last executing test programs:

4.042796495s ago: executing program 2 (id=640):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='sched_switch\x00', r2, 0x0, 0xfffffffffffffffe}, 0x18)
r3 = socket$netlink(0x10, 0x3, 0x9)
writev(r3, &(0x7f0000000740)=[{&(0x7f00000000c0)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1)
r4 = socket$tipc(0x1e, 0x2, 0x0)
sendmsg$tipc(r4, &(0x7f0000000000)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x3}}, 0x10, 0x0}, 0x10050)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x120000e, &(0x7f0000000040), 0x1, 0xbae, &(0x7f0000000bc0)="$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")
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x207, &(0x7f0000000000), 0x1, 0x46f, &(0x7f0000001200)="$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")
r6 = dup2(r5, r0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf10, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x5}, 0x0, 0x2, 0xfffff7f0, 0x0, 0x14, 0x4, 0x3, 0x0, 0x0, 0x0, 0xd9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000005c0)={0xffffff00}, 0x29)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r6, 0x0, 0x80}, 0x18)
getsockname(r3, &(0x7f0000000140)=@l2, &(0x7f00000003c0)=0x80)
fremovexattr(0xffffffffffffffff, 0x0)

3.442410943s ago: executing program 2 (id=647):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000a50000002a00000095"], &(0x7f0000000b40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70500000800000085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
creat(&(0x7f00000000c0)='./file0\x00', 0x48)
pipe2$9p(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r3 = dup(r2)
write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/16, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94)
write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64, @ANYRES16=0x0], 0x1, 0x36e, &(0x7f0000000c00)="$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")
r5 = open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x102)
ftruncate(r5, 0x2007ffb)

3.322797593s ago: executing program 2 (id=649):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @xdp}, 0x94)
socket(0x10, 0x803, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0a00000004000000ff0f0000870068050000000000000000880500208bf2bd2ad29f0b50540520d0", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7441483e86a09b4b, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_kthread_work_queue_work\x00', r1}, 0x10)
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
writev(r2, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000000000002600181100", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYRESOCT=r4, @ANYRESOCT=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r6}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
r7 = syz_open_dev$tty20(0xc, 0x4, 0x1)
write$binfmt_misc(r7, &(0x7f0000000240), 0xfffffecc)

2.421846935s ago: executing program 2 (id=658):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000a50000002a00000095"], &(0x7f0000000b40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70500000800000085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
creat(&(0x7f00000000c0)='./file0\x00', 0x48)
pipe2$9p(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r3 = dup(r2)
write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94)
write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffff"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])
r4 = open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x102)
sendfile(r4, r4, 0x0, 0x800000009)

2.326239933s ago: executing program 2 (id=659):
r0 = syz_open_dev$evdev(0x0, 0x3, 0xd0403)
syz_usb_disconnect(r0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc3ffb}]})
utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
r2 = gettid()
timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
readv(r3, &(0x7f0000001240)=[{&(0x7f0000000040)=""/73, 0x49}], 0x1)

1.913020996s ago: executing program 3 (id=668):
unshare(0x20000400)
r0 = socket$xdp(0x2c, 0x3, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r4], 0x34}}, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local})
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0a00000007000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00'}, 0x10)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
r9 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r10=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r10, 0x0)
sendmmsg$inet(r8, &(0x7f0000003500)=[{{&(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @loopback}}}], 0x20}}, {{&(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, &(0x7f0000002d00)=[@ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x6, 0x2}]}}}], 0x18}}], 0x2, 0x44004)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r11, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r11], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r12}, 0x10)
close(r5)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000001100)={{}, {0x1, 0x6}, [], {0x4, 0x5}, [], {0x10, 0x3}, {0x20, 0x7}}, 0x24, 0x1)
setreuid(0xffffffffffffffff, 0xee01)
r13 = socket$can_j1939(0x1d, 0x2, 0x7)
r14 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9c, 0x9c, 0x3, [@int={0xa, 0x0, 0x0, 0x1, 0x0, 0x2e, 0x0, 0x18, 0x1}, @enum={0x6, 0x2, 0x0, 0x6, 0x4, [{0x5, 0x8001}, {0xb}]}, @ptr={0xe, 0x0, 0x0, 0x2, 0x1}, @struct={0xd, 0x6, 0x0, 0x4, 0x1, 0x1, [{0x2, 0x4, 0x53a}, {0x10, 0x2, 0x4}, {0x3, 0x4}, {0xb, 0x3, 0x5}, {0xd, 0x0, 0x9bd}, {0x2, 0x3, 0x80}]}, @var={0x5, 0x0, 0x0, 0xe, 0x1, 0x2}]}, {0x0, [0x0]}}, &(0x7f0000000040)=""/40, 0xb7, 0x28, 0x0, 0xad}, 0x28)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000001c0)=[r0, r0, r13, r0, r14, r1, r0, 0xffffffffffffffff], 0x8)

1.730103121s ago: executing program 3 (id=670):
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZEX(r0, 0x560a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042"], 0x18}}, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = add_key(&(0x7f0000000040)='.dead\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa)
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x1000)
r3 = gettid()
r4 = syz_open_procfs(r3, &(0x7f0000000180)='sessionid\x00')
exit(0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="49fcff250000000080", @ANYRES64=r2, @ANYBLOB="000000000000000024001280090001007866726d000000001400028004000300040000000800020000120000"], 0x44}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x400}, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8003}, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0)
pread64(r4, 0x0, 0x0, 0x1000)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x51}, 0x9c)
lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0))
mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x8, 0x0)

1.646368127s ago: executing program 4 (id=674):
r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x8b6}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000300)=<r2=>0x0)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r0, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x17, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYBLOB="0000000030100000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b724000000000000850000a485a200c300000000000000009cd700005cee09956c55270358"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0)

1.470474832s ago: executing program 4 (id=677):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, 0x0, 0x0)
open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000004}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10)
arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f00000006c0))
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x10c)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r6)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd7000fedbdf252c000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800)

1.404408227s ago: executing program 4 (id=678):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000580)='./file0\x00', 0x4, &(0x7f0000000980)=ANY=[], 0x1, 0x120b, &(0x7f0000002300)="$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")
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='block_bio_remap\x00', r1, 0x0, 0xdb29}, 0x18)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

1.344531992s ago: executing program 4 (id=679):
r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0)
write$binfmt_script(r0, &(0x7f00000003c0)={'#! ', './file0'}, 0xb)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000040)={[{@noquota}]}, 0x1, 0x775, &(0x7f0000001180)="$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")
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'tunl0\x00', &(0x7f0000000240)={'erspan0\x00', 0x0, 0x0, 0x700, 0x800, 0xff, {{0x5, 0x4, 0x3, 0x35, 0x14, 0x64, 0x0, 0x2, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x21}, @broadcast}}}})
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa1000000000000070100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r2 = io_uring_setup(0x6c4, &(0x7f0000000080)={0x0, 0x4075, 0x18, 0x2})
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000002c0)=0x1)
ioctl$TIOCSETD(r3, 0x5423, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003700)=ANY=[], 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x14)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000006c0)='kmem_cache_free\x00', r5, 0x0, 0x2000}, 0x18)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

1.203706233s ago: executing program 4 (id=680):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @xdp}, 0x94)
socket(0x10, 0x803, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0a00000004000000ff0f0000870068050000000000000000880500208bf2bd2ad29f0b50540520d0", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7441483e86a09b4b, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_kthread_work_queue_work\x00', r1}, 0x10)
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
writev(r2, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000000000002600181100", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYRESOCT=r4, @ANYRESOCT=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r6}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
r7 = syz_open_dev$tty20(0xc, 0x4, 0x1)
write$binfmt_misc(r7, &(0x7f0000000240), 0xfffffecc)

1.102294192s ago: executing program 0 (id=681):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000a50000002a00000095"], &(0x7f0000000b40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70500000800000085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
creat(&(0x7f00000000c0)='./file0\x00', 0x48)
pipe2$9p(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r3 = dup(r2)
write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94)
write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe935"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])
r4 = open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x102)
sendfile(r4, r4, 0x0, 0x800000009)

1.045821086s ago: executing program 0 (id=682):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYBLOB="0901ffffffffffee001d01"], 0x14}, 0x1, 0x0, 0x0, 0x4008080}, 0x0)

1.017853648s ago: executing program 0 (id=683):
unshare(0x20000400)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800}, 0x20) (fail_nth: 3)

980.833761ms ago: executing program 0 (id=684):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x400000007, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_config_ext={0x7, 0x2}, 0x0, 0x10003, 0xfffffffc, 0x1, 0x6, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000003f696cd0000000000008000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000abd92de000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000740))
bpf$MAP_CREATE(0x300000000000000, &(0x7f0000010340)=ANY=[@ANYRES32=0x1, @ANYBLOB="000000000000013179627437d3"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10)
symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00')
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$inet_sctp(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@sndinfo={0x20, 0x84, 0x2, {0xfff9, 0x8743}}], 0x20, 0x4048800}, 0x10)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10)

980.367291ms ago: executing program 2 (id=685):
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0xd0403)
syz_usb_disconnect(r0)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="982b000000000000b7030000030000108500000086000000956f6f8f53962df7dc4c9c75615de9b4f094d76099bd6f6be7d92435af60cf743b09f180cf53fe015d01868db478a428899a74e95a62d72fbefc6a32b037a4f622933860f2492e116add72dfed866c3d53a6c231d7c4bbf36067fc85e17d0eafb0e8a8e15c177fc709f4929916"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000300)=0x6bbb, 0x4)
sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000140), 0x4)
perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x7, 0x10, 0x95, 0x8, 0x0, 0xc304, 0x1031, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7ff, 0x2, @perf_config_ext={0x9, 0xb06}, 0x80, 0x2, 0x1c, 0x5, 0x9, 0xd0d, 0x2, 0x0, 0x0, 0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x3)
r6 = socket$inet6(0xa, 0x3, 0xff)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
r8 = gettid()
timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
readv(r9, &(0x7f0000001340)=[{&(0x7f0000000440)=""/166, 0xa6}], 0x1)
readv(r9, &(0x7f0000001240)=[{&(0x7f0000000040)=""/73, 0x49}], 0x1)

901.055947ms ago: executing program 3 (id=686):
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r2 = syz_io_uring_setup(0x46c2, &(0x7f0000000300)={0x0, 0x2, 0x20, 0xfffffffb, 0x3c0}, &(0x7f0000000040)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1})
io_uring_enter(r2, 0x44fd, 0x3, 0x1, 0x0, 0x0)
rt_sigprocmask(0x0, &(0x7f0000000380)={[0xfffffffffffffffd]}, 0x0, 0x8)
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)={0x1})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
fcntl$lock(r5, 0x7, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x1})
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x55}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)

879.091759ms ago: executing program 3 (id=687):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x400000007, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_config_ext={0x7, 0x2}, 0x0, 0x10003, 0xfffffffc, 0x1, 0x6, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000abd92de000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xf)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
bpf$MAP_CREATE(0x300000000000000, &(0x7f0000010340)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x50)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10)
symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00')
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$inet_sctp(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x4048800}, 0x10)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x11, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a00000000000000000185100000070000009500000000000000660800000000010164d2aa8233ffffff9500000000000000365a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000600000085000000060000009500000000000000"], &(0x7f00000007c0)='syzkaller\x00', 0x2, 0xd5, &(0x7f0000000340)=""/213}, 0x94)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10)

537.285057ms ago: executing program 1 (id=689):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3], 0x14}, 0x1, 0x0, 0x0, 0x4008080}, 0x0)

507.847869ms ago: executing program 1 (id=690):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000380)=@md0, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48)
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./file0\x00', 0x3204400, &(0x7f0000000880)=ANY=[], 0x1, 0x282, &(0x7f0000000c00)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x84042, 0x1fb)
write$P9_RUNLINKAT(r3, &(0x7f00000004c0)={0xfffffffffffffe15, 0x4d, 0x6}, 0x7395a0d2)
r4 = open(&(0x7f00000001c0)='./file1\x00', 0x14d5be, 0x21)
fallocate(r4, 0x1, 0x0, 0x1001f0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000000019302b990e26c3ba435c2d1c18e854be3e35f5d03f0c13b6806cc85fdd544d37bbad1e56effa07f4269b854c9f97721755d50de1a661402cb424f67898eb8bcba327df56356a9eaac31538ee9af010a0d80e051971898ac358b11a506ef2537cdbcfcfa26c5d0b634c54081419a2149e2fb2e2cdb2d5831a97ad6246ae6d0c0b32b8c53d20993f7c6a08dd3b3e5ab8be3c52eebac3b772d9064e0a1f9427666985dc0147db23ca9b8f27fdb02022e76337a52ac68295c9aefd1bec4be2e3c7849e23416771a5f6ca415587b54b13d4bf5f3752773691943b7c207e75d689baf119f7", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x20, r7, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5f3}]}]}, 0x20}}, 0x4000000)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000004c0)={'ip6tnl0\x00', <r8=>0x0, 0x2f, 0x7, 0x9, 0x3, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @local, 0x700, 0x10, 0x7}})
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={&(0x7f0000000580)=""/201, 0xc9, <r9=>0x0, &(0x7f0000000680)=""/99, 0x63}}, 0x10)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000700000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b70500000000000079107800000000001d0a00000000000095000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000300)='kfree\x00', r10}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1b, 0x1b, &(0x7f0000000240)=@raw=[@ldst={0x3, 0x2, 0x0, 0x1, 0x2, 0x30}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @ldst={0x0, 0x1, 0x4, 0x5, 0x6, 0xffffffffffffffe0, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7f}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_val={0x18, 0xa, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0xfffffff7}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x4}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xd}], &(0x7f0000000000)='GPL\x00', 0x7fffffff, 0xf5, &(0x7f00000003c0)=""/245, 0x40f00, 0x0, '\x00', r8, @fallback=0x4, r1, 0x8, &(0x7f0000000340)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0x3, 0x8, 0x4}, 0x10, r9, r10, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r11)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r11, &(0x7f0000000480)={0x0, 0x14, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r12, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x33}, @void}}}, 0x1c}}, 0x4000054)
sendmsg$NL80211_CMD_ASSOCIATE(r4, &(0x7f0000000b80)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ec0)={0xc0, r12, 0x800, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x4d}}}}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15a4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}], @NL80211_ATTR_FILS_KEK={0x2c, 0xf2, "b175ce7835331d7505d2c7ad48cdeea20b5ba7c2072c66a2acbbbc7d2eb69cf23db1fe85e0556291"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x8, {0x8000, 0x1ff, 0x4, 0x1ff}}}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @NL80211_ATTR_SSID={0xf, 0x34, @random="e76a674b08b5c413a2052b"}, @NL80211_ATTR_FILS_KEK={0x15, 0xf2, "248989dc17dfa25afa3134c6b322ab0a36"}, @NL80211_ATTR_USE_MFP={0x8}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)

209.580983ms ago: executing program 4 (id=691):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x401, 0x800000, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @multicast2}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}]}, 0x50}}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1b, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18)
bpf$MAP_CREATE(0x0, 0x0, 0x39)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$caif_stream(0x25, 0x1, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x7ff}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18)
r2 = socket$netlink(0x10, 0x3, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x851}, 0x0)
r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000240)={'team0\x00', <r6=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r5, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r6}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840)

176.043105ms ago: executing program 1 (id=692):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000a50000002a00000095"], &(0x7f0000000b40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70500000800000085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
creat(&(0x7f00000000c0)='./file0\x00', 0x48)
pipe2$9p(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r3 = dup(r2)
write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94)
write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe935"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])
r4 = open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x102)
sendfile(r4, r4, 0x0, 0x800000009)

