last executing test programs:

6.245367695s ago: executing program 1 (id=300):
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00cac6af03004000000000b7ff000000800000000000bce134be1af9b1831b1203ac9026c915adfc2d42bc19986c26d87f0a2bbdc11d774a9168285ee1969a69bac21535cb6a56372dac3f4a7478db633efc", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0e000000040000000800000010"], 0x50)
socket(0x2, 0x80805, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r0}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="00e22df904c986e49e00"], 0x50)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4882d48f}, 0x94)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x20000000, 0x4b}, 0x10, 0x0, 0x0, 0x1, 0x10000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x20042, 0x1)
fallocate(r3, 0x0, 0x0, 0x8000c62)

5.881829934s ago: executing program 4 (id=308):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000009180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x0, 0x2, 0x0, 0x88}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
socket$inet6(0x10, 0x3, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r6}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r2, 0x25, 0x2, @void}, 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000440)=ANY=[], 0x0)

5.640562883s ago: executing program 4 (id=310):
r0 = socket$key(0xf, 0x3, 0x2)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)={0x2, 0xff, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
r6 = socket$kcm(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r6, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}})
sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x0)

4.412416603s ago: executing program 4 (id=317):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r0, 0x0, r2, 0x0, 0x1, 0x0)
getsockname(r1, &(0x7f0000000000)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f00000000c0)=0x80)
vmsplice(r2, &(0x7f0000000240)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x6)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000e5ff00007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa40000000000000704000052897896b70200000800000018230000", @ANYRES16=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x55, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffff"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x81, r4}, 0x38)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r7, &(0x7f0000000300)={'#! ', '', [{0x20, 'memory.events\x00'}]}, 0x13)
perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000000000007}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000080)}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

3.979400168s ago: executing program 2 (id=319):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0xe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f00000006c0)='page_pool_update_nid\x00', r0, 0x0, 0x80000000000000}, 0x18)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000040)={'erspan0\x00', &(0x7f0000000500)={'sit0\x00', 0x0, 0x700, 0x700, 0xff, 0x9, {{0xc, 0x4, 0x1, 0x13, 0x30, 0x66, 0x0, 0x8, 0x2f, 0x0, @rand_addr=0x64010101, @broadcast, {[@timestamp_prespec={0x44, 0x1c, 0xad, 0x3, 0x1, [{@multicast2, 0x2}, {@multicast2, 0x95}, {@broadcast, 0x84}]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000580)={'gretap0\x00', 0x0})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10)
syz_emit_ethernet(0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0)
r4 = syz_io_uring_setup(0x3b52, &(0x7f0000000140)={0x0, 0x5883, 0x1000, 0x8003, 0x1c2}, &(0x7f0000000040)=<r5=>0x0, &(0x7f0000000680)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, 0x0)
io_uring_enter(r4, 0x10007b0f, 0x96f0, 0x20, 0x0, 0x0)
r7 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_int(r7, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4)
sendmmsg(r7, &(0x7f0000001500), 0x0, 0xc040)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x18)
syz_emit_ethernet(0x52, &(0x7f0000000200)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@multicast2}, {@empty, 0x9}]}, @ssrr={0x89, 0x3, 0x77}, @generic={0x83, 0x2}]}}, {{0x4, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0)

3.881820366s ago: executing program 2 (id=320):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\a\x00\x00'], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10)
r3 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4048844}, 0x0)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000c80), r0)
sendmsg$NFC_CMD_DEP_LINK_UP(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000c40)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NFC_ATTR_COMM_MODE={0x5}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000090}, 0x40)

3.45811586s ago: executing program 2 (id=323):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$packet(0x11, 0x2, 0x300)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='mm_page_free\x00', r0, 0x0, 0x178}, 0x18)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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")
r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
sendfile(r1, r1, 0x0, 0x800000009)
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x26, 0xd7, 0x0, 0x0, 0x0, 0x7, 0x900, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f0000000900)}, 0x723, 0x4b28, 0x0, 0x1, 0xa, 0x20005, 0xa, 0x0, 0xfffffff9, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00'}, 0x10)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x40)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600)

3.21432629s ago: executing program 0 (id=325):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x14, 0xe4, 0x0, 0x8, 0x32, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @broadcast}}}}}}, 0x26)

3.153015915s ago: executing program 1 (id=326):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000300000085000000060000009500000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x401}, 0x18)
io_uring_setup(0x4f04, &(0x7f00000002c0)={0x0, 0x48c7, 0x400, 0x0, 0xf})
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(0xffffffffffffffff, 0xfffffffc)
prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ff9000/0x2000)=nil)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRESHEX, @ANYBLOB="28c6f4671d6147681e74ef503df0c978e8ffd0493a778fe01c964e34088dc0ff56b4fb9813baaefd90867ee0a137d93a903cd35c19657a8a2ef68e48453f7e21e5ebf3a0490b7428add9d11089db244e427213ebfb562b696d28ff7d587213ecd28f3e5544e41d4bd52c107122ed0d5b500a782e7705fa7c6701a9a130025e05358c39554a3d12d6768a00dbab3dd06fe4ce93791d01496a87a081bd5e0eee705ef3a22d3c2629e42bf7e5827cc92cc38e580edcdf89265078a26aa0949f08e789932d0f43", @ANYRESDEC, @ANYRES8, @ANYRES64], 0x48)

3.0880627s ago: executing program 3 (id=327):
bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[], 0x48)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
write(r2, &(0x7f0000004200)='t', 0x1)
sendfile(r2, r1, 0x0, 0x3ffff)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0x3}, 0x18)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
getsockopt$inet6_mreq(r3, 0x29, 0x15, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'})
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
r5 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3)

2.59668821s ago: executing program 2 (id=328):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000140)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@nodiscard}, {@quota}]}, 0x3, 0x438, &(0x7f0000000580)="$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")

2.4742177s ago: executing program 3 (id=329):
futex_waitv(&(0x7f0000002940)=[{0x0, &(0x7f0000001000), 0x82}, {0x0, &(0x7f0000001040), 0x82}, {0x0, &(0x7f0000001080), 0x82}, {0x0, &(0x7f00000010c0), 0x82}, {0x0, &(0x7f0000001100), 0x82}, {0x0, &(0x7f0000001140), 0x82}, {0x0, &(0x7f0000001180)}, {0x0, &(0x7f00000011c0)}, {0x0, &(0x7f0000001200)}, {0x0, &(0x7f0000001240)}, {0x0, &(0x7f0000001280)}, {0x0, &(0x7f00000012c0)}, {0x0, &(0x7f0000001300)}, {0x0, &(0x7f0000001340)}, {0x0, &(0x7f0000001380)}, {0x0, &(0x7f00000013c0)}, {0x0, &(0x7f0000001400)}, {0x0, &(0x7f0000001440)}, {0x0, &(0x7f0000001480)}, {0x0, &(0x7f00000014c0)}, {0x0, &(0x7f0000001500)}, {0x0, &(0x7f0000001540)}, {0x0, &(0x7f0000001580)}, {0x0, &(0x7f00000015c0)}, {0x0, &(0x7f0000001600)}, {0x0, &(0x7f0000001640)}, {0x0, &(0x7f0000001680)}, {0x0, &(0x7f00000016c0)}, {0x0, &(0x7f0000001700)}, {0x0, &(0x7f0000001740)}, {0x0, &(0x7f0000001780)}, {0x0, &(0x7f00000017c0)}, {0x0, &(0x7f0000001800)}, {0x0, &(0x7f0000001840)}, {0x0, &(0x7f0000001880)}, {0x0, &(0x7f00000018c0)}, {0x0, &(0x7f0000001900)}, {0x0, &(0x7f0000001940)}, {0x0, &(0x7f0000001980)}, {0x0, &(0x7f00000019c0)}, {0x0, &(0x7f0000001a00)}, {0x0, &(0x7f0000001a40)}, {0x0, &(0x7f0000001a80)}, {0x0, &(0x7f0000001ac0)}, {0x0, &(0x7f0000001b00)}, {0x0, &(0x7f0000001b40)}, {0x0, &(0x7f0000001b80)}, {0x0, &(0x7f0000001bc0)}, {0x0, &(0x7f0000001c00)}, {0x0, &(0x7f0000001c40)}, {0x0, &(0x7f0000001c80)}, {0x0, &(0x7f0000001cc0)}, {0x0, &(0x7f0000001d00)}, {0x0, &(0x7f0000001d40)}, {0x0, &(0x7f0000001d80)}, {0x0, &(0x7f0000001dc0)}, {0x0, &(0x7f0000001e00)}, {0x0, &(0x7f0000001e40)}, {0x0, &(0x7f0000001e80)}, {0x0, &(0x7f0000001ec0)}, {0x0, &(0x7f0000001f00)}, {0x0, &(0x7f0000001f40)}, {0x0, &(0x7f0000001f80)}, {0x0, &(0x7f0000001fc0)}, {0x0, &(0x7f0000002000)}, {0x0, &(0x7f0000002040)}, {0x0, &(0x7f0000002080)}, {0x0, &(0x7f00000020c0)}, {0x0, &(0x7f0000002100)}, {0x0, &(0x7f0000002140)}, {0x0, &(0x7f0000002180)}, {0x0, &(0x7f00000021c0)}, {0x0, &(0x7f0000002200)}, {0x0, &(0x7f0000002240)}, {0x0, &(0x7f0000002280)}, {0x0, &(0x7f00000022c0)}, {0x0, &(0x7f0000002300)}, {0x0, &(0x7f0000002340)}, {0x0, &(0x7f0000002380)}, {0x0, &(0x7f00000023c0)}, {0x0, &(0x7f0000002400)}, {0x0, &(0x7f0000002440)}, {0x0, &(0x7f0000002480)}, {0x0, &(0x7f00000024c0)}, {0x0, &(0x7f0000002500)}, {0x0, &(0x7f0000002540)}, {0x0, &(0x7f0000002580)}, {0x0, &(0x7f00000025c0)}, {0x0, &(0x7f0000002600)}, {0x0, &(0x7f0000002640)}, {0x0, &(0x7f0000002680)}, {0x0, &(0x7f00000026c0)}, {0x0, &(0x7f0000002700)}, {0x0, &(0x7f0000002740)}, {0x0, &(0x7f0000002780)}, {0x0, &(0x7f00000027c0)}, {0x0, &(0x7f0000002800)}, {0x0, &(0x7f0000002840)}, {0x0, &(0x7f0000002880)}, {0x0, &(0x7f0000003380)}, {0x0, &(0x7f0000002900)}], 0x6, 0x0, &(0x7f0000003300), 0x1)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00'})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000580)={0x0, 0x0, 0x0, 'queue0\x00'})
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
r5 = socket(0x1e, 0x2, 0x0)
sendmsg$tipc(r5, &(0x7f0000000200)={&(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e23}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24040014}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8614, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x6, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.133790538s ago: executing program 1 (id=330):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='kfree\x00', r0}, 0x10)
r1 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r7}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r6}, &(0x7f0000000040), &(0x7f0000000080)=r7}, 0x20)
write$selinux_access(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56)

1.874474269s ago: executing program 0 (id=331):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001200)=@newtfilter={0x2c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {}, {0xd, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0xe, 0x10}}]}, 0x2c}}, 0x1)
creat(&(0x7f00000000c0)='./file0\x00', 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000540), &(0x7f0000000580)=r3}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
sendto$inet6(r4, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0x2, 0x4e24, 0x0, @local, 0x4000000}, 0x1c)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans='])
syz_open_dev$usbfs(0x0, 0x205, 0x2581)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})

1.847745971s ago: executing program 3 (id=332):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000380), 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x48)
pipe2$9p(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
getsockopt(r0, 0x4, 0x6, &(0x7f00000001c0)=""/6, &(0x7f0000000280)=0x6)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000040)=@gcm_256={{0x303, 0x33}, "12147b841579c97d", "60e85d52e8bb1f092c487b4be7fb88e117f33b2a3e5aa8f5fc1f71c71955bd79", "bcc212ea", "6db14a45a95ea1ab"}, 0x38)
r4 = dup(r2)
write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r4])
open(&(0x7f0000000300)='./file0\x00', 0xa0580, 0x102)

1.669921145s ago: executing program 0 (id=333):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
listen(r2, 0x0)
connect$unix(r1, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f0000004080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r3], 0x18}}], 0x1, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r6, 0x3, &(0x7f0000000040))
ptrace(0x10, r6)
ptrace$setregs(0x2, r6, 0xfffffffffffffffe, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x0)
keyctl$set_reqkey_keyring(0xe, 0x0)
recvmmsg(r5, &(0x7f0000007700), 0x318, 0xfc0, 0x0)

1.669189035s ago: executing program 3 (id=334):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$caif_stream(0x25, 0x1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
pipe(0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x6)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
listen(0xffffffffffffffff, 0x5)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@errors_continue}]}, 0x2, 0x44b, &(0x7f0000000400)="$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")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
kexec_load(0xff0f, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

