last executing test programs:

1m20.784116223s ago: executing program 1 (id=1806):
inotify_init()
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x86f, &(0x7f0000000400)={0x0, 0x79af, 0x400, 0xfffffffe, 0x214}, &(0x7f0000000700)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_setup(0x10a, &(0x7f0000000340)={0x0, 0x80334c, 0x40, 0x6, 0x3d3}, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000300))
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7})
write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x20, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x40, 0x185100, 0x12345})
io_uring_enter(r0, 0x238e, 0xc1040000, 0x43, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)

1m20.281860498s ago: executing program 1 (id=1808):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1943}, 0x3a, 0x0, 0x0, 0x8, 0x7ffd, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000009080)=@bpf_lsm={0x18, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x61880}, 0x94)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x6, 0x1540, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x22072, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x149040, 0x2)
syz_open_procfs(0x0, &(0x7f0000000200)='uid_map\x00')
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace', 0x0, 0x0)
pipe2$9p(&(0x7f0000000240), 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000012c0)=ANY=[@ANYRES8=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r0, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000000))

1m19.791308032s ago: executing program 1 (id=1812):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x4fa, &(0x7f00000005c0)="$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")
quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101})
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x7, 0x6}, 0x1004, 0x0, 0x10000, 0x3, 0x2, 0x80004001, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000000100)=""/203, 0x0, 0xcb, 0x1}, 0x28)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x6000, @fd, 0x0, 0x200004, 0x7, 0xab4a082213aa80f9, 0x1, {0x2}})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010200000000000000000000000014000780050014000700000008001240000500000900020073797a3200000000050001000700000011000300686173683a6e65742c6e6574000000000500050002000000050004"], 0x60}}, 0x0)

1m18.6507498s ago: executing program 1 (id=1824):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200000, &(0x7f0000000040)={[{@nouid32}, {@errors_remount}, {@lazytime}, {@noquota}]}, 0x1, 0x51b, &(0x7f00000001c0)="$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")
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb2993000)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, 0x0, 0x840)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0)
r2 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc)
fallocate(r2, 0x0, 0x0, 0x8800000)
getsockname(r2, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101542, 0x1d)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0x8}}, 0xfffffdb3)

1m17.803315002s ago: executing program 1 (id=1845):
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
socket$inet(0x2, 0x2, 0x0)
r3 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000)

1m17.424613911s ago: executing program 1 (id=1839):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
r0 = creat(&(0x7f0000000200)='./file0\x00', 0x109)
close(r0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
r1 = timerfd_create(0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
readv(r1, &(0x7f0000000240)=[{&(0x7f0000000100)=""/128, 0x80}], 0x1)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})
r3 = syz_io_uring_setup(0x1ca0, &(0x7f0000000280)={0x0, 0x60d1, 0x400, 0x0, 0x40000333}, &(0x7f00000006c0)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xfffffe62}], 0x1})
io_uring_enter(r3, 0x47ba, 0x0, 0x28, 0x0, 0x0)

1m17.379075794s ago: executing program 32 (id=1839):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
r0 = creat(&(0x7f0000000200)='./file0\x00', 0x109)
close(r0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
r1 = timerfd_create(0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
readv(r1, &(0x7f0000000240)=[{&(0x7f0000000100)=""/128, 0x80}], 0x1)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})
r3 = syz_io_uring_setup(0x1ca0, &(0x7f0000000280)={0x0, 0x60d1, 0x400, 0x0, 0x40000333}, &(0x7f00000006c0)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xfffffe62}], 0x1})
io_uring_enter(r3, 0x47ba, 0x0, 0x28, 0x0, 0x0)

8.229916366s ago: executing program 2 (id=2367):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x22000402, &(0x7f0000000300)={[{@dioread_lock}, {@noblock_validity}, {@data_err_ignore}, {@discard}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@mb_optimize_scan}, {@barrier_val={'barrier', 0x3d, 0x8}}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x85, 0x4f1, &(0x7f0000000b00)="$eJzs3LtvHNUaAPBvxs887eRG99487o0hICwCduwESEEBCKQ0ICQoQmkcE4U4CUqMRKKIGIRCifgLAiUSEhUNFUgIAQ0gWuhRpAi5iaFAi87ujL221/b6FZPs7yft7jmzZ+bMNzNn5+ycnQ2gZfWlpyxie0T8EhE9tezcAn21l+mpq6N/TF0dzaJSeen3rFru9tTV0bJoOd+2ItOfR+TvZbG/Qb2XLl85OzI+PnaxyA9OnHtj8NLlK4+eOTdyeuz02Pnh48ePHR164vHhx5qK49oy76e4bu97+8KBvSde+fD50Uq8+t2naX23F+/Xx1HT21S9iyu3RqVqdnpn9fnBNS79n2ZHXTpr38QVYUXaIiLtro5q+++JtpjdeT3x3Lszma83aQWBDZPOTbsWTG0rXvPi7AXcmzJtHFpUecZP33/Lx53sf2y2W0+n57Fq/NPF44cXatsmT99le2vf2NvmzZcXr/9usMzuVL42Q6Vnmfq3R8TJyT9vpEc0vA6xhKzpkgAAM75M/Z9HGvX/8jl9m53FGEpvRByOiN0R8a+I2DPTE4r4T0T8d4X1983LL+z//LRlhYtckdT/e7IY2yoftXfKuLKZ3I5q/B3Za2fGx44U26Q/OrpSfmiJOr569ucPFnuvr67/lx6p/rIvWKzHzfbuufOcGpkYWUPIc9x6J2Jfe6P4s5mRgLQF9kbEvlUsP22zMw9/ciCld25b+P7y8S8iKwYu1qjyccRDtf0/GfPir6sq1bTY+ORgd4yPHRksj4qFvv/x+ov1+Y669Jz4u5uLqXu1wTaQ9v/Wecd/bflF/HlR4bzx2skV1HH91/cXjWpO/G1xY3oqi5PFwmtjivnN9q6I2DK72dLx35m9XE13FtPeGpmYuDgU0VlMmDN9eLa+Ml+WT/H3H2rc/ndH/PVRMd/+iEgH8f8i4v8RcbBY9/si4v6IOLRE/N8+88DrS2+hVRz/6yTFf6rh59/M8d+b1Y/XryLRdvabLxarv6nPv65j1VR/MaWZz79mV3At2w4AAADuFnl1DDrLB8p03cWpPbE1H79waeJwX7x5/lRtrLo3OvLySldP3fXQoeLacJkfTunO2fzRiNhV/aXRlmp+YPTC+I7NDByo3qtTtv+uYtrAQO31t/k/egHuPSsaR6v/0dlnn6//ygB3lPs1oXVp/9C6tH9oXdo/tK5G7f9axPQmrApwhzV3/q+43RzuQfr/0Lq0f2hds+3fL/6ghSy8Jb78u5XV3Ok/m9h9Yk2zb3ii0rMhS55c+VxtGxRp1P1px+KFs4hYXRWRL12mMy5f6V6ncNIZaqky5U0rTS8wX7bMU8ttlo41/SdGShwsEl0R0exc15rYp+t3/CSZy34AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBd7e8AAAD//1I03Cw=")
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4)
syz_emit_ethernet(0x32, &(0x7f0000000740)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb080045000024000040020011"], 0x0)
syz_emit_ethernet(0x4a, &(0x7f00000001c0)=ANY=[@ANYBLOB="e904a20000000180c200000e86d14500003c0000e0000011907800000000000000004e2100000028907861040000262f91ba4f8f177fe82d5b01000100f9f432990d96ebc85e2920c973053f5290720000000000000003ec48900a6f09189f33da3f72ca5c12f9704cac0bacb42360e69c81837a1952fc9d6cf6b6d93444afa2cea3e0422537d41ee05b85a0ce8b6212ecc43541a9ff4c86e1326fad4345658ad01520f44dd0383a7dcc6f77b92d20cf364d"], 0x0)
unshare(0x8040480)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x24daa, 0x20000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000044}, 0x20008040)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
getdents64(r2, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0)

8.148549131s ago: executing program 2 (id=2368):
socket$packet(0x11, 0x3, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101840, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff)
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x10000, &(0x7f0000000640), 0x1, 0x5c5, &(0x7f0000001a00)="$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")
fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0xee01, 0x1000)

7.606445178s ago: executing program 3 (id=2371):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0700000004000000080000", @ANYRES32=0x0, @ANYBLOB], 0x48)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="851000000100000095000000"], 0x0, 0x4, 0xa6, &(0x7f0000000340)=""/166}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x3}]}, @func_proto, @restrict={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x4a}, 0x28)
getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f0000000280)={'IDLETIMER\x00'}, 0x0)
syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0)

7.602119798s ago: executing program 0 (id=2372):
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05000000040000000c0000000b"], 0x50)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x6, 0x5, &(0x7f0000000000)=0xaaac, 0x4)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10)
r2 = socket(0x2, 0x80805, 0x0)
getsockopt$bt_hci(r2, 0x84, 0x6c, &(0x7f0000000000)=""/4102, &(0x7f00000010c0)=0x1006)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0600"], 0x50)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = fsopen(&(0x7f00000001c0)='mqueue\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000100)='vfat\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r3)
r5 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x400, 0x4, 0x50}, &(0x7f0000000040)=<r6=>0x0, &(0x7f0000000080)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000200)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r5, 0x47ba, 0x3e82, 0x60, 0x0, 0x0)

6.585734659s ago: executing program 4 (id=2373):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x12, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x1, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0xa}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4048000}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x40040e0}, 0x2880)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
r8 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r8, &(0x7f0000000340)='O', 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x10, r7, 0x1, 0xf0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14)

6.551420951s ago: executing program 0 (id=2374):
openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x30, 0x3, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x4, 0x1, 0x3a}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x108}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48094}, 0x20000c00)
connect$802154_dgram(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)

6.056584255s ago: executing program 2 (id=2375):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f00000001c0)={[{@noinit_itable}]}, 0x1, 0x512, &(0x7f0000000c40)="$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")
r0 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24)
sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x16, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r2, &(0x7f0000000580)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1)
recvmmsg$unix(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00')
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dbdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x40448c5)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0)
pread64(r3, &(0x7f0000001180)=""/4110, 0x100e, 0x100000000)
sigaltstack(&(0x7f0000000000)={&(0x7f00000000c0)=""/97, 0x180000003, 0x61}, &(0x7f0000000140)={&(0x7f00000021c0)=""/4096, 0x0, 0x1000})

5.907612473s ago: executing program 2 (id=2378):
pwritev(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffb, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x6340, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r0 = socket$kcm(0x23, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x400c84c)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89ed, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e00000004000000040000000300000000000000", @ANYRES32, @ANYBLOB="0001000100"/18, @ANYRES32=0x0, @ANYBLOB='\x00'/19], 0x48)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

5.745888371s ago: executing program 4 (id=2379):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x7, 0x2, 0x80000011, 0x26, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
r3 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4)
r4 = getpid()
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30)

5.580560029s ago: executing program 0 (id=2380):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x22000402, &(0x7f0000000300)={[{@dioread_lock}, {@noblock_validity}, {@data_err_ignore}, {@discard}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@mb_optimize_scan}, {@barrier_val={'barrier', 0x3d, 0x8}}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x85, 0x4f1, &(0x7f0000000b00)="$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")
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4)
syz_emit_ethernet(0x32, &(0x7f0000000740)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb080045000024000040020011"], 0x0)
syz_emit_ethernet(0x4a, &(0x7f00000001c0)=ANY=[@ANYBLOB="e904a20000000180c200000e86d14500003c0000e0000011907800000000000000004e2100000028907861040000262f91ba4f8f177fe82d5b01000100f9f432990d96ebc85e2920c973053f5290720000000000000003ec48900a6f09189f33da3f72ca5c12f9704cac0bacb42360e69c81837a1952fc9d6cf6b6d93444afa2cea3e0422537d41ee05b85a0ce8b6212ecc43541a9ff4c86e1326fad4345658ad01520f44dd0383a7dcc6f77b92d20cf364d"], 0x0)
unshare(0x8040480)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x24daa, 0x20000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000044}, 0x20008040)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
getdents64(r2, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0)

5.285907204s ago: executing program 3 (id=2381):
r0 = socket(0x80000000000000a, 0x2, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
ioctl$TIOCVHANGUP(r1, 0x5437, 0x0)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0xb0000004})
setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108)
r4 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000080)={0x24, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]})
socket$inet6(0xa, 0x2, 0x0)
close_range(r5, 0xffffffffffffffff, 0x0)

5.224076787s ago: executing program 0 (id=2382):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x400, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x4014, &(0x7f00000000c0), 0x1, 0x40c, &(0x7f0000000280)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
write(r2, &(0x7f0000004200)='t', 0x1)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfd}, 0x0, 0x0, 0x1, 0x0, 0x2, 0xff, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x9)
sendfile(r2, r1, 0x0, 0x3ffff)
sendfile(r2, r1, 0x0, 0x7ffff000)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
socket$kcm(0x23, 0x5, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d2d, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x1, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20)