113.412251ms ago: executing program 1 (id=693):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70500000800000085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
creat(&(0x7f00000000c0)='./file0\x00', 0x48)
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r2 = dup(r1)
write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94)
write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
r4 = open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x102)
ftruncate(r4, 0x2007ffb)

112.800071ms ago: executing program 0 (id=694):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000a50000002a00000095"], &(0x7f0000000b40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70500000800000085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
creat(&(0x7f00000000c0)='./file0\x00', 0x48)
pipe2$9p(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r3 = dup(r2)
write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94)
write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])
r4 = open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x102)
ftruncate(r4, 0x2007ffb)
sendfile(r4, r4, 0x0, 0x800000009)

91.389703ms ago: executing program 1 (id=695):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYRES16=r3, @ANYBLOB="0901ffffffffffee001d01"], 0x14}, 0x1, 0x0, 0x0, 0x4008080}, 0x0)

58.419215ms ago: executing program 0 (id=696):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001a40)=ANY=[@ANYBLOB="5801000010000100030000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000001600"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0100000000000000000000000000000400000033000000ac1414bb00000000000000000000000000000000000000000000000000000000030000000000000004000000000000005700000000000000fdffffffffffffff000000000000010000000000000000007b00000000000000000080000000000000200000000000000000000000000000000000005cfd00000000000000000000000000000a000000aa0000000000000048000100686d616328736861312900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200017"], 0x158}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x3)
syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), 0xffffffffffffffff)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
mincore(&(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000bc0)=""/249)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$KDDELIO(r1, 0x4b35, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="1f00"})
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18)
setgroups(0x0, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="a580cddae8b536ffdb67405a3505d72875408a15af6f6e4edfceeaedd12fb7022e29dd760a2ef74ec6d9ee08c517aeba83bc9d"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r5}, 0x18)
link(&(0x7f00000001c0)='./file1\x00', 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x2000042, &(0x7f0000002240)={[{@nombcache}, {@oldalloc}, {@inlinecrypt}, {@delalloc}, {@mblk_io_submit}, {@delalloc}, {@noload}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@lazytime}]}, 0x3, 0x4ea, &(0x7f00000006c0)="$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")

58.020005ms ago: executing program 1 (id=697):
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZEX(r0, 0x560a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042"], 0x18}}, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = add_key(&(0x7f0000000040)='.dead\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa)
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x1000)
r3 = gettid()
r4 = syz_open_procfs(r3, &(0x7f0000000180)='sessionid\x00')
exit(0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="49fcff250000000080", @ANYRES64=r2, @ANYBLOB="000000000000000024001280090001007866726d000000001400028004000300040000000800020000120000"], 0x44}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x400}, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8003}, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0)
pread64(r4, 0x0, 0x0, 0x1000)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x51}, 0x9c)
lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0))
mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x8, 0x0)

18.632678ms ago: executing program 3 (id=698):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, 0x0, 0x0)
open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000004}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10)
arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f00000006c0))
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x10c)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r5)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd7000fedbdf252c000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800)

0s ago: executing program 3 (id=699):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000380)=@md0, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48)
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./file0\x00', 0x3204400, &(0x7f0000000880)=ANY=[], 0x1, 0x282, &(0x7f0000000c00)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x84042, 0x1fb)
write$P9_RUNLINKAT(r3, &(0x7f00000004c0)={0xfffffffffffffe15, 0x4d, 0x6}, 0x7395a0d2)
r4 = open(&(0x7f00000001c0)='./file1\x00', 0x14d5be, 0x21)
fallocate(r4, 0x1, 0x0, 0x1001f0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0e000000040000000800"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x44, r7, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffff801}]}, @TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5f3}, @TIPC_NLA_NODE_ID={0x10, 0x3, "5f9d0064dc97b5d8c5b9d337"}]}]}, 0x44}}, 0x4000000)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000004c0)={'ip6tnl0\x00', <r8=>0x0, 0x2f, 0x7, 0x9, 0x3, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @local, 0x700, 0x10, 0x7}})
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={&(0x7f0000000580)=""/201, 0xc9, <r9=>0x0, &(0x7f0000000680)=""/99, 0x63}}, 0x10)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b70500000000000079107800000000001d0a0000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000300)='kfree\x00', r10}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1b, 0x1b, &(0x7f0000000240)=@raw=[@ldst={0x3, 0x2, 0x0, 0x1, 0x2, 0x30}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @ldst={0x0, 0x1, 0x4, 0x5, 0x6, 0xffffffffffffffe0, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7f}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_val={0x18, 0xa, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0xfffffff7}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x4}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xd}], &(0x7f0000000000)='GPL\x00', 0x7fffffff, 0xf5, &(0x7f00000003c0)=""/245, 0x40f00, 0x0, '\x00', r8, @fallback=0x4, r1, 0x8, &(0x7f0000000340)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0x3, 0x8, 0x4}, 0x10, r9, r10, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r11)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r11, &(0x7f0000000480)={0x0, 0x14, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r12, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x33}, @void}}}, 0x1c}}, 0x4000054)
sendmsg$NL80211_CMD_ASSOCIATE(r4, &(0x7f0000000b80)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ec0)={0xc0, r12, 0x800, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x4d}}}}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15a4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}], @NL80211_ATTR_FILS_KEK={0x2c, 0xf2, "b175ce7835331d7505d2c7ad48cdeea20b5ba7c2072c66a2acbbbc7d2eb69cf23db1fe85e0556291"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x8, {0x8000, 0x1ff, 0x4, 0x1ff}}}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @NL80211_ATTR_SSID={0xf, 0x34, @random="e76a674b08b5c413a2052b"}, @NL80211_ATTR_FILS_KEK={0x15, 0xf2, "248989dc17dfa25afa3134c6b322ab0a36"}, @NL80211_ATTR_USE_MFP={0x8}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)

kernel console output (not intermixed with test programs):