1.61122294s ago: executing program 0 (id=335):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
socket$inet6(0xa, 0x3, 0x20)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
socket$packet(0x11, 0x3, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
socket$kcm(0xa, 0x1, 0x106)
socket$xdp(0x2c, 0x3, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x3, 0x5)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="050000000c0000000400000007"], 0x48)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff08000900fcfc0000080011000000000008000e00800000000800", @ANYRES32=r3], 0x5c}, 0x1, 0x0, 0x0, 0x20008005}, 0x0)

1.581437612s ago: executing program 0 (id=336):
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet6(0xa, 0x3, 0x5)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00')
preadv(r0, 0x0, 0x0, 0xd6, 0x807)
socket$can_bcm(0x1d, 0x2, 0x2)
r1 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000240)="6848b2796acd812dce3d01d190a3cab1e8ce", 0x12}], 0x2}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000008030006750000000700508e7f7e931def2c0000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2}, 0x18)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
write$binfmt_misc(r3, &(0x7f0000000240), 0xfffffecc)
ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000040)=0x3b7)
socket$xdp(0x2c, 0x3, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(0x0, 0x2, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

1.450373033s ago: executing program 3 (id=337):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0x0, 0x40, 0x2, 0x2, 0x7, 0x10001, 0xfffc, 0x0, 0x40})
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x10000, &(0x7f0000000d40)=ANY=[@ANYRES16=0x0], 0xfe, 0x2c2, &(0x7f0000000f80)="$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")
r0 = openat$sysfs(0xffffff9c, 0x0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
fchmod(r2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10)
socket$xdp(0x2c, 0x3, 0x0)
truncate(&(0x7f0000000000)='./file1\x00', 0x8000)
truncate(&(0x7f0000000080)='./file1\x00', 0x8001)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0})
process_mrelease(0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[], 0x48)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0)

1.350231301s ago: executing program 4 (id=338):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x7}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newsa={0x234, 0x10, 0x713, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d3, 0xff}, @in=@broadcast, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, 0x70bd25, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(aes)\x00'}}}, @algo_auth_trunc={0xf9, 0x14, {{'cmac(aes)\x00'}, 0x568, 0x0, "a60bb307981e722601a5a36b39e604ac1ccb6c76dd06b7b6ebae4ce5eb50da8ee57bebe070c5a7174cc5512a68945000c8716f000000000000f0b8f1a7756866920208a41f54d4fd3b6c96773109bebd540c4732c70a13d0309cd4717519309f5f7bbe71234397b068e9408828721fcdde166679af415f005551177de3c1bf4c52502516984732e72264138581f67ca83950c9d1e3d348a3bcd7dae08bd8724f3c1b5e0ace37405db2fd566b0b"}}]}, 0x234}, 0x1, 0x0, 0x0, 0x24040044}, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
r5 = semget$private(0x0, 0x6, 0x0)
semtimedop(r5, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0)
semop(r5, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0x7fff}, 0x18)
epoll_create1(0x80000)
r7 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
write$selinux_access(r7, &(0x7f0000000640)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7567616e646f6d5f6465766963655fb9787330202f7573722f7362696e2f6e7470642030"], 0x4a)

1.246080559s ago: executing program 1 (id=339):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000280)=0x14)
unshare(0x6a040000)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, '\x00', "07f217bd74511e465bbbd5de01000000f9044677d4d588363d63af84db44be59", "00f8ff00", "8ce63ecbc640735f"}, 0x38)
sendto$inet6(r1, &(0x7f0000000280)='S', 0x1, 0x8000, 0x0, 0x0)
close(r1)
r2 = dup(r0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f00000008c0)={0x0, @in6={{0xa, 0x4e20, 0x0, @empty, 0x4}}, 0x651, 0xd}, 0x90)
sendmmsg$inet(r0, &(0x7f0000001780)=[{{&(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10, &(0x7f0000000200)=[{&(0x7f00000001c0)='\v', 0x1}], 0x1}}], 0x1, 0x4844)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x18}, 0x0)

1.069031404s ago: executing program 1 (id=340):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000"], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
chdir(0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r2, 0x0, 0x415}, 0x18)
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
getdents(r5, &(0x7f0000000180)=""/136, 0xc9)

861.839681ms ago: executing program 2 (id=341):
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f00000004c0)={[{@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@rodir}, {@shortname_winnt}, {@numtail}, {@shortname_win95}, {@shortname_lower}, {@uni_xlateno}, {@uni_xlateno}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'cp866'}}, {@fat=@codepage={'codepage', 0x3d, '857'}}, {@shortname_mixed}, {@fat=@dos1xfloppy}, {@shortname_win95}, {@fat=@check_strict}, {@shortname_winnt}]}, 0x1, 0x36b, &(0x7f0000000140)="$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")
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x404, &(0x7f00000005c0)={[{@discard}, {@bh}, {@nomblk_io_submit}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
fchdir(0xffffffffffffffff)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x8}, 0x18)

459.881903ms ago: executing program 4 (id=342):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r0}, 0x38)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c010000100013070000000000000000ffffffff000000000000000000000000ff60000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000033000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000006a000000000000004c001400636d61632861657329"], 0x13c}}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18)
r3 = socket(0x1e, 0x1, 0x0)
shutdown(r3, 0x2)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'syzkaller0\x00'})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000b80)={'tunl0\x00', &(0x7f0000000ac0)={'gretap0\x00', 0x0, 0x8, 0x10, 0x4, 0x2df, {{0x17, 0x4, 0x2, 0x38, 0x5c, 0x66, 0x0, 0x1, 0x29, 0x0, @rand_addr=0x64010101, @loopback, {[@cipso={0x86, 0x18, 0xffffffffffffffff, [{0x1, 0x12, "1e2d0b7e485e1e1e209f4575a8d103b0"}]}, @timestamp_addr={0x44, 0xc, 0xd4, 0x1, 0x6, [{@broadcast, 0x7fff}]}, @timestamp_prespec={0x44, 0x24, 0xfa, 0x3, 0xc, [{@broadcast, 0x6}, {@dev={0xac, 0x14, 0x14, 0x37}, 0x9}, {@multicast2, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}]}]}}}}})
openat$rfkill(0xffffffffffffff9c, 0x0, 0x80100, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
umount2(&(0x7f0000000540)='.\x00', 0x2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522ec, 0x0, {0x0, 0x0, 0x74, r5, {0x10, 0xf}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)

153.126368ms ago: executing program 4 (id=343):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
flock(r0, 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
close(r1)
syz_read_part_table(0x60d, &(0x7f0000002200)="$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")
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0xac, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x38, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000200)='btrfs_add_block_group\x00', r2, 0x0, 0x9}, 0x18)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0x1db)
writev(r3, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x100000}], 0x1)
socket$inet_mptcp(0x2, 0x1, 0x106)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x80)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x1d, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000d2b20000000000007cf7ffff18110000", @ANYRES32=r4, @ANYBLOB="0000001600000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000ccabf4ff080000001800000005000000000000000000000018470000feffffff00000000000000001860000004000000000000002dd4000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000000000008500000086000000186100000100000000000000f8ffffff7181500000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r5}, 0x18)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10)
bind$bt_hci(r6, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)

149.655168ms ago: executing program 1 (id=344):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
readv(r4, &(0x7f0000001340)=[{&(0x7f00000001c0)=""/144, 0x90}], 0x1)
readv(r4, &(0x7f0000001240)=[{&(0x7f0000000040)=""/73, 0x49}], 0x1)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{}, 0x0, 0x0}, 0x20)
r6 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x401, 0xfffffffe, 0x0, 0xffffffff}, 0x10)

108.481772ms ago: executing program 0 (id=345):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(0x0, r0)
syz_open_dev$evdev(0x0, 0x1, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
socket$nl_netfilter(0x10, 0x3, 0xc)
write$binfmt_elf64(r2, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r0, @ANYRES8, @ANYRES64=0x0], 0x56)
close(r2)
connect$rxrpc(r2, &(0x7f0000000080)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x3, @local, 0x1}}, 0x24)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x3, 0x0, 0x7fff7ffc}]})
timer_create(0x0, 0x0, &(0x7f0000000000)=<r3=>0x0)
timer_gettime(r3, &(0x7f0000000240))
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1c9b41, 0x8)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000340)={'veth1_vlan\x00', &(0x7f0000000380)=@ethtool_rxnfc={0x32, 0xb, 0x6, {0x0, @hdata="c3b467aca79221c2e4d626bfd283e0a10e23d2fa504990e9ce34004c56937b82a7c45294652cad4e6b3175264e735c411738e756", {0x0, @remote, 0x7f, 0xb6, [0x8, 0x7]}, @esp_ip6_spec={@local, @remote, 0x9, 0x40}, {0x0, @link_local, 0x5, 0xd6, [0x1ff, 0x8]}, 0xb1, 0xf1}, 0xa, [0x49, 0x0, 0x3, 0xffffff80, 0x40, 0xfffff239, 0xfffffff4, 0x7fffffff, 0x2, 0x1]}})
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0)

54.270146ms ago: executing program 3 (id=346):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f0000000280)='2x', 0x2, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='westwood\x00', 0x9)
shutdown(r0, 0x1)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, 0x0, 0x51000)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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")
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x4004050)
close(0x3)
getgid()
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x181180, 0x2)

