}, 0x24) (async)
sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, '$'}], 0x18, 0xe000}, 0x5}], 0x1, 0x0)
pipe(&(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}) (async)
pipe(&(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), 0xffffffffffffffff)
accept4$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14, 0x80000) (async)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r7, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000240)={0x30, r8, 0x1, 0x70bd29, 0x2, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x30}}, 0x40) (async)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r6])
tee(r5, r4, 0x2000200000000, 0x3) (async)
r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
close_range(r9, 0xffffffffffffffff, 0x200000000000000) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(r10, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000000010000000080008000000000008000900000d00001800018014"], 0x3c}}, 0x0)
close(r0) (async)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) (async)
r12 = io_uring_setup(0x6001, &(0x7f0000000280)={0x0, 0x100361c, 0x2, 0x2, 0x1bf, 0x0, r6})
close_range(r12, r12, 0x0) (async)
pselect6(0x40, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x0, &(0x7f0000000240)={0x1f, 0x100000001, 0x715, 0x8000000000000000, 0x2, 0x80000000000004, 0x7fd, 0x20000}, 0x0, 0x0)
unshare(0x22020600) (async)
r13 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async)
clock_gettime(0xfffffffe, &(0x7f00000000c0))
sendfile(r13, r13, 0x0, 0x2)

5m11.704823738s ago: executing program 7 (id=1168):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r0, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4)
setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x80, @loopback={0x12, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c)

5m11.635545719s ago: executing program 7 (id=1172):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000001800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)

5m11.56524278s ago: executing program 7 (id=1174):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0xfe}}]}}]}, 0x48}}, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r4)
socket$rds(0x15, 0x5, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002940)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x4004000)
sendmsg$kcm(r5, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r3, 0x10c}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x1}], 0x1}, 0x4000880)

5m11.254532153s ago: executing program 7 (id=1181):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x21c91c, &(0x7f00000007c0)={[{@dioread_nolock}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@errors_remount}, {@abort}, {@quota}, {@noinit_itable}, {@noauto_da_alloc}, {@usrjquota, 0x32}]}, 0x1, 0x519, &(0x7f00000014c0)="$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")
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
set_mempolicy(0x6005, &(0x7f0000000000)=0xfffffffffffffffd, 0x4)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
io_submit(0x0, 0x1, &(0x7f0000000240)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8}])
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}, 0x10)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0)
setsockopt$packet_int(r0, 0x107, 0xe, 0x0, 0x0)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x8000, &(0x7f0000000100)={0x5, 0x8, 0x100000}, 0x20)

5m9.78292435s ago: executing program 7 (id=1195):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c)
r1 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, 0x0, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x80, @loopback={0x12, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c)

5m9.057301049s ago: executing program 7 (id=1198):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x4000}}, [@tmpl={0x104, 0x5, [{{@in=@local, 0x0, 0x33}, 0x0, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x40}, {{@in6=@remote, 0x0, 0x33}, 0x0, @in6=@dev, 0x0, 0x3}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x6c}, 0x2, @in=@rand_addr=0x64010101, 0x0, 0x4, 0x0, 0xfd, 0x0, 0x2, 0x8}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x1}, 0x0)

5m9.047079908s ago: executing program 36 (id=1198):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x4000}}, [@tmpl={0x104, 0x5, [{{@in=@local, 0x0, 0x33}, 0x0, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x40}, {{@in6=@remote, 0x0, 0x33}, 0x0, @in6=@dev, 0x0, 0x3}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x6c}, 0x2, @in=@rand_addr=0x64010101, 0x0, 0x4, 0x0, 0xfd, 0x0, 0x2, 0x8}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x1}, 0x0)

9.120791657s ago: executing program 9 (id=3295):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
unshare(0x20000400)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="290000001400000000000000", @ANYRES32=r1, @ANYBLOB="7f8c6ba3be17743227e4e41afb2f659e1fc79e1f4896b536b613fbdb1a3a2f75f845b518331502465201898da610df3083aab9c29d7216b774135d57ac7c801ce75acdffc8219c73e2962df1b427fc0d61a0a2adde894463f0f91c99c5190365711654bf34d2b887f4855167b418be146dca3a6cc5e4f1baa07b98d0fa555bcf76b50d5d2752667be7c6", @ANYRES64=0x0], 0x20)
socket$l2tp6(0xa, 0x2, 0x73)
r3 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/time\x00')
ioctl$NS_GET_OWNER_UID(r3, 0xb704, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r2, 0x0, 0xbf, 0x9f, &(0x7f0000000340)="ebf9b5074c79a38788b3b1cc6c3efb70de235258fa93da42571499e2e5bd2d25935d8e7d3d36a0545aa289d96d9e75a63e2497bb504295d7ed4914400533b9aa57cea2051510fc54b6977b5ffad4b43c3f9b202ea2bf90be0c2b29cea43bab5f64ab6b7be66eda09ac240862316edc688d1ef5d62ab38798cc0c21c6a8e45fbf17ad263f757949822b809ce12a144b5e834e04058591eb9cc58f91ffa611b78080045ceefb9f7c0d7357d82c976daec1acdcce800ede4486c13d21f9ea6b3e", &(0x7f00000005c0)=""/159, 0x8, 0x0, 0x14, 0x91, &(0x7f0000000400)="f9c07bb901b497b9120e3d98bdc17029ecca1e62", &(0x7f0000000680)="1fdc9d0e0a73444e70b5b708f8256a021f42d72fd4ccbeafe706f1c349e69db6dafb1d5c5396302ccd7b68d9fac1fc1c9086b7afb7c777e0dae498b0574bce67dccddc4c65727b81e97274ba846107c8a4e4598375463ac90a761a7e4217d4354ecad9b48f3c3f7bf90e4e967a0cd255353ab0d80c2571888b5d299a40c1b9e5b4c4ed54e54864367f0e073dda6495db8b", 0x0, 0x0, 0x5}, 0x50)
r4 = socket$inet6(0xa, 0x2, 0x0)
r5 = socket(0x10, 0x803, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x2e, 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r5)
getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x5)
sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3c000000100037040100"/20, @ANYRES32=r6, @ANYBLOB="83400100012c00001c0012800b0001006772657414aa000000c0471a32cc0ba5632d6e930abc9217b500c06aed0eac58bf912ec134149d4b80bba993a26138988bb88729b8576deaba09dd5e3a1bd2118ba9a00d805ee1c38b00600bf15eec118be03ecc397993ee84a1174aaf87d8a791a5b6b1c78b2461487a0b9bae9678855cf8d77bfc9e3b9ec3da64b4fe9be307ad36026216fcc0799bcefac19eba"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x40850)
sendmmsg$inet(r4, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @multicast1}}}], 0x20}}, {{&(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @local, @local}}}], 0x20}}], 0x5e, 0x4880)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SWAP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c0000000606040200000000000000006459f1d10500010007000000ddf3da54897a7e73ea7ea5175d38707bafa3a538f72c04982d6a98a247c6ea203e1df650bc4c2ff56a61156eb32e89291355fffc57723e31e10283190caa4e1be7bcc36dd95b2291aa613d3920ffc2f6817f3fa37ef278a2079c0ebcaa021158608932f1d746"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000000)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff)
r8 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'sit0\x00', <r10=>0x0})
setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
bind$xdp(r8, &(0x7f0000000100)={0x2c, 0x0, r10}, 0x10)
r11 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r11, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10)

8.525353444s ago: executing program 9 (id=3302):
r0 = socket(0x27, 0x80000, 0x41)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r5 = io_uring_setup(0x185d, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0)
sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
close(r3)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket(0x1f, 0xa, 0x4)
sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001200e12a010a00001d00000000008040141f8f183525e35179b79ea6a104bc5c4262179429eebe5661af9760ea2628885b1f63af662f16c59e70c9262a87f34d6efe937c09"], 0x26}}, 0x0)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYRESHEX=r7, @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x20044081}, 0x0)

5.385241199s ago: executing program 4 (id=3308):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000040aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)

5.378181529s ago: executing program 9 (id=3309):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0x0, 0x1000)
setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000002b80)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="020000000100062200000000530007007bf7c2fa071843854e898620b427", @ANYRES32=0x0, @ANYBLOB="040004000000000010000600000000002000040000000000"], 0x2c, 0x3)
chdir(&(0x7f0000000040)='./file0\x00')
syz_read_part_table(0x5c6, &(0x7f0000000bc0)="$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")
unshare(0x60000600)
link(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/../file0\x00')

5.080418193s ago: executing program 8 (id=3310):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000005c0)=0x9843a64a1bbecde7, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0xa0000008})
epoll_wait(0xffffffffffffffff, &(0x7f0000000080)=[{}], 0x1, 0xffffff90)
close(0xffffffffffffffff)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
syz_pidfd_open(0x0, 0x0)
syslog(0x0, 0x0, 0x0)

3.765248828s ago: executing program 4 (id=3311):
r0 = socket(0x11, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14)
setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={r1, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101}, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0)
getpeername$packet(r0, &(0x7f0000002500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000080)={'tunl0\x00', 0x0, 0x10, 0x80, 0xfd, 0x123, {{0x6, 0x4, 0x0, 0xc, 0x18, 0x67, 0x0, 0x2, 0x29, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @noop]}}}}})
sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000cb041818000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0xe4}, 0x48)

3.135537665s ago: executing program 4 (id=3313):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000300)=0x3, 0x4)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x30da, 0x5, 0xa, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000000206010300000000000000000000000005000400010000000900020073797a31000000000500010007000000050005000a000000140007800800114000000000050015000c00000013000300686173683a6e65742c6966616365"], 0x60}}, 0x44040880)
ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r1, 0x40109441, &(0x7f0000000180)={0x6, 0x4, 0x47ca1859})
creat(&(0x7f0000000040)='./bus\x00', 0x0)
close(r1)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000108000a40fffffffc880000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000005c0003805800008008000340000000024c000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c00014000000000000100001c000180090001006c617374000000000c00028008", @ANYRES8], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x40)
lseek(r5, 0x8, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)
r7 = socket(0xa, 0x1, 0x0)
getsockopt(r7, 0x1, 0x2f, &(0x7f0000001940)=""/10, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000002300)=ANY=[@ANYBLOB="07010b45b901000074030000d800000003000000010000000000000000000000e6809be6035fb7d88b09c8821c8d12774c31c0b9a995203cb7a84da0d0164fd4cf14dfd4b174abbba34e74b200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000055ef9286000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5854a0ae3fde2bb156a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000099df621ea2b7adb2b652bd0cfd6f4e8d"], 0x94c)
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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")
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {}, {0xfff3, 0x1f}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x20000001, 0x3, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x7, 0x7, 0x85b2, 0x200, {{0x5, 0x4, 0x3, 0x0, 0x14, 0x64, 0x0, 0x6a, 0x2f, 0x0, @local, @rand_addr=0x64010102}}}})
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3)
setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x17, &(0x7f0000000140)=@gcm_128={{0x303}, "60000100", "9de66ebc3914c06f0f109088d190e700", "000e3102", "f8dd000000000092"}, 0x28)
setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r2, @ANYRESHEX, @ANYBLOB="d58b33c4b59886544c97c774e1802bf995f93415e6087744c8f9afd7e564146e384b4b898b37b5cf0e085a2c2517066ac07394bbfa8546ab7b09cdf89ffd569f72a40086c1b24f4dbdc56cc84613004607b53ff327f94de1a7abdc05d2a2178634abb3b5219fb6cc9571e52f777963d7d52e9dbe62738136ed74ce6c64512e0394d1a1b2011385a651bdc4256e43e3048ab33415186d1ce7a272732924b5d405d1bbef984f4582bf09556b83cf3aa315803041b6c9f7cb8f526801bc5033e9691ce4cc2a036c4fd44fb8580c12f54c6a103b42568053de11af3594b7c7e216c28c84ddc28f9b"], 0x310)

3.085320525s ago: executing program 8 (id=3314):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0x0, 0x10000, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32, @ANYBLOB="000052000600050001000000", @ANYRES16=r0], 0x2c}}, 0x20008000)

2.973298577s ago: executing program 9 (id=3317):
unshare(0x22020600)
syz_mount_image$vfat(&(0x7f0000000900), &(0x7f0000000100)='./file1\x00', 0x1000000, &(0x7f0000000f40)=ANY=[], 0x25, 0x363, &(0x7f0000000580)="$eJzs3T1sG+UbAPDHvSRO8v+XZECqYDJsSKhqghhgSlQVqSIDFFl8LVg05SM2lWJhKQxxvIAqJhALEkxsHWDsjBgQYmNgpUioBbHQraIRh84+f8U2TQaHVvx+Q/Xoed/n3ufOp94lSt681oyti7Nx6datGzE/X4iZtbNrcbsQy3EikujYi7E+nBufBwDucbfTNP5IO+4+++PFbuTZDwD3r/bz/42T/UTxCMVX/j+NlgCAKTvk1//Pjc1enlpbAMAUjTz/H434sz984Nv8M72fCQAA7l8vvPzKs+sbERdKpfmI2geNcqMcT/fH1y/FW1GNzTgTS7Ef0XlR6LwtZP8+c37j3JlS5uZylLOKRjmi1myUO28K60m7vhgrsRTLeX3aq0+y+pV2fSki9prt9aNWaJRnYzFf/6fF2IzVWIoHR+ojzm+cWy3lByjXuvXNiFbMd08i6/90LMUPr8flqMbFyGr7/e+ulEpn042h+sbVYnseAAAAAAAAAAAAAAAAAAAAAABMw+lSz3Jv/5u01my8f+HghN54sb2/T2c43x+o1dkfKC12d+e5khzcH2h4f55GeSZO/KtnDgAAAAAAAAAAAAAAAAAAAPeO+s5cVKrVze36zntbg0FzIPPOd19+sxDdoZm89O2kXxV5cug43YkDR06it0TaK0+ToTl5kER0J+9Vrl7rdTw4p9g7i5HyLCiODBXynirV6slHfvlsXNVfWbDXziQxclmGg0K+/sBQ7YEsMR8R+5OqJgerd5lzPU3TSeW7n/Yy3bbqUYiYiaO1cfNQk7+98eZDT9RPPdnOfJ1v+vDY40svXv/ki9+2KtVodVqoVue26/vppE8n/yyyTNbr6FrJwP1TyK9zYcydMD5o9TOt7fpOJfnx95ce/uj7A5OT8fdPOph5d/JaXx3MzHWCQsRy9yL8U6uzY27+8cGrd4au2Ng5/+tnFoaGTn2+Vrm2+/Ovh70TBv6TsFEHAAAAAAAAAAAAAAAAAAAci/4v/R6l6qnnp9cRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABy//t//HwhaI5nDBHeaMTpU3NyuT1x84VhPFQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/7C/AwAA//9XBGzc")
socket$unix(0x1, 0x2, 0x0)
r0 = socket$l2tp6(0xa, 0x2, 0x73)
getpeername$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000040)=0x20)
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x94}}, 0x8000)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a00000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c0002800500010000000000440001800c00028005000100000000002c00018014000300ff020000000800000000000000000001140004002001000000000000000000000000000106000340000100000800"], 0xa0}}, 0x0)
setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10)
ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x4)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000084)
sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0)
recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

2.914896867s ago: executing program 8 (id=3318):
lstat(0x0, 0x0)
socket$inet6(0xa, 0x802, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800"/14], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0)
sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000014000103f70039d02436000001"], 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0)
syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)

2.100302866s ago: executing program 6 (id=3319):
r0 = socket(0x27, 0x80000, 0x41)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r5 = io_uring_setup(0x185d, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0)
sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
close(r3)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket(0x1f, 0xa, 0x4)
sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001200e12a010a00001d00000000008040141f8f183525e35179b79ea6a104bc5c4262179429eebe5661af9760ea2628885b1f63af662f16c59e70c9262a87f34d6efe937c09"], 0x26}}, 0x0)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYRESHEX=r7, @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x20044081}, 0x0)