4.807164848s ago: executing program 3 (id=2383):
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x0, 0x7, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240), 0xfc, 0x550, &(0x7f0000000340)="$eJzs3d9rW1UcAPDvTdv91nUwhvoghT04mUvX1h8TfJiPosOBvs/Q3pXRZBlNOtY6cHtwL77IEEQciH+A7z4O/wH/ioEOhoyiD75EbnrTZWvSZm22Zubzgduec89Nzz0593t6bk5CAhhaE9mPQsSrEfFtEnG4rWw08sKJteNWH16fzbYkGo3P/koiyfe1jk/y3wfzzCsR8dvXEScLG+utLa8slMrldDHPT9YrVyZryyunLlVK8+l8enl6ZubMOzPT77/3bt/a+ub5f3749O5HZ745vvr9L/eP3E7ibBzKy9rbsQM32jMTMZE/J2Nx9okDp/pQ2SBJdvsE2JaRPM7HIhsDDsdIHvXA/99XEdEAhlQi/mFIteYBrXv7Pt0HvzAefLh2A7Sx/aNrr43Evua90YHV5LE7o+x+d7wP9Wd1/PrnndvZFv17HQJgSzduRsTp0dGN41+Sj3/bd7qHY56sw/gHz8/dbP7zVqf5T2F9/hMd5j8HO8Tudmwd/4X7faimq2z+90HH+e/6otX4SJ57qTnnG0suXiqn2dj2ckSciLG9WX6z9Zwzq/ca3cra53/ZltXfmgvm53F/dO/jj5kr1Us7aXO7BzcjXus4/03W+z/p0P/Z83G+xzqOpXde71a2dfufrcbPEW907P9HK1rJ5uuTk83rYbJ1VWz0961jv3erf7fbn/X/gc3bP560r9fWnr6On/b9m3Yr2+71vyf5vJnek++7VqrXF6ci9iSfbNw//eixrXzr+Kz9J45vPv51uv73R8QXPbb/1tFbXQ8dhP6fe6r+f/rEvY+//LFb/b31/9vN1Il8Ty/jX68nuJPnDgAAAAAAAAZNISIORVIorqcLhWJx7f0dR+NAoVyt1U9erC5dnovmZ2XHY6zQWuk+3PZ+iKn8/bCt/PQT+ZmIOBIR343sb+aLs9Xy3G43HgAAAAAAAAAAAAAAAAAAAAbEwYh9nT7/n/ljZLfPDnjmfOU3DK/u8Z+X9OObnoCB5P8/DC/xD8NL/MPwEv8wvMQ/DC/xD8NL/MPwEv8AAAAAAAAAAAAAAAAAAAAAAAAAAADQV+fPncu2xurD67NZfu7q8tJC9eqpubS2UKwszRZnq4tXivPV6nw5Lc5WK1v9vXK1emVqOpauTdbTWn2ytrxyoVJduly/cKlSmk8vpGPPpVUAAAAAAAAAAAAAAAAAAADwYqktryyUyuV0UUJiW4nRwTgNiT4ndntkAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBH/gsAAP//sQI4ww==")
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0xd0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', <r2=>0x0})
r3 = socket(0x10, 0x2, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x2251197285d36a80, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0)
socket(0x2b, 0x800, 0x5)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r4 = socket(0x11, 0x2, 0x0)
setsockopt(r4, 0x107, 0x1, &(0x7f0000000000)="110000000000060000071a80010061cc", 0x10)
bind$packet(r1, &(0x7f0000000040)={0x11, 0x1, r2, 0x1, 0x9, 0x6, @multicast}, 0x14)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x2000, {0x0, 0x0, 0x74, r2, {0xfffd, 0x10}, {0x1, 0xfff1}, {0x2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x34004804}, 0x840)

4.794028169s ago: executing program 5 (id=2384):
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r4 = open(0x0, 0x14d142, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
ftruncate(r4, 0x2007ffc)
sendfile(r4, r4, 0x0, 0x800000009)
sched_setscheduler(0x0, 0x5, &(0x7f0000000200))
ioprio_set$uid(0x3, 0x0, 0x0)
write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)

4.511229913s ago: executing program 4 (id=2385):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x6, 0x7ffc0000}]})
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040), 0x0)
r1 = inotify_init()
ioperm(0x2, 0x9, 0x8)
readv(r1, &(0x7f00000001c0), 0x55)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xd3283d036ae269ba, 0x8032, 0xffffffffffffffff, 0x99cef000)
r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_bp={0x0, 0x9}, 0x2000, 0x37, 0x9, 0x7, 0x0, 0x0, 0xefff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r3}, 0xc)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000880)='\t\x00u<20\x96\xe5|\x8d/\x05\xc6@\x15\xb7\xd2Xtf}\xab\xb5\x83s\x8f}8\x9c\b\xfe!\xd8\x8d\xb3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x88\x05\xfa\xe6\x0es*\xda\x1c\xa2D\xecs\x87\xe5\xc7\x97\xde{P. q&\b\xe1i\x0e\xfe\xfd>^#Z\r\x9d\xb9?\xb4\x8d\xebM\xb3\xc8\xa5:\xf5\a\xb2\vf/\x8eT>h\x80\\m\xf0\xfa\x88U')
lseek(0xffffffffffffffff, 0x9, 0x3)
symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00')
lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)

4.158200171s ago: executing program 2 (id=2386):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mkdir(0x0, 0x142)
socket$inet_udp(0x2, 0x2, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
munmap(&(0x7f0000313000/0x2000)=nil, 0x2000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef={0x2, 0x0, 0x0, 0x8, 0x3}]}}, 0x0, 0x26}, 0x28)
sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0xd8}}, 0x0)
mmap(&(0x7f00001d8000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0)
write$sndseq(0xffffffffffffffff, &(0x7f0000000200), 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x2, 0xca0c, 0xda, 0x5, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)

3.217371158s ago: executing program 3 (id=2387):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0)
pread64(r1, 0x0, 0x0, 0xcd32)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020300030e0000002cbd7040fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e22ac1414bb000000000000000002000100000000000000fb0c00000080030005002b00000002004e22ac14140a000000000000000001001400"], 0x70}, 0x1, 0x7}, 0x0)

2.811473998s ago: executing program 5 (id=2388):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xc, 0xd, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000)
ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000540)=0x3)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2b4, &(0x7f0000000280)="$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")
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$xdp(&(0x7f0000182000/0x4000)=nil, 0x4000, 0x3, 0x1010, 0xffffffffffffffff, 0x100000000)
r1 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x12)
getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8)

2.605181919s ago: executing program 5 (id=2389):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x22000402, &(0x7f0000000300)={[{@dioread_lock}, {@noblock_validity}, {@data_err_ignore}, {@discard}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@mb_optimize_scan}, {@barrier_val={'barrier', 0x3d, 0x8}}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x85, 0x4f1, &(0x7f0000000b00)="$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")
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4)
syz_emit_ethernet(0x32, &(0x7f0000000740)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb080045000024000040020011"], 0x0)
syz_emit_ethernet(0x4a, &(0x7f00000001c0)=ANY=[@ANYBLOB="e904a20000000180c200000e86d14500003c0000e0000011907800000000000000004e2100000028907861040000262f91ba4f8f177fe82d5b01000100f9f432990d96ebc85e2920c973053f5290720000000000000003ec48900a6f09189f33da3f72ca5c12f9704cac0bacb42360e69c81837a1952fc9d6cf6b6d93444afa2cea3e0422537d41ee05b85a0ce8b6212ecc43541a9ff4c86e1326fad4345658ad01520f44dd0383a7dcc6f77b92d20cf364d"], 0x0)
unshare(0x8040480)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x24daa, 0x20000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000044}, 0x20008040)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
read(r2, 0x0, 0x0)
getdents64(0xffffffffffffffff, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0)

1.605012239s ago: executing program 5 (id=2390):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x21afd1ea604a663a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="40200000000000090000009500090000000000"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
socket$inet6(0xa, 0x2, 0x0)
r4 = socket$inet(0x2, 0x2, 0x0)
setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x1, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000340)=r3, 0x4)
unshare(0x22020600)
pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x1600, 0x0, 0x3)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a30000000001400078005001500f01f000008001240000700000d000300686173683a6e657400000000050005000a00000005"], 0x5c}}, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, 0x0, 0x0)
sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0)

1.397216729s ago: executing program 3 (id=2391):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x399446c, 0x0, 0x1, 0x0, &(0x7f0000000080))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
renameat2(r0, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000200)='./file0\x00', 0x4)
renameat2(r0, &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000100)='./file0\x00', 0x2)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94)
r2 = socket$inet6(0xa, 0x3, 0x3)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
bind$netlink(r4, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, r5, 0x40046}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0x6d}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8, 0xa, r5}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvlan1\x00', <r6=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r1, r6, 0x25, 0x2, @void}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)

1.353483922s ago: executing program 0 (id=2392):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0700000004000000080000", @ANYRES32=0x0, @ANYBLOB], 0x48)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="851000000100000095000000"], 0x0, 0x4, 0xa6, &(0x7f0000000340)=""/166}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x3}]}, @func_proto, @restrict={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x4a}, 0x28)
getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f0000000280)={'IDLETIMER\x00'}, 0x0)
syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0)

1.298199324s ago: executing program 3 (id=2393):
r0 = socket(0x2b, 0x80801, 0x1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}, 0xf5ff}], 0xf00, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2)
shutdown(r1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x7fffffe, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @mcast1, [0x0, 0x0, 0x0, 0xffffff], [0x0, 0x0, 0x4c62d6309aaa1bde, 0xff000000], 'ip6tnl0\x00', 'nicvf0\x00', {}, {0xff}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x4, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000004700))
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f00000004c0)={0xffffffffffffffa6, {0xe, 0x5, 0x8, 0x826, 0x7fffffff}})
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0)

1.296360024s ago: executing program 4 (id=2394):
r0 = socket(0x80000000000000a, 0x2, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
ioctl$TIOCVHANGUP(r1, 0x5437, 0x0)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0xb0000004})
setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108)
r4 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000080)={0x24, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]})
socket$inet6(0xa, 0x2, 0x0)
close_range(r5, 0xffffffffffffffff, 0x0)

1.236908887s ago: executing program 4 (id=2395):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0xfffffd6f, &(0x7f0000000400)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
write$tun(0xffffffffffffffff, 0x0, 0x19)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r4, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054)

1.118188164s ago: executing program 5 (id=2396):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
syz_io_uring_setup(0x109, 0x0, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x14, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48)
memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2)
bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f00000001c0)={r2, &(0x7f00000000c0), 0x0}, 0x20)
r3 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r3, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10)
sendmsg$rds(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x8}], 0x18, 0x8004}, 0x0)
unshare(0x20000400)
r4 = socket$nl_route(0x10, 0x3, 0x0)
quotactl_fd$Q_GETFMT(r4, 0xffffffff80000401, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0xd, &(0x7f0000000000), 0x143}, 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))

1.087346505s ago: executing program 2 (id=2397):
epoll_create1(0x80000)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000680)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@mb_optimize_scan}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)

200.25983ms ago: executing program 4 (id=2398):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0)
write$bt_hci(r3, &(0x7f0000000bc0)={0x1, @remote_name_req_cancel={{0x41a, 0x6}}}, 0xa)
sendfile(r3, r1, 0x0, 0x40001)
sendfile(r3, r2, 0x0, 0x7ffff000)
sendmsg$nl_route_sched(r0, 0x0, 0x0)

199.573909ms ago: executing program 0 (id=2408):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', <r1=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, r1, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0xb1, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000aaaaaaaaaa1081004e0086dd641976df00773201fe880000000000000000000000000001fc010000000000000000000000000001d212103a4a172bfb3434879bedf1343ec77830f62d28ea9e9814263f219f5654ee632321b3d34996caabc848439cf4aa16467ea5f65bca2730bd61cb7d7236f57968696578b3de7a19323ec5748f0457db75235110cd97afd1be96f7a24d750808e984b7f4f009bd1d52ab641ace6be6c9eb6519890a1e56f67f428c818906af720db22517404d2e5025b43db8b8f5c907ce038f560b0719e46d0ec235a6650a4ff22d2fb0493018b72510c09e6a5aec741099a900e5ce4a4beeb2b0bd42"], 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_usb_connect(0x6, 0x0, 0x0, 0x0)
r4 = syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0x80fd, 0x10, 0x4, 0x2cf}, &(0x7f0000000300)=<r5=>0x0, &(0x7f00000002c0)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x40, 0x4004, @fd=r7, 0x0, 0x8, 0x400, 0x4})
io_uring_enter(r4, 0x47bc, 0xf5, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r8 = syz_clone(0x82102400, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_pidfd_open(r8, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)

0s ago: executing program 5 (id=2399):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
wait4(0x0, 0x0, 0xe000000b, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
syz_open_dev$loop(0x0, 0x7, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x17008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$inet6_udplite(0xa, 0x2, 0x88)
r4 = syz_io_uring_setup(0x8d6, &(0x7f00000000c0)={0x0, 0xeae7, 0x0, 0x6, 0x39a}, &(0x7f0000000000)=<r5=>0x0, &(0x7f0000000080)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r3, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20000044})
io_uring_enter(r4, 0x2afd, 0x308b, 0xc, 0x0, 0x0)

kernel console output (not intermixed with test programs):

sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  140.043757][   T28] audit: type=1400 audit(1774472762.587:1286): avc:  denied  { ioctl } for  pid=9662 comm="syz.1.1497" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  140.300414][ T9668] loop0: detected capacity change from 0 to 128
[  140.341279][ T9668] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  140.393162][ T9668] ext4 filesystem being mounted at /326/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  140.496011][ T3319] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  140.570791][ T9679] __nla_validate_parse: 4 callbacks suppressed
[  140.570805][ T9679] netlink: 63 bytes leftover after parsing attributes in process `syz.0.1504'.
[  141.030881][ T9675] loop1: detected capacity change from 0 to 512
[  141.285882][ T9675] EXT4-fs: Ignoring removed nomblk_io_submit option
[  141.333810][ T9672] lo speed is unknown, defaulting to 1000
[  142.010495][ T9675] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  142.023159][ T9675] ext4 filesystem being mounted at /266/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  143.195799][   T28] audit: type=1326 audit(1774472765.737:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9707 comm="syz.3.1512" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fed002fc799 code=0x0
[  143.759448][   T28] audit: type=1400 audit(1774472766.297:1288): avc:  denied  { mount } for  pid=9719 comm="syz.4.1513" name="/" dev="configfs" ino=2055 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  143.826753][   T28] audit: type=1400 audit(1774472766.327:1289): avc:  denied  { search } for  pid=9719 comm="syz.4.1513" name="/" dev="configfs" ino=2055 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  143.867841][   T28] audit: type=1400 audit(1774472766.327:1290): avc:  denied  { search } for  pid=9719 comm="syz.4.1513" name="/" dev="configfs" ino=2055 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  143.895454][   T28] audit: type=1400 audit(1774472766.327:1291): avc:  denied  { read open } for  pid=9719 comm="syz.4.1513" path="/" dev="configfs" ino=2055 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  143.941084][ T9730] syz.3.1516 (9730): attempted to duplicate a private mapping with mremap.  This is not supported.
[  143.965907][ T9733] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1518'.
[  143.981923][ T9733] lo: Caught tx_queue_len zero misconfig
[  144.209495][ T9738] siw: device registration error -23
[  144.232888][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  144.247256][ T9740] syz_tun: entered allmulticast mode
[  144.539693][ T9750] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1523'.
[  144.644477][ T9752] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9752 comm=syz.4.1523
[  144.758565][ T9740] syz_tun: left allmulticast mode
[  144.843802][ T9765] lo speed is unknown, defaulting to 1000
[  145.111862][ T9776] syzkaller0: entered promiscuous mode
[  145.117556][ T9776] syzkaller0: entered allmulticast mode
[  145.169118][ T9781] netlink: 'syz.1.1531': attribute type 15 has an invalid length.
[  145.177381][ T9781] netlink: 11930 bytes leftover after parsing attributes in process `syz.1.1531'.
[  145.420613][ T9799] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1537'.
[  145.523603][ T9804] netlink: 'syz.3.1539': attribute type 1 has an invalid length.
[  145.529897][ T9799] netlink: 'syz.2.1537': attribute type 5 has an invalid length.
[  145.539069][ T9799] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1537'.
[  145.905095][ T9821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1544'.
[  145.924551][ T9821] bridge0: port 3(syz_tun) entered disabled state
[  146.048475][ T9823] bond7: (slave veth11): Enslaving as an active interface with a down link
[  146.073764][ T9823] bond7: (slave veth13): Enslaving as an active interface with a down link
[  146.113091][ T9830] netlink: 'syz.3.1547': attribute type 1 has an invalid length.
[  146.613844][ T9864] syzkaller0: entered promiscuous mode
[  146.619368][ T9864] syzkaller0: entered allmulticast mode
[  146.720835][ T9869] batadv_slave_0: entered promiscuous mode
[  146.740628][ T9871] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1563'.
[  146.750214][ T9871] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1563'.
[  146.803522][ T9878] loop4: detected capacity change from 0 to 512
[  146.829153][ T9878] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  147.053543][ T9892] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1572'.
[  147.067230][   T28] audit: type=1400 audit(1774472769.607:1292): avc:  denied  { append } for  pid=9891 comm="syz.0.1572" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  147.105338][ T9890] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1571'.
[  147.114399][ T9890] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1571'.
[  147.190237][ T9899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1573'.
[  147.359340][ T9906] syzkaller0: entered promiscuous mode
[  147.368828][ T9906] syzkaller0: entered allmulticast mode
[  147.409660][ T9914] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1581'.
[  147.412172][ T9918] syzkaller0: entered promiscuous mode
[  147.427580][ T9918] syzkaller0: entered allmulticast mode
[  147.445710][ T9918] tipc: Started in network mode
[  147.452488][ T9918] tipc: Node identity 1e485e9805f, cluster identity 4711
[  147.463755][ T9918] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  147.472476][ T9917] tipc: Resetting bearer <eth:syzkaller0>
[  147.514345][   T28] audit: type=1326 audit(1774472770.057:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9923 comm="syz.0.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b4eac799 code=0x7ffc0000
[  147.571829][   T28] audit: type=1326 audit(1774472770.057:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9923 comm="syz.0.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b4eac799 code=0x7ffc0000
[  147.622433][   T28] audit: type=1326 audit(1774472770.057:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9923 comm="syz.0.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b4eac799 code=0x7ffc0000
[  147.669933][   T28] audit: type=1326 audit(1774472770.057:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9923 comm="syz.0.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b4eac799 code=0x7ffc0000
[  147.706834][   T28] audit: type=1326 audit(1774472770.087:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9923 comm="syz.0.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f22b4eac799 code=0x7ffc0000
[  147.739521][   T28] audit: type=1326 audit(1774472770.087:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9923 comm="syz.0.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b4eac799 code=0x7ffc0000
[  147.777340][   T28] audit: type=1326 audit(1774472770.087:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9923 comm="syz.0.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b4eac799 code=0x7ffc0000
[  147.801089][   T28] audit: type=1326 audit(1774472770.097:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9923 comm="syz.0.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b4eac799 code=0x7ffc0000
[  147.824940][   T28] audit: type=1326 audit(1774472770.097:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9923 comm="syz.0.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b4eac799 code=0x7ffc0000
[  147.826365][ T9917] tipc: Disabling bearer <eth:syzkaller0>
[  148.039830][ T9955] netlink: 207496 bytes leftover after parsing attributes in process `syz.3.1593'.
[  148.574279][ T9972] delete_channel: no stack
[  148.602329][ T9976] 8021q: adding VLAN 0 to HW filter on device bond8
[  148.610854][ T9976] bond0: (slave bond8): Enslaving as an active interface with an up link
[  148.627790][ T9976] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1603'.
[  148.641783][ T9976] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  148.651885][ T9976] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  148.676426][ T9976] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  148.686108][ T9976] bond0 (unregistering): (slave bond8): Releasing backup interface
[  148.697800][ T9976] bond0 (unregistering): Released all slaves
[  148.735047][ T9981] syzkaller0: entered promiscuous mode
[  148.748750][ T9981] syzkaller0: entered allmulticast mode
[  149.024067][T10000] batman_adv: batadv0: Removing interface: batadv_slave_0
[  149.039193][T10000] batman_adv: batadv0: Removing interface: batadv_slave_1
[  149.457941][T10008] loop1: detected capacity change from 0 to 32768
[  149.732998][T10021] syzkaller0: entered promiscuous mode
[  149.738495][T10021] syzkaller0: entered allmulticast mode
[  149.822422][T10032] loop0: detected capacity change from 0 to 512
[  149.851317][T10032] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  149.864044][T10032] ext4 filesystem being mounted at /351/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  149.920254][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.926931][T10039] lo speed is unknown, defaulting to 1000
[  150.108404][T10050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  150.117993][T10050] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  150.976051][T10078] loop4: detected capacity change from 0 to 1024
[  152.004187][T10098] __nla_validate_parse: 7 callbacks suppressed
[  152.004269][T10098] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1646'.
[  152.034357][T10098] vlan3: entered promiscuous mode
[  152.039720][T10098] bond0: entered promiscuous mode
[  152.044829][T10098] bond_slave_0: entered promiscuous mode
[  152.051713][T10098] bond_slave_1: entered promiscuous mode
[  152.152586][T10103] lo speed is unknown, defaulting to 1000
[  152.182070][   T28] kauditd_printk_skb: 52 callbacks suppressed
[  152.182084][   T28] audit: type=1400 audit(1774473030.723:1354): avc:  denied  { read } for  pid=3497 comm="kworker/0:4" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=30046 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  152.223189][T10103] x_tables: duplicate entry at hook 2
[  152.586443][T10120] loop4: detected capacity change from 0 to 256
[  152.597534][T10120] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  152.621027][T10119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1653'.
[  152.641275][T10119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1653'.
[  152.660442][T10119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1653'.
[  152.673447][T10119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1653'.
[  152.687374][T10119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1653'.
[  152.699645][T10119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1653'.
[  153.079519][T10136] loop1: detected capacity change from 0 to 1024
[  153.086550][T10136] EXT4-fs: Ignoring removed bh option
[  153.112261][T10136] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  153.230554][T10148] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1664'.
[  153.240907][T10149] syzkaller0: entered promiscuous mode
[  153.246452][T10149] syzkaller0: entered allmulticast mode
[  153.275869][T10148] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10148 comm=syz.0.1664
[  153.290425][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  153.310639][T10152] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1667'.
[  153.376177][T10157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1667'.
[  153.391920][ T8747] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  153.422871][ T8747] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  153.460046][ T8747] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  153.469097][ T8747] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  153.758698][T10163] syzkaller0: entered promiscuous mode
[  153.764581][T10163] syzkaller0: entered allmulticast mode
[  153.964380][T10165] loop1: detected capacity change from 0 to 1024
[  154.007513][T10165] EXT4-fs: Ignoring removed orlov option
[  154.018244][T10165] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  154.078680][T10165] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  154.714874][T10169] loop0: detected capacity change from 0 to 2048
[  154.730999][T10165] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2858: Unable to expand inode 12. Delete some EAs or run e2fsck.
[  154.745143][T10165] EXT4-fs error (device loop1): ext4_find_dest_de:2050: inode #12: block 7: comm syz.1.1668: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0
[  154.838782][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  154.854886][T10169] Alternate GPT is invalid, using primary GPT.
[  154.868076][T10169]  loop0: p2 p3 p7
[  155.274177][T10200] syzkaller0: entered promiscuous mode
[  155.280859][T10200] syzkaller0: entered allmulticast mode
[  155.340291][   T10] IPVS: starting estimator thread 0...
[  155.467657][T10207] IPVS: using max 2592 ests per chain, 129600 per kthread
[  155.554101][T10211] syzkaller0: entered promiscuous mode
[  155.559632][T10211] syzkaller0: entered allmulticast mode
[  155.818599][T10215] lo speed is unknown, defaulting to 1000
[  155.924385][T10219] sctp: [Deprecated]: syz.0.1690 (pid 10219) Use of struct sctp_assoc_value in delayed_ack socket option.
[  155.924385][T10219] Use struct sctp_sack_info instead
[  156.042703][T10225] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10225 comm=syz.4.1692
[  156.069873][T10232] netlink: 'syz.0.1694': attribute type 1 has an invalid length.
[  156.088269][T10232] bond8: entered promiscuous mode
[  156.093649][T10232] bond8: entered allmulticast mode
[  156.099010][T10232] 8021q: adding VLAN 0 to HW filter on device bond8
[  156.149633][T10232] 8021q: adding VLAN 0 to HW filter on device bond8
[  156.164420][T10232] bond8: (slave geneve3): making interface the new active one
[  156.173051][T10232] geneve3: entered promiscuous mode
[  156.178604][T10232] geneve3: entered allmulticast mode
[  156.184986][T10232] bond8: (slave geneve3): Enslaving as an active interface with an up link
[  156.195087][T10230] chnl_net:caif_netlink_parms(): no params data found
[  156.208461][T10239] loop4: detected capacity change from 0 to 512
[  156.216900][ T2208] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0
[  156.228512][ T2208] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0
[  156.251441][ T2208] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0
[  156.291997][T10239] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  156.302884][ T2208] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0
[  156.316867][T10239] EXT4-fs (loop4): 1 truncate cleaned up
[  156.325991][T10239] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  156.526525][T10251] -1: renamed from syzkaller0
[  156.622021][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  157.076247][   T28] audit: type=1400 audit(1774473035.613:1355): avc:  denied  { connect } for  pid=10269 comm="syz.3.1707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  157.097820][   T28] audit: type=1400 audit(1774473035.643:1356): avc:  denied  { sys_module } for  pid=10268 comm="syz.2.1706" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  157.139204][   T28] audit: type=1400 audit(1774473035.673:1357): avc:  denied  { write } for  pid=10269 comm="syz.3.1707" path="socket:[30392]" dev="sockfs" ino=30392 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  157.332984][T10289] __nla_validate_parse: 11 callbacks suppressed
[  157.333000][T10289] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1713'.
[  157.385758][   T28] audit: type=1326 audit(1774473035.923:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10290 comm="syz.3.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed002fc799 code=0x7ffc0000
[  157.409831][   T28] audit: type=1326 audit(1774473035.923:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10290 comm="syz.3.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed002fc799 code=0x7ffc0000
[  157.439741][   T28] audit: type=1326 audit(1774473035.923:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10290 comm="syz.3.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed002fc799 code=0x7ffc0000
[  157.463455][   T28] audit: type=1326 audit(1774473035.923:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10290 comm="syz.3.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fed002fc799 code=0x7ffc0000
[  157.512474][   T28] audit: type=1326 audit(1774473035.953:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10290 comm="syz.3.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed002fc799 code=0x7ffc0000
[  157.537951][   T28] audit: type=1326 audit(1774473035.953:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10290 comm="syz.3.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed002fc799 code=0x7ffc0000
[  157.562370][   T28] audit: type=1326 audit(1774473035.923:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10290 comm="syz.3.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed002fc799 code=0x7ffc0000
[  157.592062][   T28] audit: type=1326 audit(1774473036.013:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10290 comm="syz.3.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed002fc799 code=0x7ffc0000
[  157.616035][   T28] audit: type=1326 audit(1774473036.013:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10290 comm="syz.3.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed002fc799 code=0x7ffc0000
[  157.640611][   T28] audit: type=1326 audit(1774473036.013:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10290 comm="syz.3.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed002fc799 code=0x7ffc0000
[  158.122239][T10316] netlink: 'syz.3.1721': attribute type 1 has an invalid length.
[  158.180360][T10316] 8021q: adding VLAN 0 to HW filter on device bond9
[  158.236556][T10316] bond0: (slave bond9): making interface the new active one
[  158.285152][T10316] bond0: (slave bond9): Enslaving as an active interface with an up link
[  158.312484][T10319] bond0: (slave gretap1): Enslaving as a backup interface with an up link
[  158.332522][T10320] bond0: entered promiscuous mode
[  158.351987][T10320] bond9: entered promiscuous mode
[  158.370092][T10320] bond0: entered allmulticast mode
[  158.385375][T10320] bond9: entered allmulticast mode
[  158.402880][T10320] 8021q: adding VLAN 0 to HW filter on device bond0
[  158.677012][T10326] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1724'.