0s ago: executing program 2 (id=347):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x1)
socket$netlink(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
io_setup(0x8f0, &(0x7f0000002400)=<r2=>0x0)
io_submit(r2, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18)
socket(0x10, 0x803, 0x0)
r3 = socket$xdp(0x2c, 0x3, 0x0)
bind$xdp(r3, &(0x7f0000000200)={0x2c, 0xd, 0x0, 0x2}, 0x10)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_delroute={0x3c, 0x19, 0x901, 0x0, 0x20, {0x2, 0x18, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @rand_addr=0x64010100}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0xc, 0x1, {0x3, 0x8, 0x1, 0x8, 0x2}}}]}, 0x3c}}, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.229' (ED25519) to the list of known hosts.
[   25.285826][   T29] audit: type=1400 audit(1755029332.879:62): avc:  denied  { mounton } for  pid=3288 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   25.286735][ T3288] cgroup: Unknown subsys name 'net'
[   25.309155][   T29] audit: type=1400 audit(1755029332.879:63): avc:  denied  { mount } for  pid=3288 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   25.336934][   T29] audit: type=1400 audit(1755029332.919:64): avc:  denied  { unmount } for  pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   25.490361][ T3288] cgroup: Unknown subsys name 'cpuset'
[   25.497074][ T3288] cgroup: Unknown subsys name 'rlimit'
[   25.685834][   T29] audit: type=1400 audit(1755029333.279:65): avc:  denied  { setattr } for  pid=3288 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   25.709446][   T29] audit: type=1400 audit(1755029333.279:66): avc:  denied  { create } for  pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   25.730524][   T29] audit: type=1400 audit(1755029333.279:67): avc:  denied  { write } for  pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   25.751432][   T29] audit: type=1400 audit(1755029333.279:68): avc:  denied  { read } for  pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   25.771943][   T29] audit: type=1400 audit(1755029333.289:69): avc:  denied  { mounton } for  pid=3288 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   25.779331][ T3294] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   25.797069][   T29] audit: type=1400 audit(1755029333.289:70): avc:  denied  { mount } for  pid=3288 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   25.829323][   T29] audit: type=1400 audit(1755029333.409:71): avc:  denied  { relabelto } for  pid=3294 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   25.864519][ T3288] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   27.932022][ T3301] chnl_net:caif_netlink_parms(): no params data found
[   27.970273][ T3302] chnl_net:caif_netlink_parms(): no params data found
[   28.008220][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.016198][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.024282][ T3301] bridge_slave_0: entered allmulticast mode
[   28.031068][ T3301] bridge_slave_0: entered promiscuous mode
[   28.039069][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.046497][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.054086][ T3301] bridge_slave_1: entered allmulticast mode
[   28.060611][ T3301] bridge_slave_1: entered promiscuous mode
[   28.093313][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   28.113066][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   28.135557][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.143406][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.150765][ T3302] bridge_slave_0: entered allmulticast mode
[   28.157314][ T3302] bridge_slave_0: entered promiscuous mode
[   28.182104][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.189304][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.196887][ T3302] bridge_slave_1: entered allmulticast mode
[   28.203304][ T3302] bridge_slave_1: entered promiscuous mode
[   28.223708][ T3301] team0: Port device team_slave_0 added
[   28.232032][ T3301] team0: Port device team_slave_1 added
[   28.237917][ T3304] chnl_net:caif_netlink_parms(): no params data found
[   28.267053][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   28.293228][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   28.309501][ T3311] chnl_net:caif_netlink_parms(): no params data found
[   28.320906][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0
[   28.327958][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   28.355553][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   28.375559][ T3302] team0: Port device team_slave_0 added
[   28.384041][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1
[   28.391696][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   28.419042][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   28.438454][ T3302] team0: Port device team_slave_1 added
[   28.453710][ T3305] chnl_net:caif_netlink_parms(): no params data found
[   28.494557][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.503071][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.511622][ T3304] bridge_slave_0: entered allmulticast mode
[   28.518516][ T3304] bridge_slave_0: entered promiscuous mode
[   28.541861][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.550011][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.557482][ T3304] bridge_slave_1: entered allmulticast mode
[   28.564519][ T3304] bridge_slave_1: entered promiscuous mode
[   28.573615][ T3301] hsr_slave_0: entered promiscuous mode
[   28.580250][ T3301] hsr_slave_1: entered promiscuous mode
[   28.589123][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0
[   28.596778][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   28.624212][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   28.651399][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1
[   28.658719][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   28.685443][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   28.702959][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   28.729624][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   28.748619][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.756252][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.763873][ T3305] bridge_slave_0: entered allmulticast mode
[   28.770899][ T3305] bridge_slave_0: entered promiscuous mode
[   28.790940][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.798195][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.805895][ T3305] bridge_slave_1: entered allmulticast mode
[   28.812892][ T3305] bridge_slave_1: entered promiscuous mode
[   28.819358][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.826677][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.834417][ T3311] bridge_slave_0: entered allmulticast mode
[   28.841001][ T3311] bridge_slave_0: entered promiscuous mode
[   28.848158][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.855461][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.862821][ T3311] bridge_slave_1: entered allmulticast mode
[   28.869347][ T3311] bridge_slave_1: entered promiscuous mode
[   28.903264][ T3304] team0: Port device team_slave_0 added
[   28.911532][ T3304] team0: Port device team_slave_1 added
[   28.925812][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   28.937789][ T3302] hsr_slave_0: entered promiscuous mode
[   28.944390][ T3302] hsr_slave_1: entered promiscuous mode
[   28.950308][ T3302] debugfs: 'hsr0' already exists in 'hsr'
[   28.956715][ T3302] Cannot create hsr debugfs directory
[   28.979552][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   28.998001][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   29.017037][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0
[   29.024524][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.052466][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   29.077210][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   29.091951][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1
[   29.099006][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.125996][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   29.137947][ T3305] team0: Port device team_slave_0 added
[   29.145087][ T3305] team0: Port device team_slave_1 added
[   29.178638][ T3311] team0: Port device team_slave_0 added
[   29.187783][ T3311] team0: Port device team_slave_1 added
[   29.203099][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0
[   29.210270][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.236553][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   29.264338][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1
[   29.271581][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.297549][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   29.318062][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0
[   29.325542][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.352264][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   29.373537][ T3304] hsr_slave_0: entered promiscuous mode
[   29.379795][ T3304] hsr_slave_1: entered promiscuous mode
[   29.385958][ T3304] debugfs: 'hsr0' already exists in 'hsr'
[   29.391949][ T3304] Cannot create hsr debugfs directory
[   29.400694][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1
[   29.408019][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.434461][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   29.491172][ T3305] hsr_slave_0: entered promiscuous mode
[   29.497385][ T3305] hsr_slave_1: entered promiscuous mode
[   29.503538][ T3305] debugfs: 'hsr0' already exists in 'hsr'
[   29.509627][ T3305] Cannot create hsr debugfs directory
[   29.522686][ T3311] hsr_slave_0: entered promiscuous mode
[   29.528914][ T3311] hsr_slave_1: entered promiscuous mode
[   29.535050][ T3311] debugfs: 'hsr0' already exists in 'hsr'
[   29.541165][ T3311] Cannot create hsr debugfs directory
[   29.546784][ T3301] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   29.566707][ T3301] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   29.595976][ T3301] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   29.614689][ T3301] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   29.674191][ T3302] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   29.693492][ T3302] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   29.713437][ T3302] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   29.728848][ T3302] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   29.771508][ T3304] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   29.793888][ T3304] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   29.803292][ T3304] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   29.812205][ T3304] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   29.846781][ T3305] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   29.856381][ T3305] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   29.870926][ T3305] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   29.881907][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0
[   29.894616][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0
[   29.902095][ T3305] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   29.924472][ T3301] 8021q: adding VLAN 0 to HW filter on device team0
[   29.935892][ T3302] 8021q: adding VLAN 0 to HW filter on device team0
[   29.943961][ T3311] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   29.960326][ T3311] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   29.970227][ T3311] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   29.983835][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.991641][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.000800][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.008107][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.017934][ T3311] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   30.034247][  T784] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.041551][  T784] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.060551][  T784] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.067784][  T784] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.097552][ T3302] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   30.108280][ T3302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   30.168289][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.196894][ T3304] 8021q: adding VLAN 0 to HW filter on device team0
[   30.214897][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.224128][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0
[   30.238082][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.245680][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.261109][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.268201][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.283654][ T3311] 8021q: adding VLAN 0 to HW filter on device team0
[   30.296277][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.303491][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.313756][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0
[   30.334438][  T784] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.341885][  T784] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.366102][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.384386][ T3302] veth0_vlan: entered promiscuous mode
[   30.404478][ T3305] 8021q: adding VLAN 0 to HW filter on device team0
[   30.431494][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.439077][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.448883][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.456027][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.471247][ T3302] veth1_vlan: entered promiscuous mode
[   30.477668][ T3311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   30.510965][ T3305] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   30.521759][ T3305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   30.552267][ T3302] veth0_macvtap: entered promiscuous mode
[   30.568484][ T3302] veth1_macvtap: entered promiscuous mode
[   30.584131][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0
[   30.597679][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0
[   30.609861][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1
[   30.629067][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0
[   30.653593][  T784] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   30.663683][  T784] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   30.673017][ T3301] veth0_vlan: entered promiscuous mode
[   30.684863][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0
[   30.699130][  T784] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   30.723709][ T3301] veth1_vlan: entered promiscuous mode
[   30.741443][  T784] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   30.778389][   T29] kauditd_printk_skb: 9 callbacks suppressed
[   30.778406][   T29] audit: type=1400 audit(1755029338.369:81): avc:  denied  { mounton } for  pid=3302 comm="syz-executor" path="/root/syzkaller.YTYLXV/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[   30.798938][ T3301] veth0_macvtap: entered promiscuous mode
[   30.833417][ T3302] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   30.837570][   T29] audit: type=1400 audit(1755029338.389:82): avc:  denied  { mount } for  pid=3302 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   30.850056][ T3301] veth1_macvtap: entered promiscuous mode
[   30.870666][   T29] audit: type=1400 audit(1755029338.389:83): avc:  denied  { mounton } for  pid=3302 comm="syz-executor" path="/root/syzkaller.YTYLXV/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   30.884169][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0
[   30.902082][   T29] audit: type=1400 audit(1755029338.389:84): avc:  denied  { mount } for  pid=3302 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   30.918123][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1
