last executing test programs:

9m40.671686814s ago: executing program 32 (id=26):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x40082, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0x4)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=<r1=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0x8, &(0x7f0000000600)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}])

9m26.97767257s ago: executing program 33 (id=267):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000005400edff2bbd70000200000007000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r2, @ANYBLOB="000202007f000001"], 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x40080c0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

9m10.20765814s ago: executing program 2 (id=530):
rt_sigprocmask(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x4, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x3a008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_bp={0x0, 0x2}, 0x102801, 0xb, 0x0, 0x1, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8000000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]})
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
waitid(0x0, 0x0, 0x0, 0x41000004, 0x0)

9m9.827775251s ago: executing program 2 (id=535):
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x36}}, 0x6}, 0x1c)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c)

8m58.497772602s ago: executing program 34 (id=466):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)
getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000140)={'ah\x00'}, &(0x7f0000000180)=0x1e)

8m58.448363974s ago: executing program 2 (id=549):
r0 = socket(0x1, 0x2, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r1, 0x0)
r2 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
setfsgid(r3)

8m56.384432443s ago: executing program 2 (id=544):
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

8m56.043475221s ago: executing program 2 (id=546):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x68, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0x3, @private2, 0x8}}}, 0x90)

8m55.735477628s ago: executing program 2 (id=561):
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=<r0=>0x0)
clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe)
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x77359400}}, &(0x7f0000000140))

8m40.600860591s ago: executing program 35 (id=561):
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=<r0=>0x0)
clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe)
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x77359400}}, &(0x7f0000000140))

8m9.988052736s ago: executing program 1 (id=1344):
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340277f2b053a3304b89f8a7a80b00db96f248dabd7fac3c2f9e2b99a67f20a1cd09c0c843e5635493bbfa23b72d98a0c37a3e5805f5e2ec75e9d98b09"], 0x20}, 0x1, 0x0, 0x0, 0x80000}, 0x40800)
r0 = syz_create_resource$binfmt(&(0x7f0000000440)='./file0\x00')
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2)
write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[], 0x1cb)
close(r1)
execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0)

8m9.874142571s ago: executing program 1 (id=1346):
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280))
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae9, 0x30, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x14100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x7, 0x5, 0x4400, 0xb, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x50)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x40, 0x10, 0x403, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x5e801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x40}}, 0x440088c4)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)

8m9.577945147s ago: executing program 1 (id=1349):
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r1, r1)
setpgid(0x0, r1)
tkill(r1, 0x7)
wait4(r1, 0x0, 0x0, 0x0)
sendmsg$unix(r0, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=[@cred={{0x1c, 0x1, 0x2, {r1}}}], 0x20, 0x8000}, 0x20000000)

8m9.476338222s ago: executing program 1 (id=1350):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0)
umount2(&(0x7f0000000040)='./file0/file0\x00', 0x0)

8m9.424778925s ago: executing program 1 (id=1351):
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x10e200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x402, 0x0)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000140), &(0x7f0000001840)=""/4104}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{r0}, &(0x7f0000001780)=0x4, 0x0}, 0x20)

8m9.298082632s ago: executing program 1 (id=1352):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0)
r2 = socket$netlink(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x100, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800)
syz_usb_connect(0x2, 0x2d, 0x0, 0x0)
sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x34, r1, 0x1, 0x70bd2d, 0x0, {0x36}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040811}, 0x20042840)

8m9.295368462s ago: executing program 36 (id=1352):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0)
r2 = socket$netlink(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x100, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800)
syz_usb_connect(0x2, 0x2d, 0x0, 0x0)
sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x34, r1, 0x1, 0x70bd2d, 0x0, {0x36}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040811}, 0x20042840)

6m50.165350601s ago: executing program 8 (id=2724):
r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x5, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000340)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe69, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3)
syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0)

6m50.041884248s ago: executing program 8 (id=2726):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48)
r1 = socket(0x28, 0x5, 0x0)
setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r1, 0x28, 0x6, 0x0, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'gre0\x00'})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28)

6m49.960880762s ago: executing program 8 (id=2727):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f0000000300)={[{@orlov}]}, 0x1, 0x571, &(0x7f0000001140)="$eJzs3c+PG1cdAPDvzP5yk7SbQA9QAQlQCCiKnXXaqOql5QJCVSVExQFxSJddZ7XEjkPsLd0lUrd/A0ggcYI/gQMSB6SeOHDjiMQBEOWAVCACJUgcBs3Yu+ts7MSNHbu7/nykybyZN+Pve/bOvOdnxy+AmXUuInYjYjEi3oyI5e7+pLvEq50lP+7undtr9+7cXksiy974Z1Lk5/ui55zcye5jliLim1+L+G7yYNzW9s711Xq9dqu7XWk3blZa2zsXNxurG7WN2o1q9crKlUsvXX6xOra6nm388oOvbr72rd/8+tPv/373yz/Mi3Wqm9dbj3HqVH1hP05uPiJeexLBpmCuu16ccjl4PGlEfCwiPldc/8sxV/x1AgDHWZYtR7bcuw0AHHdpMQaWpOWISNNuJ6DcGcN7Nk6k9WarfeFac+vGemes7HQspNc267VLZ5b++P3i4IUk314p8or8Yrt6aPtyRJyJiB8vPVVsl9ea9fXpdHkAYOad7G3/I+I/S2laLg91ap9P9QCAI6M07QIAABOn/QeA2aP9B4DZM0T73/2wf/eJlwUAmAzv/wFg9mj/AWD2aP8BYKZ84/XX8yW71/396/W3treuN9+6uF5rXS83ttbKa81bN8sbzeZG8Zs9jUc9Xr3ZvLnyQmy9XWnXWu1Ka3vnaqO5daN9tfhd76u1hYnUCgB4mDNn3/tDEhG7Lz9VLNEzl4O2Go63dIxHAUfL3Cgn6yDAkWa2L5hdQzXhRSfhd0+8LMB09P0x71Lf5P1++iGC+J4RfKSc/+Tw4//meIbjxcg+zK7HG/9/ZezlACbvscf//2z6Lzjqsiw5POf/4n4WAHAsjfAVvuydcXVCgKl61Lv5sXz+DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMfMqYj4XiRpuZgLPM3/TcvliKcj4nQsJNc267VLEfFMnI2IhaV8e2XahQYARpT+PenO/3V++flTh3MXk/8uFeuI+MHP3vjJ26vt9q2VfP+/9vcv7U0fVj04b4R5BQGA4f11mIOK9rvaXfe8kb975/ba3vIEy/iAD76yP/no2r07t4ulkzMfWZZlEaWiL3Hi30nMd88pRcRzETE3hvi770bEJ/rVPynGRk53Zz7tjR/d2E9PNH56X/y0yOus86fv42MoC8ya9/L7z6uHr7+54so6VxzR//ovFXeo0RX3v1LE3r3v4P63d72XitIcjp9f8+eGjfHCb7/+wM5suZP3bsRz8/3iJ/vxkwHxnx8y/p8+9ZkfvTIgL/t5xPnoH783VqXduFlpbe9c3GysbtQ2ajeq1SsrVy69dPnFaqUYo67sjVQ/6B8vX3hmUNny+p8YEL/zyp88VP/F/XO/MGT9f/G/N7/z2YPNpcPxv/T5/q//s8W6//Oft4lfHDL+6olfDZy+O4+/PqD+j3r9LwwZ//2/7awPeSgAMAGt7Z3rq/V67dZIifxd6Ic/K8uyd/IyPOSYPHu4B9zrLo5Wnb9EkTh4WpJIYvTn5/5E3hkb5uCFkatzX2JvuGTc1emTmN/vK473kb/98L+WQYnFUYKmY6/F4yTidDdxd1JBp3I7Aibo4KKfdkkAAAAAAAAAAAAAAIBBJvF/mKZdRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI6v/wcAAP//20q+Lg==")
syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000080)={[{@auto_da_alloc}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@commit}, {@usrquota}, {@bh}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$eJzs3T1sG3UbAPDnznHTj7xv+krvK72gDhUgFamqk/QDClO7IipV6oDEApHjRlWcuIodaKJIpHuF6IAAdSkbDIwgBgbEwsjKwseMVNEIpKYDGDk+p2nqFCfEMcS/n3TJ/3939vP8fX7OvtOdHEDfOtr4k0Y8EREXk4jhdcsGIlt4tLneyvJi8f7yYjGJev3Sz0kkEXFvebHYWj/J/h+KiKWI+H9EfJWPOJ6uPeW+VqM6vzA1Xi6XZrP+SG366kh1fuHElenxydJkaebU8y+cOXv6zNjJsfXp3q+v7+W3NtYb3998+8Y3L92++fEnR5aK744ncS6GsmXrx7GTmq9JPs5tmH+6G8F6KOl1AmxLLqvzRin9L4Yjl1V9O/X1O4fBXUkP6KL6YER9zbom0AcSRQ99qvU9oHH825p28/vHnfPNA5BG3JXlxeJb0Yo/0Dw3EftXj00O/pI8dGTSON48vJuJsictXY+I0YGBR9//Sfb+277RnUiQrvryfHNDPbr907X9T7TZ/wy1zp3+Ra3930q2/1tpEz+3yf7vYocxfnv1xw82jX99MJ5sGz9Zi5+0iZ9GxOsdxr/1yudnN1tW/zDiWLSP35I8/vzwyOUr5dJo82/bGF8cO/Li5uOPOLhJ/OY52/2riawf/74sp7TD8X/29adPLT0m/rNPP377t3v9D0TEOx3G/8+9j17ebNmd68ndxreArW7/JPJxu8P4z507+l3WdNYQAAAAAAAAAAB2ULp6LVuSFtbaaVooNO/h/W8cTMuVau345crczETzmrfDkU9bV1oNN/tJoz+WXY/b6p/c0D+VywLmDqz2C8VKeaLHYwcAAAAAAAAAAAAAAAAAAIC/i0Mb7v//Nbd6///Gn6sG9qrNf/Ib2OvUP/Svh+s/6VkewO7z+Q99q67+oX+pf+hf6h/6l/qH/tW2/g/sfh7A7vP5D/1L/QMAAAAAAAAAAAAAAAAAAAAAAAAAQFdcvHChMdXvLy8WG/2Jgfm5qcobJyZK1anC9FyxUKzMXi1MViqT5VKhWJn+s+dLKpWrozEzd22kVqrWRqrzC69NV+ZmWr8pWsp3fUQAAAAAAAAAAAAAAAAAAADwzzO0OiVpISLf7KdpoRDxr4g4nERy+Uq5NBoR/46Ib3P5wUZ/rNdJAwAAAAAAAAAAAAAAAAAAwB5TnV+YGi+XS7PdawxkoTp71A+1ruYzsJWVI2JpZ9NoPOOWH5XPXsDubqY+aeQ6fB/2faOHOyUAAAAAAAAAAAAAAAAAAOhTD2767fQRv3c3IQAAAAAAAAAAAAAAAAAAAOhL6U9JRDSmY8PPDG1cui9Zya3+j4g3b11679p4rTY71ph/d21+7f1s/sle5A90qlWnaUQ06hgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4oDq/MDVeLpdmt9kY7GCdXo8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYDv+CAAA//9bQM66")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000001f40)={0x0, 0x2904c, 0x29, 0x10003, '\x00', [{0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x9500}, {0xffffffff, 0x0, 0x9, 0xa}]})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r1}, 0x38)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000500)={r1, &(0x7f0000000340), 0x0}, 0x20)

6m49.594086651s ago: executing program 8 (id=2728):
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x40c, &(0x7f00000015c0)={[{@init_itable}, {@norecovery}, {@abort}, {@jqfmt_vfsv1}, {@orlov}, {@jqfmt_vfsold}, {@mblk_io_submit}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x100}}, {@min_batch_time={'min_batch_time', 0x3d, 0x7a}}, {@bsdgroups}]}, 0xfd, 0x501, &(0x7f0000000e80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x5)
quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000801, 0x0, &(0x7f0000000340)={0x800, 0x5, 0x2, 0xffffffffffffffff, 0x3, 0x800000000008, 0x2, 0x9, 0x2})
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000980)={0xf4a1, 0x200, 0x800, 0x4b07}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148)

6m49.304729977s ago: executing program 8 (id=2729):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x80, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x4}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x5, 0x5, 0x800, 0x0, 0x1aa2, 0xc}}, {0x4}}]}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x1d, 0x405, 0x2, 0x0, 0x3, 0x4}}, {0x4}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0, 0x34}], 0x1}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0)

6m49.186383973s ago: executing program 7 (id=2730):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d0020073f0000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00", @ANYRES16, @ANYRES32=r2], 0x44}}, 0x2000040)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c4}, 0x20048080)

6m49.152450994s ago: executing program 7 (id=2731):
r0 = inotify_init()
syz_io_uring_setup(0x32d9, &(0x7f0000000200)={0x0, 0x6273, 0x8, 0xffffffff, 0x400000, 0x0, 0x0}, &(0x7f0000000300), &(0x7f0000000000), 0x0)
r1 = socket(0x2, 0x2, 0x1)
bind$unix(r1, &(0x7f0000000000)=@abs, 0x6e)
r2 = socket(0x2, 0x2, 0x1)
bind$unix(r2, &(0x7f0000000000)=@abs, 0x6e)
close_range(r0, 0xffffffffffffffff, 0x0)

6m49.092965138s ago: executing program 7 (id=2732):
r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000001c0)='cgroup.max.depth\x00', 0x2, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
write$cgroup_int(r2, &(0x7f0000000000), 0x12)
sendfile(r3, r2, 0x0, 0x4)

6m49.034873801s ago: executing program 7 (id=2733):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$eJzs3cFvG1kZAPBvnLhJs+mmC3sABGxZFgqq6iTubrTqhfYCQlUlRMWJQxsSN4pi11Hsiib0kB65V6ISJ+A/4MYBqScO3LjBjUs5IBWoQA0SB6MZT1I3sZNAnbiJfz9pMvPeTP29F/e953mR5wUwtC5ExGZEnImIOxExlecn+RbX2lt63csXDxe2XjxcSKLVuvX3JDuf5kXHv0m9k7/meER8/zsRP0r2xm2sb6zMV6uVtTw93aytTjfWNy4vF/Kc8tzs3MynVz4p962uH9R+/fzbyzd+8NvffOnZHza/+ZO0WJM/PZed66xHP7WrXozJjrzRiLhxFMEGZDT//8PJk7a2z0TEh1n7n4qR7N0EAE6zVmsqWlOdaQDgtEvv/ycjKZTyuYDJKBRKpfYc3vsxUajWG81LU/X79xYjm8M6H8XC3eVqZSafKzwfxSRNz2bHr9Ll19KPK1ci4r2IeDx2NjtfWqhXFwf5wQcAhtg7u8b/f421x/9OxUEVDgA4OuODLgAAcOyM/wAwfIz/ADB8/ofx37cDAeCUcP8PAMPH+A8Aw+fA8f/R8ZQDADgW37t5M91aW+3nX28/qfvyYqWxUqrdXygt1NdWS0v1+lK1UlpotQ56vWq9vjr78U6ysb5xu1a/f695e7k2v1S5XfEsAQAYvPc+ePqndNDfvHo226JjLQdjNZxuhUEXABiYkUEXABgY3+eB4XWIe3zTAHDKdVmity2fIEh6XfDE4q9wUl38vPl/GFZvMv9v7gBOtv9v/v9bfS8HcPyM4TC8Wq3Emv8AMGTM8QM9//6f6/mIkCf9LwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcFJPZlhRK2Vrgm+nPQqkUcS4izkcxubtcrcxExLsR8cex4lianh10oQGAN1T4a5Kv/3Vx6qPJ3WfPJP8ey/YR8eOf3/rZg/lmc202zf/HTn7zSZp/trlWPjOICgAAna7tzcrG73K+77iRf/ni4cL2dpxFfH69vbhoGncr39pnRmM0249HMSIm/pnk6bb088pIH+JvPoqIz23XfzwedESYzOZA2iuf7o6fxj7X9/idv//d8Quv1beQnUv3xex38dnYVTjgQE+vt/vJvO2lTTxvf4W4kO27t//xrId6c2n/lzbXrT39X2Gn/xvZEz/J2vyFnfT+JXn+8e++uyezNdU+9yjiC6Pd4ic78ZPu/W/xo0PW8c9f/PKHvc61fhFxsWv9t1ekrmXd7HSztjrdWN+4vFybX6osVe6Vy3OzczOfXvmkPJ3NUbd//r5bjL9dvfRur/hp/Sd6xB/fv/7xtUPW/5f/ufPDr+wT/xtf7f7+v79P/HRM/Poh489PXOu5fHcaf7FH/Q94/+PSIeM/+8vG4iEvBQCOQWN9Y2W+Wq2sHXCQftY86BoHhz9I7+3fgmJkB7EZ0a8XzCYlIqLrNekn6rejykd1kAws+q/6/YKD7pmAo/aq0Q+6JAAAAAAAAAAAAAAAQC+N9Y2Vse7f1urbwaDrCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOn13wAAAP//KHnENg==")
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0xc17a)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4600, 0xe898d2275f586838)
preadv2(r0, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0xffffffa4}], 0x1, 0x8000, 0x9, 0x1b)

