last executing test programs:

5m18.73413122s ago: executing program 3 (id=440):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file1\x00', 0x10000, &(0x7f0000000180)={[{@noload}, {@stripe={'stripe', 0x3d, 0xdc}}, {@bsdgroups}, {@noload}, {@abort}, {@auto_da_alloc}]}, 0xff, 0x46e, &(0x7f00000004c0)="$eJzs3M9vFFUcAPDvTLctBbRV8QcIWkUj8UdLy8+DF4wmHjQx0QPGU20LQRaqtCZCiFYPeDQk3o1H/wVPejHGk4lXvRsSYriAJiZjZna2XZbdwtKli+znk0z73s6bvvedmbf7Zt5OA+hb4/mPJGJrRPweEaO17PUFxmu/rl05P/v3lfOzSWTZ238lRbmrV87P1ovWt9tSy2RZmR9uUe+F9yJmqtX5M2V+cunUh5OLZ8+9dOLUzPH54/Onpw8f3r9v19DB6QNdiTOP6+qOTxd2bn/93Ytvzh69+H6W5e3dWq5vjKNLRsZre7elZ7tcWa/d15BOKj1sCB0ZiIj8cA0W/X80BmJkZd1ovPZF661GNq6BwB2TZVnW6vO5tJwB97Aket0CoDfqH/T59W992aChx13h8pGIjw7V4r9WLrU1lUjLMoNN17fdNB4RR5f/+SZfopP7EJvuUIMAgHveD0ci4sVW4780Hmkod38kEcu19AMR8WBEPBQR2yLi4Yii7KMR8ViH9TfPkFw//hnO23Hp9iK7Nfn47+Vybmtl/PdvVsRfGhsoc/kYcCwGk2MnqvN7i30SsScGh/P81Bp1/Pjqb1+1W9c4/suXvP76WLAmvVRpukE3N7M0s86wV1z+PGJHpSn+QhL1aZwkIrZHxI6O/vLqFcaJ57/b2a7UzeNfQxfmmbJvI56rHf/laIq/Lmk7Pzl16OD0gclNUZ3fO1k/K270y68X3mpX/7ri74L8+G9uPv8LK/GPJZsiFs+eO1nM1y5G8wzxTV3448u21zS3e/4PJe8U6aHytU9mlpbOTEUMJW/c+Pr06rZlvtIY/57dreJPi/e4erSPR0R+Eu+KiCci4smy7U9FxNMRsXuN+H9+5ZkPOo9/jbvyXZTHP3ez4x+Nx7/zxMDJn77vPP66/PjvL1J7ynnHW3n/W21FjDW/0phYx64DAACA/420+A58kk6spNN0YqL2Hf5tsTmtLiwuvXBs4ePTc7Xvyo/FYFq/0zXacD90qkiv5qeb8vvK+8ZfD4wU+YnZhepcr4OHPrelTf/P/TnQ69YBd5zntaB/6f/Qv/R/6F/6P/Qv/R/6V6v+/1kP2gFsPJ//0L/0f+hf+j/0L/0f+lLbh/fTdT3y35VEEhG9q11i7USknW9ViZ62OWn7byDOnjs5clfs1RaJSvs2dycx3HJVr9+ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuuO/AAAA//9l3OXU")
syz_usb_connect$rtl8150(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
pipe(&(0x7f0000000040))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
socket$nl_generic(0x10, 0x3, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
socket(0x10, 0x3, 0x0)
socket(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x3, 0x6)
socket$netlink(0x10, 0x3, 0xb)
socket$netlink(0x10, 0x3, 0x14)
socket$pppl2tp(0x18, 0x1, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
socket$netlink(0x10, 0x3, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
pipe2(&(0x7f0000000040), 0x80000)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010025bd7000fadbdf2500000003", @ANYRES32=r1, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES64=r0], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x4000)

5m18.048660676s ago: executing program 3 (id=451):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x6, 0xf60, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4a61, 0x2, @loopback, 0xaa}, 0x1c)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x80552, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x5, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x2000000020000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
close(r3)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
io_setup(0x7f, &(0x7f0000001440)=<r6=>0x0)
r7 = syz_io_uring_setup(0x2af8, &(0x7f0000000380)={0x0, 0x0, 0x13090, 0x0, 0x71}, &(0x7f0000000100), &(0x7f0000000080), &(0x7f0000000000))
io_getevents(r6, 0x3, 0x3, &(0x7f0000000580)=[{}, {}, {}], 0x0)
io_submit(r6, 0x1, &(0x7f0000000800)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7df, r7, 0x0}])
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000018000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001c006000100d9030000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000ac0)=ANY=[], 0x70}}, 0x20000040)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x3)
r8 = socket(0x2, 0x80805, 0x0)
mknodat$null(0xffffffffffffffff, &(0x7f0000000a80)='./file0\x00', 0x8000, 0x103)
io_uring_setup(0x924, 0x0)
r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x1}, 0x50)
ioctl$FS_IOC_SETFSLABEL(r9, 0x41009432, &(0x7f0000000940)="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")
setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x4001, 0x3, 0x310, 0x148, 0x0, 0x148, 0x148, 0x148, 0x278, 0x240, 0x240, 0x278, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0xff000000, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xe8, 0x148, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@multiport={{0x50}, {0x0, 0x3, [0x4e20, 0x4e21, 0x4e23, 0x4e23, 0x4e20, 0x4e20, 0x4e20, 0x4e00, 0x4e21, 0x4e22, 0x4e23, 0x4e23, 0x4e21, 0x4e21, 0x4e24], [0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1], 0x1}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xffffff00, 0xffffff00, 0xffffff00, 0xffffffff], 0x4e22, 0x4e24, 0x4e20, 0x4e23, 0x8, 0x2, 0x5f4c, 0x100, 0x2}}}, {{@ip={@local, @remote, 0xff000000, 0xffffff00, 'geneve0\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x1, 0x2}, 0x0, 0xc8, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x1, 0x2, 0x3, 0x1, 0x7}}, @common=@ttl={{0x28}, {0x0, 0xa3}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x15, 0x5, 0x7, 0x9, 'snmp\x00', 'syz0\x00', {0xf7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x370)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000001c0)='cpu<20\t&&')
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r10=>0x0})
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="44000000100001042dbd7000000000f43b6fe900", @ANYRES32=0x0, @ANYBLOB="4b02060000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10], 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0x0)

5m17.597372679s ago: executing program 3 (id=461):
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000100)=""/151, 0x1a, 0x97, 0x1}, 0x28)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045)
r0 = socket$netlink(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r1, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414"], 0x44}, 0x1, 0x2}, 0x40000)

5m17.336254433s ago: executing program 3 (id=464):
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x208894, &(0x7f0000000640)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESOCT, @ANYRES32, @ANYRES8, @ANYRESOCT, @ANYBLOB="0ea1a3ed758749a35b0cf19e7301710a8a7c5e7fe9b7c49589266bd5045f15f1817fcc4ea04eeac3f0df37b8beaeafc22a5a08a1a70024"], 0x1, 0x2c3, &(0x7f0000000180)="$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")
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./bus\x00', 0x2901481, 0x0, 0x0, 0x0, &(0x7f000009de00))
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xd9, 0x5, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = open(&(0x7f0000000040)='.\x00', 0x8c00, 0x0)
fsetxattr$security_selinux(r0, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:lvm_control_t:s0\x00', 0x23, 0x0)
getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x9000, &(0x7f0000000000)={0xf5, 0x7a}, 0x20)
writev(r1, &(0x7f0000000140)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000004000200060c10000000010000000000", 0x58}], 0x1)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
chroot(&(0x7f0000000080)='./file0/../file0/file0\x00')
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xb}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$fou(&(0x7f00000003c0), r2)
sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x24, r3, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x62}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40000)
socket$l2tp(0x2, 0x2, 0x73)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c0)
renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0/file3\x00', 0x0)
pivot_root(&(0x7f0000000140)='./file0/../file0\x00', 0x0)
syz_read_part_table(0x1051, &(0x7f0000000000)="$eJzsz8GpAjEQBuD/7YvB9SLI9uDFHixCvFuJ2IJteLJBQWLcFmQP33eYf0LIhAmLcO+xf2bIddq1vrby/71/Jdn0th5LkmF+uepRMrb4m89Zt3KakstnTj0kuY3JtvTJ7YPz4yfLAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDCvQMAAP//XKAGLQ==")

5m16.880987877s ago: executing program 3 (id=466):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x4001, 0x3, 0x420, 0x0, 0x0, 0x148, 0x2d0, 0x148, 0x2d0, 0x240, 0x240, 0x4d0, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x288, 0x2d0, 0x0, {}, [@common=@unspec=@comment={{0x120}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x1, 0x1, 'syz1\x00', 0xc}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x8, 0x5, 0x1, 'netbios-ns\x00'}}}, {{@ip={@local, @multicast1, 0xff000000, 0xffffff00, 'tunl0\x00', 'pimreg1\x00', {0xff}, {0xff}, 0x11, 0x3, 0x60}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xc7e, 0x8, 0x7, '\x00', {0x20}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x480) (fail_nth: 2)

5m16.647540519s ago: executing program 3 (id=470):
r0 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1ff, 0x4)
sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="12000000e0ffffff29000000", @ANYRES64=r0], 0x108}}], 0x1, 0xc040)

5m16.61193977s ago: executing program 32 (id=470):
r0 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1ff, 0x4)
sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="12000000e0ffffff29000000", @ANYRES64=r0], 0x108}}], 0x1, 0xc040)

1m54.772429781s ago: executing program 4 (id=2207):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000000)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@noblock_validity}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x57b, &(0x7f00000010c0)="$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")
chdir(&(0x7f0000000400)='./file0\x00')
rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='./file1\x00') (fail_nth: 2)

1m54.437004099s ago: executing program 4 (id=2209):
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2, 0xe}, 0x10e240, 0x10004, 0x4, 0x5, 0x9b40, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x3d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r0 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0)
getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r1, 0x4c01, 0x802}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x25}}]}}}]}, 0x38}}, 0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0)
write$cgroup_int(r2, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000020080800000000001000700000018d9bfe9ca9a50e7ffdf5c2f0ccc1881f668b21dc15971cc0ca77d65d19cd393bb7bcb1d8f91384b6a764a76164018efc8ab00f76bc673e5268c3cf03f2922739e7faa5fc0a37996f337de3331bbd3d5dbfe7063ab2bcf2629483319a69665f8ce7a82a2dab489fd90b273aaa0a1ae815b4062d6a4f5259f459f450a8d83ffcd160661f2289f1fe3756c60d720db6dae4131018ea23652e4eb0e59396f5d57fc90d6585ce9e76cbb5b5c19e09e02d0090000007bc1bb553e69d3071a9ae7e963b6"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002})
write$tun(r3, &(0x7f0000000040)={@val={0x0, 0x18}, @val={0x3, 0x4, 0x3, 0x7, 0xc5, 0x10}, @llc={@llc={0x80, 0x6, "be", "549ac7ac3ebab41db1871360095af89deb1744c3f2f63a75f706eb3be12e1f6440fe5129897303b3e44593864e5e86e5d97607236c47043417a61f26b720eedbe50fef3c25c8b7839194975da6bdacb4dacdbdc005f0688f340aa084ccf5ff6ac2b3a0135abc7ebd134d34a5fb7553cf695654fb2231c8827006d5dce05c6b8ee078d00de6f262db940bb52ea3026f14c74431d556ba5adad7a89d15396f284660020c0086779128aa04d3c7753bd5eefc807f284f74e62a2496d4505150469a303beb1d1cfe61477537822bb798f55673a4f4fc036936575907f453460a"}}}, 0xef)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
socket$inet6(0xa, 0x2, 0x3a)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000580), 0xaad80)

1m53.624795631s ago: executing program 4 (id=2219):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f00000002c0)={[{@test_dummy_encryption_v1}, {@usrjquota}, {@auto_da_alloc}, {@init_itable}, {@nodioread_nolock}, {@journal_checksum}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}]}, 0x1, 0x587, &(0x7f0000000940)="$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")
setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f0000000380), 0x0, 0x1)
socket$netlink(0x10, 0x3, 0x0)
socket$kcm(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001180)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
munmap(&(0x7f0000087000/0x3000)=nil, 0x3000)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f00000000c0)={[{@noinit_itable}]}, 0x1, 0x524, &(0x7f0000001340)="$eJzs3e9rJGcdAPDvTLJpcpearYqcBdtiK3dFbzdpbBtF2gqirwpqfX/GZBNCNtmQ3dRLKJriHyCIqP+BbwT/AEH6HyhCQd+LiiJ61Zfakd2dvUsuu9k12WTvNp8PPJnnmV/f5xkys/PjYSaAK+u5iHgjIiYi4sWImMvHp3mKw3ZqzvfBvXdWmimJLHvrH0kk+bjOuprlyYi4ni82HRHf/FrEd5KTcev7B5vL1WplNy+XG1s75fr+we2NreX1ynple3Fx4ZWlV5deXprPcudqZzEiXvvKX37yw59/9bVff+67f7zzt1vfa1brS59o1zsiVs4VoIf2ugutbdHR3Ea7FxFsRJrtKUyMuhYAAAyieY7/0Yj4dOv8fy4mWmdzAAAAwDjJXp+N/yQRGQAAADC20oiYjSQt5X0BZiNNS6V2H96Px7W0Wqs3PrtW29tebU6LKEYhXduoVubzvsLFKCTN8kLex7ZTfumh8mJEPBURP56baZVLK7Xq6qhvfgAAAMAVcf3Z49f//55LW3kAAABgzBR7FgAAAIBx4ZIfAAAAxp/rfwAAABhrX3/zzWbKOt/xXn17f2+z9vbt1Up9s7S1t1Jaqe3ulNZrtfXWO/u2+q2vWqvtfD629+6WG5V6o1zfP7izVdvbbtzZOPYJbAAAAOASPfXse39IIuLwizOtFPl7AAGO+fOoKwAM08SoKwCMzOSoKwCMTKHvHI4QMO6SPtNPdt5p3yuM315MfQAAgOG7+cmTz/+n8mn97w0AjzN9fQDg6vF0D66uwll7AN4Ydk2AUflIe/BEr+k9X94xwPP/9j2GLDtTxQAAgKGZbaUkLeXn6bORpqVSxJOtzwIUkrWNamU+vz74/VzhiWZ5obVk0rfPMAAAAAAAAAAAAAAAAAAAAAAAAADQlmVJZINL7i8GAAAAPDYi0r8mrbf5R9yce2H2+N2B41/9SuOtn95dbjR2FyKmkn/ONcdNRUTjZ/n4lzKfBAAAAIBHQPs6PR8ujLo2AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIybD+69s9JJlxn371+OiGK3+JMx3RpORyEirv0rickjyyURMTGE+IfvRsSNbvGT+DDLsmJei27xZy44frG1abrHTyPi+hDiw1X2XvP480a3/S+N51rD7vvfZJ7Oq/fxL71//Jvocfx58qFyL0+//8tyz/jvRjw92f3404mftOMfC9EsPD9gG7/9rYODrhOOrLJb/KOxyo2tnXJ9/+D2xm+W1yvrle3FxYVXll5denlpvry2Ua3kf7uG+dGnfvXhae2/1iN+8Xj7T2z/FwZqfRb/ff/uvY+1C4Vu8W893/3390aP+Gn+2/eZPN+cfrOTP2znj3rmF7975rT2r/Zo/3Sf9t8aqP3xhRe/8YM/Paj5ESe2BgBwGer7B5vL1Wpl95TM9ADzXHLm9WGsZyYeleZsLlfj0ajGqDLZ99v/j31n7pxCdp2n/+L/XyY7z+KTMYRqTJ3YTyfirCtMIg57brqT/5AAAMCYeXDSf9oTJAAAAAAAAAAAAAAAAAAAAOAinfG1ZNMRMfDMD8c8HE1TAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABO9b8AAAD//0a1xO0=")
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x30, 0x3, 0x8, 0x401, 0x0, 0x0, {0x5, 0x0, 0x8}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0xa00}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x880}, 0x20000054) (fail_nth: 5)
add_key(&(0x7f0000000100)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
ioctl$SG_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000380)={'\x00', 0xd1, 0x7, 0x8, 0x5, 0x4, r0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0xfffffffffffffefb, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x78, 0x30, 0xb, 0x70bd2d, 0x25dfdbff, {}, [{0x64, 0x1, [@m_gact={0x60, 0x1, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x80, 0x9, 0x8, 0x8, 0xfffffff6}}, @TCA_GACT_PROB={0x0, 0x3, {0x3, 0x1124, 0x5}}]}, {0x4, 0x6, "f1264d5c4f6a24cc77ac4f6c8150a62f4527ca2a201638fb630002a62339f42edcf88b803626a3e27a5227110e1816ed770e5a2dce3c9120f5e84103d19e9799fad076eaca6ba940f11fe9b6eb3d42d062d0fba7e7efe1eac99518621cca7b544f9165605ab5983f31199444641561894af40c59de80451c8c70d9ae943fd4789ef500"/142}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x78}}, 0x44)
r7 = socket(0x2, 0x80805, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'wlc\x00', 0x0, 0xa7e, 0x70}, 0x2c)

1m52.570791787s ago: executing program 4 (id=2232):
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000001240)='./file2\x00', 0x455a, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1222, &(0x7f0000002740)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00')
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c1000003c00070101000000fbdbdf25037c000004008c80131001"], 0x102c}, 0x1, 0x10000000000}, 0x2404c002)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x20044000)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
ptrace$pokeuser(0x6, r5, 0x388, 0x41d9fda7)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000440)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug}, {@block_validity}, {@errors_remount}, {@debug}]}, 0x1, 0x44f, &(0x7f0000000640)="$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")
fsetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)=':\x00', 0xffdf, 0x0)
preadv(r0, &(0x7f0000000200)=[{&(0x7f00000039c0)=""/4088, 0xff8}, {&(0x7f0000000140)}], 0x2, 0x15f, 0x0)

1m50.641363017s ago: executing program 4 (id=2240):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket(0x10, 0x803, 0x0)
setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85)
getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x3c}}, 0x0)
bind$packet(0xffffffffffffffff, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x880, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$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")
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, 0x0, 0x0, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400})

1m49.768435833s ago: executing program 4 (id=2255):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x2, 0xfffffffe, 0xf, 0x2, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f00fff4fe01000000000000", 0x1c)

1m49.713426725s ago: executing program 33 (id=2255):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x2, 0xfffffffe, 0xf, 0x2, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f00fff4fe01000000000000", 0x1c)

2.510104769s ago: executing program 6 (id=3426):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r1, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001f00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}], 0x1, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000280)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRES32=r3, @ANYBLOB="020001"], 0x9)
sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000400)='`', 0x1}], 0x1}, 0x20000000)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000100)={r3, 0x2}, 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x11, 0x3, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
recvmsg$kcm(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000000680)=""/119, 0x77}, {&(0x7f0000000800)=""/251, 0xfb}, {&(0x7f0000000240)=""/43, 0xfffffffffffffd48}, {&(0x7f0000000540)=""/35, 0x23}, {&(0x7f0000002c40)=""/4093, 0x100c}, {&(0x7f0000000280)=""/174, 0xae}, {&(0x7f00000017c0)=""/74, 0x4a}, {&(0x7f0000000580)=""/166, 0xa6}, {&(0x7f00000015c0)=""/34, 0x22}, {&(0x7f0000000380)=""/147, 0x93}], 0xa}, 0x40010102)
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0xfca6}, {&(0x7f0000001400)="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", 0xa91}], 0x3}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f00000000c0)={0x11, 0x10, 0xfa00, {0x0}}, 0x18)
sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x7c, 0xa, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_EXPR={0x4c, 0x11, 0x0, 0x1, @payload={{0xc}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0xe0}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0xb7}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xc8}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_TYPE={0x8}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x2}]}}}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @quota={{0xa}, @void}}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xb00000}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4002030}, 0xc4000)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x3a, @private=0xa010100, 0x4e20, 0x1, 'sed\x00', 0x28, 0xfffffff9, 0x53}, 0x2c)

1.883476162s ago: executing program 0 (id=3435):
r0 = syz_open_dev$loop(&(0x7f0000000280), 0x10000, 0x68001)
unshare(0x8040600)
ioctl$LOOP_CONFIGURE(r0, 0xc0c0128e, &(0x7f0000000140)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8]}})