1.971306818s ago: executing program 9 (id=3320):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010200000000000000000100000009"], 0x110}}, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xe8b5c71a5eb6f040, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd7, 0x4, 0x6, 0x0, 0x80000000, 0x4, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x40000004, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x400, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x20009a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x8001, 0xfd, 0x101, 0x4, 0x0, 0xa, 0x1b, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x8, 0x3, 0x6, 0x2, 0xffffff87, 0xcfc, 0xd, 0xf, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0xeb6, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xc6, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000003, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x6, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x7, 0xc4c, 0x45e3, 0x5, 0x7, 0x3, 0x6, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0xf, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x8, 0x8, 0x1, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x10004, 0x10, 0x8, 0x1000009, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x1, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x10000004, 0x0, 0x1, 0xce5fb90f, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x100003, 0x2, 0x204, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x2, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x2de9, 0x9, 0x2, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x5, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0x9, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0x88d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x4, 0x0, 0x80000000, 0xd, 0x2, 0x1, 0x0, 0x20000003, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20080000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x4, 0x0, 0x9, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x1, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x2, 0x2, 0x4, 0x0, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0xd, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x0, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x40, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x5, 0xf, 0x3, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x5, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x1, 0x80000000, 0x9, 0x8001, 0x5, 0x800081, 0x1, 0x2, 0x83fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x8, 0x5, 0x8, 0x4, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x103, 0x10000004, 0x3, 0x6, 0x80000001, 0x0, 0xff, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xffffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x7, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x8, 0x9, 0x80, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x3, 0x9, 0x2, 0x7, 0x4, 0x4, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x7, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0xf, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x8, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x9, 0x2, 0x6, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x2, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xde, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x1, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0xc, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x7, 0x8]})
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
write$binfmt_aout(r5, &(0x7f0000000500)=ANY=[], 0xff2e)

1.917119878s ago: executing program 4 (id=3321):
timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, &(0x7f0000000000))
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
timer_create(0x0, &(0x7f0000000140)={0x0, 0x25, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000180)=<r1=>0x0)
timer_gettime(r1, &(0x7f00000001c0))
quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x100, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}}}, 0x24}}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='-', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845)
io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000700)="0022040000ffffebfffffffeffffff0700000000ff000207835eeb1317b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4efbfb9b4a128f2dbe2837496d00ad7765abaac2ec", 0xa7)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="32000000a51282c6"], 0x8)
r4 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r4, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r4, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpu.stat\x00', 0x275a, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x100000b, 0x200000005c831, 0xffffffffffffffff, 0x0)

1.792444639s ago: executing program 8 (id=3322):
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd04, 0x24dfdbff, {0x0, 0x0, 0x0, r6, {0x4, 0xa}, {}, {0xfff2, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x8}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x0, 0x6}}]}}]}, 0x4c}, 0x1, 0xf2ff, 0x0, 0x8848}, 0x20004804)

1.77117936s ago: executing program 5 (id=3323):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40142, 0x20a)
r1 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001e14010000000000000000000900020073797a30000000fd07004100727865"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x100)
close_range(r0, 0xffffffffffffffff, 0x2)
r2 = socket(0x40000000015, 0x5, 0x0)
setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f00000000c0)=0x1, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x48)
lstat(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180))
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000480), 0x1004094, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="7f7766646e6f15", @ANYRESHEX=r3])

1.489306293s ago: executing program 8 (id=3324):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000005c0)=0x9843a64a1bbecde7, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0xa0000008})
epoll_wait(0xffffffffffffffff, &(0x7f0000000080)=[{}], 0x1, 0xffffff90)
close(0xffffffffffffffff)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
syz_pidfd_open(0x0, 0x0)
syslog(0x0, 0x0, 0x0)

983.006859ms ago: executing program 5 (id=3325):
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async)
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) (async)
r0 = syz_open_procfs(0x0, &(0x7f0000000200)='ns\x00') (async)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390425bd7000eaffffff000003e4", @ANYRES32=0x0, @ANYBLOB="83000c000100000020040000000000000069740014000280080002000a0101020600080021000000"], 0x40}, 0x1, 0x0, 0x0, 0x24008080}, 0x4040)
r2 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc2}, &(0x7f0000000180)={0x0, "a608417c25f77ddd40024c55be6a76c2db6c11269c3abf49880ea9fbaad710144f8af72375874d87b85b94f988a0286e6d752aa47cbfbc07300a34d9839c9bc3", 0x38}, 0x48, 0xfffffffffffffffa)
add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, r2) (async)
getdents64(r0, &(0x7f0000001f80)=""/4094, 0xffe)

950.117879ms ago: executing program 5 (id=3326):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unshare(0x2040400)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c00000004060108000000000000000003001c060500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4040000)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000040), 0x2)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="740100001a00130700000000fcdb9f2520010000000000000000000000000001200100000000f0000000000000000000000000004e2380010a0000001d000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000000fe3200000000000000000000000000ffffac1414bb00000000000000000000000000000000ffffffffffffffff050000000000000000000000000000000000000000000000030000000000000043050000000000000a00000000000000ffffffffffffff7f000000000000000000000000000000000000000000000000c301000028bd70000035000002000400500000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000060"], 0x174}, 0x1, 0x0, 0x0, 0x880}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x80}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90)

869.44939ms ago: executing program 5 (id=3327):
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xce, 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x2, 0x100)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x7}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open$cgroup(&(0x7f0000000300)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x600, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffff, 0x2, @perf_config_ext={0x4, 0x4}, 0x0, 0x0, 0x0, 0xa, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

819.468721ms ago: executing program 6 (id=3328):
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="0a000000090000000800000002"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="1802000000000000000000000000200018130000", @ANYRES32=r0, @ANYBLOB="0000000000000000850000001f00000095"], &(0x7f0000000000)='GPL\x00'}, 0x94)

773.854942ms ago: executing program 6 (id=3329):
perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x2c, 0x1, 0x0, 0x4, 0x0, 0x8000000b, 0x20, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x3ff, 0x4}, 0x8040, 0x6, 0x0, 0x1, 0x6e, 0x20005, 0xd1e, 0x0, 0x0, 0x0, 0xa746}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$kcm(0x11, 0x200000000000002, 0x300)
sendmsg(0xffffffffffffffff, 0x0, 0x40084)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, 0x0, 0x20008804)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x101, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="d800000018008111e00212ba0d8105040a610200ff0f040b067c55a1bc000900b800069903000000b0000500fe808178a8001500030001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x0)

693.215892ms ago: executing program 6 (id=3330):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x884}, 0x2)
close(r1)
socket(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f00000000c0)=@xdp={0x2c, 0x0, r3, 0x42}, 0x80, &(0x7f0000003480)=[{&(0x7f00000002c0)="27030200dc0f14000e00203c122400004000ff8800000066c1532cc10200000003125ce882cbf490d90812533f00", 0x2e}, {&(0x7f0000000440)="416ef7f26ba0abe1768a3668bc9f735be9c09dbff33bda13c2a31a7e862712f05cc06c0aaa34f09f953413c3682991ddb5fbdad418de7b64a381d5be6415dbe77a86ab0d0e22762d8df88652f208f890bf32268a27c3950e5ba0aa15f3f64ec75ea7afc80ea1a45f1b10d68e97be201ce25f8fe24cfd1ae1c719abc4657d6eab3816318dea72d5ee2cd484dd16100523c1dbb84cb7b4fb3c265a5528e9443c9c3d3cc048300f6e4b", 0xa8}], 0x2}, 0x4005)

438.722045ms ago: executing program 4 (id=3331):
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x2c180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
acct(0x0)
r1 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000200))
connect$pppl2tp(r0, 0x0, 0x0)
sendmmsg$inet(r0, 0x0, 0x0, 0x8040)
faccessat(0xffffffffffffffff, &(0x7f0000000b00)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x5)
socket$nl_xfrm(0x10, 0x3, 0x6)
openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000030000000c00010000217fffff0080030c00010000217fff000000000c003403040000000000000008000500", @ANYRES32=r3], 0x80}, 0x1, 0x0, 0x0, 0x20044081}, 0x0)

368.884306ms ago: executing program 5 (id=3332):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = epoll_create1(0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f00000000c0))
shutdown(r3, 0x1)
socket(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x78190, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e9, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
socket$unix(0x1, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
r6 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SG_SET_DEBUG(r6, 0x227e, &(0x7f0000000300)=0x1)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x20, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r5], 0x24}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c)

368.349586ms ago: executing program 8 (id=3333):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendto$inet6(r3, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x10001, &(0x7f0000000180)=ANY=[@ANYBLOB="7472b9f0961bb1845505f7c2", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',\x00'])
r4 = socket$kcm(0x10, 0x5, 0x4)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r5, 0x0, 0x48a, &(0x7f0000001100)={0x0, 0x0, 0x1}, 0xc)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec08000000006ff1f000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000500)=<r8=>0x0, &(0x7f0000000540)=0x4)
setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000580)={0x1, 0x4, 0x2, 0xd, @vifc_lcl_ifindex=r8, @private=0xa010100}, 0x10)
setsockopt$inet6_int(r7, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f00000003c0)=[@in6={0xa, 0x4e23, 0x2, @loopback={0xfec0ffffffffffff}, 0x80000000}], 0x1c)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000854}, 0xc0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
r10 = getpid()
r11 = syz_pidfd_open(r10, 0x0)
process_madvise(r11, &(0x7f0000000080)=[{&(0x7f0000000000)='&', 0x1}], 0x1, 0x8, 0x0)
sendmsg$NFT_MSG_GETSETELEM(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, '\r'}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000)
r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r2)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r12, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x459}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000094}, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x80552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0xd}, 0x102260, 0x810000, 0x0, 0x1, 0x5, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x2000000020000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r13 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341)
ioctl$USBDEVFS_IOCTL(r13, 0xc0105512, &(0x7f0000000200))

306.785346ms ago: executing program 6 (id=3334):
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x4, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a50000000060a010400000000000000000a0000010900010073797a310000000024000480200001800700010063740000140002800800014000000001080002400000000a0900020073797a320024000014000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)

270.403767ms ago: executing program 4 (id=3335):
lstat(0x0, 0x0)
socket$inet6(0xa, 0x802, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800"/14], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0)
sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000014000103f70039d02436000001"], 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0)
syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)

29.13558ms ago: executing program 5 (id=3336):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0)
mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0)
mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil)
munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000)
mincore(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
lseek(0xffffffffffffffff, 0xffffffffffffffff, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x4, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_CLASS={0x6, 0x1, 0x8001}}}}]}, 0x38}}, 0x0)

28.5904ms ago: executing program 6 (id=3337):
perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x2c, 0x1, 0x0, 0x4, 0x0, 0x8000000b, 0x20, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x3ff, 0x4}, 0x8040, 0x6, 0x0, 0x1, 0x6e, 0x20005, 0xd1e, 0x0, 0x0, 0x0, 0xa746}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$kcm(0x11, 0x200000000000002, 0x300)
sendmsg(0xffffffffffffffff, 0x0, 0x40084)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, 0x0, 0x20008804)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x101, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="d800000018008111e00212ba0d8105040a610200ff0f040b067c55a1bc000900b800069903000000b0000500fe808178a8001500030001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x0)

0s ago: executing program 9 (id=3338):
r0 = socket(0x27, 0x80000, 0x41)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r5 = io_uring_setup(0x185d, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0)
sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
close(r3)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket(0x1f, 0xa, 0x4)
sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001200e12a010a00001d00000000008040141f8f183525e35179b79ea6a104bc5c4262179429eebe5661af9760ea2628885b1f63af662f16c59e70c9262a87f34d6efe937c09"], 0x26}}, 0x0)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYRESHEX=r7, @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x20044081}, 0x0)

kernel console output (not intermixed with test programs):