6m48.757888616s ago: executing program 7 (id=2737):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x40, &(0x7f0000000180)={[{@noblock_validity}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@init_itable}, {@nogrpid}, {@jqfmt_vfsv0}, {@jqfmt_vfsv0}, {@noinit_itable}, {@mb_optimize_scan}, {@usrquota}, {@user_xattr}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$eJzs3T1sG3UbAPDnznHTj7xv+krvK72gDhUgFamqk/QDClO7IipV6oDEApHjRlWcuIodaKJIpHuF6IAAdSkbDIwgBgbEwsjKwseMVNEIpKYDGDk+p2nqFCfEMcS/n3TJ/3939vP8fX7OvtOdHEDfOtr4k0Y8EREXk4jhdcsGIlt4tLneyvJi8f7yYjGJev3Sz0kkEXFvebHYWj/J/h+KiKWI+H9EfJWPOJ6uPeW+VqM6vzA1Xi6XZrP+SG366kh1fuHElenxydJkaebU8y+cOXv6zNjJsfXp3q+v7+W3NtYb3998+8Y3L92++fEnR5aK744ncS6GsmXrx7GTmq9JPs5tmH+6G8F6KOl1AmxLLqvzRin9L4Yjl1V9O/X1O4fBXUkP6KL6YER9zbom0AcSRQ99qvU9oHH825p28/vHnfPNA5BG3JXlxeJb0Yo/0Dw3EftXj00O/pI8dGTSON48vJuJsictXY+I0YGBR9//Sfb+277RnUiQrvryfHNDPbr907X9T7TZ/wy1zp3+Ra3930q2/1tpEz+3yf7vYocxfnv1xw82jX99MJ5sGz9Zi5+0iZ9GxOsdxr/1yudnN1tW/zDiWLSP35I8/vzwyOUr5dJo82/bGF8cO/Li5uOPOLhJ/OY52/2riawf/74sp7TD8X/29adPLT0m/rNPP377t3v9D0TEOx3G/8+9j17ebNmd68ndxreArW7/JPJxu8P4z507+l3WdNYQAAAAAAAAAAB2ULp6LVuSFtbaaVooNO/h/W8cTMuVau345crczETzmrfDkU9bV1oNN/tJoz+WXY/b6p/c0D+VywLmDqz2C8VKeaLHYwcAAAAAAAAAAAAAAAAAAIC/i0Mb7v//Nbd6///Gn6sG9qrNf/Ib2OvUP/Svh+s/6VkewO7z+Q99q67+oX+pf+hf6h/6l/qH/tW2/g/sfh7A7vP5D/1L/QMAAAAAAAAAAAAAAAAAAAAAAAAAQFdcvHChMdXvLy8WG/2Jgfm5qcobJyZK1anC9FyxUKzMXi1MViqT5VKhWJn+s+dLKpWrozEzd22kVqrWRqrzC69NV+ZmWr8pWsp3fUQAAAAAAAAAAAAAAAAAAADwzzO0OiVpISLf7KdpoRDxr4g4nERy+Uq5NBoR/46Ib3P5wUZ/rNdJAwAAAAAAAAAAAAAAAAAAwB5TnV+YGi+XS7PdawxkoTp71A+1ruYzsJWVI2JpZ9NoPOOWH5XPXsDubqY+aeQ6fB/2faOHOyUAAAAAAAAAAAAAAAAAAOhTD2767fQRv3c3IQAAAAAAAAAAAAAAAAAAAOhL6U9JRDSmY8PPDG1cui9Zya3+j4g3b11679p4rTY71ph/d21+7f1s/sle5A90qlWnaUQ06hgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4oDq/MDVeLpdmt9kY7GCdXo8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYDv+CAAA//9bQM66")
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r1 = accept4(r0, 0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x19}}}, [0x1d5f, 0xa685, 0x1, 0x9, 0x400, 0x1, 0xa, 0xe, 0x7, 0x0, 0x8000000000000001, 0x675, 0x2, 0xffffffffffffffc0, 0x2]}, &(0x7f0000000000)=0x100)

6m48.347374207s ago: executing program 8 (id=2744):
syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan3\x00'})
sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, 0x0, 0x24040000)
perf_event_open(&(0x7f00000004c0)={0x4, 0x80, 0x22, 0x0, 0x9, 0x4, 0x0, 0x5, 0xa16ae, 0xb, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x8084, 0xa2, 0xffffffff, 0x7, 0x7f, 0x9b9b, 0x6, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0, 0x0)
getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)=@known='user.incfs.metadata\x00', 0x0, 0xffffffffffffffb0)

6m48.317676169s ago: executing program 37 (id=2744):
syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan3\x00'})
sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, 0x0, 0x24040000)
perf_event_open(&(0x7f00000004c0)={0x4, 0x80, 0x22, 0x0, 0x9, 0x4, 0x0, 0x5, 0xa16ae, 0xb, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x8084, 0xa2, 0xffffffff, 0x7, 0x7f, 0x9b9b, 0x6, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0, 0x0)
getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)=@known='user.incfs.metadata\x00', 0x0, 0xffffffffffffffb0)

6m47.380005379s ago: executing program 7 (id=2754):
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xc}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x8, 0x2, [@TCA_FLOWER_ACT={0x4}]}}]}, 0x38}}, 0x24000000)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

6m47.084005004s ago: executing program 38 (id=2754):
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xc}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x8, 0x2, [@TCA_FLOWER_ACT={0x4}]}}]}, 0x38}}, 0x24000000)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

5m48.121819783s ago: executing program 5 (id=3608):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0))
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3}, &(0x7f0000000080), &(0x7f0000000100)=r0}, 0x20)

5m48.042571587s ago: executing program 5 (id=3611):
personality(0xfe47fef9f5ff7379)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
ppoll(0x0, 0x0, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000180)={[0xffffffffffffff68]}, 0x8)

5m47.98964188s ago: executing program 5 (id=3613):
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x730, 0x1, @perf_bp={0x0, 0x9}, 0x104200, 0x1000, 0x20da, 0x9, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "00000100", "8da0630cb37381ee2b00010000802000", '\x00', "19a4216dfdbf6602"}, 0x28)
close_range(r0, 0xffffffffffffffff, 0x0)

5m47.875127226s ago: executing program 5 (id=3616):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000300)='./file0\x00', 0x0, 0x8b7848, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0)

5m47.846562698s ago: executing program 5 (id=3617):
r0 = open(&(0x7f0000000280)='.\x00', 0x80, 0x28)
fcntl$notify(r0, 0x402, 0x3b)
mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x8042, 0x1f6)
r2 = open(&(0x7f0000000180)='./file1\x00', 0x143142, 0x0)
truncate(&(0x7f0000000000)='./file1\x00', 0x103000)
open(&(0x7f00000000c0)='./bus\x00', 0x100000, 0x106)
splice(r2, 0x0, r1, 0x0, 0x59, 0x2)

5m47.295928957s ago: executing program 5 (id=3621):
socket(0x400000000010, 0x3, 0x0)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054)
r4 = socket(0x1e, 0x4, 0x0)
write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r4], 0x14)

5m47.281151758s ago: executing program 39 (id=3621):
socket(0x400000000010, 0x3, 0x0)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054)
r4 = socket(0x1e, 0x4, 0x0)
write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r4], 0x14)

2.46568761s ago: executing program 4 (id=7553):
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r0 = socket$inet(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
close(r3)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r4, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='p'], 0x70}}], 0x1, 0x2000c044)
write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc)
readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000ac0)=""/4096, 0x1000}], 0x1)
splice(r1, 0x0, r3, 0x0, 0x7151, 0x0)

2.380529475s ago: executing program 0 (id=7554):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x12122, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"})
r1 = syz_open_pts(r0, 0x80)
dup3(r1, r0, 0x80000)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x89f9b000)
remap_file_pages(&(0x7f00007b4000/0x1000)=nil, 0x1000, 0x4, 0x3e0400000000, 0x1)

2.245175002s ago: executing program 9 (id=7556):
ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0)
r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x6)
writev(r0, &(0x7f0000000d80), 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
write$char_usb(0xffffffffffffffff, &(0x7f0000000480)="64e91e82fb86bc0a688ae99405a07e110f", 0x11)
openat$ptp0(0xffffffffffffff9c, 0x0, 0x2001, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0x3fffffffc, 0xfffffffffffffffd}, 0x0, 0x3, 0x80, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4001000016000104fdfffffffeffffffe0000002000000000000000000000000fe80000000000000000000000000000f000400004e200000000080203c000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000002000000033000000fc010000000000000000000000000000040000000000000003000000000000000500000000000000000000000000000003000000000000000000000000000000000000000000000002000000000000000400000000000000000000000000000000000000000000000200000000000000000000300000000003000000feffffff000000000200000000000000000000000c000000fdffffff1c000400fdff4e204e2200"/197], 0x140}}, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)

2.096397539s ago: executing program 9 (id=7557):
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000040)=<r0=>0x0)
timer_settime(r0, 0x0, 0x0, 0x0)
r1 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00}, &(0x7f0000000100), 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xdd, 0x708}, 0x0, 0x3, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xc, 0x0, 0x0, &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x21, 0x0, 0x0, 0x100002, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000, 0x0, 0x200000000000000}, 0x50)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r3, 0x6a98047402e98331, 0x70bd2a}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x4886)
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
io_uring_enter(r1, 0x1, 0x21, 0x1, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, 0x0, 0x404c881)

1.957738946s ago: executing program 9 (id=7559):
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x3fffffffc}, 0x100, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x5)
setresuid(0xee01, 0x0, 0x0)
getresuid(0x0, &(0x7f0000000080), &(0x7f00000000c0))
getresuid(0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2208810, &(0x7f0000000080), 0xfe, 0x572, &(0x7f0000001700)="$eJzs3V9rm9UfAPDvk6bdn26/dTDGTy+ksAsnc+na+meCF/NSdDjQ+xnarIymy2jSsdaB24W78UaGIOJAfAHeezl8A76KgQ6GjqIX3lSe9EmXNUmbtpnpzOcDac95npOcc/I85+R78iQkgIE1nv7JRbwUEV8lEcea9uUj2zm+Xm71ya2Z9JbE2trHvyeRZNsa5ZPs/2iW+X9E/PxFxJlca73V5ZX5YrlcWszyE7WF6xPV5ZWzVxeKc6W50rWp6enzb05PvfP2Wz3r62uX/vr2owfvn//y1Oo3Pz46fi+JC3Ek29fcjz243ZwZj/HsORmOC5sKTvagsv0k6XcD2JWhbJwPRzoHHIuhbNQD/32fR8QaMKAS4x8GVCMOaKzte7QOfmE8fm99AdTa//z6eyNxsL42OryaPLMySte7Yz2oP63jp9/u30tv0bv3IQC2dftORJzL51vnvySb/3bvXBdlNtexw/lvbYdNApo8SOOf19vFP5WsxMH6383xz2ibsbsb24//3KMeVNNRGv+92zb+3bhoNTaU5Y7WY77h5MrVcimd2/4XEadj+ECa3+p6zvnVhx3nqafx30g9Bkzrb8SCWTse5Q88e5/ZYq24lz43e3wn4uW28W+yEf8mbY5/+nxc6rKOk6X7r3Ta1xz/tu//87X2Q8Sr2fG//cya6OkVrWTr65MT9fNhonFWtPrz7slfOtXfuf9Hn0NvW6XH/3Db83+j/2NJ8/Xa6s7r+P7g36VO+7Y//u3P/5Hkk3p6JNt2s1irLU5GjCQftm6fenrfRr5RPu3/6VPtx/9W5/+hiPi0y/7fPXG3Y9F+n/9p/2d3dPx3nnj4wWffdaq/u+P/Rj11OtvSzfzXbQP38twBAAAAAADAfpOLiCOR5Aob6VyuUFj/fMeJOJwrV6q1M1cqS9dmo/5d2bEYzjWudI82fR5iMvs8bCM/tSk/HRHHI+LroUP1fGGmUp7td+cBAAAAAAAAAAAAAAAAAABgnxjt8P3/1K9D/W4d8Nz5yW8YXNuO/1780hOwL3n9h8Fl/MPgMv5hcBn/MLjySb9bAPSL138YXMY/DC7jHwAAAAAAAAAAAAAAAAAAAAAAAAAAAHrq0sWL6W1t9cmtmTQ/e2N5ab5y4+xsqTpfWFiaKcxUFq8X5ho/ELKw5YMlf0S5Urk+ORVLNydqpWptorq8cnmhsnStdvnqQnGudLk0/G90CgAAAAAAAAAAAAAAAAAAAF4w1eWV+WK5XFqUkNhVIr8/miGxnmgM7D0/YH/nJQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABo9k8AAAD//24dNcY=")
r0 = gettid()
timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x11, 0x4, @tid=r0}, &(0x7f0000000000)=<r1=>0x0)
timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex(&(0x7f0000000240)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x0)
chdir(&(0x7f0000000040)='./file0\x00')

1.957534637s ago: executing program 6 (id=7560):
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x5, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0x10001, 0xda, 0x5, 0xc31bc7e, 0x20005, 0xc, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000040)={0x400, 0x8, 0x2000})
ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0xfdfd, 0x0, 0x132, 0x401})
r1 = epoll_create1(0x0)
r2 = epoll_create1(0x0)
ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100))
ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000080)={0xd, 0x7ff, 0x7, 0x6, 0x4b, "381b4e49cffceed97492d7675fd790bfa07e1a", 0x100, 0x8f9})
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, 0x0, &(0x7f0000000040))
r4 = fcntl$dupfd(r1, 0x0, r1)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000040))
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000001c0))

1.849468923s ago: executing program 6 (id=7563):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, &(0x7f0000000000)='GPL\x00', 0x2}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x10, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(0x0, 0x0, 0x4000000000000200, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id, 0x80, 0x0}, 0x0)
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000100), &(0x7f0000000140)=r1}, 0x20)

1.598502596s ago: executing program 0 (id=7564):
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000b40)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&\x00'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20)
sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x4003e80, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0)

1.598325736s ago: executing program 6 (id=7565):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080))
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48)
ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f00000001c0)=r3)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
write$cgroup_devices(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd)

1.593214506s ago: executing program 4 (id=7574):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
add_key$fscrypt_provisioning(&(0x7f0000001400), &(0x7f0000001440)={'syz', 0x1}, &(0x7f0000001480)=ANY=[@ANYBLOB="01"], 0x48, 0xfffffffffffffffe)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/keys\x00', 0x0, 0x0)
preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000380)=""/4086, 0xff6}], 0x1, 0x176, 0x402)
syz_open_procfs(0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800810, &(0x7f0000000180)={[{@nobh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000880)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x5, 0x900, 0xffffffffffffffff, 0x0, 0xa}, {0xffffffff, 0x4, 0x9, 0xa}]})
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="2400000021002101000000000000dc000a00"], 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.514027291s ago: executing program 4 (id=7566):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x25, 0x1, 0x3, 0xfffffffe}, {0x28}]})
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40000100)
socket$kcm(0x10, 0x2, 0x0)

1.513775371s ago: executing program 6 (id=7567):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00')
fstat(r3, 0x0)
pread64(r3, &(0x7f0000000500)=""/31, 0x1f, 0x40000000007)

1.167157598s ago: executing program 4 (id=7568):
perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0x4, &(0x7f00000008c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x1e}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00'}, 0x90)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r0, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xf, &(0x7f00000000c0)=@ringbuf, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', r1}, 0x90)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8c, 0x8c, 0x3, [@float={0xf, 0x0, 0x0, 0x10, 0x8}, @enum={0x6}, @func_proto={0x0, 0xa, 0x0, 0xd, 0x0, [{0xc, 0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {0x4, 0x2}, {0x8, 0x4}, {0x7}, {0xb}, {0x5, 0x4}, {0x8, 0x5}]}, @union={0x6, 0x0, 0x0, 0x5, 0x1, 0x6}, @restrict={0x6, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x2e]}}, &(0x7f0000000280)=""/15, 0xa7, 0xf, 0x0, 0x23, 0x10000}, 0x28)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x90, '\x00', r1, r2, 0x5, 0x0, 0x3}, 0x50)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x1, 0x9, 0xae}, 0x50)
bpf$MAP_CREATE(0xc00000000000000, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x0, r4, 0x1e, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x11}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4000000000000007910900000000000620000000000000095000000000000009e574bffff1729aba9b39a58e3cd8757e44cf3611b8e327a0279acba1f7791408d1efa421239728e2e5cc319b58520609dfd4a1a021d000000000000efffff75c3d894d99aef659f8b0000c515d8c219fbd9da31fc3ce3e9a2653000aec385a84a3d3f466bba30ac1486a70037fb03adef1a427fb0f4cb3072182da7c30000000000000000000000000000000000000000000000000000297e9fed660213ecb576987ad0972f18fbb7c9ecc03901f028b15b30ecf3205f90c9684ddc80d13bf37afc00e5efd686e6fb5ef4ee00b66126f773434a5c0d2ad3526bc484a6b94396117615f78f97637d8f8838aa75efb657ddafb15b88d97e47731cc3f55ce4e6a42562e6fb1f0000003030249c350044b09c36d10549a5949ff21418f1517508fb13540a82b5030cd9bb1bb066ca833c1fef6cefa28543ee520e46a3e96aca0d5a5f8cb34ad9c54c3a9a698f835bb83bcfd81ac5cfa18ce0740717994b5152cd0fa735433e50dccee16a208245b4366d44bb7ebd169b9e3a66d0cb29291a50f642ae4cb007540c806cd1cf88fdcaa393d1e1a697649401a802b474e374c767cb1ce52fd917d6af3de547be8429540de37f868a7f25d47c4b710836436008d4e8c8b42aeee84629d06d75ef09e0"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, &(0x7f0000000000), &(0x7f0000000040)=r3}, 0x20)

1.000189218s ago: executing program 9 (id=7569):
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x2)
fchdir(r2)
mkdirat(r2, &(0x7f0000000100)='./file0\x00', 0x2)
r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244)
r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r4, r4)
setpgid(0x0, r4)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x5c2, 0x169)
move_mount(r3, 0x0, r3, &(0x7f00000000c0)='./file0\x00', 0x22)

981.707828ms ago: executing program 3 (id=7570):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0xa, 0x7fe}, 0x11, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x8, 0x0, 0x0)
r3 = getpid()
sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x8080)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x3c, r5, 0x1, 0x70bd27, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x600, 0x0, 0x408d0}, 0x30)

681.565494ms ago: executing program 3 (id=7571):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa1000000000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
syz_emit_ethernet(0x43, &(0x7f00000000c0)=ANY=[@ANYBLOB="aa9afbb8991e1075816e000086dd60a24b9f000d1100fe800000000000000000000000000100000000000000000000000000000900aa00004e22040000000300000070473f1cdb3c6c4b5fc4b046bef0843ade9a4f677369066b838d017ffcb242ba4f5c573b02ed12cbd221e3f9adda34b3580e12f3e7dfe37b60ec17716060"], 0x0)
syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000040)='./file0\x00', 0x2000800, &(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYRESOCT, @ANYRES64=0x0], 0x1, 0x296, &(0x7f0000000740)="$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")
r2 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x31, &(0x7f00000a2000)={0x0, 0x0}, 0x10)
listen(r2, 0x50)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4)
ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000080)={0x0, 0x8000})

575.35815ms ago: executing program 4 (id=7572):
r0 = socket(0x1, 0x803, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r4], 0x50}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r8], 0x50}}, 0x2)

573.82653ms ago: executing program 6 (id=7573):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x5, [@var={0x4, 0x0, 0x0, 0xe, 0x2}]}, {0x0, [0x30, 0x0, 0x0]}}, &(0x7f00000001c0)=""/257, 0x2d, 0x101, 0x6}, 0x28)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
r4 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14)

502.155704ms ago: executing program 0 (id=7575):
syz_emit_ethernet(0x36, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
r4 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14)

457.268546ms ago: executing program 6 (id=7576):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x4, 0xd}, {0x10000002, 0x0, 0xf, 0x6}], 0x10, 0x4000000}, 0xfe33)
r0 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000000)=r3, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26}, 0x28)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
r6 = socket$kcm(0x2, 0x5, 0x84)
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r6, 0x84, 0x72, &(0x7f0000000000)=r7, 0xc)

434.018298ms ago: executing program 3 (id=7577):
socketpair$unix(0x1, 0x5, 0x0, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x8905, &(0x7f0000000100))
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfff, 0x4}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000000c0)={0x5, &(0x7f0000000000)=[{0x4d, 0x1, 0x3, 0x82000000}, {0xb1}, {0x20, 0x0, 0x0, 0x8}, {0x2}, {0x6, 0xda}]})
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x8, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x28f0700, 0x8, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x88, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}, @ip_tos_u8={{0x11}}], 0x98}, 0x0)