1.882250892s ago: executing program 1 (id=3436):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$eJzs281vFOUfAPDvTLvl11/BVsQ38KWKRuJLSwGVgwc1mnjAxEQPevDQtAtBFjC0JkJIBGPwZIyJd+PRf8GTXozxZOJV74aEGC6CpzWzO9PuLrtLt+x2kf18koHnmZc+3+/OPLvPzLMbwMiazf5JIrZHxO8RMV2vNu8wW//v2tXzS9evnl9Kolp9+6+ktt/fV88vFbsWx03llX1pRPpZEnvatLty9tyJxUqlfCavz6+e/HB+5ey5546fXDxWPlY+deDw4UMHF1584cDzfclzKtK89MZ7X7155Ium/Fvy6JPZbhufrFb73Nxw7WgoJ+NDDISejEVEdrpKtf4/HWOxfvKm4/VPhxocMFDVarU61XnzhSpwB0uiua7Lw6goPuiz+99iaR0EvDy44cfQXXmlfgOU5X0tX+pbxteeGJRa7m/7aTYi3r3wzzfZEoN5DgEA0OSHbPzzbDbaaR3/pXFfw3535XNDMxFxd0TsjIh74lTsioh7I2r73h8RD/TYfuskyY3jn/TyphLboGz891I+t9U8/itGfzEzltd21PIvJUePV8r766/J+/kwurzQpY0fX/vty07bGsd/2ZK1X4wF8zguj29rPmZ5cXXxVnJudOVixO7xdvknazMBSUQ8GBG7N9nG8ae/e6jTtpvn30Uf5pmq30Y8VT//F6Il/0LSfX5y/n9RKe+fL66KG/3y66W3OrV/S/n3QXb+/9/2+l/LfyZpnK9d6b2NS3983vGeZrPX/0TyTq08ka/7eHF19cxCxERypB504/oD68cW9WL/LP99e9v3/52x/krsiYjsIn44Ih6JiEfz2B+LiMcjYm+X/H9+9YkPWtdNbjj/wcryX+7p/K8XJqJ1TfvC2Imfvm9qdGa9mOd/vfv5P1Qr7cvXbOT9byNxbe5qBgAAgP+eNCK2R5LOrZXTdG6u/h3+XRFp5fTK6jNHT390arn+G4GZKKXFk67phuehC/ltfb1+MSLqXy0oth/Mnxt/PTZZq88tna4sDzt5GHFTHfp/VvlzbNjRAQPn91owunrq/8ng4gC2ns9/GF299f9tA4sD2Gqldv1/chiRAFuv3ef/J0OIA9h6Lf3ftB+MEM//YHTp/zC69H8YSSuTcfMfyXctFH9pk4ffsYUo3RZhDKwQ6W0RhsKACsN9XwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiXfwMAAP//EBbjLA==")
r0 = creat(&(0x7f0000000080)='./file1\x00', 0x8)
write$P9_RVERSION(r0, &(0x7f0000000000)={0xffffffffffffff51, 0x65, 0xffff, 0x5, 0x6, '9P2000.L'}, 0x27848c70)
socket$can_bcm(0x1d, 0x2, 0x2)
set_mempolicy(0x4005, &(0x7f00000000c0)=0x4, 0x7)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000200000000000000001d0000000c000600020000000200000014002f80080001000000000008000100030000007db050cb46113933b50040a38b27203764b57eb9501923da8c62d50b856f1903dab7e2f62fc8692b65e8a4b3ad798a80eddaeeb5956cd40344c43b0759746490142b2fae04605f8d723a5d9ce287861c818196e6f80f0f9cbd1f69acb8fec6fd1d3820ff234c35d5bbbbe15f7d276ce0c582e2bda62413368ec58bad0484fe4eb321812d62fdcacf456162185d130c3f2a57f92d940217"], 0x34}}, 0x0)
r2 = socket$inet6(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400080004"], 0x2c}}, 0x0)
sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x370, 0x248, 0x1000000, 0xffffffff, 0x248, 0xffffffff, 0x2d8, 0xffffffff, 0xffffffff, 0x2d8, 0xffffffff, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010101, @private=0xa010100, 0x0, 0x0, 'bond_slave_1\x00', 'geneve1\x00', {}, {}, 0x4, 0x0, 0x28}, 0x0, 0x220, 0x248, 0x0, {0x0, 0x1c8}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_batadv\x00', {0x6, 0x0, 0x39, 0x0, 0x0, 0x80000000, 0x3, 0x7}, {0x3}}}, @common=@inet=@hashlimit1={{0x58}, {'veth0_to_batadv\x00', {0x0, 0x0, 0x8, 0x6db95ebc, 0x0, 0x5, 0x23}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x8, 0xfff9, 0x1}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x3d0)

1.806921825s ago: executing program 0 (id=3437):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0xa, 0x4, 0x4, 0x5}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = open(&(0x7f00000000c0)='.\x00', 0x400, 0xce755d403f2a0227)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000600)={r1, r2, 0xe, 0x0, @void}, 0x10)

1.71961989s ago: executing program 0 (id=3438):
r0 = fsmount(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x154b8, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x10, 0xffffffffffffffff, 0x8)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
r3 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x9, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2000000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
msgsnd(0x0, &(0x7f0000000e40)=ANY=[@ANYRESDEC, @ANYRESOCT=r3], 0x8, 0x800)
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000001dc0)={0x0, "05b7e45d28bf5245b778fb71e180ce04"})
writev(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000141000/0x3000)=nil, 0x3000, 0x8)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x2)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000040)={0x1, [0xff]}, &(0x7f0000000140)=0x6)
syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x8400, &(0x7f00000003c0)={[{@uid}, {@overriderock}, {@nojoliet}, {@unhide}, {@check_relaxed}, {@nocompress}, {@mode={'mode', 0x3d, 0x10001}}, {@cruft}, {@check_strict}, {@hide}]}, 0x1, 0x688, &(0x7f0000000a40)="$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")
socket$nl_route(0x10, 0x3, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0)

1.600389327s ago: executing program 6 (id=3440):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000300)=0x3, 0x4)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x30da, 0x5, 0xa, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000000206010300000000000000000000000005000400140000000900020073797a31000000000500010007000000050005000a000000140007800800114000000000050015000c00000013000300686173683a6e65742c6966616365"], 0x60}}, 0x44040880)
ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r1, 0x40109441, &(0x7f0000000180)={0x6, 0x4, 0x47ca1859})
creat(&(0x7f0000000040)='./bus\x00', 0x0)
close(r1)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000108000a40fffffffc880000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000005c0003805800008008000340000000024c000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c00014000000000000100001c000180090001006c617374000000000c00028008", @ANYRES8], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x40)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)
r7 = socket(0xa, 0x1, 0x0)
getsockopt(r7, 0x1, 0x2f, &(0x7f0000001940)=""/10, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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")
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3)
setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x17, &(0x7f0000000140)=@gcm_128={{0x303}, "60000100", "9de66ebc3914c06f0f109088d190e700", "000e3102", "f8dd000000000092"}, 0x28)
setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r2, @ANYRESHEX, @ANYBLOB="d58b33c4b59886544c97c774e1802bf995f93415e6087744c8f9afd7e564146e384b4b898b37b5cf0e085a2c2517066ac07394bbfa8546ab7b09cdf89ffd569f72a40086c1b24f4dbdc56cc84613004607b53ff327f94de1a7abdc05d2a2178634abb3b5219fb6cc9571e52f777963d7d52e9dbe62738136ed74ce6c64512e0394d1a1b2011385a651bdc4256e43e3048ab33415186d1ce7a272732924b5d405d1bbef984f4582bf09556b83cf3aa315803041b6c9f7cb8f526801bc5033e9691ce4cc2a036c4fd44fb8580c12f54c6a103b42568053de11af3594b7c7e216c28c84ddc28f9b"], 0x310)

1.399255847s ago: executing program 5 (id=3441):
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4004}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_DELOBJ={0x54, 0x14, 0xa, 0x18b4ee19e7c5b58a, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELRULE={0x30, 0x8, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x8}}}, 0xac}, 0x1, 0x0, 0x0, 0x40}, 0x1)
r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4940}, 0x24008890)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000010"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)

1.274703553s ago: executing program 1 (id=3442):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000b40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x4}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_MATCH_NAME={0x9, 0x1, 'mark\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r1 = socket$inet6(0xa, 0x800, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000001c0)='./file1\x00', 0x2048c5, &(0x7f00000002c0)={[{@fat=@quiet}, {@fat=@flush}, {@fat=@sys_immutable}, {@numtail}, {@uni_xlate}, {@uni_xlateno}, {@fat=@errors_continue}, {@shortname_mixed}, {@shortname_winnt}, {@uni_xlate}, {@numtail}, {@rodir}, {@shortname_winnt}]}, 0x1, 0x2b4, &(0x7f0000000e40)="$eJzs3cFr024YwPFn7bZ2HVt7GIPfD8QHveglbPUvKLKBWFDmOqYHIXOplsZmNLVSEbeb1/0dw6MnBfUf2GU38SpeiiB42UGsrEm2rqu4ztVM8/1Aydv3fZ/kTd60PAk0bS5vPiwXXaNo1iSWVImJbMiuSGav5Bvyl9ouj0qnDbk8/vX9uVu371zP5fNzC6rzucUrWVWdPP/m8dMXF97VxpdeTr5OyHbmbvNL9uP29PZ/ze+LwdodEVNXHKdmrtiWrpbcsqF607ZM19JSxbWqNe1oL9rO2lpDzcrqRGqtarmumpWGlq2G1hytVRtq3jdLFTUMQydSEjXxviMKWwsLZm4gg0EYxnpVVqs5M96zsbD1JwYFAADOlubyZvy4+X/sFPP/ByVXS65WnEP5/dH8PyZ95P8ikc7/+0f+HwV7+X/K//weRv4PAAAAAAAAAAAAAAAAAAAAAMDfYLfVSrdarXSwDF4JEUmKSPA+7HFiMJj/aOv44V5SxH5eL9QL3tJrzxWlJLZYMjMi8q19Pvi88vy1/NyMtk3LW3vdj1+vF+KSCOIDmd7xs168dsavy4ikOreflbRM9Y7P9oivF0bl0sVWwt+yJYakZeeeOGLLavu8Poh/Nqt69Ua+K36s3Q8AAAAAgH+Bofsy3dfv7XZDg8eGdLV7lQf3ByT9i/sDXdfXw/L/cHj7DQAAAABAlLiNJ2XTtq1qBArB/x+cygrDP3TJ43YeFhG/5tVZmYuDwtCGNytHm2IictI1x39vlj+LyKGaqdCn+zQKnx55x3q/5sPPOy9NhPalBAAAAGAggqR/qO/Iws5ABgQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAQd9+FhQf+TPHusY3PxcPYSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBt+BAAA//+VdRZX")
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4, 0x7, @loopback={0xfec0ffff00000000}}, 0x1c)

1.261160474s ago: executing program 6 (id=3443):
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7})
r0 = socket$inet(0x2, 0x2, 0x1)
setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000140)=0xb84a, 0x4)
r1 = socket$inet6(0xa, 0x1, 0x84)
setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4)
pselect6(0x7e, &(0x7f0000000100)={0x0, 0x0, 0x1000000000000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x3, 0x0, 0x5}, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000340)={{0x3, 0xfdc7e3403e7bead, 0xfffffffd, 0x0, 0xfffffff7}, 0x1, 0x1fe9, 'id1\x00', 'timer1\x00', 0x0, 0xfffffffffffffffd, 0x1, 0x4, 0x80000000})
symlink(0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
sendto$inet6(r1, &(0x7f0000000040)="9ad4", 0x2, 0x8804, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x100000000000000}, 0x5}, 0x1c)

1.175216579s ago: executing program 5 (id=3444):
close(0xffffffffffffffff)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000100)=0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50)
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRESOCT=0x0], 0x50)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x4)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x1000000000000b0, 0x42758, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xd07, 0x4}, 0x2000, 0x8, 0x0, 0x0, 0xb, 0xfff, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f00000003c0)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6000000002060500000000000000000007000001140007800800114000000000080012400000ffff0500010006000000050005000a00000005000400000000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x60}, 0x1, 0x0, 0x0, 0x400c084}, 0x20004000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x3, 0x4}, 0x0, 0x32, 0x1e, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x100, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e1d, 0x10000008, @local, 0x72a}}}, 0x30)
r3 = socket(0x2, 0x3, 0xff)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)

1.124168802s ago: executing program 5 (id=3446):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x566, &(0x7f00000015c0)="$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")
chdir(&(0x7f0000000400)='./file0\x00')
r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0)
write$binfmt_format(r0, &(0x7f0000000100)='0\x00', 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x78, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35b", 0x6)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7], 0x0, 0xfffffffffffffff5, 0x1}}, 0x40)

1.067163385s ago: executing program 5 (id=3448):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r1, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001f00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}], 0x1, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000280)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRES32=r3, @ANYBLOB="0200"], 0x9)
sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000400)='`', 0x1}], 0x1}, 0x20000000)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000100)={r3, 0x2}, 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x11, 0x3, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
recvmsg$kcm(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000000680)=""/119, 0x77}, {&(0x7f0000000800)=""/251, 0xfb}, {&(0x7f0000000240)=""/43, 0xfffffffffffffd48}, {&(0x7f0000000540)=""/35, 0x23}, {&(0x7f0000002c40)=""/4093, 0x100c}, {&(0x7f0000000280)=""/174, 0xae}, {&(0x7f00000017c0)=""/74, 0x4a}, {&(0x7f0000000580)=""/166, 0xa6}, {&(0x7f00000015c0)=""/34, 0x22}, {&(0x7f0000000380)=""/147, 0x93}], 0xa}, 0x40010102)
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0xfca6}, {&(0x7f0000001400)="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", 0xa91}], 0x3}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f00000000c0)={0x11, 0x10, 0xfa00, {0x0}}, 0x18)
sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x7c, 0xa, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_EXPR={0x4c, 0x11, 0x0, 0x1, @payload={{0xc}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0xe0}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0xb7}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xc8}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_TYPE={0x8}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x2}]}}}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @quota={{0xa}, @void}}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xb00000}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4002030}, 0xc4000)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x3a, @private=0xa010100, 0x4e20, 0x1, 'sed\x00', 0x28, 0xfffffff9, 0x53}, 0x2c)

1.005775557s ago: executing program 1 (id=3450):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r1, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001f00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}], 0x1, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000280)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRES32=r3, @ANYBLOB="020001"], 0x9)
sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000400)='`', 0x1}], 0x1}, 0x20000000)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000100)={r3, 0x2}, 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x11, 0x3, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
recvmsg$kcm(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000000680)=""/119, 0x77}, {&(0x7f0000000800)=""/251, 0xfb}, {&(0x7f0000000240)=""/43, 0xfffffffffffffd48}, {&(0x7f0000000540)=""/35, 0x23}, {&(0x7f0000002c40)=""/4093, 0x100c}, {&(0x7f0000000280)=""/174, 0xae}, {&(0x7f00000017c0)=""/74, 0x4a}, {&(0x7f0000000580)=""/166, 0xa6}, {&(0x7f00000015c0)=""/34, 0x22}, {&(0x7f0000000380)=""/147, 0x93}], 0xa}, 0x40010102)
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0xfca6}, {&(0x7f0000001400)="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", 0xa91}], 0x3}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f00000000c0)={0x11, 0x10, 0xfa00, {0x0}}, 0x18)
sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x7c, 0xa, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_EXPR={0x4c, 0x11, 0x0, 0x1, @payload={{0xc}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0xe0}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0xb7}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xc8}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_TYPE={0x8}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x2}]}}}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @quota={{0xa}, @void}}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xb00000}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4002030}, 0xc4000)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x3a, @private=0xa010100, 0x4e20, 0x1, 'sed\x00', 0x28, 0xfffffff9, 0x53}, 0x2c)

807.395618ms ago: executing program 0 (id=3451):
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f0000000580)=ANY=[@ANYRES64=0x0], 0x1, 0x24a, &(0x7f0000000ac0)="$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")
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="08000000040000000400000008"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20)
r3 = fcntl$getown(r0, 0x9)
sched_setaffinity(r3, 0x8, &(0x7f0000000100)=0x76bea55a)
r4 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="49530000000008000008670000000c0099000b00000024000000040042"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63)
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100800000000200000000001000000011"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
write(r6, &(0x7f0000000240)='T', 0x1)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRES64=r2], &(0x7f0000000180)='GPL\x00', 0x3830, 0x0, 0x0, 0x40e00, 0x7a, '\x00', 0x0, @fallback=0xe, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r6, 0x0)
pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2030, 0x0, 0x3)

675.305674ms ago: executing program 2 (id=3453):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x2, 0x1, 0x6}, 0xff}, 0x18)
sendmmsg(r0, &(0x7f0000003dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x48010) (async, rerun: 32)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014480000000c0a010100004365000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c000440000000000000000b14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async, rerun: 32)
sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) (async, rerun: 32)
r3 = openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.log\x00', 0x20000, 0x12) (async)
write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000480)={0x16, 0x98, 0xfa00, {&(0x7f0000000440)={<r4=>0xffffffffffffffff}, 0x4, 0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x7, 0x4, {"b833ca4cfdb93d6afd5a5831eafbd637"}, 0x7, 0x4, 0x3}}}, 0xa0)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(r3, &(0x7f0000000540)={0x11, 0x10, 0xfa00, {&(0x7f00000002c0), r4}}, 0x18)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x10, 0xfa00, {&(0x7f0000000000), r4}}, 0x18)

673.628245ms ago: executing program 2 (id=3454):
perf_event_open(&(0x7f0000001940)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, @perf_bp={0x0, 0x3}, 0x80, 0x10000, 0x0, 0x8, 0x10, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x10, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x5, 0x2, 0x9}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0x800, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) (fail_nth: 3)

669.311475ms ago: executing program 2 (id=3455):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0000}]})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10010}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x800, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4422}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xfffffffe}]}, 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=<r2=>0x0, @ANYBLOB="0000000000008000280012800a00010076786c61"], 0x50}}, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)
syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000140)='./file2\x00', 0x1000000, &(0x7f00000003c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESOCT=r0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$eJzs3D1rW1cYB/AjWa6tlhZPhXbpoV3a5bb10qVDS3GhVNCSRCEv0zWWEyFFAl8NksmgOVM+RwhkCWQL+QL+DFmymYDx5Ck3OJKs2NixE0dy4vx+ix6e/z1X5+jARVy9bP5+91ZjNUtW004ozRdC8Y/QDzuFsBCKYaQffnpwZfvOxavX/v2zUlm6MDvsx/jVd4+v377//ZPOF5cf7nYKIYStxWcbX298s/ni0s16FutZbLU7MY3L7XYnXW7W4ko9ayQx/t+spVkt1ltZbW1fvtpsj5861LIspq1ebNR6sdOOnbVeTG+k9VZMkiTOB06lem8nz8NWnuf5XD/kef62JyhMZl5Myyn3n4/c3kU97l5Nn/e71W518DjI//6nsvRLfGVhPGq7263O7OW/DvK4P58Nnw/zxUPzz8KPPwzy3eyv/yoH8nJYmfzyAQAAAADgXErinkPv7yfJUfmgeu3zgQP370vh29K4MzP5pQAAAABHyHrrjbS5Mrs2KJq1Myvmwv7Ob4+GUzxu+M9Pjz9mQsWXwyK843nKIYSjjymGM9+U6RSj75EPO6PfF5xseOl9TaP8gbwao2I+HBaVw3pjbjqbAgAAnC/jN/0nHlKc6IQAAAAAAAAAAAAAAAAAAADgEzSNPzM76zUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALzJywAAAP//ixdW4w==")
socket$tipc(0x1e, 0x5, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20008010)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x8309}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r3 = perf_event_open(&(0x7f00000010c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r4 = perf_event_open(&(0x7f00000010c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000000, 0x4}, 0x0, 0x0, 0xfffffffc}, 0xffffffffffffffff, 0x0, r3, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x6)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRESOCT=r2, @ANYRES32, @ANYBLOB="0000000000000000000004000000000000000000000000000000b000"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r5}, 0x4)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x6, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x800000e2, 0x0, 0x0, 0x0, 0x2000000}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8006}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5c298795369ca04f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0xba}]}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1d7fd, r6, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94)
ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0x7)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x6)
socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = syz_clone3(&(0x7f0000000680)={0x80801100, &(0x7f0000000380), &(0x7f0000000440), &(0x7f0000000480), {0x13}, &(0x7f0000000500)=""/212, 0xd4, &(0x7f0000000600)=""/45, &(0x7f0000000640)=[0xffffffffffffffff], 0x1}, 0x58)
prlimit64(r7, 0xf, 0x0, &(0x7f0000000700))
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0)
ioctl$FS_IOC_MEASURE_VERITY(r8, 0xc0046686, &(0x7f0000000280)={0x3})
r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mtu(r9, 0x0, 0xa, &(0x7f00000000c0)=0x3, 0x4)
sendto$inet(r9, &(0x7f0000000040)="0400", 0x2, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
write$binfmt_script(r8, &(0x7f00000004c0), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0)