[   30.931602][   T29] audit: type=1400 audit(1755029338.389:85): avc:  denied  { mounton } for  pid=3302 comm="syz-executor" path="/root/syzkaller.YTYLXV/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   30.966984][   T29] audit: type=1400 audit(1755029338.389:86): avc:  denied  { mounton } for  pid=3302 comm="syz-executor" path="/root/syzkaller.YTYLXV/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3683 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[   30.996036][   T29] audit: type=1400 audit(1755029338.389:87): avc:  denied  { unmount } for  pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   31.016136][   T29] audit: type=1400 audit(1755029338.419:88): avc:  denied  { mounton } for  pid=3302 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[   31.039733][   T29] audit: type=1400 audit(1755029338.419:89): avc:  denied  { mount } for  pid=3302 comm="syz-executor" name="/" dev="gadgetfs" ino=3687 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[   31.066255][   T29] audit: type=1400 audit(1755029338.669:90): avc:  denied  { read write } for  pid=3302 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   31.074240][  T784] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.119270][ T3305] veth0_vlan: entered promiscuous mode
[   31.135539][ T3305] veth1_vlan: entered promiscuous mode
[   31.151935][  T784] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.175499][  T784] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.189760][ T3304] veth0_vlan: entered promiscuous mode
[   31.199803][  T784] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.212856][ T3311] veth0_vlan: entered promiscuous mode
[   31.228805][ T3304] veth1_vlan: entered promiscuous mode
[   31.237045][ T3311] veth1_vlan: entered promiscuous mode
[   31.276840][ T3305] veth0_macvtap: entered promiscuous mode
[   31.291459][ T3305] veth1_macvtap: entered promiscuous mode
[   31.334810][ T3311] veth0_macvtap: entered promiscuous mode
[   31.344008][ T3304] veth0_macvtap: entered promiscuous mode
[   31.354365][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.368470][ T3304] veth1_macvtap: entered promiscuous mode
[   31.377532][ T3311] veth1_macvtap: entered promiscuous mode
[   31.385845][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.406562][ T1008] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.427332][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.435817][ T1008] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.461979][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.473738][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.491816][ T1008] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.505196][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.527434][ T1008] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.548135][   T31] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.599118][   T31] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.637162][   T31] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.680777][ T3484] netlink: 'syz.2.3': attribute type 10 has an invalid length.
[   31.698247][   T31] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.744826][   T31] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.759630][   T31] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.766223][    C1] hrtimer: interrupt took 36138 ns
[   31.772294][ T3479] tipc: Started in network mode
[   31.778768][ T3479] tipc: Node identity 52c04ade928, cluster identity 4711
[   31.786563][ T3479] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   31.795216][   T31] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.856786][   T31] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.869490][ T3478] tipc: Resetting bearer <eth:syzkaller0>
[   31.884824][ T3478] tipc: Disabling bearer <eth:syzkaller0>
[   31.895871][ T3495] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[   31.906223][ T3495] SELinux: failed to load policy
[   31.965462][ T3497] loop3: detected capacity change from 0 to 2048
[   32.036179][ T3497] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   32.054035][ T3497] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   32.094096][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   33.226418][ T3541] loop2: detected capacity change from 0 to 512
[   33.241829][ T3542] bridge1: entered allmulticast mode
[   33.262926][ T3541] EXT4-fs: inline encryption not supported
[   33.289628][ T3544] syzkaller1: entered promiscuous mode
[   33.302679][ T3544] syzkaller1: entered allmulticast mode
[   33.308008][ T3541] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.27: error while reading EA inode 32 err=-116
[   33.342761][ T3548] loop4: detected capacity change from 0 to 512
[   33.346032][ T3550] loop3: detected capacity change from 0 to 128
[   33.358421][ T3541] EXT4-fs (loop2): Remounting filesystem read-only
[   33.365039][ T3541] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   33.379065][ T3541] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[   33.409025][ T3550] syz.3.30: attempt to access beyond end of device
[   33.409025][ T3550] loop3: rw=2049, sector=145, nr_sectors = 8 limit=128
[   33.419876][ T3541] EXT4-fs (loop2): 1 orphan inode deleted
[   33.428355][ T3550] syz.3.30: attempt to access beyond end of device
[   33.428355][ T3550] loop3: rw=2049, sector=161, nr_sectors = 8 limit=128
[   33.433591][ T3541] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   33.459774][ T3541] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   33.461633][ T3548] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   33.527486][ T3550] syz.3.30: attempt to access beyond end of device
[   33.527486][ T3550] loop3: rw=2049, sector=177, nr_sectors = 24 limit=128
[   33.553135][ T3550] syz.3.30: attempt to access beyond end of device
[   33.553135][ T3550] loop3: rw=2049, sector=209, nr_sectors = 8 limit=128
[   33.569167][ T3548] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   33.585019][ T3555] loop0: detected capacity change from 0 to 512
[   33.629389][ T3550] syz.3.30: attempt to access beyond end of device
[   33.629389][ T3550] loop3: rw=2049, sector=225, nr_sectors = 8 limit=128
[   33.629449][ T3555] EXT4-fs: Ignoring removed nobh option
[   33.653640][ T3550] syz.3.30: attempt to access beyond end of device
[   33.653640][ T3550] loop3: rw=2049, sector=241, nr_sectors = 8 limit=128
[   33.681155][ T3558] syz.3.30: attempt to access beyond end of device
[   33.681155][ T3558] loop3: rw=2049, sector=305, nr_sectors = 80 limit=128
[   33.707004][ T3555] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   33.726721][ T3550] syz.3.30: attempt to access beyond end of device
[   33.726721][ T3550] loop3: rw=2049, sector=257, nr_sectors = 8 limit=128
[   33.751733][ T3558] syz.3.30: attempt to access beyond end of device
[   33.751733][ T3558] loop3: rw=2049, sector=393, nr_sectors = 8 limit=128
[   33.757025][ T3403] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   33.790767][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   33.800076][ T3403] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   33.819876][ T3550] syz.3.30: attempt to access beyond end of device
[   33.819876][ T3550] loop3: rw=2049, sector=273, nr_sectors = 8 limit=128
[   33.846604][ T3555] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.31: corrupted inode contents
[   33.898626][ T3555] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #3: comm syz.0.31: mark_inode_dirty error
[   33.962673][ T3555] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.31: corrupted inode contents
[   34.026884][ T3555] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.31: mark_inode_dirty error
[   34.061467][ T3555] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.31: Failed to acquire dquot type 0
[   34.087343][ T3555] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.31: corrupted inode contents
[   34.109967][ T3555] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #16: comm syz.0.31: mark_inode_dirty error
[   34.170984][ T3555] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.31: corrupted inode contents
[   34.198764][ T3555] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.31: mark_inode_dirty error
[   34.226976][ T3555] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.31: corrupted inode contents
[   34.250715][ T3555] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem
[   34.259375][ T3555] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.31: corrupted inode contents
[   34.280048][ T3555] EXT4-fs error (device loop0): ext4_truncate:4666: inode #16: comm syz.0.31: mark_inode_dirty error
[   34.290827][ T3577] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   34.299878][ T3555] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem
[   34.312976][ T3580] netlink: 16 bytes leftover after parsing attributes in process `syz.3.38'.
[   34.323081][ T3555] EXT4-fs (loop0): 1 truncate cleaned up
[   34.329781][ T3555] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   34.344005][ T3555] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   34.356956][ T3577] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   34.443280][ T3577] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   34.500720][ T3577] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   34.533799][ T3555] syz.0.31 (3555) used greatest stack depth: 9760 bytes left
[   34.552383][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.579063][  T373] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   34.597091][ T3590] loop0: detected capacity change from 0 to 128
[   34.621861][  T373] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   34.637871][ T3588] netlink: 4 bytes leftover after parsing attributes in process `syz.1.42'.
[   34.650995][ T3592] bridge0: port 3(syz_tun) entered blocking state
[   34.651498][ T3590] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[   34.657483][ T3592] bridge0: port 3(syz_tun) entered disabled state
[   34.665666][ T3590] FAT-fs (loop0): Filesystem has been set read-only
[   34.675329][ T3592] syz_tun: entered allmulticast mode
[   34.696042][ T3590] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[   34.704329][ T3590] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[   34.713140][ T3592] syz_tun: entered promiscuous mode
[   34.729884][ T3592] bridge0: port 3(syz_tun) entered blocking state
[   34.736715][ T3592] bridge0: port 3(syz_tun) entered forwarding state
[   34.740954][ T3595] netlink: 12 bytes leftover after parsing attributes in process `syz.1.42'.
[   34.744050][  T373] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   34.774003][  T373] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   34.859872][ T3606] netlink: zone id is out of range
[   34.861282][ T3603] loop4: detected capacity change from 0 to 128
[   34.877572][ T3608] netlink: 5 bytes leftover after parsing attributes in process `syz.1.51'.
[   34.884670][ T3603] =======================================================
[   34.884670][ T3603] WARNING: The mand mount option has been deprecated and
[   34.884670][ T3603]          and is ignored by this kernel. Remove the mand
[   34.884670][ T3603]          option from the mount to silence this warning.
[   34.884670][ T3603] =======================================================
[   34.924120][ T3608] 0Şî{Xą¦: renamed from gretap0 (while UP)
[   34.933356][ T3608] 0Şî{Xą¦: entered allmulticast mode
[   34.939517][ T3608] A link change request failed with some changes committed already. Interface 
30Şî{Xą¦ may have been left with an inconsistent configuration, please check.
[   34.947200][ T3603] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   34.981567][ T3611] syzkaller1: entered promiscuous mode
[   34.987208][ T3611] syzkaller1: entered allmulticast mode
[   35.008206][ T3603] usb usb5: usbfs: process 3603 (syz.4.47) did not claim interface 0 before use
[   35.059051][ T3618] loop1: detected capacity change from 0 to 512
[   35.071251][ T3618] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[   35.091071][ T3622] loop0: detected capacity change from 0 to 512
[   35.099345][ T3622] EXT4-fs: Ignoring removed orlov option
[   35.100052][ T3620] IPv4: Oversized IP packet from 127.202.26.0
[   35.141150][ T3618] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   35.160848][ T3618] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 3: comm syz.1.54: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0
[   35.188632][ T3618] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 12: comm syz.1.54: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0
[   35.194291][ T3622] EXT4-fs: Mount option(s) incompatible with ext2
[   35.221160][ T3618] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 13: comm syz.1.54: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0
[   35.251205][ T3618] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 14: comm syz.1.54: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[   35.274762][ T3618] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 15: comm syz.1.54: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0
[   35.297756][ T3618] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 16: comm syz.1.54: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0
[   35.326195][ T3618] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 17: comm syz.1.54: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[   35.349587][ T3618] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #2: block 18: comm syz.1.54: lblock 23 mapped to illegal pblock 18 (length 1)
[   35.373669][ T3636] loop0: detected capacity change from 0 to 512
[   35.380838][ T3618] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 19: comm syz.1.54: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0
[   35.382705][ T3636] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   35.403278][ T3618] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 20: comm syz.1.54: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0
[   35.413754][ T3636] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it
[   35.444532][ T3636] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.59: Corrupt directory, running e2fsck is recommended
[   35.457614][ T3636] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117
[   35.466136][ T3636] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.59: corrupted in-inode xattr: invalid ea_ino
[   35.482067][ T3636] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.59: couldn't read orphan inode 15 (err -117)
[   35.502699][ T3636] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   35.567879][ T3636] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   35.579723][ T3636] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it
[   35.590079][ T3636] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.59: Corrupt directory, running e2fsck is recommended
[   35.603703][ T3636] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 3: comm syz.0.59: path /13/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0
[   35.624923][ T3636] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 64: comm syz.0.59: path /13/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[   35.688121][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.720824][ T3642] veth0: entered promiscuous mode
[   35.734723][ T3642] netlink: 4 bytes leftover after parsing attributes in process `syz.0.62'.
[   35.842128][ T3644] loop0: detected capacity change from 0 to 512
[   35.860169][ T3644] EXT4-fs: Ignoring removed mblk_io_submit option
[   35.867286][ T3644] EXT4-fs: Ignoring removed bh option
[   35.900182][ T3644] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   35.926766][ T3301] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1128: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   35.943333][ T3644] EXT4-fs (loop0): 1 truncate cleaned up
[   35.943653][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.958583][ T3644] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   35.976074][   T29] kauditd_printk_skb: 159 callbacks suppressed
[   35.976145][   T29] audit: type=1400 audit(1755029343.569:248): avc:  denied  { read append } for  pid=3643 comm="syz.0.63" path="/15/bus/memory.stat" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   36.051138][ T3647] loop1: detected capacity change from 0 to 512
[   36.061292][   T29] audit: type=1326 audit(1755029343.659:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3648 comm="syz.4.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a829aebe9 code=0x7ffc0000