420.480679ms ago: executing program 4 (id=7578):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
socket$nl_route(0x10, 0x3, 0x0)
syz_usb_connect(0x6, 0x24, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x8, 0x0, 0x0, 'queue0\x00', 0x3})
write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8)

386.26653ms ago: executing program 3 (id=7579):
r0 = socket$kcm(0x11, 0x3, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x9102})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40480, 0x0)
close(r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000a00)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x7fffffff, 0x6361, 0x5, 0xffffffff, 0x403}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x101}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x300, r6, 0x3e}, 0x80, &(0x7f0000002080)=[{&(0x7f0000000180)="27030200590214000600006fb96dbcf706", 0x11}, {&(0x7f0000000f00)="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", 0x267}], 0x2}, 0x0)

322.084043ms ago: executing program 0 (id=7580):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x405})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x303}, "9913d4ab2de66f9c", "dd79ff97261d7098a0723ec49ab4cfdc", 'i}oz', "ffca69dbc7b44302"}, 0x28)
readv(r0, &(0x7f0000000000)=[{&(0x7f0000000300)=""/157, 0x9d}], 0x1)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)

298.318245ms ago: executing program 3 (id=7581):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0)

245.947917ms ago: executing program 3 (id=7582):
r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101e42, 0x33)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000340)=0x4000)
pwritev2(r1, &(0x7f0000000cc0)=[{&(0x7f0000000240)=';', 0x1}], 0x1, 0xfff, 0xc, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000000280)={{&(0x7f0000000080)=[{0x98, 0x0, 0x7, {0x9, 0x6}, 0x4, 0x0, 0x9}], 0x1, 0x40, 0xef, 0x2}, {&(0x7f00000000c0)=[{0x9, 0x8d9f}, {0x7fffffff, 0xf9d9}, {0x10, 0x926d}], 0x3, 0x10, 0x32a, 0x7fff}, {&(0x7f0000000100)=[0x8001, 0x89d, 0x800], 0x3, 0x8, 0x883c, 0x2}, {&(0x7f0000000140)=[{0xbc5b, 0x5142, 0x4, 0x4, 0x8}], 0x1, 0x28, 0xff, 0x5}, {&(0x7f0000000200)=[0xe, 0xfffffffffffffff7, 0xfffffffffffffffd, 0x5, 0x1ff, 0x4], 0x6, 0x8, 0x1, 0x32}})
unshare(0x64000600)
syz_usb_connect$lan78xx(0x3, 0x0, 0x0, 0x0)
r3 = socket(0x2, 0x80805, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'sh\x00', 0x0, 0x660f537f, 0x70}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast2, 0x4f29, 0x3, 'nq\x00', 0x5, 0xc, 0x6c}, {@loopback, 0x4e23, 0x3, 0x1, 0x1}}, 0x44)
ioctl$TIOCL_SETVESABLANK(r2, 0x541c, &(0x7f0000000000))
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)

176.724841ms ago: executing program 0 (id=7583):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000040)=@gcm_128={{0x303}, "1b2fcb39a2d24a3f", "3176927120162c9891c2feb670bbea88", "2c2af280", "c367b1a8d1546100"}, 0x28)
write$binfmt_elf64(r1, &(0x7f0000001280)=ANY=[], 0x4a2)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0x1f400, 0x8, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)

106.604324ms ago: executing program 0 (id=7584):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000184, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000240)='=@w', 0x3}], 0x1, 0x0)
recvmmsg(r5, &(0x7f0000001440)=[{{&(0x7f0000000280)=@un=@abs, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)=""/1}, {&(0x7f0000000300)=""/102}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/111}]}}], 0x700, 0x40002002, 0x0)
setsockopt$sock_int(r5, 0x1, 0x10, &(0x7f0000000180)=0x55b7, 0x4)
splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
sendto$inet6(0xffffffffffffffff, &(0x7f00000004c0)='W', 0x1, 0x4, 0x0, 0x0)

70.991126ms ago: executing program 9 (id=7585):
perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xec, 0x7, 0x40, 0x8, 0x0, 0x0, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x81, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xec, 0xa, 0x40, 0x7, 0x0, 0x0, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x9, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0xa, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x80, 0xa7, 0x2, 0x5, 0xa5, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000000)={0x1, 0x80, 0x18, 0xf7, 0x8, 0x8, 0x0, 0x0, 0x2008, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x0, 0x6}, 0x10d4, 0x1, 0x9, 0x4, 0x8, 0xab00, 0x8, 0x0, 0x3e1, 0x0, 0x9})
perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_config_ext={0xff, 0x4}, 0x100410, 0x200, 0x2, 0x1, 0x9, 0x1000009, 0x8, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x42000, 0x0)
ioctl$TUNSETLINK(r1, 0x400454cd, 0x30a)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x6, 0x8, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x11efa, 0x4, 0x98, 0x2, 0x2, 0xfffff271, 0xfffd, 0x0, 0x0, 0x0, 0x20}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94)
syz_clone(0x480, 0x0, 0x11, 0x0, 0x0, 0x0)

0s ago: executing program 9 (id=7586):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$kcm(0x11, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xa888, r6, 0x33}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000000)="b8", 0x1}], 0x1}, 0x404481c)

kernel console output (not intermixed with test programs):