426.611598ms ago: executing program 0 (id=3456):
r0 = getpgrp(0x0)
r1 = syz_open_procfs(r0, &(0x7f0000000180)='net/udp\x00')
fchdir(r1)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
timer_create(0x3, &(0x7f0000003780)={0x0, 0x3, 0x1, @thr={&(0x7f0000002700)="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", &(0x7f0000003700)="18f21b1fc45b804293ce83dc79b3c20889fb6ed08415511ab518ffa63eb18a58c586c4978609287a720d820e382ad8c739cd07c0c6fc7785dfe0800231d60ac322758c9a012250e41e5722d13013422e96747d5f1a6d"}}, &(0x7f00000037c0)=<r2=>0x0)
clock_gettime(0x0, &(0x7f0000003800)={<r3=>0x0, <r4=>0x0})
timer_settime(r2, 0x1, &(0x7f0000003840)={{0x0, 0x989680}, {r3, r4+10000000}}, &(0x7f0000003880))
timer_settime(r2, 0x1, &(0x7f0000000140)={{0x77359400}}, &(0x7f00000001c0))
r5 = syz_clone(0x20822180, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = syz_open_procfs$pagemap(r5, &(0x7f0000000200))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r7 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x4}, 0xc)
setsockopt$MRT6_DEL_MIF(r7, 0x29, 0xcb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0xc)
perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x3, 0x80, 0xe, 0x6, 0x0, 0x8, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0xa, 0x1}, 0x8000, 0x4, 0x1, 0x3, 0x8000000000000001, 0x61, 0x7f, 0x0, 0x4, 0x0, 0x7}, 0x0, 0xe, 0xffffffffffffffff, 0x1)
ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f00000006c0)={0x60, 0x0, &(0x7f000087b000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x7fff, 0x0, 0x0, 0x0, 0x46, 0x4a, 0x40, 0x2})

320.525013ms ago: executing program 6 (id=3457):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2, @perf_config_ext={0xfd9, 0x922}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xa7, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x1a2d, 0x0, 0x7fc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r1, 0x0, 0x7, 0x0, 0x0)
readv(r0, 0x0, 0x0)
mlock2(&(0x7f0000341000/0x3000)=nil, 0x3000, 0x1)
syz_emit_ethernet(0x86, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x5, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x11, 0x0, @loopback, @rand_addr=0x64010101, {[@timestamp_addr={0x44, 0xc, 0x3, 0x1, 0x0, [{@private=0xa010101, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0xbc, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private, 0x8}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@multicast1, 0xfffffffc}]}]}}}}}}}, 0x0)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x141443)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
rt_sigqueueinfo(0x0, 0x3, &(0x7f0000000000)={0x8, 0x0, 0x8000})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x0, 0x3, 0x27, 0x0, 0x8001}})
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044880}, 0x4004)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), 0xffffffffffffffff)
socket(0x15, 0x5, 0x0)
socket$packet(0x11, 0x3, 0x300)
perf_event_open(0x0, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', <r6=>0x0})
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000004c0)={r6, 0x3, 0x6, @broadcast}, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r7)
sendmsg$nl_generic(r7, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), r7)
bind$packet(r4, &(0x7f0000000380)={0x11, 0x1c, r6, 0x1, 0x10, 0x6, @random="9dd0391940fc"}, 0x14)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=@getchain={0x24, 0x11, 0x1, 0x40, 0x1fffff9, {0x0, 0x0, 0x0, r6, {0x7, 0xd}, {0xc, 0x3}, {0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054)
socket$nl_route(0x10, 0x3, 0x0)

309.034104ms ago: executing program 2 (id=3458):
r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x6000)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file3\x00', 0x1010041, &(0x7f0000000000)={[{@errors_continue}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpjquota}]}, 0x1, 0x546, &(0x7f0000000180)="$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")
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x2)
sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r4, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES16=r3], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x41145}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}}, 0x8000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0xfd, 0x6, 0x0, 0x39, @initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, @mcast1, 0x2000, 0xba08, 0x0, 0x2}})
setresuid(0xee01, r1, r1)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@mcast1}}, &(0x7f0000000740)=0xe8)
r11 = socket(0x10, 0x3, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(r11, 0x29, 0x22, &(0x7f00000007c0)={{{@in=@multicast2, @in6=@mcast2, 0x4e22, 0x0, 0x4e24, 0xf4ac, 0xa, 0x0, 0x80, 0x88, 0x0, r10}, {0x7, 0x100000001, 0x5, 0x6, 0x200, 0x5, 0x4, 0x6}, {0x9, 0x40, 0x7, 0x8}, 0xfffffffc, 0x6e6bb4, 0x2, 0x0, 0x2, 0x3}, {{@in=@rand_addr=0x64010101, 0x4d4, 0x32}, 0xa, @in=@multicast1, 0x3504, 0x1, 0x2, 0x2, 0x2, 0x7, 0x7}}, 0xe8)
getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r12=>0x0}, &(0x7f0000cab000)=0xc)
setregid(0xffffffffffffffff, r12)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)={{0x1, 0x1, 0x18, r9, {r10, r12}}, './file0\x00'})
write$P9_RGETATTR(r0, &(0x7f0000000040)={0xa0, 0x19, 0x2, {0x2, {0x10, 0x1, 0x6}, 0x225, r1, r12, 0x9, 0x2, 0xfffffffffffffff9, 0xfffffffffffffff8, 0x0, 0x0, 0x611, 0x62, 0x9, 0x0, 0x1, 0x1, 0x6, 0xc1b, 0x200000000}}, 0xa0)
socket$can_j1939(0x1d, 0x2, 0x7)

196.02455ms ago: executing program 5 (id=3459):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000030408bd78000000000000000000", @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r5], 0x50}, 0x1, 0x0, 0x0, 0x600}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010000104000000040000000000000400", @ANYRES32=0x0, @ANYBLOB="00000000183e00001400350065727370616e3000000000000000000008000a00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x70}, 0x0)

192.62134ms ago: executing program 1 (id=3460):
r0 = socket$kcm(0x10, 0x2, 0x4)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000040)={0x0, 0x5, [@empty, @local, @link_local, @random="6bddfa541b09", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}]})
r3 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000c80)="a7b89a", 0x3}], 0x1}, 0x4)
sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000380)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020015b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010)

91.638165ms ago: executing program 0 (id=3461):
r0 = fsmount(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x154b8, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x10, 0xffffffffffffffff, 0x8)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
r3 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x9, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2000000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
msgsnd(0x0, &(0x7f0000000e40)=ANY=[@ANYRESDEC, @ANYRESOCT=r3], 0x8, 0x800)
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000001dc0)={0x0, "05b7e45d28bf5245b778fb71e180ce04"})
writev(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000141000/0x3000)=nil, 0x3000, 0x8)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x2)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000040)={0x1, [0xff]}, &(0x7f0000000140)=0x6)
syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x8400, &(0x7f00000003c0)={[{@uid}, {@overriderock}, {@nojoliet}, {@unhide}, {@check_relaxed}, {@nocompress}, {@mode={'mode', 0x3d, 0x10001}}, {@cruft}, {@check_strict}, {@hide}]}, 0x1, 0x688, &(0x7f0000000a40)="$eJzs3V1vFOf1APCzBAvLfwn91VYIIUIm0EogEbO7DkZWbrpdj+1J1jurmXUEVykKdoQwSQupVLgKN2krtR8it/0Q7SeKets7qp3dhQW/rEOCl6DfbwXz7MzZec4Myxw99rwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABC19mq93qhFJ+tu3UwO1l4t8s1Dlo/X9+8XJof0G1Eb/In5+Tg7nHX2V88Xnxn8dTHOD9+dj/nBZD4e/9+Z///olydPjD9/SELH4uGjx/du7+5uP5h1IjOynnazMs82W+tpkpV5srK8XL+2sVYma1knLW+V/XQzaRdpq58XyeX2laSxsrKUpIu38q3u+mqrk45n3vigWa8vJx8v9tJWUebdax8vlu2NrNPJuutVzGDxIObG4Iv4SdZP+mlrM0l27u5uL01LchDUOEpQc1pQs95sNhrNZmP5+sr1G/X6yT0z6i+JPRGz/9IyWz/xERxe3YlR/Y9OZNGNrbgZyb6vdqxGEXlsHrB8ZFz/f3MtHba+2b/fyfo/rvJnny8+F1X9vzB8d+Gg+n9ALsf3ehiP4nHci9uxG7uxHQ9mntHxvtYjjW5kUUYeWWxGq5qTjOYksRLLsRz1+Cw2Yi3KSGItsuhEGmXcijL6kVbfqHYUkUYr+pFHEUlcjnZciSQasRIrsRRJpLEYtyKPrejGeqxGq1rLTtyt9vvSITk+C2ocJah5SJD6zw81v2fO6zmQwyt4Oq7/AAAAwFurVv30fTD+n4t3q9Za1knrs04LAAAA+AlVv/k/P5jMDVrvRs34HwAAAN42teoau1pELMR7w9b4SqjxDwHmZpwiAAAA8CNVv/+/MJgsDFrvRW3P+B8AAAD4mfvr1Hvsz/dO1f71nyiKudqT3s1f1+63BnGt++8MP1dN/vt0aNDur52rnR6tpJosnxy9a6fna6O7Xz67Cebo5ILvd6blUTs0gUkHJxB/j/eHMe/fGU7vjJcMe1lYyzrpYjvvfNSIVuv0iX56s/+nL+/+OarN/1t383Qtdu7ubi9+/tXunSqXJ4O1PLk/uoHinvso7pPLeNHX1f0Wqmsu9t3iuepCjFG/C8N+65Pbf2L48RM/YPu/jYvDmIsL8fRURCy8uP3zgz4biwdt/SiLRpXF/AudHmXLn2dxaRhz6fKl4WSfLJrTsmhO7v9X2hdHyGJpWhZLPzILgFnZmVKFansL/ysc5Y6nun8bl4cxl89VB9aT5/Y5otenHdHrr1jXx339M64MY66Mgw+qsYN+//FSVf1u8IHvDuy37DRrg134ztf3/xBnHj56/MHd+7e/2P5i+8tmc2m5/mG9fr0Zc9VmjCZqDwD7mP6MnakRtQ+njKp/8eyUgsX4PL6K3bgTV6urDaozDvZd60Ls/DZGpyFcnRi1Vl4atS5MPOHl6pRR3cLEg16OHrt0DP8SAHB8Lk6pw0ep/1enjLsXJk4pvDpldDxZywGA1yMtvq8t9P9SK4qs91ljZaXR6m+kSZG3P0mKbHU9TbJuPy3aG63uepr0iryft/POoPFptpqWSbnV6+VFP1nLi6SXl9nN6snvyejR72W62er2s3bZ66StMk3aebffaveT1axsJ72t33WyciMtqg+XvbSdrWXtVj/Lu0mZbxXtdDFJyjSdCMxW024/W8sGzW7SK7LNVnEr+TTvbG2myWpatous18+HKxz3lXXX8mKzWu3irHc2ALwhHj56fO/27u72g9fYiFOz3koAYNJElQYAAAAAAAAAAAAAAN5Qx3H931vY+OPPededejPS0JhJ45vfD//nTwue9ZEJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPb6XwAAAP//2kFZhw==")
socket$nl_route(0x10, 0x3, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0)

67.743607ms ago: executing program 1 (id=3462):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x11feb0, 0x1002, 0x20da, 0x0, 0x0, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x3, 0x0, 0x1000000}, 0x10)

55.890997ms ago: executing program 6 (id=3463):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fcdbdf2546000000080001007063690011000200303030303a30303a31302e300000000008008e00010000000c008f00"/63], 0x50}, 0x1, 0x0, 0x0, 0x4004090}, 0x8000)
r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000003c0)={0x1f0, r3, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x35}}}}, [@NL80211_ATTR_REKEY_DATA={0x98, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="071ec44a2bd171c4d86d7c8c6202fa86"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="539d133301449fbdf2866bd307d971e7108a9d368636005e"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xa3}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "5ad73c1051314ffa"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="6c5c4de478b932b12f4d27c4c9ddb0f1"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x10}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "fdc5743fddede8b8"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="81697c424cb4ea5c5b0b59fafabe75a3"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "2693a9189d781980"}]}, @NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6d86dc210d7cf5bc"}]}, @NL80211_ATTR_REKEY_DATA={0x78, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b373a995f899515c"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xfffffffe}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "66a54d758b9d2bae"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="78b9f70a6dfc604db99201966a90fc708904623a6d8f70af0d448f52393bae2f"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="76388f6b30966c5f7c958b7112a8f6b1"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="cf2bcf377faf0ff7f7c2286d8cb9cd7c"}]}, @NL80211_ATTR_REKEY_DATA={0xa8, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="f2f3337569843a16ac812d5ad6e70159"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="0baf248830b2339d4a4f56e7ff09f09570b265b0f429dd4c"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x40}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "06a6f474c1eaf2e3"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="222fcb55febcf1f875e312fea29be3b5"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="d2ea57903a25f9bfefe9eb9409ed5978"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "809cd270b43e3202"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xfffff800}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="b42e4a7d5ec48bb89bc5407fedcd4e8842f387d485b1320f4a8544ee48f590f4"}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) (async)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000003c0)={0x1f0, r3, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x35}}}}, [@NL80211_ATTR_REKEY_DATA={0x98, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="071ec44a2bd171c4d86d7c8c6202fa86"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="539d133301449fbdf2866bd307d971e7108a9d368636005e"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xa3}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "5ad73c1051314ffa"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="6c5c4de478b932b12f4d27c4c9ddb0f1"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x10}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "fdc5743fddede8b8"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="81697c424cb4ea5c5b0b59fafabe75a3"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "2693a9189d781980"}]}, @NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6d86dc210d7cf5bc"}]}, @NL80211_ATTR_REKEY_DATA={0x78, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b373a995f899515c"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xfffffffe}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "66a54d758b9d2bae"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="78b9f70a6dfc604db99201966a90fc708904623a6d8f70af0d448f52393bae2f"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="76388f6b30966c5f7c958b7112a8f6b1"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="cf2bcf377faf0ff7f7c2286d8cb9cd7c"}]}, @NL80211_ATTR_REKEY_DATA={0xa8, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="f2f3337569843a16ac812d5ad6e70159"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="0baf248830b2339d4a4f56e7ff09f09570b265b0f429dd4c"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x40}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "06a6f474c1eaf2e3"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="222fcb55febcf1f875e312fea29be3b5"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="d2ea57903a25f9bfefe9eb9409ed5978"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "809cd270b43e3202"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xfffff800}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="b42e4a7d5ec48bb89bc5407fedcd4e8842f387d485b1320f4a8544ee48f590f4"}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4008001}, 0x0)
write$cgroup_int(r2, &(0x7f0000000040)=0xfe8e, 0x12)
io_uring_setup(0x204f, &(0x7f0000000000)={0x0, 0xe4c4, 0x40, 0x0, 0x6, 0x0, r2})

3.59878ms ago: executing program 2 (id=3464):
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4940}, 0x24008890)
r1 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e00)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x54, 0x1, [@m_sample={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x0, 0x10000000, 0xfffffffc, 0x3ff}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x68}}, 0x0) (fail_nth: 4)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000100), 0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000010"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

3.33388ms ago: executing program 5 (id=3465):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="b400000000000000711013000000000084050000000000009500000000000000c425406d7638b19a232fbcc60a8d767e101edb3adb9bfe2cd6063916e6bdde6abe37afa25b23ea19ffca6ab10d4865fd5fbd8975a10757892412c7139997c984c25906a692f6069a7dc45ec5be78e2096499e5715a267fde3d1141cbc5fa2c4191d07bba2ae3749f9fafa5425a1a075c33b009ff75a21bc2d3822fd035bd288418b03a941dc814a62de57c4492072004a031f57bf6dcf45a78976d6655ea44020871e888a2391fd9026bbf3ed1c42a62c35ef9e2220d8fc9dc21bd3bfc687fc0209da1336f"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48)
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000180)={[{@noload}, {@quota}, {@bsdgroups}, {@noload}, {@abort}, {@auto_da_alloc}]}, 0xff, 0x46e, &(0x7f00000004c0)="$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")
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x25, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
close(r0)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x399446c, 0x0, 0x1, 0x0, &(0x7f0000000080))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x2000c045, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10)
recvfrom(r2, &(0x7f00000012c0)=""/4095, 0xfff, 0x102, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r5=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x24, r4, 0x1, 0x70bd2d, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x24}}, 0x200048c0)
syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbe0, &(0x7f0000001f40)="$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")
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0x6})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r6, 0x40286608, &(0x7f0000000680)={0x31, 0x8, 0x5, 0xffffffffffffffff, 0x403, 0x5})
sendto(r2, &(0x7f00000007c0)='`', 0x1, 0x8001, 0x0, 0x0)
renameat2(r1, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f0000000200)='./file0\x00', 0x4)

3.22703ms ago: executing program 6 (id=3466):
capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000001680)={0x0, 0x200000, 0x0, 0x0, 0x6, 0x8ca8})
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0xfffffffe, 0x6, 0x7f, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000200)='7\x00\x00\x00\x00\x00', 0x0, 0x5, 0x0, 0x1, 0x0})

280.01µs ago: executing program 1 (id=3467):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000024006000200035c0461c1d60008000000000000fb8000a0e408e81cef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0)

0s ago: executing program 2 (id=3468):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$vcsu(&(0x7f00000000c0), 0x481, 0x400000) (async)
r1 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x481, 0x400000)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xc6da5938055fa6fd}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x1}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}, @IFLA_MTU={0x8, 0x4, 0xf3cd}]}, 0x58}, 0x1, 0x0, 0x0, 0x51}, 0x2000c000) (async)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xc6da5938055fa6fd}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x1}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}, @IFLA_MTU={0x8, 0x4, 0xf3cd}]}, 0x58}, 0x1, 0x0, 0x0, 0x51}, 0x2000c000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600}}, 0x20)
sendto$inet(r3, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
sendmsg$DEVLINK_CMD_PORT_GET(r2, 0x0, 0x20000000) (async)
sendmsg$DEVLINK_CMD_PORT_GET(r2, 0x0, 0x20000000)
syz_io_uring_setup(0x2973, &(0x7f0000000200)={0x0, 0xc8fa, 0x4000, 0x3, 0x15a}, &(0x7f0000000280), 0x0, 0x0)
r5 = syz_io_uring_setup(0x8d3, 0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000001c0))
r6 = open(0x0, 0x101000, 0x10)
io_setup(0xa, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={&(0x7f0000000140), 0x1}, 0x102801, 0x9, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8000000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={&(0x7f0000000140), 0x1}, 0x102801, 0x9, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8000000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
poll(&(0x7f0000000000)=[{r5, 0xd010}], 0x1, 0x9)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000bc0)={0x4, 0x0, 0x0, &(0x7f0000000b80)=[0x6, 0x0, 0x2, 0x9, 0x4, 0x4e352251]}, 0x20)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r7)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x4c, r8, 0x1, 0x70bd2a, 0x0, {0x4e}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xab, 0xfffffffc}}, {0x8, 0xb, 0x60a7}, {0x6, 0x11, 0x2}}]}, 0x4c}}, 0x0)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x158}, 0x1, 0x0, 0x0, 0x40}, 0x4004084)
sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20000010) (async)
sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20000010)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r9, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x4c}}, 0x8d0)

kernel console output (not intermixed with test programs):