]  do_new_mount+0x24e/0x8d0
[  382.226659][T13225]  ? security_capable+0x7b/0x90
[  382.226702][T13225]  path_mount+0x4d0/0xbc0
[  382.226738][T13225]  __se_sys_mount+0x28c/0x2e0
[  382.226807][T13225]  __x64_sys_mount+0x67/0x80
[  382.226839][T13225]  x64_sys_call+0x2d61/0x3020
[  382.226868][T13225]  do_syscall_64+0x12c/0x3b0
[  382.226941][T13225]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  382.227048][T13225] RIP: 0033:0x7fd2f89acdd9
[  382.227067][T13225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  382.227124][T13225] RSP: 002b:00007fd2f73ff028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  382.227149][T13225] RAX: ffffffffffffffda RBX: 00007fd2f8c25fa0 RCX: 00007fd2f89acdd9
[  382.227167][T13225] RDX: 0000200000000480 RSI: 0000200000000080 RDI: 0000000000000000
[  382.227195][T13225] RBP: 00007fd2f73ff090 R08: 0000200000000100 R09: 0000000000000000
[  382.227210][T13225] R10: 0000000001004094 R11: 0000000000000246 R12: 0000000000000002
[  382.227224][T13225] R13: 00007fd2f8c26038 R14: 00007fd2f8c25fa0 R15: 00007ffc3a534bd8
[  382.227246][T13225]  </TASK>
[  382.507477][T13233] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2826'.
[  382.552678][T13228] macsec1: entered promiscuous mode
[  382.607601][T13246] can0: slcan on ttyS3.
[  382.677370][T13251] syzkaller0: entered promiscuous mode
[  382.685863][T13251] syzkaller0: entered allmulticast mode
[  383.084814][T13282] netlink: 'syz.6.2836': attribute type 4 has an invalid length.
[  383.143957][T13283] netlink: 'syz.6.2836': attribute type 4 has an invalid length.
[  383.567787][   T28] kauditd_printk_skb: 119 callbacks suppressed
[  383.567816][   T28] audit: type=1400 audit(2000000092.131:1863): avc:  denied  { write } for  pid=13301 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  383.703923][T13245] can0 (unregistered): slcan off ttyS3.
[  383.726231][T13241] lo speed is unknown, defaulting to 1000
[  383.768151][T13241] xfrm0 speed is unknown, defaulting to 1000
[  383.942596][T13310] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2843'.
[  384.011056][   T28] audit: type=1400 audit(2000000092.537:1864): avc:  denied  { bind } for  pid=13313 comm="syz.9.2844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  384.060534][T13316] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  384.102139][T13319] FAULT_INJECTION: forcing a failure.
[  384.102139][T13319] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  384.119616][   T28] audit: type=1400 audit(2000000092.556:1865): avc:  denied  { block_suspend } for  pid=13315 comm="syz.5.2845" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  384.198969][T13319] CPU: 0 UID: 0 PID: 13319 Comm: syz.9.2846 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  384.199052][T13319] Tainted: [W]=WARN
[  384.199061][T13319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  384.199075][T13319] Call Trace:
[  384.199083][T13319]  <TASK>
[  384.199091][T13319]  __dump_stack+0x1d/0x30
[  384.199175][T13319]  dump_stack_lvl+0x95/0xd0
[  384.199198][T13319]  dump_stack+0x15/0x1b
[  384.199222][T13319]  should_fail_ex+0x263/0x280
[  384.199264][T13319]  should_fail+0xb/0x20
[  384.199294][T13319]  should_fail_usercopy+0x1a/0x20
[  384.199330][T13319]  _copy_to_user+0x20/0xa0
[  384.199374][T13319]  simple_read_from_buffer+0xb5/0x130
[  384.199430][T13319]  proc_fail_nth_read+0x10e/0x150
[  384.199466][T13319]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  384.199502][T13319]  vfs_read+0x1ab/0x7f0
[  384.199579][T13319]  ? __rcu_read_unlock+0x4e/0x70
[  384.199601][T13319]  ? __fget_files+0x184/0x1c0
[  384.199648][T13319]  ? mutex_lock+0x57/0x90
[  384.199801][T13319]  ksys_read+0xdc/0x1a0
[  384.199837][T13319]  __x64_sys_read+0x40/0x50
[  384.199867][T13319]  x64_sys_call+0x2886/0x3020
[  384.199897][T13319]  do_syscall_64+0x12c/0x3b0
[  384.199983][T13319]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  384.200009][T13319] RIP: 0033:0x7fd2d991d60e
[  384.200030][T13319] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  384.200091][T13319] RSP: 002b:00007fd2d83aefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  384.200113][T13319] RAX: ffffffffffffffda RBX: 00007fd2d83af6c0 RCX: 00007fd2d991d60e
[  384.200128][T13319] RDX: 000000000000000f RSI: 00007fd2d83af0a0 RDI: 0000000000000005
[  384.200144][T13319] RBP: 00007fd2d83af090 R08: 0000000000000000 R09: 0000000000000000
[  384.200224][T13319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  384.200238][T13319] R13: 00007fd2d9bd6038 R14: 00007fd2d9bd5fa0 R15: 00007ffce2853f48
[  384.200259][T13319]  </TASK>
[  384.456237][T13322] syzkaller0: entered promiscuous mode
[  384.488864][T13322] syzkaller0: entered allmulticast mode
[  384.496259][T13333] loop9: detected capacity change from 0 to 512
[  384.554923][T13333] EXT4-fs error (device loop9): ext4_orphan_get:1397: inode #15: comm syz.9.2849: iget: bad i_size value: 38620345925642
[  384.579957][T13333] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  384.580287][T13333] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.2849: couldn't read orphan inode 15 (err -117)
[  384.589965][    C0] EXT4-fs (loop9): error count since last fsck: 1
[  384.589984][    C0] EXT4-fs (loop9): initial error at time 2000000093: ext4_orphan_get:1397: inode 15
[  384.590019][    C0] EXT4-fs (loop9): last error at time 2000000093: ext4_orphan_get:1397: inode 15
[  384.661561][T13333] loop9: lost filesystem error report for type 5 error -117
[  384.674013][T13333] EXT4-fs (loop9): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback.
[  384.700484][T13241] bridge0: port 1(bridge_slave_0) entered blocking state
[  384.708103][T13241] bridge0: port 1(bridge_slave_0) entered disabled state
[  384.715968][T13241] bridge_slave_0: entered allmulticast mode
[  384.727723][T13241] bridge_slave_0: entered promiscuous mode
[  384.738388][T13241] bridge0: port 2(bridge_slave_1) entered blocking state
[  384.771252][T13241] bridge0: port 2(bridge_slave_1) entered disabled state
[  384.780204][T13241] bridge_slave_1: entered allmulticast mode
[  384.788602][T13241] bridge_slave_1: entered promiscuous mode
[  384.811153][T13241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  384.827597][T13241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  384.850542][T13241] team0: Port device team_slave_0 added
[  384.858548][   T28] audit: type=1400 audit(2000000093.321:1866): avc:  denied  { write } for  pid=13332 comm="syz.9.2849" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  384.864552][T13241] team0: Port device team_slave_1 added
[  384.901096][T13341] syzkaller0: entered promiscuous mode
[  384.906782][T13341] syzkaller0: entered allmulticast mode
[  384.919008][ T7947] EXT4-fs (loop9): unmounting filesystem 00000000-0000-00a1-0000-000000000000.
[  384.928147][T13241] batman_adv: batadv0: Adding interface: batadv_slave_0
[  384.936197][T13241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  384.968453][T13241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  384.985584][T13241] batman_adv: batadv0: Adding interface: batadv_slave_1
[  384.995958][T13241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  385.276982][   T28] audit: type=1400 audit(2000000093.635:1867): avc:  denied  { create } for  pid=13350 comm="syz.9.2852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  385.333548][T13241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  385.470333][   T28] audit: type=1400 audit(2000000093.663:1868): avc:  denied  { ioctl } for  pid=13350 comm="syz.9.2852" path="socket:[38446]" dev="sockfs" ino=38446 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  385.537919][   T28] audit: type=1400 audit(2000000093.783:1869): avc:  denied  { write } for  pid=13350 comm="syz.9.2852" name="vsock" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  385.549940][T13241] hsr_slave_0: entered promiscuous mode
[  385.562485][   T28] audit: type=1400 audit(2000000093.792:1870): avc:  denied  { open } for  pid=13350 comm="syz.9.2852" path="/dev/vsock" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  385.594267][   T28] audit: type=1400 audit(2000000093.875:1871): avc:  denied  { watch watch_reads } for  pid=13355 comm="syz.5.2854" path="/563/file0" dev="tmpfs" ino=2961 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  385.619222][   T28] audit: type=1400 audit(2000000094.004:1872): avc:  denied  { unlink } for  pid=3972 comm="syz-executor" name="bus" dev="tmpfs" ino=2963 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  385.647297][T13241] hsr_slave_1: entered promiscuous mode
[  385.655870][T13241] debugfs: 'hsr0' already exists in 'hsr'
[  385.662504][T13241] Cannot create hsr debugfs directory
[  385.837655][T13241] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  385.839326][T13367] loop8: detected capacity change from 0 to 1024
[  385.857502][T13369] loop9: detected capacity change from 0 to 512
[  385.865696][T13369] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem
[  385.876076][T13369] EXT4-fs (loop9): orphan cleanup on readonly fs
[  385.883736][T13369] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2
[  385.892345][T13369] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -2
[  385.905302][T13369] EXT4-fs (loop9): 1 truncate cleaned up
[  385.912018][T13369] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  385.921552][T13364] netlink: 'syz.5.2856': attribute type 8 has an invalid length.
[  385.926812][T13369] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  385.941163][T13241] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  385.944100][T13364] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2856'.
[  385.951417][T13367] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  385.969606][T13367] System zones: 0-1, 3-36
[  385.975408][T13241] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  385.984657][T13367] EXT4-fs error (device loop8): ext4_orphan_get:1423: comm syz.8.2857: bad orphan inode 134217728
[  385.986784][T13241] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  386.007516][T13367] loop8: lost filesystem error report for type 5 error -117
[  386.010011][T13367] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  386.068515][T13364] erspan0: entered promiscuous mode
[  386.075906][T13364] gretap0: entered promiscuous mode
[  386.108480][T13364] erspan0: left promiscuous mode
[  386.116280][T13364] gretap0: left promiscuous mode
[  386.124381][T13241] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  386.133596][T13241] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  386.142857][T13241] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  386.152627][T13241] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  386.195508][T13241] 8021q: adding VLAN 0 to HW filter on device bond0
[  386.209182][T13241] 8021q: adding VLAN 0 to HW filter on device team0
[  386.228039][ T3936] bridge0: port 1(bridge_slave_0) entered blocking state
[  386.236456][ T3936] bridge0: port 1(bridge_slave_0) entered forwarding state
[  386.276723][ T7633] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  386.277980][T13241] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  386.300399][T13241] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  386.314674][ T3936] bridge0: port 2(bridge_slave_1) entered blocking state
[  386.322581][ T3936] bridge0: port 2(bridge_slave_1) entered forwarding state
[  386.356522][T13387] loop8: detected capacity change from 0 to 256
[  386.395854][T13387] FAT-fs (loop8): Directory bread(block 64) failed
[  386.402707][T13364] loop5: detected capacity change from 0 to 2048
[  386.403370][T13387] FAT-fs (loop8): Directory bread(block 65) failed
[  386.424781][T13387] FAT-fs (loop8): Directory bread(block 66) failed
[  386.432426][T13387] FAT-fs (loop8): Directory bread(block 67) failed
[  386.440517][T13387] FAT-fs (loop8): Directory bread(block 68) failed
[  386.448613][T13387] FAT-fs (loop8): Directory bread(block 69) failed
[  386.461363][T13387] FAT-fs (loop8): Directory bread(block 70) failed
[  386.468390][T13387] FAT-fs (loop8): Directory bread(block 71) failed
[  386.495093][T13387] FAT-fs (loop8): Directory bread(block 72) failed
[  386.499819][T13241] 8021q: adding VLAN 0 to HW filter on device batadv0
[  386.504498][T13387] FAT-fs (loop8): Directory bread(block 73) failed
[  386.523261][T13364] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  386.536716][T13364] ext4 filesystem being mounted at /564/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  386.592092][T13364] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2856: bg 0: block 345: padding at end of block bitmap is not set
[  386.628326][T13364] EXT4-fs (loop5): Remounting filesystem read-only
[  386.683181][T13419] syzkaller0: entered promiscuous mode
[  386.694057][T13419] syzkaller0: entered allmulticast mode
[  386.727245][T13241] veth0_vlan: entered promiscuous mode
[  386.737600][T13241] veth1_vlan: entered promiscuous mode
[  386.758553][T13241] veth0_macvtap: entered promiscuous mode
[  386.768001][T13241] veth1_macvtap: entered promiscuous mode
[  386.780355][T13241] batman_adv: batadv0: Interface activated: batadv_slave_0
[  386.793550][T13241] batman_adv: batadv0: Interface activated: batadv_slave_1
[  386.811767][ T8206] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  386.850052][ T8998] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  386.863704][ T8998] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  386.874026][ T8998] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  386.941094][T13431] loop4: detected capacity change from 0 to 512
[  386.952083][T13429] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2867'.
[  386.962143][T13429] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2867'.
[  387.163274][ T3972] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  387.193490][T13431] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  387.319255][T13437] 9pnet_fd: Insufficient options for proto=fd
[  387.508452][T13442] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2870'.
[  387.532655][T13442] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2870'.
[  387.549618][T13442] geneve0: left promiscuous mode
[  387.560681][T13442] geneve0: left allmulticast mode
[  387.567491][T13241] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  387.585474][T13447] loop5: detected capacity change from 0 to 512
[  387.596536][T13447] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  387.623108][T13447] EXT4-fs (loop5): orphan cleanup on readonly fs
[  387.639407][T13447] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2
[  387.648087][T13447] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2
[  387.704756][T13447] EXT4-fs (loop5): 1 truncate cleaned up
[  387.712953][T13447] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  387.720764][T13456] loop9: detected capacity change from 0 to 512
[  387.727449][T13447] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  387.748622][T13463] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2876'.
[  387.764398][T13456] EXT4-fs: Ignoring removed oldalloc option
[  387.777819][T13456] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  387.833336][T13456] EXT4-fs error (device loop9): __ext4_iget:5481: inode #11: block 1: comm syz.9.2875: invalid block
[  387.847785][T13456] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  387.848082][T13456] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.2875: couldn't read orphan inode 11 (err -117)
[  387.858519][    C0] EXT4-fs (loop9): error count since last fsck: 1
[  387.858542][    C0] EXT4-fs (loop9): initial error at time 2000000096: __ext4_iget:5481: inode 11: block 1
[  387.858581][    C0] EXT4-fs (loop9): last error at time 2000000096: __ext4_iget:5481: inode 11: block 1
[  387.903473][T13456] loop9: lost filesystem error report for type 5 error -117
[  387.904198][T13456] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  387.947997][ T7947] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  388.121122][T13478] loop8: detected capacity change from 0 to 512
[  388.174518][T13478] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  388.242746][T13478] EXT4-fs error (device loop8): ext4_orphan_get:1397: inode #15: comm syz.8.2879: iget: bad i_size value: 38620345925642
[  388.296489][T13478] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  388.396390][    C0] EXT4-fs (loop8): error count since last fsck: 1
[  388.413134][    C0] EXT4-fs (loop8): initial error at time 2000000096: ext4_orphan_get:1397: inode 15
[  388.423946][    C0] EXT4-fs (loop8): last error at time 2000000096: ext4_orphan_get:1397: inode 15
[  389.065785][T13485] loop5: detected capacity change from 0 to 1024
[  389.082660][T13485] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  389.085178][T13474] syzkaller0: entered promiscuous mode
[  389.114108][T13478] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.2879: couldn't read orphan inode 15 (err -117)
[  389.127714][T13478] loop8: lost filesystem error report for type 5 error -117
[  390.142120][T13485] ext4 filesystem being mounted at /566/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  390.161744][T13474] syzkaller0: entered allmulticast mode
[  390.176806][   T28] kauditd_printk_skb: 16 callbacks suppressed
[  390.176823][   T28] audit: type=1400 audit(2000000098.230:1889): avc:  denied  { write } for  pid=13484 comm="syz.5.2883" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  390.290775][   T28] audit: type=1400 audit(2000000098.258:1890): avc:  denied  { read write } for  pid=13484 comm="syz.5.2883" name="file2" dev="loop5" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  390.323977][T13483] loop9: detected capacity change from 0 to 512
[  390.343867][T13478] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  390.750710][T13483] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  390.770131][ T3936] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm kworker/u8:8: bg 0: block 5: invalid block bitmap
[  390.809621][T13483] EXT4-fs error (device loop9): ext4_orphan_get:1397: inode #15: comm syz.9.2880: iget: bad i_size value: 38620345925642
[  390.823225][T13483] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  390.823746][T13483] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.2880: couldn't read orphan inode 15 (err -117)
[  390.846033][T13483] loop9: lost filesystem error report for type 5 error -117