[  444.970909][T21644] selinux_netlink_send: 51 callbacks suppressed
[  444.970930][T21644] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21644 comm=syz.3.5870
[  446.069998][T21664] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5877'.
[  446.138934][T21664] 8021q: adding VLAN 0 to HW filter on device bond5
[  446.234540][T21664] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5877'.
[  446.302457][T21664] macsec2: entered promiscuous mode
[  446.342728][T21664] bond5: entered promiscuous mode
[  446.364098][T21664] 8021q: adding VLAN 0 to HW filter on device macsec2
[  446.655733][T21672] syzkaller0: entered promiscuous mode
[  446.702050][T21672] syzkaller0: entered allmulticast mode
[  448.196900][T21685] rdma_rxe: rxe_newlink: failed to add syz_tun
[  450.552984][T21730] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5900'.
[  450.693493][T21743] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5906'.
[  450.786803][T21730] hsr0: entered promiscuous mode
[  450.829401][T21747] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5906'.
[  450.843609][T21743] 8021q: adding VLAN 0 to HW filter on device bond9
[  450.868527][T21747] macsec1: entered promiscuous mode
[  450.873848][T21747] bond9: entered promiscuous mode
[  450.879505][T21747] 8021q: adding VLAN 0 to HW filter on device macsec1
[  451.511924][T21765] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5912'.
[  451.668902][T21771] netlink: 1363 bytes leftover after parsing attributes in process `syz.0.5916'.
[  451.697032][T21773] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5917'.
[  451.707717][T21775] netlink: 'syz.9.5918': attribute type 4 has an invalid length.
[  451.720762][T21775] netlink: 'syz.9.5918': attribute type 4 has an invalid length.
[  451.728745][T14786] lo speed is unknown, defaulting to 1000
[  451.734572][T14786] lyz2: Port: 1 Link DOWN
[  451.742111][T21773] xfrm1: entered promiscuous mode
[  451.747292][T21773] xfrm1: entered allmulticast mode
[  451.754383][ T3422] lo speed is unknown, defaulting to 1000
[  451.761304][ T3422] lo speed is unknown, defaulting to 1000
[  451.770466][T21773] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5917'.
[  451.781139][ T3422] lyz2: Port: 1 Link ACTIVE
[  452.976983][T21817] netlink: 'syz.3.5930': attribute type 4 has an invalid length.
[  453.011076][T21817] netlink: 'syz.3.5930': attribute type 4 has an invalid length.
[  453.535622][T21830] veth0_to_hsr: Caught tx_queue_len zero misconfig
[  453.650701][T21832] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5936'.
[  454.160055][T21859] nft_compat: unsupported protocol 0
[  454.331348][T21868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5950'.
[  454.409878][T21868] hsr0: entered promiscuous mode
[  454.652907][T21878] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5953'.
[  454.699897][T21878] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21878 comm=syz.4.5953
[  454.756345][T21880] netlink: 'syz.4.5954': attribute type 16 has an invalid length.
[  455.369542][T21880] bridge0: port 1(bridge_slave_0) entered disabled state
[  456.061349][T21880] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  456.104852][T21907] siw: device registration error -23
[  456.137111][T21880] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  456.284965][ T4462] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  456.304307][ T4462] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  456.327669][ T4462] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  456.344850][ T4462] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  456.374299][ T4462] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  456.381548][T21916] nft_compat: unsupported protocol 0
[  456.398080][ T4462] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  456.418709][ T4462] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  456.436341][ T4462] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  456.445517][T21916] loop4: detected capacity change from 0 to 512
[  456.455639][T21893] lo speed is unknown, defaulting to 1000
[  456.561569][T21916] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  456.595827][T21916] EXT4-fs (loop4): orphan cleanup on readonly fs
[  456.623741][T21916] Quota error (device loop4): v2_read_file_info: Block with free entry 4294967071 out of range (1, 6).
[  456.637929][T21916] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  456.664989][T21916] EXT4-fs (loop4): Cannot turn on quotas: error -117
[  456.679232][T21924] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5971'.
[  456.704344][T21916] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.5968: bg 0: block 15: invalid block bitmap
[  456.718736][T21916] loop4: lost filesystem error report for type 5 error -117
[  456.726677][T21916] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  456.727401][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  456.727423][    C0] EXT4-fs (loop4): initial error at time 1776489508: ext4_validate_block_bitmap:432
[  456.727455][    C0] EXT4-fs (loop4): last error at time 1776489508: ext4_validate_block_bitmap:432
[  456.758558][T21924] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21924 comm=syz.3.5971
[  456.791651][T21916] loop4: lost filesystem error report for type 5 error -117
[  456.791939][T21916] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #16: comm syz.4.5968: data will be lost
[  456.830976][T21916] EXT4-fs (loop4): 1 truncate cleaned up
[  456.905711][T21916] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  456.962654][T21937] loop0: detected capacity change from 0 to 256
[  456.988956][T21937] FAT-fs (loop0): bogus logical sector size 2056
[  456.996000][T21937] FAT-fs (loop0): Can't find a valid FAT filesystem
[  456.996786][T15862] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  457.322412][T21962] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5983'.
[  457.370233][T21962] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21962 comm=syz.6.5983
[  457.425341][T21969] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5986'.
[  457.438216][T21972] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5988'.
[  457.464464][T21964] netlink: 'syz.3.5984': attribute type 21 has an invalid length.
[  457.481012][T21969] 8021q: adding VLAN 0 to HW filter on device bond5
[  457.504215][T21972] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21972 comm=syz.6.5988
[  457.605220][T21985] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5994'.
[  457.704971][T21975] lo speed is unknown, defaulting to 1000
[  457.812280][T22002] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5999'.
[  457.855200][T22002] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22002 comm=syz.6.5999
[  458.039769][T22016] netlink: 'syz.6.6004': attribute type 4 has an invalid length.
[  458.049285][T22019] netlink: 52 bytes leftover after parsing attributes in process `syz.9.6005'.
[  458.078514][T22016] netlink: 'syz.6.6004': attribute type 4 has an invalid length.
[  458.156403][T22024] netlink: 'syz.6.6007': attribute type 4 has an invalid length.
[  458.211087][T22024] netlink: 'syz.6.6007': attribute type 4 has an invalid length.
[  458.512971][T22040] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6013'.
[  458.591592][T22040] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22040 comm=syz.0.6013
[  460.085905][   T28] audit: type=1400 audit(1776489512.026:2331): avc:  denied  { bind } for  pid=22067 comm="syz.6.6024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  460.446250][T22075] loop0: detected capacity change from 0 to 512
[  460.607524][T22075] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  460.678574][T22075] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it
[  460.722913][T22075] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.6027: Corrupt directory, running e2fsck is recommended
[  461.359712][T22075] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2
[  461.383345][T22075] EXT4-fs error (device loop0): ext4_iget_extra_inode:5128: inode #15: comm syz.0.6027: corrupted in-inode xattr: invalid ea_ino
[  461.401443][T22075] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  461.405477][T22075] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.6027: couldn't read orphan inode 15 (err -117)
[  461.415735][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  461.415772][    C0] EXT4-fs (loop0): initial error at time 1776489513: ext4_iget_extra_inode:5128: inode 15
[  461.416392][    C0] EXT4-fs (loop0): last error at time 1776489513: ext4_iget_extra_inode:5128: inode 15
[  461.473089][T22075] loop0: lost filesystem error report for type 5 error -117
[  461.483586][T22075] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  461.526123][T22075] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #2: comm syz.0.6027: corrupted xattr block 255: invalid header
[  461.553707][T22075] SELinux: (dev loop0, type ext4) getxattr errno 117
[  461.567899][T22075] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  461.763318][T22075] loop0: detected capacity change from 0 to 512
[  461.976198][T22075] EXT4-fs (loop0): 1 orphan inode deleted
[  461.984247][T22075] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  462.113907][T15001] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  462.139447][T22119] vlan0: entered allmulticast mode
[  462.144773][T22119] bond0: entered allmulticast mode
[  462.150224][T22119] syz_tun: entered allmulticast mode
[  462.156721][T22119] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6032'.
[  462.183162][T22119] bond0 (unregistering): (slave syz_tun): Releasing backup interface
[  462.197820][T22119] syz_tun: left allmulticast mode
[  462.208505][T22119] bond0 (unregistering): Released all slaves
[  462.230355][T22123] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6034'.
[  462.264277][T22123] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22123 comm=syz.9.6034
[  462.297045][T22121] lo speed is unknown, defaulting to 1000
[  462.538442][T22141] loop4: detected capacity change from 0 to 512
[  462.565562][T22141] EXT4-fs: Ignoring removed nobh option
[  462.581246][T22141] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 3)!
[  462.615024][T22141] EXT4-fs (loop4): group descriptors corrupted!
[  462.719546][T22145] syz_tun: left promiscuous mode
[  462.737063][T22148] netlink: 'syz.0.6043': attribute type 13 has an invalid length.
[  462.750750][T22145] 8021q: adding VLAN 0 to HW filter on device team0
[  462.766275][T22148] netlink: 'syz.0.6043': attribute type 17 has an invalid length.
[  462.782473][T22145] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  462.894565][T22148] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  463.026499][T22157] xt_TCPMSS: Only works on TCP SYN packets
[  463.039882][T22155] netlink: 200 bytes leftover after parsing attributes in process `syz.6.6047'.
[  463.084421][   T28] audit: type=1400 audit(1776489515.026:2332): avc:  denied  { name_bind 0x1000000 } for  pid=22159 comm="syz.0.6049" path="socket:[70012]" dev="sockfs" ino=70012 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[  463.123656][T22162] netlink: 52 bytes leftover after parsing attributes in process `syz.6.6050'.
[  463.216227][T22147] loop4: detected capacity change from 0 to 512
[  463.277030][T22147] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2
[  463.316531][T22147] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #13: comm syz.4.6044: inode has both inline data and extents flags
[  463.353625][T22147] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  463.356933][T22147] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.6044: couldn't read orphan inode 13 (err -117)
[  463.366247][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  463.366303][    C0] EXT4-fs (loop4): initial error at time 1776489515: ext4_orphan_get:1397: inode 13
[  463.366483][    C0] EXT4-fs (loop4): last error at time 1776489515: ext4_orphan_get:1397: inode 13
[  463.427556][T22147] loop4: lost filesystem error report for type 5 error -117
[  463.431157][T22147] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  463.475772][   T28] audit: type=1400 audit(1776489515.416:2333): avc:  denied  { write } for  pid=22146 comm="syz.4.6044" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  463.479368][T22147] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.6044: corrupted in-inode xattr: overlapping e_value 
[  463.654389][T15862] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  463.989895][T22196] loop9: detected capacity change from 0 to 128
[  464.008578][T22196] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1)
[  464.083961][T22203] tipc: Failed to remove unknown binding: 66,0,0/0:373642208/373642210
[  464.100826][T22203] tipc: Failed to remove unknown binding: 66,0,0/0:373642208/373642209
[  464.122730][T22203] tipc: Failed to remove unknown binding: 66,0,0/0:373642208/373642210
[  464.141304][T22203] tipc: Failed to remove unknown binding: 66,0,0/0:373642208/373642209
[  464.991871][T22248] loop9: detected capacity change from 0 to 128
[  465.112679][T22252] veth0_to_hsr: Caught tx_queue_len zero misconfig
[  466.259602][T22270] syzkaller0: entered promiscuous mode
[  466.272473][T22270] syzkaller0: entered allmulticast mode
[  467.008468][   T28] audit: type=1400 audit(1776489518.946:2334): avc:  denied  { execute } for  pid=22297 comm="syz.6.6095" path="/memory.swap.current" dev="ramfs" ino=70358 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1
[  467.108173][T22309] syzkaller0: entered promiscuous mode
[  467.136513][T22309] syzkaller0: entered allmulticast mode
[  467.585038][T22331] loop4: detected capacity change from 0 to 8192
[  467.715813][T22340] x_tables: duplicate underflow at hook 2
[  468.091100][T22346] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6117'.
[  468.112953][T22351] xt_hashlimit: size too large, truncated to 1048576
[  468.134280][T22346] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22346 comm=syz.4.6117
[  468.178785][T22356] loop9: detected capacity change from 0 to 512
[  468.230959][T22356] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.6109: invalid indirect mapped block 256 (level 2)
[  468.279818][T22356] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  468.285577][T22356] EXT4-fs (loop9): Remounting filesystem read-only
[  468.294817][    C0] EXT4-fs (loop9): error count since last fsck: 1
[  468.294836][    C0] EXT4-fs (loop9): initial error at time 1776489520: ext4_free_branches:1023: inode 11
[  468.294870][    C0] EXT4-fs (loop9): last error at time 1776489520: ext4_free_branches:1023: inode 11
[  468.360298][T22356] EXT4-fs (loop9): 2 truncates cleaned up
[  468.366746][T22356] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  468.930731][ T7526] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  469.011069][T22399] loop0: detected capacity change from 0 to 1024
[  469.040818][T22399] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  469.072768][T22399] ext4 filesystem being mounted at /470/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  469.181261][   T49] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: comm kworker/u8:3: lblock 0 mapped to illegal pblock 0 (length 6)
[  469.221070][   T28] audit: type=1400 audit(1776489521.166:2335): avc:  denied  { ioctl } for  pid=22404 comm="syz.9.6128" path="socket:[71087]" dev="sockfs" ino=71087 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  469.224229][   T49] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117
[  469.358295][   T49] EXT4-fs (loop0): This should not happen!! Data will be lost
[  469.358295][   T49] 
[  469.402837][ T4445] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:16: lblock 8 mapped to illegal pblock 8 (length 8)
[  469.445631][ T4445] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  469.488059][ T4445] EXT4-fs (loop0): This should not happen!! Data will be lost
[  469.488059][ T4445] 
[  470.128000][T14856] kernel read not supported for file /2211/net/fib_triestat (pid: 14856 comm: kworker/1:15)
[  470.186050][T22427] xt_TPROXY: Can be used only with -p tcp or -p udp
[  470.496593][T22399] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.6126: bg 0: block 112: padding at end of block bitmap is not set
[  470.531724][T22399] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 2060 with max blocks 2048 with error 28
[  470.546131][T22399] EXT4-fs (loop0): This should not happen!! Data will be lost
[  470.546131][T22399] 
[  470.558079][T22399] EXT4-fs (loop0): Total free blocks count 0
[  470.564608][T22399] EXT4-fs (loop0): Free/Dirty block details
[  470.571768][T22399] EXT4-fs (loop0): free_blocks=0
[  470.659257][T22433] lo speed is unknown, defaulting to 1000
[  470.757945][T15001] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  471.266463][   T28] audit: type=1326 audit(1776489523.206:2336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22448 comm="syz.6.6140" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9fa6a9c819 code=0x0
[  471.441804][   T28] audit: type=1400 audit(1776489523.386:2337): avc:  denied  { write } for  pid=22458 comm="syz.4.6143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  471.495854][T22460] loop4: detected capacity change from 0 to 4096
[  471.520976][T22460] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  471.561168][T22459] veth0: entered allmulticast mode
[  471.633698][T22468] netlink: 'syz.9.6146': attribute type 16 has an invalid length.
[  471.773406][T22458] delete_channel: no stack
[  471.781891][T22468] bond9: left promiscuous mode
[  471.792999][T14775] lo speed is unknown, defaulting to 1000
[  471.808039][T14775] lyz2: Port: 1 Link DOWN
[  471.814727][T14775] lo speed is unknown, defaulting to 1000
[  471.830062][T15862] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  472.004329][   T28] audit: type=1400 audit(1776489523.946:2338): avc:  denied  { node_bind } for  pid=22489 comm="syz.9.6155" saddr=172.20.20.170 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[  472.178960][T22497] loop0: detected capacity change from 0 to 1024
[  472.199848][T22497] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  472.371065][T15001] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  473.035617][T22517] netlink: 'syz.3.6163': attribute type 16 has an invalid length.
[  473.131820][T22520] loop9: detected capacity change from 0 to 764
[  473.177169][T22520] iso9660: Unknown parameter 'smU‡on*à$Åackfshat'
[  473.270211][T22517] bridge0: port 2(bridge_slave_1) entered disabled state
[  473.277935][T22517] bridge0: port 1(bridge_slave_0) entered disabled state
[  473.562044][T22517] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  473.579579][T22517] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  473.740796][T22548] loop0: detected capacity change from 0 to 2048
[  473.801280][T22548] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  473.954283][   T36] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  473.963723][   T36] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0
[  473.973030][   T36] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  473.982443][   T36] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0
[  473.994277][   T36] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  474.003488][   T36] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0
[  474.012847][   T36] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  474.021973][   T36] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0
[  474.044057][T15001] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  474.518406][T22582] netlink: 'syz.6.6188': attribute type 16 has an invalid length.
[  474.709982][T22596] wg2: entered promiscuous mode
[  474.720565][T22596] wg2: entered allmulticast mode
[  474.738625][T22584] syzkaller0: entered promiscuous mode
[  474.752364][T22584] syzkaller0: entered allmulticast mode
[  474.783276][T22584] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  474.809560][T22583] tipc: Resetting bearer <eth:syzkaller0>
[  474.849826][T22583] tipc: Disabling bearer <eth:syzkaller0>
[  474.972440][   T28] audit: type=1400 audit(1776489526.916:2339): avc:  denied  { mounton } for  pid=22607 comm="syz.6.6198" path=2F313332312FE91F7189591E9233614B dev="tmpfs" ino=6825 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1
[  475.143446][T22627] netlink: 'syz.0.6205': attribute type 4 has an invalid length.
[  475.222741][T22630] loop0: detected capacity change from 0 to 1024
[  475.250715][T22630] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  475.261184][T22630] System zones: 0-1, 3-36
[  475.281338][T22630] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.6206: bad orphan inode 134217728
[  475.295357][T22630] loop0: lost filesystem error report for type 5 error -117
[  475.297378][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  475.311974][    C0] EXT4-fs (loop0): initial error at time 1776489527: ext4_orphan_get:1423
[  475.321348][    C0] EXT4-fs (loop0): last error at time 1776489527: ext4_orphan_get:1423
[  475.348297][T22630] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  475.758935][T15001] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  475.800180][T22636] loop0: detected capacity change from 0 to 512
[  475.822366][T22636] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  475.848047][T22636] ext4 filesystem being mounted at /493/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  476.075495][T15001] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  476.155704][T22643] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6209'.
[  476.177399][T22643] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6209'.
[  476.193309][T22649] lo: Caught tx_queue_len zero misconfig
[  476.236151][T22654] netlink: 'syz.0.6215': attribute type 1 has an invalid length.
[  476.272633][T22654] 8021q: adding VLAN 0 to HW filter on device bond0
[  476.315971][T22654] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6215'.
[  476.327103][T22654] bond0: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms
[  476.341945][T22654] bond0: entered allmulticast mode
[  476.356509][T22654] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link
[  477.309091][T22682] syz.4.6225: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0
[  477.334030][T22682] CPU: 1 UID: 0 PID: 22682 Comm: syz.4.6225 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  477.334103][T22682] Tainted: [W]=WARN
[  477.334112][T22682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  477.334134][T22682] Call Trace:
[  477.334142][T22682]  <TASK>
[  477.334154][T22682]  __dump_stack+0x1d/0x30
[  477.334193][T22682]  dump_stack_lvl+0x95/0xd0
[  477.334370][T22682]  dump_stack+0x15/0x1b
[  477.334405][T22682]  warn_alloc+0x145/0x1c0
[  477.334540][T22682]  ? futex_unqueue+0xc5/0xf0
[  477.334612][T22682]  __vmalloc_node_range_noprof+0xa5/0x11c0
[  477.334650][T22682]  ? __pfx_futex_wake_mark+0x10/0x10
[  477.334750][T22682]  ? __rcu_read_unlock+0x4e/0x70
[  477.334781][T22682]  ? avc_has_perm_noaudit+0xab/0x130
[  477.334815][T22682]  ? should_fail_ex+0x30/0x280
[  477.334931][T22682]  vmalloc_user_noprof+0x7d/0xb0
[  477.335112][T22682]  ? xskq_create+0x80/0xe0
[  477.335155][T22682]  xskq_create+0x80/0xe0