ort 6081 - 0
[   38.875692][   T31] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   38.887238][   T31] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   38.900397][  T287] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   38.912061][  T287] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.012500][ T3300] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   39.049644][ T3758] loop4: detected capacity change from 0 to 2048
[   39.061338][ T3758] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   39.187008][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.237846][ T3772] loop4: detected capacity change from 0 to 128
[   39.295736][ T3779] netlink: 4 bytes leftover after parsing attributes in process `syz.0.94'.
[   39.360801][ T3772] netlink: 8 bytes leftover after parsing attributes in process `syz.4.93'.
[   39.755909][ T3816] loop1: detected capacity change from 0 to 8192
[   39.799438][ T3820] netlink: 'syz.3.104': attribute type 1 has an invalid length.
[   39.825194][ T3820] loop3: detected capacity change from 0 to 128
[   39.844016][ T3820] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   39.868028][ T3827] loop1: detected capacity change from 0 to 512
[   39.885467][ T3827] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843e028, mo2=0002]
[   39.885503][ T3827] System zones: 1-12
[   39.885753][ T3827] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.106: invalid indirect mapped block 8 (level 2)
[   39.885960][ T3827] EXT4-fs (loop1): Remounting filesystem read-only
[   39.886043][ T3827] EXT4-fs (loop1): 1 truncate cleaned up
[   39.886555][ T3827] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   39.899670][ T3820] ext4 filesystem being mounted at /15/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   39.973911][ T3829] sctp: [Deprecated]: syz.1.106 (pid 3829) Use of struct sctp_assoc_value in delayed_ack socket option.
[   39.973911][ T3829] Use struct sctp_sack_info instead
[   40.315535][ T3834] netlink: 'syz.0.107': attribute type 1 has an invalid length.
[   40.329843][ T3834] 8021q: adding VLAN 0 to HW filter on device bond1
[   40.355685][ T3834] bond1: (slave veth3): Enslaving as an active interface with a down link
[   40.362887][ T3834] loop0: detected capacity change from 0 to 128
[   40.383164][ T3834] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   40.383489][ T3834] ext4 filesystem being mounted at /27/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   40.650362][ T3307] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   40.677452][ T3847] loop3: detected capacity change from 0 to 2048
[   40.695257][ T3847] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   40.738808][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.834450][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.855762][ T3856] netlink: 4 bytes leftover after parsing attributes in process `syz.1.115'.
[   40.917389][ T3862] 9pnet_fd: Insufficient options for proto=fd
[   41.138107][ T3866] loop2: detected capacity change from 0 to 2048
[   41.160397][ T3866] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   41.187519][ T3299] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   41.314777][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.355475][ T3880] loop0: detected capacity change from 0 to 2048
[   41.367604][ T3882] loop4: detected capacity change from 0 to 128
[   41.374309][ T3878] loop1: detected capacity change from 0 to 1024
[   41.389227][ T3878] EXT4-fs: inline encryption not supported
[   41.410441][ T3878] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   41.410712][ T3880] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   41.492948][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.547946][ T3897] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   41.606487][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.646283][ T3897] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   41.663146][ T3907] loop0: detected capacity change from 0 to 128
[   41.701364][ T3907] bio_check_eod: 114 callbacks suppressed
[   41.701386][ T3907] syz.0.131: attempt to access beyond end of device
[   41.701386][ T3907] loop0: rw=2049, sector=129, nr_sectors = 1 limit=128
[   41.720497][ T3907] buffer_io_error: 114 callbacks suppressed
[   41.720513][ T3907] Buffer I/O error on dev loop0, logical block 129, lost async page write
[   41.735966][ T3907] syz.0.131: attempt to access beyond end of device
[   41.735966][ T3907] loop0: rw=2049, sector=130, nr_sectors = 1 limit=128
[   41.746266][ T3909] netlink: 4 bytes leftover after parsing attributes in process `syz.2.132'.
[   41.749435][ T3907] Buffer I/O error on dev loop0, logical block 130, lost async page write
[   41.757004][ T3907] syz.0.131: attempt to access beyond end of device
[   41.757004][ T3907] loop0: rw=2049, sector=139, nr_sectors = 1 limit=128
[   41.780194][ T3907] Buffer I/O error on dev loop0, logical block 139, lost async page write
[   41.792605][ T3897] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   41.807701][ T3907] syz.0.131: attempt to access beyond end of device
[   41.807701][ T3907] loop0: rw=2049, sector=140, nr_sectors = 1 limit=128
[   41.821163][ T3907] Buffer I/O error on dev loop0, logical block 140, lost async page write
[   41.834092][ T3907] syz.0.131: attempt to access beyond end of device
[   41.834092][ T3907] loop0: rw=2049, sector=141, nr_sectors = 1 limit=128
[   41.847512][ T3907] Buffer I/O error on dev loop0, logical block 141, lost async page write
[   41.858233][ T3907] syz.0.131: attempt to access beyond end of device
[   41.858233][ T3907] loop0: rw=2049, sector=142, nr_sectors = 1 limit=128
[   41.871709][ T3907] Buffer I/O error on dev loop0, logical block 142, lost async page write
[   41.883890][ T3911] netlink: 8 bytes leftover after parsing attributes in process `syz.0.131'.
[   41.893130][ T3907] syz.0.131: attempt to access beyond end of device
[   41.893130][ T3907] loop0: rw=2049, sector=143, nr_sectors = 1 limit=128
[   41.906518][ T3907] Buffer I/O error on dev loop0, logical block 143, lost async page write
[   41.915279][ T3907] syz.0.131: attempt to access beyond end of device
[   41.915279][ T3907] loop0: rw=2049, sector=144, nr_sectors = 1 limit=128
[   41.928662][ T3907] Buffer I/O error on dev loop0, logical block 144, lost async page write
[   41.937414][ T3907] syz.0.131: attempt to access beyond end of device
[   41.937414][ T3907] loop0: rw=2049, sector=147, nr_sectors = 1 limit=128
[   41.938291][ T3897] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   41.950858][ T3907] Buffer I/O error on dev loop0, logical block 147, lost async page write
[   41.950981][ T3907] syz.0.131: attempt to access beyond end of device
[   41.950981][ T3907] loop0: rw=2049, sector=148, nr_sectors = 1 limit=128
[   41.976664][ T3919] loop9: detected capacity change from 0 to 7
[   41.983495][ T3907] Buffer I/O error on dev loop0, logical block 148, lost async page write
[   41.991559][ T3919]  loop9: unable to read partition table
[   42.007569][ T3919] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ �â·û
[   42.007569][ T3919] 
) failed (rc=-5)
[   42.066320][   T31] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   42.096755][   T31] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   42.110341][  T287] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   42.119575][  T287] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   42.141174][ T3923] loop0: detected capacity change from 0 to 128
[   42.169756][ T3292] udevd[3292]: incorrect ext4 checksum on /dev/loop0
[   42.201626][ T3926] loop1: detected capacity change from 0 to 128
[   42.223007][ T3929] loop4: detected capacity change from 0 to 1024
[   42.248466][ T3929] EXT4-fs: inline encryption not supported
[   42.285115][ T3929] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   42.341195][ T3941] loop1: detected capacity change from 0 to 2048
[   42.384779][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.403538][ T3941] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   42.515971][   T29] kauditd_printk_skb: 822 callbacks suppressed
[   42.515987][   T29] audit: type=1400 audit(1754113569.200:2024): avc:  denied  { search } for  pid=3030 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   42.628635][   T29] audit: type=1400 audit(1754113569.200:2025): avc:  denied  { search } for  pid=3030 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   42.650347][   T29] audit: type=1400 audit(1754113569.200:2026): avc:  denied  { search } for  pid=3030 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   42.672117][   T29] audit: type=1400 audit(1754113569.200:2027): avc:  denied  { read } for  pid=3030 comm="dhcpcd" name="n30" dev="tmpfs" ino=1785 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   42.693871][   T29] audit: type=1400 audit(1754113569.200:2028): avc:  denied  { open } for  pid=3030 comm="dhcpcd" path="/run/udev/data/n30" dev="tmpfs" ino=1785 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   42.716923][   T29] audit: type=1400 audit(1754113569.200:2029): avc:  denied  { getattr } for  pid=3030 comm="dhcpcd" path="/run/udev/data/n30" dev="tmpfs" ino=1785 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   42.746723][ T3956] loop3: detected capacity change from 0 to 512
[   42.762259][   T29] audit: type=1400 audit(1754113569.320:2030): avc:  denied  { read open } for  pid=3951 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   42.787720][   T29] audit: type=1400 audit(1754113569.320:2031): avc:  denied  { getattr } for  pid=3951 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   42.838929][ T3961] loop9: detected capacity change from 0 to 7
[   42.845961][ T3961]  loop9: unable to read partition table
[   42.852026][ T3961] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ �â·û
[   42.852026][ T3961] 
) failed (rc=-5)
[   42.881676][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.935782][   T29] audit: type=1400 audit(1754113569.590:2032): avc:  denied  { add_name } for  pid=3950 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   42.958230][   T29] audit: type=1400 audit(1754113569.590:2033): avc:  denied  { create } for  pid=3950 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   42.989958][ T3956] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   42.999043][ T3942] Set syz1 is full, maxelem 65536 reached
[   43.085619][ T3978] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   43.140624][ T3978] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   43.210913][ T3978] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   43.250506][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.291089][ T3978] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   43.315778][ T3992] loop3: detected capacity change from 0 to 128
[   43.366878][  T287] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   43.409919][   T31] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   43.466086][  T313] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   43.486916][  T313] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   43.850209][ T4013] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   43.886837][ T4015] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   43.905692][ T4013] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   43.960492][ T4015] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   44.011358][ T4013] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   44.030326][ T4015] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   44.060015][ T4013] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   44.100554][ T4015] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   44.136023][  T287] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   44.148193][  T287] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   44.160360][  T287] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   44.172015][  T287] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   44.881856][ T4041] loop3: detected capacity change from 0 to 128
[   45.015039][ T4046] netlink: 'syz.3.174': attribute type 10 has an invalid length.
[   45.119835][ T4046] team0: Port device dummy0 added
[   45.161258][ T4049] loop0: detected capacity change from 0 to 2048
[   45.169215][ T4049] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[   45.203662][ T4049] bond2: entered promiscuous mode
[   45.208801][ T4049] bond2: entered allmulticast mode
[   45.216678][ T4049] 8021q: adding VLAN 0 to HW filter on device bond2
[   45.224144][ T4053] netlink: 4 bytes leftover after parsing attributes in process `syz.4.176'.
[   45.236468][ T4049] bond2 (unregistering): Released all slaves
[   45.318044][ T4058] netlink: 4 bytes leftover after parsing attributes in process `syz.4.178'.
[   45.376573][ T4062] loop0: detected capacity change from 0 to 128
[   45.388023][ T3292] udevd[3292]: incorrect ext4 checksum on /dev/loop0
[   45.547228][ T4071] loop0: detected capacity change from 0 to 512
[   45.571581][ T4071] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #3: comm syz.0.184: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0)
[   45.612233][ T4071] EXT4-fs error (device loop0): ext4_quota_enable:7127: comm syz.0.184: Bad quota inode: 3, type: 0
[   45.638755][ T4071] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[   45.668474][ T4071] EXT4-fs (loop0): mount failed
[   45.694293][ T4071] netlink: 32 bytes leftover after parsing attributes in process `syz.0.184'.
[   45.774889][ T4046] syz.3.174 (4046) used greatest stack depth: 9928 bytes left
[   46.566658][ T4085] netlink: 4 bytes leftover after parsing attributes in process `syz.1.188'.
[   46.613199][ T4087] loop1: detected capacity change from 0 to 2048
[   46.621177][ T4087] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[   46.677484][ T4087] bond1: entered promiscuous mode
[   46.682629][ T4087] bond1: entered allmulticast mode
[   46.717738][ T4087] 8021q: adding VLAN 0 to HW filter on device bond1
[   46.734331][ T4087] bond1 (unregistering): Released all slaves
[   46.752335][ T4092] netlink: 'syz.0.190': attribute type 1 has an invalid length.
[   46.769983][ T4092] loop0: detected capacity change from 0 to 128
[   46.783732][ T4092] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   46.824363][ T4092] ext4 filesystem being mounted at /46/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   46.870374][ T4098] loop9: detected capacity change from 0 to 7
[   46.876642][ T4098] buffer_io_error: 35 callbacks suppressed
[   46.876653][ T4098] Buffer I/O error on dev loop9, logical block 0, async page read
[   46.925828][ T4098] Buffer I/O error on dev loop9, logical block 0, async page read
[   46.933763][ T4098]  loop9: unable to read partition table
[   46.942339][ T4098] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ �â·û
[   46.942339][ T4098] 
) failed (rc=-5)
[   46.943551][ T3292] Buffer I/O error on dev loop9, logical block 0, async page read
[   46.969204][ T3292] Buffer I/O error on dev loop9, logical block 0, async page read
[   46.977445][ T3292] Buffer I/O error on dev loop9, logical block 0, async page read
[   46.985753][ T3292] Buffer I/O error on dev loop9, logical block 0, async page read
[   47.016608][  T418] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.026021][ T3292] Buffer I/O error on dev loop9, logical block 0, async page read
[   47.034053][ T4104] loop4: detected capacity change from 0 to 512
[   47.058360][  T418] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.085390][  T418] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.094834][ T4104] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843e028, mo2=0002]
[   47.107812][  T418] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.108728][ T4104] System zones: 1-12
[   47.164573][ T4104] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.196: invalid indirect mapped block 8 (level 2)
[   47.225170][ T4104] EXT4-fs (loop4): Remounting filesystem read-only
[   47.247781][ T4104] EXT4-fs (loop4): 1 truncate cleaned up
[   47.275829][ T4104] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   47.363751][ T4121] sctp: [Deprecated]: syz.4.196 (pid 4121) Use of struct sctp_assoc_value in delayed_ack socket option.
[   47.363751][ T4121] Use struct sctp_sack_info instead
[   47.499292][ T4124] netlink: 'syz.3.201': attribute type 10 has an invalid length.
[   47.554965][ T4125] loop1: detected capacity change from 0 to 512
[   47.582476][ T4125] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   47.635568][ T3299] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   47.684898][ T4117] Set syz1 is full, maxelem 65536 reached
[   47.842813][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.853735][ T4130] loop0: detected capacity change from 0 to 2048
[   47.881465][ T4130] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   48.031301][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.075204][ T4139] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   48.113293][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.161806][ T4139] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   48.253341][ T4148] loop1: detected capacity change from 0 to 128
[   48.306650][ T4139] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   48.334949][ T4150] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   48.376982][ T4148] bio_check_eod: 21 callbacks suppressed
[   48.376997][ T4148] syz.1.209: attempt to access beyond end of device
[   48.376997][ T4148] loop1: rw=2049, sector=129, nr_sectors = 1 limit=128
[   48.396061][ T4148] Buffer I/O error on dev loop1, logical block 129, lost async page write
[   48.404982][ T4148] syz.1.209: attempt to access beyond end of device
[   48.404982][ T4148] loop1: rw=2049, sector=130, nr_sectors = 1 limit=128
[   48.418346][ T4148] Buffer I/O error on dev loop1, logical block 130, lost async page write
[   48.418625][ T4152] loop2: detected capacity change from 0 to 512
[   48.427510][ T4148] syz.1.209: attempt to access beyond end of device
[   48.427510][ T4148] loop1: rw=2049, sector=139, nr_sectors = 1 limit=128
[   48.446556][ T4148] Buffer I/O error on dev loop1, logical block 139, lost async page write
[   48.456816][ T4139] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   48.461159][ T4152] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   48.468066][ T4148] syz.1.209: attempt to access beyond end of device
[   48.468066][ T4148] loop1: rw=2049, sector=140, nr_sectors = 1 limit=128
[   48.492567][ T4148] syz.1.209: attempt to access beyond end of device
[   48.492567][ T4148] loop1: rw=2049, sector=141, nr_sectors = 1 limit=128