[  158.687883][T10327] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1723'.
[  158.747782][T10328] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1724'.
[  158.813458][T10328] veth17: entered promiscuous mode
[  158.825738][T10328] veth17: entered allmulticast mode
[  159.730278][T10349] lo speed is unknown, defaulting to 1000
[  159.812535][T10361] syz.3.1733 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  159.818999][T10360] netlink: 'syz.4.1732': attribute type 12 has an invalid length.
[  159.833083][T10360] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1732'.
[  159.842263][T10360] bond0: option primary_reselect: invalid value (172)
[  159.884343][T10366] netlink: 'syz.4.1734': attribute type 1 has an invalid length.
[  159.905675][T10366] 8021q: adding VLAN 0 to HW filter on device bond5
[  159.941015][T10366] ip6erspan0: entered promiscuous mode
[  159.982403][T10366] bond5: (slave ip6erspan0): making interface the new active one
[  160.010866][T10366] bond5: (slave ip6erspan0): Enslaving as an active interface with an up link
[  160.033729][T10373] macvlan3: entered promiscuous mode
[  160.039477][T10373] bond5: entered promiscuous mode
[  160.065689][T10373] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  160.075904][T10373] bond5: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  160.092293][T10373] bond5: left promiscuous mode
[  160.236697][T10372] loop0: detected capacity change from 0 to 1024
[  160.260971][T10372] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  160.347885][T10389] loop0: detected capacity change from 0 to 2048
[  160.404433][T10389] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  160.511077][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.066032][T10427] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1752'.
[  161.105677][T10427] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10427 comm=syz.4.1752
[  161.557479][T10433] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1753'.
[  161.591505][T10433] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1753'.
[  161.610939][T10433] veth15: entered promiscuous mode
[  161.616162][T10433] veth15: entered allmulticast mode
[  162.095448][T10444] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1758'.
[  162.109994][T10444] bond5: entered promiscuous mode
[  162.115241][T10444] 8021q: adding VLAN 0 to HW filter on device bond5
[  162.128868][T10444] bridge3: entered promiscuous mode
[  162.148911][T10444] bond5: (slave bridge3): Enslaving as an active interface with an up link
[  162.162036][T10444] macvlan2: entered promiscuous mode
[  162.167355][T10444] macvlan2: entered allmulticast mode
[  162.173527][T10444] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  162.222060][T10452] loop4: detected capacity change from 0 to 1024
[  162.243387][T10454] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1761'.
[  162.265803][T10452] EXT4-fs: inline encryption not supported
[  162.283548][T10452] ext2: Bad value for 'errors'
[  162.466651][T10458] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1763'.
[  164.272151][T10496] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1775'.
[  164.301773][T10493] bond10 (unregistering): Released all slaves
[  164.381654][T10503] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1776'.
[  164.445821][T10499] syzkaller0: entered promiscuous mode
[  164.457237][T10499] syzkaller0: entered allmulticast mode
[  164.465191][T10499] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  164.472599][T10497] tipc: Resetting bearer <eth:syzkaller0>
[  164.480435][T10497] tipc: Disabling bearer <eth:syzkaller0>
[  164.638461][   T28] kauditd_printk_skb: 40 callbacks suppressed
[  164.638485][   T28] audit: type=1400 audit(1774473043.173:1408): avc:  denied  { accept } for  pid=10507 comm="syz.0.1779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  165.516975][   T28] audit: type=1400 audit(1774473043.893:1409): avc:  denied  { unmount } for  pid=10514 comm="syz.2.1781" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  165.778424][T10517] macsec0: left promiscuous mode
[  165.808891][T10517] bond4: left promiscuous mode
[  165.821506][T10517] bridge2: left promiscuous mode
[  165.854260][T10517] ip6gre1: left promiscuous mode
[  165.870723][T10517] ip6gre1: left allmulticast mode
[  165.891278][T10517] bond5: left allmulticast mode
[  165.921470][T10517] bond0: left promiscuous mode
[  165.934320][T10517] bond9: left promiscuous mode
[  165.952020][T10517] bond0: left allmulticast mode
[  165.967727][T10517] bond9: left allmulticast mode
[  166.024738][T10517] veth15: left promiscuous mode
[  166.040687][T10517] veth15: left allmulticast mode
[  167.492911][T10544] syzkaller0: entered promiscuous mode
[  167.509407][T10544] syzkaller0: entered allmulticast mode
[  167.739976][   T28] audit: type=1326 audit(1774473046.283:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10548 comm="syz.0.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b4eac799 code=0x7ffc0000
[  167.765297][   T28] audit: type=1326 audit(1774473046.283:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10548 comm="syz.0.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b4eac799 code=0x7ffc0000
[  167.790731][   T28] audit: type=1326 audit(1774473046.313:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10548 comm="syz.0.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b4eac799 code=0x7ffc0000
[  167.833002][T10554] audit: audit_backlog=65 > audit_backlog_limit=64
[  167.839775][   T28] audit: type=1326 audit(1774473046.313:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10548 comm="syz.0.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b4eac799 code=0x7ffc0000
[  167.863564][T10554] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64
[  167.871472][T10554] audit: backlog limit exceeded
[  167.886653][   T28] audit: type=1326 audit(1774473046.313:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10548 comm="syz.0.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f22b4eac799 code=0x7ffc0000
[  167.985130][T10559] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1796'.
[  168.108674][T10561] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1797'.
[  168.150404][T10561] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10561 comm=syz.0.1797
[  168.525590][T10568] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1799'.
[  168.557663][T10568] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1799'.
[  169.016458][T10571] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1800'.
[  169.076802][T10571] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1800'.
[  169.323661][T10576] lo speed is unknown, defaulting to 1000
[  169.744564][   T28] kauditd_printk_skb: 91 callbacks suppressed
[  169.744578][   T28] audit: type=1400 audit(1774473048.283:1506): avc:  denied  { mount } for  pid=10584 comm="syz.2.1805" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  170.487880][T10603] loop4: detected capacity change from 0 to 8192
[  170.538366][T10607] loop1: detected capacity change from 0 to 512
[  170.547905][T10603]  loop4: p1 < > p2 p4 < p5 >
[  170.553228][T10603] loop4: partition table partially beyond EOD, truncated
[  170.563154][T10603] loop4: p1 start 134217728 is beyond EOD, truncated
[  170.571189][T10603] loop4: p2 size 591360 extends beyond EOD, truncated
[  170.601351][T10603] loop4: p5 size 591360 extends beyond EOD, truncated
[  170.728032][T10607] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  170.741855][T10607] ext4 filesystem being mounted at /312/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  170.772851][T10617] netlink: 'syz.3.1815': attribute type 1 has an invalid length.
[  170.790365][T10617] 8021q: adding VLAN 0 to HW filter on device bond10
[  171.522673][T10634] syzkaller0: entered promiscuous mode
[  171.539365][T10634] syzkaller0: entered allmulticast mode
[  171.666046][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.776371][T10651] lo speed is unknown, defaulting to 1000
[  171.904282][T10656] loop1: detected capacity change from 0 to 512
[  172.104651][T10656] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  172.157809][T10667] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1831'.
[  172.198267][T10667] bridge6: port 1(geneve4) entered blocking state
[  172.205001][T10667] bridge6: port 1(geneve4) entered disabled state
[  172.211805][T10667] geneve4: entered allmulticast mode
[  172.235005][T10667] geneve4: entered promiscuous mode
[  172.364973][T10656] ext4 filesystem being mounted at /313/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  172.396121][T10656] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1824: bg 0: block 217: padding at end of block bitmap is not set
[  172.429037][T10656] EXT4-fs (loop1): Remounting filesystem read-only
[  172.439815][   T28] audit: type=1400 audit(1774473050.973:1507): avc:  denied  { append } for  pid=10645 comm="syz.1.1824" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  172.467907][   T28] audit: type=1400 audit(1774473050.983:1508): avc:  denied  { rmdir } for  pid=3311 comm="syz-executor" name="lost+found" dev="loop1" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  172.786016][T10677] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.984034][T10697] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1838'.
[  172.996129][T10697] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1838'.
[  173.005769][T10697] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1838'.
[  173.015421][T10697] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1838'.
[  173.024747][T10697] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1838'.
[  173.035026][T10697] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1838'.
[  173.519321][T10698] lo speed is unknown, defaulting to 1000
[  173.579512][T10698] chnl_net:caif_netlink_parms(): no params data found
[  173.723161][T10698] bridge0: port 1(bridge_slave_0) entered blocking state
[  173.731548][T10698] bridge0: port 1(bridge_slave_0) entered disabled state
[  173.745966][T10698] bridge_slave_0: entered allmulticast mode
[  173.753602][T10698] bridge_slave_0: entered promiscuous mode
[  173.760331][T10698] bridge0: port 2(bridge_slave_1) entered blocking state
[  173.767425][T10698] bridge0: port 2(bridge_slave_1) entered disabled state
[  173.775557][T10698] bridge_slave_1: entered allmulticast mode
[  173.783142][T10698] bridge_slave_1: entered promiscuous mode
[  173.802758][T10698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  173.814458][T10698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  173.834641][T10698] team0: Port device team_slave_0 added
[  173.841446][T10698] team0: Port device team_slave_1 added
[  173.857806][T10698] batman_adv: batadv0: Adding interface: batadv_slave_0
[  173.865939][T10698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  173.892950][T10698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  173.916273][T10698] batman_adv: batadv0: Adding interface: batadv_slave_1
[  173.924452][T10698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  173.960672][T10698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  174.005387][T10698] hsr_slave_0: entered promiscuous mode
[  174.013927][T10698] hsr_slave_1: entered promiscuous mode
[  174.021099][T10698] debugfs: 'hsr0' already exists in 'hsr'
[  174.026857][T10698] Cannot create hsr debugfs directory
[  174.117304][T10698] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  174.132863][T10698] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  174.142189][T10698] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  174.152756][T10698] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  174.182626][   T28] audit: type=1400 audit(1774473052.713:1509): avc:  denied  { create } for  pid=10729 comm="syz.2.1844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  174.274445][T10698] 8021q: adding VLAN 0 to HW filter on device bond0
[  174.288717][T10698] 8021q: adding VLAN 0 to HW filter on device team0
[  174.300112][   T50] bridge0: port 1(bridge_slave_0) entered blocking state
[  174.307357][   T50] bridge0: port 1(bridge_slave_0) entered forwarding state
[  174.343351][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state
[  174.350542][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state
[  174.511048][T10698] 8021q: adding VLAN 0 to HW filter on device batadv0
[  174.738862][T10698] veth0_vlan: entered promiscuous mode
[  174.765417][T10698] veth1_vlan: entered promiscuous mode
[  174.813308][T10698] veth0_macvtap: entered promiscuous mode
[  174.825254][T10698] veth1_macvtap: entered promiscuous mode
[  174.853962][T10698] batman_adv: batadv0: Interface activated: batadv_slave_0
[  174.873147][T10698] batman_adv: batadv0: Interface activated: batadv_slave_1
[  174.894459][   T50] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  174.916021][   T50] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  174.942937][   T50] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  174.960188][   T50] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  175.030629][   T28] audit: type=1400 audit(1774473053.563:1510): avc:  denied  { mounton } for  pid=10698 comm="syz-executor" path="/root/syzkaller.4Mw1Z2/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=33545 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[  175.077310][   T28] audit: type=1400 audit(1774473053.603:1511): avc:  denied  { mount } for  pid=10698 comm="syz-executor" name="/" dev="gadgetfs" ino=3924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  175.155745][   T28] audit: type=1400 audit(1774473053.693:1512): avc:  denied  { create } for  pid=10756 comm="syz.5.1840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  175.199114][   T28] audit: type=1400 audit(1774473053.723:1513): avc:  denied  { ioctl } for  pid=10756 comm="syz.5.1840" path="socket:[32261]" dev="sockfs" ino=32261 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  175.227006][   T28] audit: type=1400 audit(1774473053.723:1514): avc:  denied  { bind } for  pid=10756 comm="syz.5.1840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  175.246934][T10668] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  175.531089][T10769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  175.539550][T10769] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  177.378250][ T3322] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  177.409495][ T3322] CPU: 1 UID: 0 PID: 3322 Comm: syz-executor Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  177.409527][ T3322] Tainted: [W]=WARN
[  177.409534][ T3322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  177.409550][ T3322] Call Trace:
[  177.409580][ T3322]  <TASK>
[  177.409588][ T3322]  __dump_stack+0x1d/0x30
[  177.409708][ T3322]  dump_stack_lvl+0x95/0xd0
[  177.409730][ T3322]  dump_stack+0x15/0x1b
[  177.409780][ T3322]  dump_header+0x80/0x240
[  177.409861][ T3322]  oom_kill_process+0x295/0x350
[  177.409882][ T3322]  out_of_memory+0x97d/0xb80
[  177.409902][ T3322]  try_charge_memcg+0x62e/0xa10
[  177.409936][ T3322]  mem_cgroup_swapin_charge_folio+0x103/0x1f0
[  177.409989][ T3322]  __swap_cache_prepare_and_add+0x386/0x530
[  177.410021][ T3322]  swap_cache_alloc_folio+0xa2/0x120
[  177.410071][ T3322]  swap_cluster_readahead+0x26e/0x3d0
[  177.410107][ T3322]  swapin_readahead+0xde/0x840
[  177.410200][ T3322]  ? __rcu_read_unlock+0x4e/0x70
[  177.410220][ T3322]  ? __perf_event_task_sched_in+0xa65/0xad0
[  177.410244][ T3322]  ? __list_add_valid_or_report+0x38/0xe0
[  177.410274][ T3322]  ? xfd_validate_state+0x45/0xf0
[  177.410299][ T3322]  ? __rcu_read_unlock+0x4e/0x70
[  177.410368][ T3322]  ? swap_cache_get_folio+0x26f/0x280
[  177.410391][ T3322]  do_swap_page+0x30d/0x2220
[  177.410467][ T3322]  ? __schedule+0x93c/0xd40
[  177.410491][ T3322]  ? __rcu_read_lock+0x36/0x50
[  177.410510][ T3322]  ? pte_offset_map_rw_nolock+0x19e/0x200
[  177.410534][ T3322]  handle_mm_fault+0xb46/0x3020
[  177.410699][ T3322]  ? vma_start_read+0x1c7/0x2c0
[  177.410724][ T3322]  do_user_addr_fault+0x62f/0x1050
[  177.410776][ T3322]  ? trace_page_fault_user+0x1f/0xe0
[  177.410825][ T3322]  exc_page_fault+0x62/0xa0
[  177.410903][ T3322]  asm_exc_page_fault+0x26/0x30
[  177.410922][ T3322] RIP: 0033:0x7fe559e67917
[  177.410949][ T3322] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  177.410964][ T3322] RSP: 002b:00007ffea6194cd0 EFLAGS: 00010202
[  177.411050][ T3322] RAX: 0000000000000000 RBX: 000055557d274500 RCX: 00007fe559e67917
[  177.411063][ T3322] RDX: 00007ffea6194d10 RSI: 0000000000000000 RDI: 0000000000000000
[  177.411099][ T3322] RBP: 00007ffea6194d7c R08: 0000000000000000 R09: 0000000000000000
[  177.411112][ T3322] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388
[  177.411124][ T3322] R13: 00000000000927c0 R14: 000000000002b026 R15: 00007ffea6194dd0
[  177.411204][ T3322]  </TASK>
[  177.724727][ T3322] memory: usage 307200kB, limit 307200kB, failcnt 219
[  177.738178][ T3322] memory+swap: usage 375636kB, limit 9007199254740988kB, failcnt 0
[  177.759599][T10781] netlink: 'syz.3.1858': attribute type 1 has an invalid length.
[  177.776774][ T3322] kmem: usage 307052kB, limit 9007199254740988kB, failcnt 0
[  177.807280][ T3322] Memory cgroup stats for /syz4:
[  177.807471][ T3322] cache 0
[  177.817879][T10781] 8021q: adding VLAN 0 to HW filter on device bond11
[  177.843616][T10783] bond11: (slave veth17): Enslaving as an active interface with a down link
[  177.855052][ T3322] rss 16384
[  177.958921][ T3322] shmem 0
[  177.972520][ T3322] mapped_file 0
[  177.976006][ T3322] dirty 0
[  177.978982][ T3322] writeback 0
[  177.987799][T10781] bond11: (slave dummy0): making interface the new active one
[  177.990399][ T3322] workingset_refault_anon 1858
[  178.003256][ T3322] workingset_refault_file 578
[  178.009947][ T3322] swap 70041600
[  178.013778][T10783] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1858'.
[  178.021107][T10781] dummy0: entered promiscuous mode
[  178.025349][ T3322] swapcached 73433088
[  178.033006][ T3322] pgpgin 195442
[  178.075931][T10781] bond11: (slave dummy0): Enslaving as an active interface with an up link
[  178.130030][ T3322] pgpgout 195435
[  178.179161][ T3322] pgfault 152284
[  178.212323][ T3322] pgmajfault 44
[  178.241729][ T3322] inactive_anon 4096
[  178.273666][ T3322] active_anon 0
[  178.298475][ T3322] inactive_file 4096
[  178.329339][ T3322] active_file 0