[   36.085234][   T29] audit: type=1326 audit(1755029343.659:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3648 comm="syz.4.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a829aebe9 code=0x7ffc0000
[   36.109257][   T29] audit: type=1326 audit(1755029343.659:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3648 comm="syz.4.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6a829aebe9 code=0x7ffc0000
[   36.134412][   T29] audit: type=1326 audit(1755029343.729:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3648 comm="syz.4.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a829aebe9 code=0x7ffc0000
[   36.135209][ T3647] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   36.180406][   T29] audit: type=1400 audit(1755029343.759:253): avc:  denied  { create } for  pid=3643 comm="syz.0.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   36.200955][   T29] audit: type=1326 audit(1755029343.759:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3648 comm="syz.4.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a829aebe9 code=0x7ffc0000
[   36.202907][ T3647] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   36.226069][   T29] audit: type=1326 audit(1755029343.799:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3648 comm="syz.4.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6a829aebe9 code=0x7ffc0000
[   36.259431][   T29] audit: type=1326 audit(1755029343.799:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3648 comm="syz.4.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a829aebe9 code=0x7ffc0000
[   36.284634][   T29] audit: type=1326 audit(1755029343.799:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3648 comm="syz.4.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a829aebe9 code=0x7ffc0000
[   36.391911][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.527501][ T3666] loop0: detected capacity change from 0 to 1764
[   36.552285][ T3667] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.68'.
[   36.573645][ T3664] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.68'.
[   36.905243][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.961424][ T3696] netlink: 5 bytes leftover after parsing attributes in process `syz.0.74'.
[   36.970345][ T3698] loop1: detected capacity change from 0 to 512
[   36.970789][ T3696] 0Şî{Xą¦: renamed from gretap0 (while UP)
[   36.986388][ T3698] EXT4-fs: inline encryption not supported
[   36.987445][ T3696] 0Şî{Xą¦: entered allmulticast mode
[   37.008302][ T3696] A link change request failed with some changes committed already. Interface 
30Şî{Xą¦ may have been left with an inconsistent configuration, please check.
[   37.035625][ T3698] EXT4-fs error (device loop1): ext4_xattr_inode_iget:442: comm syz.1.75: error while reading EA inode 32 err=-116
[   37.062624][ T3698] EXT4-fs (loop1): Remounting filesystem read-only
[   37.069262][ T3698] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[   37.090727][ T3698] EXT4-fs (loop1): 1 orphan inode deleted
[   37.097002][ T3698] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   37.125417][ T3705] loop0: detected capacity change from 0 to 512
[   37.217948][ T3705] EXT4-fs: Ignoring removed bh option
[   37.245071][ T3698] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.255505][ T3705] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[   37.282945][ T3705] EXT4-fs (loop0): 1 truncate cleaned up
[   37.295596][ T3705] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   37.318820][ T3705] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[   37.338734][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.686340][ T3727] netlink: 4 bytes leftover after parsing attributes in process `syz.0.83'.
[   37.804601][ T3734] loop1: detected capacity change from 0 to 1024
[   37.830907][ T3734] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   37.892478][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.548611][ T3748] loop4: detected capacity change from 0 to 1764
[   38.577629][ T3752] loop2: detected capacity change from 0 to 1024
[   38.592869][ T3752] EXT4-fs: Ignoring removed bh option
[   38.598557][ T3752] EXT4-fs: inline encryption not supported
[   38.622558][ T3752] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   38.634977][ T3754] bridge_slave_0: left allmulticast mode
[   38.635427][ T3752] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[   38.640900][ T3754] bridge_slave_0: left promiscuous mode
[   38.656207][ T3754] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.667689][ T3754] bridge_slave_1: left allmulticast mode
[   38.673587][ T3754] bridge_slave_1: left promiscuous mode
[   38.678599][ T3752] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.91: lblock 2 mapped to illegal pblock 2 (length 1)
[   38.679545][ T3754] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.702184][ T3752] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.91: lblock 0 mapped to illegal pblock 48 (length 1)
[   38.706667][ T3756] netlink: 4 bytes leftover after parsing attributes in process `syz.4.93'.
[   38.718554][ T3752] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.91: Failed to acquire dquot type 0
[   38.737835][ T3754] bond0: (slave bond_slave_0): Releasing backup interface
[   38.745548][ T3752] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem
[   38.758965][ T3754] bond0: (slave bond_slave_1): Releasing backup interface
[   38.773333][ T3754] team0: Port device team_slave_0 removed
[   38.786860][ T3752] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.91: mark_inode_dirty error
[   38.810358][ T3754] team0: Port device team_slave_1 removed
[   38.817363][ T3752] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[   38.829779][ T3754] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   38.837417][ T3754] batman_adv: batadv0: Removing interface: batadv_slave_0
[   38.842741][ T3752] EXT4-fs (loop2): 1 orphan inode deleted
[   38.852009][ T3752] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   38.852953][ T3754] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   38.872854][ T3754] batman_adv: batadv0: Removing interface: batadv_slave_1
[   38.882570][   T37] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1)
[   38.899547][   T37] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 0
[   38.939802][ T3752] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.91: lblock 0 mapped to illegal pblock 48 (length 1)
[   39.033297][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.174889][ T3771] loop2: detected capacity change from 0 to 512
[   39.185672][ T3771] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[   39.185991][ T3769] hub 6-0:1.0: USB hub found
[   39.201342][ T3769] hub 6-0:1.0: 8 ports detected
[   39.216724][ T3771] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   39.231793][ T3771] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 3: comm syz.2.99: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0
[   39.253490][ T3771] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 12: comm syz.2.99: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0
[   39.275570][ T3771] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 13: comm syz.2.99: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0
[   39.298893][ T3771] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 14: comm syz.2.99: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[   39.320663][ T3771] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 15: comm syz.2.99: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0
[   39.345040][ T3771] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 16: comm syz.2.99: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0
[   39.367646][ T3771] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 17: comm syz.2.99: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[   39.389340][ T3771] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #2: block 18: comm syz.2.99: lblock 23 mapped to illegal pblock 18 (length 1)
[   39.415127][ T3771] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 19: comm syz.2.99: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0
[   39.437101][ T3771] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 20: comm syz.2.99: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0
[   39.743847][ T3793] __nla_validate_parse: 1 callbacks suppressed
[   39.743861][ T3793] netlink: 204 bytes leftover after parsing attributes in process `syz.1.107'.
[   39.773963][ T3793] netlink: 4 bytes leftover after parsing attributes in process `syz.1.107'.
[   39.983431][ T3803] syz.4.110 uses obsolete (PF_INET,SOCK_PACKET)
[   40.072693][ T3810] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   40.111128][ T3810] 9pnet: p9_errstr2errno: server reported unknown error 184467440737095
[   40.146467][ T3311] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1128: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   40.163550][ T3814] loop4: detected capacity change from 0 to 256
[   40.172020][ T3814] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   40.200321][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.211582][ T3814] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[   40.220400][ T3814] FAT-fs (loop4): Filesystem has been set read-only
[   40.451771][ T3825] loop4: detected capacity change from 0 to 512
[   40.504090][ T3825] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.118: iget: bad i_size value: 38620345925642
[   40.554343][ T3833] loop3: detected capacity change from 0 to 512
[   40.589209][ T3833] msdos: Unknown parameter 'gh'
[   40.597800][ T3825] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.118: couldn't read orphan inode 15 (err -117)
[   40.664607][ T3825] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   40.788256][ T3838] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.118: bg 0: block 5: invalid block bitmap
[   40.822552][ T3841] netlink: 204 bytes leftover after parsing attributes in process `syz.2.122'.
[   40.853373][ T3841] netlink: 4 bytes leftover after parsing attributes in process `syz.2.122'.
[   40.875724][ T3838] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 904 with error 28
[   40.888919][ T3838] EXT4-fs (loop4): This should not happen!! Data will be lost
[   40.888919][ T3838] 
[   40.898762][ T3838] EXT4-fs (loop4): Total free blocks count 0
[   40.905267][ T3838] EXT4-fs (loop4): Free/Dirty block details
[   40.911766][ T3838] EXT4-fs (loop4): free_blocks=0
[   40.917311][ T3838] EXT4-fs (loop4): dirty_blocks=908
[   40.922720][ T3838] EXT4-fs (loop4): Block reservation details
[   40.929123][ T3838] EXT4-fs (loop4): i_reserved_data_blocks=908
[   41.195933][   T29] kauditd_printk_skb: 107 callbacks suppressed
[   41.195946][   T29] audit: type=1400 audit(1755029348.789:361): avc:  denied  { block_suspend } for  pid=3846 comm="syz.0.124" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   41.226289][   T37] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 904 with max blocks 4 with error 28
[   41.264456][   T29] audit: type=1400 audit(1755029348.849:362): avc:  denied  { read write } for  pid=3846 comm="syz.0.124" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   41.288486][   T29] audit: type=1400 audit(1755029348.849:363): avc:  denied  { open } for  pid=3846 comm="syz.0.124" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   41.312467][   T29] audit: type=1400 audit(1755029348.849:364): avc:  denied  { ioctl } for  pid=3846 comm="syz.0.124" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   41.343368][ T3850] loop3: detected capacity change from 0 to 512
[   41.361976][ T3850] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[   41.386536][ T3850] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   41.420721][   T29] audit: type=1326 audit(1755029349.019:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3834 comm="syz.1.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05bb3eebe9 code=0x7ffc0000
[   41.445761][   T29] audit: type=1326 audit(1755029349.019:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3834 comm="syz.1.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05bb3eebe9 code=0x7ffc0000
[   41.473489][ T3850] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 3: comm syz.3.126: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0
[   41.507658][ T3850] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 12: comm syz.3.126: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0
[   41.545950][   T29] audit: type=1326 audit(1755029349.139:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3834 comm="syz.1.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f05bb3eebe9 code=0x7ffc0000
[   41.570598][   T29] audit: type=1326 audit(1755029349.139:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3834 comm="syz.1.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05bb3eebe9 code=0x7ffc0000
[   41.594679][   T29] audit: type=1326 audit(1755029349.139:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3834 comm="syz.1.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05bb3eebe9 code=0x7ffc0000
[   41.619177][   T29] audit: type=1326 audit(1755029349.139:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3834 comm="syz.1.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f05bb3eebe9 code=0x7ffc0000
[   41.646334][ T3850] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 13: comm syz.3.126: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0
[   41.693277][ T3850] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 14: comm syz.3.126: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[   41.734276][ T3850] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 15: comm syz.3.126: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0
[   41.802958][ T3865] loop4: detected capacity change from 0 to 512
[   41.815844][ T3850] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 16: comm syz.3.126: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0
[   41.855510][ T3865] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   41.874092][ T3860] lo speed is unknown, defaulting to 1000
[   41.884324][ T3850] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 17: comm syz.3.126: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[   41.906581][ T3860] lo speed is unknown, defaulting to 1000
[   41.913167][ T3860] lo speed is unknown, defaulting to 1000
[   41.919558][ T3860] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   41.938103][ T3860] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   41.953853][ T3860] lo speed is unknown, defaulting to 1000
[   41.963627][ T3866] ------------[ cut here ]------------
[   41.969377][ T3866] verifier bug: REG INVARIANTS VIOLATION (false_reg1): range bounds violation u64=[0x2, 0x0] s64=[0x2, 0x0] u32=[0x2, 0x0] s32=[0x2, 0x0] var_off=(0x0, 0x0)(1)
[   41.987253][ T3866] WARNING: CPU: 0 PID: 3866 at kernel/bpf/verifier.c:2728 reg_bounds_sanity_check+0x673/0x680
[   41.997926][ T3866] Modules linked in:
[   42.002294][ T3866] CPU: 0 UID: 0 PID: 3866 Comm: syz.2.128 Not tainted 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) 
[   42.017035][ T3866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   42.027766][ T3866] RIP: 0010:reg_bounds_sanity_check+0x673/0x680
[   42.034768][ T3866] Code: 7c 24 18 41 ff 74 24 20 55 41 56 4d 89 ee 53 48 8b 5c 24 30 ff 74 24 40 ff 74 24 50 ff 74 24 30 e8 72 80 ba ff 48 83 c4 38 90 <0f> 0b 90 90 e9 02 fb ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90
[   42.055504][ T3866] RSP: 0018:ffffc9000f36f440 EFLAGS: 00010292
[   42.061849][ T3866] RAX: a9da62590f2d1300 RBX: ffff888119ff4b88 RCX: 0000000000080000
[   42.070314][ T3866] RDX: ffffc90003a3e000 RSI: 000000000000ba1c RDI: 000000000000ba1d
[   42.078418][ T3866] RBP: 0000000000000000 R08: 0001c9000f36f27f R09: 0000000000000000
[   42.086522][ T3866] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff888119ff4b48
[   42.094886][ T3866] R13: ffff88811c820000 R14: ffff88811c820000 R15: ffff888119ff4b80
[   42.103342][ T3866] FS:  00007f10687ee6c0(0000) GS:ffff8882aee44000(0000) knlGS:0000000000000000
