last executing test programs:

3.812041701s ago: executing program 2 (id=5115):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/19, @ANYRES32=r1, @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00')
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
statx(r3, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000429bd7000010000003e00000008000300", @ANYRES32=r4, @ANYBLOB="0ce2bb7efe2053d8e2fec3000800000032000000"], 0x28}, 0x1, 0x0, 0x0, 0x4008800}, 0x810)
ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000480)={0x0, @xdp={0x2c, 0x8, r1, 0x32}, @nl=@kern={0x10, 0x0, 0x0, 0x1}, @l2={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x2}, 0x5, 0x0, 0x0, 0x0, 0xa3a3, &(0x7f0000000280)='bond_slave_1\x00', 0x8001, 0xd52, 0x4})
timer_create(0xffffffffffffffff, 0x0, &(0x7f0000000080))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
creat(&(0x7f00000000c0)='./file0\x00', 0x48)
pipe2$9p(&(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r7 = dup(r6)
write$P9_RLERRORu(r7, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r7, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7])
r8 = open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x102)
write$bt_hci(r8, 0x0, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r2, 0x0, 0x800)

2.926781682s ago: executing program 2 (id=5128):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000640)='kmem_cache_free\x00', r0, 0x0, 0x80001}, 0x18)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000040)={[{@grpquota}, {@nogrpid}, {@noinit_itable}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='mpol=interleave,mpol=local'])
open$dir(&(0x7f0000000000)='./file0/file0\x00', 0x101042, 0x1)

1.96526537s ago: executing program 2 (id=5138):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f00000003c0)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x3, 0x10, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x2, 0x8, 0x8, 0x0, "1c"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}]}, 0x80}, 0x1, 0x7}, 0x0)
open(0x0, 0x145142, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r6}, 0x10)
syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4, 0xffffffff}, 0x0, 0x0)

1.943928322s ago: executing program 1 (id=5139):
r0 = gettid()
bpf$MAP_CREATE(0x0, 0x0, 0x48)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x2)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, 0x0, 0x0)

1.877374717s ago: executing program 0 (id=5142):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10)
accept$unix(0xffffffffffffffff, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
pipe2(&(0x7f0000001cc0)={<r4=>0xffffffffffffffff}, 0x80000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x40}, 0x18)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000880)=ANY=[@ANYRES8=r1, @ANYRESHEX=r4, @ANYRESDEC, @ANYBLOB="8a64c64b51fec8e5f763f871cb68de26d0c07b0c2d97ee571931f0353375f826f6ada18a33d3404da9e5151da419ca5b23eadf3cda16944eeedf291f86442d701c713d47247aa598ec0c511e50c279f64d01fa9456e847b4af9597b845f3b333c56279a1acdc582337cb184098b9a83be624fb9e049cfff5d44feddb393ebf409cef6f9cba74e198d8680506d0d72a8e30aaf97eb7df4c599eaa7da945d925c6dfbd5af6d230f6e1dab71a3661739937a9d0889a01321107cbf2b847eff2a5e6fe6b2ab4414dcf7114ca4ecfdb68667376", @ANYBLOB=',access=', @ANYRES16=0x0])

1.798894654s ago: executing program 0 (id=5145):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x221a0a6, &(0x7f0000000280)={[{}, {@dioread_nolock}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01"], 0x50)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001480)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="002998443900000000e700000000006e848d4f1626c5c973f1000000000020000000000000"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000070020001812", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x18)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40080}, 0x4000c00)
ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000380)={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x16}}, {0x0, @broadcast}, 0x2, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1}}, 'vlan0\x00'})
r4 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
recvfrom$unix(r4, &(0x7f0000000040)=""/120, 0x78, 0x0, &(0x7f00000000c0)=@file={0x0, './file1\x00'}, 0x6e)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0}, 0x38)
socket$key(0xf, 0x3, 0x2)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e000000000000"], 0x48)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f0000000380)={[{@nodioread_nolock}, {@minixdf}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@inlinecrypt}, {@i_version}]}, 0x6, 0x5fc, &(0x7f0000000600)="$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")
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x1410, 0x1, 0x70bd2c, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x24044836}, 0xc094)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
quotactl_fd$Q_SETQUOTA(r6, 0xffffffff80000800, 0xee00, &(0x7f0000000140)={0x10004, 0x1, 0x401, 0xf, 0x8, 0xb, 0x28a7, 0x0, 0x6})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r5, @ANYBLOB], 0x0}, 0x94)
accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14)
socket$nl_netfilter(0x10, 0x3, 0xc)

1.673128534s ago: executing program 0 (id=5147):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r1=>r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYRESDEC=r1], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000000), 0x4, 0x5eb, &(0x7f0000000c00)="$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")
chdir(&(0x7f0000000040)='./file0\x00')
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0xfc, 0x0, &(0x7f00000000c0))
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$inet_sctp(r4, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a028}], 0x1, 0x0, 0x0, 0x804c040}, 0x0)