[  390.846886][T13483] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  390.893695][   T28] audit: type=1400 audit(2000000098.258:1891): avc:  denied  { open } for  pid=13484 comm="syz.5.2883" path="/566/file1/file2" dev="loop5" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  390.963172][   T28] audit: type=1400 audit(2000000098.258:1892): avc:  denied  { map } for  pid=13484 comm="syz.5.2883" path="/566/file1/file2" dev="loop5" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  390.971203][ T3936] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  390.993260][   T28] audit: type=1400 audit(2000000098.378:1893): avc:  denied  { write } for  pid=13467 comm="syz.8.2879" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  391.038603][ T3936] EXT4-fs (loop8): This should not happen!! Data will be lost
[  391.038603][ T3936] 
[  391.050670][ T3936] EXT4-fs (loop8): Total free blocks count 0
[  391.057570][ T3936] EXT4-fs (loop8): Free/Dirty block details
[  391.064836][ T3936] EXT4-fs (loop8): free_blocks=0
[  391.070239][ T3936] EXT4-fs (loop8): dirty_blocks=16000
[  391.076351][ T3936] EXT4-fs (loop8): Block reservation details
[  391.083056][ T3936] EXT4-fs (loop8): i_reserved_data_blocks=16000
[  391.100286][   T28] audit: type=1400 audit(2000000099.079:1894): avc:  denied  { create } for  pid=13490 comm="syz.6.2884" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key_socket permissive=1
[  391.125051][   T28] audit: type=1400 audit(2000000099.079:1895): avc:  denied  { create } for  pid=13490 comm="syz.6.2884" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1
[  391.153904][ T7947] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  391.182421][   T28] audit: type=1400 audit(2000000099.079:1896): avc:  denied  { bind } for  pid=13490 comm="syz.6.2884" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1
[  391.218184][   T28] audit: type=1400 audit(2000000099.079:1897): avc:  denied  { listen } for  pid=13490 comm="syz.6.2884" path=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1
[  391.218381][T13485] ip6erspan0: entered allmulticast mode
[  391.265000][   T28] audit: type=1400 audit(2000000099.079:1898): avc:  denied  { connect } for  pid=13490 comm="syz.6.2884" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1
[  391.271233][ T3936] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28
[  391.342222][ T7633] EXT4-fs warning (device loop8): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost
[  391.413496][T13497] loop9: detected capacity change from 0 to 512
[  391.424928][T13497] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem
[  391.437851][ T3972] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  391.451062][T13497] EXT4-fs (loop9): orphan cleanup on readonly fs
[  391.499936][T13497] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2
[  391.529229][T13497] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -2
[  391.576759][T13497] EXT4-fs (loop9): 1 truncate cleaned up
[  391.872196][T13497] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  391.966519][T13497] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  392.049654][T13510] vhci_hcd vhci_hcd.2: default hub control req: 400a v0000 i0002 l0
[  392.221687][T13514] loop6: detected capacity change from 0 to 512
[  392.233140][T13514] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[  392.251710][T13514] EXT4-fs (loop6): orphan cleanup on readonly fs
[  392.271894][T13514] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2
[  392.328896][T13514] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2
[  392.340820][T13514] EXT4-fs (loop6): 1 truncate cleaned up
[  392.350351][T13514] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  392.371161][T13514] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  392.422752][T13521] syzkaller0: entered promiscuous mode
[  392.429243][T13521] syzkaller0: entered allmulticast mode
[  394.656079][T13534] syzkaller0: entered promiscuous mode
[  394.663645][T13534] syzkaller0: entered allmulticast mode
[  394.712821][T13542] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2898'.
[  394.793394][T13546] loop5: detected capacity change from 0 to 1024
[  394.805532][T13546] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  394.826774][T13546] System zones: 0-1, 3-36
[  394.836749][T13546] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.2903: bad orphan inode 134217728
[  394.852236][T13546] loop5: lost filesystem error report for type 5 error -117
[  394.852861][T13546] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  394.857743][T13550] syzkaller0: entered promiscuous mode
[  394.881668][T13550] syzkaller0: entered allmulticast mode
[  394.917610][T13555] loop6: detected capacity change from 0 to 512
[  394.927875][T13555] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[  394.941244][T13555] EXT4-fs (loop6): orphan cleanup on readonly fs
[  394.948452][T13555] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2
[  394.958210][T13555] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2
[  394.969478][T13555] EXT4-fs (loop6): 1 truncate cleaned up
[  394.980301][T13555] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  394.998050][T13555] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  395.009159][ T3972] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  395.101198][T13563] loop6: detected capacity change from 0 to 512
[  395.109262][T13563] EXT4-fs: Ignoring removed oldalloc option
[  395.121670][T13563] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  395.134422][T13563] EXT4-fs (loop6): 1 truncate cleaned up
[  395.142729][T13563] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  395.168349][ T5525] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  395.178142][T13566] loop8: detected capacity change from 0 to 8192
[  395.323445][T13575] loop6: detected capacity change from 0 to 512
[  395.331269][T13575] EXT4-fs: Ignoring removed orlov option
[  395.342648][T13575] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  395.355556][T13575] EXT4-fs error (device loop6): ext4_ext_check_inode:521: inode #16: comm syz.6.2914: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 28(0), depth 0(0)
[  395.374093][T13575] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  395.375537][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  395.394718][    C0] EXT4-fs (loop6): initial error at time 2000000103: ext4_ext_check_inode:521: inode 16
[  395.405221][    C0] EXT4-fs (loop6): last error at time 2000000103: ext4_ext_check_inode:521: inode 16
[  395.416018][T13575] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.2914: couldn't read orphan inode 16 (err -117)
[  395.428501][T13575] loop6: lost filesystem error report for type 5 error -117
[  395.428937][T13575] EXT4-fs (loop6): 1 orphan inode deleted
[  395.443593][T13575] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  395.457391][T13575] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  395.487419][ T5525] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  395.554890][T13584] loop8: detected capacity change from 0 to 512
[  395.564854][T13584] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem
[  395.574414][T13584] EXT4-fs (loop8): orphan cleanup on readonly fs
[  395.582028][T13584] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2
[  395.596051][T13584] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -2
[  395.608207][T13584] EXT4-fs (loop8): 1 truncate cleaned up
[  395.615386][T13584] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  395.625870][T13589] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2920'.
[  395.633417][T13584] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  395.651837][T13589] netlink: 108 bytes leftover after parsing attributes in process `syz.6.2920'.
[  395.662999][T13589] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2920'.
[  395.719628][T13597] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2923'.
[  395.741628][T13597] bond3 (unregistering): Released all slaves
[  395.838921][T13609] netlink: 'syz.4.2926': attribute type 21 has an invalid length.
[  395.850684][T13609] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2926'.
[  395.865805][T13609] netlink: 'syz.4.2926': attribute type 5 has an invalid length.
[  395.874360][T13609] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2926'.
[  395.883503][T13609] netlink: 'syz.4.2926': attribute type 21 has an invalid length.
[  395.893613][T13609] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2926'.
[  395.905307][T13609] netlink: 'syz.4.2926': attribute type 5 has an invalid length.
[  395.914935][T13609] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2926'.
[  395.925870][T13609] netlink: 'syz.4.2926': attribute type 21 has an invalid length.
[  395.935028][T13609] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2926'.
[  395.946767][T13609] netlink: 'syz.4.2926': attribute type 5 has an invalid length.
[  395.956579][T13609] netlink: 'syz.4.2926': attribute type 21 has an invalid length.
[  395.966656][T13609] netlink: 'syz.4.2926': attribute type 5 has an invalid length.
[  395.977683][T13609] netlink: 'syz.4.2926': attribute type 21 has an invalid length.
[  395.987839][T13609] netlink: 'syz.4.2926': attribute type 5 has an invalid length.
[  396.104161][T13628] loop5: detected capacity change from 0 to 512
[  396.128737][T13628] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  396.151215][T13632] loop4: detected capacity change from 0 to 512
[  396.152567][T13616] syzkaller0: entered promiscuous mode
[  396.161916][T13628] EXT4-fs (loop5): orphan cleanup on readonly fs
[  396.167223][T13616] syzkaller0: entered allmulticast mode
[  396.186864][T13628] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2
[  396.197255][T13628] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2
[  396.217367][T13628] EXT4-fs (loop5): 1 truncate cleaned up
[  396.227198][T13628] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  396.244973][T13628] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  396.262898][T13632] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  396.286965][T13632] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  396.311629][   T28] kauditd_printk_skb: 12 callbacks suppressed
[  396.311648][   T28] audit: type=1400 audit(2000000103.886:1911): avc:  denied  { write } for  pid=13631 comm="syz.4.2936" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  396.342154][   T28] audit: type=1400 audit(2000000103.896:1912): avc:  denied  { ioctl } for  pid=13633 comm="syz.6.2937" path="socket:[39629]" dev="sockfs" ino=39629 ioctlcmd=0x89f5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  396.379123][   T28] audit: type=1400 audit(2000000103.951:1913): avc:  denied  { bind } for  pid=13631 comm="syz.4.2936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  396.401427][   T28] audit: type=1400 audit(2000000103.951:1914): avc:  denied  { name_bind } for  pid=13631 comm="syz.4.2936" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  396.426341][   T28] audit: type=1400 audit(2000000103.951:1915): avc:  denied  { node_bind } for  pid=13631 comm="syz.4.2936" saddr=127.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[  396.499351][   T28] audit: type=1400 audit(2000000103.960:1916): avc:  denied  { read } for  pid=13631 comm="syz.4.2936" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  396.561553][   T28] audit: type=1400 audit(2000000103.969:1917): avc:  denied  { kexec_image_load } for  pid=13631 comm="syz.4.2936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[  396.594759][T13651] : option downdelay: invalid value (18446744073709547007)
[  396.631617][T13651] : option downdelay: allowed values 0 - 2147483647
[  396.657624][T13651]  (unregistering): Released all slaves
[  396.774671][   T28] audit: type=1400 audit(2000000104.320:1918): avc:  denied  { read } for  pid=13661 comm="syz.5.2945" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  396.826420][   T28] audit: type=1400 audit(2000000104.320:1919): avc:  denied  { open } for  pid=13661 comm="syz.5.2945" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  396.961152][   T28] audit: type=1400 audit(2000000104.458:1920): avc:  denied  { read } for  pid=13667 comm="syz.6.2947" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  397.002244][T13669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  397.041317][T13669] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  397.097067][T13632] lo speed is unknown, defaulting to 1000
[  397.120972][T13670] loop8: detected capacity change from 0 to 512
[  397.151930][T13670] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem
[  397.198001][T13670] EXT4-fs (loop8): orphan cleanup on readonly fs
[  397.234496][T13670] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2
[  397.245908][T13670] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -2
[  397.257881][T13670] EXT4-fs (loop8): 1 truncate cleaned up
[  397.269125][T13670] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  397.314656][T13670] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  397.449197][T13675] syzkaller0: entered promiscuous mode
[  397.455470][T13675] syzkaller0: entered allmulticast mode
[  397.485217][T13677] syzkaller0: entered promiscuous mode
[  397.493568][T13677] syzkaller0: entered allmulticast mode
[  397.525263][T13666] lo speed is unknown, defaulting to 1000
[  397.526077][T13632] xfrm0 speed is unknown, defaulting to 1000
[  397.563452][T13681] loop9: detected capacity change from 0 to 512
[  397.642764][T13666] xfrm0 speed is unknown, defaulting to 1000
[  397.660298][T13681] loop9: detected capacity change from 0 to 512
[  397.720502][   T10] kernel write not supported for file bpf-map (pid: 10 comm: kworker/0:1)
[  397.731945][T13681] loop9: detected capacity change from 0 to 512
[  397.833243][T13681] loop9: detected capacity change from 0 to 512
[  397.881419][T13681] loop9: detected capacity change from 0 to 512
[  397.937212][T13691] syzkaller0: entered promiscuous mode
[  397.943497][T13691] syzkaller0: entered allmulticast mode
[  397.946720][T13681] loop9: detected capacity change from 0 to 512
[  397.996150][T13681] loop9: detected capacity change from 0 to 512
[  398.373602][T13714] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[  398.388980][T13714] EXT4-fs (loop6): orphan cleanup on readonly fs
[  398.404948][T13714] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2
[  398.415655][T13714] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2
[  398.432478][T13714] EXT4-fs (loop6): 1 truncate cleaned up
[  398.465483][T13714] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  398.740988][T13752] EXT4-fs error (device loop9): ext4_orphan_get:1397: inode #15: comm syz.9.2973: iget: bad i_size value: 38620345925642
[  398.774393][T13752] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  398.774644][T13752] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.2973: couldn't read orphan inode 15 (err -117)
[  398.787900][    C0] EXT4-fs (loop9): error count since last fsck: 1
[  398.787927][    C0] EXT4-fs (loop9): initial error at time 2000000106: ext4_orphan_get:1397: inode 15
[  398.787956][    C0] EXT4-fs (loop9): last error at time 2000000106: ext4_orphan_get:1397: inode 15
[  398.840144][T13750] syzkaller0: entered promiscuous mode
[  398.850917][T13750] syzkaller0: entered allmulticast mode
[  398.861425][T13748] lo speed is unknown, defaulting to 1000
[  398.880782][T13752] loop9: lost filesystem error report for type 5 error -117
[  398.882637][T13752] EXT4-fs mount: 1 callbacks suppressed
[  398.882657][T13752] EXT4-fs (loop9): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback.
[  398.922612][T13748] xfrm0 speed is unknown, defaulting to 1000
[  399.067782][ T7947] EXT4-fs (loop9): unmounting filesystem 00000000-0000-00a1-0000-000000000000.
[  399.221794][T13767] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[  399.235082][T13767] EXT4-fs (loop6): orphan cleanup on readonly fs
[  399.243053][T13241] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  399.243231][T13767] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2
[  399.278897][T13770] syzkaller0: entered promiscuous mode
[  399.321194][T13770] syzkaller0: entered allmulticast mode
[  399.382298][ T3384] lo speed is unknown, defaulting to 1000
[  399.391675][ T3384] lo speed is unknown, defaulting to 1000
[  399.398155][ T1038] lo speed is unknown, defaulting to 1000
[  399.516426][T13767] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2
[  399.556213][T13767] EXT4-fs (loop6): 1 truncate cleaned up
[  399.625993][T13767] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  399.686463][T13767] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  401.251323][T13785] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  402.311734][   T28] kauditd_printk_skb: 10 callbacks suppressed
[  402.311757][   T28] audit: type=1400 audit(2000000109.404:1931): avc:  denied  { create } for  pid=13793 comm="syz.6.2986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  402.349149][T13785] EXT4-fs error (device loop9): ext4_orphan_get:1397: inode #15: comm syz.9.2984: iget: bad i_size value: 38620345925642
[  402.364556][T13785] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  402.376756][    C0] EXT4-fs (loop9): error count since last fsck: 1
[  402.393389][    C0] EXT4-fs (loop9): initial error at time 2000000109: ext4_orphan_get:1397: inode 15
[  402.404306][    C0] EXT4-fs (loop9): last error at time 2000000109: ext4_orphan_get:1397: inode 15
[  402.441289][T13785] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.2984: couldn't read orphan inode 15 (err -117)
[  402.488194][T13785] loop9: lost filesystem error report for type 5 error -117
[  402.494861][T13785] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  402.696339][   T28] audit: type=1400 audit(2000000109.616:1932): avc:  denied  { write } for  pid=13782 comm="syz.9.2984" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  402.772063][T13800] set_capacity_and_notify: 10 callbacks suppressed
[  402.772087][T13800] loop6: detected capacity change from 0 to 1024
[  402.791685][ T1038] kernel write not supported for file bpf-map (pid: 1038 comm: kworker/1:2)
[  402.822786][T13800] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  402.860671][T13800] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (12687!=20869)
[  402.883080][T13800] EXT4-fs error (device loop6): ext4_get_journal_inode:5896: inode #32: comm syz.6.2988: iget: special inode unallocated
[  402.884891][  T855] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm kworker/u8:6: bg 0: block 5: invalid block bitmap
[  402.898922][T13800] loop6: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117
[  402.918660][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  402.934860][    C0] EXT4-fs (loop6): initial error at time 2000000109: ext4_get_journal_inode:5896: inode 32
[  402.934900][    C0] EXT4-fs (loop6): last error at time 2000000109: ext4_get_journal_inode:5896: inode 32
[  402.935950][T13800] EXT4-fs (loop6): no journal found
[  402.936007][T13800] EXT4-fs (loop6): can't get journal size
[  402.939519][  T855] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  402.939559][  T855] EXT4-fs (loop9): This should not happen!! Data will be lost
