last executing test programs:

46.000772479s ago: executing program 4 (id=164):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), r2)
getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000370400000000ffffffff00000000", @ANYRES32=r3, @ANYBLOB="0b120500ab0a0000240012800b00010069703667726500001400028008000100", @ANYRES32=r3], 0x44}, 0x1, 0x0, 0x0, 0x4000051}, 0x10)
sendmmsg$inet(r1, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x20}}], 0x1, 0x40000)

45.864897291s ago: executing program 4 (id=167):
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x3, 0xc, &(0x7f0000000e00)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011000000180100002020692500000000002020207b1af8ff00000000bfa110000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002140)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x10, 0x6}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r5}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0)

45.779821493s ago: executing program 4 (id=172):
syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x1018000, &(0x7f00000003c0)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES16, @ANYRESOCT, @ANYRES32, @ANYRESDEC], 0x1, 0x2f2, &(0x7f0000000b00)="$eJzs3M9PE1sUwPHTH5S2BMri5b28l7xwoxvdTKC6VhoDibGJBKnxR2IywFSbji3pNDU1RnTl1vhHuCAs2ZEo/wAbd7px446NiQtZGMd0OkNpO4CU0iJ8PwmZw9x7eu9tB3LuhGHrzuvH+aylZfWyBKNKAiIi2yKjEhRPwD0GnTgiu72Qi0PfPv5/6+69G6l0empWqenU3KWkUmpk7N2TZzG32/qgbI4+2Pqa/LL59+a/Wz/nHuUslbNUoVhWupovfi7r86ahFnNWXlNqxjR0y1C5gmWU6u3FenvWLC4tVZVeWByOL5UMy1J6oaryRlWVi6pcqqrQQz1XUJqmqeG44CCZldlZPdVh8kKXJ4NjUiql9JCIxNpaMit9mRAAAOir1vo/KKqb9f/quY3y0O21Ebf+X4/41f+XP9Vfq6n+j4qIb/3vje9b/+uHq//bK6Kz5Uj1P06GsUjbqUAjrDWWUnrc/fl1vLy/Ou4E1P8AAAAAAAAAAAAAAAAAAAAAAPwJtm07Ydt2wjt6X4MiEhUR73uf1JCIXO3DlNFFR/j8cQo0HtwLj4iYryqZSqZ+dDtsiIgphoxLQn4414OrFntPHqmaUXlvLrv5y5VMyGlJZSXn5E9IYkBa8217+np6akLVNecPSHx3flIS8pd/frItf3C5konIhfO78jVJyIcFKYopi848GvnPJ5S6djPdMn7M6QcAAAAAwGmgqR2++3dN26u9nr+zv269PxBq7K/Hfff3Yfkv3N+1AwAAAABwVljVp3ndNI3SPkFMDu7TeRA+plf2Vvi7Wd7fMhzfSvcJvMGbmqLuya6/LYFDvC17BEHpJGusthp11FV4t4326iMzk737BJum8c+bt9+7N8SVtegBK+08CO1/AQz07BcQAAAAgJ5pFP3emcn+TggAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDOoF/8mrd9rBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE6KXwEAAP//ziYEEA==")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
fdatasync(r0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mlock2(&(0x7f0000004000/0x4000)=nil, 0x40ef, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0)

45.435893968s ago: executing program 4 (id=177):
syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000900)={[{@noblock_validity}]}, 0xfc, 0x560, &(0x7f0000000240)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x63d014, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r1, &(0x7f0000003a80)='\t', 0x1, 0x8000c61)
r2 = creat(&(0x7f0000000140)='./bus\x00', 0x192)
write$cgroup_type(r2, &(0x7f0000000200), 0x175d9003)
pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)

44.467915732s ago: executing program 2 (id=211):
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000000)
timer_create(0x0, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00')
pread64(r2, &(0x7f0000000100)=""/253, 0xfd, 0xadc)

44.370629984s ago: executing program 2 (id=214):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
r4 = socket(0x10, 0x803, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newtfilter={0x6c, 0x2c, 0xd29, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r6, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xa, 0x3, 0x6}, {0x9, 0xaece, 0x3, 0x5}}}, @TCF_EM_IPT={0xc, 0x2, 0x0, 0x0, {{0x0, 0x9, 0xffc0}}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x40)

44.274353085s ago: executing program 2 (id=219):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}}, 0x7, 0x12, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x9c)
r2 = syz_io_uring_setup(0x466c, &(0x7f0000000280)={0x0, 0x0, 0x10100}, &(0x7f0000001340)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RENAMEAT={0x23, 0x30, 0x0, r5, 0x0, 0x0, r5})
io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

44.214429426s ago: executing program 4 (id=220):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x50)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = io_uring_setup(0x1581, &(0x7f0000000780)={0x0, 0x2000001, 0x400, 0x0, 0x3bd})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x2710, @hyper}, 0x10)
r3 = socket$rxrpc(0x21, 0x2, 0xa)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
close_range(r1, r3, 0x0)

44.150062047s ago: executing program 2 (id=221):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
syz_open_dev$vcsa(0x0, 0x3, 0x103400)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000004000000ff0f000005", @ANYBLOB, @ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000780), 0x0, 0x0)
setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)

43.911130111s ago: executing program 2 (id=224):
r0 = getpid()
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10)
r3 = syz_pidfd_open(r0, 0x0)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r4, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00', 0x9})
close_range(r3, 0xffffffffffffffff, 0x0)

43.843629302s ago: executing program 2 (id=226):
r0 = creat(&(0x7f0000000340)='./file0\x00', 0x14)
close(r0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSBRKP(r0, 0x5425, 0x0)
ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x100, 0x0, 0x0, "7a58beca3900000000000000000000000200"})
r2 = getpid()
r3 = syz_pidfd_open(r2, 0x0)
mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}})
sendmsg$NFT_BATCH(r0, 0x0, 0x800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

43.751134473s ago: executing program 32 (id=226):
r0 = creat(&(0x7f0000000340)='./file0\x00', 0x14)
close(r0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSBRKP(r0, 0x5425, 0x0)
ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x100, 0x0, 0x0, "7a58beca3900000000000000000000000200"})
r2 = getpid()
r3 = syz_pidfd_open(r2, 0x0)
mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}})
sendmsg$NFT_BATCH(r0, 0x0, 0x800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

43.349550219s ago: executing program 4 (id=233):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
listen(r2, 0x0)
r3 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r3, &(0x7f0000002300)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x1, {{0x0, 0x200000}, 0x4}}, 0x10, 0x0}, 0x0)
sendmsg$tipc(r3, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0)
accept4(r2, 0x0, 0x0, 0x400000000000000)

43.30912233s ago: executing program 33 (id=233):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
listen(r2, 0x0)
r3 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r3, &(0x7f0000002300)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x1, {{0x0, 0x200000}, 0x4}}, 0x10, 0x0}, 0x0)
sendmsg$tipc(r3, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0)
accept4(r2, 0x0, 0x0, 0x400000000000000)

24.779016522s ago: executing program 5 (id=692):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2240, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe89, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r3}, 0x10)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)

24.712296923s ago: executing program 5 (id=694):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="6c00000000010104000061b9ae540000020000002c0001801400018008000100e000000108000200ac1414000c00028005000100000000000600034000667300240002801400018008000100e000000108000200e00000010c000280050001000000000008000740"], 0x6c}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x38, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0)

24.712025863s ago: executing program 5 (id=695):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000900)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20)
sendmsg$inet(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4040086)

24.710681803s ago: executing program 5 (id=696):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
syz_open_dev$vcsa(0x0, 0x3, 0x103400)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000004000000ff0f000005", @ANYBLOB, @ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000780), 0x0, 0x0)
setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)

24.690063103s ago: executing program 5 (id=697):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0, 0x0, 0x7}, 0x18)
pipe(0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x800040, &(0x7f0000000340), 0x1, 0x597, &(0x7f0000000b80)="$eJzs3U1sG2UaAOB3xvH2L9t0pV1pd9VDtYtUpKpO0h8onNorolKlHpC4lMhxoyhOHMUONFEO6b1C9IAA9VJucOAI4sABcUHiwpULiDNSRSOQmh7AyH9pm9jBKXWdxs8jjT3ffON5v2/G73hmNCMHMLCO1V7SiP9ExKUkYuShuqFoVh5rzLe+tpK/v7aST6JavfxzEklE3FtbybfmT5rvhyJiNSL+HRFfZSNOpFvjlpeWZyaKxcJCszxamZ0fLS8tn5yenZgqTBXmTr/40tlzZ86Onxrv3Pjszvp644ebb9/49pXbNz/+5Ohq/t2JJM7HcLPu4X48SY11ko3zm6af6UWwPkr63QAeS6aZ57VU+leMRKaZ9e1UR55q04Aeq+6LqO5Esrqj2YHdLNlZ/gN7Rus4oHb+2xoeOUDI9Pb4486FxglILe56c2jUDDWuTcT++rnJwV+SR85MauebR3rbNAbA6vWIGBsa2vr9T5rfv8c39iQaSE99eaGxobZu/3Rj/xNt9j/DrWunf1Fr/7e+Zf/3IH6mw/7vUpcxfnv9xw86xr8e8d+28ZON+Emb+GlEvNFl/FuvfX6uU131w4jj0T5+S7L99eHRq9PFwljjtW2ML44ffXm7/h/sEL9xzXZ//Wem3fqf77L/n3396f9Wt4n//P+33/7t1v+BiHiny/j/uPfRq53q7lxP7taOAna6/WvTbncZ/4Xzx77vUHWgy0UAAAAAAAAAAABtpPV72ZI0tzGeprlc4xnef8bBtFgqV05cLS3OTTbueTsS2bR1p9VIo5zUyuPN+3Fb5VObyqdb9xFnDtTLuXypONnnvgMAAAAAAAAAAAAAAAAAAMBucWjT8/+/ZurP/2/+u2pgr+r8l9/AXif/YXA9mv9JxL6+NQV4yvz+w8Cqyn8YXPIfBpf8h8El/2FwyX8YXPIfBpf8BwAAAAAAAAAAAAAAAAAAAAAAAACAnrh08WJtqN5fW8nXypNDS4szpTdPThbKM7nZxXwuX1qYz02VSlPFQi5fmv2z5RVLpfmxmFu8NloplCuj5aXlK7OlxbnKlenZianClUL2qfQKAAAAAAAAAAAAAAAAAAAAni3D9SFJcxGR1sfTNJeL+HtEHIlscnW6WBiLiMMR8V0mu69WHu93owEAAAAAAAAAAAAAAAAAAGCPKS8tz0wUi4WFARkZ2jLlm84zR8Tqk21GbYk7/lS2ua12yzp81kYObz9PJvrewt040ucdEwAAAAAAAAAAAAAAAAAADKAHD/12+4nfe9sgAAAAAAAAAAAAAAAAAAAAGEjpT0lE1IbjI88Nb679W7Keqb9HxFu3Lr93baJSWRivTb+7Mb3yfnP6qX60H+hWK09beQwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8UF5anpkoFgsLPRzpdx8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHscfAQAA//+aXtbd")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r1, &(0x7f0000000140)='Q', 0x1, 0x200980)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
sendfile(r2, r2, 0x0, 0xe0000000)
openat(0xffffffffffffff9c, 0x0, 0x101042, 0x45)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628)

24.598477256s ago: executing program 5 (id=698):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, 0xffffffffffffffff, 0x0)
eventfd2(0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x3c34}, 0x1100, 0x5dd8, 0x0, 0x3, 0x0, 0x3, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$tun(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="000086dd0203030009000a004000623d885d009c11fffc000000000000000000000000000000ff0200000000000000000000000000014e224e21009c90"], 0xd2)

24.598118506s ago: executing program 34 (id=698):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, 0xffffffffffffffff, 0x0)
eventfd2(0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x3c34}, 0x1100, 0x5dd8, 0x0, 0x3, 0x0, 0x3, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$tun(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="000086dd0203030009000a004000623d885d009c11fffc000000000000000000000000000000ff0200000000000000000000000000014e224e21009c90"], 0xd2)

20.573093037s ago: executing program 0 (id=792):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)

20.522940738s ago: executing program 0 (id=793):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r3, 0x0)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)

20.445040829s ago: executing program 0 (id=795):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000780), 0x1, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r1}, 0x18)
r2 = creat(&(0x7f0000000300)='./file0\x00', 0xe5)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
write$qrtrtun(r2, &(0x7f0000001880)="9d8d645e53b6183d874f9e93a18dd009a09560ff682bd07dc3d28385a8f3f9e18418950d4dfe49f13a19e24320444a7d6c121741ba3dc510dba4f980bbd9a315544fa0a1622d949faba79788908354e467989e84b928ecb96e0e4e781bfca4c928c956321dd51400000000000020011584a8bd051f13bad882bea021ffb5ce918a1f87f1d439ec93772d6ecaaf8891f7678f2037ccced78ea5c1aa805f1b9f5a2c3974c5124cac5e163d9b6f5b998c1c7263fa2331d1241523986dccbd4e1f32b2f521380a2ea4732132264de6d26cfbb2eb91e40177a780df98cbf94b96d900a2dfc5c877db675ebb1d7cbc398ca422ddbadc24ee6f3bf036f62cdb056502a63d070000930ea668649ad0003afe9a912179ce61631b3dab94642d2768f1f22299dea6c08073dd0c47b9eddb917fc0076b74406149024514d07417c6007e8cd4dc4e2295be71f412044b52b1ce32aac048cad9c413a8c19528dc1b432fe7f9fda7182a47243af427a76ede78aa5c6ef75ea1f48e2e9e9d203d4760a1ff6a0119b39a2458a050f9519d4bbd821684ef8303985e8f5b8d86346f428788fc374e7eaa0c2a2ef8478a13b4a56d0821201c37a0066fb9f5cc583005b9f71b67daa300311066bacbf43630a8388aff734a568a123a48ba1344a5500e5c6f8cef539617cd3970ffb873579a3b76bd529f1626d1f90543b2a0190df38bb1e8b6fc9bfc5c42693814665679e78ed8adce4d23b8725436101ae4113fee000cb92b32c6a74851a6c4af4625f28810ec16834a1589063af1bf0b29aa57e06dddc0fddf408fab63c536d5afd9ba5a71f9e534f99e5ea9c1eaaaad710ef30a37df0f87978894333850f4feac3740a3b010da7c250d060c8046cab40d0527234d4b4b28366bc7d5899948ddbfac66c848ef0f842eab95248e9d064c0ec4247483f0aa0cad7ca970365e474fe73cf79cf8c70fc7a015caa273ce41723453632cf5b809584d227f7e98e8ec41494518b0b8a8adbaf5ead6529451b116fab06529b653bffdd6d98f8322265305bdc0ff69f4a70dea414fcc63d149c564c834f24b8f7495cd9ccafa1e3f652cd3270935800ee0d5598afcaa41c150dac263408d77a61b5c77e2c3644dda1b8c333a36c30ce893140ce133827dde34d896d35cfe7d498bf6dda965a27cc77e2872fcedaf9dcb89614c758cf62ad769ac05a4fb9e27b421b82c17d15f7d2ffb6ed63c639cee97d9eea8f3934045e60b15eca5c13ebe002467c09815712165cee2af784f9e5db9f7227701ca9a3de588503c84c490f4986aa26e7b63d4c5a30157cdf82e433a1b64496392a1990b2a46b910d9a16429736308f71d8e78824a26f25f21829546b973c0905b20c2ef751eb0064eaf831874f0b58ef8779cafd02bcf075a212e79e07c73c49fc240d6845877fda649d1ab59ea06b907ec5031299a0e1fa2f8cbc241a8531ad241302b569d4581dcc944f27799f25593b97ea7681ba74d6cde9c8f58840ac4c4be3aa90e6273a64e549c47c7232f423406604c9c210eabe3d6a2343bd6c2ae72ab013ce2af32467bcfa8cbf0769f", 0x45b)
r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45b], 0x0, 0x0, 0x1, 0x1}}, 0x40)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={r4, 0x0, 0x0}, 0x10)