a/0x20
[  339.564588][T13126]  _copy_from_user+0x1c/0xb0
[  339.564650][T13126]  ___sys_sendmsg+0xc1/0x1e0
[  339.564760][T13126]  __x64_sys_sendmsg+0xd4/0x160
[  339.564789][T13126]  x64_sys_call+0x194c/0x3020
[  339.564827][T13126]  do_syscall_64+0x12c/0x3b0
[  339.564855][T13126]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  339.564935][T13126] RIP: 0033:0x7f318c4ccdd9
[  339.564954][T13126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  339.565043][T13126] RSP: 002b:00007f318af1f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  339.565061][T13126] RAX: ffffffffffffffda RBX: 00007f318c745fa0 RCX: 00007f318c4ccdd9
[  339.565082][T13126] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003
[  339.565098][T13126] RBP: 00007f318af1f090 R08: 0000000000000000 R09: 0000000000000000
[  339.565113][T13126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  339.565127][T13126] R13: 00007f318c746038 R14: 00007f318c745fa0 R15: 00007ffd55c2a708
[  339.565176][T13126]  </TASK>
[  340.027908][T13135] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  340.081432][T13135] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2684'.
[  340.093062][T13135] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  340.100513][T13135] batman_adv: batadv0: Removing interface: batadv_slave_0
[  340.108156][T13135] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  340.115640][T13135] batman_adv: batadv0: Removing interface: batadv_slave_1
[  340.199684][T13109] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  340.212500][T13113] rock: directory entry would overflow storage
[  340.218678][T13113] rock: sig=0x5245, size=8, remaining=5
[  340.304087][T11544] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  340.370599][T13148] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2687'.
[  340.384999][T13149] bio_check_eod: 15013 callbacks suppressed
[  340.385036][T13149] syz.1.2685: attempt to access beyond end of device
[  340.385036][T13149] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  340.408848][T13149] buffer_io_error: 15012 callbacks suppressed
[  340.408878][T13149] Buffer I/O error on dev loop1, logical block 57847, async page read
[  340.425141][T13149] syz.1.2685: attempt to access beyond end of device
[  340.425141][T13149] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  340.440142][T13149] Buffer I/O error on dev loop1, logical block 57847, async page read
[  340.449266][T13149] syz.1.2685: attempt to access beyond end of device
[  340.449266][T13149] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  340.471498][T13149] Buffer I/O error on dev loop1, logical block 57847, async page read
[  340.480390][T13149] syz.1.2685: attempt to access beyond end of device
[  340.480390][T13149] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  340.510089][T13149] Buffer I/O error on dev loop1, logical block 57847, async page read
[  340.518752][T13149] syz.1.2685: attempt to access beyond end of device
[  340.518752][T13149] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  340.539179][T13149] Buffer I/O error on dev loop1, logical block 57847, async page read
[  340.549116][T13149] syz.1.2685: attempt to access beyond end of device
[  340.549116][T13149] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  340.563182][T13149] Buffer I/O error on dev loop1, logical block 57847, async page read
[  340.571814][T13149] syz.1.2685: attempt to access beyond end of device
[  340.571814][T13149] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  340.593321][T13149] Buffer I/O error on dev loop1, logical block 57847, async page read
[  340.601547][T13149] syz.1.2685: attempt to access beyond end of device
[  340.601547][T13149] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  340.614940][T13149] Buffer I/O error on dev loop1, logical block 57847, async page read
[  340.623144][T13149] syz.1.2685: attempt to access beyond end of device
[  340.623144][T13149] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  340.645669][T13149] Buffer I/O error on dev loop1, logical block 57847, async page read
[  340.671403][T13149] syz.1.2685: attempt to access beyond end of device
[  340.671403][T13149] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  340.724211][T13149] Buffer I/O error on dev loop1, logical block 57847, async page read
[  340.758399][T13175] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  340.789602][T13175] EXT4-fs (loop5): 1 truncate cleaned up
[  340.817414][T13175] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  340.945943][ T5338] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  341.363181][T13198] netlink: 'syz.1.2701': attribute type 2 has an invalid length.
[  341.371146][T13198] netlink: 'syz.1.2701': attribute type 3 has an invalid length.
[  341.379581][T13198] lo: entered allmulticast mode
[  341.385065][T13198] tunl0: entered allmulticast mode
[  341.391781][T13198] gre0: entered allmulticast mode
[  341.401103][T13198] gretap0: entered allmulticast mode
[  341.409612][T13198] erspan0: entered allmulticast mode
[  341.425934][T13198] ip_vti0: entered allmulticast mode
[  341.445172][T13198] ip6_vti0: entered allmulticast mode
[  341.458425][T13198] sit0: entered allmulticast mode
[  341.476266][T13198] ip6tnl0: entered allmulticast mode
[  341.495384][T13198] ip6gre0: entered allmulticast mode
[  341.513688][T13198] syz_tun: entered allmulticast mode
[  341.522174][T13198] ip6gretap0: entered allmulticast mode
[  341.528717][T13181] rock: directory entry would overflow storage
[  341.541978][T13181] rock: sig=0x5245, size=8, remaining=5
[  341.559636][T13198] bridge0: port 2(bridge_slave_1) entered disabled state
[  341.566770][T13198] bridge0: port 1(bridge_slave_0) entered disabled state
[  341.574389][T13198] bridge0: entered allmulticast mode
[  341.583478][T13198] vcan0: entered allmulticast mode
[  341.600391][T13198] team0: entered allmulticast mode
[  341.609042][T13198] team_slave_0: entered allmulticast mode
[  341.619260][T13198] team_slave_1: entered allmulticast mode
[  341.630720][T13198] dummy0: entered allmulticast mode
[  341.658214][T13198] nlmon0: entered allmulticast mode
[  341.677125][T13198] vxcan0: entered allmulticast mode
[  341.686338][T13198] vxcan1: entered allmulticast mode
[  341.697485][T13198] veth0: entered allmulticast mode
[  341.705592][T13198] veth1: entered allmulticast mode
[  341.720454][T13198] wg0: entered allmulticast mode
[  341.741049][T13198] wg2: entered allmulticast mode
[  341.755258][T13204] set_capacity_and_notify: 9 callbacks suppressed
[  341.755274][T13204] loop5: detected capacity change from 0 to 512
[  341.769546][T13198] veth0_to_bridge: entered allmulticast mode
[  341.786305][T13198] veth1_to_bridge: entered allmulticast mode
[  341.799191][T13204] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2702: invalid indirect mapped block 256 (level 2)
[  341.813882][T13204] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  341.814152][T13204] EXT4-fs (loop5): 2 truncates cleaned up
[  341.829198][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  341.829219][    C0] EXT4-fs (loop5): initial error at time 855: ext4_free_branches:1023: inode 11
[  341.829253][    C0] EXT4-fs (loop5): last error at time 855: ext4_free_branches:1023: inode 11
[  341.853649][T13198] veth0_to_bond: entered allmulticast mode
[  341.860024][T13204] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  341.874409][T13198] bond_slave_0: entered allmulticast mode
[  341.896210][T13198] veth1_to_bond: entered allmulticast mode
[  341.911264][T13198] bond_slave_1: entered allmulticast mode
[  341.919298][T13198] veth0_to_team: entered allmulticast mode
[  341.927205][T13198] veth1_to_team: entered allmulticast mode
[  341.935246][T13198] veth0_to_batadv: entered allmulticast mode
[  341.943242][T13198] batadv_slave_0: entered allmulticast mode
[  341.964951][ T5338] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  341.966931][T13198] veth1_to_batadv: entered allmulticast mode
[  341.981545][T13198] batadv_slave_1: entered allmulticast mode
[  341.988728][T13198] xfrm0: entered allmulticast mode
[  341.994952][T13198] veth0_to_hsr: entered allmulticast mode
[  342.001977][T13198] hsr_slave_0: entered allmulticast mode
[  342.009163][T13198] veth1_to_hsr: entered allmulticast mode
[  342.044602][T13198] hsr_slave_1: entered allmulticast mode
[  342.061564][T13198] hsr0: entered allmulticast mode
[  342.071291][T13198] veth1_virt_wifi: entered allmulticast mode
[  342.086078][T13198] veth0_virt_wifi: entered allmulticast mode
[  342.093337][T13198] veth1_vlan: entered allmulticast mode
[  342.100305][T13198] veth0_vlan: entered allmulticast mode
[  342.110292][T13198] vlan0: entered allmulticast mode
[  342.117508][T13198] vlan1: entered allmulticast mode
[  342.123078][T13198] macvlan0: entered allmulticast mode
[  342.136467][T13198] macvlan1: entered allmulticast mode
[  342.138212][T13209] sctp: [Deprecated]: syz.5.2704 (pid 13209) Use of int in max_burst socket option.
[  342.138212][T13209] Use struct sctp_assoc_value instead
[  342.148150][T13198] ipvlan0: entered allmulticast mode
[  342.162198][T13198] ipvlan1: entered allmulticast mode
[  342.187933][T13198] veth1_macvtap: entered allmulticast mode
[  342.212677][T13198] veth0_macvtap: entered allmulticast mode
[  342.228779][T13215] netlink: 'syz.5.2705': attribute type 10 has an invalid length.
[  342.246965][T13198] macvtap0: entered allmulticast mode
[  342.263683][T13198] macsec0: entered allmulticast mode
[  342.277860][T13198] geneve0: entered allmulticast mode
[  342.291796][T13198] geneve1: entered allmulticast mode
[  342.307659][T13198] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  342.317552][T13198] netdevsim netdevsim1 netdevsim1: entered allmulticast mode
[  342.338990][T13198] netdevsim netdevsim1 netdevsim2: entered allmulticast mode
[  342.351457][T13198] netdevsim netdevsim1 netdevsim3: entered allmulticast mode
[  342.357906][   T28] audit: type=1400 audit(856.315:1347): avc:  denied  { getopt } for  pid=13220 comm="syz.6.2708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  342.372002][T13198] batadv1: left promiscuous mode
[  342.382845][T13198] batadv1: entered allmulticast mode
[  342.389059][T13198] gtp0: entered allmulticast mode
[  342.396432][T13198] bond0: entered allmulticast mode
[  342.422382][T13198] bridge1: entered allmulticast mode
[  342.428448][T13198] geneve2: entered allmulticast mode
[  342.434102][T13198] syztnl1: entered allmulticast mode
[  342.439544][T13198] bridge2: entered allmulticast mode
[  342.447847][T13198] bond1: entered allmulticast mode
[  342.463404][T13198] gretap1: entered allmulticast mode
[  342.469962][T13198] gre1: entered allmulticast mode
[  342.479451][T13198] veth2: entered allmulticast mode
[  342.489151][T13198] veth3: entered allmulticast mode
[  342.499359][T13198] gre2: entered allmulticast mode
[  342.505517][T13223] loop6: detected capacity change from 0 to 8192
[  342.512341][T13198] bridge3: entered allmulticast mode
[  342.538351][T11556] xfrm0 speed is unknown, defaulting to 1000
[  342.544472][ T6128] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  342.554337][T11556] syz0: Port: 1 Link DOWN
[  342.558736][ T6128] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  342.593876][T11556] xfrm0 speed is unknown, defaulting to 1000
[  342.600332][ T6128] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  342.625791][ T6128] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  342.867392][T13243] loop5: detected capacity change from 0 to 2048
[  342.939223][T13243] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  343.009014][T13248] loop2: detected capacity change from 0 to 256
[  343.075225][T13248] FAT-fs (loop2): Directory bread(block 64) failed
[  343.098884][T13248] FAT-fs (loop2): Directory bread(block 65) failed
[  343.106596][T13230] loop1: detected capacity change from 0 to 764
[  343.124988][T13248] FAT-fs (loop2): Directory bread(block 66) failed
[  343.144261][T13230] rock: directory entry would overflow storage
[  343.151266][T13230] rock: sig=0x5245, size=8, remaining=5
[  343.152902][T13248] FAT-fs (loop2): Directory bread(block 67) failed
[  343.192397][T13248] FAT-fs (loop2): Directory bread(block 68) failed
[  343.213589][T13248] FAT-fs (loop2): Directory bread(block 69) failed
[  343.236639][T13248] FAT-fs (loop2): Directory bread(block 70) failed
[  343.257941][T13248] FAT-fs (loop2): Directory bread(block 71) failed
[  343.276831][T13248] FAT-fs (loop2): Directory bread(block 72) failed
[  343.293664][T13248] FAT-fs (loop2): Directory bread(block 73) failed
[  343.484174][T13261] __nla_validate_parse: 1 callbacks suppressed
[  343.484194][T13261] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2718'.
[  343.515069][T13263] FAULT_INJECTION: forcing a failure.
[  343.515069][T13263] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  343.549922][T13263] CPU: 1 UID: 0 PID: 13263 Comm: syz.1.2720 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  343.549957][T13263] Tainted: [W]=WARN
[  343.549964][T13263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  343.549976][T13263] Call Trace:
[  343.550000][T13263]  <TASK>
[  343.550008][T13263]  __dump_stack+0x1d/0x30
[  343.550034][T13263]  dump_stack_lvl+0x95/0xd0
[  343.550051][T13263]  dump_stack+0x15/0x1b
[  343.550109][T13263]  should_fail_ex+0x263/0x280
[  343.550140][T13263]  should_fail+0xb/0x20
[  343.550166][T13263]  should_fail_usercopy+0x1a/0x20
[  343.550239][T13263]  strncpy_from_user+0x27/0x250
[  343.550263][T13263]  ? kmem_cache_alloc_noprof+0x18c/0x3f0
[  343.550302][T13263]  do_getname+0x59/0x1c0
[  343.550323][T13263]  getname_flags+0x1d/0x30
[  343.550342][T13263]  __se_sys_move_mount+0x11b/0x3e0
[  343.550429][T13263]  __x64_sys_move_mount+0x67/0x80
[  343.550460][T13263]  x64_sys_call+0x1900/0x3020
[  343.550480][T13263]  do_syscall_64+0x12c/0x3b0
[  343.550545][T13263]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  343.550565][T13263] RIP: 0033:0x7f05ada8cdd9
[  343.550578][T13263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  343.550595][T13263] RSP: 002b:00007f05ac4df028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ad
[  343.550616][T13263] RAX: ffffffffffffffda RBX: 00007f05add05fa0 RCX: 00007f05ada8cdd9
[  343.550692][T13263] RDX: 0000000000000003 RSI: 0000200000000480 RDI: 0000000000000003
[  343.550712][T13263] RBP: 00007f05ac4df090 R08: 0000000000000212 R09: 0000000000000000
[  343.550726][T13263] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001
[  343.550738][T13263] R13: 00007f05add06038 R14: 00007f05add05fa0 R15: 00007fff16eb1eb8
[  343.550756][T13263]  </TASK>
[  343.902750][T13255] loop6: detected capacity change from 0 to 512
[  343.913142][T13255] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  343.927609][T13255] EXT4-fs (loop6): 1 truncate cleaned up
[  343.933724][T13255] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  343.964843][T13278] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2724'.
[  344.004722][ T5338] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  344.025983][T11544] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  344.042539][   T28] audit: type=1400 audit(857.995:1348): avc:  denied  { unlink } for  pid=5338 comm="syz-executor" name="file1" dev="loop5" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1
[  344.066576][ T5338] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  344.091716][T13286] loop1: detected capacity change from 0 to 512
[  344.106449][T13286] EXT4-fs: dax option not supported
[  344.169249][   T28] audit: type=1400 audit(858.135:1349): avc:  denied  { getopt } for  pid=13283 comm="syz.1.2726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  344.255075][T13236] Process accounting resumed
[  344.285072][T13297] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2730'.
[  344.323116][T13304] FAULT_INJECTION: forcing a failure.
[  344.323116][T13304] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  344.338273][T13305] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2732'.
[  344.348371][T13304] CPU: 1 UID: 0 PID: 13304 Comm: syz.0.2734 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  344.348473][T13304] Tainted: [W]=WARN
[  344.348481][T13304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  344.348497][T13304] Call Trace:
[  344.348504][T13304]  <TASK>
[  344.348513][T13304]  __dump_stack+0x1d/0x30
[  344.348663][T13304]  dump_stack_lvl+0x95/0xd0
[  344.348727][T13304]  dump_stack+0x15/0x1b
[  344.348748][T13304]  should_fail_ex+0x263/0x280
[  344.348782][T13304]  should_fail_alloc_page+0xf2/0x100
[  344.348816][T13304]  __alloc_frozen_pages_noprof+0x108/0x350
[  344.348914][T13304]  alloc_pages_mpol+0xb3/0x260
[  344.349007][T13304]  vma_alloc_folio_noprof+0x1a9/0x2f0
[  344.349031][T13304]  handle_mm_fault+0x103e/0x2e70
[  344.349055][T13304]  ? _raw_spin_lock+0x52/0xa0
[  344.349125][T13304]  __get_user_pages+0x1290/0x1f10
[  344.349163][T13304]  __gup_longterm_locked+0x8d7/0xe30
[  344.349261][T13304]  ? try_grab_folio_fast+0x4b2/0x5a0
[  344.349295][T13304]  ? __pte_offset_map+0xef/0x150
[  344.349454][T13304]  gup_fast_fallback+0x1f2/0x1410
[  344.349491][T13304]  pin_user_pages_fast+0x5f/0x90
[  344.349533][T13304]  rds_info_getsockopt+0x160/0x3a0
[  344.349556][T13304]  rds_getsockopt+0x2ce/0x3e0
[  344.349593][T13304]  ? __pfx_rds_getsockopt+0x10/0x10
[  344.349632][T13304]  do_sock_getsockopt+0x2f5/0x570
[  344.349717][T13304]  __x64_sys_getsockopt+0x11d/0x1a0
[  344.349739][T13304]  x64_sys_call+0x2dcf/0x3020
[  344.349761][T13304]  do_syscall_64+0x12c/0x3b0
[  344.349791][T13304]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  344.349836][T13304] RIP: 0033:0x7f31509dcdd9
[  344.349875][T13304] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  344.349894][T13304] RSP: 002b:00007f314f42f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  344.349914][T13304] RAX: ffffffffffffffda RBX: 00007f3150c55fa0 RCX: 00007f31509dcdd9
[  344.349930][T13304] RDX: 0000000000002715 RSI: 0000200000000114 RDI: 0000000000000003
[  344.349963][T13304] RBP: 00007f314f42f090 R08: 0000200000000400 R09: 0000000000000000
[  344.349980][T13304] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000001
[  344.349997][T13304] R13: 00007f3150c56038 R14: 00007f3150c55fa0 R15: 00007ffecb272bb8
[  344.350022][T13304]  </TASK>
[  344.617175][T13307] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  344.631638][T13307] gretap1: entered allmulticast mode
[  344.666702][T13313] FAULT_INJECTION: forcing a failure.
[  344.666702][T13313] name failslab, interval 1, probability 0, space 0, times 0
[  344.680226][T13313] CPU: 0 UID: 0 PID: 13313 Comm: syz.1.2738 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  344.680354][T13313] Tainted: [W]=WARN
[  344.680361][T13313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  344.680373][T13313] Call Trace:
[  344.680378][T13313]  <TASK>
[  344.680404][T13313]  __dump_stack+0x1d/0x30
[  344.680435][T13313]  dump_stack_lvl+0x95/0xd0
[  344.680522][T13313]  dump_stack+0x15/0x1b
[  344.680554][T13313]  should_fail_ex+0x263/0x280
[  344.680667][T13313]  ? netlink_policy_dump_add_policy+0x92/0x290
[  344.680725][T13313]  should_failslab+0x8c/0xb0
[  344.680761][T13313]  __kmalloc_cache_noprof+0x5f/0x400
[  344.680834][T13313]  netlink_policy_dump_add_policy+0x92/0x290
[  344.680872][T13313]  ctrl_dumppolicy_start+0x3f1/0x670
[  344.680937][T13313]  ? should_fail_ex+0xd9/0x280
[  344.680972][T13313]  ? __pfx_lockd_nl_server_set_doit+0x10/0x10
[  344.681071][T13313]  ? __pfx_ctrl_dumppolicy_start+0x10/0x10
[  344.681112][T13313]  genl_start+0x2e3/0x390
[  344.681153][T13313]  __netlink_dump_start+0x334/0x520
[  344.681300][T13313]  genl_family_rcv_msg_dumpit+0x1a5/0x210
[  344.681381][T13313]  ? __pfx_genl_start+0x10/0x10
[  344.681413][T13313]  ? __pfx_genl_dumpit+0x10/0x10
[  344.681458][T13313]  ? __pfx_genl_done+0x10/0x10
[  344.681493][T13313]  genl_rcv_msg+0x400/0x470
[  344.681533][T13313]  ? __pfx_ctrl_dumppolicy_start+0x10/0x10
[  344.681617][T13313]  ? __pfx_ctrl_dumppolicy+0x10/0x10
[  344.681654][T13313]  ? __pfx_ctrl_dumppolicy_done+0x10/0x10
[  344.681686][T13313]  netlink_rcv_skb+0x123/0x220
[  344.681771][T13313]  ? __pfx_genl_rcv_msg+0x10/0x10
[  344.681814][T13313]  genl_rcv+0x28/0x40
[  344.681887][T13313]  netlink_unicast+0x5a8/0x680
[  344.681952][T13313]  netlink_sendmsg+0x5c8/0x6f0
[  344.681986][T13313]  ? __pfx_netlink_sendmsg+0x10/0x10
[  344.682083][T13313]  ____sys_sendmsg+0x563/0x5b0
[  344.682110][T13313]  ___sys_sendmsg+0x195/0x1e0
[  344.682176][T13313]  __x64_sys_sendmsg+0xd4/0x160
[  344.682233][T13313]  x64_sys_call+0x194c/0x3020
[  344.682255][T13313]  do_syscall_64+0x12c/0x3b0
[  344.682296][T13313]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  344.682328][T13313] RIP: 0033:0x7f05ada8cdd9
[  344.682375][T13313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  344.682394][T13313] RSP: 002b:00007f05ac4df028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  344.682412][T13313] RAX: ffffffffffffffda RBX: 00007f05add05fa0 RCX: 00007f05ada8cdd9
[  344.682427][T13313] RDX: 0000000000000800 RSI: 00002000000029c0 RDI: 000000000000004f
[  344.682501][T13313] RBP: 00007f05ac4df090 R08: 0000000000000000 R09: 0000000000000000
[  344.682517][T13313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  344.682544][T13313] R13: 00007f05add06038 R14: 00007f05add05fa0 R15: 00007fff16eb1eb8
[  344.682591][T13313]  </TASK>
[  344.713444][T13315] loop2: detected capacity change from 0 to 512
[  344.776956][T13319] infiniband sy�1: RDMA CMA: cma_listen_on_dev, error -98
[  344.804712][T13315] ext4: Unknown parameter 'mask'
[  344.993138][T13315] loop2: detected capacity change from 0 to 512
[  344.999803][T13315] ext4: Invalid gid '0x00000000ffffffff'
[  345.035627][T13326] loop1: detected capacity change from 0 to 512
[  345.081407][T13326] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  345.125151][T13330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2744'.
[  345.128349][T13326] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  345.191705][T13326] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2742: bg 0: block 248: padding at end of block bitmap is not set
[  345.233112][T13326] loop1: lost filesystem error report for type 5 error -117
[  345.233588][T13326] Quota error (device loop1): write_blk: dquota write failed
[  345.233648][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  345.254908][    C0] EXT4-fs (loop1): last error at time 859: ext4_validate_block_bitmap:441
[  345.272629][T13326] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota
[  345.298186][T13339] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2747'.
[  345.319479][T13326] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.2742: Failed to acquire dquot type 1
[  345.336196][T13326] loop1: lost filesystem error report for type 5 error -28
[  345.336738][T13326] EXT4-fs (loop1): 1 truncate cleaned up
[  345.351404][T13326] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  345.395795][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  345.422146][T13344] netlink: 'syz.2.2750': attribute type 1 has an invalid length.