[   42.112569][ T3866] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   42.113722][ T3860] lo speed is unknown, defaulting to 1000
[   42.119161][ T3866] CR2: fffffffff0000000 CR3: 000000011bc88000 CR4: 00000000003506f0
[   42.119188][ T3866] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   42.126394][ T3860] lo speed is unknown, defaulting to 1000
[   42.133529][ T3866] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[   42.142586][ T3860] lo speed is unknown, defaulting to 1000
[   42.147813][ T3866] Call Trace:
[   42.147823][ T3866]  <TASK>
[   42.147837][ T3866]  reg_set_min_max+0x215/0x260
[   42.173064][ T3866]  check_cond_jmp_op+0x1013/0x16e0
[   42.178213][ T3866]  do_check+0x332a/0x7a10
[   42.182911][ T3866]  ? __account_obj_stock+0x211/0x350
[   42.188339][ T3866]  ? __rcu_read_unlock+0x4f/0x70
[   42.193689][ T3866]  ? __pfx_verbose+0x10/0x10
[   42.193718][ T3860] lo speed is unknown, defaulting to 1000
[   42.198319][ T3866]  ? __pfx_disasm_kfunc_name+0x10/0x10
[   42.209766][ T3866]  do_check_common+0xc3a/0x12a0
[   42.214815][ T3866]  bpf_check+0x942b/0xd9e0
[   42.219309][ T3866]  ? __rcu_read_unlock+0x4f/0x70
[   42.225457][ T3866]  ? __alloc_frozen_pages_noprof+0x188/0x360
[   42.231801][ T3866]  ? alloc_pages_bulk_noprof+0x4b8/0x540
[   42.238045][ T3866]  ? __vmap_pages_range_noflush+0xbb3/0xbd0
[   42.244534][ T3866]  ? pcpu_block_update+0x377/0x3b0
[   42.249761][ T3866]  ? _find_next_zero_bit+0x64/0xa0
[   42.255078][ T3866]  ? pcpu_block_refresh_hint+0x157/0x170
[   42.260870][ T3866]  ? pcpu_block_update_hint_alloc+0x63d/0x660
[   42.267420][ T3866]  ? pcpu_block_update_hint_alloc+0x63d/0x660
[   42.274737][ T3866]  ? css_rstat_updated+0xb7/0x240
[   42.280083][ T3866]  ? __rcu_read_unlock+0x4f/0x70
[   42.285130][ T3866]  ? pcpu_memcg_post_alloc_hook+0xf1/0x150
[   42.291479][ T3866]  ? should_fail_ex+0x30/0x280
[   42.296484][ T3866]  ? selinux_bpf_prog_load+0x36/0xf0
[   42.302206][ T3866]  ? should_failslab+0x8c/0xb0
[   42.307029][ T3866]  ? __kmalloc_cache_noprof+0x189/0x320
[   42.312676][ T3866]  ? selinux_bpf_prog_load+0xbf/0xf0
[   42.318872][ T3866]  ? security_bpf_prog_load+0x2c/0xa0
[   42.325581][ T3866]  bpf_prog_load+0xedd/0x1070
[   42.330923][ T3866]  ? security_bpf+0x2b/0x90
[   42.335630][ T3866]  __sys_bpf+0x462/0x7b0
[   42.339945][ T3866]  __x64_sys_bpf+0x41/0x50
[   42.344653][ T3866]  x64_sys_call+0x2aea/0x2ff0
[   42.350448][ T3866]  do_syscall_64+0xd2/0x200
[   42.355636][ T3866]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   42.362496][ T3866]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   42.369107][ T3866]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   42.375341][ T3866] RIP: 0033:0x7f1069daebe9
[   42.379982][ T3866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   42.400511][ T3866] RSP: 002b:00007f10687ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   42.409093][ T3866] RAX: ffffffffffffffda RBX: 00007f1069fd6090 RCX: 00007f1069daebe9
[   42.417482][ T3866] RDX: 0000000000000048 RSI: 0000200000000100 RDI: 0000000000000005
[   42.425874][ T3866] RBP: 00007f1069e31e19 R08: 0000000000000000 R09: 0000000000000000
[   42.434062][ T3866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   42.442489][ T3866] R13: 00007f1069fd6128 R14: 00007f1069fd6090 R15: 00007fff46a34818
[   42.450771][ T3866]  </TASK>
[   42.453858][ T3866] ---[ end trace 0000000000000000 ]---
[   42.461683][ T3865] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.476576][ T3305] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1128: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   42.496817][ T3865] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   42.585231][ T3876] loop0: detected capacity change from 0 to 1024
[   42.592738][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.687644][ T3882] loop2: detected capacity change from 0 to 2048
[   42.713824][ T3876] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   42.738845][ T3887] mmap: syz.1.137 (3887) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   42.757715][ T3887] loop1: detected capacity change from 0 to 512
[   42.769706][ T3882] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   42.822859][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.851178][ T3887] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.890916][ T3893] netlink: 4 bytes leftover after parsing attributes in process `syz.3.139'.
[   42.899774][ T3887] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   42.911607][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.023259][ T3887] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[   43.040830][ T3887] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1029 with error 28
[   43.053892][ T3887] EXT4-fs (loop1): This should not happen!! Data will be lost
[   43.053892][ T3887] 
[   43.063890][ T3887] EXT4-fs (loop1): Total free blocks count 0
[   43.070433][ T3887] EXT4-fs (loop1): Free/Dirty block details
[   43.076858][ T3887] EXT4-fs (loop1): free_blocks=65280
[   43.082560][ T3887] EXT4-fs (loop1): dirty_blocks=1029
[   43.087853][ T3887] EXT4-fs (loop1): Block reservation details
[   43.094018][ T3887] EXT4-fs (loop1): i_reserved_data_blocks=1029
[   43.100988][ T3902] capability: warning: `syz.3.141' uses deprecated v2 capabilities in a way that may be insecure
[   43.122795][ T3311] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set
[   43.144275][ T3311] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem
[   43.159194][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.169191][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.261045][ T3913] loop2: detected capacity change from 0 to 512
[   43.271180][ T3911] loop0: detected capacity change from 0 to 8192
[   43.275146][ T3913] EXT4-fs: Ignoring removed nomblk_io_submit option
[   43.285782][ T3913] EXT4-fs: Ignoring removed nomblk_io_submit option
[   43.296608][ T3913] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[   43.307943][ T3913] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[   43.318138][ T3913] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2
[   43.328891][ T3915] netlink: 8 bytes leftover after parsing attributes in process `syz.1.147'.
[   43.331385][ T3913] EXT4-fs (loop2): 1 truncate cleaned up
[   43.341944][ T3915] netlink: 8 bytes leftover after parsing attributes in process `syz.1.147'.
[   43.346412][ T3913] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   43.370591][ T3915] loop1: detected capacity change from 0 to 256
[   43.377855][ T3915] msdos: Unknown parameter '˙0xffffffffffffffff˙˙˙˙'
[   43.391546][ T3913] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   43.434350][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.480646][ T3921] random: crng reseeded on system resumption
[   43.876526][ T3935] loop3: detected capacity change from 0 to 512
[   43.884875][ T3935] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.153: iget: bad i_size value: 38620345925642
[   43.898859][ T3935] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.153: couldn't read orphan inode 15 (err -117)
[   43.913588][ T3935] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   43.996760][ T3937] Falling back ldisc for ttyS3.
[   44.008350][ T3940] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.153: bg 0: block 5: invalid block bitmap
[   44.027543][ T3940] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[   44.041209][ T3940] EXT4-fs (loop3): This should not happen!! Data will be lost
[   44.041209][ T3940] 
[   44.051063][ T3940] EXT4-fs (loop3): Total free blocks count 0
[   44.057187][ T3940] EXT4-fs (loop3): Free/Dirty block details
[   44.063165][ T3940] EXT4-fs (loop3): free_blocks=0
[   44.068162][ T3940] EXT4-fs (loop3): dirty_blocks=2348
[   44.073758][ T3940] EXT4-fs (loop3): Block reservation details
[   44.080127][ T3940] EXT4-fs (loop3): i_reserved_data_blocks=2348
[   44.171995][  T784] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 296 with error 28
[   44.352366][ T3976] Driver unsupported XDP return value 0 on prog  (id 96) dev N/A, expect packet loss!
[   44.391415][ T3976] loop1: detected capacity change from 0 to 1024
[   44.399320][ T3976] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled
[   44.489691][ T3976] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   44.527335][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.372616][ T3969] syz.3.155 (3969) used greatest stack depth: 7536 bytes left
[   45.393717][ T3999] loop3: detected capacity change from 0 to 512
[   45.427075][ T3999] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.440479][ T3999] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   45.462013][ T3991] loop0: detected capacity change from 0 to 32768
[   45.530841][ T3293]  loop0: p1 p3 < >
[   45.548781][ T3991]  loop0: p1 p3 < >
[   45.630249][ T4012] loop1: detected capacity change from 0 to 512
[   45.654894][ T3498] udevd[3498]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[   45.667382][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[   45.698529][ T4012] EXT4-fs (loop1): 1 orphan inode deleted
[   45.706960][ T4012] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.720375][  T784] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 1
[   45.726438][ T3498] udevd[3498]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[   45.732944][ T4012] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   45.754672][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[   45.947549][ T4023] loop0: detected capacity change from 0 to 128
[   45.958875][ T4023] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   45.973144][ T4023] ext4 filesystem being mounted at /44/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   45.990760][ T4012] netlink: 'syz.1.170': attribute type 4 has an invalid length.
[   46.027947][ T4023] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4)
[   46.034935][ T4023] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   46.042798][ T4023] vhci_hcd vhci_hcd.0: Device attached
[   46.064741][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.094756][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.124277][ T4029] loop3: detected capacity change from 0 to 8192
[   46.146394][ T4033] netlink: 4 bytes leftover after parsing attributes in process `syz.1.174'.
[   46.176655][ T4029]  loop3: p1 p2 p3 p4
[   46.181102][ T4029] loop3: p1 size 3523149824 extends beyond EOD, truncated
[   46.189178][ T4029] loop3: p2 start 4293394688 is beyond EOD, truncated
[   46.196280][ T4029] loop3: p3 start 150994944 is beyond EOD, truncated
[   46.203158][ T4029] loop3: p4 size 50331648 extends beyond EOD, truncated
[   46.212520][   T29] kauditd_printk_skb: 395 callbacks suppressed
[   46.212536][   T29] audit: type=1326 audit(1755029353.809:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4008 comm="syz.4.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6a829a5ba7 code=0x7ffc0000
[   46.244382][   T29] audit: type=1400 audit(1755029353.819:766): avc:  denied  { read } for  pid=4028 comm="syz.3.172" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[   46.268006][   T29] audit: type=1400 audit(1755029353.819:767): avc:  denied  { open } for  pid=4028 comm="syz.3.172" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[   46.292982][   T29] audit: type=1326 audit(1755029353.839:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4008 comm="syz.4.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6a8294add9 code=0x7ffc0000
[   46.299800][ T2956] usb 1-1: new low-speed USB device number 2 using vhci_hcd
[   46.316541][   T29] audit: type=1326 audit(1755029353.839:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4008 comm="syz.4.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6a829a5ba7 code=0x7ffc0000
[   46.348744][   T29] audit: type=1326 audit(1755029353.839:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4008 comm="syz.4.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6a8294add9 code=0x7ffc0000
[   46.351173][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[   46.373478][   T29] audit: type=1326 audit(1755029353.839:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4008 comm="syz.4.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f6a829aebe9 code=0x7ffc0000
[   46.385209][ T3498] udevd[3498]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[   46.425761][ T4036] loop3: detected capacity change from 0 to 1024
[   46.433838][ T4036] EXT4-fs: Ignoring removed orlov option
[   46.443353][   T29] audit: type=1326 audit(1755029353.849:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4008 comm="syz.4.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6a829a5ba7 code=0x7ffc0000
[   46.470386][   T29] audit: type=1326 audit(1755029353.849:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4008 comm="syz.4.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6a8294add9 code=0x7ffc0000
[   46.498385][   T29] audit: type=1326 audit(1755029353.849:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4008 comm="syz.4.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f6a829aebe9 code=0x7ffc0000
[   46.548655][ T4036] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   46.554642][ T4042] tipc: Started in network mode
[   46.567344][ T4042] tipc: Node identity 7e0e19908d4, cluster identity 4711
[   46.574895][ T4042] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   46.598063][ T4042] syzkaller0: entered promiscuous mode
[   46.603945][ T4042] syzkaller0: entered allmulticast mode
[   46.619861][ T4025] vhci_hcd: connection reset by peer
[   46.628448][   T51] vhci_hcd: stop threads
[   46.632865][   T51] vhci_hcd: release socket
[   46.637800][   T51] vhci_hcd: disconnect device
[   46.651728][ T3302] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   46.652744][ T4042] tipc: Resetting bearer <eth:syzkaller0>
[   46.686069][ T4040] tipc: Resetting bearer <eth:syzkaller0>
[   46.698063][ T4040] tipc: Disabling bearer <eth:syzkaller0>
[   46.810575][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.820010][ T4050] loop0: detected capacity change from 0 to 512
[   46.827247][ T4050] EXT4-fs: Ignoring removed oldalloc option
[   46.869505][ T4050] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.180: Parent and EA inode have the same ino 15
[   46.904581][ T4055] loop3: detected capacity change from 0 to 512
[   46.930691][ T4057] lo speed is unknown, defaulting to 1000
[   47.102362][ T4050] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.180: Parent and EA inode have the same ino 15
[   47.138988][ T4055] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   47.222110][ T4055] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.182: invalid indirect mapped block 4294967295 (level 1)
[   47.260815][ T4050] EXT4-fs (loop0): 1 orphan inode deleted
[   47.282374][ T4050] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   47.304589][ T4055] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.182: invalid indirect mapped block 4294967295 (level 1)
[   47.344986][ T4055] EXT4-fs (loop3): 2 truncates cleaned up
[   47.358130][ T4054] loop2: detected capacity change from 0 to 32768
[   47.359460][ T4055] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   47.386598][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.464144][ T4055] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.182: bg 0: block 5: invalid block bitmap
[   47.504508][ T4054]  loop2: p1 p3 < >
[   47.505252][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.634097][ T4071] loop3: detected capacity change from 0 to 1024
[   47.642285][ T4072] veth3: entered promiscuous mode
[   47.666805][ T4074] loop4: detected capacity change from 0 to 512
[   47.699015][ T3498] udevd[3498]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[   47.700752][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[   47.727682][ T4074] EXT4-fs (loop4): revision level too high, forcing read-only mode
[   47.728789][ T4071] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   47.736936][ T4074] EXT4-fs (loop4): orphan cleanup on readonly fs
[   47.759505][ T4074] EXT4-fs (loop4): 1 orphan inode deleted
[   47.766518][  T784] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 1