20.250299012s ago: executing program 0 (id=800):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
r1 = getpid()
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kmem_cache_free\x00', r4, 0x0, 0x9}, 0x18)

19.69784594s ago: executing program 0 (id=823):
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@errors_remount}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000940)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
open_by_handle_at(r0, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0)

19.504566263s ago: executing program 0 (id=824):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000080000207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000002000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000440), 0x10)
listen(r1, 0xf)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000200)="458d1fca4f1d0461442e12c4d90f415ec86aa74e137467ce700772d98322478e00f9", 0x22}], 0x1)
r3 = accept4$unix(r1, 0x0, 0x0, 0x0)
recvmsg(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/68, 0x22}], 0x1}, 0x4c2103a0)

3.992273849s ago: executing program 35 (id=824):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000080000207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000002000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000440), 0x10)
listen(r1, 0xf)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000200)="458d1fca4f1d0461442e12c4d90f415ec86aa74e137467ce700772d98322478e00f9", 0x22}], 0x1)
r3 = accept4$unix(r1, 0x0, 0x0, 0x0)
recvmsg(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/68, 0x22}], 0x1}, 0x4c2103a0)

3.762394353s ago: executing program 1 (id=1101):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x9c, 0xb, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0)
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100))
ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000200)=ANY=[@ANYRES32=r3, @ANYRES32=r3, @ANYRES16=r3])

2.170851367s ago: executing program 1 (id=1105):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)

2.168020487s ago: executing program 7 (id=1106):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r1, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}, 0xa1}, {{0x0, 0x0, 0x0}, 0x1ff}], 0x2, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)

2.165330367s ago: executing program 3 (id=1107):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000480)=@security={'security\x00', 0xe, 0x4, 0x308, 0xffffffff, 0x0, 0xf8, 0x0, 0xffffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x0, 0x1, 0x1], 0x2, 0x6}, {0x3, [0x3, 0x1, 0x0, 0x2, 0x4, 0x6], 0x2, 0x5}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0x0, 0xff, 0xffffff00], 0x4e23, 0x4e21, 0x4e23, 0x4e23, 0x3, 0x3ff, 0x6, 0x7716, 0x2c9}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @empty, 0x800, 0xf, [0x2, 0x16, 0x2c, 0x1b, 0x18, 0x22, 0x2, 0x33, 0x1a, 0xd, 0x38, 0x3f, 0x38, 0x35, 0x36, 0x3d], 0x0, 0x7, 0x10000}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x368)

1.896686782s ago: executing program 3 (id=1093):
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xe9a}, 0xffffffffffffffff, 0xafffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x408, 0xcd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r2}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r1}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))

1.890160702s ago: executing program 1 (id=1094):
r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x2000cd5, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x0, 0x307, &(0x7f0000000080)="$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")
bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
open_tree(r0, &(0x7f00000004c0)='./file0\x00', 0x1)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff6e, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r1], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r4, 0x0, 0x0, 0x44010, &(0x7f0000000040)={0x11, 0x1, r3, 0x1, 0x7}, 0x14)

1.31854873s ago: executing program 7 (id=1095):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000100)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@mblk_io_submit}, {@bh}, {@auto_da_alloc}, {@barrier}, {@quota}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$eJzs3M9rHFUcAPDv7CZt06YmlvqjadVoFYM/kiattQcvioIHBUEP9RiTtMRuG2ki2BI0itSjFLyLR8G/wJNeRD0JXvUuhSK5tIqHldmdSXY3u2k2blzNfj4wyXszb3nvuzNv9715mQTQs0bTH0nEYET8EhFD1Wx9gdHqr9uryzN/rC7PJFEuv/57Uil3a3V5Ji+av+5AnumLKHycxNEm9S5euXphulSau5zlJ5YuvjOxeOXq0/MXp8/PnZ+7NHXmzKmTk8+ennqmI3Gmcd0aeX/h2JGX37z+6szZ62/98FWSx98QR4eMbnbwsXK5w9V118GadNLXxYbQlmK1m0Z/pf8PRTHWT95QvPRRVxsH7KhyuVy+t/XhlTKwiyXR7RYA3ZF/0afz33zbfMDQ0eFH1918vjoBSuO+nW3VI31RyMr0N8xvO2k0Is6u/Pl5usXO3IcAAKjzTTr+earZ+K8QtfeF7srWUIYj4u6IOBQRpyPicETcE1Epe19E3N9m/Y2LJBvHP4Ub2wpsi9Lx33PZ2lb9+C8f/cVwMcsdrMTfn5ybL82dyN6Tsejfm+YnN6nj2xd//rTVsdrxX7ql9edjwawdN/r21r9mdnpp+p/EXOvmhxEjfc3iT9ZWApKIOBIRI9usY/6JL4+1Onbn+JurvCUdWGcqfxHxePX8r0RD/Llk8/XJiX1RmjsxkV8VG/3407XXWtW/3fg7JT3/+5te/2vxDye167WL7ddx7ddPWs5ptnv970neqNv33vTS0uXJiD3JK9VG1+6faig3tV4+jX/sePP+fyjW34mjEZFexA9ExIMR8VDW9ocj4pGIOL5J/N+/8OjbdTvGBtuIf2el8c+2df7XE3uicU/zRPHCd1/XVTocbcSfnv9TldRYtmcrn39badf2rmYAAAD4/ylExGAkhfG1dKEwPl79G/7Dsb9QWlhcevLcwruXZqvPCAxHfyG/0zVUcz90MpvW5/mphvzJ7L7xZ8WBSn58ZqE02+3goccdaNH/U78Vu906YMd5Xgt6l/4PvUv/h96l/0PvatL/Bzbu+qvhkUFgN2j2/f9BF9oB/Psa+r9lP+gh5v/Qu/R/6F36P/SkxYG480PyEhIbElH4TzRj5xP7tvhvLnZZotufTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ3xdwAAAP//FX7vJg==")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './bus', [], 0xa, "9351c565275b87dcd3be"}, 0x13)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10)
fdatasync(r0)

1.316101741s ago: executing program 3 (id=1113):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)
r0 = getpid()
r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10)
process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)

1.31549392s ago: executing program 1 (id=1098):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001500)={0x34, r3, 0x1, 0x4000, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0xa000000}]}, 0x34}}, 0x0)

1.246340761s ago: executing program 1 (id=1099):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8fe00000000bfa200000000000007020000f8ffffffb703000008000000b70400008f2000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000800)='kfree_skb\x00', r1}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r3}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28)

1.033164314s ago: executing program 7 (id=1100):
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xf, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, @void, @value}, 0xffffffffffffff8b)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="6c00000000010104000061b9ae540000020000002c0001801400018008000100e000000108000200ac1414000c00028005000100000000000600034000667300240002801400018008000100e000000108000200e00000010c0002800500010000000000080007"], 0x6c}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="38000000000101010000000000ff000002000000240002801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0)

913.694377ms ago: executing program 8 (id=1108):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
creat(&(0x7f0000000200)='./file2\x00', 0x20)
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x50)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18)
unlink(&(0x7f0000000180)='./file1\x00')

913.510067ms ago: executing program 1 (id=1110):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x20}, 0x1f00)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0xfffffffffffffd81, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000bc0)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2)

904.962636ms ago: executing program 6 (id=1111):
r0 = perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0)
perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, r0, 0x3)
r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0xd814, 0x8, 0x80000000, 0x16}, &(0x7f0000000000)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0xfffffffffffffffd, 0x0})
io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0)
mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil)

861.468368ms ago: executing program 7 (id=1112):
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10)
r2 = creat(&(0x7f00000000c0)='./file0\x00', 0xd4)
r3 = dup2(r2, r2)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8})
ioctl$BLKTRACESETUP(r3, 0x1276, 0x0)
syz_mount_image$ext4(&(0x7f0000000800)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000940)={[{@bsdgroups}, {@nodiscard}, {@norecovery}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@nodiscard}]}, 0x64, 0x50d, &(0x7f0000000200)="$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")

768.498409ms ago: executing program 8 (id=1114):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', <r1=>0x0})
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup(r2, &(0x7f0000000300)='syz1\x00', 0x1ff)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x24001, 0x0)
getsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4)
bind$can_raw(r0, &(0x7f0000000480)={0x1d, r1}, 0x10)
close(r0)

768.267459ms ago: executing program 3 (id=1115):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="05000000040000000800000008"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, 0x0}, 0x20)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10)
r4 = memfd_create(&(0x7f00000001c0)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9kL\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb8<X\xfa\xdd\x8a6\xa1\x82\xf7r\xd8z\x85\x8do\xa5\xed\xd4\xbc8\xfb\x16\x8e\x8b-W\xd4\xc9\xbc\x94CR[Du8U^\xf2tl8\xfe\xd0\x94\xfe\xf5\x1c+\x00U\te\xfa6\xca\xb9\xb4Q\xd9\xee\r6\x861h{\xc7z\'F\xc7\x91\x06x\xe1`\xf1:\xbd+\xd5\f\xb2\xce\xa4\x06\x90\x90\x9b\x1d\xcaa\xf7\x8f\x9e\x80\x93\xafT\xdfl\xec\xc6\x8e\x96', 0x5)
fsetxattr$security_selinux(r4, &(0x7f0000000480), &(0x7f00000004c0)='system_u:object_r:hwdata_t:s0\x00', 0x1a, 0x0)

652.99613ms ago: executing program 8 (id=1116):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x54}}, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r1, @ANYBLOB="0100000000000000240012000c000100627269646765000e14000200080007004a"], 0x44}}, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = socket(0x10, 0x2, 0x6)
sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0)
getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3)
bind$packet(r2, &(0x7f00000000c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14)
sendto$inet6(r2, &(0x7f0000000100)="0503460008003e00000002008100", 0x36, 0x0, 0x0, 0x0)

649.85442ms ago: executing program 3 (id=1127):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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")
r0 = open(&(0x7f0000000200)='./file1\x00', 0x102, 0x18)
r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
write$binfmt_script(r0, &(0x7f0000000240)={'#! ', './file1', [{0x20, '][(,.'}, {0x20, 'no\x04ecovery'}]}, 0x1c)

593.932551ms ago: executing program 6 (id=1118):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10)
mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
r3 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&')

559.350282ms ago: executing program 8 (id=1119):
setrlimit(0xf, &(0x7f00000003c0)={0x4001, 0xffffffffffffffff})
timer_create(0x3, 0x0, &(0x7f0000000300))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
r0 = socket(0x1e, 0x80004, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x7, 0x0, 0x1000004}, 0x10)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000)
r2 = dup3(r1, r0, 0x0)
recvmmsg(r2, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000600)=""/179, 0xb3}], 0x1}, 0x91d}], 0x1, 0x40000001, 0x0)

441.715143ms ago: executing program 7 (id=1120):
r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x2000cd5, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x0, 0x307, &(0x7f0000000080)="$eJzs3U1rE1sYwPEnaV6a9vami8vlclE4VBBFOjQBdy4s0oIYUNpGsIIwtVMNmSYlEwoRsV0Ibl276MKlCCK4cyPiths/gW+7brqzYHFkcibpNBnStNJX/79Fczrnec6cM2emnZ62k7VLT+eLc47xw42Jx3VdVzR3yS8sy/kPK59PT77/S3+u1PjoVCarVFREbj98OfSu2n/zzd9vk7I6eGdtPftt9dSUyM+p+xJVBUeVvDbVTLlcjXjJswWnaCh1w7ZMx1KFkmNVqsqs15sztqXm7PLCQk2ZpdmBvoWK5TjKLNVU0aqpallVKzVl3jMLJWUYhhroE4jIYLMUbauLdErMv9hwXVn3Jii57M19SPRyoxD3X5O/11kcJS3z3zG27eTo2c+e4SBsuLHm/Cd2mH+cPPr6//Ksm+sfJ8/krelro7nc2IRSvSLzTxbzi3n9qus/9UtBbLFkZeLC9Ka+P9Qk4n0cv5obG1F1g3J2fsnPX1rM628Oo3N+fkbS3n1KIF8a+Rmdr7bnx6UvmJ+VtPwTnp9t5Es0kJ+Qc2cC+Yak5eNdKYsts/X73K38RxmlrlzPtew/VY8DAAAAAAAAAOA4MlTT1vp9pPmr3pRhJOt/8dGsT3mbvTgd0FxfH5G0bIavz4+Eru/H5P/YIQ4cAAAAAIA/iFN7UDRt26rsviBdxPQ8T3XYRVxEvILI4yGvMx0b/NfvcUuV10ZIVkJE2tvp6abPfiF1Ue/v1YTfMdnrgdrHQlREglv0P2t4g7dfN2JSYcfHie7qBBhOtB9507Z7D3TIwZGK67qhwdK7txM7GTrAbgqRzcaW/0Jj3MjO7bimHddbGhfmTnu/HH45dFnwZl/PYOuBGv6q27U7fNH43lziAwAAAHCMBH5wAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAh2RPT2JrPLd/e5X4bxHf/ki21veJ57n/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI6gXwEAAP//kaGzIA==")
bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
open_tree(r0, &(0x7f00000004c0)='./file0\x00', 0x1)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff6e, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r1], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r4, 0x0, 0x0, 0x44010, &(0x7f0000000040)={0x11, 0x1, r3, 0x1, 0x7}, 0x14)

437.020154ms ago: executing program 3 (id=1121):
prlimit64(0x0, 0xe, 0x0, 0x0)
getpid()
r0 = gettid()
timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
pipe(&(0x7f00000008c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r1, 0x0, r2, 0x0, 0x7, 0x9)
write$P9_RWRITE(r2, &(0x7f0000000040)={0xb, 0x77, 0x87}, 0x10c00)

417.282544ms ago: executing program 6 (id=1122):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f00000003c0)='%-5lx  \x00'}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

391.159714ms ago: executing program 8 (id=1123):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r1, 0xffffffffffffffff, 0x2e, 0x4608, @void}, 0x10)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000540)={r2, r1, 0x4, r1}, 0x10)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00\n'], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)

271.963456ms ago: executing program 7 (id=1124):
socket(0x1d, 0x2, 0x6)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={<r1=>0x0, 0x0})
close(r1)
socket$packet(0x11, 0x3, 0x300)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
socket$vsock_stream(0x28, 0x1, 0x0)
unshare(0x22020600)
pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x1, 0x7fffffff}, 0x0, 0x0)

271.791936ms ago: executing program 6 (id=1125):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="01000000070000000100010005"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1}, 0x0, 0x0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, @void, @value}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025940000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002400000000000000010140001800c0001"], 0x118}}, 0x0)

42.87788ms ago: executing program 8 (id=1126):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0xfe, 0x2ae, &(0x7f0000000a40)="$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")
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0)
creat(&(0x7f0000000000)='./bus\x00', 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

42.56112ms ago: executing program 6 (id=1128):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', <r1=>0x0})
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup(r2, &(0x7f0000000300)='syz1\x00', 0x1ff)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x24001, 0x0)
getsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4)
bind$can_raw(r0, &(0x7f0000000480)={0x1d, r1}, 0x10)
close(r0)

0s ago: executing program 6 (id=1129):
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
creat(&(0x7f0000000000)='./bus\x00', 0xd931d3864d39ddd8)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
write(r1, &(0x7f0000004200)='t', 0x1)
sendfile(r1, r0, 0x0, 0x3ffff)
ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, &(0x7f0000000080)={r1})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1000, @void, @value}, 0x94)
dup3(r0, r2, 0x0)
sendfile(r1, r0, 0x0, 0x7ffff000)

kernel console output (not intermixed with test programs):