[  345.453259][T13344] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2750'.
[  345.470397][T13346] syz0: rxe_newlink: already configured on xfrm0
[  345.634956][T13349] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2751'.
[  345.698813][T13358] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2754'.
[  345.707907][T13356] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2754'.
[  345.726209][T13360] syz.6.2755(13360): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored.
[  345.742414][   T28] audit: type=1326 audit(859.705:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13352 comm="syz.2.2753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c24ccdd9 code=0x7ffc0000
[  345.746203][T13360] ext4: Bad value for 'resgid'
[  345.770552][T13360] ext4: Bad value for 'resgid'
[  345.818306][   T28] audit: type=1326 audit(859.705:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13352 comm="syz.2.2753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c24ccdd9 code=0x7ffc0000
[  345.864629][   T28] audit: type=1326 audit(859.705:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13352 comm="syz.2.2753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c24ccdd9 code=0x7ffc0000
[  345.917285][   T28] audit: type=1326 audit(859.745:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13352 comm="syz.2.2753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f29c24ccdd9 code=0x7ffc0000
[  345.975504][   T28] audit: type=1326 audit(859.745:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13352 comm="syz.2.2753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f29c24c6b57 code=0x7ffc0000
[  346.293953][T13389]  loop0: p1 p2 p3
[  346.298588][T13389] loop0: p2 size 458752 extends beyond EOD, truncated
[  346.306044][T13389] loop0: p3 start 65280 is beyond EOD, truncated
[  347.180122][T13416] Cannot find set identified by id 0 to match
[  347.191417][T13418] binfmt_misc: register: failed to install interpreter file ./file2
[  348.623992][T13427] xfrm0 speed is unknown, defaulting to 1000
[  348.795071][T13443] __nla_validate_parse: 1 callbacks suppressed
[  348.795102][T13443] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2782'.
[  348.819812][T13440] siw: device registration error -23
[  348.825231][   T28] kauditd_printk_skb: 27 callbacks suppressed
[  348.825315][   T28] audit: type=1400 audit(862.785:1382): avc:  denied  { bind } for  pid=13442 comm="syz.0.2781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  348.919100][T13448] netlink: 'syz.5.2784': attribute type 13 has an invalid length.
[  349.021328][T13448] 8021q: adding VLAN 0 to HW filter on device eth0
[  349.056933][T13448] 8021q: adding VLAN 0 to HW filter on device eth1
[  349.124168][T13448] 8021q: adding VLAN 0 to HW filter on device eth2
[  349.167528][T13448] 8021q: adding VLAN 0 to HW filter on device eth3
[  349.185419][T13459] netlink: 'syz.1.2787': attribute type 21 has an invalid length.
[  349.197646][T13466] FAULT_INJECTION: forcing a failure.
[  349.197646][T13466] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  349.211087][T13462] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2785'.
[  349.220919][T13466] CPU: 0 UID: 0 PID: 13466 Comm: syz.6.2789 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  349.220974][T13466] Tainted: [W]=WARN
[  349.220985][T13466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  349.221048][T13466] Call Trace:
[  349.221054][T13466]  <TASK>
[  349.221063][T13466]  __dump_stack+0x1d/0x30
[  349.221094][T13466]  dump_stack_lvl+0x95/0xd0
[  349.221178][T13466]  dump_stack+0x15/0x1b
[  349.221204][T13466]  should_fail_ex+0x263/0x280
[  349.221299][T13466]  should_fail+0xb/0x20
[  349.221324][T13466]  should_fail_usercopy+0x1a/0x20
[  349.221395][T13466]  _copy_from_user+0x1c/0xb0
[  349.221442][T13466]  ___sys_sendmsg+0xc1/0x1e0
[  349.221486][T13466]  __x64_sys_sendmsg+0xd4/0x160
[  349.221530][T13466]  x64_sys_call+0x194c/0x3020
[  349.221554][T13466]  do_syscall_64+0x12c/0x3b0
[  349.221579][T13466]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  349.221669][T13466] RIP: 0033:0x7f5e87dacdd9
[  349.221684][T13466] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  349.221756][T13466] RSP: 002b:00007f5e867ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  349.221781][T13466] RAX: ffffffffffffffda RBX: 00007f5e88025fa0 RCX: 00007f5e87dacdd9
[  349.221867][T13466] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000004
[  349.221884][T13466] RBP: 00007f5e867ff090 R08: 0000000000000000 R09: 0000000000000000
[  349.221944][T13466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  349.221957][T13466] R13: 00007f5e88026038 R14: 00007f5e88025fa0 R15: 00007ffe3dfbdd98
[  349.221977][T13466]  </TASK>
[  349.410028][T13448] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  349.421627][T13448] 8021q: adding VLAN 0 to HW filter on device bond4
[  349.454996][T13459] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2787'.
[  349.484213][T13462] bridge0: port 1(bridge_slave_0) entered disabled state
[  349.515483][T13472] set_capacity_and_notify: 2 callbacks suppressed
[  349.515499][T13472] loop1: detected capacity change from 0 to 512
[  349.533938][ T6130] bond2: (slave veth5): link status definitely up, 10000 Mbps full duplex
[  349.542540][ T6130] bond2: (slave veth5): making interface the new active one
[  349.580007][ T6130] bond2: active interface up!
[  349.624791][T13476] netlink: 'syz.2.2795': attribute type 2 has an invalid length.
[  349.643263][T13476] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2795'.
[  349.674464][T13478] syzkaller0: entered promiscuous mode
[  349.680046][T13478] syzkaller0: entered allmulticast mode
[  349.686592][T13480] FAULT_INJECTION: forcing a failure.
[  349.686592][T13480] name failslab, interval 1, probability 0, space 0, times 0
[  349.773718][T13480] CPU: 0 UID: 0 PID: 13480 Comm: syz.6.2796 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  349.773763][T13480] Tainted: [W]=WARN
[  349.773770][T13480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  349.773784][T13480] Call Trace:
[  349.773793][T13480]  <TASK>
[  349.773802][T13480]  __dump_stack+0x1d/0x30
[  349.773833][T13480]  dump_stack_lvl+0x95/0xd0
[  349.773878][T13480]  dump_stack+0x15/0x1b
[  349.773912][T13480]  should_fail_ex+0x263/0x280
[  349.773941][T13480]  should_failslab+0x8c/0xb0
[  349.774032][T13480]  kmem_cache_alloc_node_noprof+0x6d/0x450
[  349.774072][T13480]  ? __alloc_skb+0x2d6/0x690
[  349.774135][T13480]  __alloc_skb+0x2d6/0x690
[  349.774165][T13480]  ? __alloc_skb+0x200/0x690
[  349.774193][T13480]  netlink_alloc_large_skb+0xbf/0xf0
[  349.774264][T13480]  netlink_sendmsg+0x40c/0x6f0
[  349.774292][T13480]  ? __pfx_netlink_sendmsg+0x10/0x10
[  349.774316][T13480]  ____sys_sendmsg+0x563/0x5b0
[  349.774389][T13480]  ___sys_sendmsg+0x195/0x1e0
[  349.774472][T13480]  __x64_sys_sendmsg+0xd4/0x160
[  349.774502][T13480]  x64_sys_call+0x194c/0x3020
[  349.774623][T13480]  do_syscall_64+0x12c/0x3b0
[  349.774652][T13480]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  349.774676][T13480] RIP: 0033:0x7f5e87dacdd9
[  349.774697][T13480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  349.774775][T13480] RSP: 002b:00007f5e867ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  349.774795][T13480] RAX: ffffffffffffffda RBX: 00007f5e88025fa0 RCX: 00007f5e87dacdd9
[  349.774811][T13480] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000005
[  349.774824][T13480] RBP: 00007f5e867ff090 R08: 0000000000000000 R09: 0000000000000000
[  349.774837][T13480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  349.774872][T13480] R13: 00007f5e88026038 R14: 00007f5e88025fa0 R15: 00007ffe3dfbdd98
[  349.774896][T13480]  </TASK>
[  350.156014][   T28] audit: type=1400 audit(864.115:1383): avc:  denied  { create } for  pid=13477 comm="syz.1.2794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  350.533099][T13495] loop0: detected capacity change from 0 to 128
[  350.562543][T13495] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  350.627294][T13495] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  350.747798][T13500] netlink: 'syz.1.2802': attribute type 21 has an invalid length.
[  350.760110][T13500] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2802'.
[  350.836130][T13505] loop1: detected capacity change from 0 to 512
[  350.943738][T13508] loop1: detected capacity change from 0 to 512
[  350.984275][T13508] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  351.014341][T13508] EXT4-fs (loop1): 1 orphan inode deleted
[  351.020160][T13508] EXT4-fs (loop1): 1 truncate cleaned up
[  351.026254][T13508] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  351.103163][T13508] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  351.254208][T13508] loop7: detected capacity change from 16384 to 0
[  351.428001][   T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  351.436191][T13534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  351.457935][   T35] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  351.490589][T13534] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  351.531781][T13530] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2811'.
[  351.631711][T13535] fido_id[13535]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  351.717139][T13539] x_tables: duplicate underflow at hook 3
[  351.825420][T13543] netlink: 'syz.1.2817': attribute type 2 has an invalid length.
[  351.852117][T13543] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2817'.
[  352.174832][T13561] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5135 sclass=netlink_route_socket pid=13561 comm=syz.2.2826
[  352.240553][T13561] bond1: entered promiscuous mode
[  352.256407][T13561] bond1: entered allmulticast mode
[  352.261698][T13561] 8021q: adding VLAN 0 to HW filter on device bond1
[  352.807114][T13577] loop6: detected capacity change from 0 to 4096
[  352.850824][T13577] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  352.950724][T13574] bridge0: port 2(bridge_slave_1) entered disabled state
[  352.959947][T13574] bridge0: port 1(bridge_slave_0) entered disabled state
[  353.084393][T11544] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  353.141082][   T28] audit: type=1400 audit(867.105:1384): avc:  denied  { nlmsg_read } for  pid=13592 comm="syz.1.2832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[  353.529905][ T6128] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  353.550155][ T6128] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  353.569867][ T6128] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  353.609562][ T6128] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  353.631925][T13602] loop1: detected capacity change from 0 to 4096
[  353.800222][T13621] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2843'.
[  353.842569][T13619] hub 8-0:1.0: USB hub found
[  353.856662][T13619] hub 8-0:1.0: 8 ports detected
[  353.960545][T13598] loop6: detected capacity change from 0 to 512
[  353.998753][T13598] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[  354.059397][T13636] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2848'.
[  354.092715][T13639] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2849'.
[  354.109414][T13598] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  354.135496][T13628] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63514 sclass=netlink_route_socket pid=13628 comm=syz.2.2845
[  354.155507][T13598] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2831: bg 0: block 248: padding at end of block bitmap is not set
[  354.193458][T13598] loop6: lost filesystem error report for type 5 error -117
[  354.203609][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  354.217417][    C0] EXT4-fs (loop6): last error at time 868: ext4_validate_block_bitmap:441
[  354.229201][T13598] Quota error (device loop6): write_blk: dquota write failed
[  354.252984][T13598] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota
[  354.291115][T13598] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.2831: Failed to acquire dquot type 1
[  354.302371][T13598] loop6: lost filesystem error report for type 5 error -28
[  354.350755][T13598] EXT4-fs (loop6): 1 truncate cleaned up
[  354.364097][T13598] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  354.386982][T13651] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2853'.
[  354.420247][T13598] Quota error (device loop6): find_tree_dqentry: Cycle in quota tree detected: block 2 index 2
[  354.431117][T13598] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 131074
[  354.442406][T13598] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.2831: Failed to acquire dquot type 1
[  354.591092][T13661] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2857'.
[  354.635350][T13648] FAULT_INJECTION: forcing a failure.
[  354.635350][T13648] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  354.648520][   T28] audit: type=1326 audit(868.605:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13658 comm="syz.2.2857" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f29c24ccdd9 code=0x0
[  354.684475][T13648] CPU: 1 UID: 0 PID: 13648 Comm: syz.5.2852 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  354.684560][T13648] Tainted: [W]=WARN
[  354.684568][T13648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  354.684651][T13648] Call Trace:
[  354.684659][T13648]  <TASK>
[  354.684668][T13648]  __dump_stack+0x1d/0x30
[  354.684691][T13648]  dump_stack_lvl+0x95/0xd0
[  354.684777][T13648]  dump_stack+0x15/0x1b
[  354.684794][T13648]  should_fail_ex+0x263/0x280
[  354.684821][T13648]  should_fail+0xb/0x20
[  354.684844][T13648]  should_fail_usercopy+0x1a/0x20
[  354.684918][T13648]  _copy_to_iter+0xd2/0xea0
[  354.684973][T13648]  ? __pfx_lookup_user_key_possessed+0x10/0x10
[  354.685004][T13648]  ? __pfx_keyring_search_iterator+0x10/0x10
[  354.685070][T13648]  ? rb_next+0x5c/0x80
[  354.685100][T13648]  seq_read_iter+0x776/0x940
[  354.685127][T13648]  ? __pfx_proc_reg_read_iter+0x10/0x10
[  354.685247][T13648]  proc_reg_read_iter+0x110/0x180
[  354.685281][T13648]  __io_read+0x465/0xbf0
[  354.685312][T13648]  ? io_poll_remove_entries+0x79/0x2c0
[  354.685330][T13648]  ? io_poll_get_ownership+0x54/0x80
[  354.685424][T13648]  io_read+0x4a/0x190
[  354.685472][T13648]  ? __fget_files+0x184/0x1c0
[  354.685491][T13648]  __io_issue_sqe+0xfd/0x2d0
[  354.685523][T13648]  io_issue_sqe+0x206/0xba0
[  354.685556][T13648]  ? io_prep_read+0xab/0xe0
[  354.685585][T13648]  io_submit_sqes+0x7e0/0x1170
[  354.685626][T13648]  __se_sys_io_uring_enter+0x25c/0xfc0
[  354.685723][T13648]  ? mutex_unlock+0x4e/0x90
[  354.685769][T13648]  ? fput+0x8f/0xc0
[  354.685790][T13648]  __x64_sys_io_uring_enter+0x78/0x90
[  354.685839][T13648]  x64_sys_call+0x1e16/0x3020
[  354.685863][T13648]  do_syscall_64+0x12c/0x3b0
[  354.685963][T13648]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  354.685984][T13648] RIP: 0033:0x7f318c4ccdd9
[  354.686000][T13648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  354.686092][T13648] RSP: 002b:00007f318af1f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[  354.686112][T13648] RAX: ffffffffffffffda RBX: 00007f318c745fa0 RCX: 00007f318c4ccdd9
[  354.686126][T13648] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000
[  354.686139][T13648] RBP: 00007f318af1f090 R08: 0000000000000000 R09: 0000000000000000
[  354.686152][T13648] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001
[  354.686165][T13648] R13: 00007f318c746038 R14: 00007f318c745fa0 R15: 00007ffd55c2a708
[  354.686218][T13648]  </TASK>
[  354.957039][T11544] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  355.186717][T13678] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2861'.
[  355.371543][   T28] audit: type=1326 audit(869.305:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13681 comm="syz.1.2866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ada8cdd9 code=0x7ffc0000
[  355.462582][T13680] loop0: detected capacity change from 0 to 4096
[  355.529528][T13680] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  355.549652][   T28] audit: type=1326 audit(869.305:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13681 comm="syz.1.2866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ada8cdd9 code=0x7ffc0000
[  355.698275][   T28] audit: type=1326 audit(869.315:1388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13681 comm="syz.1.2866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ada8cdd9 code=0x7ffc0000
[  355.714655][T13689] netlink: 83992 bytes leftover after parsing attributes in process `syz.6.2869'.
[  355.729441][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  355.741934][T13689] net_ratelimit: 57 callbacks suppressed
[  355.741950][T13689] netlink: zone id is out of range
[  355.765554][T13689] netlink: zone id is out of range
[  355.773853][   T28] audit: type=1326 audit(869.315:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13681 comm="syz.1.2866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ada8cdd9 code=0x7ffc0000
[  355.782694][T13689] netlink: zone id is out of range
[  355.797300][   T28] audit: type=1326 audit(869.315:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13681 comm="syz.1.2866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f05ada8cdd9 code=0x7ffc0000
[  355.822404][T13689] netlink: zone id is out of range
[  355.852032][T13689] netlink: zone id is out of range
[  355.868658][T13689] netlink: zone id is out of range
[  355.902341][T13689] netlink: set zone limit has 8 unknown bytes
[  355.910529][T13695] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2871'.
[  355.977072][T13704] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2874'.
[  355.996192][T13701] loop0: detected capacity change from 0 to 512
[  356.008910][T13707] netlink: 763 bytes leftover after parsing attributes in process `syz.5.2873'.
[  356.054792][T13707] loop5: detected capacity change from 0 to 1024
[  356.062073][T13707] EXT4-fs: Ignoring removed mblk_io_submit option
[  356.068988][T13707] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  356.095316][T13699] xfrm0 speed is unknown, defaulting to 1000
[  356.123717][T13707] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  356.152304][T13707] EXT4-fs error (device loop5): ext4_ext_check_inode:521: inode #11: comm syz.5.2873: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  356.170333][T13701] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  356.184069][T13707] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  356.184263][T13707] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.2873: couldn't read orphan inode 11 (err -117)
[  356.205297][T13707] loop5: lost filesystem error report for type 5 error -117
[  356.234253][    C0] EXT4-fs (loop5): error count since last fsck: 2
[  356.248056][    C0] EXT4-fs (loop5): initial error at time 870: ext4_ext_check_inode:521: inode 11
[  356.257268][    C0] EXT4-fs (loop5): last error at time 870: ext4_orphan_get:1402
[  356.269126][T13707] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  356.305608][T13715] loop6: detected capacity change from 0 to 512
[  356.319909][T13715] EXT4-fs: dax option not supported
[  357.022853][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  357.038021][ T5338] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  357.145566][T13729] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2881'.
[  357.920484][T13745] loop0: detected capacity change from 0 to 512
[  357.921917][T13749] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13749 comm=syz.2.2889
[  357.941117][T13745] EXT4-fs: dax option not supported
[  358.048158][T13757] loop6: detected capacity change from 0 to 512
[  358.096848][T13757] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002]
[  358.113686][T13757] System zones: 0-2, 18-18, 34-34
[  358.138754][T13757] EXT4-fs warning (device loop6): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix.
[  358.173810][T13757] EXT4-fs (loop6): mount failed
[  358.354112][T13777] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  358.377190][T13777] block device autoloading is deprecated and will be removed.
[  358.395109][T13777] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  358.403675][T13777] batadv0: mtu less than device minimum
[  358.424203][T13777] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  358.435411][T13777] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  358.483644][T13777] batman_adv: batadv0: Removing interface: batadv_slave_0
[  359.140518][T13777] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  359.164479][T13777] batman_adv: batadv0: Removing interface: batadv_slave_1
[  359.172608][T13777] batman_adv: batadv0: Interface deactivated: dummy0
[  359.179846][T13777] batman_adv: batadv0: Removing interface: dummy0
[  359.230735][T13792] loop6: detected capacity change from 0 to 512
[  359.239971][T13792] EXT4-fs: dax option not supported
[  359.283218][T13796] loop6: detected capacity change from 0 to 128
[  359.300337][T13796] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  359.322618][   T28] kauditd_printk_skb: 128 callbacks suppressed
[  359.322631][   T28] audit: type=1400 audit(873.285:1518): avc:  denied  { getopt } for  pid=13795 comm="syz.6.2905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  359.434938][T11544] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  360.279473][T13835] FAULT_INJECTION: forcing a failure.
[  360.279473][T13835] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  360.294145][T13835] CPU: 0 UID: 0 PID: 13835 Comm: syz.0.2919 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  360.294204][T13835] Tainted: [W]=WARN
[  360.294213][T13835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  360.294229][T13835] Call Trace:
[  360.294237][T13835]  <TASK>
[  360.294299][T13835]  __dump_stack+0x1d/0x30
[  360.294321][T13835]  dump_stack_lvl+0x95/0xd0
[  360.294373][T13835]  dump_stack+0x15/0x1b
[  360.294409][T13835]  should_fail_ex+0x263/0x280
[  360.294491][T13835]  should_fail+0xb/0x20
[  360.294520][T13835]  should_fail_usercopy+0x1a/0x20
[  360.294549][T13835]  _copy_from_user+0x1c/0xb0
[  360.294636][T13835]  do_ip_vs_set_ctl+0x1a7/0xae0
[  360.294677][T13835]  ? _parse_integer_limit+0x170/0x190
[  360.294727][T13835]  ? do_ip_setsockopt+0x1af1/0x2290
[  360.294832][T13835]  nf_setsockopt+0x199/0x1b0
[  360.294943][T13835]  ip_setsockopt+0x102/0x110
[  360.295064][T13835]  sctp_setsockopt+0x126/0xea0
[  360.295095][T13835]  sock_common_setsockopt+0x69/0x80
[  360.295264][T13835]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  360.295354][T13835]  __sys_setsockopt+0x184/0x200
[  360.295375][T13835]  __x64_sys_setsockopt+0x64/0x80
[  360.295395][T13835]  x64_sys_call+0x2327/0x3020
[  360.295481][T13835]  do_syscall_64+0x12c/0x3b0
[  360.295507][T13835]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  360.295529][T13835] RIP: 0033:0x7f31509dcdd9
[  360.295544][T13835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  360.295620][T13835] RSP: 002b:00007f314f42f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  360.295645][T13835] RAX: ffffffffffffffda RBX: 00007f3150c55fa0 RCX: 00007f31509dcdd9