[  178.364796][ T3322] unevictable 0
[  178.380893][ T3322] hierarchical_memory_limit 314572800
[  178.411894][ T3322] hierarchical_memsw_limit 9223372036854771712
[  178.443358][ T3322] total_cache 0
[  178.454807][ T3322] total_rss 16384
[  178.458461][ T3322] total_shmem 0
[  178.463017][ T3322] total_mapped_file 0
[  178.467001][ T3322] total_dirty 0
[  178.471643][ T3322] total_writeback 0
[  178.475451][ T3322] total_workingset_refault_anon 1858
[  178.481765][ T3322] total_workingset_refault_file 578
[  178.486984][ T3322] total_swap 70041600
[  178.492482][ T3322] total_swapcached 73433088
[  178.497217][T10783] bond11: (slave dummy0): Releasing active interface
[  178.504839][ T3322] total_pgpgin 212368
[  178.508821][ T3322] total_pgpgout 212361
[  178.514074][T10783] dummy0 (unregistering): left promiscuous mode
[  178.521324][ T3322] total_pgfault 153007
[  178.525446][ T3322] total_pgmajfault 44
[  178.529415][ T3322] total_inactive_anon 4096
[  178.549978][ T3322] total_active_anon 0
[  178.554007][ T3322] total_inactive_file 4096
[  178.558430][ T3322] total_active_file 0
[  178.569974][ T3322] total_unevictable 0
[  178.574094][ T3322] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1849,pid=10760,uid=0
[  178.590345][ T3322] Memory cgroup out of memory: OOM victim 10760 (syz.4.1849) is already exiting. Skip killing the task
[  178.664759][   T28] audit: type=1400 audit(1774473057.203:1515): avc:  denied  { create } for  pid=10794 comm="syz.3.1862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  178.746267][   T28] audit: type=1400 audit(1774473057.233:1516): avc:  denied  { write } for  pid=10794 comm="syz.3.1862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  178.785264][T10801] xt_hashlimit: size too large, truncated to 1048576
[  180.001218][T10835] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  181.698267][T10877] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1887'.
[  181.735362][T10877] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10877 comm=syz.4.1887
[  183.036417][T10916] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1899'.
[  183.100382][T10919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1899'.
[  183.132699][T10919] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1899'.
[  183.151520][T10922] netlink: 'syz.4.1899': attribute type 4 has an invalid length.
[  183.160406][T10922] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1899'.
[  183.560338][T10916] 8021q: adding VLAN 0 to HW filter on device bond6
[  183.615578][T10922] .`: renamed from bond0
[  183.933491][T10932] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1902'.
[  184.907567][T10947] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1907'.
[  185.581477][T10947] bond7: (slave dummy0): Releasing active interface
[  185.597136][T10955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1904'.
[  185.883608][   T28] audit: type=1400 audit(1774473064.203:1517): avc:  denied  { write } for  pid=10952 comm="syz.5.1909" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  188.094241][T10995] GPL: port 1(syz_tun) entered blocking state
[  188.101548][T10995] GPL: port 1(syz_tun) entered disabled state
[  188.107921][T10995] syz_tun: entered allmulticast mode
[  188.115070][T10995] syz_tun: entered promiscuous mode
[  188.142852][T10997] syz_tun: left promiscuous mode
[  188.148025][T10997] bridge0: port 3(syz_tun) entered disabled state
[  188.154716][T10986] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1910'.
[  188.167996][T10997] bridge_slave_0: left allmulticast mode
[  188.179147][T10997] bridge_slave_0: left promiscuous mode
[  188.184969][T10997] bridge0: port 1(bridge_slave_0) entered disabled state
[  188.195265][T10997] bridge_slave_1: left allmulticast mode
[  188.209735][T10997] bridge_slave_1: left promiscuous mode
[  188.215559][T10997] bridge0: port 2(bridge_slave_1) entered disabled state
[  188.225596][T10997] team0: Port device team_slave_0 removed
[  188.241336][T10997] team0: Port device team_slave_1 removed
[  188.251081][T10997] batman_adv: batadv0: Removing interface: batadv_slave_0
[  188.258680][T11015] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1918'.
[  188.268527][T10997] batman_adv: batadv0: Removing interface: batadv_slave_1
[  188.276064][T10997] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  188.293195][T10999] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1917'.
[  188.303737][T11005] team0: Mode changed to "loadbalance"
[  188.382871][   T28] audit: type=1326 audit(1774473066.923:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11023 comm="syz.5.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff2dcc799 code=0x7ffc0000
[  188.409176][T11025] loop5: detected capacity change from 0 to 128
[  188.435122][   T28] audit: type=1326 audit(1774473066.923:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11023 comm="syz.5.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff2dcc799 code=0x7ffc0000
[  188.489026][   T28] audit: type=1326 audit(1774473066.943:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11023 comm="syz.5.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7efff2dcc799 code=0x7ffc0000
[  188.517289][   T28] audit: type=1326 audit(1774473066.943:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11023 comm="syz.5.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7efff2dcc502 code=0x7ffc0000
[  188.542384][   T28] audit: type=1326 audit(1774473066.943:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11023 comm="syz.5.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7efff2d8cfce code=0x7ffc0000
[  188.568248][   T28] audit: type=1326 audit(1774473066.943:1523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11023 comm="syz.5.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7efff2dcc5c7 code=0x7ffc0000
[  188.635390][   T28] audit: type=1326 audit(1774473066.943:1524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11023 comm="syz.5.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efff2d8cfce code=0x7ffc0000
[  188.669828][   T28] audit: type=1326 audit(1774473066.943:1525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11023 comm="syz.5.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efff2dcc42b code=0x7ffc0000
[  188.794689][   T28] audit: type=1326 audit(1774473066.963:1526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11023 comm="syz.5.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7efff2d8cfce code=0x7ffc0000
[  188.831039][T11030] netlink: 'syz.5.1927': attribute type 13 has an invalid length.
[  189.228987][T11030] bridge0: port 2(bridge_slave_1) entered disabled state
[  189.236391][T11030] bridge0: port 1(bridge_slave_0) entered disabled state
[  189.348175][T11030] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  189.379536][T11030] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  189.475250][T11038] 8021q: adding VLAN 0 to HW filter on device bond9
[  189.505126][T11037] hsr0 speed is unknown, defaulting to 1000
[  189.505162][ T8747] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  189.539260][ T2208] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  189.564223][ T2208] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  189.574416][T11037] hsr0 speed is unknown, defaulting to 1000
[  189.581476][ T2208] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  189.591782][T11037] hsr0 speed is unknown, defaulting to 1000
[  189.598464][T11037] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  189.612550][T11037] hsr0 speed is unknown, defaulting to 1000
[  189.618835][T11037] hsr0 speed is unknown, defaulting to 1000
[  189.642226][T11037] hsr0 speed is unknown, defaulting to 1000
[  189.648458][T11037] hsr0 speed is unknown, defaulting to 1000
[  189.656113][T11037] hsr0 speed is unknown, defaulting to 1000
[  189.663580][T11037] hsr0 speed is unknown, defaulting to 1000
[  189.733952][T11047] loop5: detected capacity change from 0 to 512
[  189.809379][T11047] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1932: invalid indirect mapped block 256 (level 2)
[  189.841713][T11047] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  189.843100][T11047] EXT4-fs (loop5): 2 truncates cleaned up
[  189.852589][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  189.852658][    C0] EXT4-fs (loop5): initial error at time 1774473068: ext4_free_branches:1023: inode 11
[  189.852778][    C0] EXT4-fs (loop5): last error at time 1774473068: ext4_free_branches:1023: inode 11
[  190.024782][T11047] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  190.221131][T10698] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  190.918847][T11094] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  191.162936][   T28] kauditd_printk_skb: 45 callbacks suppressed
[  191.162950][   T28] audit: type=1400 audit(1774473069.703:1572): avc:  denied  { create } for  pid=11096 comm="syz.4.1950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  191.192423][   T28] audit: type=1400 audit(1774473069.703:1573): avc:  denied  { getopt } for  pid=11096 comm="syz.4.1950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  191.544277][T11167] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11167 comm=syz.0.1954
[  191.558626][T11167] netlink: 'syz.0.1954': attribute type 1 has an invalid length.
[  191.575012][T11167] 8021q: adding VLAN 0 to HW filter on device bond10
[  191.679740][T11195] loop5: detected capacity change from 0 to 128
[  191.808728][ T8747] kworker/u8:9: attempt to access beyond end of device
[  191.808728][ T8747] loop5: rw=1, sector=145, nr_sectors = 16 limit=128
[  191.823359][ T8747] kworker/u8:9: attempt to access beyond end of device
[  191.823359][ T8747] loop5: rw=1, sector=169, nr_sectors = 6 limit=128
[  191.992074][T11237] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1961'.
[  192.016647][T11237] macvlan2: entered promiscuous mode
[  192.028496][T11237] bond0: entered promiscuous mode
[  192.039022][T11237] bond_slave_0: entered promiscuous mode
[  192.057447][T11237] bond_slave_1: entered promiscuous mode
[  192.072433][T11237] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  192.360502][T11281] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1963'.
[  192.491592][   T28] audit: type=1400 audit(1774473071.013:1574): avc:  denied  { write } for  pid=11286 comm="syz.2.1969" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  193.415327][T11305] 8021q: adding VLAN 0 to HW filter on device bond9
[  193.431924][T11301] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  193.454432][T11305] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1973'.
[  193.463993][T11305] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1973'.
[  193.474209][T11305] 8021q: adding VLAN 0 to HW filter on device bond0
[  193.484139][T11305] bond9: (slave bond0): making interface the new active one
[  193.495669][   T28] audit: type=1326 audit(1774473072.043:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11310 comm="syz.4.1976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe559eac799 code=0x7ffc0000
[  193.501709][T11305] bond9: (slave bond0): Enslaving as an active interface with an up link
[  193.532107][   T28] audit: type=1326 audit(1774473072.043:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11310 comm="syz.4.1976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe559eac799 code=0x7ffc0000
[  193.584597][ T8747] bond0: (slave bond_slave_0): link status definitely down, disabling slave
[  193.589830][   T28] audit: type=1326 audit(1774473072.043:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11310 comm="syz.4.1976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe559eac799 code=0x7ffc0000
[  193.595292][ T8747] bond0: now running without any active interface!
[  193.621352][   T28] audit: type=1326 audit(1774473072.043:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11310 comm="syz.4.1976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe559eac799 code=0x7ffc0000
[  193.647890][ T8747] bond9: (slave bond0): link status definitely down, disabling slave
[  193.657235][ T8747] bond9: now running without any active interface!
[  193.666237][   T28] audit: type=1326 audit(1774473072.063:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11310 comm="syz.4.1976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fe559eac799 code=0x7ffc0000
[  193.691414][T11305] bond9: (slave bond0): Releasing active interface
[  193.691640][   T28] audit: type=1326 audit(1774473072.063:1580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11310 comm="syz.4.1976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe559eac799 code=0x7ffc0000
[  193.722571][   T28] audit: type=1326 audit(1774473072.063:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11310 comm="syz.4.1976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe559eac799 code=0x7ffc0000
[  193.753985][T11305] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  195.056138][T11330] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1980'.
[  195.409312][T11340] loop5: detected capacity change from 0 to 512
[  195.419301][T11343] netlink: 'syz.4.1986': attribute type 13 has an invalid length.
[  195.427469][T11340] EXT4-fs: Ignoring removed nomblk_io_submit option
[  195.445809][T11340] EXT4-fs (loop5): 1 truncate cleaned up
[  195.459376][T11340] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  195.730263][T10698] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.213239][   T28] kauditd_printk_skb: 153 callbacks suppressed
[  196.213254][   T28] audit: type=1326 audit(1774473074.753:1735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11362 comm="syz.3.1990" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fed002fc799 code=0x0
[  196.322119][   T28] audit: type=1400 audit(1774473074.863:1736): avc:  denied  { ioctl } for  pid=11362 comm="syz.3.1990" path="socket:[35066]" dev="sockfs" ino=35066 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  196.605602][T11373] loop4: detected capacity change from 0 to 1024
[  196.635809][T11373] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  196.661944][T11373] ext4 filesystem being mounted at /434/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  197.061870][T11388] netlink: 'syz.3.1998': attribute type 27 has an invalid length.
[  197.295242][T11400] loop5: detected capacity change from 0 to 4096
[  197.318763][T11400] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  197.345244][T11400] Quota error (device loop5): do_check_range: Getting block 3587 out of range 1-5
[  197.359715][   T28] audit: type=1400 audit(1774473075.883:1737): avc:  denied  { link } for  pid=11399 comm="syz.5.2003" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  197.408660][T11400] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0
[  197.439710][T11400] EXT4-fs error (device loop5): ext4_acquire_dquot:7001: comm syz.5.2003: Failed to acquire dquot type 1
[  197.561703][T10698] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.572615][T11407] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2005'.
[  197.605743][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  198.418112][T11422] loop5: detected capacity change from 0 to 1764
[  198.471189][T11422] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  198.481536][T11422] isofs_fill_super: get root inode failed
[  198.565533][T11424] lo speed is unknown, defaulting to 1000
[  198.572458][T11422] loop5: detected capacity change from 0 to 512
[  198.617094][T11424] hsr0 speed is unknown, defaulting to 1000
[  198.720439][T11422] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  198.733026][T11422] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  198.770019][T11422] xt_hashlimit: size too large, truncated to 1048576
[  198.901285][T11431] �: renamed from veth0_to_batadv
[  199.035616][T10698] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.069308][T11437] loop5: detected capacity change from 0 to 1024
[  199.090363][T11437] EXT4-fs: Ignoring removed orlov option
[  199.113382][T11437] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  199.349576][T11450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  199.362632][T11450] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  199.491417][T11460] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  199.539249][T11456] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.2020'.
[  199.625495][T11459] netlink: 'syz.5.2014': attribute type 3 has an invalid length.
[  199.635037][T11459] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.2014'.
[  200.006183][T10698] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.111770][   T28] audit: type=1400 audit(1774473078.653:1738): avc:  denied  { setopt } for  pid=11490 comm="syz.0.2030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  200.182300][T11491] vlan3: entered allmulticast mode
[  200.187718][T11491] bond9: entered allmulticast mode
[  200.372850][   T28] audit: type=1400 audit(1774473078.913:1739): avc:  denied  { write } for  pid=11498 comm="syz.3.2034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  200.403833][T11507] syzkaller0: entered promiscuous mode
[  200.409329][T11507] syzkaller0: entered allmulticast mode
[  201.608036][T11547] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2046'.
[  201.637323][T11547] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2046'.
[  201.689095][T11547] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2046'.
[  201.710847][T11547] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2046'.
[  201.740111][T11547] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2046'.
[  203.516251][T11586] loop5: detected capacity change from 0 to 512
[  203.523757][T11586] EXT4-fs: Ignoring removed i_version option
[  203.671183][T11586] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  203.694957][T11586] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  203.730922][   T28] audit: type=1400 audit(1774473082.273:1740): avc:  denied  { write } for  pid=11585 comm="syz.5.2059" name="hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[  203.771794][T11603] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2063'.
[  203.797754][T11603] batadv_slave_0: Caught tx_queue_len zero misconfig
[  203.866817][T10698] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.093275][T11610] syzkaller0: entered promiscuous mode
[  204.111659][T11610] syzkaller0: entered allmulticast mode
[  204.259451][T11618] ipip0: entered promiscuous mode