] EXT4-fs (loop3): 1 truncate cleaned up
[   40.741090][ T3939] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   40.761648][ T3946] pim6reg1: entered promiscuous mode
[   40.767031][ T3946] pim6reg1: entered allmulticast mode
[   40.775552][ T3939] syz.3.196 (3939) used greatest stack depth: 9040 bytes left
[   40.784731][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.812344][ T3950] loop3: detected capacity change from 0 to 1764
[   40.819271][ T3950] iso9660: Unknown parameter 'chd'
[   40.867108][ T3954] loop3: detected capacity change from 0 to 128
[   40.874150][ T3954] ext4: Unknown parameter 'fowner>00000000000000000000'
[   40.901287][ T3960] loop2: detected capacity change from 0 to 1764
[   41.021655][ T3969] netlink: 96 bytes leftover after parsing attributes in process `syz.1.210'.
[   41.030717][ T3963] tipc: Started in network mode
[   41.035722][ T3963] tipc: Node identity 32738ca214f9, cluster identity 4711
[   41.042959][ T3963] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   41.055980][ T3962] tipc: Resetting bearer <eth:syzkaller0>
[   41.076628][ T3962] tipc: Disabling bearer <eth:syzkaller0>
[   41.084063][ T3971] lo: entered allmulticast mode
[   41.090930][ T3970] lo: left allmulticast mode
[   41.227202][ T3989] loop3: detected capacity change from 0 to 2048
[   41.242926][ T3304] EXT4-fs error (device loop4): ext4_readdir:264: inode #11: block 32: comm syz-executor: path /37/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[   41.280780][ T3304] EXT4-fs error (device loop4): ext4_empty_dir:3086: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[   41.320546][ T3989] Alternate GPT is invalid, using primary GPT.
[   41.327010][ T3989]  loop3: p2 p3 p7
[   41.330918][ T3304] EXT4-fs warning (device loop4): ext4_empty_dir:3088: inode #11: comm syz-executor: directory missing '.'
[   41.343591][ T3304] EXT4-fs error (device loop4): ext4_readdir:264: inode #11: block 32: comm syz-executor: path /37/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[   41.377184][ T3304] EXT4-fs error (device loop4): ext4_empty_dir:3086: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[   41.409456][ T3995] loop1: detected capacity change from 0 to 764
[   41.433611][ T3304] EXT4-fs warning (device loop4): ext4_empty_dir:3088: inode #11: comm syz-executor: directory missing '.'
[   41.445808][ T3304] EXT4-fs error (device loop4): ext4_readdir:264: inode #11: block 32: comm syz-executor: path /37/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[   41.467956][ T3998] pim6reg1: entered promiscuous mode
[   41.468394][ T3304] EXT4-fs error (device loop4): ext4_empty_dir:3086: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[   41.473275][ T3998] pim6reg1: entered allmulticast mode
[   41.494722][ T3304] EXT4-fs warning (device loop4): ext4_empty_dir:3088: inode #11: comm syz-executor: directory missing '.'
[   41.514516][ T3304] EXT4-fs error (device loop4): ext4_readdir:264: inode #11: block 32: comm syz-executor: path /37/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[   41.537820][ T3304] EXT4-fs error (device loop4): ext4_empty_dir:3086: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[   41.558675][ T3304] EXT4-fs warning (device loop4): ext4_empty_dir:3088: inode #11: comm syz-executor: directory missing '.'
[   41.570737][ T3304] EXT4-fs error (device loop4): ext4_readdir:264: inode #11: block 32: comm syz-executor: path /37/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[   41.594254][ T3304] EXT4-fs error (device loop4): ext4_empty_dir:3086: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[   41.614574][  T113] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   41.615078][ T3304] EXT4-fs warning (device loop4): ext4_empty_dir:3088: inode #11: comm syz-executor: directory missing '.'
[   41.639003][ T3304] EXT4-fs warning (device loop4): ext4_empty_dir:3088: inode #11: comm syz-executor: directory missing '.'
[   41.653382][ T3304] EXT4-fs warning (device loop4): ext4_empty_dir:3088: inode #11: comm syz-executor: directory missing '.'
[   41.678656][ T3304] EXT4-fs warning (device loop4): ext4_empty_dir:3088: inode #11: comm syz-executor: directory missing '.'
[   41.692541][ T3304] EXT4-fs warning (device loop4): ext4_empty_dir:3088: inode #11: comm syz-executor: directory missing '.'
[   41.693053][  T113] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   41.716885][ T3304] EXT4-fs warning (device loop4): ext4_empty_dir:3088: inode #11: comm syz-executor: directory missing '.'
[   41.767173][  T113] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   41.811420][  T113] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   41.920242][  T113] bridge_slave_0: left allmulticast mode
[   41.925958][  T113] bridge_slave_0: left promiscuous mode
[   41.931739][  T113] bridge0: port 1(bridge_slave_0) entered disabled state
[   41.955687][   T31] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[   41.968044][   T31] EXT4-fs (loop4): This should not happen!! Data will be lost
[   41.968044][   T31] 
[   41.977845][   T31] EXT4-fs (loop4): Total free blocks count 0
[   41.983837][   T31] EXT4-fs (loop4): Free/Dirty block details
[   41.989897][   T31] EXT4-fs (loop4): free_blocks=68451041280
[   41.995947][   T31] EXT4-fs (loop4): dirty_blocks=16432
[   42.001368][   T31] EXT4-fs (loop4): Block reservation details
[   42.007416][   T31] EXT4-fs (loop4): i_reserved_data_blocks=1027
[   42.017740][   T31] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 2048 with error 28
[   42.138581][  T113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   42.158392][  T113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   42.202512][  T113] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[   42.223231][  T113] bond0 (unregistering): Released all slaves
[   42.266307][ T4036] netlink: 24 bytes leftover after parsing attributes in process `syz.3.237'.
[   42.289721][ T4004] chnl_net:caif_netlink_parms(): no params data found
[   42.303179][  T113] hsr_slave_0: left promiscuous mode
[   42.309192][  T113] hsr_slave_1: left promiscuous mode
[   42.315130][  T113] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   42.322767][  T113] batman_adv: batadv0: Removing interface: batadv_slave_0
[   42.340281][  T113] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   42.347759][  T113] batman_adv: batadv0: Removing interface: batadv_slave_1
[   42.368013][  T113] veth1_macvtap: left promiscuous mode
[   42.373622][  T113] veth0_macvtap: left promiscuous mode
[   42.379190][  T113] veth1_vlan: left promiscuous mode
[   42.384513][  T113] veth0_vlan: left promiscuous mode
[   42.463960][  T113] team0 (unregistering): Port device team_slave_1 removed
[   42.474938][  T113] team0 (unregistering): Port device team_slave_0 removed
[   42.636768][ T4004] bridge0: port 1(bridge_slave_0) entered blocking state
[   42.643998][ T4004] bridge0: port 1(bridge_slave_0) entered disabled state
[   42.654466][ T4004] bridge_slave_0: entered allmulticast mode
[   42.661013][ T4004] bridge_slave_0: entered promiscuous mode
[   42.668403][ T4004] bridge0: port 2(bridge_slave_1) entered blocking state
[   42.675611][ T4004] bridge0: port 2(bridge_slave_1) entered disabled state
[   42.682996][ T4004] bridge_slave_1: entered allmulticast mode
[   42.689597][ T4004] bridge_slave_1: entered promiscuous mode
[   42.711217][ T4004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   42.722926][ T4004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   42.747019][ T4004] team0: Port device team_slave_0 added
[   42.753633][ T4004] team0: Port device team_slave_1 added
[   42.803886][  T113] IPVS: stop unused estimator thread 0...
[   42.833247][ T4004] batman_adv: batadv0: Adding interface: batadv_slave_0
[   42.840308][ T4004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   42.866323][ T4004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   42.879399][ T4004] batman_adv: batadv0: Adding interface: batadv_slave_1
[   42.886407][ T4004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   42.912408][ T4004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   43.008655][ T4004] hsr_slave_0: entered promiscuous mode
[   43.014949][ T4004] hsr_slave_1: entered promiscuous mode
[   43.021966][ T4004] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   43.031294][ T4004] Cannot create hsr debugfs directory
[   43.055881][   T51] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   43.072024][ T4057] pim6reg1: entered promiscuous mode
[   43.077392][ T4057] pim6reg1: entered allmulticast mode
[   43.126915][   T51] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   43.201922][   T51] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   43.214908][   T29] kauditd_printk_skb: 111 callbacks suppressed
[   43.214976][   T29] audit: type=1400 audit(1745079615.143:924): avc:  denied  { ioctl } for  pid=4062 comm="syz.3.244" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[   43.265041][ T4059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.243'.
[   43.272264][ T4033] chnl_net:caif_netlink_parms(): no params data found
[   43.299475][   T51] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   43.313085][ T4004] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   43.321522][   T29] audit: type=1400 audit(1745079615.243:925): avc:  denied  { getopt } for  pid=4066 comm="syz.3.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[   43.345839][   T29] audit: type=1400 audit(1745079615.273:926): avc:  denied  { allowed } for  pid=4069 comm="syz.1.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   43.368071][ T4004] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   43.377160][ T4004] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   43.407800][ T4004] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   43.463942][ T4033] bridge0: port 1(bridge_slave_0) entered blocking state
[   43.471240][ T4033] bridge0: port 1(bridge_slave_0) entered disabled state
[   43.482161][ T4033] bridge_slave_0: entered allmulticast mode
[   43.510510][ T4033] bridge_slave_0: entered promiscuous mode
[   43.532946][ T4033] bridge0: port 2(bridge_slave_1) entered blocking state
[   43.540077][ T4033] bridge0: port 2(bridge_slave_1) entered disabled state
[   43.547582][ T4033] bridge_slave_1: entered allmulticast mode
[   43.554262][ T4033] bridge_slave_1: entered promiscuous mode
[   43.565306][ T3378] IPVS: starting estimator thread 0...
[   43.599248][ T4033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   43.612767][   T51] bridge_slave_1: left allmulticast mode
[   43.618573][   T51] bridge_slave_1: left promiscuous mode
[   43.624252][   T51] bridge0: port 2(bridge_slave_1) entered disabled state
[   43.632691][   T51] bridge_slave_0: left allmulticast mode
[   43.638415][   T51] bridge_slave_0: left promiscuous mode
[   43.644177][   T51] bridge0: port 1(bridge_slave_0) entered disabled state
[   43.645399][ T4087] netlink: 76 bytes leftover after parsing attributes in process `syz.0.251'.
[   43.664428][ T4084] IPVS: using max 2112 ests per chain, 105600 per kthread
[   43.797667][   T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   43.808069][   T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   43.817664][   T51] bond0 (unregistering): Released all slaves
[   43.829945][ T4033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   43.857947][ T4004] 8021q: adding VLAN 0 to HW filter on device bond0
[   43.866564][ T4033] team0: Port device team_slave_0 added
[   43.874139][ T4033] team0: Port device team_slave_1 added
[   43.893971][ T4033] batman_adv: batadv0: Adding interface: batadv_slave_0
[   43.901211][ T4033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   43.927299][ T4033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   43.939641][ T4004] 8021q: adding VLAN 0 to HW filter on device team0
[   43.947207][ T4033] batman_adv: batadv0: Adding interface: batadv_slave_1
[   43.954190][ T4033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   43.980596][ T4033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   43.993534][   T51] hsr_slave_0: left promiscuous mode
[   43.999259][   T51] hsr_slave_1: left promiscuous mode
[   44.004978][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   44.012462][   T51] batman_adv: batadv0: Removing interface: batadv_slave_0
[   44.020098][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   44.027584][   T51] batman_adv: batadv0: Removing interface: batadv_slave_1
[   44.037661][   T51] veth1_macvtap: left promiscuous mode
[   44.043181][   T51] veth0_macvtap: left promiscuous mode
[   44.048878][   T51] veth1_vlan: left promiscuous mode
[   44.054161][   T51] veth0_vlan: left promiscuous mode
[   44.100877][   T29] audit: type=1326 audit(1745079616.023:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4066 comm="syz.3.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff06b1e169 code=0x7fc00000
[   44.148185][   T29] audit: type=1326 audit(1745079616.073:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4100 comm="syz.3.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff06b1e169 code=0x7ffc0000
[   44.171627][   T29] audit: type=1326 audit(1745079616.073:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4100 comm="syz.3.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff06b1e169 code=0x7ffc0000
[   44.195855][   T29] audit: type=1326 audit(1745079616.123:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4100 comm="syz.3.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7eff06b1e169 code=0x7ffc0000
[   44.198740][   T51] team0 (unregistering): Port device team_slave_1 removed
[   44.219257][   T29] audit: type=1326 audit(1745079616.123:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4100 comm="syz.3.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff06b1e169 code=0x7ffc0000
[   44.249698][   T29] audit: type=1326 audit(1745079616.123:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4100 comm="syz.3.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff06b1e169 code=0x7ffc0000
[   44.273590][   T29] audit: type=1326 audit(1745079616.123:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4100 comm="syz.3.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7eff06b1e169 code=0x7ffc0000
[   44.299923][   T51] team0 (unregistering): Port device team_slave_0 removed
[   44.345293][ T4103] netlink: 12 bytes leftover after parsing attributes in process `syz.3.256'.
[   44.355298][  T113] bridge0: port 1(bridge_slave_0) entered blocking state
[   44.362394][  T113] bridge0: port 1(bridge_slave_0) entered forwarding state
[   44.376256][  T113] bridge0: port 2(bridge_slave_1) entered blocking state
[   44.383350][  T113] bridge0: port 2(bridge_slave_1) entered forwarding state
[   44.411166][ T4004] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   44.421573][ T4004] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   44.453626][ T4033] hsr_slave_0: entered promiscuous mode
[   44.460208][ T4033] hsr_slave_1: entered promiscuous mode
[   44.468104][ T4033] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   44.469257][ T4114] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.260' sets config #1
[   44.475687][ T4033] Cannot create hsr debugfs directory
[   44.560565][ T4004] 8021q: adding VLAN 0 to HW filter on device batadv0
[   44.667279][ T4138] veth1_macvtap: left promiscuous mode
[   44.672998][ T4138] macsec0: entered promiscuous mode
[   44.683055][ T4033] netdevsim netdevsim6 netdevsim0: renamed from eth0
[   44.705704][ T4033] netdevsim netdevsim6 netdevsim1: renamed from eth1
[   44.739767][ T4033] netdevsim netdevsim6 netdevsim2: renamed from eth2
[   44.760088][ T4033] netdevsim netdevsim6 netdevsim3: renamed from eth3
[   44.778790][ T4150] loop1: detected capacity change from 0 to 1024
[   44.785772][ T4150] EXT4-fs: Ignoring removed oldalloc option
[   44.791821][ T4150] EXT4-fs: Ignoring removed orlov option
[   44.806105][ T4150] EXT4-fs (loop1): Filesystem with casefold feature cannot be mounted without CONFIG_UNICODE
[   44.819956][ T4151] wg2: entered promiscuous mode
[   44.824984][ T4151] wg2: entered allmulticast mode
[   44.860195][ T4004] veth0_vlan: entered promiscuous mode
[   44.884172][ T4004] veth1_vlan: entered promiscuous mode
[   44.932224][ T4004] veth0_macvtap: entered promiscuous mode
[   44.944905][ T4004] veth1_macvtap: entered promiscuous mode
[   44.960807][ T4033] 8021q: adding VLAN 0 to HW filter on device bond0
[   44.981987][ T4004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   44.992466][ T4004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   45.002366][ T4004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   45.012893][ T4004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   45.022858][ T4004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   45.033355][ T4004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   45.044363][ T4004] batman_adv: batadv0: Interface activated: batadv_slave_0
[   45.052546][ T4033] 8021q: adding VLAN 0 to HW filter on device team0
[   45.068889][ T4004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   45.079510][ T4004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   45.089397][ T4004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   45.099901][ T4004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   45.110338][ T4004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   45.121294][ T4004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   45.132894][ T4004] batman_adv: batadv0: Interface activated: batadv_slave_1
[   45.141952][ T4004] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   45.150732][ T4004] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   45.159572][ T4004] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   45.168426][ T4004] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   45.211407][ T4162] loop1: detected capacity change from 0 to 256
[   45.220135][   T38] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.227345][   T38] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.242124][   T38] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.249252][   T38] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.372521][ T4033] 8021q: adding VLAN 0 to HW filter on device batadv0
[   45.557604][ T4033] veth0_vlan: entered promiscuous mode
[   45.575619][ T4033] veth1_vlan: entered promiscuous mode