[  402.939559][  T855] 
[  402.939575][  T855] EXT4-fs (loop9): Total free blocks count 0
[  402.939590][  T855] EXT4-fs (loop9): Free/Dirty block details
[  402.939604][  T855] EXT4-fs (loop9): free_blocks=0
[  402.939619][  T855] EXT4-fs (loop9): dirty_blocks=11440
[  402.939633][  T855] EXT4-fs (loop9): Block reservation details
[  402.939648][  T855] EXT4-fs (loop9): i_reserved_data_blocks=11440
[  402.944870][T13800] EXT4-fs error (device loop6): ext4_protect_reserved_inode:160: inode #32: comm syz.6.2988: iget: special inode unallocated
[  402.967952][   T28] audit: type=1400 audit(2000000110.031:1933): avc:  denied  { ioctl } for  pid=13805 comm="syz.4.2991" path="socket:[40300]" dev="sockfs" ino=40300 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  402.973666][T13800] loop6: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117
[  402.982442][  T855] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28
[  403.010178][T13800] EXT4-fs (loop6): failed to initialize system zone (-117)
[  403.098556][ T7947] EXT4-fs warning (device loop9): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost
[  403.101857][T13800] EXT4-fs (loop6): mount failed
[  403.163877][T13800] __nla_validate_parse: 70 callbacks suppressed
[  403.163967][T13800] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2988'.
[  403.176104][T13806] lo speed is unknown, defaulting to 1000
[  403.205426][T13818] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2993'.
[  403.224541][T13818] team0: Port device bridge0 removed
[  403.242769][T13818] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  403.263143][T13806] xfrm0 speed is unknown, defaulting to 1000
[  403.270770][   T28] audit: type=1400 audit(2000000110.299:1934): avc:  denied  { setopt } for  pid=13799 comm="syz.6.2988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  403.388910][T13826] loop9: detected capacity change from 0 to 1024
[  403.477458][T13826] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  403.486895][T13826] System zones: 0-1, 3-36
[  403.492046][T13826] EXT4-fs error (device loop9): ext4_orphan_get:1423: comm syz.9.2990: bad orphan inode 134217728
[  403.504038][T13826] loop9: lost filesystem error report for type 5 error -117
[  403.504665][T13826] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  403.543554][T13831] loop6: detected capacity change from 0 to 512
[  403.551398][T13831] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[  403.574941][T13831] EXT4-fs (loop6): orphan cleanup on readonly fs
[  403.586867][T13831] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2
[  403.612612][ T7947] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  403.627711][T13831] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2
[  403.650285][T13831] EXT4-fs (loop6): 1 truncate cleaned up
[  403.657513][T13831] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  403.682605][T13831] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  403.726424][ T1038] kernel write not supported for file bpf-map (pid: 1038 comm: kworker/1:2)
[  403.920379][T13848] loop6: detected capacity change from 0 to 512
[  403.930531][T13848] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities
[  404.643605][   T28] audit: type=1326 audit(2000000111.582:1935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13838 comm="syz.4.2998" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7fab3f046b57 code=0x0
[  404.683808][T13848] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3002'.
[  404.713223][T13848] loop6: detected capacity change from 0 to 512
[  404.729914][T13848] EXT4-fs error (device loop6): ext4_orphan_get:1397: inode #15: comm syz.6.3002: iget: bad i_size value: 38620345925642
[  404.747965][T13848] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  404.748234][T13848] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.3002: couldn't read orphan inode 15 (err -117)
[  404.759470][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  404.759498][    C0] EXT4-fs (loop6): initial error at time 2000000111: ext4_orphan_get:1397: inode 15
[  404.759533][    C0] EXT4-fs (loop6): last error at time 2000000111: ext4_orphan_get:1397: inode 15
[  404.774736][T13861] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3005'.
[  404.781666][T13848] loop6: lost filesystem error report for type 5 error -117
[  404.820629][T13848] EXT4-fs (loop6): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback.
[  404.883875][   T28] audit: type=1400 audit(2000000111.794:1936): avc:  denied  { name_bind } for  pid=13864 comm="syz.9.3007" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[  405.260270][T13872] syzkaller1: entered allmulticast mode
[  405.328086][T13848] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=46592 sclass=netlink_route_socket pid=13848 comm=syz.6.3002
[  405.392930][   T28] audit: type=1326 audit(2000000112.135:1937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13866 comm="syz.4.3008" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7fab3f046b57 code=0x0
[  405.496142][T13881] IPv6: Can't replace route, no match found
[  405.522834][   T28] audit: type=1400 audit(2000000112.384:1938): avc:  denied  { execute } for  pid=13882 comm="syz.5.3013" dev="tmpfs" ino=1600 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  405.549002][   T28] audit: type=1400 audit(2000000112.384:1939): avc:  denied  { execute_no_trans } for  pid=13882 comm="syz.5.3013" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1600 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  405.603229][T13885] syzkaller0: entered promiscuous mode
[  405.613353][T13885] syzkaller0: entered allmulticast mode
[  405.647352][T13891] validate_nla: 60 callbacks suppressed
[  405.647373][T13891] netlink: 'syz.5.3016': attribute type 16 has an invalid length.
[  405.663007][T13891] netlink: 'syz.5.3016': attribute type 3 has an invalid length.
[  405.671897][T13891] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3016'.
[  405.673423][ T5525] EXT4-fs (loop6): unmounting filesystem 00000000-0000-00a1-0000-000000000000.
[  405.725155][T13893] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3018'.
[  405.956613][T13907] IPv6: Can't replace route, no match found
[  406.075194][   T28] audit: type=1326 audit(2000000112.901:1940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13910 comm="syz.9.3026" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2d995cdd9 code=0x7ffc0000
[  406.147173][T13927] netlink: 168 bytes leftover after parsing attributes in process `syz.6.3030'.
[  406.165044][T13927] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  406.258416][T13935] tmpfs: Bad value for 'mpol'
[  406.315838][T13914] lo speed is unknown, defaulting to 1000
[  406.378138][T13940] IPv6: Can't replace route, no match found
[  406.386379][T13914] xfrm0 speed is unknown, defaulting to 1000
[  406.520159][T13241] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  406.547055][T13241] CPU: 1 UID: 0 PID: 13241 Comm: syz-executor Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  406.547096][T13241] Tainted: [W]=WARN
[  406.547103][T13241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  406.547116][T13241] Call Trace:
[  406.547194][T13241]  <TASK>
[  406.547202][T13241]  __dump_stack+0x1d/0x30
[  406.547228][T13241]  dump_stack_lvl+0x95/0xd0
[  406.547254][T13241]  dump_stack+0x15/0x1b
[  406.547277][T13241]  dump_header+0x80/0x240
[  406.547382][T13241]  oom_kill_process+0x295/0x350
[  406.547456][T13241]  out_of_memory+0x97d/0xb80
[  406.547501][T13241]  try_charge_memcg+0x62f/0xa10
[  406.547604][T13241]  ? radix_tree_lookup+0xfa/0x140
[  406.547634][T13241]  charge_memcg+0x6d/0x120
[  406.547665][T13241]  mem_cgroup_swapin_charge_folio+0xcc/0x150
[  406.547721][T13241]  __swap_cache_prepare_and_add+0x69/0x4a0
[  406.547750][T13241]  ? alloc_pages_mpol+0x217/0x260
[  406.547775][T13241]  swap_cache_alloc_folio+0xa2/0x120
[  406.547879][T13241]  swap_cluster_readahead+0x25f/0x3c0
[  406.547964][T13241]  swapin_readahead+0xde/0x840
[  406.547991][T13241]  ? _raw_spin_unlock_irqrestore+0x9/0x30
[  406.548098][T13241]  ? hrtimer_start_range_ns+0x58c/0x10a0
[  406.548126][T13241]  ? __rcu_read_unlock+0x4e/0x70
[  406.548152][T13241]  ? swap_cache_get_folio+0x1e0/0x1f0
[  406.548178][T13241]  do_swap_page+0x31e/0x2180
[  406.548225][T13241]  ? __schedule+0x936/0xd20
[  406.548288][T13241]  ? __rcu_read_lock+0x36/0x50
[  406.548393][T13241]  ? pte_offset_map_rw_nolock+0x19e/0x200
[  406.548421][T13241]  handle_mm_fault+0xb2e/0x2e70
[  406.548452][T13241]  ? vma_start_read+0x1c7/0x2c0
[  406.548560][T13241]  do_user_addr_fault+0x62f/0x1050
[  406.548591][T13241]  ? trace_page_fault_user+0x1f/0xa0
[  406.548623][T13241]  exc_page_fault+0x62/0xa0
[  406.548661][T13241]  asm_exc_page_fault+0x26/0x30
[  406.548686][T13241] RIP: 0033:0x7fab3f007f57
[  406.548706][T13241] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  406.548726][T13241] RSP: 002b:00007ffed0cb2a40 EFLAGS: 00010202
[  406.548746][T13241] RAX: 0000000000000000 RBX: 000055556f4d5500 RCX: 00007fab3f007f57
[  406.548805][T13241] RDX: 00007ffed0cb2a80 RSI: 0000000000000000 RDI: 0000000000000000
[  406.548822][T13241] RBP: 00007ffed0cb2aec R08: 0000000000000000 R09: 0000000000000000
[  406.548908][T13241] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388
[  406.548922][T13241] R13: 00000000000927c0 R14: 000000000005ed33 R15: 00007ffed0cb2b40
[  406.548945][T13241]  </TASK>
[  406.817363][T13241] memory: usage 300860kB, limit 307200kB, failcnt 2809
[  406.832757][T13241] memory+swap: usage 301004kB, limit 9007199254740988kB, failcnt 0
[  406.841825][T13241] kmem: usage 300644kB, limit 9007199254740988kB, failcnt 0
[  406.849966][T13241] Memory cgroup stats for /syz4:
[  406.850190][T13241] cache 0
[  406.858519][T13241] rss 12288
[  406.863488][T13241] shmem 0
[  406.867176][T13241] mapped_file 0
[  406.870920][T13241] dirty 0
[  406.874153][T13241] writeback 12288
[  406.878791][T13241] workingset_refault_anon 661
[  406.883724][T13241] workingset_refault_file 0
[  406.888986][T13241] swap 147456
[  406.892362][T13241] swapcached 29581312
[  406.896933][T13241] pgpgin 380694
[  406.900699][T13241] pgpgout 380679
[  406.904469][T13241] pgfault 364584
[  406.909613][T13241] pgmajfault 91
[  406.913572][T13241] inactive_anon 28672
[  406.918274][T13241] active_anon 32768
[  406.922491][T13241] inactive_file 0
[  406.927261][T13241] active_file 0
[  406.937904][T13241] unevictable 0
[  406.943471][T13241] hierarchical_memory_limit 314572800
[  406.949190][T13241] hierarchical_memsw_limit 9223372036854771712
[  406.984983][T13949] loop8: detected capacity change from 0 to 512
[  406.997350][T13241] total_cache 0
[  407.009410][T13241] total_rss 12288
[  407.034237][T13958] xt_hashlimit: max too large, truncated to 1048576
[  407.047848][T13958] xt_hashlimit: overflow, rate too high: 0
[  407.122625][T13949] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  407.140188][T13241] total_shmem 0
[  407.159473][T13241] total_mapped_file 0
[  407.186494][T13241] total_dirty 0
[  407.199243][ T7633] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  407.216578][T13241] total_writeback 12288
[  407.232348][T13962] netlink: 'syz.9.3041': attribute type 8 has an invalid length.
[  407.241450][T13962] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3041'.
[  407.252286][T13241] total_workingset_refault_anon 661
[  407.258364][T13241] total_workingset_refault_file 0
[  407.265165][T13241] total_swap 147456
[  407.269110][T13241] total_swapcached 29581312
[  407.274291][T13241] total_pgpgin 380694
[  407.278540][T13241] total_pgpgout 380679
[  407.283316][T13241] total_pgfault 364584
[  407.287519][T13241] total_pgmajfault 91
[  407.291772][T13241] total_inactive_anon 28672
[  407.297656][T13241] total_active_anon 32768
[  407.302194][T13241] total_inactive_file 0
[  407.306931][T13241] total_active_file 0
[  407.311275][T13241] total_unevictable 0
[  407.318997][T13241] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.3029,pid=13924,uid=0
[  407.338842][T13241] Memory cgroup out of memory: Killed process 13924 (syz.4.3029) total-vm:159704kB, anon-rss:1244kB, file-rss:22428kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[  407.389318][T13962] erspan0: entered promiscuous mode
[  407.396428][T13962] gretap0: entered promiscuous mode
[  407.402523][T13962] erspan0: left promiscuous mode
[  407.431457][T13962] gretap0: left promiscuous mode
[  407.454427][T13973] IPv6: Can't replace route, no match found
[  407.658491][T13914] bridge0: port 1(bridge_slave_0) entered blocking state
[  407.666665][T13914] bridge0: port 1(bridge_slave_0) entered disabled state
[  407.674348][T13914] bridge_slave_0: entered allmulticast mode
[  407.698907][T13914] bridge_slave_0: entered promiscuous mode
[  407.706310][T13962] loop9: detected capacity change from 0 to 2048
[  407.747939][T13914] bridge0: port 2(bridge_slave_1) entered blocking state
[  407.755812][T13914] bridge0: port 2(bridge_slave_1) entered disabled state
[  407.764362][T13914] bridge_slave_1: entered allmulticast mode
[  407.772012][T13914] bridge_slave_1: entered promiscuous mode
[  407.792877][T13995] loop6: detected capacity change from 0 to 512
[  407.795121][T13914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  407.806180][T13995] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  407.816946][T13914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  407.821921][T13962] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  407.841216][T13914] team0: Port device team_slave_0 added
[  407.849694][T13914] team0: Port device team_slave_1 added
[  407.866388][T13914] batman_adv: batadv0: Adding interface: batadv_slave_0
[  407.873543][T13914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  407.901965][T13914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  407.914000][T13914] batman_adv: batadv0: Adding interface: batadv_slave_1
[  407.928307][T13962] ext4 filesystem being mounted at /339/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  407.939640][T13995] EXT4-fs error (device loop6): ext4_orphan_get:1397: inode #15: comm syz.6.3047: iget: bad i_size value: 38620345925642
[  407.941087][T14001] loop8: detected capacity change from 0 to 512
[  407.952909][T13995] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  407.953232][T13995] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.3047: couldn't read orphan inode 15 (err -117)
[  407.953328][T13995] loop6: lost filesystem error report for type 5 error -117
[  407.953811][T13995] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  407.960047][T13914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  407.991157][T14001] EXT4-fs: Ignoring removed bh option
[  408.041461][T13914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  408.059159][   T28] kauditd_printk_skb: 64 callbacks suppressed
[  408.059184][   T28] audit: type=1400 audit(2000000114.710:2005): avc:  denied  { write } for  pid=13977 comm="syz.6.3047" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  408.099704][T13969] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.3041: bg 0: block 345: padding at end of block bitmap is not set
[  408.119490][T14001] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem
[  408.128941][T13969] EXT4-fs (loop9): Remounting filesystem read-only
[  408.156216][T14001] EXT4-fs (loop8): failed to open journal device unknown-block(0,0) -6
[  408.165290][   T28] audit: type=1400 audit(2000000114.765:2006): avc:  denied  { write } for  pid=13955 comm="syz.9.3041" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  408.224866][T13914] hsr_slave_0: entered promiscuous mode
[  408.233481][T13914] hsr_slave_1: entered promiscuous mode
[  408.241188][T13914] debugfs: 'hsr0' already exists in 'hsr'
[  408.248415][T13914] Cannot create hsr debugfs directory
[  408.332952][T13914] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  408.384405][T13914] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  408.457243][T14001] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3053'.
[  408.472947][ T3432] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm kworker/u8:7: bg 0: block 5: invalid block bitmap
[  408.490081][ T3432] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  408.531385][ T3432] EXT4-fs (loop6): This should not happen!! Data will be lost
[  408.531385][ T3432] 
[  408.545144][ T7947] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  408.555445][T13914] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  408.556520][ T3432] EXT4-fs (loop6): Total free blocks count 0
[  408.574537][ T3432] EXT4-fs (loop6): Free/Dirty block details
[  408.592060][ T3432] EXT4-fs (loop6): free_blocks=0
[  408.597670][ T7289] kernel write not supported for file bpf-map (pid: 7289 comm: kworker/0:6)
[  408.606806][ T3432] EXT4-fs (loop6): dirty_blocks=13972
[  408.621637][ T3432] EXT4-fs (loop6): Block reservation details
[  408.633118][ T3432] EXT4-fs (loop6): i_reserved_data_blocks=13972
[  408.654054][T13914] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  408.657877][ T3432] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28
[  408.711835][ T5525] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost
[  408.712003][   T28] audit: type=1326 audit(2000000115.328:2007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14020 comm="syz.4.3061" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab3f04cdd9 code=0x7ffc0000
[  408.786809][   T28] audit: type=1326 audit(2000000115.328:2008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14020 comm="syz.4.3061" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab3f04cdd9 code=0x7ffc0000
[  408.829080][T13914] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  408.842958][T13914] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  408.852351][   T28] audit: type=1326 audit(2000000115.328:2009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14020 comm="syz.4.3061" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab3f04cdd9 code=0x7ffc0000
[  408.889617][T13914] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  408.909506][T13914] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  408.914940][   T28] audit: type=1326 audit(2000000115.328:2010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14020 comm="syz.4.3061" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fab3f04cdd9 code=0x7ffc0000
[  408.924177][T13914] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  408.958590][   T28] audit: type=1326 audit(2000000115.328:2011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14020 comm="syz.4.3061" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab3f04cdd9 code=0x7ffc0000