[  477.335218][T22682]  xsk_init_queue+0x70/0xb0
[  477.335327][T22682]  xsk_setsockopt+0x3f5/0x640
[  477.335364][T22682]  ? __pfx_xsk_setsockopt+0x10/0x10
[  477.335405][T22682]  __sys_setsockopt+0x184/0x200
[  477.335461][T22682]  __x64_sys_setsockopt+0x64/0x80
[  477.335506][T22682]  x64_sys_call+0x2327/0x3020
[  477.335547][T22682]  do_syscall_64+0x12c/0x3b0
[  477.335635][T22682]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  477.335667][T22682] RIP: 0033:0x7f9a7d70c819
[  477.335683][T22682] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  477.335766][T22682] RSP: 002b:00007f9a7c167028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  477.335791][T22682] RAX: ffffffffffffffda RBX: 00007f9a7d985fa0 RCX: 00007f9a7d70c819
[  477.335806][T22682] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004
[  477.335820][T22682] RBP: 00007f9a7d7a2c91 R08: 0000000000000004 R09: 0000000000000000
[  477.335941][T22682] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  477.335954][T22682] R13: 00007f9a7d986038 R14: 00007f9a7d985fa0 R15: 00007fff04001598
[  477.335975][T22682]  </TASK>
[  477.546384][T22682] Mem-Info:
[  477.550259][T22682] active_anon:25272 inactive_anon:32787 isolated_anon:0
[  477.550259][T22682]  active_file:9295 inactive_file:20866 isolated_file:0
[  477.550259][T22682]  unevictable:0 dirty:203 writeback:0
[  477.550259][T22682]  slab_reclaimable:3074 slab_unreclaimable:45211
[  477.550259][T22682]  mapped:32090 shmem:39529 pagetables:4342
[  477.550259][T22682]  sec_pagetables:0 bounce:0
[  477.550259][T22682]  kernel_misc_reclaimable:0
[  477.550259][T22682]  free:1673361 free_pcp:11137 free_cma:0
[  477.610091][T22682] Node 0 active_anon:101204kB inactive_anon:131148kB active_file:37180kB inactive_file:83464kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:128360kB dirty:812kB writeback:0kB shmem:158116kB kernel_stack:5472kB pagetables:17368kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  477.661254][T22682] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  477.704895][T22682] lowmem_reserve[]: 0 2878 7857 7857
[  477.716461][T22682] Node 0 DMA32 free:2943904kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2947428kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:3524kB free_cma:0kB
[  477.757842][T22682] lowmem_reserve[]: 0 0 4978 4978
[  477.765944][T22682] Node 0 Normal free:3734180kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:101724kB inactive_anon:131148kB active_file:37180kB inactive_file:83464kB unevictable:0kB writepending:824kB zspages:0kB present:5242880kB managed:5098236kB mlocked:0kB bounce:0kB free_pcp:39372kB local_pcp:16828kB free_cma:0kB
[  477.806912][T22682] lowmem_reserve[]: 0 0 0 0
[  477.813909][T22682] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  477.829134][T22682] Node 0 DMA32: 2*4kB (M) 3*8kB (M) 6*16kB (M) 3*32kB (M) 3*64kB (M) 2*128kB (M) 1*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2943904kB
[  477.854993][T22682] Node 0 Normal: 5973*4kB (UM) 3218*8kB (UME) 1474*16kB (UME) 601*32kB (UME) 104*64kB (UME) 25*128kB (UME) 59*256kB (UME) 28*512kB (UME) 84*1024kB (UM) 213*2048kB (UM) 752*4096kB (UM) = 3734180kB
[  477.904543][T22682] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[  477.914291][T22682] 69745 total pagecache pages
[  477.921793][T22682] 33 pages in swap cache
[  477.929414][T22682] Free swap  = 164kB
[  477.935059][T22682] Total swap = 124996kB
[  477.941662][T22682] 2097051 pages RAM
[  477.948002][T22682] 0 pages HighMem/MovableOnly
[  477.955447][T22682] 81795 pages reserved
[  478.420538][T22705] lo speed is unknown, defaulting to 1000
[  479.624873][T22782] loop0: detected capacity change from 0 to 4096
[  479.648854][T22782] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  479.854197][T15001] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  480.190068][T22817] lo speed is unknown, defaulting to 1000
[  480.202317][T22821] loop9: detected capacity change from 0 to 512
[  480.261168][T22821] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  480.273870][T22821] ext4 filesystem being mounted at /937/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  480.644444][ T7526] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  480.781118][T22874] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6277'.
[  480.857854][T22874] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6277'.
[  481.453381][T22939] netlink: 'syz.6.6288': attribute type 5 has an invalid length.
[  482.005468][   T28] audit: type=1400 audit(1776489533.946:2340): avc:  denied  { bind } for  pid=22993 comm="syz.3.6299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  482.216833][T23011] lo speed is unknown, defaulting to 1000
[  482.923307][   T28] audit: type=1400 audit(1776489534.866:2341): avc:  denied  { bind } for  pid=23042 comm="syz.6.6318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  483.444799][T23082] syzkaller0: entered promiscuous mode
[  483.463994][T23082] syzkaller0: entered allmulticast mode
[  483.503462][T23086] loop9: detected capacity change from 0 to 256
[  483.539650][T23086] msdos: Unknown parameter 'jots'
[  483.627245][T23092] netlink: 'syz.4.6336': attribute type 1 has an invalid length.
[  483.700133][T23092] 8021q: adding VLAN 0 to HW filter on device bond7
[  483.734219][T23092] bond6: (slave bond7): making interface the new active one
[  483.742434][T23092] bond6: (slave bond7): Enslaving as an active interface with an up link
[  483.756157][T23098] bond6: (slave gretap1): Enslaving as a backup interface with an up link
[  483.766195][   T28] audit: type=1400 audit(1776489535.716:2342): avc:  denied  { unmount } for  pid=23097 comm="syz.3.6338" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  484.065750][T23114] 9p: Bad value for 'rfdno'
[  484.077876][   T28] audit: type=1400 audit(1776489536.026:2343): avc:  denied  { getopt } for  pid=23113 comm="syz.9.6343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  484.881730][T23135] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6349'.
[  485.618465][T23146] loop0: detected capacity change from 0 to 2048
[  485.712937][T23146] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  486.017689][T23146] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[  486.103481][T23146] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28
[  486.159151][T23146] EXT4-fs (loop0): This should not happen!! Data will be lost
[  486.159151][T23146] 
[  486.172900][T23146] EXT4-fs (loop0): Total free blocks count 0
[  486.231780][T23146] EXT4-fs (loop0): Free/Dirty block details
[  486.283087][T23146] EXT4-fs (loop0): free_blocks=66060288
[  486.298732][T23146] EXT4-fs (loop0): dirty_blocks=48
[  486.312400][T23146] EXT4-fs (loop0): Block reservation details
[  486.324859][T23146] EXT4-fs (loop0): i_reserved_data_blocks=3
[  486.359476][T15001] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  486.383324][T15001] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  486.804912][T23184] syzkaller0: entered promiscuous mode
[  486.810916][T23184] syzkaller0: entered allmulticast mode
[  486.924454][T23191] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  486.989353][T23200] netlink: 56 bytes leftover after parsing attributes in process `syz.9.6370'.
[  487.020710][   T28] audit: type=1326 audit(1776489538.966:2344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23203 comm="syz.6.6372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fa6a9c819 code=0x7ffc0000
[  487.046101][   T28] audit: type=1326 audit(1776489538.966:2345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23203 comm="syz.6.6372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fa6a9c819 code=0x7ffc0000
[  487.070131][   T28] audit: type=1326 audit(1776489538.996:2346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23203 comm="syz.6.6372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fa6a9c819 code=0x7ffc0000
[  487.093871][   T28] audit: type=1326 audit(1776489538.996:2347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23203 comm="syz.6.6372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fa6a9c819 code=0x7ffc0000
[  487.126853][   T28] audit: type=1326 audit(1776489538.996:2348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23203 comm="syz.6.6372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9fa6a9c819 code=0x7ffc0000
[  487.150663][   T28] audit: type=1326 audit(1776489538.996:2349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23203 comm="syz.6.6372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fa6a9c819 code=0x7ffc0000
[  487.176318][   T28] audit: type=1326 audit(1776489538.996:2350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23203 comm="syz.6.6372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fa6a9c819 code=0x7ffc0000
[  487.200575][   T28] audit: type=1326 audit(1776489538.996:2351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23203 comm="syz.6.6372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fa6a9c819 code=0x7ffc0000
[  487.232409][   T28] audit: type=1326 audit(1776489538.996:2352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23203 comm="syz.6.6372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7f9fa6a9c819 code=0x7ffc0000
[  487.256518][   T28] audit: type=1326 audit(1776489538.996:2353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23203 comm="syz.6.6372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fa6a9c819 code=0x7ffc0000
[  487.292088][T23212] loop4: detected capacity change from 0 to 512
[  487.305646][T23212] EXT4-fs (loop4): orphan cleanup on readonly fs
[  487.312844][T23212] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.6375: Failed to acquire dquot type 1
[  487.324802][T23212] loop4: lost filesystem error report for type 5 error -117
[  487.326188][T23212] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.6375: Failed to acquire dquot type 1
[  487.333587][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  487.333606][    C0] EXT4-fs (loop4): last error at time 1776489539: ext4_acquire_dquot:7034
[  487.344160][T23215] netlink: 'syz.9.6376': attribute type 1 has an invalid length.
[  487.350233][T23212] loop4: lost filesystem error report for type 5 error -117
[  487.368810][T23212] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.6375: bg 0: block 248: padding at end of block bitmap is not set
[  487.374283][T23215] 8021q: adding VLAN 0 to HW filter on device bond10
[  487.376409][T23212] loop4: lost filesystem error report for type 5 error -117
[  487.407160][T23215] vlan3: entered allmulticast mode
[  487.420085][T23215] bond10: entered allmulticast mode
[  487.427121][T23212] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  487.441767][T23215] bond10: (slave geneve3): making interface the new active one
[  487.449724][T23215] geneve3: entered allmulticast mode
[  487.457258][T23215] bond10: (slave geneve3): Enslaving as an active interface with an up link
[  487.467138][T23212] loop4: lost filesystem error report for type 5 error -117
[  487.467478][T23212] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.6375: Failed to acquire dquot type 1
[  487.468471][ T4462] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  487.496229][T23212] loop4: lost filesystem error report for type 5 error -117
[  487.496477][T23212] EXT4-fs (loop4): 1 orphan inode deleted
[  487.525725][ T4462] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  487.534384][ T4462] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  487.543968][ T4462] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  487.550989][T23212] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  487.628409][T23226] tipc: Failed to remove unknown binding: 66,2,2/0:3104490265/3104490269
[  487.683679][T15862] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  487.857231][T23241] netlink: 108 bytes leftover after parsing attributes in process `syz.0.6388'.
[  487.881845][T23247] loop4: detected capacity change from 0 to 1024
[  487.887008][T23241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6388'.
[  487.900770][T23247] EXT4-fs: Ignoring removed bh option
[  487.969092][T23247] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback.
[  488.001834][T23247] ext4 filesystem being mounted at /472/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  488.015239][T23254] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6391'.
[  488.041798][T23254] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6391'.
[  488.089723][T23257] EXT4-fs error (device loop4): ext4_free_blocks:6718: comm syz.4.6389: Freeing blocks not in datazone - block = 0, count = 16
[  488.104297][T23257] EXT4-fs (loop4): Remounting filesystem read-only
[  488.411311][T15862] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  488.800048][T23265] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6396'.
[  489.114234][T23277] loop4: detected capacity change from 0 to 512
[  489.190750][T23277] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  489.239438][T23277] ext4 filesystem being mounted at /473/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  489.319020][T23283] hub 8-0:1.0: USB hub found
[  489.333195][T23283] hub 8-0:1.0: 8 ports detected
[  490.367645][T23295] bridge6: entered promiscuous mode
[  490.379961][T23295] bridge6: entered allmulticast mode
[  490.701110][T15862] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  490.829676][T23304] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6412'.
[  490.898463][T23304] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=23304 comm=syz.6.6412
[  491.848525][T23317] loop0: detected capacity change from 0 to 512
[  491.892029][T23317] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  491.991538][T23317] EXT4-fs (loop0): 1 truncate cleaned up
[  492.022464][T23338] netlink: 'syz.3.6418': attribute type 12 has an invalid length.
[  492.023775][T23317] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  492.051673][T23325] loop4: detected capacity change from 0 to 256
[  492.097757][T23325] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  492.592058][T15001] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  492.678053][T23354] loop4: detected capacity change from 0 to 1024
[  492.705639][T23354] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  492.720434][T23354] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869)
[  492.734308][T23354] EXT4-fs error (device loop4): ext4_get_journal_inode:5896: comm syz.4.6422: inode #1: comm syz.4.6422: iget: illegal inode #
[  492.750133][T23354] loop4: lost filesystem error report for type 5 error -117
[  492.752464][T23354] EXT4-fs (loop4): no journal found
[  492.760691][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  492.760772][    C0] EXT4-fs (loop4): initial error at time 1776489544: ext4_get_journal_inode:5896
[  492.760959][    C0] EXT4-fs (loop4): last error at time 1776489544: ext4_get_journal_inode:5896
[  492.804235][T23354] EXT4-fs (loop4): can't get journal size
[  492.823461][T23354] EXT4-fs (loop4): failed to initialize system zone (-22)
[  492.844718][T23354] EXT4-fs (loop4): mount failed
[  492.865117][T23366] bond11: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  492.889432][T23366] bond11 (unregistering): Released all slaves
[  493.021251][T23376] xt_hashlimit: size too large, truncated to 1048576
[  493.081843][T23385] netlink: 763 bytes leftover after parsing attributes in process `syz.4.6433'.
[  493.222137][T23395] lo speed is unknown, defaulting to 1000
[  493.321052][   T28] kauditd_printk_skb: 374 callbacks suppressed
[  493.321069][   T28] audit: type=1400 audit(1776489545.266:2722): avc:  denied  { getopt } for  pid=23399 comm="syz.3.6438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  493.427423][T23409] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  493.527160][T23420] sch_tbf: burst 548 is lower than device syzkaller0 mtu (1500) !
[  493.548408][T23420] syzkaller0: entered promiscuous mode
[  493.563017][T23420] syzkaller0: entered allmulticast mode
[  493.600110][   T28] audit: type=1400 audit(1776489545.546:2723): avc:  denied  { create } for  pid=23423 comm="syz.4.6447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  493.634711][   T28] audit: type=1400 audit(1776489545.546:2724): avc:  denied  { bind } for  pid=23423 comm="syz.4.6447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  493.704434][   T28] audit: type=1400 audit(1776489545.646:2725): avc:  denied  { connect } for  pid=23428 comm="syz.0.6449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  494.135408][T23440] loop4: detected capacity change from 0 to 128
[  494.213902][T23440] syz.4.6453: attempt to access beyond end of device
[  494.213902][T23440] loop4: rw=2049, sector=145, nr_sectors = 16 limit=128
[  494.241040][T23440] syz.4.6453: attempt to access beyond end of device
[  494.241040][T23440] loop4: rw=2049, sector=169, nr_sectors = 8 limit=128
[  494.259204][T23440] syz.4.6453: attempt to access beyond end of device
[  494.259204][T23440] loop4: rw=2049, sector=185, nr_sectors = 8 limit=128
[  494.304107][T23440] syz.4.6453: attempt to access beyond end of device
[  494.304107][T23440] loop4: rw=2049, sector=201, nr_sectors = 8 limit=128
[  494.363744][T23442] lo speed is unknown, defaulting to 1000
[  494.366214][T23440] syz.4.6453: attempt to access beyond end of device
[  494.366214][T23440] loop4: rw=2049, sector=217, nr_sectors = 8 limit=128
[  494.388035][T23447] netlink: 'syz.9.6455': attribute type 1 has an invalid length.
[  494.388839][ T4431] kworker/u8:10: attempt to access beyond end of device
[  494.388839][ T4431] loop4: rw=1, sector=249, nr_sectors = 8 limit=128
[  494.411110][ T4431] kworker/u8:10: attempt to access beyond end of device
[  494.411110][ T4431] loop4: rw=1, sector=265, nr_sectors = 8 limit=128
[  494.426161][T23440] syz.4.6453: attempt to access beyond end of device
[  494.426161][T23440] loop4: rw=2049, sector=233, nr_sectors = 8 limit=128
[  494.440683][ T4431] kworker/u8:10: attempt to access beyond end of device
[  494.440683][ T4431] loop4: rw=1, sector=281, nr_sectors = 8 limit=128
[  494.454917][T23440] syz.4.6453: attempt to access beyond end of device
[  494.454917][T23440] loop4: rw=2049, sector=297, nr_sectors = 8 limit=128
[  494.482264][T23447] 8021q: adding VLAN 0 to HW filter on device bond11
[  494.534040][T23450] macvlan4: entered promiscuous mode
[  494.542526][T23450] macvlan4: entered allmulticast mode
[  494.557464][T23450] bond11: entered promiscuous mode
[  494.583943][T23450] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  494.604845][T23450] bond11: left promiscuous mode
[  494.620511][T23452] loop4: detected capacity change from 0 to 512
[  494.653813][T23452] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.6456: inode has both inline data and extents flags
[  494.672978][T23452] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  494.673362][T23452] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.6456: couldn't read orphan inode 15 (err -117)
[  494.682593][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  494.682614][    C0] EXT4-fs (loop4): initial error at time 1776489546: ext4_orphan_get:1397: inode 15
[  494.682644][    C0] EXT4-fs (loop4): last error at time 1776489546: ext4_orphan_get:1397: inode 15
[  494.722724][T23452] loop4: lost filesystem error report for type 5 error -117
[  494.723791][T23452] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  494.882098][T15862] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  495.041533][T23473] loop4: detected capacity change from 0 to 128
[  495.074468][T23473] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  495.120128][T23473] ext4 filesystem being mounted at /490/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  495.165812][T23478] netlink: 'syz.3.6464': attribute type 13 has an invalid length.
[  495.428165][T15862] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  495.704833][T23500] syz.6.6483 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  495.718247][T23500] xt_l2tp: v2 tid > 0xffff: 134217728
[  495.753227][T23503] lo speed is unknown, defaulting to 1000
[  496.514616][T23523] netlink: 277 bytes leftover after parsing attributes in process `syz.4.6481'.
[  496.555420][T23523] loop4: detected capacity change from 0 to 512
[  496.574167][T23523] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  496.615400][T23523] EXT4-fs (loop4): 1 truncate cleaned up
[  496.632790][T23523] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  496.681750][T15862] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  496.797936][   T28] audit: type=1400 audit(1776489548.746:2726): avc:  denied  { listen } for  pid=23535 comm="syz.9.6487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  496.847486][   T28] audit: type=1400 audit(1776489548.746:2727): avc:  denied  { accept } for  pid=23535 comm="syz.9.6487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  497.284005][T23550] loop0: detected capacity change from 0 to 128
[  497.627472][T23558] netlink: 'syz.6.6493': attribute type 11 has an invalid length.
[  499.226007][T23608] loop0: detected capacity change from 0 to 512
[  499.235858][T23608] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  499.253740][T23608] EXT4-fs error (device loop0): xattr_find_entry:337: inode #15: comm syz.0.6511: corrupted xattr entries
[  499.267424][T23608] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  499.268100][T23608] EXT4-fs (loop0): 1 truncate cleaned up
[  499.277336][    C1] EXT4-fs (loop0): error count since last fsck: 1
[  499.277360][    C1] EXT4-fs (loop0): initial error at time 1776489551: xattr_find_entry:337: inode 15
[  499.277399][    C1] EXT4-fs (loop0): last error at time 1776489551: xattr_find_entry:337: inode 15
[  499.308882][T23608] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  499.561962][T23612] syzkaller0: entered promiscuous mode
[  499.574410][T23612] syzkaller0: entered allmulticast mode
[  499.641460][T15001] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  500.631662][T23640] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  500.779125][T23639] loop9: detected capacity change from 0 to 4096
[  500.819191][T23639] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  501.121908][T23638] delete_channel: no stack
[  501.230389][ T7526] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  501.652238][T23654] 9p: Bad value for 'rfdno'
[  501.662619][T23654] xt_TPROXY: Can be used only with -p tcp or -p udp
[  503.610850][T23679] ipt_REJECT: TCP_RESET invalid for non-tcp
[  505.010852][T23719] loop9: detected capacity change from 0 to 512
[  505.057997][T23719] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  505.107604][T23719] ext4 filesystem being mounted at /997/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  505.176307][ T7526] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  505.289335][T23733] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6549'.
[  505.775227][T23705] delete_channel: no stack
[  506.370705][T23777] lo speed is unknown, defaulting to 1000
[  507.369373][T23795] loop9: detected capacity change from 0 to 1024
[  507.386612][T23795] EXT4-fs: Ignoring removed bh option