[   45.583929][ T4193] netlink: 12 bytes leftover after parsing attributes in process `syz.5.276'.
[   45.607521][ T4033] veth0_macvtap: entered promiscuous mode
[   45.627442][ T4033] veth1_macvtap: entered promiscuous mode
[   45.639673][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   45.650289][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   45.660184][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   45.670878][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   45.681022][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   45.691556][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   45.701546][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   45.712104][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   45.723554][ T4033] batman_adv: batadv0: Interface activated: batadv_slave_0
[   45.756166][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   45.766833][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   45.776698][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   45.787190][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   45.797230][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   45.807862][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   45.817824][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   45.828303][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   45.873300][ T4033] batman_adv: batadv0: Interface activated: batadv_slave_1
[   45.886868][ T4033] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   45.895751][ T4033] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   45.904618][ T4033] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   45.913324][ T4033] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   46.190555][ T4223] batadv_slave_0: entered promiscuous mode
[   46.231059][ T4223] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   46.328414][ T4223] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   46.345973][ T4231] loop6: detected capacity change from 0 to 512
[   46.353149][ T4231] EXT4-fs: Mount option(s) incompatible with ext3
[   46.406386][ T4223] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   46.493998][ T4223] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   46.586017][ T4223] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   46.608775][ T4223] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   46.621244][ T4223] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   46.641831][ T4223] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   46.705831][ T4222] batadv_slave_0: left promiscuous mode
[   46.725890][ T4260] smc: net device bond0 applied user defined pnetid SYZ0
[   46.749179][ T4260] smc: net device bond0 erased user defined pnetid SYZ0
[   46.770555][ T4261] pim6reg1: entered promiscuous mode
[   46.776030][ T4261] pim6reg1: entered allmulticast mode
[   46.802205][ T4269] netlink: 'syz.3.307': attribute type 21 has an invalid length.
[   46.810031][ T4269] netlink: 14380 bytes leftover after parsing attributes in process `syz.3.307'.
[   47.186895][ T4278] loop5: detected capacity change from 0 to 2048
[   47.222539][ T4278] EXT4-fs (loop5): failed to initialize system zone (-117)
[   47.230608][ T4278] EXT4-fs (loop5): mount failed
[   47.515647][ T4302] loop6: detected capacity change from 0 to 256
[   47.589677][ T4310] loop0: detected capacity change from 0 to 164
[   47.601752][ T4310] bio_check_eod: 78 callbacks suppressed
[   47.601766][ T4310] syz.0.323: attempt to access beyond end of device
[   47.601766][ T4310] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164
[   47.621976][ T4310] syz.0.323: attempt to access beyond end of device
[   47.621976][ T4310] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164
[   47.681782][ T4319] loop6: detected capacity change from 0 to 128
[   47.691146][ T4320] bond1: entered promiscuous mode
[   47.696377][ T4320] bond1: entered allmulticast mode
[   47.702134][ T4319] FAT-fs (loop6): bogus number of reserved sectors
[   47.705855][ T4320] 8021q: adding VLAN 0 to HW filter on device bond1
[   47.708778][ T4319] FAT-fs (loop6): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[   47.724897][ T4319] FAT-fs (loop6): Can't find a valid FAT filesystem
[   47.741391][ T4323] random: crng reseeded on system resumption
[   47.778497][ T4327] sd 0:0:1:0: device reset
[   47.804640][ T4330] loop6: detected capacity change from 0 to 512
[   47.809392][ T4325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   47.811900][ T4330] EXT4-fs: Mount option(s) incompatible with ext3
[   47.819396][ T4325] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   47.913050][ T4337] ip6gretap0: entered promiscuous mode
[   47.918622][ T4337] ip6gretap0: entered allmulticast mode
[   47.942841][ T4340] loop6: detected capacity change from 0 to 1024
[   47.965513][ T4340] EXT4-fs (loop6): can't mount with data_err=abort, fs mounted w/o journal
[   48.048231][ T4353] netlink: 4 bytes leftover after parsing attributes in process `syz.6.342'.
[   48.088951][ T4357] loop6: detected capacity change from 0 to 128
[   48.299176][   T29] kauditd_printk_skb: 98 callbacks suppressed
[   48.299193][   T29] audit: type=1400 audit(1745079620.223:1032): avc:  denied  { unlink } for  pid=3309 comm="syz-executor" name="file0" dev="tmpfs" ino=309 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   48.334526][   T29] audit: type=1326 audit(1745079620.253:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4299 comm="syz.5.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddfbd6e169 code=0x7ffc0000
[   48.358058][   T29] audit: type=1326 audit(1745079620.253:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4299 comm="syz.5.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddfbd6e169 code=0x7ffc0000
[   48.402024][   T29] audit: type=1400 audit(1745079620.323:1035): avc:  denied  { setopt } for  pid=4366 comm="syz.3.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   48.433048][   T29] audit: type=1400 audit(1745079620.353:1036): avc:  denied  { watch watch_reads } for  pid=4372 comm="syz.0.351" path="/80" dev="tmpfs" ino=427 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   48.637042][ T4392] netlink: 'syz.6.358': attribute type 10 has an invalid length.
[   48.644996][ T4392] netlink: 40 bytes leftover after parsing attributes in process `syz.6.358'.
[   48.662364][ T4392] batadv0: entered promiscuous mode
[   48.667694][ T4392] batadv0: entered allmulticast mode
[   48.677910][ T4392] bridge0: port 3(batadv0) entered blocking state
[   48.684613][ T4392] bridge0: port 3(batadv0) entered disabled state
[   48.691931][ T4392] bridge0: port 3(batadv0) entered blocking state
[   48.698427][ T4392] bridge0: port 3(batadv0) entered forwarding state
[   48.713292][ T4394] vlan2: entered allmulticast mode
[   48.724130][ T4392] batman_adv: batadv0: Adding interface: dummy0
[   48.728118][ T4398] netlink: 8 bytes leftover after parsing attributes in process `syz.3.361'.
[   48.730463][ T4392] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   48.766048][ T4392] batman_adv: batadv0: Interface activated: dummy0
[   48.781197][   T29] audit: type=1400 audit(1745079620.703:1037): avc:  denied  { ioctl } for  pid=4391 comm="syz.6.358" path="socket:[9277]" dev="sockfs" ino=9277 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   48.807784][ T4392] batadv0: mtu less than device minimum
[   48.813862][ T4392] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   48.824638][ T4392] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   48.835583][ T4392] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   48.846406][ T4392] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   48.857170][ T4392] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   48.867856][ T4392] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   48.878657][ T4392] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   48.889361][ T4392] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   48.900214][ T4392] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   48.903058][   T29] audit: type=1400 audit(1745079620.823:1038): avc:  denied  { create } for  pid=4400 comm="syz.1.362" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   48.933887][ T4398] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   48.934191][   T51] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[   48.953031][   T51] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[   48.967425][   T29] audit: type=1400 audit(1745079620.893:1039): avc:  denied  { mounton } for  pid=4400 comm="syz.1.362" path="/77/file0" dev="tmpfs" ino=424 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   49.037734][ T4398] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   49.157124][ T4398] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   49.206819][   T29] audit: type=1400 audit(1745079621.133:1040): avc:  denied  { unlink } for  pid=3303 comm="syz-executor" name="file0" dev="tmpfs" ino=424 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   49.236185][ T4398] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   49.296604][   T29] audit: type=1400 audit(1745079621.223:1041): avc:  denied  { setopt } for  pid=4415 comm="syz.5.369" laddr=::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[   49.507262][ T4425] wg2: entered promiscuous mode
[   49.512196][ T4425] wg2: entered allmulticast mode
[   49.603615][ T4429] netlink: 4 bytes leftover after parsing attributes in process `syz.5.373'.
[   49.939250][ T4440] SELinux: failed to load policy
[   50.102379][ T4448] atomic_op ffff88811b13a528 conn xmit_atomic 0000000000000000
[   50.201268][ T4457] loop5: detected capacity change from 0 to 1024
[   50.218305][ T4457] EXT4-fs: Ignoring removed nomblk_io_submit option
[   50.284898][ T4457] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   50.357681][ T4471] af_packet: tpacket_rcv: packet too big, clamped from 16 to 4294967272. macoff=96
[   50.393372][ T4004] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.424499][ T4477] ref_ctr increment failed for inode: 0x1e2 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff8881044fa100
[   50.441276][ T4476] uprobe: syz.0.394:4476 failed to unregister, leaking uprobe
[   50.441969][ T4480] loop5: detected capacity change from 0 to 256
[   50.461757][ T4480] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[   50.472110][ T4480] FAT-fs (loop5): Filesystem has been set read-only
[   50.551033][ T4487] netlink: 4 bytes leftover after parsing attributes in process `syz.1.398'.
[   50.640670][ T4499] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   50.651890][ T4499] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   50.730695][ T4505] loop6: detected capacity change from 0 to 256
[   50.738230][ T4503] syzkaller0: entered allmulticast mode
[   50.744985][ T4505] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   50.757907][ T4503] syzkaller0: entered promiscuous mode
[   50.770889][ T4503] syzkaller0 (unregistering): left promiscuous mode
[   50.777690][ T4503] syzkaller0 (unregistering): left allmulticast mode
[   50.840110][ T4510] loop5: detected capacity change from 0 to 2048
[   50.866564][ T4510] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   50.894141][ T4004] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.151284][ T4545] netlink: 4 bytes leftover after parsing attributes in process `syz.1.423'.
[   51.519913][ T4398] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   51.531299][ T4398] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   51.542653][ T4398] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   51.553436][ T4398] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   51.812950][ T4573] loop3: detected capacity change from 0 to 2048
[   51.828183][ T4573] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   51.929239][ T4573] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 1 with max blocks 1 with error 28
[   51.941543][ T4573] EXT4-fs (loop3): This should not happen!! Data will be lost
[   51.941543][ T4573] 
[   51.951354][ T4573] EXT4-fs (loop3): Total free blocks count 0
[   51.957418][ T4573] EXT4-fs (loop3): Free/Dirty block details
[   51.963335][ T4573] EXT4-fs (loop3): free_blocks=0
[   51.968356][ T4573] EXT4-fs (loop3): dirty_blocks=0
[   51.973431][ T4573] EXT4-fs (loop3): Block reservation details
[   51.979493][ T4573] EXT4-fs (loop3): i_reserved_data_blocks=0
[   52.023519][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.214471][ T4607] capability: warning: `syz.6.447' uses deprecated v2 capabilities in a way that may be insecure
[   52.237732][ T4608] loop3: detected capacity change from 0 to 512
[   52.256070][ T4608] EXT4-fs error (device loop3): ext4_orphan_get:1390: inode #15: comm syz.3.448: casefold flag without casefold feature
[   52.294328][ T4608] EXT4-fs error (device loop3): ext4_orphan_get:1395: comm syz.3.448: couldn't read orphan inode 15 (err -117)
[   52.297504][ T4621] loop1: detected capacity change from 0 to 128
[   52.308628][ T4608] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   52.356946][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.377005][ T4628] loop5: detected capacity change from 0 to 512
[   52.388427][ T4628] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   52.401300][ T4629] loop3: detected capacity change from 0 to 1024
[   52.401818][ T4628] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   52.408615][ T4629] EXT4-fs: Ignoring removed nobh option
[   52.440241][ T4629] ext2: Unknown parameter 'dont_hash'
[   52.448099][ T4004] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.456600][ T4629] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ%ºu@
) failed with errno=-22
[   52.493235][ T4636] netlink: 'syz.3.458': attribute type 4 has an invalid length.
[   52.570751][ T4645] loop3: detected capacity change from 0 to 1024
[   52.577984][ T4645] EXT4-fs: Ignoring removed orlov option
[   52.584031][ T4645] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled
[   52.616801][ T4645] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   52.670311][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.693298][ T4653] 9pnet: p9_errstr2errno: server reported unknown error 
[   52.702831][ T4651] all: renamed from lo (while UP)
[   52.952732][ T4675] loop5: detected capacity change from 0 to 2048
[   52.977435][ T4662] loop1: detected capacity change from 0 to 512
[   52.984801][ T4662] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   52.994365][ T4662] EXT4-fs (loop1): orphan cleanup on readonly fs
[   53.001561][ T4662] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.466: Failed to acquire dquot type 1
[   53.005538][ T4675]  loop5: p1 < > p4
[   53.017903][ T4662] EXT4-fs (loop1): 1 truncate cleaned up
[   53.018378][ T4675] loop5: p4 size 8388608 extends beyond EOD, truncated
[   53.031435][ T4662] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   53.069184][ T4680] loop3: detected capacity change from 0 to 128
[   53.077328][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.088371][ T4680] vfat: Unknown parameter '
'
[   53.195776][ T4696] netlink: 4 bytes leftover after parsing attributes in process `syz.6.480'.
[   53.232130][ T4699] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4699 comm=syz.0.481
[   53.348042][ T4714] netlink: 'syz.5.484': attribute type 39 has an invalid length.
[   53.399954][ T4726] netlink: 'syz.5.484': attribute type 3 has an invalid length.
[   53.464960][   T29] kauditd_printk_skb: 1304 callbacks suppressed
[   53.464974][   T29] audit: type=1326 audit(1745079625.393:2344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4731 comm="syz.0.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4328e5e169 code=0x7ffc0000
[   53.517401][   T29] audit: type=1326 audit(1745079625.393:2345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4679 comm="syz.3.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff06b1e169 code=0x7ffc0000
[   53.540934][   T29] audit: type=1326 audit(1745079625.393:2346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4679 comm="syz.3.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff06b1e169 code=0x7ffc0000
[   53.564288][   T29] audit: type=1326 audit(1745079625.393:2347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4731 comm="syz.0.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4328e5e169 code=0x7ffc0000
[   53.587679][   T29] audit: type=1326 audit(1745079625.393:2348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4731 comm="syz.0.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4328e5e169 code=0x7ffc0000
[   53.610998][   T29] audit: type=1326 audit(1745079625.393:2349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4731 comm="syz.0.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4328e5e169 code=0x7ffc0000
[   53.634366][   T29] audit: type=1326 audit(1745079625.393:2350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4731 comm="syz.0.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4328e5e169 code=0x7ffc0000
[   53.657834][   T29] audit: type=1326 audit(1745079625.423:2351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4731 comm="syz.0.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4328e5e169 code=0x7ffc0000
[   53.681240][   T29] audit: type=1326 audit(1745079625.443:2352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4731 comm="syz.0.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4328e5e169 code=0x7ffc0000
[   53.704578][   T29] audit: type=1326 audit(1745079625.443:2353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4731 comm="syz.0.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4328e5e169 code=0x7ffc0000
[   53.826939][ T4756] loop3: detected capacity change from 0 to 2048
[   54.193679][ T4812] capability: warning: `syz.6.515' uses 32-bit capabilities (legacy support in use)
[   54.205356][ T4812] program syz.6.515 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   54.259004][ T4817] bridge0: entered promiscuous mode
[   54.265400][ T4817] batadv0: entered promiscuous mode
[   54.272347][ T4817] bridge0: left promiscuous mode
[   54.277748][ T4817] batadv0: left promiscuous mode
[   54.280375][    C0] vcan0: j1939_tp_rxtimer: 0xffff88811a000400: rx timeout, send abort
[   54.492606][ T4825] tipc: Started in network mode
[   54.497559][ T4825] tipc: Node identity ac14140f, cluster identity 4711
[   54.504692][ T4825] tipc: New replicast peer: 255.255.255.255