[   48.506789][ T4154] netlink: 8 bytes leftover after parsing attributes in process `syz.1.209'.
[   48.507450][ T4148] syz.1.209: attempt to access beyond end of device
[   48.507450][ T4148] loop1: rw=2049, sector=142, nr_sectors = 1 limit=128
[   48.529961][ T4148] syz.1.209: attempt to access beyond end of device
[   48.529961][ T4148] loop1: rw=2049, sector=143, nr_sectors = 1 limit=128
[   48.543641][ T4148] syz.1.209: attempt to access beyond end of device
[   48.543641][ T4148] loop1: rw=2049, sector=144, nr_sectors = 1 limit=128
[   48.557494][ T4148] syz.1.209: attempt to access beyond end of device
[   48.557494][ T4148] loop1: rw=2049, sector=147, nr_sectors = 1 limit=128
[   48.571147][ T4148] syz.1.209: attempt to access beyond end of device
[   48.571147][ T4148] loop1: rw=2049, sector=148, nr_sectors = 1 limit=128
[   48.571279][ T4141] Set syz1 is full, maxelem 65536 reached
[   48.587193][ T4150] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   48.609733][  T418] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.620737][  T418] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.637301][  T418] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.648282][ T4150] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   48.666612][  T418] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.695467][   T29] kauditd_printk_skb: 495 callbacks suppressed
[   48.695505][   T29] audit: type=1326 audit(1754113575.380:2529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4156 comm="syz.0.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4dfddeb69 code=0x7ffc0000
[   48.725710][ T4157] loop0: detected capacity change from 0 to 1024
[   48.732366][   T29] audit: type=1326 audit(1754113575.380:2530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4156 comm="syz.0.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4dfddeb69 code=0x7ffc0000
[   48.755860][   T29] audit: type=1326 audit(1754113575.380:2531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4156 comm="syz.0.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff4dfddeb69 code=0x7ffc0000
[   48.756449][ T4157] EXT4-fs: inline encryption not supported
[   48.779190][   T29] audit: type=1326 audit(1754113575.380:2532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4156 comm="syz.0.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4dfddeb69 code=0x7ffc0000
[   48.779275][   T29] audit: type=1326 audit(1754113575.380:2533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4156 comm="syz.0.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4dfddeb69 code=0x7ffc0000
[   48.813725][ T4157] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   48.831696][   T29] audit: type=1326 audit(1754113575.380:2534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4156 comm="syz.0.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7ff4dfddeb69 code=0x7ffc0000
[   48.867017][   T29] audit: type=1326 audit(1754113575.380:2535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4156 comm="syz.0.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4dfddeb69 code=0x7ffc0000
[   48.890344][   T29] audit: type=1326 audit(1754113575.380:2536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4156 comm="syz.0.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4dfddeb69 code=0x7ffc0000
[   48.913709][   T29] audit: type=1326 audit(1754113575.380:2537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4156 comm="syz.0.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff4dfddeb69 code=0x7ffc0000
[   48.937040][   T29] audit: type=1326 audit(1754113575.380:2538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4156 comm="syz.0.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4dfddeb69 code=0x7ffc0000
[   48.963568][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.986992][ T4150] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   49.000853][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.021717][ T4165] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   49.055582][  T313] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.106517][ T4173] loop1: detected capacity change from 0 to 2048
[   49.116035][  T313] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.125728][ T4165] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   49.151702][  T313] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.168390][ T4173] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   49.191800][ T4165] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   49.234357][ T4181] loop3: detected capacity change from 0 to 128
[   49.242068][  T313] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.295781][ T4165] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   49.327772][ T4184] loop0: detected capacity change from 0 to 2048
[   49.335358][ T4181] netlink: 8 bytes leftover after parsing attributes in process `syz.3.220'.
[   49.347394][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.358302][ T4184] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   49.465979][ T4194] netlink: 4 bytes leftover after parsing attributes in process `syz.3.224'.
[   49.506231][ T4192] loop1: detected capacity change from 0 to 1024
[   49.549551][ T4192] EXT4-fs: inline encryption not supported
[   49.589979][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.613073][ T4192] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   49.746694][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.781546][ T4223] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   49.820336][ T4223] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   49.880574][ T4223] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   49.943738][ T4235] loop3: detected capacity change from 0 to 512
[   49.953370][ T4223] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   49.983254][ T4234] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   49.988986][ T4235] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   50.030701][ T4234] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.099915][ T4234] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.170639][ T4234] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.204422][ T4244] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.226145][  T418] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   50.237383][  T418] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   50.249450][   T31] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   50.262076][ T4244] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.272931][   T31] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   50.300006][ T4244] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.302272][ T4246] netlink: 'syz.1.232': attribute type 1 has an invalid length.
[   50.325389][ T4246] loop1: detected capacity change from 0 to 128
[   50.334328][ T4246] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   50.346585][ T4246] ext4 filesystem being mounted at /42/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   50.381082][ T4244] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.422627][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.457392][  T418] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   50.468424][  T418] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   50.476733][  T418] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   50.485078][  T418] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   50.583316][ T4255] netlink: 'syz.4.234': attribute type 10 has an invalid length.
[   50.606365][ T4255] team0: Port device dummy0 added
[   51.143673][ T3302] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   51.168303][ T4257] loop1: detected capacity change from 0 to 2048
[   51.175183][ T4257] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[   51.206789][ T4257] bond1: entered promiscuous mode
[   51.211951][ T4257] bond1: entered allmulticast mode
[   51.217555][ T4257] 8021q: adding VLAN 0 to HW filter on device bond1
[   51.228310][ T4257] bond1 (unregistering): Released all slaves
[   51.245420][  T418] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   51.257362][   T31] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   51.283372][   T31] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   51.305035][   T31] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   51.415540][ T4270] loop1: detected capacity change from 0 to 1024
[   51.431142][ T4270] EXT4-fs: inline encryption not supported
[   51.478707][ T4276] loop4: detected capacity change from 0 to 128
[   51.516667][ T4270] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   51.554851][ T4280] loop2: detected capacity change from 0 to 128
[   51.581461][ T3292] udevd[3292]: incorrect ext4 checksum on /dev/loop2
[   51.603313][ T4276] netlink: 8 bytes leftover after parsing attributes in process `syz.4.241'.
[   51.666516][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.756763][ T4293] loop2: detected capacity change from 0 to 128
[   51.766867][ T4293] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   51.790160][ T4293] ext4 filesystem being mounted at /46/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   52.491718][ T4305] loop3: detected capacity change from 0 to 2048
[   52.500514][ T4305] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[   52.534098][ T4305] bond1: entered promiscuous mode
[   52.539253][ T4305] bond1: entered allmulticast mode
[   52.544672][ T4305] 8021q: adding VLAN 0 to HW filter on device bond1
[   52.546677][ T3306] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   52.564847][ T4305] bond1 (unregistering): Released all slaves
[   52.595942][ T4309] loop2: detected capacity change from 0 to 128
[   52.768750][  T287] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   52.787484][  T287] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   52.827288][  T287] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   52.862587][ T4321] loop0: detected capacity change from 0 to 128
[   52.878009][  T287] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   52.965463][ T4325] Zero length message leads to an empty skb
[   53.079810][ T4332] loop4: detected capacity change from 0 to 128
[   53.120392][ T4327] loop2: detected capacity change from 0 to 8192
[   53.168027][ T4332] buffer_io_error: 90 callbacks suppressed
[   53.168049][ T4332] Buffer I/O error on dev loop4, logical block 129, lost async page write
[   53.232404][ T4332] Buffer I/O error on dev loop4, logical block 130, lost async page write
[   53.264501][ T4332] Buffer I/O error on dev loop4, logical block 139, lost async page write
[   53.275200][ T4336] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.287121][ T4332] Buffer I/O error on dev loop4, logical block 140, lost async page write
[   53.297315][ T4332] Buffer I/O error on dev loop4, logical block 141, lost async page write
[   53.306774][ T4332] Buffer I/O error on dev loop4, logical block 142, lost async page write
[   53.321053][ T4337] netlink: 8 bytes leftover after parsing attributes in process `syz.4.260'.
[   53.330667][ T4332] Buffer I/O error on dev loop4, logical block 143, lost async page write
[   53.353702][ T4332] Buffer I/O error on dev loop4, logical block 144, lost async page write
[   53.371296][ T4336] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.402732][ T4332] bio_check_eod: 91 callbacks suppressed
[   53.402750][ T4332] syz.4.260: attempt to access beyond end of device
[   53.402750][ T4332] loop4: rw=2049, sector=147, nr_sectors = 1 limit=128
[   53.421980][ T4332] Buffer I/O error on dev loop4, logical block 147, lost async page write
[   53.425999][ T4343] loop1: detected capacity change from 0 to 128
[   53.441077][ T4332] syz.4.260: attempt to access beyond end of device
[   53.441077][ T4332] loop4: rw=2049, sector=148, nr_sectors = 1 limit=128
[   53.454534][ T4332] Buffer I/O error on dev loop4, logical block 148, lost async page write
[   53.464631][ T4336] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.511822][ T4332] syz.4.260: attempt to access beyond end of device
[   53.511822][ T4332] loop4: rw=2049, sector=157, nr_sectors = 1 limit=128
[   53.525413][ T4332] syz.4.260: attempt to access beyond end of device
[   53.525413][ T4332] loop4: rw=2049, sector=158, nr_sectors = 1 limit=128
[   53.541032][ T4336] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.552036][ T4332] syz.4.260: attempt to access beyond end of device
[   53.552036][ T4332] loop4: rw=2049, sector=159, nr_sectors = 1 limit=128
[   53.565750][ T4332] syz.4.260: attempt to access beyond end of device
[   53.565750][ T4332] loop4: rw=2049, sector=160, nr_sectors = 1 limit=128
[   53.590128][ T4332] syz.4.260: attempt to access beyond end of device
[   53.590128][ T4332] loop4: rw=2049, sector=161, nr_sectors = 1 limit=128
[   53.607834][ T4332] syz.4.260: attempt to access beyond end of device
[   53.607834][ T4332] loop4: rw=2049, sector=131, nr_sectors = 1 limit=128
[   53.635280][ T4332] syz.4.260: attempt to access beyond end of device
[   53.635280][ T4332] loop4: rw=2049, sector=132, nr_sectors = 1 limit=128
[   53.651371][ T4332] syz.4.260: attempt to access beyond end of device
[   53.651371][ T4332] loop4: rw=2049, sector=149, nr_sectors = 1 limit=128
[   53.681169][ T4349] netlink: 'syz.1.264': attribute type 1 has an invalid length.
[   53.701673][ T4352] loop3: detected capacity change from 0 to 128
[   53.702539][ T4349] 8021q: adding VLAN 0 to HW filter on device bond1
[   53.738459][ T4349] bond1: (slave veth5): Enslaving as an active interface with a down link
[   53.757208][ T4349] loop1: detected capacity change from 0 to 128
[   53.798587][ T4352] netlink: 8 bytes leftover after parsing attributes in process `syz.3.266'.
[   53.802844][ T4349] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   53.840222][ T4349] ext4 filesystem being mounted at /50/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   53.929983][ T4362] loop4: detected capacity change from 0 to 128
[   53.941375][ T3292] udevd[3292]: incorrect ext4 checksum on /dev/loop4
[   54.010237][ T4365] loop3: detected capacity change from 0 to 8192
[   54.017789][ T4367] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.070958][ T4367] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.091382][ T4372] loop3: detected capacity change from 0 to 2048
[   54.098113][ T4372] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[   54.132299][ T4367] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.160335][ T4372] bond1: entered promiscuous mode
[   54.165398][ T4372] bond1: entered allmulticast mode
[   54.172043][ T4372] 8021q: adding VLAN 0 to HW filter on device bond1
[   54.182514][ T4372] bond1 (unregistering): Released all slaves
[   54.194524][ T4367] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.237539][ T4381] netlink: 4 bytes leftover after parsing attributes in process `syz.4.277'.
[   54.341331][   T29] kauditd_printk_skb: 501 callbacks suppressed
[   54.341345][   T29] audit: type=1326 audit(1754113581.030:3040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4384 comm="syz.3.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe548dceb69 code=0x7ffc0000
[   54.388755][   T29] audit: type=1326 audit(1754113581.060:3041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4384 comm="syz.3.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe548dceb69 code=0x7ffc0000
[   54.412402][   T29] audit: type=1326 audit(1754113581.060:3042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4384 comm="syz.3.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe548dceb69 code=0x7ffc0000
[   54.435791][   T29] audit: type=1326 audit(1754113581.060:3043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4384 comm="syz.3.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe548dceb69 code=0x7ffc0000
[   54.459128][   T29] audit: type=1326 audit(1754113581.060:3044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4384 comm="syz.3.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe548dceb69 code=0x7ffc0000
[   54.482673][   T29] audit: type=1326 audit(1754113581.060:3045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4384 comm="syz.3.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe548dceb69 code=0x7ffc0000
[   54.506122][   T29] audit: type=1326 audit(1754113581.060:3046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4384 comm="syz.3.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe548dceb69 code=0x7ffc0000
[   54.529454][   T29] audit: type=1326 audit(1754113581.060:3047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4384 comm="syz.3.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe548dceb69 code=0x7ffc0000
[   54.552720][   T29] audit: type=1326 audit(1754113581.060:3048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4384 comm="syz.3.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe548dceb69 code=0x7ffc0000
[   54.576180][   T29] audit: type=1326 audit(1754113581.060:3049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4384 comm="syz.3.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe548dceb69 code=0x7ffc0000
[   54.605195][ T3302] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   54.817779][ T4406] loop9: detected capacity change from 0 to 7
[   54.824167][ T4406]  loop9: unable to read partition table
[   54.831330][ T4406] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ �â·û
[   54.831330][ T4406] 
) failed (rc=-5)
[   55.095058][ T4415] loop1: detected capacity change from 0 to 2048
[   55.126141][ T4415] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   55.192268][ T4419] loop4: detected capacity change from 0 to 128
[   55.203072][ T4187] udevd[4187]: incorrect ext4 checksum on /dev/loop4
[   55.281642][ T4434] loop4: detected capacity change from 0 to 512
[   55.300182][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.351586][ T4434] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #3: comm syz.4.294: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0)
[   55.371701][ T4434] EXT4-fs error (device loop4): ext4_quota_enable:7127: comm syz.4.294: Bad quota inode: 3, type: 0
[   55.390919][ T4434] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[   55.393750][ T4444] loop1: detected capacity change from 0 to 128
[   55.418703][ T3292] udevd[3292]: incorrect ext4 checksum on /dev/loop1
[   55.420674][ T4434] EXT4-fs (loop4): mount failed
[   55.442683][ T4434] netlink: 32 bytes leftover after parsing attributes in process `syz.4.294'.
[   55.573109][ T4468] netlink: 'syz.3.301': attribute type 1 has an invalid length.
[   55.587663][ T4468] 8021q: adding VLAN 0 to HW filter on device bond1
[   55.621348][ T4468] bond1: (slave veth5): Enslaving as an active interface with a down link