[  507.432128][T23795] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  507.666939][ T7526] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  507.876749][T23812] loop0: detected capacity change from 0 to 8192
[  508.697678][T23841] netlink: 'syz.6.6580': attribute type 1 has an invalid length.
[  508.740932][T23841] 8021q: adding VLAN 0 to HW filter on device bond8
[  508.789562][T23848] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  508.801378][T23841] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6580'.
[  508.826985][T23841] bond8: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms
[  508.869721][T23841] bond8: entered allmulticast mode
[  508.900159][T23841] bond8: (slave ip6gretap3): Enslaving as an active interface with an up link
[  509.165524][T23867] loop4: detected capacity change from 0 to 512
[  509.803694][T23884] syzkaller0: entered promiscuous mode
[  509.809598][T23884] syzkaller0: entered allmulticast mode
[  509.817889][T23884] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  509.826477][T23881] tipc: Resetting bearer <eth:syzkaller0>
[  509.841387][T23881] tipc: Disabling bearer <eth:syzkaller0>
[  510.530239][T23892] 8021q: VLANs not supported on bond0
[  510.542691][T23892] netlink: 14 bytes leftover after parsing attributes in process `syz.9.6597'.
[  513.019925][T23926] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6607'.
[  513.062269][T23926] bond9: entered promiscuous mode
[  513.076511][T23926] bond9: entered allmulticast mode
[  513.130870][T23928] lo speed is unknown, defaulting to 1000
[  513.145456][T23936] 9pnet_fd: p9_fd_create_tcp (23936): problem connecting socket to 127.0.0.1
[  513.208236][   T28] audit: type=1400 audit(1776489565.156:2728): avc:  denied  { create } for  pid=23939 comm="syz.3.6615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1
[  513.228343][T23936] 9pnet_fd: p9_fd_create_tcp (23936): problem connecting socket to 127.0.0.1
[  513.279798][T23936] 9pnet_fd: p9_fd_create_tcp (23936): problem connecting socket to 127.0.0.1
[  513.339047][T23936] 9pnet_fd: p9_fd_create_tcp (23936): problem connecting socket to 127.0.0.1
[  513.394834][T23936] 9pnet_fd: p9_fd_create_tcp (23936): problem connecting socket to 127.0.0.1
[  513.450649][T23936] 9pnet_fd: p9_fd_create_tcp (23936): problem connecting socket to 127.0.0.1
[  513.477377][T23936] 9pnet_fd: p9_fd_create_tcp (23936): problem connecting socket to 127.0.0.1
[  513.497937][T23936] 9pnet_fd: p9_fd_create_tcp (23936): problem connecting socket to 127.0.0.1
[  513.510970][T23936] 9pnet_fd: p9_fd_create_tcp (23936): problem connecting socket to 127.0.0.1
[  513.520840][T23936] 9pnet_fd: p9_fd_create_tcp (23936): problem connecting socket to 127.0.0.1
[  513.530830][T23936] 9pnet_fd: p9_fd_create_tcp (23936): problem connecting socket to 127.0.0.1
[  513.554182][T23936] 9pnet_fd: p9_fd_create_tcp (23936): problem connecting socket to 127.0.0.1
[  513.572335][T23936] 9pnet_fd: p9_fd_create_tcp (23936): problem connecting socket to 127.0.0.1
[  513.590891][T23936] 9pnet_fd: p9_fd_create_tcp (23936): problem connecting socket to 127.0.0.1
[  513.609589][T23936] 9pnet_fd: p9_fd_create_tcp (23936): problem connecting socket to 127.0.0.1
[  513.628220][T23936] 9pnet_fd: p9_fd_create_tcp (23936): problem connecting socket to 127.0.0.1
[  513.646460][T23936] 9pnet_fd: p9_fd_create_tcp (23936): problem connecting socket to 127.0.0.1
[  513.673268][T23936] 9pnet_fd: p9_fd_create_tcp (23936): problem connecting socket to 127.0.0.1
[  513.691851][T23936] 9pnet_fd: p9_fd_create_tcp (23936): problem connecting socket to 127.0.0.1
[  513.710681][T23936] 9pnet_fd: p9_fd_create_tcp (23936): problem connecting socket to 127.0.0.1
[  513.730101][T23936] 9pnet_fd: p9_fd_create_tcp (23936): problem connecting socket to 127.0.0.1
[  513.748522][T23936] 9pnet_fd: p9_fd_create_tcp (23936): problem connecting socket to 127.0.0.1
[  513.773604][T23936] 9pnet_fd: p9_fd_create_tcp (23936): problem connecting socket to 127.0.0.1
[  513.799500][T23936] 9pnet_fd: p9_fd_create_tcp (23936): problem connecting socket to 127.0.0.1
[  513.823127][T23936] 9pnet_fd: p9_fd_create_tcp (23936): problem connecting socket to 127.0.0.1
[  513.845231][T23936] 9pnet_fd: p9_fd_create_tcp (23936): problem connecting socket to 127.0.0.1
[  513.879084][T23936] 9pnet_fd: p9_fd_create_tcp (23936): problem connecting socket to 127.0.0.1
[  513.913481][T23936] 9pnet_fd: p9_fd_create_tcp (23936): problem connecting socket to 127.0.0.1
[  513.948802][T23936] 9pnet_fd: p9_fd_create_tcp (23936): problem connecting socket to 127.0.0.1
[  513.988566][T23936] 9pnet_fd: p9_fd_create_tcp (23936): problem connecting socket to 127.0.0.1
[  514.399328][T23964] wg2: entered promiscuous mode
[  514.414150][T23964] wg2: entered allmulticast mode
[  515.038533][T23987] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  515.174071][T23994] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6631'.
[  515.222949][T23994] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6631'.
[  515.422033][T23997] lo speed is unknown, defaulting to 1000
[  516.162561][T24016] syzkaller0: entered promiscuous mode
[  516.177404][T24016] syzkaller0: entered allmulticast mode
[  516.270576][T24019] vlan4: entered allmulticast mode
[  516.277403][T24019] bond0: entered allmulticast mode
[  516.284481][T24019] bond_slave_0: entered allmulticast mode
[  516.298582][T24019] bond_slave_1: entered allmulticast mode
[  516.323835][T24019] netlink: 14 bytes leftover after parsing attributes in process `syz.6.6641'.
[  516.348535][T24019] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  516.362101][T24019] bond_slave_0: left allmulticast mode
[  516.371656][T24019] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  516.386924][T24019] bond_slave_1: left allmulticast mode
[  516.394527][T24019] bond0 (unregistering): Released all slaves
[  517.344296][T24050] lo speed is unknown, defaulting to 1000
[  517.573824][T24056] loop0: detected capacity change from 0 to 512
[  517.609093][T24056] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  517.658478][T24056] EXT4-fs (loop0): 1 truncate cleaned up
[  517.694428][T24056] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  517.842249][T15001] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  518.087005][T24069] loop4: detected capacity change from 0 to 8192
[  518.277272][T24079] loop0: detected capacity change from 0 to 8192
[  518.492274][T24079] bridge0: entered promiscuous mode
[  518.503162][T24084] 9pnet_fd: p9_fd_create_tcp (24084): problem connecting socket to 127.0.0.1
[  519.053163][T24090] syz.3.6675: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0
[  519.094204][T24090] CPU: 1 UID: 0 PID: 24090 Comm: syz.3.6675 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  519.094243][T24090] Tainted: [W]=WARN
[  519.094253][T24090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  519.094271][T24090] Call Trace:
[  519.094280][T24090]  <TASK>
[  519.094289][T24090]  __dump_stack+0x1d/0x30
[  519.094340][T24090]  dump_stack_lvl+0x95/0xd0
[  519.094367][T24090]  dump_stack+0x15/0x1b
[  519.094391][T24090]  warn_alloc+0x145/0x1c0
[  519.094421][T24090]  ? futex_unqueue+0xc5/0xf0
[  519.094528][T24090]  __vmalloc_node_range_noprof+0xa5/0x11c0
[  519.094584][T24090]  ? __pfx_futex_wake_mark+0x10/0x10
[  519.094622][T24090]  ? __rcu_read_unlock+0x4e/0x70
[  519.094657][T24090]  ? avc_has_perm_noaudit+0xab/0x130
[  519.094756][T24090]  ? should_fail_ex+0x30/0x280
[  519.094800][T24090]  vmalloc_user_noprof+0x7d/0xb0
[  519.094834][T24090]  ? xskq_create+0x80/0xe0
[  519.094868][T24090]  xskq_create+0x80/0xe0
[  519.094908][T24090]  xsk_init_queue+0x70/0xb0
[  519.095022][T24090]  xsk_setsockopt+0x3f5/0x640
[  519.095065][T24090]  ? __pfx_xsk_setsockopt+0x10/0x10
[  519.095113][T24090]  __sys_setsockopt+0x184/0x200
[  519.095159][T24090]  __x64_sys_setsockopt+0x64/0x80
[  519.095300][T24090]  x64_sys_call+0x2327/0x3020
[  519.095342][T24090]  do_syscall_64+0x12c/0x3b0
[  519.095391][T24090]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  519.095470][T24090] RIP: 0033:0x7fc67393c819
[  519.095492][T24090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  519.095539][T24090] RSP: 002b:00007fc672397028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  519.095565][T24090] RAX: ffffffffffffffda RBX: 00007fc673bb5fa0 RCX: 00007fc67393c819
[  519.095584][T24090] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004
[  519.095612][T24090] RBP: 00007fc6739d2c91 R08: 0000000000000004 R09: 0000000000000000
[  519.095648][T24090] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  519.095666][T24090] R13: 00007fc673bb6038 R14: 00007fc673bb5fa0 R15: 00007fff7fd4baa8
[  519.095688][T24090]  </TASK>
[  519.305539][T24090] Mem-Info:
[  519.308777][T24090] active_anon:24844 inactive_anon:15807 isolated_anon:0
[  519.308777][T24090]  active_file:9405 inactive_file:20726 isolated_file:0
[  519.308777][T24090]  unevictable:0 dirty:275 writeback:0
[  519.308777][T24090]  slab_reclaimable:3124 slab_unreclaimable:83550
[  519.308777][T24090]  mapped:29595 shmem:20952 pagetables:4344
[  519.308777][T24090]  sec_pagetables:0 bounce:0
[  519.308777][T24090]  kernel_misc_reclaimable:0
[  519.308777][T24090]  free:1654012 free_pcp:9500 free_cma:0
[  519.377363][T24090] Node 0 active_anon:101116kB inactive_anon:63228kB active_file:37620kB inactive_file:82904kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:120236kB dirty:1100kB writeback:0kB shmem:85664kB kernel_stack:5488kB pagetables:17376kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  519.457401][T24090] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  519.494547][T24090] lowmem_reserve[]: 0 2878 7857 7857
[  519.512644][T24090] Node 0 DMA32 free:2943904kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2947428kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:3524kB free_cma:0kB
[  519.575466][T24090] lowmem_reserve[]: 0 0 4978 4978
[  519.585222][T24090] Node 0 Normal free:3656784kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:106800kB inactive_anon:63228kB active_file:37620kB inactive_file:82904kB unevictable:0kB writepending:1100kB zspages:0kB present:5242880kB managed:5098236kB mlocked:0kB bounce:0kB free_pcp:26844kB local_pcp:12288kB free_cma:0kB
[  519.675376][T24090] lowmem_reserve[]: 0 0 0 0
[  519.688424][T24090] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  519.717645][T24090] Node 0 DMA32: 2*4kB (M) 3*8kB (M) 6*16kB (M) 3*32kB (M) 3*64kB (M) 2*128kB (M) 1*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2943904kB
[  519.753666][T24090] Node 0 Normal: 490*4kB (UME) 1955*8kB (UME) 2251*16kB (UME) 1421*32kB (UME) 611*64kB (UME) 271*128kB (UM) 107*256kB (UME) 41*512kB (UME) 93*1024kB (UM) 217*2048kB (UM) 707*4096kB (UM) = 3656784kB
[  519.796963][T24090] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[  519.816188][T24090] 53747 total pagecache pages
[  519.826242][T24090] 33 pages in swap cache
[  519.837452][T24090] Free swap  = 164kB
[  519.846014][T24090] Total swap = 124996kB
[  519.855416][T24090] 2097051 pages RAM
[  519.864374][T24090] 0 pages HighMem/MovableOnly
[  519.877602][T24090] 81795 pages reserved
[  520.053344][T24101] wg2: entered promiscuous mode
[  520.063441][T24101] wg2: entered allmulticast mode
[  520.431276][T24113] netlink: 'syz.6.6672': attribute type 1 has an invalid length.
[  520.442838][T24113] netlink: 'syz.6.6672': attribute type 4 has an invalid length.
[  520.454588][T24113] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.6672'.
[  520.568420][T24119] 9pnet_fd: p9_fd_create_tcp (24119): problem connecting socket to 127.0.0.1
[  520.601357][T24119] 9pnet_fd: p9_fd_create_tcp (24119): problem connecting socket to 127.0.0.1
[  520.645273][T24119] 9pnet_fd: p9_fd_create_tcp (24119): problem connecting socket to 127.0.0.1
[  520.677941][T24119] 9pnet_fd: p9_fd_create_tcp (24119): problem connecting socket to 127.0.0.1
[  520.697734][T24119] 9pnet_fd: p9_fd_create_tcp (24119): problem connecting socket to 127.0.0.1
[  520.707827][T24119] 9pnet_fd: p9_fd_create_tcp (24119): problem connecting socket to 127.0.0.1
[  520.718499][T24119] 9pnet_fd: p9_fd_create_tcp (24119): problem connecting socket to 127.0.0.1
[  520.729394][T24119] 9pnet_fd: p9_fd_create_tcp (24119): problem connecting socket to 127.0.0.1
[  520.739021][T24119] 9pnet_fd: p9_fd_create_tcp (24119): problem connecting socket to 127.0.0.1
[  520.748600][T24119] 9pnet_fd: p9_fd_create_tcp (24119): problem connecting socket to 127.0.0.1
[  520.758335][T24119] 9pnet_fd: p9_fd_create_tcp (24119): problem connecting socket to 127.0.0.1
[  520.767918][T24119] 9pnet_fd: p9_fd_create_tcp (24119): problem connecting socket to 127.0.0.1
[  520.777571][T24119] 9pnet_fd: p9_fd_create_tcp (24119): problem connecting socket to 127.0.0.1
[  520.786900][T24119] 9pnet_fd: p9_fd_create_tcp (24119): problem connecting socket to 127.0.0.1
[  520.796588][T24119] 9pnet_fd: p9_fd_create_tcp (24119): problem connecting socket to 127.0.0.1
[  520.813288][T24119] 9pnet_fd: p9_fd_create_tcp (24119): problem connecting socket to 127.0.0.1
[  520.817444][T24121] loop4: detected capacity change from 0 to 512
[  520.832893][T24119] 9pnet_fd: p9_fd_create_tcp (24119): problem connecting socket to 127.0.0.1
[  520.853199][T24119] 9pnet_fd: p9_fd_create_tcp (24119): problem connecting socket to 127.0.0.1
[  520.872234][T24121] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  520.884164][T24119] 9pnet_fd: p9_fd_create_tcp (24119): problem connecting socket to 127.0.0.1
[  520.894033][T24119] 9pnet_fd: p9_fd_create_tcp (24119): problem connecting socket to 127.0.0.1
[  520.910698][T24119] 9pnet_fd: p9_fd_create_tcp (24119): problem connecting socket to 127.0.0.1
[  520.927260][T24121] EXT4-fs (loop4): 1 truncate cleaned up
[  520.933268][T24119] 9pnet_fd: p9_fd_create_tcp (24119): problem connecting socket to 127.0.0.1
[  520.934209][T24119] 9pnet_fd: p9_fd_create_tcp (24119): problem connecting socket to 127.0.0.1
[  520.935934][T24119] 9pnet_fd: p9_fd_create_tcp (24119): problem connecting socket to 127.0.0.1
[  520.964082][T24121] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  521.006026][T24119] 9pnet_fd: p9_fd_create_tcp (24119): problem connecting socket to 127.0.0.1
[  521.031313][T24119] 9pnet_fd: p9_fd_create_tcp (24119): problem connecting socket to 127.0.0.1
[  521.061553][T15862] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  521.073552][T24119] 9pnet_fd: p9_fd_create_tcp (24119): problem connecting socket to 127.0.0.1
[  521.125929][T24119] 9pnet_fd: p9_fd_create_tcp (24119): problem connecting socket to 127.0.0.1
[  521.140764][T24119] 9pnet_fd: p9_fd_create_tcp (24119): problem connecting socket to 127.0.0.1
[  521.161621][T24134] lo speed is unknown, defaulting to 1000
[  521.172205][T24119] 9pnet_fd: p9_fd_create_tcp (24119): problem connecting socket to 127.0.0.1
[  521.200130][T24119] 9pnet_fd: p9_fd_create_tcp (24119): problem connecting socket to 127.0.0.1
[  521.217892][T24119] 9pnet_fd: p9_fd_create_tcp (24119): problem connecting socket to 127.0.0.1
[  521.230691][T24143] loop0: detected capacity change from 0 to 512
[  521.247817][T24119] 9pnet_fd: p9_fd_create_tcp (24119): problem connecting socket to 127.0.0.1
[  521.271414][T24119] 9pnet_fd: p9_fd_create_tcp (24119): problem connecting socket to 127.0.0.1
[  521.281174][T24143] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  521.299552][T24143] ext4 filesystem being mounted at /574/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  521.310727][T24119] 9pnet_fd: p9_fd_create_tcp (24119): problem connecting socket to 127.0.0.1
[  521.325391][T24119] 9pnet_fd: p9_fd_create_tcp (24119): problem connecting socket to 127.0.0.1
[  521.334830][T24119] 9pnet_fd: p9_fd_create_tcp (24119): problem connecting socket to 127.0.0.1
[  521.344304][T24119] 9pnet_fd: p9_fd_create_tcp (24119): problem connecting socket to 127.0.0.1
[  521.353867][T24119] 9pnet_fd: p9_fd_create_tcp (24119): problem connecting socket to 127.0.0.1
[  521.363476][T24119] 9pnet_fd: p9_fd_create_tcp (24119): problem connecting socket to 127.0.0.1
[  521.376066][T24119] 9pnet_fd: p9_fd_create_tcp (24119): problem connecting socket to 127.0.0.1
[  521.385868][T24119] 9pnet_fd: p9_fd_create_tcp (24119): problem connecting socket to 127.0.0.1
[  521.395340][T24119] 9pnet_fd: p9_fd_create_tcp (24119): problem connecting socket to 127.0.0.1
[  521.404783][T24119] 9pnet_fd: p9_fd_create_tcp (24119): problem connecting socket to 127.0.0.1
[  521.414175][T24119] 9pnet_fd: p9_fd_create_tcp (24119): problem connecting socket to 127.0.0.1
[  521.423850][T24119] 9pnet_fd: p9_fd_create_tcp (24119): problem connecting socket to 127.0.0.1
[  521.433395][T24119] 9pnet_fd: p9_fd_create_tcp (24119): problem connecting socket to 127.0.0.1
[  521.459281][T24119] 9pnet_fd: p9_fd_create_tcp (24119): problem connecting socket to 127.0.0.1
[  521.490729][T24119] 9pnet_fd: p9_fd_create_tcp (24119): problem connecting socket to 127.0.0.1
[  521.524573][T24119] 9pnet_fd: p9_fd_create_tcp (24119): problem connecting socket to 127.0.0.1
[  521.562724][T24119] 9pnet_fd: p9_fd_create_tcp (24119): problem connecting socket to 127.0.0.1
[  521.597539][T15001] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  521.704055][T24157] netlink: 'syz.9.6689': attribute type 5 has an invalid length.
[  522.155578][T24174] lo speed is unknown, defaulting to 1000
[  522.708795][T24184] netlink: 'syz.9.6698': attribute type 1 has an invalid length.
[  522.730291][T24184] netlink: 'syz.9.6698': attribute type 4 has an invalid length.
[  522.744369][T24184] netlink: 9462 bytes leftover after parsing attributes in process `syz.9.6698'.
[  522.943604][T24192] loop9: detected capacity change from 0 to 512
[  522.972625][T24192] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  523.033731][T14787] syz1: Port: 1 Link ACTIVE
[  523.082944][ T7526] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  524.436824][T24246] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  526.193595][T24314] wg2: entered promiscuous mode
[  526.200350][T24314] wg2: entered allmulticast mode
[  527.755988][T24355] syzkaller0: entered promiscuous mode
[  527.766502][T24355] syzkaller0: entered allmulticast mode
[  528.439959][T24361] loop9: detected capacity change from 0 to 512
[  528.486621][T24361] EXT4-fs (loop9): orphan cleanup on readonly fs
[  528.515489][T24361] Quota error (device loop9): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[  528.558230][T24361] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota
[  528.577381][T24361] EXT4-fs error (device loop9): ext4_acquire_dquot:7034: comm syz.9.6765: Failed to acquire dquot type 1
[  528.598949][T24361] loop9: lost filesystem error report for type 5 error -117
[  528.600451][T24361] Quota error (device loop9): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[  528.607837][    C1] EXT4-fs (loop9): error count since last fsck: 1
[  528.607859][    C1] EXT4-fs (loop9): last error at time 1776489580: ext4_acquire_dquot:7034
[  528.635891][T24361] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota
[  528.646146][T24361] EXT4-fs error (device loop9): ext4_acquire_dquot:7034: comm syz.9.6765: Failed to acquire dquot type 1
[  528.657542][T24361] loop9: lost filesystem error report for type 5 error -117
[  528.660901][T24361] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.6765: bg 0: block 248: padding at end of block bitmap is not set
[  528.712453][T24361] loop9: lost filesystem error report for type 5 error -117
[  528.712803][T24361] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  528.747379][T24361] loop9: lost filesystem error report for type 5 error -117
[  528.747872][T24361] Quota error (device loop9): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[  528.777392][T24361] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota
[  528.797387][T24361] EXT4-fs error (device loop9): ext4_acquire_dquot:7034: comm syz.9.6765: Failed to acquire dquot type 1
[  528.817798][T24361] loop9: lost filesystem error report for type 5 error -117
[  528.818008][T24361] EXT4-fs (loop9): 1 orphan inode deleted
[  528.878001][T24361] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  529.002767][T24371] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6759'.
[  529.077144][ T7526] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  530.993113][T24395] lo speed is unknown, defaulting to 1000
[  531.434400][T24407] loop4: detected capacity change from 0 to 1024
[  531.446605][T24403] loop9: detected capacity change from 0 to 8192
[  531.465608][T24407] EXT4-fs: Ignoring removed nobh option
[  531.473693][T24407] EXT4-fs: Ignoring removed nomblk_io_submit option
[  531.510266][T24407] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  531.544630][T24405] loop0: detected capacity change from 0 to 256
[  531.612376][T24405] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  531.848258][T24405] syz_tun: entered promiscuous mode
[  532.199547][T24418] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6773'.
[  532.533777][T15862] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  533.665118][T24443] bond1: entered allmulticast mode
[  533.687911][T24443] vti0: entered allmulticast mode
[  533.701555][T24441] bond1: left allmulticast mode
[  533.711201][T24445] hub 8-0:1.0: USB hub found
[  533.713471][T24441] vti0: left allmulticast mode
[  533.736613][T24445] hub 8-0:1.0: 8 ports detected
[  534.181540][T24448] lo speed is unknown, defaulting to 1000
[  534.898544][T24465] netlink: 'syz.4.6784': attribute type 1 has an invalid length.
[  534.939577][T24460] syzkaller0: entered promiscuous mode
[  534.957812][T24460] syzkaller0: entered allmulticast mode
[  535.067710][T24465] 8021q: adding VLAN 0 to HW filter on device bond8
[  535.133514][T24465] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6784'.
[  535.216739][T24468] bond8: (slave veth17): Enslaving as an active interface with a down link
[  535.254355][T24469] bond8: (slave dummy0): making interface the new active one
[  535.305591][T24469] dummy0: entered promiscuous mode
[  535.338752][T24469] bond8: (slave dummy0): Enslaving as an active interface with an up link
[  535.386527][T24465] bond8: (slave dummy0): Releasing active interface
[  535.397886][T24465] dummy0 (unregistering): left promiscuous mode
[  535.595888][T24478] loop9: detected capacity change from 0 to 512
[  535.620825][T24478] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  535.674570][T24478] EXT4-fs (loop9): 1 truncate cleaned up
[  535.689886][T24478] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  536.060973][ T7526] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  536.249057][T24488] loop9: detected capacity change from 0 to 512
[  536.265500][T24488] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  536.291499][T24488] EXT4-fs (loop9): 1 truncate cleaned up
[  536.303412][T24488] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  536.556742][ T7526] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  536.924095][T24515] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  536.935630][T24515] bond0 (unregistering): Released all slaves
[  536.948123][T24518] netlink: 'syz.9.6816': attribute type 1 has an invalid length.
[  536.969800][T24518] 8021q: adding VLAN 0 to HW filter on device bond12
[  536.994930][T24518] bond12: (slave veth15): Enslaving as an active interface with a down link