[  408.988404][   T28] audit: type=1326 audit(2000000115.374:2012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14020 comm="syz.4.3061" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab3f04cdd9 code=0x7ffc0000
[  408.991176][T13914] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  409.017425][   T28] audit: type=1326 audit(2000000115.374:2013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14020 comm="syz.4.3061" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab3f04cdd9 code=0x7ffc0000
[  409.057708][T14024] loop8: detected capacity change from 0 to 512
[  409.065438][T14024] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  409.074591][T13914] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  409.075254][   T28] audit: type=1326 audit(2000000115.374:2014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14020 comm="syz.4.3061" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab3f04cdd9 code=0x7ffc0000
[  409.113172][T13914] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  409.121243][T14024] EXT4-fs error (device loop8): ext4_orphan_get:1397: inode #15: comm syz.8.3064: iget: bad i_size value: 38620345925642
[  409.135045][T14024] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  409.135506][T14024] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.3064: couldn't read orphan inode 15 (err -117)
[  409.158562][    C1] EXT4-fs (loop8): error count since last fsck: 1
[  409.158670][    C1] EXT4-fs (loop8): initial error at time 2000000115: ext4_orphan_get:1397: inode 15
[  409.158695][    C1] EXT4-fs (loop8): last error at time 2000000115: ext4_orphan_get:1397: inode 15
[  409.164657][T14038] loop9: detected capacity change from 0 to 512
[  409.165547][T14024] loop8: lost filesystem error report for type 5 error -117
[  409.188535][T14038] EXT4-fs: Ignoring removed nobh option
[  409.193591][T14024] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  409.341404][T13914] 8021q: adding VLAN 0 to HW filter on device bond0
[  409.360064][T13914] 8021q: adding VLAN 0 to HW filter on device team0
[  409.372470][ T6521] bridge0: port 1(bridge_slave_0) entered blocking state
[  409.380129][ T6521] bridge0: port 1(bridge_slave_0) entered forwarding state
[  409.401266][ T6521] bridge0: port 2(bridge_slave_1) entered blocking state
[  409.409111][ T6521] bridge0: port 2(bridge_slave_1) entered forwarding state
[  409.587599][T14038] EXT4-fs (loop9): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  409.587950][ T6521] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm kworker/u8:11: bg 0: block 5: invalid block bitmap
[  409.598113][T14038] EXT4-fs (loop9): group descriptors corrupted!
[  409.633009][ T6521] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  409.648013][T13914] 8021q: adding VLAN 0 to HW filter on device batadv0
[  409.668510][ T6521] EXT4-fs (loop8): This should not happen!! Data will be lost
[  409.668510][ T6521] 
[  409.680850][ T6521] EXT4-fs (loop8): Total free blocks count 0
[  409.687872][ T6521] EXT4-fs (loop8): Free/Dirty block details
[  409.690470][T14065] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=14065 comm=syz.6.3069
[  409.709115][ T6521] EXT4-fs (loop8): free_blocks=0
[  409.715121][ T6521] EXT4-fs (loop8): dirty_blocks=16000
[  409.733791][ T6521] EXT4-fs (loop8): Block reservation details
[  409.740815][ T6521] EXT4-fs (loop8): i_reserved_data_blocks=16000
[  409.828402][ T6521] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28
[  409.865151][T14077] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3071'.
[  409.885310][ T7633] EXT4-fs warning (device loop8): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost
[  409.907530][T14073] syzkaller0: entered promiscuous mode
[  409.913341][T14073] syzkaller0: entered allmulticast mode
[  409.956880][T14083] loop4: detected capacity change from 0 to 512
[  410.038704][T14083] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.3073: iget: bad i_size value: 38620345925642
[  410.053296][T14083] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  410.053518][T14083] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.3073: couldn't read orphan inode 15 (err -117)
[  410.062904][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  410.062925][    C1] EXT4-fs (loop4): initial error at time 2000000116: ext4_orphan_get:1397: inode 15
[  410.062962][    C1] EXT4-fs (loop4): last error at time 2000000116: ext4_orphan_get:1397: inode 15
[  410.101917][T13914] veth0_vlan: entered promiscuous mode
[  410.106141][T14083] loop4: lost filesystem error report for type 5 error -117
[  410.130118][T14083] EXT4-fs (loop4): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback.
[  410.155146][T13914] veth1_vlan: entered promiscuous mode
[  410.181203][T13914] veth0_macvtap: entered promiscuous mode
[  410.200460][T13914] veth1_macvtap: entered promiscuous mode
[  410.307822][T13914] batman_adv: batadv0: Interface activated: batadv_slave_0
[  410.705801][T13914] batman_adv: batadv0: Interface activated: batadv_slave_1
[  411.017810][T14097] loop8: detected capacity change from 0 to 1764
[  411.041098][T13241] EXT4-fs (loop4): unmounting filesystem 00000000-0000-00a1-0000-000000000000.
[  411.050718][ T8206] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  411.051734][T14103] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3078'.
[  411.068762][ T8206] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  411.186474][ T8206] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  411.230479][ T8206] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  411.335025][T14111] loop4: detected capacity change from 0 to 512
[  411.342425][T14111] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  411.362410][T14111] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.3080: iget: bad i_size value: 38620345925642
[  411.376194][T14111] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  411.377026][T14111] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.3080: couldn't read orphan inode 15 (err -117)
[  411.398762][T14111] loop4: lost filesystem error report for type 5 error -117
[  411.399473][T14111] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  411.765147][ T8206] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm kworker/u8:12: bg 0: block 5: invalid block bitmap
[  411.779220][ T8206] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  411.807628][ T8206] EXT4-fs (loop4): This should not happen!! Data will be lost
[  411.807628][ T8206] 
[  411.818241][ T8206] EXT4-fs (loop4): Total free blocks count 0
[  411.824557][ T8206] EXT4-fs (loop4): Free/Dirty block details
[  411.831104][ T8206] EXT4-fs (loop4): free_blocks=0
[  411.836281][ T8206] EXT4-fs (loop4): dirty_blocks=16000
[  411.841998][ T8206] EXT4-fs (loop4): Block reservation details
[  411.848160][ T8206] EXT4-fs (loop4): i_reserved_data_blocks=16000
[  411.869627][T14137] netlink: 'syz.8.3088': attribute type 4 has an invalid length.
[  411.987343][T14138] netlink: 'syz.8.3088': attribute type 4 has an invalid length.
[  412.692394][T14147] rdma_op ffff88811c5bc580 conn xmit_rdma 0000000000000000
[  412.818756][ T6521] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28
[  412.907371][T13241] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost
[  413.109084][T14153] loop5: detected capacity change from 0 to 4096
[  413.151915][T14153] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  413.311963][T13914] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  413.319875][T14171] loop6: detected capacity change from 0 to 1764
[  413.509862][T14181] 9p: Bad value for 'wfdno'
[  413.585635][T14181] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=14181 comm=syz.5.3099
[  413.603922][T14181] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=14181 comm=syz.5.3099
[  413.628152][T14181] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=14181 comm=syz.5.3099
[  413.808378][T14202] loop4: detected capacity change from 0 to 164
[  413.863823][T14202] isofs_fill_super: root inode is not a directory. Corrupted media?
[  414.644166][T14207] netlink: 'syz.5.3113': attribute type 3 has an invalid length.
[  414.709429][T14207] loop5: detected capacity change from 0 to 512
[  414.719281][T14213] FAULT_INJECTION: forcing a failure.
[  414.719281][T14213] name failslab, interval 1, probability 0, space 0, times 0
[  414.737424][T14207] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  414.749628][T14213] CPU: 0 UID: 0 PID: 14213 Comm: syz.6.3115 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  414.749732][T14213] Tainted: [W]=WARN
[  414.749742][T14213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  414.749758][T14213] Call Trace:
[  414.749767][T14213]  <TASK>
[  414.749778][T14213]  __dump_stack+0x1d/0x30
[  414.749809][T14213]  dump_stack_lvl+0x95/0xd0
[  414.749912][T14213]  dump_stack+0x15/0x1b
[  414.749938][T14213]  should_fail_ex+0x263/0x280
[  414.749972][T14213]  should_failslab+0x8c/0xb0
[  414.750011][T14213]  __kmalloc_noprof+0xb8/0x4d0
[  414.750131][T14213]  ? tls_get_rec+0x75/0x410
[  414.750171][T14213]  tls_get_rec+0x75/0x410
[  414.750279][T14213]  tls_sw_sendmsg+0x33c/0x1520
[  414.750318][T14213]  ? avc_has_perm+0x101/0x190
[  414.750357][T14213]  ? __pfx_tls_sw_sendmsg+0x10/0x10
[  414.750392][T14213]  ? __pfx_inet6_sendmsg+0x10/0x10
[  414.750463][T14213]  inet6_sendmsg+0xc5/0xd0
[  414.750500][T14213]  sock_write_iter+0x23f/0x320
[  414.750603][T14213]  do_iter_readv_writev+0x4fd/0x5a0
[  414.750653][T14213]  vfs_writev+0x2e1/0x900
[  414.750682][T14213]  do_writev+0xe9/0x210
[  414.750708][T14213]  __x64_sys_writev+0x45/0x50
[  414.750785][T14213]  x64_sys_call+0x1c0c/0x3020
[  414.750815][T14213]  do_syscall_64+0x12c/0x3b0
[  414.750850][T14213]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  414.750878][T14213] RIP: 0033:0x7f29c074cdd9
[  414.750929][T14213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  414.750952][T14213] RSP: 002b:00007f29bf19f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  414.750978][T14213] RAX: ffffffffffffffda RBX: 00007f29c09c5fa0 RCX: 00007f29c074cdd9
[  414.750995][T14213] RDX: 0000000000000003 RSI: 0000200000000240 RDI: 0000000000000003
[  414.751030][T14213] RBP: 00007f29bf19f090 R08: 0000000000000000 R09: 0000000000000000
[  414.751044][T14213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  414.751057][T14213] R13: 00007f29c09c6038 R14: 00007f29c09c5fa0 R15: 00007ffd04c385b8
[  414.751079][T14213]  </TASK>
[  414.767827][   T28] kauditd_printk_skb: 313 callbacks suppressed
[  414.767848][   T28] audit: type=1400 audit(2000000120.919:2328): avc:  denied  { write } for  pid=14214 comm="syz.4.3116" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  414.958163][T14207] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  414.964392][   T28] audit: type=1400 audit(2000000120.975:2329): avc:  denied  { create } for  pid=14214 comm="syz.4.3116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  414.973093][T14207] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3113: bg 0: block 248: padding at end of block bitmap is not set
[  414.981394][   T28] audit: type=1400 audit(2000000120.975:2330): avc:  denied  { setopt } for  pid=14214 comm="syz.4.3116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  414.989890][T14207] loop5: lost filesystem error report for type 5 error -117
[  415.122180][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  415.137654][    C0] EXT4-fs (loop5): last error at time 2000000121: ext4_validate_block_bitmap:441
[  415.159253][T14207] Quota error (device loop5): write_blk: dquota write failed
[  415.168870][T14219] loop6: detected capacity change from 0 to 1764
[  415.169276][T14219] iso9660: Unknown parameter 'fowner<00000000000000000000'
[  415.186335][T14207] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota
[  415.197194][T14207] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.3113: Failed to acquire dquot type 1
[  415.209473][T14207] loop5: lost filesystem error report for type 5 error -28
[  415.210278][T14207] EXT4-fs (loop5): 1 truncate cleaned up
[  415.239313][T14207] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  415.305172][   T28] audit: type=1400 audit(2000000121.408:2331): avc:  denied  { write } for  pid=14206 comm="syz.5.3113" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  415.330098][   T28] audit: type=1400 audit(2000000121.408:2332): avc:  denied  { read write } for  pid=14206 comm="syz.5.3113" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  415.354626][   T28] audit: type=1400 audit(2000000121.408:2333): avc:  denied  { open } for  pid=14206 comm="syz.5.3113" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  415.379368][   T28] audit: type=1400 audit(2000000121.408:2334): avc:  denied  { ioctl } for  pid=14206 comm="syz.5.3113" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  415.450837][T13914] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  415.470529][  T855] Quota error (device loop5): do_check_range: Getting block 0 out of range 1-5
[  415.480738][  T855] EXT4-fs error (device loop5): ext4_release_dquot:7070: comm kworker/u8:6: Failed to release dquot type 1
[  415.492905][  T855] loop5: lost filesystem error report for type 5 error -117
[  415.582311][T14242] loop4: detected capacity change from 0 to 512
[  415.597216][T14241] loop5: detected capacity change from 0 to 1764
[  415.612957][T14242] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.3124: iget: bad i_size value: 38620345925642
[  415.639980][T14242] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  415.642707][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  415.659858][    C0] EXT4-fs (loop4): initial error at time 2000000121: ext4_orphan_get:1397: inode 15
[  415.670005][    C0] EXT4-fs (loop4): last error at time 2000000121: ext4_orphan_get:1397: inode 15
[  415.699617][T14245] SET target dimension over the limit!
[  415.735297][T14242] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.3124: couldn't read orphan inode 15 (err -117)
[  415.771078][T14242] loop4: lost filesystem error report for type 5 error -117
[  415.772455][T14242] EXT4-fs (loop4): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback.
[  415.824002][T14252] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3128'.
[  415.920415][T13241] EXT4-fs (loop4): unmounting filesystem 00000000-0000-00a1-0000-000000000000.
[  416.010790][T14267] 9p: Bad value for 'rfdno'
[  416.019820][T14271] netlink: 168 bytes leftover after parsing attributes in process `syz.8.3136'.
[  416.029593][T14271] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  416.084413][T14279] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3140'.
[  416.096428][T14279] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3140'.
[  416.108393][T14279] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3140'.
[  416.140687][T14285] loop4: detected capacity change from 0 to 256
[  416.159124][T14285] FAT-fs (loop4): Directory bread(block 64) failed
[  416.168100][T14285] FAT-fs (loop4): Directory bread(block 65) failed
[  416.175374][T14285] FAT-fs (loop4): Directory bread(block 66) failed
[  416.182698][T14285] FAT-fs (loop4): Directory bread(block 67) failed
[  416.199396][T14285] FAT-fs (loop4): Directory bread(block 68) failed
[  416.225260][T14285] FAT-fs (loop4): Directory bread(block 69) failed
[  416.233514][T14285] FAT-fs (loop4): Directory bread(block 70) failed
[  416.240232][T14285] FAT-fs (loop4): Directory bread(block 71) failed
[  416.248682][T14285] FAT-fs (loop4): Directory bread(block 72) failed
[  416.256708][T14285] FAT-fs (loop4): Directory bread(block 73) failed
[  416.267889][   T23] kernel write not supported for file bpf-map (pid: 23 comm: kworker/1:0)
[  416.591018][T14317] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3149'.
[  416.612271][T14319] loop4: detected capacity change from 0 to 512
[  416.630429][T14317] bond1 (unregistering): Released all slaves
[  416.641805][T14319] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  416.658509][T14325] syz.8.3151 (14325) used obsolete PPPIOCDETACH ioctl
[  416.700802][T13241] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  416.746035][T14335] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3155'.
[  416.784484][ T3384] kernel write not supported for file bpf-map (pid: 3384 comm: kworker/1:5)
[  416.830043][T14347] loop5: detected capacity change from 0 to 1764
[  416.869270][T14348] syzkaller0: entered promiscuous mode
[  416.875317][T14348] syzkaller0: entered allmulticast mode
[  417.074787][T14353] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3162'.
[  417.111311][T14362] loop4: detected capacity change from 0 to 128
[  417.119320][T14363] netlink: 'syz.6.3161': attribute type 8 has an invalid length.
[  417.128354][T14362] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  417.131947][T14362] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  417.176657][T14363] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3161'.
[  417.186705][   T81] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  417.200701][T14363] erspan0: entered promiscuous mode
[  417.210546][T14363] gretap0: entered promiscuous mode
[  417.227066][T14363] erspan0: left promiscuous mode
[  417.234951][T14363] gretap0: left promiscuous mode
[  417.360523][T14374] loop4: detected capacity change from 0 to 4096
[  417.377424][T14374] ext4: Bad value for 'commit'
[  417.536942][T14374] lo speed is unknown, defaulting to 1000
[  417.605405][T14374] xfrm0 speed is unknown, defaulting to 1000
[  417.666869][T14363] loop6: detected capacity change from 0 to 2048
[  417.949232][T14363] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  417.962557][T14363] ext4 filesystem being mounted at /587/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  418.172346][T14363] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3161: bg 0: block 345: padding at end of block bitmap is not set
[  418.189208][T14363] EXT4-fs (loop6): Remounting filesystem read-only
[  418.621951][T14389] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3173'.
[  418.848180][T14391] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities
[  419.291637][T14397] lo speed is unknown, defaulting to 1000
[  419.346573][T14397] xfrm0 speed is unknown, defaulting to 1000
[  419.551747][ T5525] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  419.636069][T14405] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  419.663449][T14409] EXT4-fs error (device loop6): ext4_orphan_get:1397: inode #15: comm syz.6.3179: iget: bad i_size value: 38620345925642
[  419.750995][T14409] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  419.757803][T14409] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.3179: couldn't read orphan inode 15 (err -117)
[  419.767780][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  419.767801][    C1] EXT4-fs (loop6): initial error at time 2000000125: ext4_orphan_get:1397: inode 15