[   55.639166][ T4468] loop3: detected capacity change from 0 to 128
[   55.668952][   T31] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.677378][ T4475] loop1: detected capacity change from 0 to 8192
[   55.678178][ T4468] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   55.701409][ T4477] netlink: 'syz.4.300': attribute type 10 has an invalid length.
[   55.732126][   T31] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.740532][   T31] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.752507][   T31] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.761072][ T4468] ext4 filesystem being mounted at /51/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   55.842617][ T4485] loop1: detected capacity change from 0 to 1024
[   55.849667][ T4485] EXT4-fs: inline encryption not supported
[   55.861470][ T4485] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   55.891471][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.918689][ T4490] loop1: detected capacity change from 0 to 2048
[   55.925326][ T4490] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[   55.964068][ T4493] loop1: detected capacity change from 0 to 128
[   55.975432][ T3292] udevd[3292]: incorrect ext4 checksum on /dev/loop1
[   56.002810][ T4495] loop1: detected capacity change from 0 to 128
[   56.036627][ T4495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.310'.
[   56.415578][ T3307] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   56.444502][ T4501] loop3: detected capacity change from 0 to 2048
[   56.460498][ T4501] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   56.555094][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   56.615574][ T4513] netlink: 'syz.3.314': attribute type 1 has an invalid length.
[   56.633514][ T4513] 8021q: adding VLAN 0 to HW filter on device bond2
[   56.654785][ T4513] loop3: detected capacity change from 0 to 128
[   56.674929][ T4513] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   56.704062][ T4513] ext4 filesystem being mounted at /53/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   56.802310][ T4523] loop4: detected capacity change from 0 to 2048
[   56.809125][ T4523] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[   56.951320][ T4530] loop1: detected capacity change from 0 to 128
[   56.997722][ T4530] netlink: 8 bytes leftover after parsing attributes in process `syz.1.321'.
[   57.115183][  T418] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.141534][  T418] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.154334][  T418] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.168630][  T418] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.376169][ T4542] netlink: 4 bytes leftover after parsing attributes in process `syz.2.327'.
[   57.461760][ T4546] loop0: detected capacity change from 0 to 512
[   57.501312][ T3307] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   57.517366][ T4546] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #3: comm syz.0.328: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0)
[   57.553035][ T4546] EXT4-fs error (device loop0): ext4_quota_enable:7127: comm syz.0.328: Bad quota inode: 3, type: 0
[   57.653779][ T4546] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[   57.674083][ T4546] EXT4-fs (loop0): mount failed
[   57.706408][ T4553] loop3: detected capacity change from 0 to 128
[   57.728142][ T4546] netlink: 32 bytes leftover after parsing attributes in process `syz.0.328'.
[   57.832037][ T4553] netlink: 8 bytes leftover after parsing attributes in process `syz.3.330'.
[   57.969337][ T4563] loop4: detected capacity change from 0 to 128
[   58.110376][ T4568] loop4: detected capacity change from 0 to 128
[   58.150367][ T4568] netlink: 8 bytes leftover after parsing attributes in process `syz.4.337'.
[   58.238221][ T4570] loop4: detected capacity change from 0 to 8192
[   58.402611][ T4574] netlink: 'syz.2.340': attribute type 1 has an invalid length.
[   58.424779][ T4576] loop0: detected capacity change from 0 to 1024
[   58.451188][ T4576] EXT4-fs: inline encryption not supported
[   58.457691][ T4574] 8021q: adding VLAN 0 to HW filter on device bond1
[   58.517019][ T4574] loop2: detected capacity change from 0 to 128
[   58.550130][ T4584] netlink: 'syz.1.343': attribute type 1 has an invalid length.
[   58.575325][ T4574] ext4 filesystem being mounted at /58/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   58.617033][ T4584] 8021q: adding VLAN 0 to HW filter on device bond2
[   58.664489][ T4584] loop1: detected capacity change from 0 to 128
[   58.681397][ T4584] ext4 filesystem being mounted at /77/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   58.865487][ T4598] loop3: detected capacity change from 0 to 1024
[   58.875864][ T4598] EXT4-fs: inline encryption not supported
[   58.987004][ T4607] loop3: detected capacity change from 0 to 128
[   59.010256][ T4607] bio_check_eod: 168 callbacks suppressed
[   59.010268][ T4607] syz.3.350: attempt to access beyond end of device
[   59.010268][ T4607] loop3: rw=2049, sector=129, nr_sectors = 1 limit=128
[   59.029318][ T4607] buffer_io_error: 188 callbacks suppressed
[   59.029330][ T4607] Buffer I/O error on dev loop3, logical block 129, lost async page write
[   59.043914][ T4607] syz.3.350: attempt to access beyond end of device
[   59.043914][ T4607] loop3: rw=2049, sector=130, nr_sectors = 1 limit=128
[   59.057286][ T4607] Buffer I/O error on dev loop3, logical block 130, lost async page write
[   59.065937][ T4607] syz.3.350: attempt to access beyond end of device
[   59.065937][ T4607] loop3: rw=2049, sector=139, nr_sectors = 1 limit=128
[   59.079369][ T4607] Buffer I/O error on dev loop3, logical block 139, lost async page write
[   59.087927][ T4607] syz.3.350: attempt to access beyond end of device
[   59.087927][ T4607] loop3: rw=2049, sector=140, nr_sectors = 1 limit=128
[   59.101239][ T4607] Buffer I/O error on dev loop3, logical block 140, lost async page write
[   59.109818][ T4607] syz.3.350: attempt to access beyond end of device
[   59.109818][ T4607] loop3: rw=2049, sector=141, nr_sectors = 1 limit=128
[   59.123174][ T4607] Buffer I/O error on dev loop3, logical block 141, lost async page write
[   59.131811][ T4607] syz.3.350: attempt to access beyond end of device
[   59.131811][ T4607] loop3: rw=2049, sector=142, nr_sectors = 1 limit=128
[   59.145211][ T4607] Buffer I/O error on dev loop3, logical block 142, lost async page write
[   59.153986][ T4607] syz.3.350: attempt to access beyond end of device
[   59.153986][ T4607] loop3: rw=2049, sector=143, nr_sectors = 1 limit=128
[   59.165047][ T4609] netlink: 8 bytes leftover after parsing attributes in process `syz.3.350'.
[   59.167919][ T4607] Buffer I/O error on dev loop3, logical block 143, lost async page write
[   59.186520][ T4607] syz.3.350: attempt to access beyond end of device
[   59.186520][ T4607] loop3: rw=2049, sector=144, nr_sectors = 1 limit=128
[   59.200051][ T4607] Buffer I/O error on dev loop3, logical block 144, lost async page write
[   59.208851][ T4607] syz.3.350: attempt to access beyond end of device
[   59.208851][ T4607] loop3: rw=2049, sector=147, nr_sectors = 1 limit=128
[   59.222220][ T4607] Buffer I/O error on dev loop3, logical block 147, lost async page write
[   59.230841][ T4607] syz.3.350: attempt to access beyond end of device
[   59.230841][ T4607] loop3: rw=2049, sector=148, nr_sectors = 1 limit=128
[   59.244154][ T4607] Buffer I/O error on dev loop3, logical block 148, lost async page write
[   59.354703][   T29] kauditd_printk_skb: 1186 callbacks suppressed
[   59.354719][   T29] audit: type=1326 audit(1754113586.040:4236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4589 comm="syz.0.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff4dfdd5b27 code=0x7ffc0000
[   59.396860][   T29] audit: type=1326 audit(1754113586.080:4237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4589 comm="syz.0.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff4dfd7ad69 code=0x7ffc0000
[   59.420252][   T29] audit: type=1326 audit(1754113586.080:4238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4589 comm="syz.0.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff4dfdd5b27 code=0x7ffc0000
[   59.443597][   T29] audit: type=1326 audit(1754113586.080:4239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4589 comm="syz.0.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff4dfd7ad69 code=0x7ffc0000
[   59.467137][   T29] audit: type=1326 audit(1754113586.080:4240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4589 comm="syz.0.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7ff4dfddeb69 code=0x7ffc0000
[   59.490944][   T29] audit: type=1326 audit(1754113586.110:4241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4589 comm="syz.0.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff4dfdd5b27 code=0x7ffc0000
[   59.514233][   T29] audit: type=1326 audit(1754113586.110:4242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4589 comm="syz.0.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff4dfd7ad69 code=0x7ffc0000
[   59.537655][   T29] audit: type=1326 audit(1754113586.110:4243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4589 comm="syz.0.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7ff4dfddeb69 code=0x7ffc0000
[   59.560931][   T29] audit: type=1326 audit(1754113586.130:4244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4589 comm="syz.0.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff4dfdd5b27 code=0x7ffc0000
[   59.584205][   T29] audit: type=1326 audit(1754113586.130:4245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4589 comm="syz.0.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff4dfd7ad69 code=0x7ffc0000
[   59.660218][ T4630] loop4: detected capacity change from 0 to 1024
[   59.667673][ T4630] EXT4-fs: inline encryption not supported
[   59.768220][ T4643] loop2: detected capacity change from 0 to 128
[   59.859408][ T3292] udevd[3292]: incorrect ext4 checksum on /dev/loop2
[   60.283013][ T4669] loop0: detected capacity change from 0 to 1024
[   60.283811][ T4669] EXT4-fs: inline encryption not supported
[   60.356945][ T4676] loop0: detected capacity change from 0 to 128
[   60.370957][ T3292] udevd[3292]: incorrect ext4 checksum on /dev/loop0
[   60.455530][ T4686] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.490262][ T4686] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.540565][ T4686] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.590601][ T4686] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.724671][ T4690] loop4: detected capacity change from 0 to 512
[   60.741040][ T4690] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #3: comm syz.4.380: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0)
[   60.760080][ T4690] EXT4-fs error (device loop4): ext4_quota_enable:7127: comm syz.4.380: Bad quota inode: 3, type: 0
[   60.771464][ T4690] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[   60.787486][ T4690] EXT4-fs (loop4): mount failed
[   60.804821][ T4690] netlink: 32 bytes leftover after parsing attributes in process `syz.4.380'.
[   60.911255][ T4700] loop1: detected capacity change from 0 to 1024
[   60.922066][ T4700] EXT4-fs: inline encryption not supported
[   60.960704][   T31] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.976248][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.994688][ T4706] loop1: detected capacity change from 0 to 128
[   61.004741][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.035671][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.062560][ T4706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.385'.
[   61.190533][ T4718] loop0: detected capacity change from 0 to 512
[   61.203964][ T4718] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.389: bg 0: block 131: padding at end of block bitmap is not set
[   61.220037][ T4718] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem
[   61.229719][ T4718] EXT4-fs (loop0): 1 truncate cleaned up
[   61.505154][ T4730] loop0: detected capacity change from 0 to 128
[   61.554898][ T4733] loop1: detected capacity change from 0 to 128
[   61.636851][ T4735] loop0: detected capacity change from 0 to 1024
[   61.647922][ T4735] EXT4-fs: inline encryption not supported
[   61.681678][ T4733] netlink: 8 bytes leftover after parsing attributes in process `syz.1.396'.
[   61.743833][ T4743] 9pnet_fd: Insufficient options for proto=fd
[   61.772009][ T4745] loop1: detected capacity change from 0 to 128
[   61.823590][ T4750] loop0: detected capacity change from 0 to 2048
[   61.846197][ T4750] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[   62.031570][ T4753] loop1: detected capacity change from 0 to 8192
[   62.178707][ T4766] netlink: 'syz.0.408': attribute type 1 has an invalid length.
[   62.192376][ T4768] loop1: detected capacity change from 0 to 512
[   62.263787][ T4769] tipc: Started in network mode
[   62.268911][ T4769] tipc: Node identity ac14140f, cluster identity 4711
[   62.328005][ T4769] tipc: New replicast peer: 0.0.255.255
[   62.333797][ T4769] tipc: Enabled bearer <udp:s>, priority 10
[   62.361274][ T4776] loop3: detected capacity change from 0 to 2048
[   62.384357][ T4768] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #3: comm syz.1.407: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0)
[   62.423413][ T4770] loop0: detected capacity change from 0 to 512
[   62.459897][ T4741] Set syz1 is full, maxelem 65536 reached
[   62.467044][ T4768] EXT4-fs error (device loop1): ext4_quota_enable:7127: comm syz.1.407: Bad quota inode: 3, type: 0
[   62.504349][ T4781] loop4: detected capacity change from 0 to 512
[   62.532986][ T4768] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[   62.548214][ T4768] EXT4-fs (loop1): mount failed
[   62.548573][ T4782] 9pnet_fd: Insufficient options for proto=fd
[   62.569617][ T4770] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #3: comm syz.0.408: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0)
[   62.652807][ T4770] EXT4-fs error (device loop0): ext4_quota_enable:7127: comm syz.0.408: Bad quota inode: 3, type: 0
[   62.665808][ T4770] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[   62.681892][ T4768] netlink: 32 bytes leftover after parsing attributes in process `syz.1.407'.
[   62.706290][ T4770] EXT4-fs (loop0): mount failed
[   62.760456][ T4791] bond2: entered promiscuous mode
[   62.765536][ T4791] bond2: entered allmulticast mode
[   62.781846][ T4794] loop3: detected capacity change from 0 to 1024
[   62.794457][ T4791] 8021q: adding VLAN 0 to HW filter on device bond2
[   62.818225][ T4791] bond2 (unregistering): Released all slaves
[   62.839446][ T4794] EXT4-fs: inline encryption not supported
[   62.870972][ T4797] loop0: detected capacity change from 0 to 2048
[   62.896989][ T4797] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[   63.085849][ T4814] FAULT_INJECTION: forcing a failure.
[   63.085849][ T4814] name failslab, interval 1, probability 0, space 0, times 1
[   63.098666][ T4814] CPU: 1 UID: 0 PID: 4814 Comm: syz.4.422 Not tainted 6.16.0-syzkaller-10910-g0905809b38bd #0 PREEMPT(voluntary) 
[   63.098702][ T4814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   63.098718][ T4814] Call Trace:
[   63.098726][ T4814]  <TASK>
[   63.098735][ T4814]  __dump_stack+0x1d/0x30
[   63.098777][ T4814]  dump_stack_lvl+0xe8/0x140
[   63.098795][ T4814]  dump_stack+0x15/0x1b
[   63.098810][ T4814]  should_fail_ex+0x265/0x280
[   63.098857][ T4814]  should_failslab+0x8c/0xb0
[   63.098886][ T4814]  kmem_cache_alloc_noprof+0x50/0x310
[   63.098921][ T4814]  ? getname_flags+0x80/0x3b0
[   63.098951][ T4814]  getname_flags+0x80/0x3b0
[   63.099002][ T4814]  user_path_at+0x28/0x130
[   63.099042][ T4814]  __se_sys_pivot_root+0xd0/0x710
[   63.099143][ T4814]  __x64_sys_pivot_root+0x31/0x40
[   63.099250][ T4814]  x64_sys_call+0x144/0x2ff0
[   63.099277][ T4814]  do_syscall_64+0xd2/0x200
[   63.099366][ T4814]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   63.099434][ T4814]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   63.099460][ T4814]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   63.099487][ T4814] RIP: 0033:0x7f06731feb69
[   63.099533][ T4814] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   63.099550][ T4814] RSP: 002b:00007f067185f038 EFLAGS: 00000246 ORIG_RAX: 000000000000009b
[   63.099664][ T4814] RAX: ffffffffffffffda RBX: 00007f0673425fa0 RCX: 00007f06731feb69
[   63.099677][ T4814] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   63.099689][ T4814] RBP: 00007f067185f090 R08: 0000000000000000 R09: 0000000000000000
[   63.099700][ T4814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   63.099711][ T4814] R13: 0000000000000000 R14: 00007f0673425fa0 R15: 00007ffdc3549738
[   63.099729][ T4814]  </TASK>
[   63.428955][ T3466] tipc: Node number set to 2886997007
[   63.589556][ T4838] loop4: detected capacity change from 0 to 128
[   63.652696][ T4842] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.712563][ T4849] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.726455][ T4842] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.770103][ T4849] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.820915][ T4842] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.860772][ T4849] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.900351][ T4842] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.912810][ T4854] loop0: detected capacity change from 0 to 2048
[   63.926330][ T4854] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[   63.936871][ T4849] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.977437][   T31] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.003612][   T31] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.019192][   T31] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.036470][ T4856] loop4: detected capacity change from 0 to 128
[   64.037366][   T31] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.082843][ T4856] bio_check_eod: 83 callbacks suppressed
[   64.082859][ T4856] syz.4.438: attempt to access beyond end of device
[   64.082859][ T4856] loop4: rw=2049, sector=129, nr_sectors = 1 limit=128
[   64.102009][ T4856] buffer_io_error: 83 callbacks suppressed
[   64.102026][ T4856] Buffer I/O error on dev loop4, logical block 129, lost async page write
[   64.118699][ T4856] syz.4.438: attempt to access beyond end of device
[   64.118699][ T4856] loop4: rw=2049, sector=130, nr_sectors = 1 limit=128
[   64.132140][ T4856] Buffer I/O error on dev loop4, logical block 130, lost async page write
[   64.155092][   T31] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.158669][ T4856] syz.4.438: attempt to access beyond end of device