[  204.394177][T11628] IPv6: NLM_F_CREATE should be specified when creating new route
[  204.901674][T11641] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2077'.
[  205.024105][T11645] syzkaller0: entered promiscuous mode
[  205.029796][T11645] syzkaller0: entered allmulticast mode
[  205.223333][T11653] loop4: detected capacity change from 0 to 164
[  205.272854][T11659] loop5: detected capacity change from 0 to 128
[  205.285100][T11659] msdos: Unknown parameter 'x���MkcU�Ӵ66�%+A7�F7A�v�H1�X#��pKS�I��"Y��3����n��觘ٕ����j���L�L˼0i2L�M��ν��%<�{��?4w��N���\(|��'
[  205.293504][T11655] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2084'.
[  205.322801][T11657] loop4: detected capacity change from 0 to 512
[  205.333042][T11657] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  205.352388][T11657] EXT4-fs (loop4): 1 truncate cleaned up
[  205.365996][T11657] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  205.384956][T11665] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11665 comm=syz.0.2087
[  205.488823][T11672] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.2090'.
[  205.498242][T11672] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  205.582602][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.967556][T11681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  205.994202][T11681] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  206.099551][T11690] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11690 comm=syz.3.2096
[  206.194151][T11692] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2097'.
[  206.642188][T11703] netlink: 'syz.4.2101': attribute type 32 has an invalid length.
[  206.657376][T11703] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2101'.
[  206.698458][T11703] bond0: Setting coupled_control to off (0)
[  206.726081][T11703] loop4: detected capacity change from 0 to 512
[  206.738406][   T28] audit: type=1400 audit(1774473085.273:1741): avc:  denied  { create } for  pid=11715 comm="syz.2.2103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  206.759410][T11703] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  206.785997][T11703] EXT4-fs (loop4): 1 truncate cleaned up
[  206.792411][T11703] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  206.916467][   T28] audit: type=1400 audit(1774473085.453:1742): avc:  denied  { write } for  pid=11702 comm="syz.4.2101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  206.958987][T11720] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2105'.
[  206.969555][T11720] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2105'.
[  207.338053][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  207.466882][T11741] loop4: detected capacity change from 0 to 512
[  207.506928][T11741] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.2112: inode has both inline data and extents flags
[  207.526893][T11741] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  207.527043][T11741] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.2112: couldn't read orphan inode 15 (err -117)
[  207.536280][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  207.536303][    C0] EXT4-fs (loop4): initial error at time 1774473086: ext4_orphan_get:1391: inode 15
[  207.536328][    C0] EXT4-fs (loop4): last error at time 1774473086: ext4_orphan_get:1391: inode 15
[  207.577954][T11741] loop4: lost filesystem error report for type 5 error -117
[  207.578526][T11741] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  207.622806][T11738] xt_CT: No such helper "snmp_trap"
[  208.576543][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.637091][T11779] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11779 comm=syz.4.2118
[  209.668057][T11794] loop5: detected capacity change from 0 to 512
[  209.753648][T11794] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  209.806163][T11794] ext4 filesystem being mounted at /52/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  209.899552][   T28] audit: type=1400 audit(1774473088.433:1743): avc:  denied  { setattr } for  pid=11789 comm="syz.5.2122" path="/52/bus" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  209.926187][T11794] EXT4-fs error (device loop5): ext4_ext_check_inode:521: inode #2: comm syz.5.2122: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  210.214860][   T28] audit: type=1326 audit(1774473088.743:1744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11789 comm="syz.5.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff2dcc799 code=0x7ffc0000
[  210.253345][T11794] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2122'.
[  210.359943][   T28] audit: type=1326 audit(1774473088.753:1745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11789 comm="syz.5.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff2dcc799 code=0x7ffc0000
[  210.513073][T10698] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  211.262108][T11812] IPv6: sit1: Disabled Multicast RS
[  211.303813][T11818] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  212.884364][T11838] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11838 comm=syz.4.2136
[  212.957693][T11843] ������: renamed from hsr0
[  213.019358][   T28] audit: type=1400 audit(1774473091.553:1746): avc:  denied  { bind } for  pid=11837 comm="syz.4.2136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  213.080762][   T28] audit: type=1400 audit(1774473091.553:1747): avc:  denied  { listen } for  pid=11837 comm="syz.4.2136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  213.184789][   T28] audit: type=1400 audit(1774473091.673:1748): avc:  denied  { ioctl } for  pid=11835 comm="syz.0.2147" path="socket:[36895]" dev="sockfs" ino=36895 ioctlcmd=0x4942 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  213.717312][T11859] IPv6: sit3: Disabled Multicast RS
[  213.874901][T11835] delete_channel: no stack
[  213.977326][   T28] audit: type=1400 audit(1774473092.513:1749): avc:  denied  { load_policy } for  pid=11867 comm="syz.4.2148" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  214.022854][T11870] tipc: Started in network mode
[  214.034811][T11870] tipc: Node identity 0e48c8bcd1be, cluster identity 4711
[  214.043589][T11868] SELinux: failed to load policy
[  214.048706][T11870] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  214.059520][T11870] syzkaller0: entered promiscuous mode
[  214.069236][T11870] syzkaller0: entered allmulticast mode
[  214.097147][T11872] lo speed is unknown, defaulting to 1000
[  214.109442][T11870] tipc: Resetting bearer <eth:syzkaller0>
[  214.121606][T11869] tipc: Resetting bearer <eth:syzkaller0>
[  214.141638][T11869] tipc: Disabling bearer <eth:syzkaller0>
[  214.175027][T11872] hsr0 speed is unknown, defaulting to 1000
[  214.182439][T11880] loop4: detected capacity change from 0 to 1024
[  214.204610][T11880] EXT4-fs: Ignoring removed orlov option
[  214.219564][T11882] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11882 comm=syz.2.2155
[  214.256499][T11880] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  214.272508][T11884] netlink: 'syz.5.2156': attribute type 3 has an invalid length.
[  214.317371][T11884] netlink: 'syz.5.2156': attribute type 1 has an invalid length.
[  214.379141][T11884] netlink: 60387 bytes leftover after parsing attributes in process `syz.5.2156'.
[  214.476131][T11895] tipc: Failed to remove unknown binding: 66,0,0/0:1064946911/1064946912
[  214.486009][T11895] tipc: Failed to remove unknown binding: 66,0,0/0:1064946911/1064946912
[  214.615559][T11900] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  214.623960][T11900] syzkaller0: entered promiscuous mode
[  214.630794][T11900] syzkaller0: entered allmulticast mode
[  214.657852][T11900] tipc: Resetting bearer <eth:syzkaller0>
[  214.664682][   T28] audit: type=1326 audit(1774473093.203:1750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11871 comm="syz.3.2150" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fed002fc799 code=0x0
[  215.152716][T11898] tipc: Resetting bearer <eth:syzkaller0>
[  215.159291][T11898] tipc: Disabling bearer <eth:syzkaller0>
[  215.236124][T11911] netlink: 'syz.5.2164': attribute type 1 has an invalid length.
[  215.251195][T11904] netlink: 'syz.4.2153': attribute type 3 has an invalid length.
[  215.266911][T11904] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2153'.
[  215.291474][T11911] 8021q: adding VLAN 0 to HW filter on device bond1
[  215.302811][T11915] vlan2: entered allmulticast mode
[  215.308095][T11915] bond1: entered allmulticast mode
[  215.399165][T11911] bond1: (slave geneve2): making interface the new active one
[  215.409890][T11911] geneve2: entered allmulticast mode
[  215.416684][T11911] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  215.427423][   T53] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  215.438688][   T53] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  215.448228][   T53] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  215.486558][   T53] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  215.572699][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  215.638359][T11917] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2166'.
[  215.661461][T11928] netlink: 'syz.5.2169': attribute type 32 has an invalid length.
[  215.705663][T11928] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2169'.
[  215.716874][T11931] loop5: detected capacity change from 0 to 512
[  215.744578][T11931] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  215.787241][T11935] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11935 comm=syz.3.2172
[  215.808210][T11928] bond2: Setting coupled_control to off (0)
[  215.836095][T11931] EXT4-fs (loop5): 1 truncate cleaned up
[  215.853482][T11931] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  215.958803][T10698] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  216.003724][T11946] lo speed is unknown, defaulting to 1000
[  216.015048][T11946] hsr0 speed is unknown, defaulting to 1000
[  216.235091][   T28] audit: type=1326 audit(1774473094.773:1751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11945 comm="syz.5.2175" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efff2dcc799 code=0x0
[  216.745438][T11959] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2178'.
[  216.761467][   T28] audit: type=1400 audit(1774473095.303:1752): avc:  denied  { remount } for  pid=11958 comm="syz.2.2178" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  216.793507][T11962] netlink: 'syz.0.2179': attribute type 1 has an invalid length.
[  216.808426][T11962] 8021q: adding VLAN 0 to HW filter on device bond11
[  216.864098][T11962] vlan3: entered allmulticast mode
[  216.879528][T11962] bond11: entered allmulticast mode
[  217.101015][T11969] bond11: (slave geneve5): making interface the new active one
[  217.166009][T11969] geneve5: entered allmulticast mode
[  217.223485][T11969] bond11: (slave geneve5): Enslaving as an active interface with an up link
[  217.288833][ T2714] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0
[  217.300456][ T2714] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0
[  217.385226][ T2714] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0
[  217.395111][ T2714] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0
[  217.489129][   T28] audit: type=1400 audit(1774473096.023:1753): avc:  denied  { read } for  pid=11975 comm="syz.3.2184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  217.511647][T11976] netlink: 'syz.3.2184': attribute type 27 has an invalid length.
[  219.005672][T11985] netdevsim netdevsim2: Direct firmware load for  failed with error -2
[  219.028569][T11990] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11990 comm=syz.5.2186
[  219.042050][T11988] vlan3: entered promiscuous mode
[  219.182535][T12009] lo speed is unknown, defaulting to 1000
[  219.195088][T12009] hsr0 speed is unknown, defaulting to 1000
[  219.298481][T12012] lo speed is unknown, defaulting to 1000
[  219.530650][T12012] hsr0 speed is unknown, defaulting to 1000
[  220.196211][T12012] sock: sock_timestamping_bind_phc: sock not bind to device
[  220.372334][T12031] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  220.584988][T12019] netlink: 83992 bytes leftover after parsing attributes in process `syz.5.2197'.
[  220.607220][T12019] netlink: zone id is out of range
[  220.619960][T12019] netlink: zone id is out of range
[  220.630058][T12019] netlink: zone id is out of range
[  220.643467][T12019] netlink: set zone limit has 8 unknown bytes
[  220.842918][T12047] tipc: Failed to remove unknown binding: 66,0,0/0:4105169223/4105169224
[  220.873391][T12049] netlink: 'syz.5.2208': attribute type 17 has an invalid length.
[  220.882286][T12049] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2208'.
[  220.894347][T12051] netlink: 'syz.4.2209': attribute type 1 has an invalid length.
[  220.908370][T12051] 8021q: adding VLAN 0 to HW filter on device bond7
[  220.934086][T12051] bond7: (slave gretap1): making interface the new active one
[  220.942296][T12051] bond7: (slave gretap1): Enslaving as an active interface with an up link
[  220.958659][T12051] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12051 comm=syz.4.2209
[  220.967363][T12054] lo speed is unknown, defaulting to 1000
[  220.980097][T12054] hsr0 speed is unknown, defaulting to 1000
[  221.087428][T12054] loop5: detected capacity change from 0 to 256
[  221.094863][T12054] vfat: Unknown parameter '0xffffffffffffffff����������18446744073709551615��������'
[  221.246759][T12067] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bridge, syncid = 0, id = 0
[  221.275570][T12065] syzkaller0: entered promiscuous mode
[  221.281314][T12065] syzkaller0: entered allmulticast mode
[  221.336899][T12069] xt_hashlimit: size too large, truncated to 1048576
[  221.443223][T12076] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2215'.
[  221.458158][   T30] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  221.466796][   T30] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  221.475264][   T30] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  221.484033][   T30] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  223.419805][T12157] lo speed is unknown, defaulting to 1000
[  223.527795][T12157] hsr0 speed is unknown, defaulting to 1000
[  224.154455][T12171] batman_adv: batadv0: Adding interface: macsec1
[  224.162850][T12171] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  224.193310][T12173] loop4: detected capacity change from 0 to 512
[  224.219808][T12171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  224.240425][T12171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  224.271556][T12173] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  224.284730][T12173] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it
[  224.297049][T12173] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.2228: Corrupt directory, running e2fsck is recommended
[  224.311604][T12171] batman_adv: batadv0: Interface activated: macsec1
[  224.318695][T12173] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117
[  224.351967][T12173] EXT4-fs error (device loop4): ext4_iget_extra_inode:5025: inode #15: comm syz.4.2228: corrupted in-inode xattr: invalid ea_ino
[  224.365366][T12173] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  224.365543][T12173] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.2228: couldn't read orphan inode 15 (err -117)
[  224.369653][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  224.376176][T12173] loop4: lost filesystem error report for type 5 error -117
[  224.386483][    C1] EXT4-fs (loop4): initial error at time 1774473102: ext4_iget_extra_inode:5025
[  224.394738][T12173] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  224.400187][    C1] : inode 15
[  224.400209][    C1] EXT4-fs (loop4): last error at time 1774473102: ext4_orphan_get:1396
[  224.435455][T12181] lo speed is unknown, defaulting to 1000
[  224.435881][T12181] hsr0 speed is unknown, defaulting to 1000
[  224.453924][T12173] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  224.465724][T12173] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it
[  224.476228][T12173] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.2228: Corrupt directory, running e2fsck is recommended
[  224.500726][T12173] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  224.512429][T12173] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it
[  224.522708][T12173] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.2228: Corrupt directory, running e2fsck is recommended
[  224.536527][T12173] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  224.548172][T12173] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it
[  224.558416][T12173] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.2228: Corrupt directory, running e2fsck is recommended
[  224.571577][T12173] EXT4-fs error (device loop4): ext4_readdir:265: inode #2: block 3: comm syz.4.2228: path /473/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0
[  224.583196][T12184] lo speed is unknown, defaulting to 1000
[  224.598315][T12173] EXT4-fs error (device loop4): ext4_readdir:265: inode #2: block 2: comm syz.4.2228: path /473/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=4, size=1024 fake=0
[  224.619111][T12173] EXT4-fs error (device loop4): ext4_readdir:265: inode #2: block 8: comm syz.4.2228: path /473/file0: bad entry in directory: directory entry overrun - offset=0, inode=33261, rec_len=132120, size=1024 fake=0
[  224.640285][T12184] hsr0 speed is unknown, defaulting to 1000
[  224.665740][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  225.046126][T12204] No such timeout policy "syz0"
[  226.758626][T12229] loop5: detected capacity change from 0 to 512
[  226.858139][T12229] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  226.884745][T12236] loop4: detected capacity change from 0 to 512
[  226.894921][T12229] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it
[  226.936306][T12229] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.2246: Corrupt directory, running e2fsck is recommended
[  226.972298][T12239] netlink: 'syz.2.2250': attribute type 1 has an invalid length.
[  226.989923][T12236] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  226.996782][T12239] 8021q: adding VLAN 0 to HW filter on device bond6
[  227.012592][T12229] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117
[  227.030335][T12236] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it