[   47.791634][ T4089] IPv6: Can't replace route, no match found
[   47.798988][ T4074] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   47.827650][ T4089] bridge0: port 1(batadv1) entered blocking state
[   47.834677][ T4089] bridge0: port 1(batadv1) entered disabled state
[   47.863123][ T4071] netlink: 48 bytes leftover after parsing attributes in process `syz.3.185'.
[   47.888098][ T4089] batadv1: entered allmulticast mode
[   47.895770][ T4089] batadv1: entered promiscuous mode
[   47.896566][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.941568][ T4071] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.185: Allocating blocks 273-513 which overlap fs metadata
[   47.969755][ T4071] EXT4-fs (loop3): pa ffff888100614700: logic 0, phys. 257, len 16
[   47.978200][ T4071] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 1, pa_free 16
[   48.085760][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.161281][ T4102] vhci_hcd: invalid port number 96
[   48.166562][ T4102] vhci_hcd: default hub control req: 0000 vfffc i0060 l0
[   48.261041][ T4106] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3)
[   48.267571][ T4106] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   48.275115][ T4106] vhci_hcd vhci_hcd.0: Device attached
[   48.330072][   T31] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[   48.339490][   T31] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[   48.399897][ T4107] vhci_hcd: connection closed
[   48.400157][  T784] vhci_hcd: stop threads
[   48.409583][  T784] vhci_hcd: release socket
[   48.414052][  T784] vhci_hcd: disconnect device
[   48.459887][ T1104] vhci_hcd: vhci_device speed not set
[   49.268979][ T4136] netlink: 24 bytes leftover after parsing attributes in process `syz.3.207'.
[   49.405815][ T4140] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   49.412341][ T4140] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   50.008480][ T4148] loop4: detected capacity change from 0 to 2048
[   50.031996][ T4148] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   50.140937][ T4165] netlink: 4 bytes leftover after parsing attributes in process `syz.3.215'.
[   50.150835][ T4165] hsr_slave_0: left promiscuous mode
[   50.156947][ T4165] hsr_slave_1: left promiscuous mode
[   50.481370][ T4175] lo speed is unknown, defaulting to 1000
[   50.522741][ T4179] netlink: '+}[@': attribute type 13 has an invalid length.
[   50.628970][   T31] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   50.638345][   T31] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   50.657228][   T31] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   50.670397][   T31] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   50.695786][ T4181] loop3: detected capacity change from 0 to 1024
[   50.707638][ T4181] EXT4-fs: Ignoring removed orlov option
[   50.717668][ T4181] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   50.742064][ T4181] SELinux: syz.3.221 (4181) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   50.777103][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.831252][ T4193] loop1: detected capacity change from 0 to 2048
[   50.928997][ T4193] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   51.296296][ T4206] loop2: detected capacity change from 0 to 512
[   51.322967][ T4206] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   51.342201][ T4206] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   51.389740][ T2956] usb 1-1: enqueue for inactive port 0
[   51.395835][ T2956] usb 1-1: enqueue for inactive port 0
[   51.469947][ T2956] vhci_hcd: vhci_device speed not set
[   51.840936][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.160376][ T4225] netlink: 8 bytes leftover after parsing attributes in process `syz.1.234'.
[   52.173541][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.200977][   T29] kauditd_printk_skb: 147 callbacks suppressed
[   52.200991][   T29] audit: type=1326 audit(1755029359.799:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4226 comm="syz.2.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1069daebe9 code=0x7ffc0000
[   52.232952][   T29] audit: type=1326 audit(1755029359.799:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4226 comm="syz.2.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1069daebe9 code=0x7ffc0000
[   52.257654][   T29] audit: type=1326 audit(1755029359.799:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4226 comm="syz.2.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f1069daebe9 code=0x7ffc0000
[   52.282686][   T29] audit: type=1326 audit(1755029359.799:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4226 comm="syz.2.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1069daebe9 code=0x7ffc0000
[   52.306964][   T29] audit: type=1326 audit(1755029359.799:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4226 comm="syz.2.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1069daebe9 code=0x7ffc0000
[   52.332400][   T29] audit: type=1326 audit(1755029359.829:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4226 comm="syz.2.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f1069daebe9 code=0x7ffc0000
[   52.356102][   T29] audit: type=1326 audit(1755029359.839:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4226 comm="syz.2.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1069daebe9 code=0x7ffc0000
[   52.380272][   T29] audit: type=1326 audit(1755029359.839:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4226 comm="syz.2.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1069daebe9 code=0x7ffc0000
[   52.404211][   T29] audit: type=1326 audit(1755029359.839:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4226 comm="syz.2.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1069daebe9 code=0x7ffc0000
[   52.427702][   T29] audit: type=1326 audit(1755029359.839:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4226 comm="syz.2.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1069daebe9 code=0x7ffc0000
[   52.545963][ T4230] loop4: detected capacity change from 0 to 512
[   52.563696][ T4230] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   52.578646][ T4230] EXT4-fs (loop4): 1 truncate cleaned up
[   52.585680][ T4230] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   52.633367][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.670890][ T4235] vhci_hcd: invalid port number 96
[   52.676917][ T4235] vhci_hcd: default hub control req: 0000 vfffc i0060 l0
[   52.677104][ T4237] loop4: detected capacity change from 0 to 512
[   52.707534][ T4237] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   52.811254][ T4237] EXT4-fs (loop4): 1 truncate cleaned up
[   52.818613][ T4237] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   52.936114][ T4237] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.072078][ T4246] netlink: 4 bytes leftover after parsing attributes in process `syz.0.242'.
[   53.134430][ T4246] lo speed is unknown, defaulting to 1000
[   53.311110][ T4256] loop1: detected capacity change from 0 to 512
[   53.329892][ T4256] EXT4-fs: Ignoring removed nobh option
[   53.583421][ T4256] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.245: corrupted inode contents
[   53.699326][ T4256] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #3: comm syz.1.245: mark_inode_dirty error
[   53.832310][ T4256] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.245: corrupted inode contents
[   53.850068][ T4266] loop2: detected capacity change from 0 to 1024
[   53.858534][ T4256] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.245: mark_inode_dirty error
[   53.883301][ T4266] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   53.906877][ T4256] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.245: Failed to acquire dquot type 0
[   53.938734][ T4256] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.245: corrupted inode contents
[   53.954632][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.965922][ T4256] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #16: comm syz.1.245: mark_inode_dirty error
[   53.978580][ T4256] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.245: corrupted inode contents
[   53.991713][ T4256] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.245: mark_inode_dirty error
[   54.015362][ T4256] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.245: corrupted inode contents
[   54.055868][ T4256] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem
[   54.069053][ T4276] loop2: detected capacity change from 0 to 1024
[   54.086102][ T4276] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   54.097065][ T4276] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   54.114238][ T4256] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.245: corrupted inode contents
[   54.133782][ T4256] EXT4-fs error (device loop1): ext4_truncate:4666: inode #16: comm syz.1.245: mark_inode_dirty error
[   54.146392][ T4276] EXT4-fs (loop2): corrupt root inode, run e2fsck
[   54.166808][ T4278] batman_adv: batadv0: Adding interface: dummy0
[   54.174014][ T4278] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.207828][ T4276] EXT4-fs (loop2): mount failed
[   54.219322][ T4256] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem
[   54.230810][ T4276] netlink: 48 bytes leftover after parsing attributes in process `syz.2.249'.
[   54.236286][ T4278] batman_adv: batadv0: Interface activated: dummy0
[   54.266707][ T4256] EXT4-fs (loop1): 1 truncate cleaned up
[   54.287217][ T4256] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   54.314012][ T4256] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   54.329356][ T4256] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.361815][ T4286] loop2: detected capacity change from 0 to 512
[   54.384033][ T4289] serio: Serial port ptm0
[   54.397475][ T4286] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   54.412903][ T4286] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   54.433020][ T4286] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   54.458376][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.486370][ T4296] netlink: 4 bytes leftover after parsing attributes in process `syz.4.255'.
[   54.491203][ T4256] syz.1.245 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[   54.507474][ T4256] CPU: 0 UID: 0 PID: 4256 Comm: syz.1.245 Tainted: G        W           6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) 
[   54.507506][ T4256] Tainted: [W]=WARN
[   54.507512][ T4256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   54.507586][ T4256] Call Trace:
[   54.507593][ T4256]  <TASK>
[   54.507600][ T4256]  __dump_stack+0x1d/0x30
[   54.507621][ T4256]  dump_stack_lvl+0xe8/0x140
[   54.507641][ T4256]  dump_stack+0x15/0x1b
[   54.507658][ T4256]  dump_header+0x81/0x220
[   54.507689][ T4256]  oom_kill_process+0x342/0x400
[   54.507771][ T4256]  out_of_memory+0x979/0xb80
[   54.507814][ T4256]  try_charge_memcg+0x5e6/0x9e0
[   54.507842][ T4256]  charge_memcg+0x51/0xc0
[   54.507884][ T4256]  mem_cgroup_swapin_charge_folio+0xcc/0x150
[   54.507985][ T4256]  __read_swap_cache_async+0x1df/0x350
[   54.508031][ T4256]  swap_cluster_readahead+0x376/0x3e0
[   54.508063][ T4256]  swapin_readahead+0xde/0x6f0
[   54.508098][ T4256]  ? __filemap_get_folio+0x4f7/0x6b0
[   54.508132][ T4256]  ? __rcu_read_unlock+0x34/0x70
[   54.508180][ T4256]  ? swap_cache_get_folio+0x77/0x200
[   54.508207][ T4256]  do_swap_page+0x301/0x2430
[   54.508232][ T4256]  ? css_rstat_updated+0xb7/0x240
[   54.508326][ T4256]  ? __pfx_default_wake_function+0x10/0x10
[   54.508351][ T4256]  handle_mm_fault+0x9a5/0x2c20
[   54.508381][ T4256]  do_user_addr_fault+0x636/0x1090
[   54.508426][ T4256]  exc_page_fault+0x62/0xa0
[   54.508454][ T4256]  asm_exc_page_fault+0x26/0x30
[   54.508588][ T4256] RIP: 0033:0x7f05bb2ae2a8
[   54.508607][ T4256] Code: 20 c7 44 24 0c 30 00 00 00 48 89 44 24 18 e8 df 8f 0e 00 48 8b 3d 30 99 33 00 e8 a3 ee 0e 00 44 89 65 00 48 81 c4 d0 00 00 00 <5b> 5d 41 5c c3 0f 1f 00 55 48 89 fe 31 c0 53 48 89 fb 48 8d 3d 29
[   54.508626][ T4256] RSP: 002b:00007f05b9e2de50 EFLAGS: 00010206
[   54.508644][ T4256] RAX: 0000000000000000 RBX: 00007f05bb44dd20 RCX: ffffffffffffffa8
[   54.508659][ T4256] RDX: 00002000000000c0 RSI: 0000000000000014 RDI: 00007f05bb44dd20
[   54.508673][ T4256] RBP: 00002000000000c0 R08: 00007f05b9e2def0 R09: 0000000003000010
[   54.508688][ T4256] R10: 0000000003000010 R11: 0000000000000246 R12: 0000200000000980
[   54.508702][ T4256] R13: 00007f05b9e2deb0 R14: 0000000000000519 R15: 0000200000000100
[   54.508751][ T4256]  </TASK>
[   54.508758][ T4256] memory: usage 307200kB, limit 307200kB, failcnt 151
[   54.592433][ T4298] netlink: 4 bytes leftover after parsing attributes in process `syz.0.256'.
[   54.594865][ T4256] memory+swap: usage 307644kB, limit 9007199254740988kB, failcnt 0
[   54.605293][ T4298] netlink: 4 bytes leftover after parsing attributes in process `syz.0.256'.
[   54.605670][ T4256] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0
[   54.777871][ T4256] Memory cgroup stats for /syz1:
[   54.778010][ T4296] hsr_slave_0: left promiscuous mode
[   54.778368][ T4256] cache 0
[   54.792252][ T4256] rss 0
[   54.795182][ T4256] shmem 0
[   54.798371][ T4256] mapped_file 0
[   54.801968][ T4256] dirty 0
[   54.805162][ T4256] writeback 0
[   54.808542][ T4256] workingset_refault_anon 18
[   54.813337][ T4256] workingset_refault_file 9
[   54.818220][ T4256] swap 454656
[   54.821636][ T4256] swapcached 0
[   54.825182][ T4256] pgpgin 53458
[   54.828636][ T4256] pgpgout 53458
[   54.832185][ T4256] pgfault 61834
[   54.835724][ T4256] pgmajfault 9
[   54.839543][ T4256] inactive_anon 0
[   54.843245][ T4256] active_anon 0
[   54.846804][ T4256] inactive_file 0
[   54.850563][ T4256] active_file 0
[   54.854191][ T4256] unevictable 0
[   54.857703][ T4256] hierarchical_memory_limit 314572800
[   54.863132][ T4256] hierarchical_memsw_limit 9223372036854771712
[   54.869843][ T4256] total_cache 0
[   54.873341][ T4256] total_rss 0
[   54.876745][ T4256] total_shmem 0
[   54.880251][ T4256] total_mapped_file 0
[   54.884522][ T4256] total_dirty 0
[   54.888155][ T4256] total_writeback 0
[   54.892049][ T4256] total_workingset_refault_anon 18
[   54.897244][ T4256] total_workingset_refault_file 9
[   54.902386][ T4256] total_swap 454656
[   54.906532][ T4256] total_swapcached 0
[   54.910705][ T4256] total_pgpgin 53458
[   54.915306][ T4256] total_pgpgout 53458
[   54.919622][ T4256] total_pgfault 61834
[   54.923672][ T4256] total_pgmajfault 9
[   54.927745][ T4256] total_inactive_anon 0
[   54.932143][ T4256] total_active_anon 0
[   54.936640][ T4256] total_inactive_file 0
[   54.941091][ T4256] total_active_file 0
[   54.945323][ T4256] total_unevictable 0
[   54.949301][ T4256] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.245,pid=4254,uid=0
[   54.967053][ T4256] Memory cgroup out of memory: Killed process 4254 (syz.1.245) total-vm:93764kB, anon-rss:1072kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[   54.985590][ T4296] hsr_slave_1: left promiscuous mode
[   55.094692][ T4255] syz.1.245 (4255) used greatest stack depth: 6200 bytes left
[   55.324537][ T4315] netlink: 'syz.0.260': attribute type 12 has an invalid length.
[   55.544551][ T4324] can0: slcan on ttyS3.
[   55.862372][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   56.299286][ T4348] loop4: detected capacity change from 0 to 1024
[   56.403006][ T4348] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   56.469963][ T4321] can0 (unregistered): slcan off ttyS3.
[   56.830187][ T4381] 9pnet_virtio: no channels available for device 127.0.0.1
[   56.891169][ T4395] loop2: detected capacity change from 0 to 512
[   56.912709][ T4395] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   56.963133][ T4400] netlink: 4 bytes leftover after parsing attributes in process `syz.3.275'.
[   57.006269][    C0] vcan0: j1939_xtp_rx_dat: no rx connection found