[   64.158669][ T4856] loop4: rw=2049, sector=139, nr_sectors = 1 limit=128
[   64.176629][ T4856] Buffer I/O error on dev loop4, logical block 139, lost async page write
[   64.178674][   T31] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.207027][   T31] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.247690][ T4860] netlink: 8 bytes leftover after parsing attributes in process `syz.4.438'.
[   64.258677][ T4856] syz.4.438: attempt to access beyond end of device
[   64.258677][ T4856] loop4: rw=2049, sector=140, nr_sectors = 1 limit=128
[   64.272168][ T4856] Buffer I/O error on dev loop4, logical block 140, lost async page write
[   64.278139][   T31] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.496128][ T4856] syz.4.438: attempt to access beyond end of device
[   64.496128][ T4856] loop4: rw=2049, sector=141, nr_sectors = 1 limit=128
[   64.509570][ T4856] Buffer I/O error on dev loop4, logical block 141, lost async page write
[   64.531787][ T4877] loop2: detected capacity change from 0 to 512
[   64.547943][ T4856] syz.4.438: attempt to access beyond end of device
[   64.547943][ T4856] loop4: rw=2049, sector=142, nr_sectors = 1 limit=128
[   64.561390][ T4856] Buffer I/O error on dev loop4, logical block 142, lost async page write
[   64.585510][ T4877] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.442: bg 0: block 16: invalid block bitmap
[   64.611702][ T4877] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem
[   64.620852][ T4876] loop0: detected capacity change from 0 to 512
[   64.635222][ T4876] EXT4-fs: Ignoring removed orlov option
[   64.658590][ T4856] syz.4.438: attempt to access beyond end of device
[   64.658590][ T4856] loop4: rw=2049, sector=143, nr_sectors = 1 limit=128
[   64.672203][ T4856] Buffer I/O error on dev loop4, logical block 143, lost async page write
[   64.677042][ T4877] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.442: invalid indirect mapped block 5 (level 0)
[   64.682801][ T4856] syz.4.438: attempt to access beyond end of device
[   64.682801][ T4856] loop4: rw=2049, sector=144, nr_sectors = 1 limit=128
[   64.696626][ T4885] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.707259][ T4856] Buffer I/O error on dev loop4, logical block 144, lost async page write
[   64.707358][ T4856] syz.4.438: attempt to access beyond end of device
[   64.707358][ T4856] loop4: rw=2049, sector=147, nr_sectors = 1 limit=128
[   64.729209][ T4877] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.442: invalid indirect mapped block 4294967295 (level 1)
[   64.738928][ T4856] Buffer I/O error on dev loop4, logical block 147, lost async page write
[   64.761327][ T4876] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   64.771918][ T4856] syz.4.438: attempt to access beyond end of device
[   64.771918][ T4856] loop4: rw=2049, sector=148, nr_sectors = 1 limit=128
[   64.785312][ T4856] Buffer I/O error on dev loop4, logical block 148, lost async page write
[   64.795515][ T4877] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.442: invalid indirect mapped block 4294967295 (level 2)
[   64.795580][ T4876] EXT4-fs (loop0): orphan cleanup on readonly fs
[   64.816823][ T4889] FAULT_INJECTION: forcing a failure.
[   64.816823][ T4889] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   64.829976][ T4889] CPU: 1 UID: 0 PID: 4889 Comm: syz.3.448 Not tainted 6.16.0-syzkaller-10910-g0905809b38bd #0 PREEMPT(voluntary) 
[   64.830022][ T4889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   64.830037][ T4889] Call Trace:
[   64.830043][ T4889]  <TASK>
[   64.830050][ T4889]  __dump_stack+0x1d/0x30
[   64.830103][ T4889]  dump_stack_lvl+0xe8/0x140
[   64.830126][ T4889]  dump_stack+0x15/0x1b
[   64.830146][ T4889]  should_fail_ex+0x265/0x280
[   64.830187][ T4889]  should_fail+0xb/0x20
[   64.830297][ T4889]  should_fail_usercopy+0x1a/0x20
[   64.830315][ T4889]  _copy_from_user+0x1c/0xb0
[   64.830345][ T4889]  ___sys_sendmsg+0xc1/0x1d0
[   64.830475][ T4889]  __x64_sys_sendmsg+0xd4/0x160
[   64.830575][ T4889]  x64_sys_call+0x191e/0x2ff0
[   64.830601][ T4889]  do_syscall_64+0xd2/0x200
[   64.830631][ T4889]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   64.830665][ T4889]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   64.830767][ T4889]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   64.830795][ T4889] RIP: 0033:0x7fe548dceb69
[   64.830892][ T4889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   64.830911][ T4889] RSP: 002b:00007fe547437038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   64.830929][ T4889] RAX: ffffffffffffffda RBX: 00007fe548ff5fa0 RCX: 00007fe548dceb69
[   64.831003][ T4889] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[   64.831019][ T4889] RBP: 00007fe547437090 R08: 0000000000000000 R09: 0000000000000000
[   64.831034][ T4889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   64.831048][ T4889] R13: 0000000000000000 R14: 00007fe548ff5fa0 R15: 00007fff7171d0f8
[   64.831088][ T4889]  </TASK>
[   64.832027][ T4877] EXT4-fs (loop2): 1 truncate cleaned up
[   64.855680][ T4876] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.446: bg 0: block 248: padding at end of block bitmap is not set
[   65.029210][ T4885] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.047666][ T4876] __quota_error: 1727 callbacks suppressed
[   65.047684][ T4876] Quota error (device loop0): write_blk: dquota write failed
[   65.061068][ T4876] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[   65.071031][ T4876] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.446: Failed to acquire dquot type 1
[   65.082559][   T29] audit: type=1400 audit(1754113591.740:5973): avc:  denied  { read } for  pid=4868 comm="syz.2.442" path="socket:[11053]" dev="sockfs" ino=11053 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   65.115803][ T4876] EXT4-fs (loop0): 1 truncate cleaned up
[   65.160407][ T4885] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.205510][ T4900] FAULT_INJECTION: forcing a failure.
[   65.205510][ T4900] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   65.218697][ T4900] CPU: 1 UID: 0 PID: 4900 Comm: syz.4.450 Not tainted 6.16.0-syzkaller-10910-g0905809b38bd #0 PREEMPT(voluntary) 
[   65.218723][ T4900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   65.218740][ T4900] Call Trace:
[   65.218746][ T4900]  <TASK>
[   65.218754][ T4900]  __dump_stack+0x1d/0x30
[   65.218781][ T4900]  dump_stack_lvl+0xe8/0x140
[   65.218805][ T4900]  dump_stack+0x15/0x1b
[   65.218858][ T4876] EXT4-fs: Ignoring removed orlov option
[   65.218824][ T4900]  should_fail_ex+0x265/0x280
[   65.218890][ T4900]  should_fail+0xb/0x20
[   65.218942][ T4900]  should_fail_usercopy+0x1a/0x20
[   65.218970][ T4900]  _copy_from_user+0x1c/0xb0
[   65.219025][ T4900]  ___sys_sendmsg+0xc1/0x1d0
[   65.219098][ T4900]  __x64_sys_sendmsg+0xd4/0x160
[   65.219150][ T4900]  x64_sys_call+0x191e/0x2ff0
[   65.219264][ T4900]  do_syscall_64+0xd2/0x200
[   65.219296][ T4900]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   65.219330][ T4900]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   65.219432][ T4900]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   65.219485][ T4900] RIP: 0033:0x7f06731feb69
[   65.219506][ T4900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   65.219531][ T4900] RSP: 002b:00007f067183e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   65.219557][ T4900] RAX: ffffffffffffffda RBX: 00007f0673426080 RCX: 00007f06731feb69
[   65.219574][ T4900] RDX: 000000002000c800 RSI: 0000200000000380 RDI: 0000000000000008
[   65.219605][ T4900] RBP: 00007f067183e090 R08: 0000000000000000 R09: 0000000000000000
[   65.219620][ T4900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   65.219637][ T4900] R13: 0000000000000000 R14: 00007f0673426080 R15: 00007ffdc3549738
[   65.219683][ T4900]  </TASK>
[   65.396460][   T29] audit: type=1400 audit(1754113591.910:5974): avc:  denied  { remount } for  pid=4875 comm="syz.0.446" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   65.418996][ T4876] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   65.440515][ T4885] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.473968][ T4905] netlink: 'syz.4.453': attribute type 1 has an invalid length.
[   65.474016][ T4876] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended
[   65.509543][ T4905] 8021q: adding VLAN 0 to HW filter on device bond1
[   65.539802][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.565347][ T4905] loop4: detected capacity change from 0 to 128
[   65.573671][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.602195][ T4905] ext4 filesystem being mounted at /106/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   65.606675][ T4909] 9pnet_fd: Insufficient options for proto=fd
[   65.641755][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.662060][  T313] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.678531][   T29] audit: type=1400 audit(1754113592.360:5975): avc:  denied  { add_name } for  pid=4904 comm="syz.4.453" name="hugetlb.1GB.rsvd.usage_in_bytes" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   65.701482][   T29] audit: type=1400 audit(1754113592.360:5976): avc:  denied  { create } for  pid=4904 comm="syz.4.453" name="hugetlb.1GB.rsvd.usage_in_bytes" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   65.741648][ T4876] EXT4-fs error (device loop0): __ext4_remount:6736: comm syz.0.446: Abort forced by user
[   65.761931][ T4876] EXT4-fs (loop0): Remounting filesystem read-only
[   65.768512][ T4876] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[   65.790497][ T4916] loop2: detected capacity change from 0 to 2048
[   65.791354][   T29] audit: type=1400 audit(1754113592.420:5977): avc:  denied  { read append open } for  pid=4904 comm="syz.4.453" path="/106/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/hugetlb.1GB.rsvd.usage_in_bytes" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   65.798019][ T4916] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[   65.844252][   T29] audit: type=1326 audit(1754113592.470:5978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4917 comm="syz.1.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ae4cceb69 code=0x7ffc0000
[   65.844289][   T29] audit: type=1326 audit(1754113592.480:5979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4917 comm="syz.1.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f5ae4cceb69 code=0x7ffc0000
[   65.893711][ T4876] ext4 filesystem being remounted at /88/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   65.899765][   T29] audit: type=1326 audit(1754113592.480:5980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4917 comm="syz.1.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ae4cceb69 code=0x7ffc0000
[   65.940760][ T4912] netlink: 36 bytes leftover after parsing attributes in process `syz.2.456'.
[   65.985480][ T4925] loop2: detected capacity change from 0 to 128
[   66.045560][ T4929] vlan2: entered allmulticast mode
[   66.091156][ T4925] ext4 filesystem being mounted at /84/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   66.096568][ T4929] dummy0: entered allmulticast mode
[   66.144737][ T4876] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   66.153073][ T4876] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98
[   66.170568][ T4930] pim6reg1: entered promiscuous mode
[   66.175903][ T4930] pim6reg1: entered allmulticast mode
[   66.240840][ T4876] syz.0.446 (4876) used greatest stack depth: 9280 bytes left
[   66.668266][ T4944] loop0: detected capacity change from 0 to 2048
[   66.748015][ T4948] 9pnet_fd: Insufficient options for proto=fd
[   66.868385][ T4953] loop1: detected capacity change from 0 to 128
[   66.951167][ T4957] loop1: detected capacity change from 0 to 2048
[   66.983014][ T4957] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[   67.022603][ T4957] netlink: 36 bytes leftover after parsing attributes in process `syz.1.469'.
[   67.221166][ T4971] loop4: detected capacity change from 0 to 1024
[   67.233905][ T4971] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled
[   67.315161][ T4973] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.354644][ T4977] netlink: 8 bytes leftover after parsing attributes in process `syz.0.474'.
[   67.372246][ T4977] loop0: detected capacity change from 0 to 512
[   67.390233][ T4973] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.434062][ T4977] ext4: Unknown parameter 'fowner'
[   67.441625][ T4978] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: inode #11: comm syz.4.473: missing EA_INODE flag
[   67.453486][ T4978] EXT4-fs (loop4): Remounting filesystem read-only
[   67.460176][ T4978] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   67.513329][ T4973] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.570860][ T4973] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.604799][ T4983] 9pnet_fd: Insufficient options for proto=fd
[   67.638960][  T418] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.651341][  T418] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.674266][  T418] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.674342][  T418] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.695483][ T4987] loop0: detected capacity change from 0 to 128
[   67.799635][ T4993] loop0: detected capacity change from 0 to 128
[   67.812616][ T3292] udevd[3292]: incorrect ext4 checksum on /dev/loop0
[   67.911880][ T4996] loop0: detected capacity change from 0 to 512
[   67.929292][ T4996] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843e028, mo2=0002]
[   67.938236][ T4996] System zones: 1-12
[   67.942939][ T4996] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 33261: comm syz.0.482: invalid block
[   67.956174][ T4996] EXT4-fs (loop0): Remounting filesystem read-only
[   67.963836][ T4996] EXT4-fs (loop0): 1 truncate cleaned up
[   68.022857][ T4998] sctp: [Deprecated]: syz.0.482 (pid 4998) Use of struct sctp_assoc_value in delayed_ack socket option.
[   68.022857][ T4998] Use struct sctp_sack_info instead
[   68.562108][ T3407] hid-generic 0000:0D17:0000.0001: unknown main item tag 0x0
[   68.569692][ T3407] hid-generic 0000:0D17:0000.0001: unknown main item tag 0x0
[   68.579761][ T3407] hid-generic 0000:0D17:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[   68.621059][ T5009] fido_id[5009]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   68.653611][ T5013] FAULT_INJECTION: forcing a failure.
[   68.653611][ T5013] name failslab, interval 1, probability 0, space 0, times 0
[   68.666449][ T5013] CPU: 0 UID: 0 PID: 5013 Comm: syz.2.486 Not tainted 6.16.0-syzkaller-10910-g0905809b38bd #0 PREEMPT(voluntary) 
[   68.666482][ T5013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   68.666496][ T5013] Call Trace:
[   68.666504][ T5013]  <TASK>
[   68.666512][ T5013]  __dump_stack+0x1d/0x30
[   68.666533][ T5013]  dump_stack_lvl+0xe8/0x140
[   68.666554][ T5013]  dump_stack+0x15/0x1b
[   68.666568][ T5013]  should_fail_ex+0x265/0x280
[   68.666597][ T5013]  should_failslab+0x8c/0xb0
[   68.666617][ T5013]  kmem_cache_alloc_noprof+0x50/0x310
[   68.666646][ T5013]  ? mas_alloc_nodes+0x265/0x520
[   68.666675][ T5013]  mas_alloc_nodes+0x265/0x520
[   68.666705][ T5013]  mas_preallocate+0x33e/0x520
[   68.666735][ T5013]  vma_link+0x8b/0x220
[   68.666768][ T5013]  copy_vma+0x454/0x580
[   68.666801][ T5013]  move_vma+0x42e/0xcf0
[   68.666823][ T5013]  ? do_vmi_munmap+0x1db/0x220
[   68.666848][ T5013]  mremap_to+0x3eb/0x440
[   68.666877][ T5013]  ? check_prep_vma+0x5b4/0x640
[   68.666910][ T5013]  __se_sys_mremap+0x652/0xc60
[   68.666949][ T5013]  ? fput+0x8f/0xc0
[   68.666981][ T5013]  ? ksys_write+0x192/0x1a0
[   68.667000][ T5013]  __x64_sys_mremap+0x67/0x80
[   68.667022][ T5013]  x64_sys_call+0x2a24/0x2ff0
[   68.667041][ T5013]  do_syscall_64+0xd2/0x200
[   68.667066][ T5013]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   68.667093][ T5013]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   68.667118][ T5013]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   68.667141][ T5013] RIP: 0033:0x7fb28059eb69
[   68.667158][ T5013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   68.667178][ T5013] RSP: 002b:00007fb27ec07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019
[   68.667199][ T5013] RAX: ffffffffffffffda RBX: 00007fb2807c5fa0 RCX: 00007fb28059eb69
[   68.667210][ T5013] RDX: 0000000005000000 RSI: 0000000000002000 RDI: 0000200000ff5000
[   68.667224][ T5013] RBP: 00007fb27ec07090 R08: 0000200000ffd000 R09: 0000000000000000
[   68.667238][ T5013] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001
[   68.667251][ T5013] R13: 0000000000000000 R14: 00007fb2807c5fa0 R15: 00007ffc28607f08
[   68.667274][ T5013]  </TASK>
[   68.904391][ T3299] EXT4-fs unmount: 37 callbacks suppressed
[   68.904410][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.949290][ T5017] 9pnet_fd: Insufficient options for proto=fd
[   68.968086][ T5024] loop1: detected capacity change from 0 to 128
[   69.019887][ T5022] loop3: detected capacity change from 0 to 8192
[   69.059518][ T5030] loop2: detected capacity change from 0 to 128
[   69.110177][ T5033] syz.1.495 uses obsolete (PF_INET,SOCK_PACKET)
[   69.124334][ T5030] bio_check_eod: 21 callbacks suppressed
[   69.124423][ T5030] syz.2.494: attempt to access beyond end of device
[   69.124423][ T5030] loop2: rw=2049, sector=129, nr_sectors = 1 limit=128
[   69.143494][ T5030] buffer_io_error: 21 callbacks suppressed
[   69.143506][ T5030] Buffer I/O error on dev loop2, logical block 129, lost async page write
[   69.180644][ T5030] syz.2.494: attempt to access beyond end of device
[   69.180644][ T5030] loop2: rw=2049, sector=130, nr_sectors = 1 limit=128
[   69.194128][ T5030] Buffer I/O error on dev loop2, logical block 130, lost async page write
[   69.206416][ T5030] syz.2.494: attempt to access beyond end of device
[   69.206416][ T5030] loop2: rw=2049, sector=139, nr_sectors = 1 limit=128
[   69.219829][ T5030] Buffer I/O error on dev loop2, logical block 139, lost async page write
[   69.230389][ T5030] syz.2.494: attempt to access beyond end of device
[   69.230389][ T5030] loop2: rw=2049, sector=140, nr_sectors = 1 limit=128
[   69.243790][ T5030] Buffer I/O error on dev loop2, logical block 140, lost async page write
[   69.254545][ T5030] syz.2.494: attempt to access beyond end of device
[   69.254545][ T5030] loop2: rw=2049, sector=141, nr_sectors = 1 limit=128
[   69.267908][ T5030] Buffer I/O error on dev loop2, logical block 141, lost async page write
[   69.277587][ T5030] syz.2.494: attempt to access beyond end of device
[   69.277587][ T5030] loop2: rw=2049, sector=142, nr_sectors = 1 limit=128