[  537.029964][T24518] bond12: (slave dummy0): making interface the new active one
[  537.048326][T24518] dummy0: entered promiscuous mode
[  537.053909][T24518] bond12: (slave dummy0): Enslaving as an active interface with an up link
[  537.069120][T24518] netlink: 14 bytes leftover after parsing attributes in process `syz.9.6816'.
[  537.081207][T24518] bond12: (slave dummy0): Releasing active interface
[  537.088427][T24518] dummy0 (unregistering): left promiscuous mode
[  538.363799][T24536] loop4: detected capacity change from 0 to 256
[  538.458287][T24535] loop0: detected capacity change from 0 to 512
[  538.484215][T24535] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  539.482356][T24535] EXT4-fs (loop0): 1 truncate cleaned up
[  540.456399][T24535] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  540.636658][T15001] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  540.730641][T24564] Cannot find del_set index 0 as target
[  540.989258][T24578] xt_l2tp: v2 tid > 0xffff: 134217728
[  541.057718][T24566] bridge5: entered promiscuous mode
[  541.069052][T24566] bridge5: entered allmulticast mode
[  541.829515][T24613] netlink: 'syz.6.6838': attribute type 13 has an invalid length.
[  541.892925][T24617] netlink: 'syz.9.6840': attribute type 1 has an invalid length.
[  541.905179][T24613] bridge0: entered promiscuous mode
[  541.915790][T24613] 8021q: adding VLAN 0 to HW filter on device team0
[  541.926342][T24613] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  541.951147][T24617] 8021q: adding VLAN 0 to HW filter on device bond13
[  541.990612][T24623] vlan4: entered allmulticast mode
[  542.009535][T24623] bond13: entered allmulticast mode
[  542.136811][   T28] audit: type=1326 audit(1776489594.076:2729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24642 comm="syz.6.6851" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9fa6a9c819 code=0x0
[  542.204209][T24644] syzkaller0: entered promiscuous mode
[  542.209844][T24644] syzkaller0: entered allmulticast mode
[  542.285113][T24657] netlink: 'syz.0.6853': attribute type 1 has an invalid length.
[  542.315696][T24657] bond6: (slave bridge6): Enslaving as a backup interface with an up link
[  542.331453][T24657] macvlan2: entered promiscuous mode
[  542.336879][T24657] macvlan2: entered allmulticast mode
[  542.343348][T24657] bond6: entered promiscuous mode
[  542.357384][T24657] bridge6: entered promiscuous mode
[  542.374708][T24657] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  542.382385][T24663] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6855'.
[  542.393183][T24657] bond6: left promiscuous mode
[  542.398426][T24657] bridge6: left promiscuous mode
[  542.508518][T24675] loop9: detected capacity change from 0 to 256
[  542.531068][T24675] loop9: detected capacity change from 0 to 764
[  542.544030][T24675] iso9660: Unknown parameter 'ÿÿÿ'
[  542.598600][T24682] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6858'.
[  542.798623][T24684] lo speed is unknown, defaulting to 1000
[  542.902210][   T28] audit: type=1400 audit(1776489594.846:2730): avc:  denied  { accept } for  pid=24683 comm="syz.9.6863" path="socket:[83157]" dev="sockfs" ino=83157 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  542.990943][T24692] syzkaller0: entered promiscuous mode
[  542.996587][T24692] syzkaller0: entered allmulticast mode
[  543.077791][T24694] lo speed is unknown, defaulting to 1000
[  543.151067][T24703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  543.162342][T24703] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  543.175077][T24703] netlink: 'syz.9.6869': attribute type 4 has an invalid length.
[  543.289559][T24705] ipt_REJECT: TCP_RESET invalid for non-tcp
[  543.360849][   T28] audit: type=1400 audit(1776489595.306:2731): avc:  denied  { kexec_image_load } for  pid=24710 comm="syz.0.6872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[  543.773849][T24715] lo speed is unknown, defaulting to 1000
[  544.195812][T24721] lo speed is unknown, defaulting to 1000
[  544.439755][T24727] syzkaller0: entered promiscuous mode
[  544.453405][T24727] syzkaller0: entered allmulticast mode
[  544.715379][T24711] kexec: Could not allocate control_code_buffer
[  544.907437][T24750] Cannot find add_set index 0 as target
[  544.924724][T24750] netlink: 'syz.0.6885': attribute type 4 has an invalid length.
[  544.936173][T24750] netlink: 'syz.0.6885': attribute type 4 has an invalid length.
[  545.045540][T24754] loop0: detected capacity change from 0 to 128
[  545.188882][T24754] FAT-fs (loop0): FAT read failed (blocknr 128)
[  545.670314][   T28] audit: type=1400 audit(1776489597.606:2732): avc:  denied  { append } for  pid=24763 comm="syz.4.6891" name="mISDNtimer" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  545.709030][T24764] netlink: 'syz.4.6891': attribute type 11 has an invalid length.
[  545.797595][T24788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6898'.
[  545.808984][T24788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6898'.
[  545.827134][T24788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6898'.
[  545.842770][T24788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6898'.
[  545.854049][T24788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6898'.
[  545.864726][T24795] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2573 sclass=netlink_route_socket pid=24795 comm=syz.0.6898
[  545.903507][T24799] netlink: 'syz.3.6912': attribute type 4 has an invalid length.
[  546.042154][T24808] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  546.717095][T24829] syzkaller0: entered promiscuous mode
[  546.723550][T24829] syzkaller0: entered allmulticast mode
[  546.858227][T24839] loop0: detected capacity change from 0 to 512
[  546.892408][T24839] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  546.951147][T24839] ext4 filesystem being mounted at /615/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  547.761521][T15001] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  547.907244][T24881] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6940'.
[  547.952194][T24888] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  547.986486][T24890] netlink: 'syz.4.6932': attribute type 6 has an invalid length.
[  547.997079][T24890] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6932'.
[  548.286183][T24903] netlink: 116376 bytes leftover after parsing attributes in process `syz.9.6933'.
[  548.295747][T24903] netlink: zone id is out of range
[  549.695742][T24927] syzkaller0: entered promiscuous mode
[  549.721616][T24927] syzkaller0: entered allmulticast mode
[  550.326036][T24954] loop4: detected capacity change from 0 to 256
[  550.350026][   T28] audit: type=1400 audit(1776489602.296:2733): avc:  denied  { watch } for  pid=24953 comm="syz.4.6955" path="/syzcgroup/unified/syz4" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1
[  550.385215][   T28] audit: type=1400 audit(1776489602.326:2734): avc:  denied  { watch_reads } for  pid=24953 comm="syz.4.6955" path="/syzcgroup/unified/syz4" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1
[  550.445983][T24959] netlink: 14 bytes leftover after parsing attributes in process `syz.6.6957'.
[  550.463395][T24956] GUP no longer grows the stack in syz.3.6956 (24956): 200000009000-20000000a000 (200000005000)
[  550.474202][T24956] CPU: 1 UID: 0 PID: 24956 Comm: syz.3.6956 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  550.474249][T24956] Tainted: [W]=WARN
[  550.474259][T24956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  550.474281][T24956] Call Trace:
[  550.474290][T24956]  <TASK>
[  550.474301][T24956]  __dump_stack+0x1d/0x30
[  550.474342][T24956]  dump_stack_lvl+0x95/0xd0
[  550.474377][T24956]  dump_stack+0x15/0x1b
[  550.474410][T24956]  __get_user_pages+0x1b26/0x1f10
[  550.474488][T24956]  ? merge_sched_in+0x5d4/0xbb0
[  550.474520][T24956]  __gup_longterm_locked+0x8d7/0xe30
[  550.474563][T24956]  ? visit_groups_merge+0xf7e/0xfd0
[  550.474643][T24956]  ? __rcu_read_lock+0x36/0x50
[  550.474676][T24956]  ? try_grab_folio_fast+0x208/0x5a0
[  550.474721][T24956]  ? __pte_offset_map+0xef/0x150
[  550.474754][T24956]  gup_fast_fallback+0x1f2/0x1410
[  550.474849][T24956]  get_user_pages_fast+0x5f/0x90
[  550.474893][T24956]  __iov_iter_get_pages_alloc+0x24c/0x640
[  550.474974][T24956]  iov_iter_get_pages2+0x5e/0xa0
[  550.475024][T24956]  __se_sys_vmsplice+0x50b/0x1050
[  550.475074][T24956]  ? futex_wake+0x31b/0x380
[  550.475129][T24956]  __x64_sys_vmsplice+0x55/0x70
[  550.475229][T24956]  x64_sys_call+0x28e9/0x3020
[  550.475269][T24956]  do_syscall_64+0x12c/0x3b0
[  550.475320][T24956]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  550.475395][T24956] RIP: 0033:0x7fc67393c819
[  550.475418][T24956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  550.475448][T24956] RSP: 002b:00007fc672397028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  550.475476][T24956] RAX: ffffffffffffffda RBX: 00007fc673bb5fa0 RCX: 00007fc67393c819
[  550.475500][T24956] RDX: 0000000000000002 RSI: 0000200000000280 RDI: 0000000000000005
[  550.475544][T24956] RBP: 00007fc6739d2c91 R08: 0000000000000000 R09: 0000000000000000
[  550.475563][T24956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  550.475612][T24956] R13: 00007fc673bb6038 R14: 00007fc673bb5fa0 R15: 00007fff7fd4baa8
[  550.475641][T24956]  </TASK>
[  550.692479][   T28] audit: type=1400 audit(1776489602.636:2735): avc:  denied  { read } for  pid=24960 comm="syz.4.6958" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  550.716702][   T28] audit: type=1400 audit(1776489602.636:2736): avc:  denied  { open } for  pid=24960 comm="syz.4.6958" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  550.741957][   T28] audit: type=1400 audit(1776489602.636:2737): avc:  denied  { ioctl } for  pid=24960 comm="syz.4.6958" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9378 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  550.836215][T24971] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6962'.
[  550.853339][T24971] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6962'.
[  550.863090][T24971] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6962'.
[  550.872853][T24971] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6962'.
[  550.882898][T24971] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6962'.
[  550.896637][T24971] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2573 sclass=netlink_route_socket pid=24971 comm=syz.3.6962
[  550.920254][T24974] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6963'.
[  550.952152][T24978] netlink: 'syz.4.6965': attribute type 1 has an invalid length.
[  552.034162][T25031] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  552.099205][T25031] netlink: 'syz.4.6983': attribute type 4 has an invalid length.
[  552.137819][T25031] netlink: 'syz.4.6983': attribute type 4 has an invalid length.
[  552.530960][T25046] loop9: detected capacity change from 0 to 736
[  552.541310][T25046] iso9660: Unknown parameter 'blouø†õx0000000000000400'
[  552.569736][T25046] batadv_slave_0: entered promiscuous mode
[  552.608679][T25045] batadv_slave_0: left promiscuous mode
[  553.191499][T25062] loop9: detected capacity change from 0 to 128
[  553.223591][T25062] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  553.242817][T25062] ext4 filesystem being mounted at /1089/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  553.409798][ T7526] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  553.474572][T25071] __nla_validate_parse: 5 callbacks suppressed
[  553.474587][T25071] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6994'.
[  553.501571][T25073] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6998'.
[  553.541955][T25071] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2573 sclass=netlink_route_socket pid=25071 comm=syz.9.6994
[  553.573790][T25076] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6999'.
[  553.591669][T25073] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=25073 comm=syz.0.6998
[  555.059527][T25119] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25119 comm=syz.0.7016
[  555.596625][   T28] audit: type=1400 audit(1776489607.536:2738): avc:  denied  { write } for  pid=25116 comm="syz.9.7015" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  555.771219][T25134] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7021'.
[  555.797788][   T28] audit: type=1400 audit(1776489607.726:2739): avc:  denied  { associate } for  pid=25135 comm="syz.9.7022" name="3" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  556.330653][T25137] bond0: (slave gretap0): Enslaving as an active interface with an up link
[  556.384178][T25146] netlink: 'syz.4.7024': attribute type 1 has an invalid length.
[  556.641193][   T28] audit: type=1400 audit(1776489608.486:2740): avc:  denied  { getopt } for  pid=25161 comm="syz.4.7031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  556.806267][T25176] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7028'.
[  556.815385][T25176] netlink: 2 bytes leftover after parsing attributes in process `syz.3.7028'.
[  556.824543][T25176] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7028'.
[  556.833824][T25176] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7028'.
[  556.843015][T25176] netlink: 2 bytes leftover after parsing attributes in process `syz.3.7028'.
[  556.852318][T25176] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7028'.
[  557.902444][   T28] audit: type=1400 audit(1776489609.846:2741): avc:  denied  { ioctl } for  pid=25186 comm="syz.4.7040" path="socket:[85014]" dev="sockfs" ino=85014 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  558.397136][T25206] batadv_slave_0: Caught tx_queue_len zero misconfig
[  558.541055][T25211] __nla_validate_parse: 24 callbacks suppressed
[  558.541083][T25211] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7049'.
[  558.676140][   T28] audit: type=1400 audit(1776489610.616:2742): avc:  denied  { nlmsg_write } for  pid=25219 comm="syz.4.7052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[  558.781812][T25224] IPVS: lblc: FWM 3 0x00000003 - no destination available
[  559.211531][T25243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7063'.
[  559.245280][T25243] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7063'.
[  559.269369][T25243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7063'.
[  560.798084][ T3395] hid-generic 0000:0000:000E.0009: unknown main item tag 0x0
[  560.815884][ T3395] hid-generic 0000:0000:000E.0009: unknown main item tag 0x0
[  560.834144][ T3395] hid-generic 0000:0000:000E.0009: unknown main item tag 0x0
[  560.847362][ T3395] hid-generic 0000:0000:000E.0009: unknown main item tag 0x0
[  560.859770][ T3395] hid-generic 0000:0000:000E.0009: unknown main item tag 0x0
[  560.878966][ T3395] hid-generic 0000:0000:000E.0009: unknown main item tag 0x0
[  560.896676][ T3395] hid-generic 0000:0000:000E.0009: unknown main item tag 0x0
[  560.910704][ T3395] hid-generic 0000:0000:000E.0009: unknown main item tag 0x0
[  560.926359][ T3395] hid-generic 0000:0000:000E.0009: unknown main item tag 0x0
[  560.934185][ T3395] hid-generic 0000:0000:000E.0009: unknown main item tag 0x0
[  560.942424][ T3395] hid-generic 0000:0000:000E.0009: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  560.992785][T25293] fido_id[25293]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  561.052548][   T28] audit: type=1326 audit(1776489612.996:2743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25300 comm="syz.4.7083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a7d70c819 code=0x7ffc0000
[  561.107411][   T28] audit: type=1326 audit(1776489612.996:2744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25300 comm="syz.4.7083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a7d70c819 code=0x7ffc0000
[  561.134749][   T28] audit: type=1326 audit(1776489613.016:2745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25300 comm="syz.4.7083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a7d70c819 code=0x7ffc0000
[  561.162453][   T28] audit: type=1326 audit(1776489613.026:2746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25300 comm="syz.4.7083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a7d70c819 code=0x7ffc0000
[  561.186450][   T28] audit: type=1326 audit(1776489613.026:2747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25300 comm="syz.4.7083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f9a7d70c819 code=0x7ffc0000
[  561.215590][   T28] audit: type=1326 audit(1776489613.026:2748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25300 comm="syz.4.7083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a7d70c819 code=0x7ffc0000
[  561.239898][   T28] audit: type=1326 audit(1776489613.026:2749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25300 comm="syz.4.7083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a7d70c819 code=0x7ffc0000
[  561.263844][   T28] audit: type=1326 audit(1776489613.026:2750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25300 comm="syz.4.7083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a7d70c819 code=0x7ffc0000
[  561.289569][T25307] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7084'.
[  561.339682][   T28] audit: type=1326 audit(1776489613.026:2751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25300 comm="syz.4.7083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a7d70c819 code=0x7ffc0000
[  561.398473][   T28] audit: type=1326 audit(1776489613.026:2752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25300 comm="syz.4.7083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f9a7d70c819 code=0x7ffc0000
[  561.432744][T25316] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  561.702860][T25321] lo speed is unknown, defaulting to 1000
[  562.010660][T25336] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7094'.
[  562.055626][T25340] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  562.152705][T25340] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  562.246132][T25340] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  562.329071][T25340] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  562.406178][ T4445] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  562.433989][ T4445] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  562.463800][ T4445] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  562.493672][ T4445] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  563.330649][T25362] netlink: 'syz.6.7104': attribute type 2 has an invalid length.
[  563.347054][T25362] netlink: 199792 bytes leftover after parsing attributes in process `syz.6.7104'.
[  563.532471][T25380] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  563.802393][T25394] lo speed is unknown, defaulting to 1000
[  564.207836][T25409] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7124'.
[  564.227229][T25409] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7124'.
[  564.428086][T25429] netlink: 'syz.9.7128': attribute type 4 has an invalid length.
[  564.446582][T25429] netlink: 'syz.9.7128': attribute type 4 has an invalid length.
[  564.468231][T25420] Cannot find add_set index 0 as target
[  564.492898][ T6323] lo speed is unknown, defaulting to 1000
[  564.498931][ T6323] lyz2: Port: 1 Link ACTIVE
[  564.508481][ T6323] lo speed is unknown, defaulting to 1000
[  564.581843][T25435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7133'.
[  564.726748][T25389] kexec: Could not allocate control_code_buffer
[  564.946692][T25454] lo speed is unknown, defaulting to 1000
[  566.434180][T25458] kexec: Could not allocate control_code_buffer
[  566.499094][T25494] lo speed is unknown, defaulting to 1000
[  566.583994][T25503] Cannot find add_set index 0 as target
[  566.699553][T25508] netlink: 'syz.9.7159': attribute type 4 has an invalid length.
[  566.753872][T25513] netlink: 'syz.9.7159': attribute type 4 has an invalid length.
[  566.806211][ T3480] lo speed is unknown, defaulting to 1000
[  566.813130][T14782] lo speed is unknown, defaulting to 1000
[  566.823022][T14782] lo speed is unknown, defaulting to 1000
[  566.862008][T25517] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7164'.
[  567.041281][T25526] syzkaller0: entered promiscuous mode
[  567.046873][T25526] syzkaller0: entered allmulticast mode
[  567.695585][ T3039] ip6gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  568.420096][T25604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7188'.
[  568.466035][T25607] lo speed is unknown, defaulting to 1000
[  568.494739][T25540] kexec: Could not allocate control_code_buffer
[  568.666987][T25626] loop0: detected capacity change from 0 to 128
[  569.037591][T25630] lo speed is unknown, defaulting to 1000
[  569.486461][T25647] xt_hashlimit: size too large, truncated to 1048576
[  569.553620][T25650] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7201'.
[  570.350869][T25664] netlink: 36 bytes leftover after parsing attributes in process `syz.9.7207'.
[  571.109794][T25685] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7215'.
[  571.118931][T25685] netlink: 2 bytes leftover after parsing attributes in process `syz.4.7215'.
[  571.128344][T25685] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7215'.
[  571.137379][T25685] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7215'.
[  571.146386][T25685] netlink: 2 bytes leftover after parsing attributes in process `syz.4.7215'.
[  571.155933][T25685] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7215'.
[  571.165179][T25685] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7215'.
[  571.174301][T25685] netlink: 2 bytes leftover after parsing attributes in process `syz.4.7215'.
[  572.331903][T25659] kexec: Could not allocate control_code_buffer
[  572.345038][T25697] loop0: detected capacity change from 0 to 512
[  572.493704][T25697] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.7222: inode has both inline data and extents flags
[  572.539724][T25697] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  572.547416][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  572.563187][    C0] EXT4-fs (loop0): initial error at time 1776489624: ext4_orphan_get:1397: inode 15
[  572.572730][    C0] EXT4-fs (loop0): last error at time 1776489624: ext4_orphan_get:1397: inode 15
[  572.590155][T25697] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.7222: couldn't read orphan inode 15 (err -117)
[  572.616999][T25697] loop0: lost filesystem error report for type 5 error -117
[  572.623464][T25697] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  573.108468][T15001] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  573.216017][T25716] lo speed is unknown, defaulting to 1000
[  573.981506][T25731] loop0: detected capacity change from 0 to 512
[  574.046005][T25731] EXT4-fs: Ignoring removed i_version option
[  574.086862][T25731] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  574.124626][T25731] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.7234: invalid block
[  574.151862][T25731] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  574.157716][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  574.175791][    C0] EXT4-fs (loop0): initial error at time 1776489626: ext4_get_branch:178: inode 11: block 4294967295