[   54.510828][ T4825] tipc: Enabled bearer <udp:syz2>, priority 10
[   54.539951][ T4829] loop6: detected capacity change from 0 to 128
[   54.546872][ T4829] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[   54.575630][   T38] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[   54.687765][ T4841] loop1: detected capacity change from 0 to 128
[   54.724628][ T4841] syz.1.526: attempt to access beyond end of device
[   54.724628][ T4841] loop1: rw=2049, sector=153, nr_sectors = 8 limit=128
[   54.743143][ T4841] syz.1.526: attempt to access beyond end of device
[   54.743143][ T4841] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128
[   54.757257][ T4841] syz.1.526: attempt to access beyond end of device
[   54.757257][ T4841] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128
[   54.770816][ T4841] syz.1.526: attempt to access beyond end of device
[   54.770816][ T4841] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128
[   54.784218][    C0] vcan0: j1939_tp_rxtimer: 0xffff88811a000600: rx timeout, send abort
[   54.792458][    C0] vcan0: j1939_tp_rxtimer: 0xffff88811a000400: abort rx timeout. Force session deactivation
[   54.795060][ T4839] loop6: detected capacity change from 0 to 2048
[   54.814883][ T4841] syz.1.526: attempt to access beyond end of device
[   54.814883][ T4841] loop1: rw=2049, sector=217, nr_sectors = 8 limit=128
[   54.830915][ T4841] syz.1.526: attempt to access beyond end of device
[   54.830915][ T4841] loop1: rw=2049, sector=233, nr_sectors = 8 limit=128
[   54.844718][ T4841] syz.1.526: attempt to access beyond end of device
[   54.844718][ T4841] loop1: rw=2049, sector=249, nr_sectors = 8 limit=128
[   54.858874][ T4841] syz.1.526: attempt to access beyond end of device
[   54.858874][ T4841] loop1: rw=2049, sector=265, nr_sectors = 8 limit=128
[   54.872965][ T4839] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   54.887749][ T4841] syz.1.526: attempt to access beyond end of device
[   54.887749][ T4841] loop1: rw=2049, sector=281, nr_sectors = 8 limit=128
[   54.890411][    C1] vcan0: j1939_tp_rxtimer: 0xffff888118740200: rx timeout, send abort
[   54.901497][ T4841] syz.1.526: attempt to access beyond end of device
[   54.901497][ T4841] loop1: rw=2049, sector=297, nr_sectors = 8 limit=128
[   54.970087][ T4853] pim6reg1: entered promiscuous mode
[   54.975588][ T4853] pim6reg1: entered allmulticast mode
[   55.028916][ T4855] loop1: detected capacity change from 0 to 2048
[   55.047133][ T4855] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   55.068071][ T4855] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   55.083384][ T4855] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28
[   55.095820][ T4855] EXT4-fs (loop1): This should not happen!! Data will be lost
[   55.095820][ T4855] 
[   55.105530][ T4855] EXT4-fs (loop1): Total free blocks count 0
[   55.111679][ T4855] EXT4-fs (loop1): Free/Dirty block details
[   55.117813][ T4855] EXT4-fs (loop1): free_blocks=2415919104
[   55.123616][ T4855] EXT4-fs (loop1): dirty_blocks=16
[   55.128840][ T4855] EXT4-fs (loop1): Block reservation details
[   55.134907][ T4855] EXT4-fs (loop1): i_reserved_data_blocks=1
[   55.180300][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.210410][ T4033] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.245205][ T4865] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   55.257224][ T4865] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[   55.284330][    C0] vcan0: j1939_tp_rxtimer: 0xffff88811a000600: abort rx timeout. Force session deactivation
[   55.321337][ T4872] netlink: 28 bytes leftover after parsing attributes in process `syz.5.539'.
[   55.330487][ T4872] netlink: 28 bytes leftover after parsing attributes in process `syz.5.539'.
[   55.367631][ T4876] netlink: 96 bytes leftover after parsing attributes in process `syz.6.541'.
[   55.409339][    C1] vcan0: j1939_tp_rxtimer: 0xffff888118740200: abort rx timeout. Force session deactivation
[   55.410220][ T4880] netlink: 48 bytes leftover after parsing attributes in process `syz.6.543'.
[   55.429121][ T4881] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   55.436552][ T4881] vhci_hcd: default hub control req: 2314 v0008 i0002 l0
[   55.461556][ T4883] netlink: 4 bytes leftover after parsing attributes in process `+}[@'.
[   55.575118][ T4892] loop1: detected capacity change from 0 to 512
[   55.596193][ T4892] EXT4-fs: Ignoring removed mblk_io_submit option
[   55.602682][ T4892] EXT4-fs: Ignoring removed bh option
[   55.637890][ T4892] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   55.658710][   T36] tipc: Node number set to 2886997007
[   55.669740][ T4892] EXT4-fs (loop1): 1 truncate cleaned up
[   55.680216][ T4892] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   55.825346][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.866353][ T4902] loop3: detected capacity change from 0 to 8192
[   56.044074][ T4921] loop3: detected capacity change from 0 to 512
[   56.055402][ T4921] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=8040c018, mo2=0002]
[   56.063989][ T4921] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   56.076703][ T4921] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   56.111695][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   56.149507][ T4929] tipc: Started in network mode
[   56.154532][ T4929] tipc: Node identity 9aeb34a89fc6, cluster identity 4711
[   56.161790][ T4929] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   56.171051][ T4928] tipc: Resetting bearer <eth:syzkaller0>
[   56.171643][ T4933] netlink: 4 bytes leftover after parsing attributes in process `syz.5.562'.
[   56.185875][ T4933] netlink: 4 bytes leftover after parsing attributes in process `syz.5.562'.
[   56.195015][ T4933] netlink: 4 bytes leftover after parsing attributes in process `syz.5.562'.
[   56.217620][ T4928] tipc: Disabling bearer <eth:syzkaller0>
[   56.228441][ T4933] netlink: 4 bytes leftover after parsing attributes in process `syz.5.562'.
[   56.237406][ T4933] netlink: 4 bytes leftover after parsing attributes in process `syz.5.562'.
[   56.252913][ T4939] loop1: detected capacity change from 0 to 1024
[   56.261412][ T4939] EXT4-fs: Ignoring removed orlov option
[   56.267325][ T4939] EXT4-fs: Ignoring removed nomblk_io_submit option
[   56.290491][ T4939] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   56.391464][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   56.431160][ T4953] syzkaller0: entered promiscuous mode
[   56.436835][ T4953] syzkaller0: entered allmulticast mode
[   56.543270][ T4963] netlink: 'syz.3.575': attribute type 7 has an invalid length.
[   56.546023][ T4962] loop1: detected capacity change from 0 to 1024
[   56.568667][ T4962] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   56.589784][ T4962] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.576: bg 0: block 88: padding at end of block bitmap is not set
[   56.641224][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   56.748851][ T4982] loop6: detected capacity change from 0 to 512
[   56.755668][ T4982] EXT4-fs: Ignoring removed nobh option
[   56.772086][ T4982] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13
[   56.804003][ T4982] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.584: attempt to clear invalid blocks 2 len 1
[   56.818435][ T4982] EXT4-fs (loop6): Remounting filesystem read-only
[   56.826417][ T4982] EXT4-fs (loop6): 1 truncate cleaned up
[   56.832400][ T4982] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   56.903740][ T4033] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   56.936556][ T4997] loop1: detected capacity change from 0 to 1024
[   56.966079][ T4997] EXT4-fs: Ignoring removed orlov option
[   56.999771][ T4997] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   57.021352][ T4989] loop3: detected capacity change from 0 to 1024
[   57.064200][ T5006] hub 2-0:1.0: USB hub found
[   57.084482][ T5006] hub 2-0:1.0: 8 ports detected
[   57.201343][ T5010] loop0: detected capacity change from 0 to 512
[   57.325514][ T5010] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   57.343137][ T4989] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   57.376810][ T5010] EXT4-fs (loop0): 1 truncate cleaned up
[   57.404851][ T5010] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   57.654946][ T5016] xt_hashlimit: max too large, truncated to 1048576
[   57.662359][ T5016] Cannot find set identified by id 0 to match
[   57.680417][ T5001] loop6: detected capacity change from 0 to 4096
[   57.691737][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   57.701313][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   57.775426][ T5001] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   57.796074][ T5001] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   57.829443][ T4033] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   57.899461][ T5026] smc: net device bond0 applied user defined pnetid SYZ0
[   57.908760][ T5026] smc: net device bond0 erased user defined pnetid SYZ0
[   57.946020][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   57.991080][ T5034] loop5: detected capacity change from 0 to 128
[   58.009215][ T5038] vhci_hcd: invalid port number 31
[   58.014408][ T5038] vhci_hcd: invalid port number 31
[   58.038349][ T5034] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   58.073326][ T5034] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   58.310510][ T5067] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in;
[   58.310510][ T5067]    program syz.0.621 not setting count and/or reply_len properly
[   58.334493][ T4004] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   58.373136][ T5073] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[   58.384869][ T5073] netlink: 'syz.3.624': attribute type 1 has an invalid length.
[   58.430001][ T5081] loop6: detected capacity change from 0 to 256
[   58.483637][ T5083] loop3: detected capacity change from 0 to 512
[   58.499617][ T5083] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   58.536149][ T5089] loop1: detected capacity change from 0 to 512
[   58.555681][ T5083] EXT4-fs (loop3): 1 truncate cleaned up
[   58.578474][ T5083] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   58.610043][ T5089] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.631: bg 0: block 248: padding at end of block bitmap is not set
[   58.654525][ T5089] __quota_error: 838 callbacks suppressed
[   58.654545][ T5089] Quota error (device loop1): write_blk: dquota write failed
[   58.667770][ T5089] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[   58.685371][ T5089] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.631: Failed to acquire dquot type 1
[   58.722356][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.740772][   T29] audit: type=1400 audit(1745079630.663:3192): avc:  denied  { relabelfrom } for  pid=5095 comm="syz.6.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[   58.760629][   T29] audit: type=1400 audit(1745079630.663:3193): avc:  denied  { relabelto } for  pid=5095 comm="syz.6.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[   58.791112][ T5089] EXT4-fs (loop1): 1 truncate cleaned up
[   58.798198][ T5089] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   58.810981][ T5089] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   58.907173][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.943824][ T5115] loop6: detected capacity change from 0 to 128
[   58.972844][ T5117] loop1: detected capacity change from 0 to 512
[   59.011353][ T5117] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.636: Invalid inode bitmap blk 4 in block_group 0
[   59.196628][ T5129] netlink: 'syz.3.645': attribute type 4 has an invalid length.
[   59.222750][   T29] audit: type=1400 audit(1745079631.143:3194): avc:  denied  { nlmsg_read } for  pid=5132 comm="syz.5.646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[   59.281083][ T5131] loop1: detected capacity change from 0 to 2048
[   59.282846][ T5139] ip6gre1: entered allmulticast mode
[   59.343652][ T5131] EXT4-fs error (device loop1): ext4_find_extent:938: inode #2: comm syz.1.644: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[   59.445659][ T5131] EXT4-fs (loop1): Remounting filesystem read-only
[   59.575853][   T29] audit: type=1400 audit(1745079631.503:3195): avc:  denied  { execute } for  pid=5159 comm="syz.5.656" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=10528 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[   59.639121][ T5163] loop0: detected capacity change from 0 to 128
[   59.773558][ T5169] loop6: detected capacity change from 0 to 512
[   59.806077][ T5169] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[   59.815339][ T5169] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem
[   59.853533][ T5163] bio_check_eod: 103 callbacks suppressed
[   59.853549][ T5163] syz.0.658: attempt to access beyond end of device
[   59.853549][ T5163] loop0: rw=524288, sector=153, nr_sectors = 8 limit=128
[   59.876439][ T5169] EXT4-fs (loop6): warning: checktime reached, running e2fsck is recommended
[   59.902988][ T5169] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[   59.912184][ T5163] syz.0.658: attempt to access beyond end of device
[   59.912184][ T5163] loop0: rw=524288, sector=169, nr_sectors = 8 limit=128
[   59.927285][ T5169] System zones: 0-2, 18-18, 34-34
[   59.935044][ T5169] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   59.995976][ T5163] syz.0.658: attempt to access beyond end of device
[   59.995976][ T5163] loop0: rw=524288, sector=185, nr_sectors = 8 limit=128
[   60.014944][ T5169] EXT4-fs (loop6): 1 truncate cleaned up
[   60.032133][ T5184] serio: Serial port ptm0
[   60.060581][ T5163] syz.0.658: attempt to access beyond end of device
[   60.060581][ T5163] loop0: rw=524288, sector=201, nr_sectors = 8 limit=128
[   60.083950][ T5163] syz.0.658: attempt to access beyond end of device
[   60.083950][ T5163] loop0: rw=524288, sector=217, nr_sectors = 8 limit=128
[   60.110728][ T5163] syz.0.658: attempt to access beyond end of device
[   60.110728][ T5163] loop0: rw=524288, sector=233, nr_sectors = 8 limit=128
[   60.125765][ T5163] syz.0.658: attempt to access beyond end of device
[   60.125765][ T5163] loop0: rw=524288, sector=249, nr_sectors = 8 limit=128
[   60.159956][ T5163] syz.0.658: attempt to access beyond end of device
[   60.159956][ T5163] loop0: rw=524288, sector=265, nr_sectors = 8 limit=128
[   60.190696][ T5163] syz.0.658: attempt to access beyond end of device
[   60.190696][ T5163] loop0: rw=524288, sector=281, nr_sectors = 8 limit=128
[   60.206970][ T5163] syz.0.658: attempt to access beyond end of device
[   60.206970][ T5163] loop0: rw=524288, sector=297, nr_sectors = 8 limit=128
[   60.477632][ T5221] loop0: detected capacity change from 0 to 512
[   60.484313][ T5221] EXT4-fs: Ignoring removed orlov option
[   60.490929][ T5221] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   60.514192][ T5221] EXT4-fs (loop0): revision level too high, forcing read-only mode
[   60.522530][ T5221] EXT4-fs (loop0): orphan cleanup on readonly fs
[   60.529916][ T5221] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.681: bg 0: block 248: padding at end of block bitmap is not set
[   60.546042][ T5221] Quota error (device loop0): write_blk: dquota write failed
[   60.553461][ T5221] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[   60.563523][ T5221] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.681: Failed to acquire dquot type 1
[   60.575354][ T5221] EXT4-fs (loop0): 1 truncate cleaned up
[   60.615198][ T5231] loop5: detected capacity change from 0 to 128
[   60.621746][ T5231] ext4: Unknown parameter 'fowner>00000000000000000000'
[   60.729759][ T5249] loop6: detected capacity change from 0 to 512
[   60.756847][ T5249] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   60.838936][ T3433] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.897627][ T3433] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.936787][ T5263] pim6reg1: entered promiscuous mode
[   60.942159][ T5263] pim6reg1: entered allmulticast mode
[   60.968595][ T3433] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.038752][   T29] audit: type=1326 audit(1745079632.963:3196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5273 comm="syz.6.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a4e06e169 code=0x7ffc0000
[   61.066325][ T5275] Invalid ELF header magic: != ELF
[   61.072647][   T29] audit: type=1326 audit(1745079632.963:3197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5273 comm="syz.6.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a4e06e169 code=0x7ffc0000
[   61.096974][ T3433] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.168382][ T5280] pim6reg1: entered promiscuous mode
[   61.173911][ T5280] pim6reg1: entered allmulticast mode
[   61.193649][ T5284] veth3: entered promiscuous mode
[   61.198846][ T5284] veth3: entered allmulticast mode
[   61.222794][ T3433] bridge_slave_1: left allmulticast mode
[   61.228553][ T3433] bridge_slave_1: left promiscuous mode
[   61.234215][ T3433] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.242051][ T3433] bridge_slave_0: left allmulticast mode
[   61.247764][ T3433] bridge_slave_0: left promiscuous mode
[   61.253516][ T3433] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.379554][ T3433] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   61.391260][ T3433] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   61.438351][ T3433] bond0 (unregistering): Released all slaves
[   61.462064][ T5296] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.477102][ T5304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   61.489135][ T5304] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   61.500766][ T5306] netlink: 'syz.0.717': attribute type 1 has an invalid length.
[   61.512777][ T5308] loop3: detected capacity change from 0 to 512
[   61.536490][ T5306] 8021q: adding VLAN 0 to HW filter on device bond2
[   61.544578][ T5308] ext4 filesystem being mounted at /130/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   61.579160][ T5266] chnl_net:caif_netlink_parms(): no params data found
[   61.584597][ T5308] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.716: corrupted xattr block 33: invalid ea_ino
[   61.599170][ T5308] EXT4-fs (loop3): Remounting filesystem read-only