[  227.053773][T12236] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.2249: Corrupt directory, running e2fsck is recommended
[  227.067613][T12239] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2250'.
[  227.079741][T12229] EXT4-fs error (device loop5): ext4_iget_extra_inode:5025: inode #15: comm syz.5.2246: corrupted in-inode xattr: invalid ea_ino
[  227.115883][T12239] bond6: (slave bridge5): making interface the new active one
[  227.127745][T12236] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117
[  227.138032][T12229] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  227.139052][T12239] bond6: (slave bridge5): Enslaving as an active interface with an up link
[  227.148233][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  227.148253][    C1] EXT4-fs (loop5): initial error at time 1774473105: ext4_iget_extra_inode:5025: inode 15
[  227.148295][    C1] EXT4-fs (loop5): last error at time 1774473105: ext4_iget_extra_inode:5025: inode 15
[  227.152629][T12243] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12243 comm=syz.3.2251
[  227.157324][T12229] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.2246: couldn't read orphan inode 15 (err -117)
[  227.201021][T12236] EXT4-fs error (device loop4): ext4_iget_extra_inode:5025: inode #15: comm syz.4.2249: corrupted in-inode xattr: invalid ea_ino
[  227.211193][T12229] loop5: lost filesystem error report for type 5 error -117
[  227.221779][T12229] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  227.242141][T12236] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  227.250615][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  227.253694][T12244] macvlan2: entered promiscuous mode
[  227.259782][    C0] EXT4-fs (loop4): initial error at time 1774473105: ext4_iget_extra_inode:5025: inode 15
[  227.259812][    C0] EXT4-fs (loop4): last error at time 1774473105: ext4_iget_extra_inode:5025
[  227.273071][T12244] macvlan2: entered allmulticast mode
[  227.281399][    C0] : inode 15
[  227.282513][T12236] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.2249: couldn't read orphan inode 15 (err -117)
[  227.291010][T12244] bond6: entered promiscuous mode
[  227.291026][T12244] bridge5: entered promiscuous mode
[  227.291303][T12244] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  227.310808][T12236] loop4: lost filesystem error report for type 5 error -117
[  227.312838][T12244] bond6: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  227.353626][T12246] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12246 comm=syz.0.2252
[  227.357159][T12244] bond6: left promiscuous mode
[  227.368335][T12236] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  227.371323][T12244] bridge5: left promiscuous mode
[  227.388613][T12229] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  227.400555][T12229] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it
[  227.410757][T12229] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.2246: Corrupt directory, running e2fsck is recommended
[  227.427835][T12250] tipc: Failed to remove unknown binding: 66,0,0/0:842489359/842489360
[  227.436367][T12250] tipc: Failed to remove unknown binding: 66,0,0/0:842489359/842489360
[  227.439832][T12236] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  227.473999][T12236] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it
[  227.488766][T12253] netlink: 'syz.3.2256': attribute type 13 has an invalid length.
[  227.492242][T12236] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.2249: Corrupt directory, running e2fsck is recommended
[  227.496715][T12229] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  227.530815][T12229] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it
[  227.545359][T12257] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  227.558038][T12236] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  227.570585][ T8747] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  227.578935][ T8747] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  227.588754][T12236] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it
[  227.600136][ T8747] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  227.608528][T12229] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.2246: Corrupt directory, running e2fsck is recommended
[  227.629824][ T8747] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  227.642828][T12254] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  227.655764][T12261] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  227.668395][T12236] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.2249: Corrupt directory, running e2fsck is recommended
[  227.691008][T12261] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it
[  227.703730][T12254] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it
[  227.720810][T12257] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it
[  227.721667][T12263] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  227.745325][T12254] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.2249: Corrupt directory, running e2fsck is recommended
[  227.760046][T12254] EXT4-fs error (device loop4): ext4_readdir:265: inode #2: block 3: comm syz.4.2249: path /477/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0
[  227.788019][T12254] EXT4-fs error (device loop4): ext4_readdir:265: inode #2: block 2: comm syz.4.2249: path /477/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=4, size=1024 fake=0
[  227.818473][T12257] EXT4-fs error (device loop5): ext4_readdir:265: inode #2: block 3: comm syz.5.2246: path /76/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0
[  227.840806][T12254] EXT4-fs error (device loop4): ext4_readdir:265: inode #2: block 8: comm syz.4.2249: path /477/file0: bad entry in directory: directory entry overrun - offset=0, inode=33261, rec_len=132120, size=1024 fake=0
[  227.877173][T10698] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  227.916709][T12268] lo speed is unknown, defaulting to 1000
[  227.924023][T12268] hsr0 speed is unknown, defaulting to 1000
[  228.023040][T12270] netlink: 'syz.2.2259': attribute type 1 has an invalid length.
[  228.095736][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  228.114511][T12270] 8021q: adding VLAN 0 to HW filter on device bond7
[  228.146651][T12273] loop4: detected capacity change from 0 to 512
[  228.148158][T12269] bond7: (slave dummy0): making interface the new active one
[  228.179046][T12273] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  228.202863][T12273] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it
[  228.222964][T12269] bond7: (slave dummy0): Enslaving as an active interface with an up link
[  228.248899][T12273] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.2261: Corrupt directory, running e2fsck is recommended
[  228.302752][T12273] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117
[  228.311100][T12273] EXT4-fs error (device loop4): ext4_iget_extra_inode:5025: inode #15: comm syz.4.2261: corrupted in-inode xattr: invalid ea_ino
[  228.325050][T12273] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  228.325219][T12273] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.2261: couldn't read orphan inode 15 (err -117)
[  228.334429][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  228.334445][    C1] EXT4-fs (loop4): initial error at time 1774473106: ext4_iget_extra_inode:5025: inode 15
[  228.334482][    C1] EXT4-fs (loop4): last error at time 1774473106: ext4_iget_extra_inode:5025: inode 15
[  228.363483][T12268] sock: sock_timestamping_bind_phc: sock not bind to device
[  228.372600][T12273] loop4: lost filesystem error report for type 5 error -117
[  228.395307][T12280] vlan2: entered promiscuous mode
[  228.408085][T12280] vlan2: entered allmulticast mode
[  228.413311][T12280] hsr_slave_1: entered allmulticast mode
[  228.492886][T12273] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  228.532909][T12284] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2263'.
[  228.694235][T12273] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  228.709538][T12292] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2264'.
[  228.795196][T12273] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it
[  228.814676][T12273] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.2261: Corrupt directory, running e2fsck is recommended
[  228.867372][T12297] tipc: Failed to remove unknown binding: 66,0,0/0:3198703164/3198703165
[  228.876879][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  228.886226][T12297] tipc: Failed to remove unknown binding: 66,0,0/0:3198703164/3198703165
[  228.916558][T12300] loop4: detected capacity change from 0 to 512
[  228.924011][T12300] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  228.937269][T12300] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2267: bg 0: block 393: padding at end of block bitmap is not set
[  228.951877][T12300] loop4: lost filesystem error report for type 5 error -117
[  228.959643][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  228.973426][    C1] EXT4-fs (loop4): initial error at time 1774473107: ext4_validate_block_bitmap:441
[  228.982833][    C1] EXT4-fs (loop4): last error at time 1774473107: ext4_validate_block_bitmap:441
[  228.992135][T12300] EXT4-fs (loop4): Remounting filesystem read-only
[  228.998904][T12300] EXT4-fs (loop4): 2 truncates cleaned up
[  229.005228][T12300] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  229.056319][T12306] loop5: detected capacity change from 0 to 512
[  229.093896][T12306] tipc: Enabled bearer <eth:geneve1>, priority 12
[  229.199162][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  229.248773][T12323] loop4: detected capacity change from 0 to 512
[  229.262437][T12323] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  229.275174][T12323] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it
[  229.286647][T12323] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.2272: Corrupt directory, running e2fsck is recommended
[  229.301611][T12323] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117
[  229.329938][T12323] EXT4-fs error (device loop4): ext4_iget_extra_inode:5025: inode #15: comm syz.4.2272: corrupted in-inode xattr: invalid ea_ino
[  229.456447][T12323] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  229.459714][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  229.476252][    C1] EXT4-fs (loop4): initial error at time 1774473107: ext4_iget_extra_inode:5025: inode 15
[  229.486521][    C1] EXT4-fs (loop4): last error at time 1774473107: ext4_iget_extra_inode:5025: inode 15
[  229.518167][T12323] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.2272: couldn't read orphan inode 15 (err -117)
[  229.540505][T12323] loop4: lost filesystem error report for type 5 error -117
[  229.543556][T12323] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  229.605777][T12323] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  229.629522][T12323] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it
[  229.661861][T12323] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.2272: Corrupt directory, running e2fsck is recommended
[  229.689782][T12323] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  229.701709][T12323] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it
[  229.944847][T12333] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  229.982126][T12323] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.2272: Corrupt directory, running e2fsck is recommended
[  229.996871][T12333] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it
[  230.007677][T12342] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  230.036344][T12333] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.2272: Corrupt directory, running e2fsck is recommended
[  230.065383][T12344] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2280'.
[  230.184130][T12333] EXT4-fs error (device loop4): ext4_readdir:265: inode #2: block 3: comm syz.4.2272: path /480/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0
[  230.207409][T12333] EXT4-fs error (device loop4): ext4_readdir:265: inode #2: block 2: comm syz.4.2272: path /480/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=4, size=1024 fake=0
[  230.209740][  T803] tipc: Node number set to 3757492412
[  230.233607][T12333] EXT4-fs error (device loop4): ext4_readdir:265: inode #2: block 8: comm syz.4.2272: path /480/file0: bad entry in directory: directory entry overrun - offset=0, inode=33261, rec_len=132120, size=1024 fake=0
[  230.287450][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  230.434962][T12353] loop4: detected capacity change from 0 to 512
[  230.526052][T12353] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  230.542808][T12353] ext4 filesystem being mounted at /481/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  230.600928][   T28] audit: type=1400 audit(1774473109.133:1754): avc:  denied  { setattr } for  pid=12352 comm="syz.4.2283" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  230.682987][T12364] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bridge, syncid = 0, id = 0
[  230.723420][T12367] netlink: 'syz.0.2288': attribute type 2 has an invalid length.
[  230.741149][   T28] audit: type=1400 audit(1774473109.263:1755): avc:  denied  { listen } for  pid=12366 comm="syz.0.2288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  230.777335][T12367] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2288'.
[  230.859931][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  231.246933][T12377] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2292'.
[  231.356197][T12382] loop4: detected capacity change from 0 to 512
[  231.384442][T12382] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  231.425108][T12382] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it
[  231.521292][T12382] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.2293: Corrupt directory, running e2fsck is recommended
[  231.559769][T12382] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117
[  231.615862][T12382] EXT4-fs error (device loop4): ext4_iget_extra_inode:5025: inode #15: comm syz.4.2293: corrupted in-inode xattr: invalid ea_ino
[  231.683547][T12382] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  231.685057][T12382] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.2293: couldn't read orphan inode 15 (err -117)
[  231.694199][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  231.694217][    C0] EXT4-fs (loop4): initial error at time 1774473110: ext4_iget_extra_inode:5025: inode 15
[  231.694264][    C0] EXT4-fs (loop4): last error at time 1774473110: ext4_iget_extra_inode:5025: inode 15
[  231.874236][T12382] loop4: lost filesystem error report for type 5 error -117
[  231.874916][T12382] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  231.921746][T12382] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  231.960973][T12382] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it
[  231.991775][T12382] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.2293: Corrupt directory, running e2fsck is recommended
[  232.027139][T12382] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  232.044042][T12388] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2294'.
[  232.055641][T12388] vlan3: entered promiscuous mode
[  232.060865][T12388] dummy0: entered promiscuous mode
[  232.078215][T12385] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  232.120008][T12382] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it
[  232.170381][T12392] tipc: Enabled bearer <eth:geneve1>, priority 12
[  232.184318][T12398] TCP: TCP_TX_DELAY enabled
[  232.202764][T12385] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it
[  232.213056][T12382] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.2293: Corrupt directory, running e2fsck is recommended
[  232.246491][T12403] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  232.276371][T12385] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.2293: Corrupt directory, running e2fsck is recommended
[  232.327677][T12385] EXT4-fs error (device loop4): ext4_readdir:265: inode #2: block 3: comm syz.4.2293: path /485/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0
[  232.376099][T12385] EXT4-fs error (device loop4): ext4_readdir:265: inode #2: block 2: comm syz.4.2293: path /485/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=4, size=1024 fake=0
[  232.465802][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  232.478816][T12414] lo speed is unknown, defaulting to 1000
[  232.506742][T12414] hsr0 speed is unknown, defaulting to 1000
[  232.844150][T12425] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2307'.
[  232.966224][T12430] lo speed is unknown, defaulting to 1000
[  232.973846][T12430] hsr0 speed is unknown, defaulting to 1000
[  233.048278][T12444] 8021q: adding VLAN 0 to HW filter on device bond13
[  233.288837][   T28] audit: type=1400 audit(1774473111.743:1756): avc:  denied  { read } for  pid=12446 comm="syz.3.2312" name="file0" dev="tmpfs" ino=2547 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  233.369183][   T28] audit: type=1400 audit(1774473111.743:1757): avc:  denied  { open } for  pid=12446 comm="syz.3.2312" path="/490/file0" dev="tmpfs" ino=2547 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  233.418919][T12425] loop5: detected capacity change from 0 to 512
[  233.511022][T12425] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  233.570833][T12425] EXT4-fs (loop5): 1 truncate cleaned up
[  233.584356][T12425] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  233.624816][   T23] tipc: Node number set to 872444773
[  233.831617][T10698] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  233.891580][   T28] audit: type=1400 audit(1774473112.433:1758): avc:  denied  { unlink } for  pid=3310 comm="syz-executor" name="file0" dev="tmpfs" ino=2547 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  237.058761][T12522] loop5: detected capacity change from 0 to 512
[  237.113358][T12522] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  237.129708][T12522] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it
[  237.159735][T12522] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.2333: Corrupt directory, running e2fsck is recommended
[  237.176502][T12522] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117
[  237.195042][T12522] EXT4-fs error (device loop5): ext4_iget_extra_inode:5025: inode #15: comm syz.5.2333: corrupted in-inode xattr: invalid ea_ino