[  574.188407][    C0] EXT4-fs (loop0): last error at time 1776489626: ext4_get_branch:178: inode 11: block 4294967295
[  574.203410][T25731] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.7234: invalid indirect mapped block 4294967295 (level 1)
[  574.218950][T25731] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  574.222230][T25731] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.7234: invalid indirect mapped block 4294967295 (level 1)
[  574.249029][T25731] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  574.252590][T25731] EXT4-fs (loop0): 2 truncates cleaned up
[  574.279563][T25731] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  574.336644][T15001] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  574.674277][T25747] loop0: detected capacity change from 0 to 256
[  574.781762][T25747] FAT-fs (loop0): Directory bread(block 64) failed
[  574.788469][T25747] FAT-fs (loop0): Directory bread(block 65) failed
[  574.795095][T25747] FAT-fs (loop0): Directory bread(block 66) failed
[  574.801748][T25747] FAT-fs (loop0): Directory bread(block 67) failed
[  574.808408][T25747] FAT-fs (loop0): Directory bread(block 68) failed
[  574.815048][T25747] FAT-fs (loop0): Directory bread(block 69) failed
[  574.821630][T25747] FAT-fs (loop0): Directory bread(block 70) failed
[  574.828202][T25747] FAT-fs (loop0): Directory bread(block 71) failed
[  574.834854][T25747] FAT-fs (loop0): Directory bread(block 72) failed
[  574.841497][T25747] FAT-fs (loop0): Directory bread(block 73) failed
[  574.881919][T25747] __nla_validate_parse: 22 callbacks suppressed
[  574.881951][T25747] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7237'.
[  574.897446][T25747] netlink: 2 bytes leftover after parsing attributes in process `syz.0.7237'.
[  574.906702][T25747] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7237'.
[  574.915884][T25747] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7237'.
[  574.924939][T25747] netlink: 2 bytes leftover after parsing attributes in process `syz.0.7237'.
[  574.934257][T25747] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7237'.
[  574.943305][T25747] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7237'.
[  574.952415][T25747] netlink: 2 bytes leftover after parsing attributes in process `syz.0.7237'.
[  574.961758][T25747] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7237'.
[  574.970886][T25747] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7237'.
[  575.091299][T25750] ref_ctr increment failed for inode: 0xcb8 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888107cba880
[  576.443305][T25777] loop0: detected capacity change from 0 to 4096
[  576.458419][T25777] EXT4-fs: Ignoring removed bh option
[  576.464150][T25777] ext4: Unknown parameter 'fsuuid'
[  576.606861][T25777] loop0: detected capacity change from 0 to 512
[  576.675234][T25777] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  576.910870][T25797] netlink: 'syz.0.7255': attribute type 11 has an invalid length.
[  577.155782][T25799] lo speed is unknown, defaulting to 1000
[  578.005885][T25818] lo speed is unknown, defaulting to 1000
[  580.154915][T25874] __nla_validate_parse: 21 callbacks suppressed
[  580.154957][T25874] netlink: 116376 bytes leftover after parsing attributes in process `syz.4.7275'.
[  580.170836][T25874] netlink: zone id is out of range
[  580.413767][T25865] lo speed is unknown, defaulting to 1000
[  580.944099][T25881] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7289'.
[  580.954685][T25881] netlink: 2 bytes leftover after parsing attributes in process `syz.9.7289'.
[  580.963829][T25881] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7289'.
[  580.972853][T25881] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7289'.
[  580.981891][T25881] netlink: 2 bytes leftover after parsing attributes in process `syz.9.7289'.
[  580.991006][T25881] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7289'.
[  581.000045][T25881] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7289'.
[  581.009035][T25881] netlink: 2 bytes leftover after parsing attributes in process `syz.9.7289'.
[  581.018200][T25881] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7289'.
[  584.560192][T25942] bridge_slave_0: default FDB implementation only supports local addresses
[  584.727924][T25949] veth21: entered promiscuous mode
[  584.743235][T25951] loop0: detected capacity change from 0 to 1024
[  584.750326][T25949] veth21: entered allmulticast mode
[  584.764958][T25951] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  584.790855][T25951] System zones: 0-1, 3-36
[  584.808870][T25951] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.7299: bad orphan inode 134217728
[  584.850666][T25951] loop0: lost filesystem error report for type 5 error -117
[  584.852809][T25951] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  584.925218][T25951] kernel profiling enabled (shift: 9)
[  585.014860][T15001] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  585.067259][T25955] syzkaller0: entered promiscuous mode
[  585.083753][T25955] syzkaller0: entered allmulticast mode
[  585.551439][T25963] lo speed is unknown, defaulting to 1000
[  586.057250][T25969] loop0: detected capacity change from 0 to 512
[  586.093012][T25969] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  586.108772][T25969] EXT4-fs (loop0): 1 truncate cleaned up
[  586.124743][T25969] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  586.396964][T15001] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  586.680709][T25982] __nla_validate_parse: 24 callbacks suppressed
[  586.680727][T25982] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7308'.
[  586.719715][T25992] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7310'.
[  586.739125][T25992] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=25992 comm=syz.4.7310
[  587.146985][T25998] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7312'.
[  587.235372][T25995] Cannot find del_set index 0 as target
[  587.576873][T26017] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.7321'.
[  587.598004][T26017] netlink: 3074 bytes leftover after parsing attributes in process `syz.0.7321'.
[  587.780698][T26013] lo speed is unknown, defaulting to 1000
[  588.255090][T26035] lo speed is unknown, defaulting to 1000
[  588.765624][T26055] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7334'.
[  590.070416][T26080] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7341'.
[  590.090906][T26082] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  590.179012][T26080] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7341'.
[  591.247721][T26107] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7352'.
[  591.267422][T26107] batman_adv: batadv0: Removing interface: batadv_slave_0
[  591.288193][T26107] batman_adv: batadv0: Removing interface: batadv_slave_1
[  591.416840][T26112] bond6: entered allmulticast mode
[  591.442306][T26108] bond6: left allmulticast mode
[  591.786892][T26121] xt_CT: No such helper "pptp"
[  592.079687][T26128] netlink: 108 bytes leftover after parsing attributes in process `syz.4.7358'.
[  592.282793][T26134] loop0: detected capacity change from 0 to 128
[  592.298506][T26138] netlink: 9286 bytes leftover after parsing attributes in process `syz.6.7363'.
[  592.357676][T26134] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  592.412705][T26142] syzkaller0: entered promiscuous mode
[  592.431813][T26134] ext4 filesystem being mounted at /697/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  592.445654][T26142] syzkaller0: entered allmulticast mode
[  592.664446][T26155] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7369'.
[  592.720652][T26155] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7369'.
[  593.714414][T15001] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  594.345853][T26171] xt_CT: No such helper "pptp"
[  594.939438][T26187] bond3: entered allmulticast mode
[  594.973881][T26187] vti0: entered allmulticast mode
[  595.021140][T26186] bond3: left allmulticast mode
[  595.051735][T26186] vti0: left allmulticast mode
[  595.592564][T26207] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7382'.
[  595.625453][T26207] 8021q: adding VLAN 0 to HW filter on device bond7
[  595.690006][T26207] macvlan2: entered promiscuous mode
[  595.707309][T26207] macvlan2: entered allmulticast mode
[  595.746855][T26211] bond7: (slave vti1): refused to change device type
[  595.821868][   T28] kauditd_printk_skb: 48 callbacks suppressed
[  595.821887][   T28] audit: type=1400 audit(1776489647.766:2801): avc:  denied  { getopt } for  pid=26200 comm="syz.4.7380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  596.120231][T26220] loop0: detected capacity change from 0 to 1024
[  596.222534][T26220] EXT4-fs: dax option not supported
[  596.364356][T26221] xt_CT: No such helper "pptp"
[  596.826773][   T28] audit: type=1400 audit(1776489648.766:2802): avc:  denied  { ioctl } for  pid=26244 comm="syz.0.7396" path="socket:[87831]" dev="sockfs" ino=87831 ioctlcmd=0x941c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  596.830117][T26245] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  596.914682][   T28] audit: type=1400 audit(1776489648.856:2803): avc:  denied  { accept } for  pid=26244 comm="syz.0.7396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  597.059971][T26255] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7400'.
[  597.467349][T26270] netlink: 76 bytes leftover after parsing attributes in process `syz.6.7404'.
[  597.476434][T26270] netlink: 72 bytes leftover after parsing attributes in process `syz.6.7404'.
[  597.485518][T26270] netlink: 'syz.6.7404': attribute type 3 has an invalid length.
[  597.493366][T26270] netlink: 11 bytes leftover after parsing attributes in process `syz.6.7404'.
[  597.824766][T26271] xt_CT: No such helper "pptp"
[  597.888210][T26274] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  598.006479][T26274] block device autoloading is deprecated and will be removed.
[  598.079658][T26278] lo speed is unknown, defaulting to 1000
[  598.122230][T26279] x_tables: duplicate entry at hook 2
[  598.166771][T26285] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  598.201009][T26282] syzkaller0: entered promiscuous mode
[  598.214315][T26282] syzkaller0: entered allmulticast mode
[  599.524328][T26310] syzkaller0: entered promiscuous mode
[  599.535302][T26310] syzkaller0: entered allmulticast mode
[  601.641689][T26352] xt_CT: No such helper "pptp"
[  601.790498][T26362] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7432'.
[  601.827423][T26362] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7432'.
[  602.947066][T26397] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7443'.
[  603.927245][T26409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  603.971522][T26409] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  604.078993][T26422] netlink: 'syz.4.7451': attribute type 1 has an invalid length.
[  604.113109][T26422] 8021q: adding VLAN 0 to HW filter on device bond9
[  604.166001][T26422] bond9: (slave ip6gretap0): making interface the new active one
[  604.196140][T26422] bond9: (slave ip6gretap0): Enslaving as an active interface with an up link
[  604.235474][T26430] bond9: entered allmulticast mode
[  604.257208][T26430] ip6gretap0: entered allmulticast mode
[  605.555021][T26445] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=26445 comm=syz.4.7459
[  605.614103][T26445] netlink: 'syz.4.7459': attribute type 1 has an invalid length.
[  605.688693][T26445] 8021q: adding VLAN 0 to HW filter on device bond10
[  605.827831][T26462] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7464'.
[  605.836924][T26462] bond7: option mode: unable to set because the bond device has slaves
[  605.845768][T26462] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7464'.
[  605.855401][T26462] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7464'.
[  605.866538][T26462] 8021q: adding VLAN 0 to HW filter on device bond0
[  605.875053][T26462] bond7: (slave bond0): Enslaving as a backup interface with an up link
[  606.840552][T26481] netlink: 9 bytes leftover after parsing attributes in process `syz.3.7470'.
[  606.860164][T26481] gretap0: entered promiscuous mode
[  606.952008][T26481] netlink: 5 bytes leftover after parsing attributes in process `syz.3.7470'.
[  607.036748][T26481] 0ªî{X¹¦: renamed from gretap0
[  607.411323][T26481] 0ªî{X¹¦: left promiscuous mode
[  607.434973][T26481] 0ªî{X¹¦: entered allmulticast mode
[  607.544790][T26481] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  607.630568][T26494] ªªªªªª: renamed from vlan0
[  607.682676][T26498] netlink: 'syz.3.7475': attribute type 10 has an invalid length.
[  607.750456][T26501] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7477'.
[  607.949045][T26505] netlink: 80 bytes leftover after parsing attributes in process `syz.4.7478'.
[  608.279169][T26515] lo speed is unknown, defaulting to 1000
[  610.091406][T26554] syz_tun: left promiscuous mode
[  610.125128][T26554] wg2: left promiscuous mode
[  610.143799][T26554] wg2: left allmulticast mode
[  610.157043][T26557] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7495'.
[  610.186960][T26554] bond1: left promiscuous mode
[  610.202988][T26554] bond1: left allmulticast mode
[  610.217983][T26554] bond2: left promiscuous mode
[  610.229600][T26554] bond4: left allmulticast mode
[  610.237724][T26554] bridge3: left promiscuous mode
[  610.249405][T26554] bridge3: left allmulticast mode
[  610.261352][T26554] xfrm1: left promiscuous mode
[  610.274493][T26554] xfrm1: left allmulticast mode
[  610.374828][T26554] veth21: left promiscuous mode
[  610.388124][T26554] veth21: left allmulticast mode
[  610.402234][T26554] bond9: left allmulticast mode
[  610.407490][T26554] ip6gretap0: left allmulticast mode
[  610.423988][T26556] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  610.449023][T26557] geneve2: entered promiscuous mode
[  610.466640][ T4443] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  610.485401][ T4443] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  610.502893][ T4443] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  610.523549][ T4443] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  610.550539][T26556] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  610.635384][T26556] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  610.733843][T26556] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  610.941960][   T36] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  610.982009][   T36] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  611.024150][   T36] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  611.047186][   T36] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  611.743872][T26588] tipc: Started in network mode
[  611.773203][T26588] tipc: Node identity 4, cluster identity 4711
[  611.795315][T26588] tipc: Node number set to 4
[  612.003314][T26592] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=26592 comm=syz.6.7506
[  612.385742][T26603] netlink: zone id is out of range
[  612.410932][T26603] netlink: zone id is out of range
[  612.431857][T26603] netlink: zone id is out of range
[  612.456983][T26603] netlink: zone id is out of range
[  612.497118][T26603] netlink: zone id is out of range
[  612.530245][T26603] netlink: zone id is out of range
[  612.537789][T26603] netlink: zone id is out of range
[  612.544474][T26603] netlink: zone id is out of range
[  612.551116][T26603] netlink: zone id is out of range
[  612.558254][T26603] netlink: zone id is out of range
[  612.565316][T26603] netlink: zone id is out of range
[  612.572158][T26603] netlink: zone id is out of range
[  612.579908][T26603] netlink: zone id is out of range
[  612.586028][T26603] netlink: zone id is out of range
[  612.636059][T26603] netlink: zone id is out of range
[  612.648576][T26603] netlink: zone id is out of range
[  612.654595][T26603] netlink: zone id is out of range
[  612.661366][T26603] netlink: zone id is out of range
[  612.900337][T26605] syzkaller0: entered promiscuous mode
[  612.910861][T26605] syzkaller0: entered allmulticast mode
[  613.210609][T26624] netlink: 'syz.6.7518': attribute type 10 has an invalid length.
[  613.563990][T26632] loop0: detected capacity change from 0 to 256
[  614.184762][T26640] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7523'.
[  614.337212][T26646] netlink: 'syz.6.7525': attribute type 1 has an invalid length.
[  614.338883][T26644] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000
[  614.386899][T26646] 8021q: adding VLAN 0 to HW filter on device bond10
[  614.418377][T26649] macvlan2: entered promiscuous mode
[  614.432938][T26649] bond10: entered promiscuous mode
[  614.445816][T26649] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  614.477375][T26649] bond10: left promiscuous mode
[  616.049764][T26673] syzkaller0: entered promiscuous mode
[  616.066711][T26673] syzkaller0: entered allmulticast mode
[  616.198684][T26678] pimreg: entered allmulticast mode
[  616.595587][T26678] pimreg: left allmulticast mode
[  616.634562][T26686] wg2: left promiscuous mode
[  616.648629][T26686] wg2: left allmulticast mode
[  616.660292][T26687] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7540'.
[  616.679059][T26686] bond4: left promiscuous mode
[  616.692837][T26686] bridge4: left promiscuous mode
[  616.714417][T26686] bond5: left promiscuous mode
[  616.730731][T26686] macsec2: left promiscuous mode
[  616.744223][T26686] bond0: left allmulticast mode
[  616.752571][T26686] bridge5: left promiscuous mode
[  616.758989][T26686] bridge5: left allmulticast mode
[  616.765901][T26686] macvlan2: left promiscuous mode
[  616.772327][T26686] macvlan2: left allmulticast mode
[  616.785739][T26687] geneve2: entered promiscuous mode
[  616.799883][   T36] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  616.818451][   T36] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  616.841074][   T36] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  616.864102][   T36] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  617.509118][T26710] lo speed is unknown, defaulting to 1000
[  618.183609][T26717] netlink: 144 bytes leftover after parsing attributes in process `syz.4.7562'.
[  618.197033][T26717] unsupported nla_type 210
[  618.211139][T26719] wg2: left promiscuous mode
[  618.215905][T26719] wg2: left allmulticast mode
[  618.235249][T26719] bond7: left promiscuous mode
[  618.240349][T26719] bridge0: left promiscuous mode
[  618.245702][T26719] bond7: left allmulticast mode
[  618.251415][T26719] bridge0: left allmulticast mode
[  618.256921][T26719] bond8: left promiscuous mode
[  618.262380][T26719] veth11: left promiscuous mode
[  618.269013][T26719] macsec1: left promiscuous mode
[  618.278689][T26720] netlink: 36 bytes leftover after parsing attributes in process `syz.9.7552'.
[  618.282869][T26719] vlan3: left allmulticast mode
[  618.299770][T26719] bond10: left allmulticast mode
[  618.305283][T26719] geneve3: left allmulticast mode
[  618.314665][T26719] bridge6: left promiscuous mode
[  618.326255][T26719] bridge6: left allmulticast mode
[  618.342838][T26719] vlan4: left allmulticast mode
[  618.353604][T26719] bond13: left allmulticast mode
[  618.361898][   T35] lo speed is unknown, defaulting to 1000
[  618.361916][T14775] syz1: Port: 1 Link DOWN
[  618.382497][   T35] lyz2: Port: 1 Link DOWN
[  618.383338][ T4462] netdevsim netdevsim9 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  618.411738][ T4462] netdevsim netdevsim9 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  618.431031][T14787] lo speed is unknown, defaulting to 1000
[  618.431191][ T4462] netdevsim netdevsim9 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  618.462739][ T4462] netdevsim netdevsim9 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  618.693073][T26733] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=26733 comm=syz.3.7555
[  619.206018][T26758] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7574'.
[  619.217023][T26758] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7574'.
[  619.226599][T26758] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7574'.
[  620.207002][T26781] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7572'.
[  620.221737][T26781] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7572'.
[  620.275239][T26781] vlan0: entered promiscuous mode
[  620.281486][T26781] bridge4: entered promiscuous mode
[  620.287056][T26781] vlan0: entered allmulticast mode
[  620.292690][T26781] bridge4: entered allmulticast mode
[  620.330205][T26787] syzkaller0: entered promiscuous mode
[  620.342380][T26787] syzkaller0: entered allmulticast mode
[  620.489342][T26804] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7581'.
[  620.499896][T26804] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7581'.
[  620.582426][T26807] lo speed is unknown, defaulting to 1000
[  620.809407][ T7526] ==================================================================
[  620.817577][ T7526] BUG: KCSAN: data-race in shmem_getattr / shmem_recalc_inode
[  620.825100][ T7526] 
[  620.827456][ T7526] read-write to 0xffff88812da54010 of 8 bytes by task 26816 on cpu 1:
[  620.835642][ T7526]  shmem_recalc_inode+0x3f/0x1f0
[  620.840640][ T7526]  shmem_get_folio_gfp+0x7a8/0xd60
[  620.845807][ T7526]  shmem_write_begin+0xfc/0x1f0
[  620.850711][ T7526]  generic_perform_write+0x183/0x490
[  620.856049][ T7526]  shmem_file_write_iter+0xc5/0xf0
[  620.861213][ T7526]  __kernel_write_iter+0x319/0x590
[  620.866390][ T7526]  dump_user_range+0xa73/0xd00
[  620.871206][ T7526]  elf_core_dump+0x21a2/0x2330
[  620.876027][ T7526]  coredump_write+0xacc/0xdd0
[  620.880767][ T7526]  vfs_coredump+0x26dd/0x31e0
[  620.885501][ T7526]  get_signal+0xd5c/0xf20
[  620.889870][ T7526]  arch_do_signal_or_restart+0x96/0x450
[  620.895477][ T7526]  irqentry_exit+0x140/0x5b0
[  620.900111][ T7526]  asm_exc_page_fault+0x26/0x30
[  620.905000][ T7526] 
[  620.907356][ T7526] read to 0xffff88812da54010 of 8 bytes by task 7526 on cpu 0:
[  620.914939][ T7526]  shmem_getattr+0x41/0x200
[  620.919492][ T7526]  vfs_getattr_nosec+0x146/0x1e0
[  620.924477][ T7526]  vfs_getattr+0x48/0x60
[  620.928765][ T7526]  vfs_statx_path+0x28/0x140
[  620.933414][ T7526]  vfs_statx+0xc4/0x170
[  620.937609][ T7526]  vfs_fstatat+0x118/0x170
[  620.942066][ T7526]  __se_sys_newfstatat+0x55/0x3e0
[  620.947142][ T7526]  __x64_sys_newfstatat+0x55/0x70
[  620.952216][ T7526]  x64_sys_call+0x2c64/0x3020
[  620.957051][ T7526]  do_syscall_64+0x12c/0x3b0
[  620.961697][ T7526]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  620.967641][ T7526] 
[  620.970002][ T7526] value changed: 0x00000000000004c7 -> 0x00000000000004c8
[  620.977145][ T7526] 
[  620.979500][ T7526] Reported by Kernel Concurrency Sanitizer on:
[  620.985692][ T7526] CPU: 0 UID: 0 PID: 7526 Comm: syz-executor Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  620.996775][ T7526] Tainted: [W]=WARN
[  621.000663][ T7526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  621.010762][ T7526] ==================================================================