[   61.599190][ T5308] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=15
[   61.599228][ T5308] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=15
[   61.624175][ T5308] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=15
[   61.638186][ T5312] bond2: (slave veth3): Enslaving as an active interface with a down link
[   61.651408][ T5306] bond2: (slave ip6gretap1): making interface the new active one
[   61.652868][ T5306] ip6gretap1: entered promiscuous mode
[   61.665397][ T5306] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link
[   61.682197][ T3433] hsr_slave_0: left promiscuous mode
[   61.688234][ T3433] hsr_slave_1: left promiscuous mode
[   61.693904][ T3433] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   61.701407][ T3433] batman_adv: batadv0: Removing interface: batadv_slave_0
[   61.709103][ T3433] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   61.716711][ T3433] batman_adv: batadv0: Removing interface: batadv_slave_1
[   61.727383][ T3433] veth1_macvtap: left promiscuous mode
[   61.732923][ T3433] veth0_macvtap: left promiscuous mode
[   61.787398][ T3433] team0 (unregistering): Port device team_slave_1 removed
[   61.797689][ T3433] team0 (unregistering): Port device team_slave_0 removed
[   61.846510][ T5296] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.887869][ T5266] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.895005][ T5266] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.902369][ T5266] bridge_slave_0: entered allmulticast mode
[   61.909132][ T5266] bridge_slave_0: entered promiscuous mode
[   61.916185][ T5266] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.923358][ T5266] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.923958][ T5327] program syz.0.730 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   61.930928][ T5266] bridge_slave_1: entered allmulticast mode
[   61.946111][ T5266] bridge_slave_1: entered promiscuous mode
[   61.975421][ T5296] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.996829][ T5266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.007791][ T5266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.030154][ T5296] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.042570][ T5266] team0: Port device team_slave_0 added
[   62.049535][ T5266] team0: Port device team_slave_1 added
[   62.073679][ T5296] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.082699][ T5266] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.089780][ T5266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.115709][ T5266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.127053][ T5266] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.134025][ T5266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.159989][ T5266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.176298][ T5296] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.188640][ T5296] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.212938][ T5296] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.233805][ T5333] net_ratelimit: 12 callbacks suppressed
[   62.233826][ T5333] IPv4: Oversized IP packet from 127.202.26.0
[   62.258550][ T5266] hsr_slave_0: entered promiscuous mode
[   62.275604][ T5266] hsr_slave_1: entered promiscuous mode
[   62.281662][ T5266] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   62.289653][ T5266] Cannot create hsr debugfs directory
[   62.304030][   T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   62.318086][   T10] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   62.439603][ T5266] netdevsim netdevsim7 netdevsim0: renamed from eth0
[   62.450082][ T5266] netdevsim netdevsim7 netdevsim1: renamed from eth1
[   62.460196][ T5266] netdevsim netdevsim7 netdevsim2: renamed from eth2
[   62.472294][ T5349] __nla_validate_parse: 15 callbacks suppressed
[   62.472312][ T5349] netlink: 36 bytes leftover after parsing attributes in process `syz.1.729'.
[   62.489437][ T5266] netdevsim netdevsim7 netdevsim3: renamed from eth3
[   62.503153][ T5349] loop1: detected capacity change from 0 to 164
[   62.556344][ T5266] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.572818][ T5355] netlink: 8 bytes leftover after parsing attributes in process `syz.1.734'.
[   62.575745][ T5266] 8021q: adding VLAN 0 to HW filter on device team0
[   62.609626][   T38] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.616814][   T38] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.626820][ T5358] loop6: detected capacity change from 0 to 128
[   62.637033][ T5358] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   62.651584][   T38] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.658681][   T38] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.697668][ T5365] loop1: detected capacity change from 0 to 512
[   62.718745][ T5365] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   62.754348][ T5365] EXT4-fs (loop1): 1 truncate cleaned up
[   62.771743][ T5370] netlink: 4 bytes leftover after parsing attributes in process `syz.3.739'.
[   62.782746][ T5370] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   62.790307][ T5370] batman_adv: batadv0: Removing interface: batadv_slave_0
[   62.799316][ T5370] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   62.807033][ T5370] batman_adv: batadv0: Removing interface: batadv_slave_1
[   62.815411][ T5370] batman_adv: batadv0: Interface deactivated: ip6gretap1
[   62.822577][ T5370] batman_adv: batadv0: Removing interface: ip6gretap1
[   62.883989][ T5266] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.950707][   T10] IPVS: starting estimator thread 0...
[   63.008390][ T5404] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5404 comm=syz.3.751
[   63.054503][ T5404] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5404 comm=syz.3.751
[   63.078644][ T5404] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5404 comm=syz.3.751
[   63.104387][ T5398] IPVS: using max 2448 ests per chain, 122400 per kthread
[   63.108775][ T5404] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5404 comm=syz.3.751
[   63.124511][ T5404] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5404 comm=syz.3.751
[   63.154504][ T5404] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5404 comm=syz.3.751
[   63.171549][ T5404] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5404 comm=syz.3.751
[   63.195633][ T5404] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5404 comm=syz.3.751
[   63.220879][ T5404] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5404 comm=syz.3.751
[   63.255748][ T5404] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5404 comm=syz.3.751
[   63.429355][ T5415] loop1: detected capacity change from 0 to 512
[   63.451738][ T5415] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[   63.460992][ T5415] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[   63.486894][ T5415] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended
[   63.498094][ T5415] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[   63.519550][ T5266] veth0_vlan: entered promiscuous mode
[   63.537319][ T5266] veth1_vlan: entered promiscuous mode
[   63.545494][ T5415] System zones: 0-2, 18-18, 34-34
[   63.561851][ T5415] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   63.578947][ T5415] EXT4-fs (loop1): 1 truncate cleaned up
[   63.594108][ T5266] veth0_macvtap: entered promiscuous mode
[   63.604852][ T5431] SELinux: ebitmap: truncated map
[   63.618558][ T5266] veth1_macvtap: entered promiscuous mode
[   63.628352][ T5431] SELinux: failed to load policy
[   63.649132][ T5266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   63.659635][ T5266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.670069][ T5266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   63.680984][ T5266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.691102][ T5266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   63.701791][ T5266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.713346][ T5266] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.721864][ T5266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   63.732400][ T5266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.742320][ T5266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   63.752928][ T5266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.763020][ T5266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   63.773510][ T5266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.785475][ T5266] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.798373][ T5266] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.807131][ T5266] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.815940][ T5266] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.824904][ T5266] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.856646][   T29] kauditd_printk_skb: 86 callbacks suppressed
[   63.856660][   T29] audit: type=1400 audit(1745079635.783:3284): avc:  denied  { mount } for  pid=5266 comm="syz-executor" name="/" dev="gadgetfs" ino=3616 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[   63.921688][   T29] audit: type=1326 audit(1745079635.843:3285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5448 comm="syz.0.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4328e5e169 code=0x7ffc0000
[   63.945125][   T29] audit: type=1326 audit(1745079635.843:3286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5448 comm="syz.0.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4328e5e169 code=0x7ffc0000
[   64.010444][   T29] audit: type=1326 audit(1745079635.893:3287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5448 comm="syz.0.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4328e5e169 code=0x7ffc0000
[   64.033895][   T29] audit: type=1326 audit(1745079635.893:3288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5448 comm="syz.0.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4328e5e169 code=0x7ffc0000
[   64.057398][   T29] audit: type=1326 audit(1745079635.893:3289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5448 comm="syz.0.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4328e5e169 code=0x7ffc0000
[   64.081004][   T29] audit: type=1326 audit(1745079635.893:3290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5448 comm="syz.0.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4328e5e169 code=0x7ffc0000
[   64.104474][   T29] audit: type=1326 audit(1745079635.893:3291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5448 comm="syz.0.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4328e5e169 code=0x7ffc0000
[   64.127802][   T29] audit: type=1326 audit(1745079635.893:3292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5448 comm="syz.0.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4328e5e169 code=0x7ffc0000
[   64.151153][   T29] audit: type=1326 audit(1745079635.893:3293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5448 comm="syz.0.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4328e5e169 code=0x7ffc0000
[   64.218113][ T5455] netlink: 12 bytes leftover after parsing attributes in process `syz.1.766'.
[   64.257232][ T5465] netlink: 76 bytes leftover after parsing attributes in process `syz.6.767'.
[   64.380609][ T5471] veth1_macvtap: left promiscuous mode
[   64.386495][ T5471] macsec0: entered promiscuous mode
[   64.436984][ T5477] loop3: detected capacity change from 0 to 1024
[   64.444945][ T5477] EXT4-fs: Ignoring removed oldalloc option
[   64.450948][ T5477] EXT4-fs: Ignoring removed orlov option
[   64.457619][ T5477] EXT4-fs (loop3): Filesystem with casefold feature cannot be mounted without CONFIG_UNICODE
[   64.495455][ T5479] wg2: entered promiscuous mode
[   64.500371][ T5479] wg2: entered allmulticast mode
[   64.690064][ T5493] bond1: entered promiscuous mode
[   64.695295][ T5493] bond1: entered allmulticast mode
[   64.700805][ T5493] 8021q: adding VLAN 0 to HW filter on device bond1
[   64.711631][ T5493] bond1 (unregistering): Released all slaves
[   65.103128][ T5524] loop6: detected capacity change from 0 to 1024
[   65.122962][ T5524] EXT4-fs: Ignoring removed orlov option
[   65.235518][ T5530] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.312702][ T5530] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.392379][ T5530] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.442221][ T5553] netlink: 'syz.1.810': attribute type 21 has an invalid length.
[   65.450024][ T5553] netlink: 14380 bytes leftover after parsing attributes in process `syz.1.810'.
[   65.496977][ T5555] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   65.529057][ T5530] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.558566][ T5559] netlink: 4 bytes leftover after parsing attributes in process `syz.3.813'.
[   65.643316][ T5530] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.656371][ T5530] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.679401][ T5530] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.699512][ T5530] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.796885][ T5583] loop0: detected capacity change from 0 to 512
[   65.805958][ T5571] netlink: 8 bytes leftover after parsing attributes in process `syz.3.818'.
[   65.815543][ T5583] EXT4-fs: Ignoring removed mblk_io_submit option
[   65.844905][ T5583] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13
[   65.855837][ T5583] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.823: attempt to clear invalid blocks 2 len 1
[   65.868993][ T5583] EXT4-fs (loop0): Remounting filesystem read-only
[   65.876829][ T5583] EXT4-fs (loop0): 1 truncate cleaned up
[   66.254226][ T5633] ip6gre1: entered allmulticast mode
[   66.780628][ T5682] netlink: '+}[@': attribute type 21 has an invalid length.
[   66.788303][ T5682] netlink: '+}[@': attribute type 20 has an invalid length.
[   66.795667][ T5682] IPv6: NLM_F_CREATE should be specified when creating new route
[   67.013750][ T5696] loop7: detected capacity change from 0 to 512
[   67.041569][ T5696] EXT4-fs: Mount option(s) incompatible with ext3
[   67.181951][ T5712] loop3: detected capacity change from 0 to 1024
[   67.188704][ T5712] EXT4-fs: Ignoring removed orlov option
[   67.200549][ T5712] EXT4-fs mount: 21 callbacks suppressed
[   67.200563][ T5712] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   67.420233][ T5724] loop1: detected capacity change from 0 to 1024
[   67.457969][ T5724] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal
[   67.854933][ T5739] loop1: detected capacity change from 0 to 128
[   68.061111][ T5744] ip6gretap0: entered promiscuous mode
[   68.066963][ T5744] ip6gretap0: entered allmulticast mode
[   68.134486][ T5749] bond1: entered promiscuous mode
[   68.139691][ T5749] bond1: entered allmulticast mode
[   68.154514][ T5749] 8021q: adding VLAN 0 to HW filter on device bond1
[   68.184846][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.291693][ T5761] loop3: detected capacity change from 0 to 256
[   68.388824][ T5766] tipc: Started in network mode
[   68.393740][ T5766] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[   68.424812][ T5766] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[   68.433154][ T5766] tipc: Enabled bearer <udp:syz1>, priority 10
[   68.451782][ T5769] atomic_op ffff88811a315d28 conn xmit_atomic 0000000000000000
[   68.606073][ T5774] SELinux: failed to load policy
[   68.767262][ T5780] loop7: detected capacity change from 0 to 8192
[   68.888226][ T5780] bio_check_eod: 21 callbacks suppressed
[   68.888246][ T5780] syz.7.881: attempt to access beyond end of device
[   68.888246][ T5780] loop7: rw=0, sector=57847, nr_sectors = 1 limit=8192
[   68.963092][ T5780] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000e1b1)
[   68.971542][ T5780] FAT-fs (loop7): Filesystem has been set read-only
[   69.022246][ T5780] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000e1b1)
[   69.036051][ T5780] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000e1b1)
[   69.046221][ T5786] loop6: detected capacity change from 0 to 2048
[   69.084704][ T5786]  loop6: p1 < > p4
[   69.094628][ T5786] loop6: p4 size 8388608 extends beyond EOD, truncated
[   69.133275][   T29] kauditd_printk_skb: 125 callbacks suppressed
[   69.133293][   T29] audit: type=1400 audit(1745079641.053:3419): avc:  denied  { append } for  pid=5784 comm="syz.6.883" name="loop6p4" dev="devtmpfs" ino=554 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   69.163184][   T29] audit: type=1400 audit(1745079641.053:3420): avc:  denied  { open } for  pid=5784 comm="syz.6.883" path="/dev/loop6p4" dev="devtmpfs" ino=554 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   69.244044][ T5794] IPv4: Oversized IP packet from 127.202.26.0
[   69.275625][ T5795] syzkaller0: entered allmulticast mode
[   69.281411][ T5795] syzkaller0: entered promiscuous mode
[   69.297292][ T5795] syzkaller0 (unregistering): left promiscuous mode
[   69.303955][ T5795] syzkaller0 (unregistering): left allmulticast mode
[   69.506074][   T29] audit: type=1326 audit(1745079641.433:3421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5808 comm="syz.1.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaee5be169 code=0x7ffc0000
[   69.529561][   T29] audit: type=1326 audit(1745079641.433:3422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5808 comm="syz.1.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaee5be169 code=0x7ffc0000
[   69.546796][   T10] tipc: Node number set to 1
[   69.639010][ T5818] loop1: detected capacity change from 0 to 2048
[   69.651930][   T29] audit: type=1326 audit(1745079641.483:3423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5808 comm="syz.1.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fdaee5be169 code=0x7ffc0000
[   69.675234][   T29] audit: type=1326 audit(1745079641.483:3424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5808 comm="syz.1.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaee5be169 code=0x7ffc0000
[   69.698762][   T29] audit: type=1326 audit(1745079641.483:3425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5808 comm="syz.1.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaee5be169 code=0x7ffc0000
[   69.722161][   T29] audit: type=1326 audit(1745079641.493:3426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5812 comm="syz.1.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdaee5f0a25 code=0x7ffc0000