[   69.291048][ T5030] Buffer I/O error on dev loop2, logical block 142, lost async page write
[   69.300125][ T5030] syz.2.494: attempt to access beyond end of device
[   69.300125][ T5030] loop2: rw=2049, sector=143, nr_sectors = 1 limit=128
[   69.313503][ T5030] Buffer I/O error on dev loop2, logical block 143, lost async page write
[   69.323792][ T5043] veth1_macvtap: left promiscuous mode
[   69.329460][ T5043] macsec0: entered promiscuous mode
[   69.329562][ T5044] loop4: detected capacity change from 0 to 512
[   69.349224][ T5030] syz.2.494: attempt to access beyond end of device
[   69.349224][ T5030] loop2: rw=2049, sector=144, nr_sectors = 1 limit=128
[   69.362590][ T5030] Buffer I/O error on dev loop2, logical block 144, lost async page write
[   69.371903][ T5044] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   69.385935][ T5030] syz.2.494: attempt to access beyond end of device
[   69.385935][ T5030] loop2: rw=2049, sector=147, nr_sectors = 1 limit=128
[   69.399498][ T5030] Buffer I/O error on dev loop2, logical block 147, lost async page write
[   69.403090][ T5042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.494'.
[   69.443172][ T5030] syz.2.494: attempt to access beyond end of device
[   69.443172][ T5030] loop2: rw=2049, sector=148, nr_sectors = 1 limit=128
[   69.456618][ T5030] Buffer I/O error on dev loop2, logical block 148, lost async page write
[   69.630251][ T5055] FAULT_INJECTION: forcing a failure.
[   69.630251][ T5055] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   69.643571][ T5055] CPU: 0 UID: 0 PID: 5055 Comm: syz.2.500 Not tainted 6.16.0-syzkaller-10910-g0905809b38bd #0 PREEMPT(voluntary) 
[   69.643606][ T5055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   69.643621][ T5055] Call Trace:
[   69.643629][ T5055]  <TASK>
[   69.643637][ T5055]  __dump_stack+0x1d/0x30
[   69.643719][ T5055]  dump_stack_lvl+0xe8/0x140
[   69.643743][ T5055]  dump_stack+0x15/0x1b
[   69.643763][ T5055]  should_fail_ex+0x265/0x280
[   69.643803][ T5055]  should_fail+0xb/0x20
[   69.643854][ T5055]  should_fail_usercopy+0x1a/0x20
[   69.643890][ T5055]  _copy_from_user+0x1c/0xb0
[   69.643996][ T5055]  ____sys_sendmsg+0x1c5/0x4e0
[   69.644035][ T5055]  ___sys_sendmsg+0x17b/0x1d0
[   69.644119][ T5055]  __x64_sys_sendmsg+0xd4/0x160
[   69.644164][ T5055]  x64_sys_call+0x191e/0x2ff0
[   69.644286][ T5055]  do_syscall_64+0xd2/0x200
[   69.644315][ T5055]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   69.644346][ T5055]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   69.644430][ T5055]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   69.644458][ T5055] RIP: 0033:0x7fb28059eb69
[   69.644532][ T5055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   69.644556][ T5055] RSP: 002b:00007fb27ec07038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   69.644575][ T5055] RAX: ffffffffffffffda RBX: 00007fb2807c5fa0 RCX: 00007fb28059eb69
[   69.644587][ T5055] RDX: 0000000000000041 RSI: 0000200000000600 RDI: 0000000000000003
[   69.644643][ T5055] RBP: 00007fb27ec07090 R08: 0000000000000000 R09: 0000000000000000
[   69.644655][ T5055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   69.644694][ T5055] R13: 0000000000000000 R14: 00007fb2807c5fa0 R15: 00007ffc28607f08
[   69.644771][ T5055]  </TASK>
[   69.892981][ T5059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.502'.
[   69.911406][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.921767][ T5061] 9pnet_fd: Insufficient options for proto=fd
[   69.953894][ T5066] loop4: detected capacity change from 0 to 128
[   70.000713][ T5069] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.040701][ T5069] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.050816][   T29] kauditd_printk_skb: 1246 callbacks suppressed
[   70.050845][   T29] audit: type=1326 audit(1754113596.740:7227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5037 comm="syz.3.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe548dc5b27 code=0x7ffc0000
[   70.118543][   T29] audit: type=1326 audit(1754113596.740:7228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5037 comm="syz.3.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe548d6ad69 code=0x7ffc0000
[   70.141933][   T29] audit: type=1326 audit(1754113596.740:7229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5037 comm="syz.3.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe548dceb69 code=0x7ffc0000
[   70.165386][   T29] audit: type=1326 audit(1754113596.740:7230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5037 comm="syz.3.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe548dc5b27 code=0x7ffc0000
[   70.188679][   T29] audit: type=1326 audit(1754113596.740:7231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5037 comm="syz.3.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe548d6ad69 code=0x7ffc0000
[   70.212042][   T29] audit: type=1326 audit(1754113596.740:7232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5037 comm="syz.3.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe548dceb69 code=0x7ffc0000
[   70.235389][   T29] audit: type=1326 audit(1754113596.740:7233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5037 comm="syz.3.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe548dc5b27 code=0x7ffc0000
[   70.258685][   T29] audit: type=1326 audit(1754113596.740:7234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5037 comm="syz.3.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe548d6ad69 code=0x7ffc0000
[   70.281992][   T29] audit: type=1326 audit(1754113596.740:7235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5037 comm="syz.3.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe548dceb69 code=0x7ffc0000
[   70.305432][   T29] audit: type=1326 audit(1754113596.740:7236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5037 comm="syz.3.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe548dc5b27 code=0x7ffc0000
[   70.341087][ T5069] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.362997][ T5080] loop1: detected capacity change from 0 to 2048
[   70.383790][ T5080] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   70.384837][ T5086] netlink: 'syz.4.510': attribute type 1 has an invalid length.
[   70.410473][ T5069] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.432156][ T5086] loop4: detected capacity change from 0 to 128
[   70.447274][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.447955][ T5086] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   70.469291][ T5086] ext4 filesystem being mounted at /115/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   70.539876][ T5091] netlink: 8 bytes leftover after parsing attributes in process `syz.3.512'.
[   70.743751][ T5100] loop0: detected capacity change from 0 to 2048
[   70.750544][ T5100] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[   70.777876][ T5100] netlink: 36 bytes leftover after parsing attributes in process `syz.0.514'.
[   71.025543][ T5123] loop0: detected capacity change from 0 to 2048
[   71.051422][ T5123] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   71.112134][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.230124][ T3300] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   71.386869][ T5134] loop4: detected capacity change from 0 to 2048
[   71.394473][ T5136] loop1: detected capacity change from 0 to 512
[   71.404378][ T5134] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[   71.418306][ T5136] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843e028, mo2=0002]
[   71.461185][ T5136] System zones: 1-12
[   71.477555][ T5136] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.526: invalid indirect mapped block 8 (level 2)
[   71.513168][ T5134] netlink: 8 bytes leftover after parsing attributes in process `syz.4.525'.
[   71.522006][ T5134] netlink: 12 bytes leftover after parsing attributes in process `syz.4.525'.
[   71.553724][ T5136] EXT4-fs (loop1): Remounting filesystem read-only
[   71.568330][ T5134] bond2: entered promiscuous mode
[   71.573484][ T5134] bond2: entered allmulticast mode
[   71.580639][ T5136] EXT4-fs (loop1): 1 truncate cleaned up
[   71.586812][ T5136] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   71.601212][ T5134] 8021q: adding VLAN 0 to HW filter on device bond2
[   71.669176][  T287] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.688636][ T5147] sctp: [Deprecated]: syz.1.526 (pid 5147) Use of struct sctp_assoc_value in delayed_ack socket option.
[   71.688636][ T5147] Use struct sctp_sack_info instead
[   71.721445][ T5149] loop3: detected capacity change from 0 to 128
[   71.723066][  T287] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.765708][  T287] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.792198][  T287] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.816896][ T5159] 9pnet_fd: Insufficient options for proto=fd
[   71.945909][ T5169] FAULT_INJECTION: forcing a failure.
[   71.945909][ T5169] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   71.959282][ T5169] CPU: 0 UID: 0 PID: 5169 Comm: syz.2.535 Not tainted 6.16.0-syzkaller-10910-g0905809b38bd #0 PREEMPT(voluntary) 
[   71.959342][ T5169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   71.959354][ T5169] Call Trace:
[   71.959359][ T5169]  <TASK>
[   71.959365][ T5169]  __dump_stack+0x1d/0x30
[   71.959407][ T5169]  dump_stack_lvl+0xe8/0x140
[   71.959491][ T5169]  dump_stack+0x15/0x1b
[   71.959511][ T5169]  should_fail_ex+0x265/0x280
[   71.959581][ T5169]  should_fail+0xb/0x20
[   71.959612][ T5169]  should_fail_usercopy+0x1a/0x20
[   71.959635][ T5169]  _copy_from_user+0x1c/0xb0
[   71.959702][ T5169]  ___sys_sendmsg+0xc1/0x1d0
[   71.959748][ T5169]  __x64_sys_sendmsg+0xd4/0x160
[   71.959848][ T5169]  x64_sys_call+0x191e/0x2ff0
[   71.959875][ T5169]  do_syscall_64+0xd2/0x200
[   71.959906][ T5169]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   71.960039][ T5169]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   71.960066][ T5169]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   71.960147][ T5169] RIP: 0033:0x7fb28059eb69
[   71.960161][ T5169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   71.960177][ T5169] RSP: 002b:00007fb27ec07038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   71.960194][ T5169] RAX: ffffffffffffffda RBX: 00007fb2807c5fa0 RCX: 00007fb28059eb69
[   71.960273][ T5169] RDX: 0000000000000000 RSI: 0000200000001240 RDI: 0000000000000003
[   71.960284][ T5169] RBP: 00007fb27ec07090 R08: 0000000000000000 R09: 0000000000000000
[   71.960295][ T5169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   71.960306][ T5169] R13: 0000000000000000 R14: 00007fb2807c5fa0 R15: 00007ffc28607f08
[   71.960323][ T5169]  </TASK>
[   72.240862][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.392744][ T5179] vhci_hcd: invalid port number 224
[   72.462320][ T5184] loop4: detected capacity change from 0 to 512
[   72.471518][ T5184] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   72.487797][ T5183] loop1: detected capacity change from 0 to 2048
[   72.495952][ T5183] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[   72.521157][ T5183] netlink: 8 bytes leftover after parsing attributes in process `syz.1.540'.
[   72.530096][ T5183] netlink: 12 bytes leftover after parsing attributes in process `syz.1.540'.
[   72.607132][ T5183] bond3: entered promiscuous mode
[   72.612300][ T5183] bond3: entered allmulticast mode
[   72.643751][ T5183] 8021q: adding VLAN 0 to HW filter on device bond3
[   72.749199][ T5195] syzkaller1: entered promiscuous mode
[   72.754717][ T5195] syzkaller1: entered allmulticast mode
[   72.772232][ T5200] 9pnet_fd: Insufficient options for proto=fd
[   72.824325][ T5195] loop0: detected capacity change from 0 to 164
[   72.905842][ T5206] loop1: detected capacity change from 0 to 2048
[   72.955302][ T5211] netlink: 'syz.3.548': attribute type 10 has an invalid length.
[   73.107147][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.205699][ T5218] sch_fq: defrate 4294967295 ignored.
[   73.213950][ T5218] netlink: 4 bytes leftover after parsing attributes in process `syz.4.552'.
[   73.232120][ T5218] bridge_slave_1: left allmulticast mode
[   73.237898][ T5218] bridge_slave_1: left promiscuous mode
[   73.243675][ T5218] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.265565][ T5218] bridge_slave_0: left allmulticast mode
[   73.271400][ T5218] bridge_slave_0: left promiscuous mode
[   73.277079][ T5218] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.336027][ T5223] loop1: detected capacity change from 0 to 2048
[   73.346252][ T5223] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[   73.398556][ T5223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.554'.
[   73.410129][ T5230] 9pnet_fd: Insufficient options for proto=fd
[   73.417050][ T5223] bond4: entered promiscuous mode
[   73.422144][ T5223] bond4: entered allmulticast mode
[   73.434500][ T5223] 8021q: adding VLAN 0 to HW filter on device bond4
[   73.541685][ T5239] veth1_to_bond: entered allmulticast mode
[   73.553098][ T5239] tipc: Started in network mode
[   73.558090][ T5239] tipc: Node identity 8ef53d8856fe, cluster identity 4711
[   73.565308][ T5239] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   73.572647][ T5239] syzkaller0: entered promiscuous mode
[   73.578145][ T5239] syzkaller0: entered allmulticast mode
[   73.590089][ T5239] tipc: Resetting bearer <eth:syzkaller0>
[   73.610678][ T5239] bond0: (slave bond_slave_1): Releasing backup interface
[   73.631439][ T5239] veth1_to_bond (unregistering): left allmulticast mode
[   73.682861][ T5238] tipc: Resetting bearer <eth:syzkaller0>
[   73.713944][ T5238] tipc: Disabling bearer <eth:syzkaller0>
[   73.855338][ T5257] loop4: detected capacity change from 0 to 128
[   73.907467][ T5263] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.917451][ T5261] loop3: detected capacity change from 0 to 2048
[   73.926747][ T5261] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[   73.950095][ T5263] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.975980][ T5261] bond3: entered promiscuous mode
[   73.981092][ T5261] bond3: entered allmulticast mode
[   73.990310][ T5261] 8021q: adding VLAN 0 to HW filter on device bond3
[   74.028510][ T5263] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.240301][ T5263] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.293507][ T5271] loop3: detected capacity change from 0 to 8192
[   74.408036][ T5276] loop0: detected capacity change from 0 to 2048
[   74.452679][ T5276] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   74.600280][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.750164][ T5298] netlink: 'syz.0.575': attribute type 10 has an invalid length.
[   74.869322][ T5298] team0: Port device dummy0 added
[   75.062920][   T29] kauditd_printk_skb: 710 callbacks suppressed
[   75.062936][   T29] audit: type=1326 audit(1754113601.750:7947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5318 comm="syz.4.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f06731f5b27 code=0x7ffc0000
[   75.093292][   T29] audit: type=1326 audit(1754113601.780:7948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5318 comm="syz.4.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f067319ad69 code=0x7ffc0000
[   75.116595][   T29] audit: type=1326 audit(1754113601.780:7949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5318 comm="syz.4.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f06731f5b27 code=0x7ffc0000
[   75.139854][   T29] audit: type=1326 audit(1754113601.780:7950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5318 comm="syz.4.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f067319ad69 code=0x7ffc0000
[   75.163120][   T29] audit: type=1326 audit(1754113601.780:7951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5318 comm="syz.4.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f06731feb69 code=0x7ffc0000
[   75.186504][   T29] audit: type=1326 audit(1754113601.850:7952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5318 comm="syz.4.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f06731f5b27 code=0x7ffc0000
[   75.209918][   T29] audit: type=1326 audit(1754113601.850:7953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5318 comm="syz.4.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f067319ad69 code=0x7ffc0000
[   75.233221][   T29] audit: type=1326 audit(1754113601.850:7954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5318 comm="syz.4.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f06731feb69 code=0x7ffc0000
[   75.256604][   T29] audit: type=1326 audit(1754113601.850:7955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5318 comm="syz.4.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f06731f5b27 code=0x7ffc0000
[   75.279966][   T29] audit: type=1326 audit(1754113601.850:7956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5318 comm="syz.4.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f067319ad69 code=0x7ffc0000
[   75.358569][  T287] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.366833][  T287] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.388550][  T287] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.396776][  T287] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.634444][ T5338] loop0: detected capacity change from 0 to 8192
[   75.980043][ T5353] loop3: detected capacity change from 0 to 512
[   75.992625][ T5353] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   76.294409][ T5359] loop2: detected capacity change from 0 to 128
[   76.301353][ T5359] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   76.314685][ T5359] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   76.358263][   T51] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   76.389283][ T5361] loop2: detected capacity change from 0 to 2048
[   76.395944][ T5361] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[   76.417777][ T5361] __nla_validate_parse: 3 callbacks suppressed
[   76.417790][ T5361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.592'.
[   76.438413][ T5361] bond2: entered promiscuous mode
[   76.443552][ T5361] bond2: entered allmulticast mode
[   76.449098][ T5361] 8021q: adding VLAN 0 to HW filter on device bond2
[   76.548104][ T5370] netlink: 48 bytes leftover after parsing attributes in process `syz.0.595'.
[   76.744160][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.774846][ T5384] loop1: detected capacity change from 0 to 128
[   76.858746][ T5386] loop0: detected capacity change from 0 to 2048
[   76.868881][ T5386] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[   76.905680][ T5386] netlink: 8 bytes leftover after parsing attributes in process `syz.0.603'.