[  360.295662][T13835] RDX: 0000000000000487 RSI: 0000000000000000 RDI: 0000000000000003
[  360.295677][T13835] RBP: 00007f314f42f090 R08: 0000000000000044 R09: 0000000000000000
[  360.295750][T13835] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001
[  360.295764][T13835] R13: 00007f3150c56038 R14: 00007f3150c55fa0 R15: 00007ffecb272bb8
[  360.295791][T13835]  </TASK>
[  360.679402][T13850] __nla_validate_parse: 4 callbacks suppressed
[  360.679422][T13850] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2924'.
[  360.729107][T13850] netlink: 'syz.2.2924': attribute type 13 has an invalid length.
[  360.749653][T13850] netlink: 'syz.2.2924': attribute type 17 has an invalid length.
[  360.920867][   T28] audit: type=1400 audit(874.885:1519): avc:  denied  { mount } for  pid=13854 comm="syz.0.2927" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1
[  360.979985][   T28] audit: type=1400 audit(874.915:1520): avc:  denied  { listen } for  pid=13854 comm="syz.0.2927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  361.083375][T13870] loop1: detected capacity change from 0 to 1024
[  361.123541][T13870] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  361.152303][T13870] System zones: 0-1, 3-36
[  361.209091][T13870] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.2930: bad orphan inode 134217728
[  361.273435][T13870] loop1: lost filesystem error report for type 5 error -117
[  361.284281][T13870] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  361.475083][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  361.577260][T13876] loop1: detected capacity change from 0 to 512
[  361.604128][T13876] EXT4-fs: Ignoring removed nomblk_io_submit option
[  361.634050][T13876] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  361.649463][T13859] net_ratelimit: 37 callbacks suppressed
[  361.649479][T13859] Set syz1 is full, maxelem 65536 reached
[  361.656122][T13876] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  361.730527][T13876] EXT4-fs error (device loop1): ext4_init_orphan_info:583: comm syz.1.2931: inode #0: comm syz.1.2931: iget: illegal inode #
[  361.748779][T13869] loop0: detected capacity change from 0 to 512
[  361.761219][T13876] loop1: lost filesystem error report for type 5 error -117
[  361.761894][T13880] netlink: 'syz.2.2932': attribute type 10 has an invalid length.
[  361.762795][T13876] EXT4-fs (loop1): Remounting filesystem read-only
[  361.777093][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  361.777115][    C0] EXT4-fs (loop1): initial error at time 875: ext4_init_orphan_info:583
[  361.777143][    C0] EXT4-fs (loop1): last error at time 875: ext4_init_orphan_info:583
[  361.806604][T13876] EXT4-fs (loop1): get orphan inode failed
[  361.812708][T13876] EXT4-fs (loop1): mount failed
[  361.818012][T13880] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2932'.
[  361.822569][T13869] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  361.922514][T13886] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2933'.
[  361.931765][T13886] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2933'.
[  361.942862][T13887] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  361.975231][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  362.053536][T13886] batadv0: entered promiscuous mode
[  362.059641][T13886] 8021q: adding VLAN 0 to HW filter on device batadv0
[  362.801344][T13904] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2939'.
[  362.884374][T13908] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2941'.
[  362.896337][T13910] loop1: detected capacity change from 0 to 2048
[  362.903182][T13908] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2941'.
[  362.963848][T13912] loop5: detected capacity change from 0 to 512
[  363.023299][T13912] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  363.402023][T13930] xfrm0 speed is unknown, defaulting to 1000
[  363.505385][ T5338] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  364.255649][T13930] bridge0: port 1(bridge_slave_0) entered blocking state
[  364.276671][T13930] bridge0: port 1(bridge_slave_0) entered disabled state
[  364.310028][T13930] bridge_slave_0: entered allmulticast mode
[  364.333373][T13930] bridge_slave_0: entered promiscuous mode
[  364.354601][T13930] bridge0: port 2(bridge_slave_1) entered blocking state
[  364.376851][T13930] bridge0: port 2(bridge_slave_1) entered disabled state
[  364.408607][T13930] bridge_slave_1: entered allmulticast mode
[  364.435683][T13930] bridge_slave_1: entered promiscuous mode
[  364.496734][T13930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  364.515109][T13930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  364.566029][T13930] team0: Port device team_slave_0 added
[  364.584702][T13930] team0: Port device team_slave_1 added
[  364.621690][T13930] batman_adv: batadv0: Adding interface: batadv_slave_0
[  364.634196][T13930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  364.677518][T13930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  364.689394][T13930] batman_adv: batadv0: Adding interface: batadv_slave_1
[  364.696715][T13930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  364.735298][T13930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  364.753900][T13981] macvtap1: entered promiscuous mode
[  364.759863][T13981] macvtap1: entered allmulticast mode
[  364.775450][T13981] veth1_vlan: entered allmulticast mode
[  364.819491][T13930] hsr_slave_0: entered promiscuous mode
[  364.826179][T13930] hsr_slave_1: entered promiscuous mode
[  364.832209][T13930] debugfs: 'hsr0' already exists in 'hsr'
[  364.838104][T13930] Cannot create hsr debugfs directory
[  364.846622][T13988] xfrm0 speed is unknown, defaulting to 1000
[  365.049993][T13997] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2969'.
[  365.102420][T13998] SELinux:  Context system_u:object_r:tmp_t:s0 is not valid (left unmapped).
[  365.226694][   T28] audit: type=1400 audit(879.075:1521): avc:  denied  { relabelto } for  pid=13987 comm="syz.6.2967" name="bus" dev="tmpfs" ino=782 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:tmp_t:s0"
[  365.316778][   T28] audit: type=1400 audit(879.075:1522): avc:  denied  { associate } for  pid=13987 comm="syz.6.2967" name="bus" dev="tmpfs" ino=782 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:tmp_t:s0"
[  365.354112][T13994] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2968'.
[  365.400999][T13994] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2968'.
[  365.428552][T13930] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  365.454340][T13930] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  365.474047][T13930] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  365.488273][T13930] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  365.503209][T13930] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  365.524764][T13930] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  365.533191][T13930] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  365.552343][T13930] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  365.635743][T13930] 8021q: adding VLAN 0 to HW filter on device bond0
[  365.667931][T13930] 8021q: adding VLAN 0 to HW filter on device team0
[  365.690876][ T6143] bridge0: port 1(bridge_slave_0) entered blocking state
[  365.698235][ T6143] bridge0: port 1(bridge_slave_0) entered forwarding state
[  365.750298][ T6143] bridge0: port 2(bridge_slave_1) entered blocking state
[  365.757514][ T6143] bridge0: port 2(bridge_slave_1) entered forwarding state
[  365.807781][T13930] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  365.823716][T13930] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  366.033887][T13930] 8021q: adding VLAN 0 to HW filter on device batadv0
[  366.163013][T13930] veth0_vlan: entered promiscuous mode
[  366.180603][T13930] veth1_vlan: entered promiscuous mode
[  366.186769][T14047] __nla_validate_parse: 1 callbacks suppressed
[  366.186781][T14047] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2979'.
[  366.226034][T13930] veth0_macvtap: entered promiscuous mode
[  366.244030][T13930] veth1_macvtap: entered promiscuous mode
[  366.264292][T13930] batman_adv: batadv0: Interface activated: batadv_slave_0
[  366.293232][T13930] batman_adv: batadv0: Interface activated: batadv_slave_1
[  366.326128][ T6138] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  366.349623][ T6138] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  366.373073][ T6138] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  366.392008][ T6138] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  366.600433][T14065] loop5: detected capacity change from 0 to 1024
[  366.618791][T14065] EXT4-fs: test_dummy_encryption option not supported
[  366.701148][T14068] raw_sendmsg: syz.1.2985 forgot to set AF_INET. Fix it!
[  366.918417][T14072] loop5: detected capacity change from 0 to 512
[  367.052383][T14072] EXT4-fs (loop5): 1 orphan inode deleted
[  367.059358][T14072] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  367.149260][ T5373] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  367.245734][ T5373] EXT4-fs error (device loop5): ext4_release_dquot:7070: comm kworker/u8:12: Failed to release dquot type 1
[  367.661920][T14082] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2989'.
[  367.895672][T14093] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2992'.
[  368.111554][T14105] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2996'.
[  368.406137][T14110] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14110 comm=syz.1.2996
[  368.507220][ T5338] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  368.602957][T14116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3001'.
[  368.864621][   T28] audit: type=1400 audit(1138.835:1523): avc:  denied  { relabelto } for  pid=14141 comm="syz.1.3014" name="10" dev="tmpfs" ino=63 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768"
[  368.924820][   T28] audit: type=1400 audit(1138.835:1524): avc:  denied  { prog_load } for  pid=14141 comm="syz.1.3014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  368.971186][   T28] audit: type=1400 audit(1138.865:1525): avc:  denied  { remove_name } for  pid=13930 comm="syz-executor" name="binderfs" dev="tmpfs" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768"
[  369.042572][   T28] audit: type=1400 audit(1138.865:1526): avc:  denied  { rmdir } for  pid=13930 comm="syz-executor" name="10" dev="tmpfs" ino=63 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768"
[  369.109420][T14175] bridge_slave_0: left allmulticast mode
[  369.115204][T14175] bridge_slave_0: left promiscuous mode
[  369.128040][T14175] bridge0: port 1(bridge_slave_0) entered disabled state
[  369.158803][T14175] bridge_slave_1: left allmulticast mode
[  369.164747][T14175] bridge_slave_1: left promiscuous mode
[  369.179822][T14175] bridge0: port 2(bridge_slave_1) entered disabled state
[  369.214651][T14175] bond0: (slave bond_slave_0): Releasing backup interface
[  369.251480][T14175] bond0: (slave bond_slave_1): Releasing backup interface
[  369.293030][   T28] audit: type=1400 audit(1139.255:1527): avc:  denied  { map_create } for  pid=14181 comm="syz.5.3023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  369.320026][T14175] team0: Port device team_slave_0 removed
[  369.338101][T14175] team0: Port device team_slave_1 removed
[  369.354014][T14175] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  369.372596][   T28] audit: type=1400 audit(1139.255:1528): avc:  denied  { map_read map_write } for  pid=14181 comm="syz.5.3023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  369.414931][   T28] audit: type=1400 audit(1139.285:1529): avc:  denied  { prog_run } for  pid=14181 comm="syz.5.3023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  369.471793][T14189] loop5: detected capacity change from 0 to 8192
[  369.742412][T14204] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3033'.
[  369.836777][T14208] ref_ctr_offset mismatch. inode: 0x1cc offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1000000
[  369.934598][ T5338] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1)
[  369.952717][ T5338] FAT-fs (loop5): Filesystem has been set read-only
[  370.059646][T14217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  370.083845][T14217] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  370.116531][T14219] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  370.394550][T14232] loop6: detected capacity change from 0 to 512
[  370.407334][T14231] loop5: detected capacity change from 0 to 1024
[  370.427972][T14232] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  370.448209][T14231] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  370.488592][T11544] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  370.605076][   T28] audit: type=1400 audit(1140.575:1530): avc:  denied  { node_bind } for  pid=14242 comm="syz.6.3046" saddr=fe80::aa src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[  370.782720][   T28] audit: type=1400 audit(1140.745:1531): avc:  denied  { ioctl } for  pid=14254 comm="syz.2.3051" path="socket:[38867]" dev="sockfs" ino=38867 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  370.801380][T14253] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3050'.
[  370.924870][T14261] loop6: detected capacity change from 0 to 512
[  370.944281][T14261] ext4: Bad value for 'resgid'
[  370.954043][T14261] ext4: Bad value for 'resgid'
[  371.342672][T14275] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3061'.
[  371.361680][T14276] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3061'.
[  371.381101][T14275] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3061'.
[  371.409077][T14275] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3061'.
[  371.428036][T14275] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3061'.
[  371.449950][T14275] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3061'.
[  371.469027][T14275] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3061'.
[  371.487392][T14275] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3061'.
[  371.506339][T14275] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3061'.
[  371.525940][T14275] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3061'.
[  371.977880][T14287] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14287 comm=syz.1.3066
[  372.012141][T14289] No such timeout policy "syz1"
[  372.220274][T14295] loop0: detected capacity change from 0 to 128
[  372.342803][T14295] bio_check_eod: 10738 callbacks suppressed
[  372.342844][T14295] syz.0.3070: attempt to access beyond end of device
[  372.342844][T14295] loop0: rw=2049, sector=138, nr_sectors = 2 limit=128
[  372.363023][T14295] buffer_io_error: 10738 callbacks suppressed
[  372.363040][T14295] Buffer I/O error on dev loop0, logical block 69, lost async page write
[  372.717691][T14309] loop5: detected capacity change from 0 to 128
[  372.726514][T14309] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  372.767134][T14320] netlink: 'syz.0.3080': attribute type 2 has an invalid length.
[  372.775338][T14320] netlink: 'syz.0.3080': attribute type 1 has an invalid length.
[  372.823249][   T28] audit: type=1326 audit(1142.785:1532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14321 comm="syz.1.3081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbaf7ccdd9 code=0x7ffc0000
[  372.875260][   T28] audit: type=1326 audit(1142.785:1533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14321 comm="syz.1.3081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbaf7ccdd9 code=0x7ffc0000
[  372.901393][   T28] audit: type=1326 audit(1142.785:1534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14321 comm="syz.1.3081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbaf7ccdd9 code=0x7ffc0000
[  372.925975][   T28] audit: type=1326 audit(1142.785:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14321 comm="syz.1.3081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7ffbaf7ccdd9 code=0x7ffc0000
[  372.949178][   T28] audit: type=1326 audit(1142.785:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14321 comm="syz.1.3081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbaf7ccdd9 code=0x7ffc0000
[  372.974850][   T28] audit: type=1326 audit(1142.785:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14321 comm="syz.1.3081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbaf7ccdd9 code=0x7ffc0000
[  373.001222][   T28] audit: type=1326 audit(1142.825:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14321 comm="syz.1.3081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbaf7ccdd9 code=0x7ffc0000
[  373.024697][   T28] audit: type=1326 audit(1142.825:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14321 comm="syz.1.3081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbaf7ccdd9 code=0x7ffc0000
[  373.059200][ T5338] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  373.369438][T14359] bridge0: port 2(bridge_slave_1) entered disabled state
[  375.146549][T14334] Process accounting paused
[  375.205556][T14385] loop6: detected capacity change from 0 to 512
[  375.229072][T14385] EXT4-fs warning (device loop6): ext4_xattr_inode_get:546: inode #11: comm syz.6.3102: ea_inode file size=16777216 entry size=6
[  375.244581][T14385] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #11: comm syz.6.3102: iget: bad extra_isize 90 (inode size 256)
[  375.258594][T14385] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  375.258894][T14385] EXT4-fs (loop6): Remounting filesystem read-only
[  375.268087][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  375.268107][    C0] EXT4-fs (loop6): initial error at time 1145: ext4_xattr_inode_iget:441: inode 11
[  375.268132][    C0] EXT4-fs (loop6): last error at time 1145: ext4_xattr_inode_iget:441: inode 11
[  375.300286][T14385] EXT4-fs warning (device loop6): ext4_evict_inode:287: xattr delete (err -30)
[  375.309577][T14385] EXT4-fs (loop6): 1 orphan inode deleted
[  375.315899][T14385] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  375.358360][T11544] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  375.399606][T14394] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  375.414559][T14394] batman_adv: batadv0: Removing interface: batadv_slave_0
[  375.474699][T14399] loop6: detected capacity change from 0 to 4096
[  375.476157][T14394] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  375.488453][T14394] batman_adv: batadv0: Removing interface: batadv_slave_1
[  375.530417][T14399] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  375.565836][T11544] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  375.660815][T14405] loop6: detected capacity change from 0 to 512
[  375.744195][T14404] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14404 comm=syz.0.3103
[  375.795246][T14405] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  375.872947][T11544] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  376.313791][T14346] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  376.662120][T14426] loop6: detected capacity change from 0 to 512
[  376.688525][T14426] EXT4-fs: Ignoring removed bh option
[  376.724291][T14426] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended
[  376.757104][T14426] EXT4-fs (loop6): 1 truncate cleaned up
[  376.771485][T14431] __nla_validate_parse: 65 callbacks suppressed
[  376.771502][T14431] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3117'.
[  376.794689][T14426] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  376.920960][T14432] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3115: bg 0: block 465: padding at end of block bitmap is not set
[  376.995427][T14432] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  377.012957][T14426] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 32 with error 28
[  377.030016][T14426] EXT4-fs (loop6): This should not happen!! Data will be lost
[  377.030016][T14426] 
[  377.040989][T14426] EXT4-fs (loop6): Total free blocks count 0
[  377.051426][T14426] EXT4-fs (loop6): Free/Dirty block details
[  377.058715][T14426] EXT4-fs (loop6): free_blocks=0
[  377.070535][T14432] EXT4-fs (loop6): This should not happen!! Data will be lost
[  377.070535][T14432] 
[  377.070712][T14437] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  377.082849][T14426] EXT4-fs (loop6): dirty_blocks=33
[  377.097052][T14426] EXT4-fs (loop6): Block reservation details
[  377.228908][T14444] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3121'.
[  377.270706][T14444] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3121'.
[  377.466627][   T28] kauditd_printk_skb: 77 callbacks suppressed
[  377.466664][   T28] audit: type=1326 audit(1147.425:1617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14451 comm="syz.2.3125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c24ccdd9 code=0x7ffc0000
[  377.518600][T11544] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  377.549144][   T28] audit: type=1326 audit(1147.435:1619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14451 comm="syz.2.3125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c24ccdd9 code=0x7ffc0000
[  377.583697][   T28] audit: type=1326 audit(1147.435:1620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14451 comm="syz.2.3125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c24ccdd9 code=0x7ffc0000
[  377.607318][   T28] audit: type=1326 audit(1147.435:1618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14451 comm="syz.2.3125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c24ccdd9 code=0x7ffc0000
[  377.630555][   T28] audit: type=1326 audit(1147.435:1621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14451 comm="syz.2.3125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f29c24ccdd9 code=0x7ffc0000
[  377.653763][   T28] audit: type=1326 audit(1147.475:1622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14451 comm="syz.2.3125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c24ccdd9 code=0x7ffc0000
[  377.692231][   T28] audit: type=1326 audit(1147.485:1623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14451 comm="syz.2.3125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c24ccdd9 code=0x7ffc0000
[  377.734717][   T28] audit: type=1326 audit(1147.505:1624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14451 comm="syz.2.3125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c24ccdd9 code=0x7ffc0000
[  377.788190][T14462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  377.809638][T14462] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  377.825456][   T28] audit: type=1326 audit(1147.505:1626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14451 comm="syz.2.3125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c24ccdd9 code=0x7ffc0000
[  377.870481][T14462] loop6: detected capacity change from 0 to 128
[  377.871307][   T28] audit: type=1326 audit(1147.505:1625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14451 comm="syz.2.3125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f29c24ccdd9 code=0x7ffc0000