[   57.013041][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   57.020953][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   57.028899][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   57.036904][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   57.045023][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   57.052949][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   57.060805][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   57.068621][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   57.076733][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   57.084729][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   57.093671][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   57.101518][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   57.101553][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   57.101565][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   57.101586][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   57.101607][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   57.101628][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   57.101641][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   57.101662][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   57.101676][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   57.172922][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   57.180838][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   57.189341][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   57.197170][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   57.321613][   T29] kauditd_printk_skb: 168 callbacks suppressed
[   57.321628][   T29] audit: type=1400 audit(1755029364.919:1097): avc:  denied  { compute_member } for  pid=4406 comm="syz.2.278" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[   57.322076][ T4407] netlink: 'syz.2.278': attribute type 12 has an invalid length.
[   57.635930][   T29] audit: type=1326 audit(1755029365.229:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4413 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05bb3eebe9 code=0x7ffc0000
[   57.896035][   T29] audit: type=1326 audit(1755029365.259:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4413 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05bb3eebe9 code=0x7ffc0000
[   57.920671][   T29] audit: type=1326 audit(1755029365.259:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4413 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f05bb3eebe9 code=0x7ffc0000
[   57.946527][   T29] audit: type=1326 audit(1755029365.259:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4413 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05bb3eebe9 code=0x7ffc0000
[   57.971862][   T29] audit: type=1326 audit(1755029365.259:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4413 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f05bb3eebe9 code=0x7ffc0000
[   57.995559][   T29] audit: type=1326 audit(1755029365.259:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4413 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05bb3eebe9 code=0x7ffc0000
[   58.019897][   T29] audit: type=1326 audit(1755029365.259:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4413 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05bb3eebe9 code=0x7ffc0000
[   58.044899][   T29] audit: type=1326 audit(1755029365.259:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4413 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f05bb3eebe9 code=0x7ffc0000
[   58.069134][   T29] audit: type=1326 audit(1755029365.259:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4413 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05bb3eebe9 code=0x7ffc0000
[   58.285639][ T4427] lo speed is unknown, defaulting to 1000
[   58.353289][ T4416] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[   58.484624][ T4434] netlink: 268 bytes leftover after parsing attributes in process `syz.4.286'.
[   58.495753][ T4434] unsupported nla_type 65024
[   58.818850][ T4443] netlink: 156 bytes leftover after parsing attributes in process `syz.2.290'.
[   58.828321][ T4443] netlink: 24 bytes leftover after parsing attributes in process `syz.2.290'.
[   59.789020][ T4450] loop2: detected capacity change from 0 to 1024
[   59.815052][ T4450] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[   59.824881][ T4450] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[   59.834613][ T4450] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled
[   59.970852][ T4450] EXT4-fs error (device loop2): ext4_get_journal_inode:5796: inode #5: comm syz.2.291: unexpected bad inode w/o EXT4_IGET_BAD
[   59.992070][ T4450] EXT4-fs (loop2): no journal found
[   59.997691][ T4450] EXT4-fs (loop2): can't get journal size
[   60.082951][ T4454] batman_adv: batadv0: Adding interface: dummy0
[   60.089625][ T4454] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.227780][ T4454] batman_adv: batadv0: Interface activated: dummy0
[   60.587783][ T4459] wireguard0: entered promiscuous mode
[   60.593764][ T4459] wireguard0: entered allmulticast mode
[   60.664084][ T4467] loop2: detected capacity change from 0 to 512
[   60.678621][ T4467] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   60.681367][ T4470] syzkaller0: entered promiscuous mode
[   60.694330][ T4470] syzkaller0: entered allmulticast mode
[   60.704501][ T4465] netlink: 4 bytes leftover after parsing attributes in process `syz.3.298'.
[   60.706112][ T4467] EXT4-fs (loop2): 1 truncate cleaned up
[   60.714180][ T4465] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   60.728102][ T4465] batman_adv: batadv0: Removing interface: batadv_slave_0
[   60.741215][ T4465] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   60.748907][ T4465] batman_adv: batadv0: Removing interface: batadv_slave_1
[   60.765421][ T4465] batman_adv: batadv0: Interface deactivated: dummy0
[   60.772394][ T4465] batman_adv: batadv0: Removing interface: dummy0
[   60.798216][ T4476] loop1: detected capacity change from 0 to 2048
[   60.830307][ T4476]  loop1: p1 < > p4
[   60.835204][ T4476] loop1: p4 size 8388608 extends beyond EOD, truncated
[   60.880661][ T3498] udevd[3498]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[   60.885784][ T4265] udevd[4265]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[   60.934103][ T4484] netlink: 4 bytes leftover after parsing attributes in process `syz.3.301'.
[   60.944013][ T4484] bridge_slave_1: left allmulticast mode
[   60.950209][ T4484] bridge_slave_1: left promiscuous mode
[   60.956801][ T4484] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.984452][ T4484] bridge_slave_0: left allmulticast mode
[   60.990393][ T4484] bridge_slave_0: left promiscuous mode
[   60.996156][ T4484] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.118152][ T4500] loop4: detected capacity change from 0 to 1024
[   61.164730][ T4500] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[   61.691095][ T4522] Zero length message leads to an empty skb
[   62.280489][ T4536] lo speed is unknown, defaulting to 1000
[   62.762928][   T29] kauditd_printk_skb: 126 callbacks suppressed
[   62.762943][   T29] audit: type=1326 audit(1755029370.359:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4540 comm="syz.0.316" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2182baebe9 code=0x0
[   62.946521][   T29] audit: type=1326 audit(1755029370.539:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4545 comm="syz.3.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f775504ebe9 code=0x7ffc0000
[   62.970947][   T29] audit: type=1326 audit(1755029370.539:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4545 comm="syz.3.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f775504ebe9 code=0x7ffc0000
[   63.039410][   T29] audit: type=1326 audit(1755029370.599:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4545 comm="syz.3.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f775504ebe9 code=0x7ffc0000
[   63.063448][   T29] audit: type=1326 audit(1755029370.599:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4545 comm="syz.3.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f775504ebe9 code=0x7ffc0000
[   63.087491][   T29] audit: type=1326 audit(1755029370.599:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4545 comm="syz.3.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f775504ebe9 code=0x7ffc0000
[   63.111543][   T29] audit: type=1326 audit(1755029370.599:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4545 comm="syz.3.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f775504ebe9 code=0x7ffc0000
[   63.135199][   T29] audit: type=1326 audit(1755029370.599:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4545 comm="syz.3.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f775504ebe9 code=0x7ffc0000
[   63.159261][   T29] audit: type=1326 audit(1755029370.599:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4545 comm="syz.3.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f775504ebe9 code=0x7ffc0000
[   63.184039][   T29] audit: type=1326 audit(1755029370.599:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4545 comm="syz.3.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f775504ebe9 code=0x7ffc0000
[   63.593992][ T4557] netlink: 9 bytes leftover after parsing attributes in process `syz.0.322'.
[   63.727811][ T4560] loop2: detected capacity change from 0 to 1024
[   63.729449][ T4557] 0·: renamed from hsr0
[   63.778228][ T4557] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   63.790249][ T4557] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   63.804353][ T4557] 0·: entered allmulticast mode
[   63.809487][ T4557] hsr_slave_0: entered allmulticast mode
[   63.816106][ T4557] hsr_slave_1: entered allmulticast mode
[   63.823107][ T4557] A link change request failed with some changes committed already. Interface 
70· may have been left with an inconsistent configuration, please check.
[   64.049983][ T4572] loop3: detected capacity change from 0 to 1024
[   64.057302][ T4572] EXT4-fs: Ignoring removed orlov option
[   64.774210][ T4582] loop2: detected capacity change from 0 to 512
[   64.785495][ T4582] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   64.862757][ T4582] EXT4-fs (loop2): 1 truncate cleaned up
[   65.453398][ T4592] netlink: 8 bytes leftover after parsing attributes in process `syz.0.333'.
[   65.463415][ T4592] netlink: 8 bytes leftover after parsing attributes in process `syz.0.333'.
[   65.473980][ T4592] netlink: 8 bytes leftover after parsing attributes in process `syz.0.333'.
[   65.483275][ T4592] netlink: 8 bytes leftover after parsing attributes in process `syz.0.333'.
[   65.582919][ T4602] loop3: detected capacity change from 0 to 512
[   65.590933][ T4602] EXT4-fs: Ignoring removed oldalloc option
[   65.611388][ T4602] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.334: Parent and EA inode have the same ino 15
[   65.615536][ T4602] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.334: Parent and EA inode have the same ino 15
[   65.615791][ T4602] EXT4-fs (loop3): 1 orphan inode deleted
[   65.910885][ T4609] lo speed is unknown, defaulting to 1000
[   66.353333][ T4621] loop2: detected capacity change from 0 to 256
[   66.417741][ T4623] loop3: detected capacity change from 0 to 256
[   66.429988][ T4621] FAT-fs (loop2): codepage cp857 not found
[   66.434623][ T4623] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   66.470129][ T4623] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[   66.470214][ T4623] FAT-fs (loop3): Filesystem has been set read-only
[   66.480558][ T4621] loop2: detected capacity change from 0 to 1024
[   66.481005][ T4621] EXT4-fs: Ignoring removed bh option
[   66.481117][ T4621] EXT4-fs: Ignoring removed nomblk_io_submit option
[   66.728414][ T4626] netlink: 4 bytes leftover after parsing attributes in process `syz.4.342'.
[   66.728445][ T4626] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   66.728459][ T4626] batman_adv: batadv0: Removing interface: batadv_slave_0
[   66.729256][ T4626] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   66.729271][ T4626] batman_adv: batadv0: Removing interface: batadv_slave_1
[   66.732121][ T4626] batman_adv: batadv0: Interface deactivated: dummy0
[   66.732178][ T4626] batman_adv: batadv0: Removing interface: dummy0
[   67.011558][ T4632] loop4: detected capacity change from 0 to 2048
[   67.039223][ T4636] loop3: detected capacity change from 0 to 2048
[   67.060811][ T4265]  loop4: p1 < > p4
[   67.067361][ T4636] EXT4-fs mount: 18 callbacks suppressed
[   67.067446][ T4636] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[   67.098462][ T4265] loop4: p4 size 8388608 extends beyond EOD, truncated
[   67.113743][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   67.124602][ T2993] ==================================================================
[   67.132722][ T2993] BUG: KCSAN: data-race in dont_mount / lookup_fast
[   67.139587][ T2993] 
[   67.141934][ T2993] read-write to 0xffff8881073fa780 of 4 bytes by task 4265 on cpu 1:
[   67.147386][ T4636] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:169: inode #12: comm syz.3.346: inline data xattr refers to an external xattr inode
[   67.150209][ T2993]  dont_mount+0x2a/0x40
[   67.150233][ T2993]  vfs_unlink+0x28f/0x420
[   67.150249][ T2993]  do_unlinkat+0x24e/0x480
[   67.178391][ T2993]  __x64_sys_unlink+0x2e/0x40
[   67.183158][ T2993]  x64_sys_call+0x2dc0/0x2ff0
[   67.187939][ T2993]  do_syscall_64+0xd2/0x200
[   67.188621][ T4632]  loop4: p1 < > p4
[   67.192806][ T2993]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   67.192833][ T2993] 
[   67.192839][ T2993] read to 0xffff8881073fa780 of 4 bytes by task 2993 on cpu 0:
[   67.192853][ T2993]  lookup_fast+0xf0/0x320
[   67.192878][ T2993]  walk_component+0x3f/0x220
[   67.221731][ T2993]  path_lookupat+0xfe/0x2a0
[   67.226852][ T2993]  filename_lookup+0x147/0x340
[   67.231886][ T2993]  do_readlinkat+0x7d/0x320
[   67.236763][ T2993]  __x64_sys_readlink+0x47/0x60
[   67.241788][ T2993]  x64_sys_call+0x28da/0x2ff0
[   67.246558][ T2993]  do_syscall_64+0xd2/0x200
[   67.251081][ T2993]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   67.257142][ T2993] 
[   67.259459][ T2993] value changed: 0x00300080 -> 0x00004080
[   67.265296][ T2993] 
[   67.267599][ T2993] Reported by Kernel Concurrency Sanitizer on:
[   67.273907][ T2993] CPU: 0 UID: 0 PID: 2993 Comm: udevd Tainted: G        W           6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) 
[   67.287984][ T2993] Tainted: [W]=WARN
[   67.292045][ T2993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   67.302859][ T2993] ==================================================================
[   67.313785][ T4632] loop4: p4 size 8388608 extends beyond EOD, truncated
[   67.333299][ T4644] syz_tun: left allmulticast mode
[   67.339721][ T4644] syz_tun: left promiscuous mode
[   67.345037][ T4644] bridge0: port 3(syz_tun) entered disabled state
[   67.363741][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[   67.377898][ T4644] bridge_slave_0: left allmulticast mode
[   67.383783][ T4644] bridge_slave_0: left promiscuous mode
[   67.389595][ T4644] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.400700][ T4644] bridge_slave_1: left allmulticast mode
[   67.405664][ T4265] udevd[4265]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[   67.406545][ T4644] bridge_slave_1: left promiscuous mode
[   67.418344][ T3498] udevd[3498]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[   67.422445][ T4644] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.439749][ T4265] udevd[4265]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[   67.444156][ T3498] udevd[3498]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[   67.469374][ T4644] bond0: (slave bond_slave_0): Releasing backup interface
[   67.481242][ T4644] bond0: (slave bond_slave_1): Releasing backup interface
[   67.496083][ T4644] team0: Port device team_slave_0 removed
[   67.510200][ T4644] team0: Port device team_slave_1 removed
[   67.517792][ T4644] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   67.526375][ T4644] batman_adv: batadv0: Removing interface: batadv_slave_0
[   67.535913][ T4644] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   67.543454][ T4644] batman_adv: batadv0: Removing interface: batadv_slave_1
[   67.560565][ T3389] lo speed is unknown, defaulting to 1000