[  419.767831][    C1] EXT4-fs (loop6): last error at time 2000000125: ext4_orphan_get:1397: inode 15
[  419.827392][T14409] loop6: lost filesystem error report for type 5 error -117
[  419.864368][T14409] EXT4-fs (loop6): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback.
[  420.044884][ T7947] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  420.138953][T14434] syzkaller0: entered promiscuous mode
[  420.160963][T14434] syzkaller0: entered allmulticast mode
[  420.193539][ T5525] EXT4-fs (loop6): unmounting filesystem 00000000-0000-00a1-0000-000000000000.
[  420.260915][   T28] kauditd_printk_skb: 41 callbacks suppressed
[  420.260935][   T28] audit: type=1400 audit(2000000125.985:2376): avc:  denied  { execute } for  pid=14439 comm="syz.6.3189" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=42590 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  420.342167][T14433] syzkaller0: entered promiscuous mode
[  420.354166][T14433] syzkaller0: entered allmulticast mode
[  423.061645][   T28] audit: type=1326 audit(2000000128.264:2377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14447 comm="syz.8.3192" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7fc866696b57 code=0x0
[  423.309354][T14453] netlink: 'syz.4.3193': attribute type 4 has an invalid length.
[  423.499704][T14458] netlink: 'syz.4.3193': attribute type 4 has an invalid length.
[  424.506405][T14472] netlink: 'syz.8.3199': attribute type 9 has an invalid length.
[  424.536200][T14468] set_capacity_and_notify: 4 callbacks suppressed
[  424.536221][T14468] loop6: detected capacity change from 0 to 512
[  424.558921][T14468] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  424.573683][T14468] EXT4-fs error (device loop6): ext4_orphan_get:1397: inode #15: comm syz.6.3196: iget: bad i_size value: 38620345925642
[  424.590250][T14468] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  424.593941][T14468] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.3196: couldn't read orphan inode 15 (err -117)
[  424.624236][T14468] loop6: lost filesystem error report for type 5 error -117
[  424.626069][T14468] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  424.659555][   T28] audit: type=1400 audit(2000000130.026:2378): avc:  denied  { write } for  pid=14463 comm="syz.6.3196" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  424.710939][T14479] loop8: detected capacity change from 0 to 256
[  424.815246][T14478] syzkaller0: entered promiscuous mode
[  424.827103][T14478] syzkaller0: entered allmulticast mode
[  424.845408][T14485] loop9: detected capacity change from 0 to 1764
[  424.987403][  T855] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm kworker/u8:6: bg 0: block 5: invalid block bitmap
[  425.011606][  T855] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  425.028305][  T855] EXT4-fs (loop6): This should not happen!! Data will be lost
[  425.028305][  T855] 
[  425.043333][  T855] EXT4-fs (loop6): Total free blocks count 0
[  425.051097][  T855] EXT4-fs (loop6): Free/Dirty block details
[  425.059556][  T855] EXT4-fs (loop6): free_blocks=0
[  425.065357][  T855] EXT4-fs (loop6): dirty_blocks=16000
[  425.074320][  T855] EXT4-fs (loop6): Block reservation details
[  425.081671][  T855] EXT4-fs (loop6): i_reserved_data_blocks=16000
[  425.188071][T14493] syzkaller0: entered promiscuous mode
[  425.195117][T14493] syzkaller0: entered allmulticast mode
[  426.260916][   T81] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28
[  426.262203][   T28] audit: type=1400 audit(2000000130.718:2379): avc:  denied  { write } for  pid=14489 comm="syz.4.3204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  426.450732][ T5525] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost
[  426.725006][T14504] netlink: 'syz.9.3209': attribute type 10 has an invalid length.
[  426.777150][T14504] team0: Port device bridge0 added
[  426.791460][T14508] loop6: detected capacity change from 0 to 512
[  426.798516][T14508] ext2: Unknown parameter 'euid>00000000000000060929'
[  427.574615][T14524] syzkaller0: entered promiscuous mode
[  427.580834][T14524] syzkaller0: entered allmulticast mode
[  427.633736][T14528] syzkaller0: entered promiscuous mode
[  427.640454][T14528] syzkaller0: entered allmulticast mode
[  427.744029][T14534] loop5: detected capacity change from 0 to 1024
[  427.754684][T14534] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  427.764481][T14534] System zones: 0-1, 3-36
[  427.770599][T14534] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.3219: bad orphan inode 134217728
[  427.782003][T14534] loop5: lost filesystem error report for type 5 error -117
[  427.783249][T14534] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  427.949941][T14548] loop4: detected capacity change from 0 to 128
[  428.048030][   T28] audit: type=1400 audit(2000000133.173:2380): avc:  denied  { mount } for  pid=14557 comm="syz.4.3226" name="/" dev="ramfs" ino=44020 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  428.093090][T13914] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  428.310569][T14561] loop9: detected capacity change from 0 to 512
[  428.338500][T14561] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  428.468536][T14561] EXT4-fs error (device loop9): ext4_orphan_get:1397: inode #15: comm syz.9.3223: iget: bad i_size value: 38620345925642
[  428.482108][T14561] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  428.482636][T14561] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.3223: couldn't read orphan inode 15 (err -117)
[  428.492251][    C1] EXT4-fs (loop9): error count since last fsck: 1
[  428.492269][    C1] EXT4-fs (loop9): initial error at time 2000000133: ext4_orphan_get:1397: inode 15
[  428.492311][    C1] EXT4-fs (loop9): last error at time 2000000133: ext4_orphan_get:1397: inode 15
[  428.533103][T14561] loop9: lost filesystem error report for type 5 error -117
[  428.535009][T14561] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  429.156290][   T28] audit: type=1400 audit(2000000133.643:2381): avc:  denied  { write } for  pid=14551 comm="syz.9.3223" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  429.190628][ T3432] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm kworker/u8:7: bg 0: block 5: invalid block bitmap
[  429.555143][ T3432] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  429.593328][ T3432] EXT4-fs (loop9): This should not happen!! Data will be lost
[  429.593328][ T3432] 
[  430.071910][ T3432] EXT4-fs (loop9): Total free blocks count 0
[  430.078782][ T3432] EXT4-fs (loop9): Free/Dirty block details
[  430.085889][ T3432] EXT4-fs (loop9): free_blocks=0
[  430.092087][ T3432] EXT4-fs (loop9): dirty_blocks=16000
[  430.098643][ T3432] EXT4-fs (loop9): Block reservation details
[  430.195860][ T3432] EXT4-fs (loop9): i_reserved_data_blocks=16000
[  430.204369][T14568] syzkaller0: entered promiscuous mode
[  430.209962][T14568] syzkaller0: entered allmulticast mode
[  430.465464][T14576] loop8: detected capacity change from 0 to 512
[  430.467867][T14573] syzkaller0: entered promiscuous mode
[  430.472534][T14576] EXT4-fs: Ignoring removed bh option
[  430.492574][ T3432] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28
[  430.506174][T14576] EXT4-fs: Invalid want_extra_isize 18216
[  430.541619][T14573] syzkaller0: entered allmulticast mode
[  430.559809][T14578] IPv6: Can't replace route, no match found
[  430.569294][T14576] EXT4-fs (loop8): unable to read superblock
[  430.627433][ T7947] EXT4-fs warning (device loop9): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost
[  430.748586][T14576] lo speed is unknown, defaulting to 1000
[  431.214026][T14576] xfrm0 speed is unknown, defaulting to 1000
[  431.260527][T14588] netlink: 'syz.4.3235': attribute type 8 has an invalid length.
[  431.268653][T14588] __nla_validate_parse: 5 callbacks suppressed
[  431.268671][T14588] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3235'.
[  431.298358][ T1038] syz1: Port: 1 Link DOWN
[  431.307197][T14588] erspan0: entered promiscuous mode
[  431.313391][T14588] gretap0: entered promiscuous mode
[  431.331932][T14588] erspan0: left promiscuous mode
[  431.367892][T14588] gretap0: left promiscuous mode
[  431.375121][ T8206] smc: removing ib device syz1
[  431.690460][   T28] audit: type=1400 audit(2000000136.531:2382): avc:  denied  { connect } for  pid=14599 comm="syz.8.3237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  431.713277][   T28] audit: type=1400 audit(2000000136.559:2383): avc:  denied  { write } for  pid=14599 comm="syz.8.3237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  431.858796][T14588] loop4: detected capacity change from 0 to 2048
[  431.885416][T14587] lo speed is unknown, defaulting to 1000
[  431.958945][T14606] 9p: Bad value for 'wfdno'
[  431.972561][T14604] loop8: detected capacity change from 0 to 128
[  432.037770][T14587] xfrm0 speed is unknown, defaulting to 1000
[  432.067905][T14588] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  432.101986][T14588] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  432.135015][   T28] audit: type=1400 audit(2000000136.928:2384): avc:  denied  { write } for  pid=14584 comm="syz.4.3235" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  432.135101][T14588] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3235: bg 0: block 345: padding at end of block bitmap is not set
[  432.176819][T14588] EXT4-fs (loop4): Remounting filesystem read-only
[  432.306171][T14587] bridge0: port 1(bridge_slave_0) entered blocking state
[  432.314116][T14587] bridge0: port 1(bridge_slave_0) entered disabled state
[  432.322712][T14587] bridge_slave_0: entered allmulticast mode
[  432.330671][T14587] bridge_slave_0: entered promiscuous mode
[  432.340129][T14587] bridge0: port 2(bridge_slave_1) entered blocking state
[  432.350441][T14587] bridge0: port 2(bridge_slave_1) entered disabled state
[  432.359370][T14587] bridge_slave_1: entered allmulticast mode
[  432.368440][T14587] bridge_slave_1: entered promiscuous mode
[  432.391481][ T3936] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  432.408288][T13241] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  432.420393][T14587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  432.434813][T14587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  432.469151][ T3936] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  432.486927][T14587] team0: Port device team_slave_0 added
[  432.526548][T14625] syzkaller0: entered promiscuous mode
[  432.533527][T14625] syzkaller0: entered allmulticast mode
[  432.544573][T14587] team0: Port device team_slave_1 added
[  432.553873][ T3936] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  432.591789][T14587] batman_adv: batadv0: Adding interface: batadv_slave_0
[  432.601745][T14587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  432.630917][T14587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  432.643467][ T8998] kworker/u8:14: attempt to access beyond end of device
[  432.643467][ T8998] loop8: rw=1, sector=145, nr_sectors = 6 limit=128
[  432.659088][T14587] batman_adv: batadv0: Adding interface: batadv_slave_1
[  432.691199][T14587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  432.727231][T14587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  432.787283][T14632] syzkaller0: entered promiscuous mode
[  432.794402][T14632] syzkaller0: entered allmulticast mode
[  432.821119][ T3936] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  432.863658][T14587] hsr_slave_0: entered promiscuous mode
[  432.870532][T14587] hsr_slave_1: entered promiscuous mode
[  432.883368][T14587] debugfs: 'hsr0' already exists in 'hsr'
[  432.889996][T14587] Cannot create hsr debugfs directory
[  432.903618][T14631] syzkaller0: entered promiscuous mode
[  432.915574][T14631] syzkaller0: entered allmulticast mode
[  433.210616][T14646] netlink: 'syz.5.3245': attribute type 27 has an invalid length.
[  433.218861][T14646] netlink: 164 bytes leftover after parsing attributes in process `syz.5.3245'.
[  433.468203][T14649] 9p: Bad value for 'wfdno'
[  433.572855][ T3936] team0: Port device bridge0 removed
[  433.678866][ T3936] bond0 (unregistering): Released all slaves
[  433.690358][ T3936] bond1 (unregistering): Released all slaves
[  433.701512][ T3936] bond2 (unregistering): Released all slaves
[  433.711940][ T3936] bond3 (unregistering): Released all slaves
[  433.722933][ T3936] bond4 (unregistering): Released all slaves
[  433.793391][ T3936] tipc: Left network mode
[  433.911337][   T28] audit: type=1400 audit(2000000138.571:2385): avc:  denied  { write } for  pid=14664 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  433.962218][   T28] audit: type=1400 audit(2000000138.626:2386): avc:  denied  { write } for  pid=14676 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  434.528150][T14686] netlink: 'syz.9.3255': attribute type 4 has an invalid length.
[  434.586237][T14689] netlink: 'syz.9.3255': attribute type 4 has an invalid length.
[  434.844577][T14699] IPv6: Can't replace route, no match found
[  434.900336][   T28] audit: type=1400 audit(2000000139.216:2387): avc:  denied  { create } for  pid=14687 comm="syz.8.3257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  434.923296][   T28] audit: type=1400 audit(2000000139.226:2388): avc:  denied  { ioctl } for  pid=14687 comm="syz.8.3257" path="socket:[44373]" dev="sockfs" ino=44373 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  435.017977][ T3936] hsr_slave_0: left promiscuous mode
[  435.068656][ T3936] hsr_slave_1: left promiscuous mode
[  435.079716][ T3936] veth1_macvtap: left promiscuous mode
[  435.086189][ T3936] veth0_macvtap: left promiscuous mode
[  435.093170][ T3936] veth1_vlan: left promiscuous mode
[  435.099890][ T3936] veth0_vlan: left promiscuous mode
[  435.139103][T14703] 9p: Bad value for 'wfdno'
[  435.912048][T14706] loop5: detected capacity change from 0 to 512
[  435.977494][T14706] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  435.994313][T14706] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.3259: iget: bad i_size value: 38620345925642
[  436.008318][T14706] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  436.008716][T14706] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.3259: couldn't read orphan inode 15 (err -117)
[  436.018177][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  436.018198][    C0] EXT4-fs (loop5): initial error at time 2000000140: ext4_orphan_get:1397: inode 15
[  436.018232][    C0] EXT4-fs (loop5): last error at time 2000000140: ext4_orphan_get:1397: inode 15
[  436.098172][T14706] loop5: lost filesystem error report for type 5 error -117
[  436.098796][T14706] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  436.122137][   T28] audit: type=1400 audit(2000000140.619:2389): avc:  denied  { write } for  pid=14700 comm="syz.5.3259" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  436.445002][ T3018] 8021q: adding VLAN 0 to HW filter on device eth17
[  436.582518][ T8206] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm kworker/u8:12: bg 0: block 5: invalid block bitmap
[  436.612224][ T8206] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  436.628779][T14714] loop4: detected capacity change from 0 to 128
[  436.637028][T14714] EXT4-fs: Ignoring removed bh option
[  436.660300][ T8206] EXT4-fs (loop5): This should not happen!! Data will be lost
[  436.660300][ T8206] 
[  436.679572][T14714] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  436.698123][ T8206] EXT4-fs (loop5): Total free blocks count 0
[  436.725303][ T8206] EXT4-fs (loop5): Free/Dirty block details
[  436.733311][T14714] ext4 filesystem being mounted at /84/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  436.755809][ T8206] EXT4-fs (loop5): free_blocks=0
[  436.776976][   T28] audit: type=1400 audit(2000000141.228:2390): avc:  denied  { write } for  pid=14712 comm="syz.4.3262" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  436.800895][ T8206] EXT4-fs (loop5): dirty_blocks=16000
[  436.807538][T14587] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  436.827137][ T8206] EXT4-fs (loop5): Block reservation details
[  436.860693][T14587] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  436.870763][ T8206] EXT4-fs (loop5): i_reserved_data_blocks=16000
[  436.887702][T14587] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  436.906450][   T28] audit: type=1326 audit(2000000141.265:2391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14710 comm="syz.8.3261" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7fc866696b57 code=0x0
[  436.996413][T14587] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  437.008842][ T8206] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28
[  437.034350][T14587] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  437.049119][T14587] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  437.057271][T14587] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  437.064291][T13914] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost
[  437.077854][T14587] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  437.117486][T14587] 8021q: adding VLAN 0 to HW filter on device bond0
[  437.176221][   T28] kauditd_printk_skb: 5 callbacks suppressed
[  437.176274][   T28] audit: type=1400 audit(2000000141.588:2397): avc:  denied  { checkpoint_restore } for  pid=14728 comm="syz.9.3265" capability=40  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  437.273103][T14587] 8021q: adding VLAN 0 to HW filter on device team0
[  437.297746][T13241] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  437.307622][T14737] loop9: detected capacity change from 0 to 512
[  437.319371][ T8206] bridge0: port 1(bridge_slave_0) entered blocking state
[  437.326765][ T8206] bridge0: port 1(bridge_slave_0) entered forwarding state
[  437.341060][ T8206] bridge0: port 2(bridge_slave_1) entered blocking state
[  437.348665][ T8206] bridge0: port 2(bridge_slave_1) entered forwarding state
[  437.361922][T14737] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  437.422308][T14587] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  437.455561][ T3936] IPVS: stop unused estimator thread 0...
[  437.487465][ T7947] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  437.596013][   T28] audit: type=1400 audit(2000000141.975:2398): avc:  denied  { write } for  pid=14732 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  437.615246][T14761] syzkaller0: entered promiscuous mode
[  437.640622][T14761] syzkaller0: entered allmulticast mode
[  437.667735][   T28] audit: type=1400 audit(2000000142.049:2399): avc:  denied  { write } for  pid=14764 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  437.762604][T14587] 8021q: adding VLAN 0 to HW filter on device batadv0