[   69.745521][   T29] audit: type=1326 audit(1745079641.493:3427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5808 comm="syz.1.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fdaee5be169 code=0x7ffc0000
[   69.769276][   T29] audit: type=1326 audit(1745079641.493:3428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5808 comm="syz.1.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaee5be169 code=0x7ffc0000
[   69.816936][ T5818] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   69.832892][ T5820] netlink: 4 bytes leftover after parsing attributes in process `syz.3.897'.
[   69.933585][ T5818] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 1 with max blocks 1 with error 28
[   69.945861][ T5818] EXT4-fs (loop1): This should not happen!! Data will be lost
[   69.945861][ T5818] 
[   69.955580][ T5818] EXT4-fs (loop1): Total free blocks count 0
[   69.961579][ T5818] EXT4-fs (loop1): Free/Dirty block details
[   69.967583][ T5818] EXT4-fs (loop1): free_blocks=0
[   69.972546][ T5818] EXT4-fs (loop1): dirty_blocks=0
[   69.977748][ T5818] EXT4-fs (loop1): Block reservation details
[   69.983745][ T5818] EXT4-fs (loop1): i_reserved_data_blocks=0
[   70.053836][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.227316][ T5847] loop7: detected capacity change from 0 to 128
[   70.298560][ T5851] loop7: detected capacity change from 0 to 512
[   70.310626][ T5851] EXT4-fs error (device loop7): ext4_orphan_get:1390: inode #15: comm syz.7.905: casefold flag without casefold feature
[   70.363967][ T5851] EXT4-fs error (device loop7): ext4_orphan_get:1395: comm syz.7.905: couldn't read orphan inode 15 (err -117)
[   70.388684][ T5851] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   70.496293][ T5266] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.589150][ T5866] loop6: detected capacity change from 0 to 2048
[   70.628651][ T5871] netlink: 'syz.1.913': attribute type 39 has an invalid length.
[   70.668234][ T5866]  loop6: p1 < > p4
[   70.672799][ T5866] loop6: p4 size 8388608 extends beyond EOD, truncated
[   70.681299][ T5876] netlink: 'syz.1.913': attribute type 3 has an invalid length.
[   70.718190][ T5875] netlink: 4 bytes leftover after parsing attributes in process `syz.7.916'.
[   70.897961][ T5884] tipc: New replicast peer: 255.255.255.255
[   70.904086][ T5884] tipc: Enabled bearer <udp:syz2>, priority 10
[   70.935484][ T5888] loop7: detected capacity change from 0 to 128
[   71.038836][ T5899] bond_slave_1: mtu less than device minimum
[   71.103004][ T5907] netlink: 4 bytes leftover after parsing attributes in process `+}[@'.
[   71.182959][ T5913] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[   71.221509][    C0] vcan0: j1939_tp_rxtimer: 0xffff888118604e00: rx timeout, send abort
[   71.221923][ T5916] pim6reg1: entered promiscuous mode
[   71.235093][ T5916] pim6reg1: entered allmulticast mode
[   71.477586][ T5936] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   71.485980][ T5936] vhci_hcd: default hub control req: 2314 v0008 i0002 l0
[   71.528830][ T5940] loop7: detected capacity change from 0 to 128
[   71.599388][ T5944] syzkaller0: entered promiscuous mode
[   71.604981][ T5944] syzkaller0: entered allmulticast mode
[   71.639382][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881185e2400: rx timeout, send abort
[   71.721535][    C0] vcan0: j1939_tp_rxtimer: 0xffff888118605800: rx timeout, send abort
[   71.729788][    C0] vcan0: j1939_tp_rxtimer: 0xffff888118604e00: abort rx timeout. Force session deactivation
[   71.878068][ T5955] netlink: 4 bytes leftover after parsing attributes in process `syz.6.952'.
[   71.997435][ T5961] netlink: 96 bytes leftover after parsing attributes in process `syz.7.954'.
[   72.014465][   T10] tipc: Node number set to 86848680
[   72.147731][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881185e2400: abort rx timeout. Force session deactivation
[   72.229769][    C0] vcan0 (unregistered): j1939_tp_rxtimer: 0xffff888118605800: abort rx timeout. Force session deactivation
[   72.256892][ T5972] loop7: detected capacity change from 0 to 512
[   72.265031][ T5973] netlink: 'syz.1.961': attribute type 7 has an invalid length.
[   72.272705][ T5973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.961'.
[   72.296858][ T5972] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   72.318560][ T5972] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   72.332376][ T5972] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.962: corrupted xattr block 32: invalid header
[   72.347601][ T5972] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop7 ino=15
[   72.356715][ T5972] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.962: corrupted xattr block 32: invalid header
[   72.371134][ T5972] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop7 ino=15
[   72.380231][ T5972] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.962: corrupted xattr block 32: invalid header
[   72.408680][ T5266] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.495427][ T5979] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   72.503536][ T5978] tipc: Resetting bearer <eth:syzkaller0>
[   72.518911][ T5978] tipc: Disabling bearer <eth:syzkaller0>
[   72.580886][ T5986] loop1: detected capacity change from 0 to 512
[   72.589631][ T5986] EXT4-fs: Ignoring removed nobh option
[   72.590309][ T5989] loop7: detected capacity change from 0 to 128
[   72.598400][ T5986] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13
[   72.611026][ T5986] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.977: attempt to clear invalid blocks 2 len 1
[   72.624189][ T5986] EXT4-fs (loop1): Remounting filesystem read-only
[   72.625201][ T5989] vfat: Unknown parameter '
'
[   72.638173][ T5986] EXT4-fs (loop1): 1 truncate cleaned up
[   72.648482][ T5986] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   72.680265][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.737630][ T5995] batman_adv: batadv0: Adding interface: ip6gretap1
[   72.744338][ T5995] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.798983][ T5995] batman_adv: batadv0: Interface activated: ip6gretap1
[   72.895124][ T5605] ip6gretap1: left promiscuous mode
[   73.063062][ T6003] netlink: 96 bytes leftover after parsing attributes in process `syz.6.971'.
[   73.131298][ T5992] loop3: detected capacity change from 0 to 4096
[   73.207331][ T5992] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   73.228271][ T6011] syzkaller0: entered promiscuous mode
[   73.233783][ T6011] syzkaller0: entered allmulticast mode
[   73.255665][ T5992] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   73.292586][ T6015] netlink: 'syz.1.979': attribute type 10 has an invalid length.
[   73.302637][ T6017] netlink: 16 bytes leftover after parsing attributes in process `syz.6.978'.
[   73.312700][ T6015] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.346746][ T6015] bridge_slave_1: left allmulticast mode
[   73.352556][ T6015] bridge_slave_1: left promiscuous mode
[   73.358293][ T6015] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.381613][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.397507][ T6015] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[   73.426710][ T6023] random: crng reseeded on system resumption
[   73.499572][ T6025] loop3: detected capacity change from 0 to 2048
[   73.555952][ T6025]  loop3: p1 < > p4
[   73.560253][ T6025] loop3: p4 size 8388608 extends beyond EOD, truncated
[   73.658827][ T6039] loop7: detected capacity change from 0 to 512
[   73.687281][ T6035] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   73.695094][ T6034] tipc: Resetting bearer <eth:syzkaller0>
[   73.707548][ T6034] tipc: Disabling bearer <eth:syzkaller0>
[   73.913651][ T6039] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.989: Invalid inode bitmap blk 4 in block_group 0
[   73.951838][ T6039] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   74.121733][ T5266] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.177309][ T6053] netlink: 'syz.7.993': attribute type 4 has an invalid length.
[   74.256870][ T6056] netlink: 4 bytes leftover after parsing attributes in process `syz.1.995'.
[   74.271964][ T6056] netlink: 12 bytes leftover after parsing attributes in process `syz.1.995'.
[   74.315173][ T6059] loop7: detected capacity change from 0 to 2048
[   74.335658][ T6059] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   74.358660][ T6059] EXT4-fs error (device loop7): ext4_find_extent:938: inode #2: comm syz.7.996: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[   74.375995][ T6059] EXT4-fs (loop7): Remounting filesystem read-only
[   74.411442][ T5266] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.545045][    C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1c
[   74.769624][ T6084] loop1: detected capacity change from 0 to 512
[   74.787983][ T6084] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   74.855191][ T6084] EXT4-fs (loop1): 1 truncate cleaned up
[   74.861626][ T6084] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   74.957461][ T6084] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2798: inode #15: comm syz.1.1006: corrupted xattr block 33: invalid header
[   74.979906][ T6084] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2962: inode #15: comm syz.1.1006: corrupted xattr block 33: invalid header
[   75.012198][ T6084] EXT4-fs warning (device loop1): ext4_evict_inode:279: xattr delete (err -117)
[   75.054222][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.100852][ T6096] loop7: detected capacity change from 0 to 1764
[   75.314900][ T6115] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1019'.
[   75.533823][ T6118] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in;
[   75.533823][ T6118]    program syz.3.1031 not setting count and/or reply_len properly
[   75.540729][   T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   75.558588][ T6122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   75.568623][ T6122] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   75.579270][   T10] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   75.582463][ T6121] random: crng reseeded on system resumption
[   75.654709][   T29] kauditd_printk_skb: 404 callbacks suppressed
[   75.654780][   T29] audit: type=1326 audit(1745079647.583:3833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6119 comm="syz.6.1020" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6a4e06e169 code=0x0
[   75.751917][ T6126] loop3: detected capacity change from 0 to 512
[   75.761036][ T6126] EXT4-fs: Mount option(s) incompatible with ext3
[   75.786614][   T29] audit: type=1326 audit(1745079647.713:3834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6125 comm="syz.3.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff06b1e169 code=0x7ffc0000
[   75.821727][   T29] audit: type=1326 audit(1745079647.733:3835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6125 comm="syz.3.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7eff06b1e169 code=0x7ffc0000
[   75.845946][   T29] audit: type=1326 audit(1745079647.733:3836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6125 comm="syz.3.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff06b1e169 code=0x7ffc0000
[   75.869769][    C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1b
[   75.884299][   T29] audit: type=1326 audit(1745079647.733:3837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6125 comm="syz.3.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7eff06b1e169 code=0x7ffc0000
[   75.907876][   T29] audit: type=1326 audit(1745079647.733:3838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6125 comm="syz.3.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff06b1e169 code=0x7ffc0000
[   75.909830][ T6135] loop3: detected capacity change from 0 to 512
[   75.931296][   T29] audit: type=1326 audit(1745079647.733:3839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6125 comm="syz.3.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff06b1e169 code=0x7ffc0000
[   75.961163][   T29] audit: type=1326 audit(1745079647.733:3840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6125 comm="syz.3.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7eff06b1e169 code=0x7ffc0000
[   75.984636][   T29] audit: type=1326 audit(1745079647.733:3841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6125 comm="syz.3.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff06b1e169 code=0x7ffc0000
[   76.008258][   T29] audit: type=1326 audit(1745079647.733:3842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6125 comm="syz.3.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff06b1e169 code=0x7ffc0000
[   76.042180][ T6135] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[   76.051341][ T6135] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[   76.072037][ T6135] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended
[   76.082343][ T6135] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[   76.090998][ T6135] System zones: 0-2, 18-18, 34-34
[   76.104795][ T6135] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   76.126834][ T6142] IPv4: Oversized IP packet from 127.202.26.0
[   76.141038][ T6135] EXT4-fs (loop3): 1 truncate cleaned up
[   76.147305][ T6135] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   76.192196][ T6146] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.218335][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.278532][ T6146] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.339254][ T6146] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.387137][ T6154] netlink: 156 bytes leftover after parsing attributes in process `syz.6.1043'.
[   76.398531][ T6146] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.410615][ T6154] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1043'.
[   76.459623][ T6159] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1032'.
[   76.469201][    C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c
[   76.497351][ T6146] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.510753][ T6146] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.522556][ T6146] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.535327][ T6146] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.603497][ T6165] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in;
[   76.603497][ T6165]    program syz.6.1034 not setting count and/or reply_len properly
[   76.635947][ T6166] loop3: detected capacity change from 0 to 512
[   76.670106][ T6166] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   76.714648][ T6166] ext4 filesystem being mounted at /194/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   76.830310][ T6178] SELinux: ebitmap: truncated map
[   76.849037][ T6178] SELinux: failed to load policy
[   76.959632][ T6185] netlink: 'syz.6.1054': attribute type 1 has an invalid length.
[   77.016728][ T6185] 8021q: adding VLAN 0 to HW filter on device bond1
[   77.051172][ T6187] bond1: (slave veth9): Enslaving as an active interface with a down link
[   77.069024][ T6189] loop1: detected capacity change from 0 to 512
[   77.101444][ T6189] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[   77.110826][ T6189] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[   77.136934][ T6185] bond1: (slave ip6gretap1): making interface the new active one
[   77.146680][ T6185] ip6gretap1: entered promiscuous mode
[   77.152486][ T6185] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[   77.160922][ T6189] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended
[   77.194808][ T6189] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[   77.214363][ T6189] System zones: 0-2, 18-18, 34-34
[   77.224058][ T6189] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   77.259347][ T6189] EXT4-fs (loop1): 1 truncate cleaned up
[   77.284820][ T6189] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   77.354901][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.375951][ T6194] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1047'.
[   77.510720][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.653008][ T6206] veth3: entered promiscuous mode
[   77.658196][ T6206] veth3: entered allmulticast mode
[   77.753006][ T6210] Invalid ELF header magic: != ELF
[   78.278879][ T6224] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1059'.
[   78.389995][ T6229] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1063'.
[   78.399037][ T6229] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1063'.
[   78.529873][ T6239] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1064'.
[   78.541539][ T6235] loop6: detected capacity change from 0 to 512
[   78.558248][ T6235] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[   78.572856][ T6240] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1066'.
[   78.587672][ T6235] EXT4-fs (loop6): 1 truncate cleaned up
[   78.600262][ T6235] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   78.635661][ T4033] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.846429][ T6243] loop1: detected capacity change from 0 to 512
[   78.857957][ T6243] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   78.881080][ T6243] EXT4-fs (loop1): 1 truncate cleaned up
[   78.892345][ T6243] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   78.971244][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.053334][ T6253] loop1: detected capacity change from 0 to 1024
[   79.063747][ T6253] EXT4-fs: Ignoring removed orlov option
[   79.076967][ T6253] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled
[   79.109548][ T6253] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   79.169029][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.376365][ T6262] loop3: detected capacity change from 0 to 512
[   79.387369][ T6262] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   79.426986][ T6262] EXT4-fs (loop3): 1 truncate cleaned up
[   79.433021][ T6262] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   79.483469][ T6262] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2798: inode #15: comm syz.3.1069: corrupted xattr block 33: invalid header
[   79.498626][ T6262] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2962: inode #15: comm syz.3.1069: corrupted xattr block 33: invalid header
[   79.514434][ T6262] EXT4-fs warning (device loop3): ext4_evict_inode:279: xattr delete (err -117)