[  377.909055][T14462] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1)
[  378.005143][T14464] xfrm0 speed is unknown, defaulting to 1000
[  378.172733][T14471] netlink: 'syz.1.3133': attribute type 4 has an invalid length.
[  378.193635][T14471] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.3133'.
[  378.219710][T14474] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3134'.
[  378.440851][T14491] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3141'.
[  378.734734][T14493] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3140'.
[  378.763741][T14493] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3140'.
[  378.983404][T14503] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3147'.
[  379.614976][T14521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3151'.
[  379.639722][T14521] loop0: detected capacity change from 0 to 512
[  379.646356][T14521] EXT4-fs: Ignoring removed bh option
[  379.655536][T14521] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  379.674996][T14521] EXT4-fs (loop0): 1 truncate cleaned up
[  379.686904][T14521] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  379.707863][T14526] netlink: 'syz.5.3152': attribute type 46 has an invalid length.
[  379.726562][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  379.801906][T14528] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12)
[  379.808570][T14528] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  379.816345][T14528] vhci_hcd vhci_hcd.0: Device attached
[  380.580437][T14535] vhci_hcd: connection closed
[  380.581400][ T6145] vhci_hcd vhci_hcd.0: stop threads
[  380.610237][T14526] Process accounting resumed
[  380.651688][ T6145] vhci_hcd vhci_hcd.0: release socket
[  380.658264][ T6145] vhci_hcd vhci_hcd.0: disconnect device
[  380.739548][T14555] xfrm0 speed is unknown, defaulting to 1000
[  380.906916][ T5370] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1)
[  380.940978][ T5370] kworker/u8:9: attempt to access beyond end of device
[  380.940978][ T5370] loop6: rw=1, sector=137, nr_sectors = 8 limit=128
[  380.993243][ T5370] kworker/u8:9: attempt to access beyond end of device
[  380.993243][ T5370] loop6: rw=1, sector=153, nr_sectors = 8 limit=128
[  381.077534][ T5370] kworker/u8:9: attempt to access beyond end of device
[  381.077534][ T5370] loop6: rw=1, sector=169, nr_sectors = 8 limit=128
[  381.124130][ T5370] kworker/u8:9: attempt to access beyond end of device
[  381.124130][ T5370] loop6: rw=1, sector=185, nr_sectors = 8 limit=128
[  381.175068][ T5370] kworker/u8:9: attempt to access beyond end of device
[  381.175068][ T5370] loop6: rw=1, sector=201, nr_sectors = 8 limit=128
[  381.195390][ T5370] kworker/u8:9: attempt to access beyond end of device
[  381.195390][ T5370] loop6: rw=1, sector=217, nr_sectors = 8 limit=128
[  381.231323][ T5370] kworker/u8:9: attempt to access beyond end of device
[  381.231323][ T5370] loop6: rw=1, sector=233, nr_sectors = 8 limit=128
[  381.280075][ T5370] kworker/u8:9: attempt to access beyond end of device
[  381.280075][ T5370] loop6: rw=1, sector=249, nr_sectors = 16 limit=128
[  381.324986][ T5370] kworker/u8:9: attempt to access beyond end of device
[  381.324986][ T5370] loop6: rw=1, sector=273, nr_sectors = 8 limit=128
[  381.372352][ T5370] kworker/u8:9: attempt to access beyond end of device
[  381.372352][ T5370] loop6: rw=1, sector=289, nr_sectors = 8 limit=128
[  381.728812][T14565] xfrm0 speed is unknown, defaulting to 1000
[  382.152931][T14594] loop6: detected capacity change from 0 to 512
[  382.214859][T14594] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  382.250279][T14565] bridge0: port 1(bridge_slave_0) entered blocking state
[  382.266014][T14565] bridge0: port 1(bridge_slave_0) entered disabled state
[  382.276949][T14565] bridge_slave_0: entered allmulticast mode
[  382.281465][T14594] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.3168: Invalid block bitmap block 0 in block_group 0
[  382.295275][T14565] bridge_slave_0: entered promiscuous mode
[  382.323649][T14594] loop6: lost filesystem error report for type 5 error -117
[  382.325420][T14594] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  382.341457][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  382.341481][    C0] EXT4-fs (loop6): initial error at time 1152: ext4_read_block_bitmap_nowait:483
[  382.341509][    C0] EXT4-fs (loop6): last error at time 1152: ext4_read_block_bitmap_nowait:483
[  382.377983][T14601] xfrm0 speed is unknown, defaulting to 1000
[  382.385374][T14565] bridge0: port 2(bridge_slave_1) entered blocking state
[  382.392501][T14594] loop6: lost filesystem error report for type 5 error -117
[  382.396207][T14594] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #11: comm syz.6.3168: attempt to clear invalid blocks 983261 len 1
[  382.399618][T14565] bridge0: port 2(bridge_slave_1) entered disabled state
[  382.413745][T14594] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  382.424447][T14594] EXT4-fs error (device loop6): __ext4_get_inode_loc:4885: comm syz.6.3168: Invalid inode table block 0 in block_group 0
[  382.435637][T14565] bridge_slave_1: entered allmulticast mode
[  382.448538][T14594] loop6: lost filesystem error report for type 5 error -117
[  382.455750][T14594] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6383: Corrupt filesystem
[  382.471702][T14565] bridge_slave_1: entered promiscuous mode
[  382.483740][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  382.506390][T14594] loop6: lost filesystem error report for type 5 error -117
[  382.506702][T14594] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem
[  382.535738][T14565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  382.549560][T14594] loop6: lost filesystem error report for type 5 error -117
[  382.549820][T14594] EXT4-fs error (device loop6): __ext4_get_inode_loc:4885: comm syz.6.3168: Invalid inode table block 0 in block_group 0
[  382.570342][T14594] loop6: lost filesystem error report for type 5 error -117
[  382.573529][T14594] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6383: Corrupt filesystem
[  382.594113][T14565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  382.605608][T14594] loop6: lost filesystem error report for type 5 error -117
[  382.606325][T14594] EXT4-fs error (device loop6): ext4_truncate:4690: inode #11: comm syz.6.3168: mark_inode_dirty error
[  382.656432][T14594] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  382.657317][T14594] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem
[  382.683725][T14565] team0: Port device team_slave_0 added
[  382.708099][T14565] team0: Port device team_slave_1 added
[  382.715900][T14594] loop6: lost filesystem error report for type 5 error -117
[  382.716927][T14594] EXT4-fs error (device loop6): __ext4_get_inode_loc:4885: comm syz.6.3168: Invalid inode table block 0 in block_group 0
[  382.753687][T14594] loop6: lost filesystem error report for type 5 error -117
[  382.754504][T14594] EXT4-fs (loop6): 1 truncate cleaned up
[  382.779708][T14594] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  382.784658][T14565] batman_adv: batadv0: Adding interface: batadv_slave_0
[  382.830651][T14565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  382.880015][T14565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  382.902779][T14565] batman_adv: batadv0: Adding interface: batadv_slave_1
[  382.917603][T14565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  382.947497][T11544] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  382.971363][T14565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  383.007141][T14624] __nla_validate_parse: 1 callbacks suppressed
[  383.007160][T14624] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3178'.
[  383.026986][ T5370] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  383.044571][ T5370] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  383.111948][T14565] hsr_slave_0: entered promiscuous mode
[  383.124370][T14565] hsr_slave_1: entered promiscuous mode
[  383.143141][T14565] debugfs: 'hsr0' already exists in 'hsr'
[  383.155067][T14565] Cannot create hsr debugfs directory
[  383.186528][ T5370] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  383.216596][ T5370] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  383.229319][ T6145] Bluetooth: hci0: Frame reassembly failed (-84)
[  383.325835][ T5370] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  383.350606][ T5370] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  383.447948][ T5370] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  383.469514][ T5370] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  383.601061][T14643] xfrm0 speed is unknown, defaulting to 1000
[  383.609137][T14648] can: request_module (can-proto-0) failed.
[  383.615182][ T5370] bridge_slave_1: left allmulticast mode
[  383.621304][ T5370] bridge_slave_1: left promiscuous mode
[  383.632970][ T5370] bridge0: port 2(bridge_slave_1) entered disabled state
[  383.916527][ T5370] team0: Port device bond0 removed
[  383.926537][ T5370] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  383.945498][ T5370] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  383.957354][ T5370] bond0 (unregistering): Released all slaves
[  383.975960][ T5370] bond1 (unregistering): Released all slaves
[  383.998321][ T5370] bond2 (unregistering): Released all slaves
[  384.019247][ T5370] bond3 (unregistering): Released all slaves
[  384.040574][ T5370] bond4 (unregistering): Released all slaves
[  384.058158][ T5370] bond5 (unregistering): Released all slaves
[  384.257042][ T5370] hsr_slave_0: left promiscuous mode
[  384.272157][ T5370] hsr_slave_1: left promiscuous mode
[  384.286708][ T5370] veth1_macvtap: left promiscuous mode
[  384.302487][ T5370] veth0_macvtap: left promiscuous mode
[  384.309766][ T5370] veth1_vlan: left promiscuous mode
[  384.325373][ T5370] veth0_vlan: left promiscuous mode
[  384.349559][T14667] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3189'.
[  384.448183][ T5370] team0 (unregistering): Port device team_slave_1 removed
[  384.617209][T14565] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  384.636943][T14565] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  384.659628][T14565] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  384.689532][T14565] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  384.707041][T14565] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  384.724565][T14565] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  384.741210][T14565] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  384.808244][T14718] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3200'.
[  385.067648][T14723] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3202'.
[  385.099379][T14565] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  385.110655][ T5370] IPVS: stop unused estimator thread 0...
[  385.132742][T14723] bond5: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  385.273743][   T42] Bluetooth: hci0: command 0x1003 tx timeout
[  385.282716][T14723] bond5 (unregistering): Released all slaves
[  385.289137][ T7689] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  385.331505][T14565] 8021q: adding VLAN 0 to HW filter on device bond0
[  385.344320][T14565] 8021q: adding VLAN 0 to HW filter on device team0
[  385.356125][ T6128] bridge0: port 1(bridge_slave_0) entered blocking state
[  385.363300][ T6128] bridge0: port 1(bridge_slave_0) entered forwarding state
[  385.390351][ T6128] bridge0: port 2(bridge_slave_1) entered blocking state
[  385.397481][ T6128] bridge0: port 2(bridge_slave_1) entered forwarding state
[  385.601565][T14749] loop6: detected capacity change from 0 to 4096
[  385.627194][T14759] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3213'.
[  385.679796][T14749] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  385.735191][T11544] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  385.778168][T14565] 8021q: adding VLAN 0 to HW filter on device batadv0
[  385.811259][T14776] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3216'.
[  385.886420][T14778] loop6: detected capacity change from 0 to 512
[  385.947618][T14778] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e018, mo2=0002]
[  385.992604][T14778] System zones: 1-12
[  386.011739][T14778] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #12: comm syz.6.3217: missing EA_INODE flag
[  386.064732][T14778] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  386.065873][T14778] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.3217: error while reading EA inode 12 err=-117
[  386.075068][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  386.075089][    C1] EXT4-fs (loop6): initial error at time 1156: ext4_xattr_inode_iget:441: inode 12
[  386.075123][    C1] EXT4-fs (loop6): last error at time 1156: ext4_xattr_inode_iget:441: inode 12
[  386.187190][T14786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3218'.
[  386.271178][T14778] loop6: lost filesystem error report for type 5 error -117
[  386.271876][T14778] EXT4-fs (loop6): 1 orphan inode deleted
[  386.318995][T14565] veth0_vlan: entered promiscuous mode
[  386.332250][T14778] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  386.332457][T14565] veth1_vlan: entered promiscuous mode
[  386.359917][T14565] veth0_macvtap: entered promiscuous mode
[  386.367079][T14565] veth1_macvtap: entered promiscuous mode
[  386.377637][T14565] batman_adv: batadv0: Interface activated: batadv_slave_0
[  386.386354][T14565] batman_adv: batadv0: Interface activated: batadv_slave_1
[  386.439970][ T6132] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  386.448928][ T6132] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  386.487054][ T6132] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  386.569096][ T6132] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  386.979467][T11544] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  387.068642][T14827] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3230'.
[  387.280926][T14827] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  387.290360][T14827] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  387.400173][T14833] netlink: 'syz.6.3227': attribute type 2 has an invalid length.
[  387.418223][T14827] veth1_vlan: left allmulticast mode
[  387.489609][ T3382] IPVS: starting estimator thread 0...
[  387.528872][T14832] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3227'.
[  387.606792][T14834] IPVS: using max 2496 ests per chain, 124800 per kthread
[  387.614789][ T6130] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  387.625309][ T6130] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  387.635942][ T6130] netdevsim netdevsim5 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  387.646630][ T6130] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  387.657173][ T6130] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  387.666766][ T6130] netdevsim netdevsim5 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  387.693942][ T6130] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  387.709108][ T6130] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  387.734418][ T6130] netdevsim netdevsim5 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  387.756761][T14836] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14836 comm=syz.0.3232
[  387.773666][T14836] loop0: detected capacity change from 0 to 512
[  387.781232][T14836] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  387.808633][ T6130] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  387.841107][   T28] kauditd_printk_skb: 779 callbacks suppressed
[  387.841121][   T28] audit: type=1400 audit(1157.795:2406): avc:  denied  { ioctl } for  pid=14838 comm="syz.5.3233" path="socket:[40791]" dev="sockfs" ino=40791 ioctlcmd=0x9436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  387.842804][ T6130] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  387.882910][ T6130] netdevsim netdevsim5 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  387.892629][T14836] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters
[  387.906934][T14836] Quota error (device loop0): write_blk: dquota write failed
[  387.914319][T14836] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5
[  387.923603][T14836] Quota error (device loop0): write_blk: dquota write failed
[  387.931407][T14836] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota
[  387.941237][T14836] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.3232: Failed to acquire dquot type 1
[  387.952533][T14836] loop0: lost filesystem error report for type 5 error -28
[  387.953843][T14836] EXT4-fs (loop0): 1 truncate cleaned up
[  387.967124][T14836] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  388.040169][T14851] netlink: 'syz.6.3238': attribute type 13 has an invalid length.
[  388.049124][T14565] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  388.062603][T14851] netlink: 'syz.6.3238': attribute type 17 has an invalid length.
[  388.420371][   T28] audit: type=1400 audit(1158.385:2407): avc:  denied  { read write } for  pid=14899 comm="syz.0.3244" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  388.466190][   T28] audit: type=1400 audit(1158.385:2408): avc:  denied  { open } for  pid=14899 comm="syz.0.3244" path="/dev/ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  388.515145][   T28] audit: type=1400 audit(1158.415:2409): avc:  denied  { ioctl } for  pid=14899 comm="syz.0.3244" path="/dev/ptp0" dev="devtmpfs" ino=247 ioctlcmd=0x3d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  388.666807][T14918] IPVS: set_ctl: invalid protocol: 12078 108.101.48.0:0
[  388.896278][T14851] vlan2: left allmulticast mode
[  388.903973][T14851] bond1: left allmulticast mode
[  388.909632][T14851] geneve2: left allmulticast mode
[  389.009578][T14904] loop0: detected capacity change from 0 to 764
[  389.025754][T14904] rock: directory entry would overflow storage
[  389.032298][T14904] rock: sig=0x5245, size=8, remaining=5
[  389.140130][T14961] loop6: detected capacity change from 0 to 128
[  389.219065][T14965] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3252'.
[  389.880425][T14994] bridge0: port 2(bridge_slave_1) entered disabled state
[  389.887757][T14994] bridge0: port 1(bridge_slave_0) entered disabled state
[  389.981785][T15009] loop6: detected capacity change from 0 to 1764
[  390.062070][T14994] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  390.084218][T14994] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  391.973145][T15050] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3267'.
[  391.986741][ T6138] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  392.012602][ T6138] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  392.021787][T15050] netlink: 'syz.6.3267': attribute type 13 has an invalid length.
[  392.032531][T15050] netlink: 'syz.6.3267': attribute type 17 has an invalid length.
[  392.043785][ T6138] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  392.137741][T15058] x_tables: ip6_tables: mh match: only valid for protocol 135
[  392.192091][ T6138] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  392.250709][T15064] netlink: 'syz.2.3272': attribute type 10 has an invalid length.
[  392.259207][T15064] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3272'.
[  392.504870][T15077] netlink: 'syz.5.3277': attribute type 1 has an invalid length.
[  392.524274][T15077] netlink: 'syz.5.3277': attribute type 2 has an invalid length.
[  392.564908][T15081] xfrm0 speed is unknown, defaulting to 1000
[  392.610861][T15082] loop0: detected capacity change from 0 to 512
[  392.641014][T15082] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  392.699448][T15084] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3280'.
[  392.713858][T15084] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3280'.
[  392.804719][T15097] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3284'.
[  393.341706][T15107] loop6: detected capacity change from 0 to 2048
[  393.360382][T14565] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  393.422043][   T28] audit: type=1326 audit(1163.385:2410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15106 comm="syz.6.3286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e87dacdd9 code=0x7ffc0000
[  393.434785][T15072] syz.1.3276 (15072) used greatest stack depth: 7176 bytes left
[  393.563906][T15111] loop0: detected capacity change from 0 to 8192
[  393.590908][   T28] audit: type=1326 audit(1163.385:2411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15106 comm="syz.6.3286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f5e87dacdd9 code=0x7ffc0000
[  393.614272][   T28] audit: type=1326 audit(1163.385:2412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15106 comm="syz.6.3286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e87dacdd9 code=0x7ffc0000
[  393.657045][   T28] audit: type=1326 audit(1163.385:2413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15106 comm="syz.6.3286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5e87dacdd9 code=0x7ffc0000
[  393.681806][   T28] audit: type=1326 audit(1163.385:2414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15106 comm="syz.6.3286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e87dacdd9 code=0x7ffc0000
[  393.769186][   T28] audit: type=1326 audit(1163.385:2415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15106 comm="syz.6.3286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5e87dacdd9 code=0x7ffc0000
[  393.802084][T15124] bio_check_eod: 51 callbacks suppressed
[  393.802120][T15124] syz.0.3287: attempt to access beyond end of device
[  393.802120][T15124] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  393.824876][T15124] Buffer I/O error on dev loop0, logical block 57847, async page read
[  393.840349][T15124] syz.0.3287: attempt to access beyond end of device
[  393.840349][T15124] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  393.877127][   T28] audit: type=1326 audit(1163.385:2416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15106 comm="syz.6.3286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e87dacdd9 code=0x7ffc0000
[  393.920351][T15124] Buffer I/O error on dev loop0, logical block 57847, async page read
[  393.969275][T15124] syz.0.3287: attempt to access beyond end of device
[  393.969275][T15124] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  394.049728][   T28] audit: type=1326 audit(1163.425:2417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15106 comm="syz.6.3286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5e87dacdd9 code=0x7ffc0000
[  394.083012][T15124] Buffer I/O error on dev loop0, logical block 57847, async page read
[  394.125577][T15124] syz.0.3287: attempt to access beyond end of device
[  394.125577][T15124] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  394.166097][   T28] audit: type=1326 audit(1163.425:2418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15106 comm="syz.6.3286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e87dacdd9 code=0x7ffc0000
[  394.193435][T15124] Buffer I/O error on dev loop0, logical block 57847, async page read