[  237.218592][T12522] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  237.219642][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  237.235207][    C1] EXT4-fs (loop5): initial error at time 1774473115: ext4_iget_extra_inode:5025: inode 15
[  237.245162][    C1] EXT4-fs (loop5): last error at time 1774473115: ext4_iget_extra_inode:5025: inode 15
[  237.255210][T12522] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.2333: couldn't read orphan inode 15 (err -117)
[  237.267233][T12522] loop5: lost filesystem error report for type 5 error -117
[  237.267795][T12522] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  237.306859][T12528] loop4: detected capacity change from 0 to 512
[  237.321060][T12522] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  237.351539][T12522] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it
[  237.362674][T12528] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  237.377444][T12522] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.2333: Corrupt directory, running e2fsck is recommended
[  237.390494][T12528] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it
[  237.409925][T12528] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.2335: Corrupt directory, running e2fsck is recommended
[  237.453660][T12528] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117
[  237.483173][T12528] EXT4-fs error (device loop4): ext4_iget_extra_inode:5025: inode #15: comm syz.4.2335: corrupted in-inode xattr: invalid ea_ino
[  237.501965][T12522] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  237.540002][T12522] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it
[  237.550523][T12531] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  237.560662][T12528] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  237.562095][T12522] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.2333: Corrupt directory, running e2fsck is recommended
[  237.584398][T12531] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it
[  237.594687][T12531] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.2333: Corrupt directory, running e2fsck is recommended
[  237.601688][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  237.608357][T12531] EXT4-fs error (device loop5): ext4_readdir:265: inode #2: block 3: comm syz.5.2333: path /91/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0
[  237.614483][    C0] EXT4-fs (loop4): initial error at time 1774473116: ext4_iget_extra_inode:5025: inode 15
[  237.645873][    C0] EXT4-fs (loop4): last error at time 1774473116: ext4_iget_extra_inode:5025: inode 15
[  237.671716][T12528] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.2335: couldn't read orphan inode 15 (err -117)
[  237.690685][T12531] EXT4-fs error (device loop5): ext4_readdir:265: inode #2: block 2: comm syz.5.2333: path /91/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=4, size=1024 fake=0
[  237.695143][T12528] loop4: lost filesystem error report for type 5 error -117
[  237.720714][T12524] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters
[  237.749193][T12531] EXT4-fs error (device loop5): ext4_readdir:265: inode #2: block 8: comm syz.5.2333: path /91/file0: bad entry in directory: directory entry overrun - offset=0, inode=33261, rec_len=132120, size=1024 fake=0
[  237.749224][T12528] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  237.798382][T12528] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  237.838539][T12528] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it
[  237.858899][T12528] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.2335: Corrupt directory, running e2fsck is recommended
[  237.903418][T12534] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  237.916444][T12534] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it
[  237.921300][T12537] bond16: entered promiscuous mode
[  237.932574][T12528] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  237.944452][T12534] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.2335: Corrupt directory, running e2fsck is recommended
[  237.960034][T10698] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  237.984926][T12528] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it
[  238.031352][T12528] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.2335: Corrupt directory, running e2fsck is recommended
[  238.072796][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  238.753819][T12568] lo speed is unknown, defaulting to 1000
[  238.775300][T12568] hsr0 speed is unknown, defaulting to 1000
[  239.031073][T12574] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2345'.
[  239.158858][T12581] loop4: detected capacity change from 0 to 512
[  239.246681][T12581] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  239.279458][T12581] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it
[  239.290987][T12581] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.2348: Corrupt directory, running e2fsck is recommended
[  239.305111][T12581] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117
[  239.314539][T12581] EXT4-fs error (device loop4): ext4_iget_extra_inode:5025: inode #15: comm syz.4.2348: corrupted in-inode xattr: invalid ea_ino
[  239.329180][T12581] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  239.329335][T12581] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.2348: couldn't read orphan inode 15 (err -117)
[  239.338542][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  239.338561][    C0] EXT4-fs (loop4): initial error at time 1774473117: ext4_iget_extra_inode:5025: inode 15
[  239.338595][    C0] EXT4-fs (loop4): last error at time 1774473117: ext4_iget_extra_inode:5025: inode 15
[  239.382663][T12581] loop4: lost filesystem error report for type 5 error -117
[  239.389077][T12581] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  239.398314][T12578] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2346'.
[  239.443153][T12581] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  239.477478][   T28] audit: type=1400 audit(1774473118.003:1759): avc:  denied  { setopt } for  pid=12577 comm="syz.0.2346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  239.545249][T12581] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it
[  239.556877][T12581] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.2348: Corrupt directory, running e2fsck is recommended
[  239.579932][T12596] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  239.661035][T12611] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  239.662697][T12596] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it
[  239.672888][T12611] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it
[  239.672907][T12611] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.2348: Corrupt directory, running e2fsck is recommended
[  239.724569][T12596] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.2348: Corrupt directory, running e2fsck is recommended
[  239.872241][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  239.910393][   T28] audit: type=1400 audit(1774473118.453:1760): avc:  denied  { write } for  pid=12617 comm="syz.4.2356" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  240.154113][T12618] loop4: detected capacity change from 0 to 128
[  240.615041][T12623] lo speed is unknown, defaulting to 1000
[  240.644909][T12623] hsr0 speed is unknown, defaulting to 1000
[  240.891575][T12626] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2359'.
[  240.900802][T12626] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2359'.
[  240.917448][T12626] bridge0: entered promiscuous mode
[  240.941945][T12626] erspan0: entered promiscuous mode
[  240.960415][T12626] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network
[  240.979737][T12626] hsr1: Slave B (erspan0) is not up; please bring it up to get a fully working HSR network
[  241.280076][T12633] No such timeout policy "syz0"
[  241.742123][T12639] loop5: detected capacity change from 0 to 512
[  241.753540][T12632] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2361'.
[  241.764749][T12639] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  241.777300][T12639] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it
[  241.787901][T12639] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.2363: Corrupt directory, running e2fsck is recommended
[  241.802425][T12639] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117
[  241.811912][T12639] EXT4-fs error (device loop5): ext4_iget_extra_inode:5025: inode #15: comm syz.5.2363: corrupted in-inode xattr: invalid ea_ino
[  241.826256][T12639] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  241.827334][T12639] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.2363: couldn't read orphan inode 15 (err -117)
[  241.836478][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  241.836493][    C0] EXT4-fs (loop5): initial error at time 1774473120: ext4_iget_extra_inode:5025: inode 15
[  241.836539][    C0] EXT4-fs (loop5): last error at time 1774473120: ext4_iget_extra_inode:5025: inode 15
[  241.878799][T12639] loop5: lost filesystem error report for type 5 error -117
[  241.943966][T12639] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  241.973431][T12645] loop4: detected capacity change from 0 to 256
[  242.013303][T12639] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  242.039398][T12639] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it
[  242.083429][T12639] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.2363: Corrupt directory, running e2fsck is recommended
[  242.108785][T12647] loop4: detected capacity change from 0 to 8192
[  242.171504][T12649] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  242.241770][T12649] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it
[  242.253472][T12649] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.2363: Corrupt directory, running e2fsck is recommended
[  242.284008][T12639] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  242.295681][T12639] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it
[  242.306531][T12639] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.2363: Corrupt directory, running e2fsck is recommended
[  242.328958][T10698] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  243.971456][T12675] netlink: 'syz.0.2374': attribute type 1 has an invalid length.
[  244.241042][T12677] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1500) !
[  244.268172][T12677] syzkaller0: entered promiscuous mode
[  244.282430][   T28] audit: type=1400 audit(1774473122.823:1761): avc:  denied  { connect } for  pid=12678 comm="syz.2.2375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  244.305354][T12677] syzkaller0: entered allmulticast mode
[  244.356215][T12683] loop5: detected capacity change from 0 to 256
[  244.533474][T12671] lo speed is unknown, defaulting to 1000
[  244.539555][T12671] hsr0 speed is unknown, defaulting to 1000
[  244.699851][T12691] No such timeout policy "syz0"
[  245.696425][T12708] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2383'.
[  245.813148][   T28] audit: type=1326 audit(1774473124.343:1762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12710 comm="syz.4.2385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe559eac799 code=0x7ffc0000
[  245.855057][   T28] audit: type=1326 audit(1774473124.343:1763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12710 comm="syz.4.2385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe559eac799 code=0x7ffc0000
[  245.882652][   T28] audit: type=1326 audit(1774473124.343:1764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12710 comm="syz.4.2385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fe559eac799 code=0x7ffc0000
[  245.910975][   T28] audit: type=1326 audit(1774473124.343:1765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12710 comm="syz.4.2385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe559eac799 code=0x7ffc0000
[  245.935657][   T28] audit: type=1326 audit(1774473124.343:1766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12710 comm="syz.4.2385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe559eac799 code=0x7ffc0000
[  245.959535][   T28] audit: type=1326 audit(1774473124.343:1767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12710 comm="syz.4.2385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fe559eac799 code=0x7ffc0000
[  245.995038][   T28] audit: type=1326 audit(1774473124.343:1768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12710 comm="syz.4.2385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe559eac799 code=0x7ffc0000
[  246.056514][   T28] audit: type=1326 audit(1774473124.343:1769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12710 comm="syz.4.2385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe559eac799 code=0x7ffc0000
[  246.080804][   T28] audit: type=1326 audit(1774473124.343:1770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12710 comm="syz.4.2385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fe559eac799 code=0x7ffc0000
[  246.104643][   T28] audit: type=1326 audit(1774473124.343:1771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12710 comm="syz.4.2385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe559eac799 code=0x7ffc0000
[  246.155600][T12718] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=279 sclass=netlink_tcpdiag_socket pid=12718 comm=syz.5.2384
[  247.575023][T12728] loop5: detected capacity change from 0 to 256
[  247.771232][T12730] loop5: detected capacity change from 0 to 512
[  247.867564][T12730] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  248.073972][T12730] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it
[  248.100558][T12730] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.2389: Corrupt directory, running e2fsck is recommended
[  248.139981][T12730] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117
[  248.164252][T12730] EXT4-fs error (device loop5): ext4_iget_extra_inode:5025: inode #15: comm syz.5.2389: corrupted in-inode xattr: invalid ea_ino
[  248.221497][T12730] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  248.223120][T12730] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.2389: couldn't read orphan inode 15 (err -117)
[  248.232275][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  248.232290][    C1] EXT4-fs (loop5): initial error at time 1774473126: ext4_iget_extra_inode:5025: inode 15
[  248.232323][    C1] EXT4-fs (loop5): last error at time 1774473126: ext4_iget_extra_inode:5025: inode 15
[  248.364127][T12730] loop5: lost filesystem error report for type 5 error -117
[  248.364758][T12730] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  248.432833][T12730] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  248.465786][T12730] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it
[  248.500868][T12730] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.2389: Corrupt directory, running e2fsck is recommended
[  248.541442][T12733] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  248.565815][T12733] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it
[  248.586973][T12733] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.2389: Corrupt directory, running e2fsck is recommended
[  248.615803][T12730] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  248.639969][T12730] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it
[  248.661063][T12730] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.2389: Corrupt directory, running e2fsck is recommended
[  248.704341][T10698] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  248.924647][T12737] bond7: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  248.937728][T12737] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  248.972827][T12737] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check.
[  249.084125][T12746] lo speed is unknown, defaulting to 1000
[  249.090500][T12746] hsr0 speed is unknown, defaulting to 1000
[  250.127134][T12763] loop4: detected capacity change from 0 to 1024
[  250.222478][T12763] EXT4-fs: Ignoring removed oldalloc option
[  250.233560][T12763] EXT4-fs: Ignoring removed bh option
[  250.270196][T12763] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  250.434866][ T2208] ==================================================================
[  250.442984][ T2208] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic
[  250.452461][ T2208] 
[  250.454780][ T2208] write to 0xffff88811d02cd20 of 20 bytes by task 12763 on cpu 1:
[  250.462576][ T2208]  copy_folio_from_iter_atomic+0x75f/0x1170
[  250.468505][ T2208]  generic_perform_write+0x2c1/0x490
[  250.473806][ T2208]  ext4_buffered_write_iter+0x1ee/0x3c0
[  250.479439][ T2208]  ext4_file_write_iter+0x380/0xfa0
[  250.484639][ T2208]  iter_file_splice_write+0x6c4/0xa80
[  250.490005][ T2208]  direct_splice_actor+0x156/0x2a0
[  250.495117][ T2208]  splice_direct_to_actor+0x311/0x670
[  250.500494][ T2208]  do_splice_direct+0x119/0x1a0
[  250.505344][ T2208]  do_sendfile+0x382/0x650
[  250.509757][ T2208]  __x64_sys_sendfile64+0x105/0x150
[  250.514954][ T2208]  x64_sys_call+0x2dc4/0x3020
[  250.519626][ T2208]  do_syscall_64+0x12c/0x370
[  250.524212][ T2208]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  250.530096][ T2208] 
[  250.532427][ T2208] read to 0xffff88811d02cc00 of 1024 bytes by task 2208 on cpu 0:
[  250.540227][ T2208]  copy_folio_from_iter_atomic+0x75f/0x1170
[  250.546142][ T2208]  generic_perform_write+0x2c1/0x490
[  250.551420][ T2208]  shmem_file_write_iter+0xc5/0xf0
[  250.556520][ T2208]  lo_rw_aio+0x67d/0x730
[  250.560773][ T2208]  loop_process_work+0x56c/0xac0
[  250.565706][ T2208]  loop_workfn+0x31/0x40
[  250.569938][ T2208]  process_scheduled_works+0x513/0xa10
[  250.575396][ T2208]  worker_thread+0x58a/0x780
[  250.579978][ T2208]  kthread+0x22a/0x280
[  250.584036][ T2208]  ret_from_fork+0x150/0x360
[  250.588616][ T2208]  ret_from_fork_asm+0x1a/0x30
[  250.593368][ T2208] 
[  250.595671][ T2208] Reported by Kernel Concurrency Sanitizer on:
[  250.601804][ T2208] CPU: 0 UID: 0 PID: 2208 Comm: kworker/u8:7 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  250.612811][ T2208] Tainted: [W]=WARN
[  250.616594][ T2208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  250.626633][ T2208] Workqueue: loop4 loop_workfn
[  250.631572][ T2208] ==================================================================
[  251.082464][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.