[   79.537062][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.576794][ T6274] loop7: detected capacity change from 0 to 1024
[   79.586328][ T6272] loop3: detected capacity change from 0 to 512
[   79.599703][ T6272] EXT4-fs: Ignoring removed mblk_io_submit option
[   79.606286][ T6272] EXT4-fs: Ignoring removed bh option
[   79.615345][ T6272] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   79.626322][ T6274] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   79.645442][ T6274] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1073: bg 0: block 88: padding at end of block bitmap is not set
[   79.646274][ T6272] EXT4-fs (loop3): 1 truncate cleaned up
[   79.677971][ T5266] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.688167][ T6272] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   79.740018][ T6280] hub 2-0:1.0: USB hub found
[   79.755314][ T6280] hub 2-0:1.0: 8 ports detected
[   79.801453][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.834892][ T6287] loop3: detected capacity change from 0 to 128
[   79.849420][ T6287] FAT-fs (loop3): bogus number of reserved sectors
[   79.856040][ T6287] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[   79.865411][ T6287] FAT-fs (loop3): Can't find a valid FAT filesystem
[   79.902339][ T6289] loop6: detected capacity change from 0 to 512
[   79.913725][ T6289] EXT4-fs: Ignoring removed mblk_io_submit option
[   79.920393][ T6289] EXT4-fs: Ignoring removed bh option
[   79.927334][ T6289] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[   79.941141][ T6289] EXT4-fs (loop6): 1 truncate cleaned up
[   79.954853][ T6289] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   79.982577][ T6294] loop7: detected capacity change from 0 to 256
[   79.992472][ T6294] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   80.022113][ T4033] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.178401][ T6298] program syz.3.1084 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   81.494618][ T6301] loop6: detected capacity change from 0 to 512
[   81.508070][ T6301] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[   81.538655][ T6307] netlink: 'syz.7.1089': attribute type 7 has an invalid length.
[   81.546492][ T6307] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1089'.
[   81.563571][ T6301] EXT4-fs (loop6): 1 truncate cleaned up
[   81.569778][ T6301] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   81.603657][ T6301] EXT4-fs error (device loop6): ext4_expand_extra_isize_ea:2798: inode #15: comm syz.6.1087: corrupted xattr block 33: invalid header
[   81.652925][ T6301] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2962: inode #15: comm syz.6.1087: corrupted xattr block 33: invalid header
[   81.675498][ T6301] EXT4-fs warning (device loop6): ext4_evict_inode:279: xattr delete (err -117)
[   81.716129][ T4033] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.738944][ T6325] program syz.1.1101 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   81.744782][ T6321] netlink: 4 bytes leftover after parsing attributes in process `+}[@'.
[   81.757548][ T5586] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.777115][ T5598] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.840754][ T5598] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.867176][ T6330] loop6: detected capacity change from 0 to 2048
[   81.886945][ T6311] chnl_net:caif_netlink_parms(): no params data found
[   81.897605][ T5598] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.909743][ T6330] Alternate GPT is invalid, using primary GPT.
[   81.916202][ T6330]  loop6: p2 p3 p7
[   81.947823][ T5598] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.958464][ T6311] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.965595][ T6311] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.972818][ T6311] bridge_slave_0: entered allmulticast mode
[   81.979487][ T6311] bridge_slave_0: entered promiscuous mode
[   81.986453][ T6311] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.993537][ T6311] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.001108][ T6311] bridge_slave_1: entered allmulticast mode
[   82.007690][ T6311] bridge_slave_1: entered promiscuous mode
[   82.026494][ T6311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   82.036999][ T6311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   82.062837][ T6311] team0: Port device team_slave_0 added
[   82.071768][ T6311] team0: Port device team_slave_1 added
[   82.091204][ T5598] bridge_slave_1: left allmulticast mode
[   82.096903][ T5598] bridge_slave_1: left promiscuous mode
[   82.102578][ T5598] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.111186][ T5598] bridge_slave_0: left promiscuous mode
[   82.116860][ T5598] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.347481][ T5598] bond2 (unregistering): (slave ip6gretap1): Releasing active interface
[   82.410217][ T5598] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   82.420108][ T5598] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   82.429613][ T5598] bond0 (unregistering): Released all slaves
[   82.438342][ T5598] bond1 (unregistering): Released all slaves
[   82.446880][ T5598] bond2 (unregistering): (slave veth3): Releasing active interface
[   82.455697][ T5598] bond2 (unregistering): Released all slaves
[   82.463741][ T6311] batman_adv: batadv0: Adding interface: batadv_slave_0
[   82.470898][ T6311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   82.497142][ T6311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   82.510003][ T6311] batman_adv: batadv0: Adding interface: batadv_slave_1
[   82.517022][ T6311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   82.543012][ T6311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   82.555327][ T5598] tipc: Left network mode
[   82.571417][ T5598] hsr_slave_0: left promiscuous mode
[   82.577112][ T5598] hsr_slave_1: left promiscuous mode
[   82.582691][ T5598] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   82.590243][ T5598] batman_adv: batadv0: Removing interface: batadv_slave_0
[   82.598033][ T5598] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   82.605535][ T5598] batman_adv: batadv0: Removing interface: batadv_slave_1
[   82.616431][ T5598] veth0_macvtap: left promiscuous mode
[   82.622035][ T5598] veth1_vlan: left promiscuous mode
[   82.627372][ T5598] veth0_vlan: left promiscuous mode
[   82.687795][ T5598] team0 (unregistering): Port device team_slave_1 removed
[   82.697964][ T5598] team0 (unregistering): Port device team_slave_0 removed
[   82.729080][ T6311] hsr_slave_0: entered promiscuous mode
[   82.735323][ T6311] hsr_slave_1: entered promiscuous mode
[   82.741119][ T6311] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   82.748696][ T6311] Cannot create hsr debugfs directory
[   82.809238][ T6311] netdevsim netdevsim8 netdevsim0: renamed from eth0
[   82.817762][ T6311] netdevsim netdevsim8 netdevsim1: renamed from eth1
[   82.826561][ T6311] netdevsim netdevsim8 netdevsim2: renamed from eth2
[   82.835083][ T6311] netdevsim netdevsim8 netdevsim3: renamed from eth3
[   82.869507][ T6311] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.881368][ T6311] 8021q: adding VLAN 0 to HW filter on device team0
[   82.890963][ T5624] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.898065][ T5624] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.909365][ T5638] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.916481][ T5638] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.970640][ T6311] 8021q: adding VLAN 0 to HW filter on device batadv0
[   83.003204][ T5598] IPVS: stop unused estimator thread 0...
[   83.062416][ T6311] veth0_vlan: entered promiscuous mode
[   83.072262][ T6311] veth1_vlan: entered promiscuous mode
[   83.087160][ T6311] veth0_macvtap: entered promiscuous mode
[   83.094648][ T6311] veth1_macvtap: entered promiscuous mode
[   83.104626][ T6311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.115133][ T6311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.125057][ T6311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.135512][ T6311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.145443][ T6311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.155894][ T6311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.166575][ T6311] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.176529][ T6311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.187059][ T6311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.196961][ T6311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.207393][ T6311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.217287][ T6311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.227710][ T6311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.238766][ T6311] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.248013][ T6311] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.256854][ T6311] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.265586][ T6311] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.274314][ T6311] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.315743][ T6356] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1105'.
[   83.381865][ T6356] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1105'.
[   83.600148][ T6371] loop1: detected capacity change from 0 to 128
[   83.608215][ T6371] FAT-fs (loop1): bogus number of reserved sectors
[   83.614774][ T6371] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[   83.624106][ T6371] FAT-fs (loop1): Can't find a valid FAT filesystem
[   84.175201][ T6382] loop7: detected capacity change from 0 to 512
[   84.181919][ T6382] EXT4-fs: Ignoring removed mblk_io_submit option
[   84.188446][ T6382] EXT4-fs: Ignoring removed bh option
[   84.197095][ T6382] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[   84.220764][ T6382] EXT4-fs (loop7): 1 truncate cleaned up
[   84.230771][ T6382] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   84.253329][   T29] kauditd_printk_skb: 139 callbacks suppressed
[   84.253369][   T29] audit: type=1326 audit(1745079656.173:3982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6381 comm="syz.7.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e29b8e169 code=0x7ffc0000
[   84.290230][   T29] audit: type=1326 audit(1745079656.213:3983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6381 comm="syz.7.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e29b8e169 code=0x7ffc0000
[   84.313728][   T29] audit: type=1326 audit(1745079656.213:3984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6381 comm="syz.7.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e29b8e169 code=0x7ffc0000
[   84.337242][   T29] audit: type=1326 audit(1745079656.213:3985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6381 comm="syz.7.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e29b8e169 code=0x7ffc0000
[   84.360840][   T29] audit: type=1326 audit(1745079656.213:3986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6381 comm="syz.7.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e29b8e169 code=0x7ffc0000
[   84.384555][   T29] audit: type=1326 audit(1745079656.213:3987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6381 comm="syz.7.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e29b8e169 code=0x7ffc0000
[   84.408027][   T29] audit: type=1326 audit(1745079656.213:3988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6381 comm="syz.7.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e29b8e169 code=0x7ffc0000
[   84.431622][   T29] audit: type=1326 audit(1745079656.213:3989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6381 comm="syz.7.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e29b8e169 code=0x7ffc0000
[   84.455212][   T29] audit: type=1326 audit(1745079656.213:3990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6381 comm="syz.7.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e29b8e169 code=0x7ffc0000
[   84.478777][   T29] audit: type=1326 audit(1745079656.213:3991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6381 comm="syz.7.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e29b8e169 code=0x7ffc0000
[   84.516024][ T5266] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.570707][ T6396] loop8: detected capacity change from 0 to 512
[   84.577906][ T6396] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[   84.599208][ T6396] EXT4-fs (loop8): 1 truncate cleaned up
[   84.605559][ T6396] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   84.629063][ T6396] EXT4-fs error (device loop8): ext4_expand_extra_isize_ea:2798: inode #15: comm syz.8.1108: corrupted xattr block 33: invalid header
[   84.645300][ T6396] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2962: inode #15: comm syz.8.1108: corrupted xattr block 33: invalid header
[   84.675793][ T6396] EXT4-fs warning (device loop8): ext4_evict_inode:279: xattr delete (err -117)
[   84.712419][ T6311] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.746681][ T6410] loop7: detected capacity change from 0 to 512
[   84.777707][ T6410] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   84.830822][ T6410] EXT4-fs (loop7): orphan cleanup on readonly fs
[   84.846650][ T6416] netlink: 'syz.8.1116': attribute type 7 has an invalid length.
[   84.854442][ T6416] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1116'.
[   84.869133][ T6417] loop3: detected capacity change from 0 to 1024
[   84.876124][ T6417] EXT4-fs: Ignoring removed orlov option
[   84.882027][ T6417] EXT4-fs: Ignoring removed nomblk_io_submit option
[   84.893525][ T6410] EXT4-fs error (device loop7): ext4_acquire_dquot:6935: comm syz.7.1112: Failed to acquire dquot type 1
[   84.909811][ T6410] EXT4-fs (loop7): 1 truncate cleaned up
[   84.923321][ T6410] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   84.937111][ T6417] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   85.041876][ T5266] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.042823][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.080200][ T6428] loop7: detected capacity change from 0 to 128
[   85.087715][ T6426] loop6: detected capacity change from 0 to 512
[   85.096859][ T6426] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[   85.099967][ T6428] FAT-fs (loop7): bogus number of reserved sectors
[   85.113445][ T6428] FAT-fs (loop7): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[   85.122829][ T6428] FAT-fs (loop7): Can't find a valid FAT filesystem
[   85.125033][ T6426] EXT4-fs (loop6): 1 truncate cleaned up
[   85.146351][ T6426] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   85.183608][ T4033] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.239434][ T6439] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1125'.
[   85.248416][ T6439] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1125'.
[   85.258471][ T6439] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1125'.
[   85.277153][ T6439] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1125'.
[   85.286101][ T6439] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1125'.
[   85.392125][ T6432] Set syz1 is full, maxelem 65536 reached
[   85.447321][ T6446] loop8: detected capacity change from 0 to 256
[   85.457130][ T6446] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   85.485955][ T6448] loop6: detected capacity change from 0 to 1024
[   85.492717][ T6448] EXT4-fs: Ignoring removed orlov option
[   85.500635][ T6448] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   86.041675][ T6448] ==================================================================
[   86.049796][ T6448] BUG: KCSAN: data-race in __xa_set_mark / xas_find_marked
[   86.057040][ T6448] 
[   86.059377][ T6448] write to 0xffff888106ab9464 of 4 bytes by task 6450 on cpu 1:
[   86.067022][ T6448]  __xa_set_mark+0x192/0x1c0
[   86.071671][ T6448]  __folio_mark_dirty+0x3b8/0x4e0
[   86.076732][ T6448]  mark_buffer_dirty+0x134/0x230
[   86.081702][ T6448]  block_write_end+0x123/0x210
[   86.086500][ T6448]  ext4_write_end+0x148/0x770
[   86.091205][ T6448]  generic_perform_write+0x31e/0x4b0
[   86.096509][ T6448]  ext4_buffered_write_iter+0x1ed/0x3c0
[   86.102069][ T6448]  ext4_file_write_iter+0x3b2/0xf80
[   86.107288][ T6448]  iter_file_splice_write+0x5f2/0x980
[   86.112701][ T6448]  direct_splice_actor+0x160/0x2c0
[   86.117845][ T6448]  splice_direct_to_actor+0x305/0x680
[   86.123237][ T6448]  do_splice_direct+0xd9/0x150
[   86.128029][ T6448]  do_sendfile+0x40a/0x690
[   86.132641][ T6448]  __x64_sys_sendfile64+0x113/0x160
[   86.137863][ T6448]  x64_sys_call+0xfc3/0x2e10
[   86.142471][ T6448]  do_syscall_64+0xc9/0x1a0
[   86.146996][ T6448]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   86.152910][ T6448] 
[   86.155242][ T6448] read to 0xffff888106ab9464 of 4 bytes by task 6448 on cpu 0:
[   86.162797][ T6448]  xas_find_marked+0x614/0x660
[   86.167589][ T6448]  find_get_entry+0x5d/0x370
[   86.172194][ T6448]  filemap_get_folios_tag+0xa0/0x220
[   86.177498][ T6448]  file_write_and_wait_range+0x206/0x2f0
[   86.183240][ T6448]  generic_buffers_fsync_noflush+0x46/0x120
[   86.189173][ T6448]  ext4_sync_file+0x1c3/0x6c0
[   86.193898][ T6448]  vfs_fsync_range+0x116/0x130
[   86.198701][ T6448]  ext4_buffered_write_iter+0x358/0x3c0
[   86.204271][ T6448]  ext4_file_write_iter+0x3b2/0xf80
[   86.209494][ T6448]  iter_file_splice_write+0x5f2/0x980
[   86.214902][ T6448]  direct_splice_actor+0x160/0x2c0
[   86.220053][ T6448]  splice_direct_to_actor+0x305/0x680
[   86.225449][ T6448]  do_splice_direct+0xd9/0x150
[   86.230240][ T6448]  do_sendfile+0x40a/0x690
[   86.234682][ T6448]  __x64_sys_sendfile64+0x113/0x160
[   86.239891][ T6448]  x64_sys_call+0xfc3/0x2e10
[   86.244515][ T6448]  do_syscall_64+0xc9/0x1a0
[   86.249041][ T6448]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   86.254961][ T6448] 
[   86.257293][ T6448] value changed: 0x04000021 -> 0x0e000021
[   86.263019][ T6448] 
[   86.265360][ T6448] Reported by Kernel Concurrency Sanitizer on:
[   86.271521][ T6448] CPU: 0 UID: 0 PID: 6448 Comm: syz.6.1129 Not tainted 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(voluntary) 
[   86.283947][ T6448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   86.294025][ T6448] ==================================================================
[   86.401382][ T4033] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.404331][ T5598] ip6gretap1: left promiscuous mode