[  394.231425][T15124] syz.0.3287: attempt to access beyond end of device
[  394.231425][T15124] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  394.277183][T15124] Buffer I/O error on dev loop0, logical block 57847, async page read
[  394.290221][   T28] audit: type=1326 audit(1163.425:2419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15106 comm="syz.6.3286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e87dacdd9 code=0x7ffc0000
[  394.320498][T15124] syz.0.3287: attempt to access beyond end of device
[  394.320498][T15124] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  394.348257][T15124] Buffer I/O error on dev loop0, logical block 57847, async page read
[  394.416132][T15140] erspan0: entered promiscuous mode
[  394.428532][T15140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3297'.
[  394.520708][T15143] loop6: detected capacity change from 0 to 512
[  394.532485][T15143] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  394.548639][T15145] loop0: detected capacity change from 0 to 8192
[  394.569634][T15143] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.3299: invalid indirect mapped block 4294967295 (level 1)
[  394.583580][T15143] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  394.596359][T15151] xfrm0 speed is unknown, defaulting to 1000
[  394.643723][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  394.651043][    C0] EXT4-fs (loop6): initial error at time 1164: ext4_free_branches:1023: inode 11
[  394.661281][    C0] EXT4-fs (loop6): last error at time 1164: ext4_free_branches:1023: inode 11
[  394.695285][T15143] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.3299: invalid indirect mapped block 4294967295 (level 1)
[  394.719485][T15151] netlink: 'syz.2.3301': attribute type 6 has an invalid length.
[  394.733329][T15143] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  394.739771][T15143] EXT4-fs (loop6): 2 truncates cleaned up
[  394.798525][T15160] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3303'.
[  394.811130][T15143] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  394.917911][T11544] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  394.965219][T15174] loop6: detected capacity change from 0 to 4096
[  395.065804][T15174] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  395.155036][T11544] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  395.227119][T15186] xt_limit: Overflow, try lower: 0/0
[  395.475331][T15202] loop0: detected capacity change from 0 to 128
[  395.583981][T15203] syz.0.3319: attempt to access beyond end of device
[  395.583981][T15203] loop0: rw=2049, sector=138, nr_sectors = 112 limit=128
[  395.609110][T15201] syz.0.3319: attempt to access beyond end of device
[  395.609110][T15201] loop0: rw=524288, sector=138, nr_sectors = 112 limit=128
[  395.623476][T15201] syz.0.3319: attempt to access beyond end of device
[  395.623476][T15201] loop0: rw=0, sector=138, nr_sectors = 8 limit=128
[  395.638141][T15201] syz.0.3319: attempt to access beyond end of device
[  395.638141][T15201] loop0: rw=0, sector=138, nr_sectors = 8 limit=128
[  395.775945][T15206] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3320'.
[  396.017909][T15221] xfrm0 speed is unknown, defaulting to 1000
[  396.319387][T15224] xfrm0 speed is unknown, defaulting to 1000
[  396.596952][T15233] loop0: detected capacity change from 0 to 8192
[  396.679378][T15234] Buffer I/O error on dev loop0, logical block 57847, async page read
[  396.726581][T15234] Buffer I/O error on dev loop0, logical block 57847, async page read
[  396.767393][T15234] Buffer I/O error on dev loop0, logical block 57847, async page read
[  396.799540][T15234] Buffer I/O error on dev loop0, logical block 57847, async page read
[  397.266577][T15251] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3335'.
[  398.536248][ T6138] Bluetooth: hci0: Frame reassembly failed (-84)
[  399.196499][T15286] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2576 sclass=netlink_route_socket pid=15286 comm=syz.2.3346
[  399.803918][T15302] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3352'.
[  400.030941][T15311] netlink: 'syz.2.3354': attribute type 39 has an invalid length.
[  400.045407][ T3406] IPVS: starting estimator thread 0...
[  400.193664][T15313] IPVS: using max 2400 ests per chain, 120000 per kthread
[  400.270633][T15316] No such timeout policy "syz1"
[  400.553708][   T42] Bluetooth: hci0: command 0x1003 tx timeout
[  400.559906][ T7689] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  400.593315][T15337] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3361'.
[  400.692950][T15341] netlink: 180 bytes leftover after parsing attributes in process `syz.1.3363'.
[  400.723298][T15344] netlink: 180 bytes leftover after parsing attributes in process `syz.1.3363'.
[  400.881897][T15348] netlink: 'syz.1.3366': attribute type 39 has an invalid length.
[  401.012118][T15355] loop6: detected capacity change from 0 to 512
[  401.053308][T15355] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  401.094124][   T28] kauditd_printk_skb: 23 callbacks suppressed
[  401.094141][   T28] audit: type=1400 audit(1171.065:2443): avc:  denied  { cmd } for  pid=15361 comm="syz.0.3370" path="socket:[43456]" dev="sockfs" ino=43456 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  401.180533][T15370] wg1 speed is unknown, defaulting to 1000
[  401.206384][T15370] wg1 speed is unknown, defaulting to 1000
[  401.212478][T15370] wg1 speed is unknown, defaulting to 1000
[  401.226557][T15370] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  401.252085][T15370] wg1 speed is unknown, defaulting to 1000
[  401.268729][T15370] wg1 speed is unknown, defaulting to 1000
[  401.334102][T15370] wg1 speed is unknown, defaulting to 1000
[  401.353647][T15370] wg1 speed is unknown, defaulting to 1000
[  401.374989][T15370] wg1 speed is unknown, defaulting to 1000
[  401.391678][T15370] wg1 speed is unknown, defaulting to 1000
[  401.535734][T15384] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3374'.
[  401.544758][T15384] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3374'.
[  401.553703][T15384] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3374'.
[  401.816650][T15401] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3382'.
[  401.854484][T15401] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=15401 comm=syz.2.3382
[  401.969211][T11544] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  402.334088][   T28] audit: type=1400 audit(1172.305:2444): avc:  denied  { map } for  pid=15405 comm="syz.5.3386" path="socket:[43534]" dev="sockfs" ino=43534 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  402.378325][   T28] audit: type=1400 audit(1172.305:2445): avc:  denied  { accept } for  pid=15405 comm="syz.5.3386" path="socket:[43534]" dev="sockfs" ino=43534 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  402.581473][T15409] netlink: 21 bytes leftover after parsing attributes in process `syz.2.3387'.
[  402.718178][T15415] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  402.767903][T15404] loop0: detected capacity change from 0 to 1024
[  402.825508][T15404] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.3383: bad orphan inode 134217728
[  402.866363][T15404] loop0: lost filesystem error report for type 5 error -117
[  402.888589][T15404] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  402.925900][T15418] xt_ecn: cannot match TCP bits for non-tcp packets
[  403.104793][T14565] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  403.365461][T15437] netlink: 'syz.1.3396': attribute type 39 has an invalid length.
[  403.380304][T15440] netlink: 'syz.0.3391': attribute type 21 has an invalid length.
[  403.397281][T15440] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3391'.
[  403.843419][T15447] 8021q: adding VLAN 0 to HW filter on device bond1
[  404.014523][T15450] loop6: detected capacity change from 0 to 1024
[  404.024484][T15450] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  404.043599][T15450] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #3: block 1: comm syz.6.3400: lblock 1 mapped to illegal pblock 1 (length 1)
[  404.067870][T15450] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  404.067989][T15450] Quota error (device loop6): write_blk: dquota write failed
[  404.077110][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  404.077126][    C1] EXT4-fs (loop6): initial error at time 1174: ext4_map_blocks:833: inode 3: block 1
[  404.077161][    C1] EXT4-fs (loop6): last error at time 1174: ext4_map_blocks:833: inode 3: block 1
[  404.109833][T15450] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota
[  404.119940][T15450] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.3400: Failed to acquire dquot type 0
[  404.133622][T15450] loop6: lost filesystem error report for type 5 error -117
[  404.133889][T15450] EXT4-fs error (device loop6): ext4_free_blocks:6718: comm syz.6.3400: Freeing blocks not in datazone - block = 0, count = 4096
[  404.183942][T15450] loop6: lost filesystem error report for type 5 error -117
[  404.184117][T15450] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.3400: Invalid inode bitmap blk 0 in block_group 0
[  404.214201][ T5370] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1)
[  404.233875][T15450] loop6: lost filesystem error report for type 5 error -117
[  404.233990][T15450] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem
[  404.239229][ T5370] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  404.250551][T15450] loop6: lost filesystem error report for type 5 error -117
[  404.252814][T15462] FAULT_INJECTION: forcing a failure.
[  404.252814][T15462] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  404.281258][ T5370] Quota error (device loop6): remove_tree: Can't read quota data block 1
[  404.290418][ T5370] EXT4-fs error (device loop6): ext4_release_dquot:7070: comm kworker/u8:9: Failed to release dquot type 0
[  404.291219][T15450] EXT4-fs (loop6): 1 orphan inode deleted
[  404.303142][T15462] CPU: 0 UID: 0 PID: 15462 Comm: syz.0.3404 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  404.303295][T15462] Tainted: [W]=WARN
[  404.303324][T15462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  404.303366][T15462] Call Trace:
[  404.303388][T15462]  <TASK>
[  404.303419][T15462]  __dump_stack+0x1d/0x30
[  404.303530][T15462]  dump_stack_lvl+0x95/0xd0
[  404.303658][T15462]  dump_stack+0x15/0x1b
[  404.303723][T15462]  should_fail_ex+0x263/0x280
[  404.303840][T15462]  should_fail+0xb/0x20
[  404.303918][T15462]  should_fail_usercopy+0x1a/0x20
[  404.304001][T15462]  strncpy_from_user+0x27/0x250
[  404.304079][T15462]  ? kmem_cache_alloc_noprof+0x18c/0x3f0
[  404.304221][T15462]  do_getname+0x59/0x1c0
[  404.304295][T15462]  getname_flags+0x1d/0x30
[  404.304347][T15462]  __se_sys_move_mount+0x259/0x3e0
[  404.304439][T15462]  __x64_sys_move_mount+0x67/0x80
[  404.304566][T15462]  x64_sys_call+0x1900/0x3020
[  404.304638][T15462]  do_syscall_64+0x12c/0x3b0
[  404.304779][T15462]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  404.304888][T15462] RIP: 0033:0x7f8b0d76cdd9
[  404.304952][T15462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  404.305010][T15462] RSP: 002b:00007f8b0c1bf028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ad
[  404.305070][T15462] RAX: ffffffffffffffda RBX: 00007f8b0d9e5fa0 RCX: 00007f8b0d76cdd9
[  404.305110][T15462] RDX: 0000000000000003 RSI: 0000200000000480 RDI: 0000000000000003
[  404.305151][T15462] RBP: 00007f8b0c1bf090 R08: 0000000000000212 R09: 0000000000000000
[  404.305191][T15462] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001
[  404.305243][T15462] R13: 00007f8b0d9e6038 R14: 00007f8b0d9e5fa0 R15: 00007fff79e87f98
[  404.305304][T15462]  </TASK>
[  404.310105][ T5370] loop6: lost filesystem error report for type 5 error -117
[  404.368383][T15450] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  404.568053][T15466] netlink: 'syz.1.3407': attribute type 39 has an invalid length.
[  404.591643][T11544] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  404.631330][   T28] audit: type=1400 audit(1174.595:2446): avc:  denied  { attach_queue } for  pid=15468 comm="syz.0.3406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  404.743062][T15478] tipc: Started in network mode
[  404.748486][T15478] tipc: Node identity , cluster identity 4711
[  404.755421][T15478] tipc: Failed to set node id, please configure manually
[  404.762626][T15478] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  404.829166][ T1039] IPVS: starting estimator thread 0...
[  404.854200][T15478] loop6: detected capacity change from 0 to 512
[  404.868571][T15478] journal_path: Non-blockdev passed as './file0'
[  404.877414][T15478] EXT4-fs: error: could not find journal device path
[  404.934133][T15481] IPVS: using max 1680 ests per chain, 84000 per kthread
[  405.135746][T15498] netlink: 'syz.5.3419': attribute type 39 has an invalid length.
[  405.179902][T15500] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3416'.
[  405.262788][T15495] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3417'.
[  405.334152][T15502] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3417'.
[  405.373037][T15502] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3417'.
[  405.626155][T15506] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3421'.
[  405.739518][T15514] tipc: Started in network mode
[  405.752678][T15514] tipc: Node identity , cluster identity 4711
[  405.768254][T15514] tipc: Failed to set node id, please configure manually
[  405.785692][T15514] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  405.964575][T15520] loop6: detected capacity change from 0 to 8192
[  406.017865][T15529] Cannot find add_set index 2 as target
[  406.034876][T15531] bio_check_eod: 3929 callbacks suppressed
[  406.034930][T15531] syz.6.3426: attempt to access beyond end of device
[  406.034930][T15531] loop6: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  406.073699][T15531] buffer_io_error: 3849 callbacks suppressed
[  406.073737][T15531] Buffer I/O error on dev loop6, logical block 57847, async page read
[  406.094111][T15531] syz.6.3426: attempt to access beyond end of device
[  406.094111][T15531] loop6: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  406.125003][T15531] Buffer I/O error on dev loop6, logical block 57847, async page read
[  406.159426][T15531] syz.6.3426: attempt to access beyond end of device
[  406.159426][T15531] loop6: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  406.178978][T15531] Buffer I/O error on dev loop6, logical block 57847, async page read
[  406.187772][T15531] syz.6.3426: attempt to access beyond end of device
[  406.187772][T15531] loop6: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  406.214490][T15531] Buffer I/O error on dev loop6, logical block 57847, async page read
[  406.222951][T15531] syz.6.3426: attempt to access beyond end of device
[  406.222951][T15531] loop6: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  406.237118][T15531] Buffer I/O error on dev loop6, logical block 57847, async page read
[  406.246311][T15531] syz.6.3426: attempt to access beyond end of device
[  406.246311][T15531] loop6: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  406.261650][T15531] Buffer I/O error on dev loop6, logical block 57847, async page read
[  406.270380][T15531] syz.6.3426: attempt to access beyond end of device
[  406.270380][T15531] loop6: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  406.284422][T15531] Buffer I/O error on dev loop6, logical block 57847, async page read
[  406.286047][T15540] netlink: 'syz.1.3433': attribute type 39 has an invalid length.
[  406.295278][T15531] syz.6.3426: attempt to access beyond end of device
[  406.295278][T15531] loop6: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  406.314799][T15531] Buffer I/O error on dev loop6, logical block 57847, async page read
[  406.323165][T15531] syz.6.3426: attempt to access beyond end of device
[  406.323165][T15531] loop6: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  406.337393][T15531] Buffer I/O error on dev loop6, logical block 57847, async page read
[  406.359525][T15531] syz.6.3426: attempt to access beyond end of device
[  406.359525][T15531] loop6: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  406.382285][T15531] Buffer I/O error on dev loop6, logical block 57847, async page read
[  406.609953][T15550] netlink: 27 bytes leftover after parsing attributes in process `syz.1.3436'.
[  406.748386][T15550] xt_hashlimit: size too large, truncated to 1048576
[  406.805128][T15550] xt_NFQUEUE: number of queues (65529) out of range (got 65536)
[  406.852074][T15556] rdma_rxe: rxe_newlink: failed to add xfrm0
[  406.932553][T15558] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3440'.
[  406.947935][T15558] loop6: detected capacity change from 0 to 512
[  406.996774][T15558] EXT4-fs: Ignoring removed bh option
[  407.008291][T15558] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[  407.046601][T15558] EXT4-fs (loop6): 1 truncate cleaned up
[  407.069990][T15558] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  407.156280][T11544] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  407.244845][T15566] netlink: 'syz.5.3444': attribute type 39 has an invalid length.
[  407.320552][T15580] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3447'.
[  407.466938][T15552] loop0: detected capacity change from 0 to 764
[  407.502543][T15552] rock: directory entry would overflow storage
[  407.515177][T15552] rock: sig=0x5245, size=8, remaining=5
[  407.624487][T15591] loop0: detected capacity change from 0 to 512
[  407.752580][   T28] audit: type=1326 audit(1177.715:2447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15603 comm="syz.2.3455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c24ccdd9 code=0x7ffc0000
[  407.776474][   T28] audit: type=1326 audit(1177.715:2448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15603 comm="syz.2.3455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c24ccdd9 code=0x7ffc0000
[  407.799500][   T28] audit: type=1326 audit(1177.715:2449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15603 comm="syz.2.3455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c24ccdd9 code=0x7ffc0000
[  407.822514][   T28] audit: type=1326 audit(1177.715:2450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15603 comm="syz.2.3455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f29c24ccdd9 code=0x7ffc0000
[  407.845419][   T28] audit: type=1326 audit(1177.715:2451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15603 comm="syz.2.3455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c24ccdd9 code=0x7ffc0000
[  407.869692][   T28] audit: type=1326 audit(1177.715:2452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15603 comm="syz.2.3455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c24ccdd9 code=0x7ffc0000
[  407.892787][   T28] audit: type=1326 audit(1177.715:2453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15603 comm="syz.2.3455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c24ccdd9 code=0x7ffc0000
[  407.915839][   T28] audit: type=1326 audit(1177.715:2454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15603 comm="syz.2.3455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c24ccdd9 code=0x7ffc0000
[  407.938951][   T28] audit: type=1326 audit(1177.715:2455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15603 comm="syz.2.3455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f29c24ccdd9 code=0x7ffc0000
[  407.962102][   T28] audit: type=1326 audit(1177.715:2456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15603 comm="syz.2.3455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c24ccdd9 code=0x7ffc0000
[  408.027843][T15607] pim6reg: entered allmulticast mode
[  408.042545][T15607] pim6reg: left allmulticast mode
[  408.110802][T15610] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3457'.
[  408.134661][T15610] bridge0: port 1(bridge_slave_0) entered disabled state
[  408.165715][T15610] bridge_slave_0 (unregistering): left allmulticast mode
[  408.173379][T15610] bridge0: port 1(bridge_slave_0) entered disabled state
[  408.230888][T15613] vlan2: entered promiscuous mode
[  408.236782][T15616] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3459'.
[  408.246497][T15613] syz_tun: entered promiscuous mode
[  408.252213][T15613] macvlan4: entered promiscuous mode
[  408.258948][T15613] vlan2: left promiscuous mode
[  408.264146][T15613] syz_tun: left promiscuous mode
[  408.290863][T15616] vlan2: entered allmulticast mode
[  408.299713][T15616] bridge5: entered allmulticast mode
[  408.306932][T15616] bridge5: port 1(erspan0) entered blocking state
[  408.313444][T15616] bridge5: port 1(erspan0) entered disabled state
[  408.323431][T15616] erspan0: entered allmulticast mode
[  408.334066][T15616] erspan0: entered promiscuous mode
[  408.419231][T15634] netlink: 'syz.1.3467': attribute type 21 has an invalid length.
[  408.439663][T15638] ==================================================================
[  408.447776][T15638] BUG: KCSAN: data-race in mas_wr_store_entry / mtree_range_walk
[  408.455520][T15638] 
[  408.457861][T15638] write to 0xffff888103bf5628 of 8 bytes by task 15637 on cpu 0:
[  408.465591][T15638]  mas_wr_store_entry+0x3405/0x5ad0
[  408.470802][T15638]  mas_store_prealloc+0x43e/0x690
[  408.475845][T15638]  commit_merge+0x6a1/0x720
[  408.480369][T15638]  vma_expand+0x301/0x460
[  408.484714][T15638]  vma_merge_new_range+0x29c/0x320
[  408.489847][T15638]  mmap_region+0x10a5/0x20d0
[  408.494456][T15638]  do_mmap+0x9b2/0xbd0
[  408.498539][T15638]  vm_mmap_pgoff+0x183/0x2d0
[  408.503154][T15638]  ksys_mmap_pgoff+0xc1/0x310
[  408.507856][T15638]  x64_sys_call+0x14df/0x3020
[  408.512551][T15638]  do_syscall_64+0x12c/0x3b0
[  408.517156][T15638]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  408.523072][T15638] 
[  408.525412][T15638] read to 0xffff888103bf5628 of 8 bytes by task 15638 on cpu 1:
[  408.533057][T15638]  mtree_range_walk+0x203/0x490
[  408.537920][T15638]  mas_walk+0x1cc/0x370
[  408.542088][T15638]  lock_vma_under_rcu+0xc9/0x210
[  408.547049][T15638]  do_user_addr_fault+0x232/0x1050
[  408.552201][T15638]  exc_page_fault+0x62/0xa0
[  408.556727][T15638]  asm_exc_page_fault+0x26/0x30
[  408.561590][T15638] 
[  408.564003][T15638] value changed: 0x00007f29c0f06fff -> 0x00007f29c0ee5fff
[  408.571114][T15638] 
[  408.573451][T15638] Reported by Kernel Concurrency Sanitizer on:
[  408.579613][T15638] CPU: 1 UID: 0 PID: 15638 Comm: syz.2.3468 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  408.590585][T15638] Tainted: [W]=WARN
[  408.594399][T15638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  408.604468][T15638] ==================================================================
[  408.629342][T15638] ip6tnl2: entered allmulticast mode
[  408.724888][T15620] loop0: detected capacity change from 0 to 764
[  408.732333][T15620] rock: directory entry would overflow storage
[  408.738597][T15620] rock: sig=0x5245, size=8, remaining=5