[  437.940294][T14587] veth0_vlan: entered promiscuous mode
[  437.951478][T14587] veth1_vlan: entered promiscuous mode
[  437.968880][T14587] veth0_macvtap: entered promiscuous mode
[  437.977359][T14587] veth1_macvtap: entered promiscuous mode
[  437.995539][T14587] batman_adv: batadv0: Interface activated: batadv_slave_0
[  438.010499][T14587] batman_adv: batadv0: Interface activated: batadv_slave_1
[  438.022258][ T8998] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  438.031472][ T8998] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  438.044504][ T8998] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  438.053822][ T8998] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  438.148417][T14796] loop5: detected capacity change from 0 to 512
[  438.264557][T14804] lo speed is unknown, defaulting to 1000
[  438.324898][T14806] loop9: detected capacity change from 0 to 512
[  438.369455][T14804] xfrm0 speed is unknown, defaulting to 1000
[  438.548846][T14806] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  438.566079][T14806] EXT4-fs error (device loop9): ext4_orphan_get:1397: inode #15: comm syz.9.3273: iget: bad i_size value: 38620345925642
[  438.579491][T14806] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  438.580280][T14806] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.3273: couldn't read orphan inode 15 (err -117)
[  438.602970][T14806] loop9: lost filesystem error report for type 5 error -117
[  438.604903][T14806] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  439.305079][   T28] audit: type=1400 audit(2000000142.926:2400): avc:  denied  { write } for  pid=14792 comm="syz.9.3273" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  439.402394][ T9005] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm kworker/u8:17: bg 0: block 5: invalid block bitmap
[  439.420162][ T9005] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  439.432718][ T9005] EXT4-fs (loop9): This should not happen!! Data will be lost
[  439.432718][ T9005] 
[  439.442935][ T9005] EXT4-fs (loop9): Total free blocks count 0
[  439.567000][ T9005] EXT4-fs (loop9): Free/Dirty block details
[  439.576949][T14811] loop6: detected capacity change from 0 to 1024
[  439.584041][ T9005] EXT4-fs (loop9): free_blocks=0
[  439.591573][T14811] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  439.600794][ T9005] EXT4-fs (loop9): dirty_blocks=16000
[  439.607626][T14811] System zones: 0-1, 3-36
[  439.612522][ T9005] EXT4-fs (loop9): Block reservation details
[  439.619276][T14811] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.3278: bad orphan inode 134217728
[  439.631004][ T9005] EXT4-fs (loop9): i_reserved_data_blocks=16000
[  439.639638][T14811] loop6: lost filesystem error report for type 5 error -117
[  439.640205][T14811] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  440.060937][T14587] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  440.064342][  T855] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28
[  440.125698][ T7947] EXT4-fs warning (device loop9): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost
[  440.150593][T14818] 9p: Bad value for 'wfdno'
[  440.211279][T14820] loop9: detected capacity change from 0 to 1024
[  440.233698][T14820] Quota error (device loop9): do_check_range: Getting block 64 out of range 1-5
[  440.250454][T14820] Quota error (device loop9): qtree_read_dquot: Can't read quota structure for id 0
[  440.260435][T14820] EXT4-fs error (device loop9): ext4_acquire_dquot:7034: comm syz.9.3280: Failed to acquire dquot type 0
[  440.272494][T14820] loop9: lost filesystem error report for type 5 error -117
[  440.276355][    C0] EXT4-fs (loop9): error count since last fsck: 1
[  440.290814][    C0] EXT4-fs (loop9): initial error at time 2000000144: ext4_acquire_dquot:7034
[  440.299817][    C0] EXT4-fs (loop9): last error at time 2000000144: ext4_acquire_dquot:7034
[  440.349030][T14820] EXT4-fs error (device loop9): mb_free_blocks:2049: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt.
[  440.410897][T14820] EXT4-fs (loop9): 1 truncate cleaned up
[  440.452119][T14820] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  440.514002][   T28] audit: type=1326 audit(2000000144.670:2401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14815 comm="syz.6.3279" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7f2405eb6b57 code=0x0
[  440.516145][T14820] netlink: 104 bytes leftover after parsing attributes in process `syz.9.3280'.
[  440.756625][ T7947] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  440.897258][T14853] loop5: detected capacity change from 0 to 512
[  441.508056][T14854] loop8: detected capacity change from 0 to 512
[  441.620891][T14853] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  441.773478][T14854] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  443.069049][T14860] 9p: Bad value for 'wfdno'
[  443.257434][T14854] EXT4-fs error (device loop8): ext4_orphan_get:1397: inode #15: comm syz.8.3290: iget: bad i_size value: 38620345925642
[  443.272483][T14854] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  443.278422][    C1] EXT4-fs (loop8): error count since last fsck: 1
[  443.294524][    C1] EXT4-fs (loop8): initial error at time 2000000147: ext4_orphan_get:1397: inode 15
[  443.304124][    C1] EXT4-fs (loop8): last error at time 2000000147: ext4_orphan_get:1397: inode 15
[  443.930805][T14854] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.3290: couldn't read orphan inode 15 (err -117)
[  443.945458][T14854] loop8: lost filesystem error report for type 5 error -117
[  444.247844][T14854] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  444.417001][T14853] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.3288: iget: bad i_size value: 38620345925642
[  444.450453][T14853] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  444.454593][T14853] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.3288: couldn't read orphan inode 15 (err -117)
[  444.477956][T14853] loop5: lost filesystem error report for type 5 error -117
[  444.491511][T14853] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  444.574777][ T7633] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  444.585519][T13914] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  444.592825][   T28] audit: type=1400 audit(2000000148.434:2402): avc:  denied  { ioctl } for  pid=14867 comm="syz.9.3295" path="time:[4026531834]" dev="nsfs" ino=4026531834 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  444.634841][T14869] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3295'.
[  444.710811][T14873] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3299'.
[  444.723667][T14873] netlink: 'syz.6.3299': attribute type 13 has an invalid length.
[  444.736748][   T28] audit: type=1400 audit(2000000148.563:2403): avc:  denied  { bind } for  pid=14867 comm="syz.9.3295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  444.742026][T14873] netlink: 'syz.6.3299': attribute type 17 has an invalid length.
[  444.789048][   T28] audit: type=1400 audit(2000000148.563:2404): avc:  denied  { bind } for  pid=14867 comm="syz.9.3295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  444.976105][T14893] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3304'.
[  444.987284][T14893] tipc: Started in network mode
[  444.995574][T14893] tipc: Node identity 00002d0000005f120000000000000001, cluster identity 4711
[  445.006574][T14893] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  445.197653][T14899] 9p: Bad value for 'wfdno'
[  445.408835][T14900] loop5: detected capacity change from 0 to 1024
[  446.054074][T14904] loop6: detected capacity change from 0 to 512
[  446.248523][T14904] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  446.456936][T14900] EXT4-fs: test_dummy_encryption option not supported
[  447.675186][T14904] EXT4-fs error (device loop6): ext4_orphan_get:1397: inode #15: comm syz.6.3307: iget: bad i_size value: 38620345925642
[  447.692947][T14904] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  447.693348][T14904] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.3307: couldn't read orphan inode 15 (err -117)
[  447.715381][T14904] loop6: lost filesystem error report for type 5 error -117
[  447.716997][T14904] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  448.049629][T14908] loop5: detected capacity change from 0 to 512
[  448.233871][   T28] audit: type=1400 audit(2000000151.590:2405): avc:  denied  { write } for  pid=14901 comm="syz.6.3307" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  449.204882][ T9005] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm kworker/u8:17: bg 0: block 5: invalid block bitmap
[  449.323346][T14913] loop9: detected capacity change from 0 to 2048
[  449.996616][T14908] EXT4-fs warning (device loop5): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop5.
[  450.020750][T14913]  loop9: p1 < > p4
[  450.041115][T14913] loop9: p4 size 722688 extends beyond EOD, truncated
[  450.075729][T14920] lo speed is unknown, defaulting to 1000
[  450.113458][T14920] xfrm0 speed is unknown, defaulting to 1000
[  450.125325][ T9005] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  450.138086][ T9005] EXT4-fs (loop6): This should not happen!! Data will be lost
[  450.138086][ T9005] 
[  450.148030][ T9005] EXT4-fs (loop6): Total free blocks count 0
[  450.154671][ T9005] EXT4-fs (loop6): Free/Dirty block details
[  450.160598][ T9005] EXT4-fs (loop6): free_blocks=0
[  450.165581][ T9005] EXT4-fs (loop6): dirty_blocks=16000
[  450.171138][ T9005] EXT4-fs (loop6): Block reservation details
[  450.177246][ T9005] EXT4-fs (loop6): i_reserved_data_blocks=16000
[  450.317808][ T2979]  loop9: p1 < > p4
[  450.327805][ T8206] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28
[  450.335603][T14932] loop5: detected capacity change from 0 to 1024
[  450.349447][ T2979] loop9: p4 size 722688 extends beyond EOD, truncated
[  450.356643][T14587] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost
[  450.385526][T14927] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3313'.
[  450.407616][T14932] EXT4-fs: Ignoring removed orlov option
[  450.415445][T14932] EXT4-fs (loop5): stripe (7) is not aligned with cluster size (4096), stripe is disabled
[  450.425871][T14936] loop9: detected capacity change from 0 to 256
[  450.433016][T14927] loop4: detected capacity change from 0 to 512
[  450.471838][T14936] FAT-fs (loop9): Directory bread(block 64) failed
[  450.480100][T14936] FAT-fs (loop9): Directory bread(block 65) failed
[  450.490039][T14936] FAT-fs (loop9): Directory bread(block 66) failed
[  450.497365][T14936] FAT-fs (loop9): Directory bread(block 67) failed
[  450.504171][T14936] FAT-fs (loop9): Directory bread(block 68) failed
[  450.511602][T14936] FAT-fs (loop9): Directory bread(block 69) failed
[  450.518538][T14936] FAT-fs (loop9): Directory bread(block 70) failed
[  450.525953][T14936] FAT-fs (loop9): Directory bread(block 71) failed
[  450.532808][T14936] FAT-fs (loop9): Directory bread(block 72) failed
[  450.540919][T13176] udevd[13176]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory
[  450.544404][ T3286] udevd[3286]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory
[  450.567069][T14927] EXT4-fs: Ignoring removed bh option
[  450.579580][T14936] FAT-fs (loop9): Directory bread(block 73) failed
[  450.589964][T14927] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  450.599203][T14932] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  450.618250][T14927] EXT4-fs (loop4): 1 truncate cleaned up
[  450.623724][T14932] EXT4-fs (loop5): orphan cleanup on readonly fs
[  450.641070][T14932] EXT4-fs error (device loop5): __ext4_get_inode_loc:4885: comm syz.5.3316: Invalid inode table block 0 in block_group 0
[  450.884046][T14941] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3317'.
[  450.897313][T14932] loop5: lost filesystem error report for type 5 error -117
[  450.908242][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  450.923308][    C1] EXT4-fs (loop5): initial error at time 2000000154: __ext4_get_inode_loc:4885
[  450.933096][    C1] EXT4-fs (loop5): last error at time 2000000154: __ext4_get_inode_loc:4885
[  451.011475][T14932] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6383: Corrupt filesystem
[  451.024655][T14932] loop5: lost filesystem error report for type 5 error -117
[  451.024764][T14932] EXT4-fs error (device loop5): ext4_quota_write:7423: inode #3: comm syz.5.3316: mark_inode_dirty error
[  451.059525][T14932] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  451.059661][T14932] Quota error (device loop5): write_blk: dquota write failed
[  451.082479][T14932] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  451.093624][T14932] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.3316: Failed to acquire dquot type 0
[  451.105332][T14932] loop5: lost filesystem error report for type 5 error -117
[  451.105551][T14932] EXT4-fs error (device loop5): __ext4_get_inode_loc:4885: comm syz.5.3316: Invalid inode table block 0 in block_group 0
[  451.123207][T14927] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  451.126767][T14932] loop5: lost filesystem error report for type 5 error -117
[  451.142828][   T28] audit: type=1400 audit(2000000154.459:2406): avc:  denied  { setopt } for  pid=14926 comm="syz.4.3313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  451.172233][T14932] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6383: Corrupt filesystem
[  451.183515][T14932] loop5: lost filesystem error report for type 5 error -117
[  451.183732][T14932] EXT4-fs error (device loop5): ext4_ext_truncate:4557: inode #15: comm syz.5.3316: mark_inode_dirty error
[  451.205412][T14932] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  451.205600][T14932] EXT4-fs error (device loop5): __ext4_get_inode_loc:4885: comm syz.5.3316: Invalid inode table block 0 in block_group 0
[  451.229214][T14932] loop5: lost filesystem error report for type 5 error -117
[  451.229369][T14932] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6383: Corrupt filesystem
[  451.247459][T14932] loop5: lost filesystem error report for type 5 error -117
[  451.248417][T14932] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem
[  451.269252][T14932] loop5: lost filesystem error report for type 5 error -117
[  451.269367][T14932] EXT4-fs error (device loop5): __ext4_get_inode_loc:4885: comm syz.5.3316: Invalid inode table block 0 in block_group 0
[  451.290311][T14932] loop5: lost filesystem error report for type 5 error -117
[  451.290456][T14932] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6383: Corrupt filesystem
[  451.307882][T14932] loop5: lost filesystem error report for type 5 error -117
[  451.308313][T14932] EXT4-fs error (device loop5): ext4_truncate:4690: inode #15: comm syz.5.3316: mark_inode_dirty error
[  451.329937][T14932] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  451.330103][T14932] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem
[  451.354570][T14932] EXT4-fs (loop5): 1 truncate cleaned up
[  451.360884][T14932] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  451.391242][T13241] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  451.449328][T14951] EXT4-fs error (device loop5): ext4_search_dir:1474: inode #2: block 16: comm syz.5.3316: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0
[  451.561046][   T28] audit: type=1326 audit(2000000154.865:2407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14949 comm="syz.4.3321" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7fab3f046b57 code=0x0
[  451.608852][T13914] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  452.257582][T14961] 9p: Bad value for 'rfdno'
[  452.269617][   T28] audit: type=1400 audit(2000000155.493:2408): avc:  denied  { write } for  pid=14960 comm="syz.5.3323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  452.414866][T14967] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3326'.
[  452.613463][T14974] IPv6: Can't replace route, no match found
[  452.688334][T14976] syzkaller0: entered promiscuous mode
[  452.694420][T14976] syzkaller0: entered allmulticast mode
[  452.993242][   T28] audit: type=1400 audit(2000000156.185:2409): avc:  denied  { name_connect } for  pid=14981 comm="syz.8.3333" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[  453.028967][T14978] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3331'.
[  453.085974][   T28] audit: type=1400 audit(2000000156.240:2410): avc:  denied  { ioctl } for  pid=14979 comm="syz.5.3332" path="/dev/sg0" dev="devtmpfs" ino=137 ioctlcmd=0x227e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  453.302617][T14992] IPv6: Can't replace route, no match found
[  453.392655][T14993] ==================================================================
[  453.400827][T14993] BUG: KCSAN: data-race in __anon_vma_prepare / do_wp_page
[  453.408400][T14993] 
[  453.410747][T14993] write to 0xffff888133dbf040 of 8 bytes by task 14997 on cpu 0:
[  453.418745][T14993]  __anon_vma_prepare+0x172/0x2f0
[  453.424066][T14993]  handle_mm_fault+0x24ae/0x2e70
[  453.429292][T14993]  __get_user_pages+0x1290/0x1f10
[  453.434433][T14993]  __mm_populate+0x242/0x390
[  453.439141][T14993]  vm_mmap_pgoff+0x23b/0x2d0
[  453.444457][T14993]  ksys_mmap_pgoff+0xc1/0x310
[  453.449677][T14993]  x64_sys_call+0x14df/0x3020
[  453.454911][T14993]  do_syscall_64+0x12c/0x3b0
[  453.459881][T14993]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  453.466057][T14993] 
[  453.468686][T14993] read to 0xffff888133dbf040 of 8 bytes by task 14993 on cpu 1:
[  453.477114][T14993]  do_wp_page+0x65c/0x2040
[  453.481570][T14993]  handle_mm_fault+0x8b9/0x2e70
[  453.486637][T14993]  do_user_addr_fault+0x3fd/0x1050
[  453.491961][T14993]  exc_page_fault+0x62/0xa0
[  453.496669][T14993]  asm_exc_page_fault+0x26/0x30
[  453.501635][T14993]  __put_user_nocheck_4+0x3/0x10
[  453.506925][T14993]  ____sys_recvmsg+0x1a1/0x280
[  453.511899][T14993]  ___sys_recvmsg+0x11f/0x3b0
[  453.516773][T14993]  do_recvmmsg+0x1ef/0x560
[  453.521380][T14993]  __x64_sys_recvmmsg+0xe5/0x170
[  453.526772][T14993]  x64_sys_call+0x80f/0x3020
[  453.531575][T14993]  do_syscall_64+0x12c/0x3b0
[  453.536816][T14993]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  453.543263][T14993] 
[  453.545697][T14993] value changed: 0x0000000000000000 -> 0xffff888119e6fde0
[  453.553620][T14993] 
[  453.556264][T14993] Reported by Kernel Concurrency Sanitizer on:
[  453.562790][T14993] CPU: 1 UID: 0 PID: 14993 Comm: syz.4.3335 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  453.574370][T14993] Tainted: [W]=WARN
[  453.578457][T14993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  453.588628][T14993] ==================================================================
[  454.126911][T14991] netlink: 'syz.5.3336': attribute type 1 has an invalid length.