[   76.937442][ T5386] bond2: entered promiscuous mode
[   76.942574][ T5386] bond2: entered allmulticast mode
[   76.966700][ T5384] bio_check_eod: 23 callbacks suppressed
[   76.966718][ T5384] syz.1.602: attempt to access beyond end of device
[   76.966718][ T5384] loop1: rw=2049, sector=129, nr_sectors = 1 limit=128
[   76.985854][ T5384] buffer_io_error: 21 callbacks suppressed
[   76.985872][ T5384] Buffer I/O error on dev loop1, logical block 129, lost async page write
[   77.007215][ T5384] syz.1.602: attempt to access beyond end of device
[   77.007215][ T5384] loop1: rw=2049, sector=130, nr_sectors = 1 limit=128
[   77.007741][ T5386] 8021q: adding VLAN 0 to HW filter on device bond2
[   77.020715][ T5384] Buffer I/O error on dev loop1, logical block 130, lost async page write
[   77.037304][ T5384] syz.1.602: attempt to access beyond end of device
[   77.037304][ T5384] loop1: rw=2049, sector=139, nr_sectors = 1 limit=128
[   77.050824][ T5384] Buffer I/O error on dev loop1, logical block 139, lost async page write
[   77.101547][ T5395] netlink: 8 bytes leftover after parsing attributes in process `syz.1.602'.
[   77.158631][ T5384] syz.1.602: attempt to access beyond end of device
[   77.158631][ T5384] loop1: rw=2049, sector=140, nr_sectors = 1 limit=128
[   77.171988][ T5384] Buffer I/O error on dev loop1, logical block 140, lost async page write
[   77.199767][ T5384] syz.1.602: attempt to access beyond end of device
[   77.199767][ T5384] loop1: rw=2049, sector=141, nr_sectors = 1 limit=128
[   77.213178][ T5384] Buffer I/O error on dev loop1, logical block 141, lost async page write
[   77.239509][ T5384] syz.1.602: attempt to access beyond end of device
[   77.239509][ T5384] loop1: rw=2049, sector=142, nr_sectors = 1 limit=128
[   77.252887][ T5384] Buffer I/O error on dev loop1, logical block 142, lost async page write
[   77.273575][ T5384] syz.1.602: attempt to access beyond end of device
[   77.273575][ T5384] loop1: rw=2049, sector=143, nr_sectors = 1 limit=128
[   77.286942][ T5384] Buffer I/O error on dev loop1, logical block 143, lost async page write
[   77.309507][ T5384] syz.1.602: attempt to access beyond end of device
[   77.309507][ T5384] loop1: rw=2049, sector=144, nr_sectors = 1 limit=128
[   77.322838][ T5384] Buffer I/O error on dev loop1, logical block 144, lost async page write
[   77.360912][ T5384] syz.1.602: attempt to access beyond end of device
[   77.360912][ T5384] loop1: rw=2049, sector=147, nr_sectors = 1 limit=128
[   77.374307][ T5384] Buffer I/O error on dev loop1, logical block 147, lost async page write
[   77.387440][ T5404] netlink: 'syz.2.604': attribute type 1 has an invalid length.
[   77.421378][ T5404] 8021q: adding VLAN 0 to HW filter on device bond3
[   77.423849][ T5384] syz.1.602: attempt to access beyond end of device
[   77.423849][ T5384] loop1: rw=2049, sector=148, nr_sectors = 1 limit=128
[   77.441371][ T5384] Buffer I/O error on dev loop1, logical block 148, lost async page write
[   77.499930][ T5404] bond3: (slave veth5): Enslaving as an active interface with a down link
[   77.548533][ T5410] loop2: detected capacity change from 0 to 128
[   77.565664][ T5410] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   77.811828][ T5410] ext4 filesystem being mounted at /115/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   77.858445][ T5419] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3)
[   77.865014][ T5419] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   77.872596][ T5419] vhci_hcd vhci_hcd.0: Device attached
[   77.885914][ T5422] vhci_hcd: cannot find the pending unlink 6
[   78.137045][ T5422] vhci_hcd: connection closed
[   78.137272][   T12] vhci_hcd: stop threads
[   78.146301][   T12] vhci_hcd: release socket
[   78.150756][   T12] vhci_hcd: disconnect device
[   78.158561][   T10] usb 7-1: new low-speed USB device number 2 using vhci_hcd
[   78.165980][   T10] usb 7-1: enqueue for inactive port 0
[   78.179070][   T10] usb 7-1: enqueue for inactive port 0
[   78.184679][   T10] usb 7-1: enqueue for inactive port 0
[   78.196135][ T5430] loop4: detected capacity change from 0 to 128
[   78.250430][ T3306] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   78.358547][   T10] vhci_hcd: vhci_device speed not set
[   78.371627][ T5424] Set syz1 is full, maxelem 65536 reached
[   78.383910][ T5436] loop4: detected capacity change from 0 to 2048
[   78.399294][ T5436] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[   78.428141][ T5440] loop1: detected capacity change from 0 to 512
[   78.431553][ T5436] netlink: 8 bytes leftover after parsing attributes in process `syz.4.615'.
[   78.471402][ T5436] bond3: entered promiscuous mode
[   78.476555][ T5436] bond3: entered allmulticast mode
[   78.483732][ T5443] loop2: detected capacity change from 0 to 128
[   78.492098][ T5440] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   78.528121][ T5439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.617'.
[   78.545283][ T5436] 8021q: adding VLAN 0 to HW filter on device bond3
[   78.898018][ T5451] loop2: detected capacity change from 0 to 8192
[   79.015542][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.080738][ T5459] vhci_hcd: invalid port number 224
[   79.209608][ T5456] netlink: 48 bytes leftover after parsing attributes in process `syz.3.622'.
[   79.300749][ T5473] openvswitch: netlink: Message has 6 unknown bytes.
[   79.373434][ T5477] loop3: detected capacity change from 0 to 128
[   79.434113][ T5477] netlink: 8 bytes leftover after parsing attributes in process `syz.3.629'.
[   79.496235][ T5480] loop3: detected capacity change from 0 to 2048
[   79.503747][ T5480] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[   79.535137][ T5480] bond4: entered promiscuous mode
[   79.540287][ T5480] bond4: entered allmulticast mode
[   79.553330][ T5480] 8021q: adding VLAN 0 to HW filter on device bond4
[   79.635770][ T5486] loop3: detected capacity change from 0 to 128
[   79.740703][ T5486] netlink: 8 bytes leftover after parsing attributes in process `syz.3.632'.
[   80.025945][ T5493] loop3: detected capacity change from 0 to 512
[   80.034048][ T5492] loop2: detected capacity change from 0 to 2048
[   80.054142][ T5493] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   80.079418][ T5495] loop4: detected capacity change from 0 to 128
[   80.117090][ T5492] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   80.267987][ T5505] loop4: detected capacity change from 0 to 2048
[   80.277380][ T5507] loop0: detected capacity change from 0 to 128
[   80.285380][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.335997][ T5505] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   80.464868][ T5512] loop1: detected capacity change from 0 to 2048
[   80.476741][ T5514] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=20 sclass=netlink_audit_socket pid=5514 comm=syz.2.640
[   80.489524][ T5512] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[   80.518887][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.526516][ T5514] loop2: detected capacity change from 0 to 4096
[   80.592677][ T5512] bond5: entered promiscuous mode
[   80.597756][ T5512] bond5: entered allmulticast mode
[   80.605537][ T5514] loop2: detected capacity change from 0 to 512
[   80.616956][ T5512] 8021q: adding VLAN 0 to HW filter on device bond5
[   80.625741][ T5514] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[   80.658770][ T5514] EXT4-fs (loop2): orphan cleanup on readonly fs
[   80.666603][ T5521] loop4: detected capacity change from 0 to 128
[   80.675091][ T5514] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:517: comm syz.2.640: Block bitmap for bg 0 marked uninitialized
[   80.727539][ T5514] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem
[   80.751037][ T5521] netlink: 8 bytes leftover after parsing attributes in process `syz.4.643'.
[   80.775658][ T5514] EXT4-fs (loop2): 1 orphan inode deleted
[   80.782086][ T5514] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[   80.873073][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.885048][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.952538][ T5532] loop2: detected capacity change from 0 to 128
[   81.070759][   T29] kauditd_printk_skb: 572 callbacks suppressed
[   81.070777][   T29] audit: type=1400 audit(1754113607.760:8529): avc:  denied  { prog_load } for  pid=5539 comm="syz.2.649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   81.108428][   T29] audit: type=1400 audit(1754113607.760:8530): avc:  denied  { bpf } for  pid=5539 comm="syz.2.649" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   81.108462][   T29] audit: type=1400 audit(1754113607.760:8531): avc:  denied  { perfmon } for  pid=5539 comm="syz.2.649" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   81.108565][   T29] audit: type=1400 audit(1754113607.790:8532): avc:  denied  { map_create } for  pid=5539 comm="syz.2.649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   81.108587][   T29] audit: type=1400 audit(1754113607.790:8533): avc:  denied  { map_read map_write } for  pid=5539 comm="syz.2.649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   81.108611][   T29] audit: type=1400 audit(1754113607.790:8534): avc:  denied  { unmount } for  pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   81.117753][   T29] audit: type=1400 audit(1754113607.800:8535): avc:  denied  { create } for  pid=5535 comm="syz.4.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   81.118476][   T29] audit: type=1400 audit(1754113607.800:8536): avc:  denied  { setopt } for  pid=5535 comm="syz.4.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   81.141980][   T29] audit: type=1400 audit(1754113607.810:8537): avc:  denied  { read write } for  pid=3299 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   81.142019][   T29] audit: type=1400 audit(1754113607.810:8538): avc:  denied  { open } for  pid=3299 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   81.286879][ T5548] loop0: detected capacity change from 0 to 2048
[   81.287641][ T5548] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[   81.340214][ T5548] bond3: entered promiscuous mode
[   81.340231][ T5548] bond3: entered allmulticast mode
[   81.340402][ T5548] 8021q: adding VLAN 0 to HW filter on device bond3
[   81.371082][ T5553] netlink: 'syz.3.652': attribute type 10 has an invalid length.
[   81.415565][ T5555] netlink: 'syz.0.655': attribute type 1 has an invalid length.
[   81.462668][ T5555] 8021q: adding VLAN 0 to HW filter on device bond4
[   81.551042][ T5557] loop0: detected capacity change from 0 to 128
[   81.555601][ T5555] bond4: (slave veth7): Enslaving as an active interface with a down link
[   81.606557][ T5557] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   81.614015][ T5557] ext4 filesystem being mounted at /137/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   82.017465][ T5569] loop1: detected capacity change from 0 to 512
[   82.104306][ T5569] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   82.266892][ T3299] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   82.360854][ T5589] loop3: detected capacity change from 0 to 8192
[   82.629173][ T5605] netlink: 'syz.3.670': attribute type 10 has an invalid length.
[   82.648298][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.778456][ T5619] netlink: 'syz.1.676': attribute type 1 has an invalid length.
[   82.796080][ T5619] 8021q: adding VLAN 0 to HW filter on device bond6
[   82.830240][ T5619] bond6: (slave veth9): Enslaving as an active interface with a down link
[   82.843047][ T5619] loop1: detected capacity change from 0 to 128
[   82.863137][ T5619] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   82.876860][ T5619] ext4 filesystem being mounted at /135/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   82.957566][ T5625] loop4: detected capacity change from 0 to 8192
[   83.001850][ T5628] loop4: detected capacity change from 0 to 2048
[   83.025768][ T5628] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   83.124244][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.624202][ T3302] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   83.831780][ T5681] loop1: detected capacity change from 0 to 128
[   83.863800][ T5681] bio_check_eod: 145 callbacks suppressed
[   83.863921][ T5681] syz.1.690: attempt to access beyond end of device
[   83.863921][ T5681] loop1: rw=2049, sector=129, nr_sectors = 1 limit=128
[   83.863951][ T5681] buffer_io_error: 145 callbacks suppressed
[   83.863964][ T5681] Buffer I/O error on dev loop1, logical block 129, lost async page write
[   83.864016][ T5681] syz.1.690: attempt to access beyond end of device
[   83.864016][ T5681] loop1: rw=2049, sector=130, nr_sectors = 1 limit=128
[   83.864163][ T5681] Buffer I/O error on dev loop1, logical block 130, lost async page write
[   83.864194][ T5681] syz.1.690: attempt to access beyond end of device
[   83.864194][ T5681] loop1: rw=2049, sector=139, nr_sectors = 1 limit=128
[   83.933008][ T5681] Buffer I/O error on dev loop1, logical block 139, lost async page write
[   83.941645][ T5681] syz.1.690: attempt to access beyond end of device
[   83.941645][ T5681] loop1: rw=2049, sector=140, nr_sectors = 1 limit=128
[   83.941671][ T5681] Buffer I/O error on dev loop1, logical block 140, lost async page write
[   83.941767][ T5681] syz.1.690: attempt to access beyond end of device
[   83.941767][ T5681] loop1: rw=2049, sector=141, nr_sectors = 1 limit=128
[   83.941786][ T5681] Buffer I/O error on dev loop1, logical block 141, lost async page write
[   83.941806][ T5681] syz.1.690: attempt to access beyond end of device
[   83.941806][ T5681] loop1: rw=2049, sector=142, nr_sectors = 1 limit=128
[   83.941846][ T5681] Buffer I/O error on dev loop1, logical block 142, lost async page write
[   83.941866][ T5681] syz.1.690: attempt to access beyond end of device
[   83.941866][ T5681] loop1: rw=2049, sector=143, nr_sectors = 1 limit=128
[   83.941897][ T5681] Buffer I/O error on dev loop1, logical block 143, lost async page write
[   83.941916][ T5681] syz.1.690: attempt to access beyond end of device
[   83.941916][ T5681] loop1: rw=2049, sector=144, nr_sectors = 1 limit=128
[   83.941934][ T5681] Buffer I/O error on dev loop1, logical block 144, lost async page write
[   83.941949][ T5681] syz.1.690: attempt to access beyond end of device
[   83.941949][ T5681] loop1: rw=2049, sector=147, nr_sectors = 1 limit=128
[   83.941966][ T5681] Buffer I/O error on dev loop1, logical block 147, lost async page write
[   83.942045][ T5681] syz.1.690: attempt to access beyond end of device
[   83.942045][ T5681] loop1: rw=2049, sector=148, nr_sectors = 1 limit=128
[   83.942069][ T5681] Buffer I/O error on dev loop1, logical block 148, lost async page write
[   83.967593][ T5681] netlink: 8 bytes leftover after parsing attributes in process `syz.1.690'.
[   84.131742][ T5684] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.191007][ T5684] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.216710][ T5689] 9pnet_fd: Insufficient options for proto=fd
[   84.250121][ T5684] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.290547][ T5684] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.338975][ T5700] loop3: detected capacity change from 0 to 128
[   84.352367][ T2991] ==================================================================
[   84.355565][ T5698] netlink: 'syz.1.697': attribute type 10 has an invalid length.
[   84.360471][ T2991] BUG: KCSAN: data-race in set_nlink / set_nlink
[   84.360499][ T2991] 
[   84.360505][ T2991] read to 0xffff888106da02b0 of 4 bytes by task 4187 on cpu 0:
[   84.360523][ T2991]  set_nlink+0x29/0xb0
[   84.360546][ T2991]  kernfs_iop_permission+0x1e2/0x220
[   84.360572][ T2991]  inode_permission+0x1c7/0x310
[   84.360603][ T2991]  link_path_walk+0x162/0x900
[   84.360631][ T2991]  path_openat+0x1de/0x2170
[   84.360650][ T2991]  do_filp_open+0x109/0x230
[   84.360669][ T2991]  do_sys_openat2+0xa6/0x110
[   84.360702][ T2991]  __x64_sys_openat+0xf2/0x120
[   84.360732][ T2991]  x64_sys_call+0x2e9c/0x2ff0
[   84.360757][ T2991]  do_syscall_64+0xd2/0x200
[   84.360785][ T2991]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   84.360809][ T2991] 
[   84.360815][ T2991] write to 0xffff888106da02b0 of 4 bytes by task 2991 on cpu 1:
[   84.360834][ T2991]  set_nlink+0x99/0xb0
[   84.360856][ T2991]  kernfs_iop_permission+0x1e2/0x220
[   84.360882][ T2991]  inode_permission+0x1c7/0x310
[   84.360907][ T2991]  link_path_walk+0x162/0x900
[   84.465742][ T2991]  path_lookupat+0x63/0x2a0
[   84.470267][ T2991]  filename_lookup+0x147/0x340
[   84.475041][ T2991]  vfs_statx+0x9d/0x390
[   84.479216][ T2991]  vfs_fstatat+0x115/0x170
[   84.483636][ T2991]  __se_sys_newfstatat+0x55/0x260
[   84.488699][ T2991]  __x64_sys_newfstatat+0x55/0x70
[   84.493731][ T2991]  x64_sys_call+0x135a/0x2ff0
[   84.498410][ T2991]  do_syscall_64+0xd2/0x200
[   84.503008][ T2991]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   84.508901][ T2991] 
[   84.511215][ T2991] value changed: 0x00000008 -> 0x00000009
[   84.516929][ T2991] 
[   84.519246][ T2991] Reported by Kernel Concurrency Sanitizer on:
[   84.525399][ T2991] CPU: 1 UID: 0 PID: 2991 Comm: udevd Not tainted 6.16.0-syzkaller-10910-g0905809b38bd #0 PREEMPT(voluntary) 
[   84.537025][ T2991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   84.547076][ T2991] ==================================================================
[   84.597943][  T418] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.613139][ T5700] netlink: 8 bytes leftover after parsing attributes in process `syz.3.699'.
[   84.624250][  T418] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.640229][  T418] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.659647][  T313] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.669663][ T5702] loop0: detected capacity change from 0 to 512
[   84.677608][ T5702] EXT4-fs: Ignoring removed oldalloc option
[   84.683751][ T5702] EXT4-fs: inline encryption not supported
[   84.689621][ T5702] EXT4-fs: Ignoring removed mblk_io_submit option
[   84.711048][ T5702] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[   84.733568][ T5702] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.696: bg 0: block 64: padding at end of block bitmap is not set
[   84.748112][ T5702] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.696: Failed to acquire dquot type 0
[   84.760362][ T5702] EXT4-fs (loop0): 1 truncate cleaned up
[   84.766290][ T5702] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   84.828421][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.