1.486438199s ago: executing program 0 (id=5150):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = memfd_create(0x0, 0x0)
write$binfmt_misc(r2, &(0x7f0000000180)="e502", 0x2)
syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000800)='./file0\x00', 0x200000, &(0x7f0000000a00)=ANY=[], 0x2, 0x699, &(0x7f0000001140)="$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")
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

1.34675273s ago: executing program 0 (id=5153):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0)
close(r0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0xffffffffffffffff, <r1=>0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000400)={0x0, r1}, 0x8)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0xffffffff, 0x10001, 0x7, 0x4000, r1, 0xc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x4, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r2}, &(0x7f00000004c0), &(0x7f0000000540)}, 0x20)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0)
r5 = socket$inet6(0xa, 0x802, 0x0)
bind$inet6(r5, &(0x7f0000000640)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c)
setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c)
sendmmsg$inet6(r5, &(0x7f0000001f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@dstopts={{0x18}}, @tclass={{0x14, 0x29, 0x43, 0x4}}], 0x30}}], 0x1, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r7}, 0x10)
unshare(0x6a040000)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ_RESET(r8, &(0x7f00000044c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x15, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x206}}, 0x14}}, 0x40080a0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='GPL\x00')
socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r9, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7})
ioctl$sock_netdev_private(r9, 0x8943, &(0x7f0000000000))
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)

1.041338855s ago: executing program 1 (id=5157):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r1=>r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYRESDEC=r1], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000000), 0x4, 0x5eb, &(0x7f0000000c00)="$eJzs3ctvFEcaAPCvxw9sjNYDWu0ue1gsrVYg7WJjAysU5QDXCFnkoVxyiYMNIRiwsKPEJBJGIpdIUS5RFCmnHEL+iwSFK6fklEMuOUVIKIk4RspEPdNtPHaPX9jTiP79pGG6q6Zd1djfVHVNVU8AlTWS/lOLOBgRc0nEcLK0nNcbWeZI63WPfnv/fPpIotF4+Zckkiwtf32SPQ9lBw9ExHffJnGgZ22584s3Lk/Nzs5cz/bHFq7Mjc0v3jh66crUxZmLM1cn/j9x6uSJk6fGj23rvG4WpJ29/dY7wx9Ovvbl578n41/9OJnE6Xghe+HK89gpIzHS/D9J1mYNndrpwkrSk/2dNBqNRp6W9JZbJzYv//31RcTfYzh64vEvbzg+eLHUygG7qpG03ruBKkrEP1RU3g/Ir+1XXwfXSumVAN3w8ExrAGBt/Pe2xgZjoDk2sPdREiuHdZKI2N7IXLt9EXH/3uTtC/cmb8cujcMBxZZuRcQ/iuI/acZ/PQai3oz/Wlv8p/2Cc9lzmv7SNstfPVQs/qF7WvE/sG78R4f4fz19vtmK4Te2WX798eabg23xP7jdUwIAAAAAAIDKunsmIv5X9Pl/bXn+TxTM/xmKiNM7UP7Iqv21n//XHuxAMUCBh2cini+c/1vLZ//We1YsYa1HX3Lh0uzMsYj4S0Qcib496f74OmUc/ejAZ53yRrL5f/kjLf9+Nhcwq8eD3j3tx0xPLUw9wSkDmYe3Iv5ZOP83WW7/k4L2P31nmNtkGQf+c+dcp7yN4x/YLY0vIg4Xtv+P71qRrH9/jrFmf2As7xWs9a/3Pv66U/nbjX+3mIAnl7b/e9eP/3qy8n4981sv4/hib6NT3nb7//3JK827CvVnae9OLSxcH4/oT872pKlt6RNbrzM8i/J4yOMljf8j/15//K+o/z8YEUurfnbya/ua4tzf/hj6qVN99P+hPGn8T2+p/d/6xsSd+jedyt9c+3+i2dYfyVKM/0HLp3mY9renF4Rjb1FWt+sLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM+CWkTsi6Q2urxdq42ORgxFxF9jb2322vzCfy9ce/vqdJrX/P7/Wv5Nv8Ot/ST//v/6iv2JVfvHI2J/RHzSM9jcHz1/bXa67JMHAAAAAAAAAAAAAAAAAACAp8RQh/X/qZ97yq4dsOt6y64AUJqC+P++jHoA3af9h+oS/1Bd4h+qS/xDdYl/qC7xD9Ul/qG6xD8AAAAAADxT9h+6+0MSEUvPDTYfqf4sr6/UmgG7rVZ2BYDSuMUPVJepP1BdrvGBZIP8gY4HbXTkeubOP8HBAAAAAAAAAAAAAFA5hw9a/w9VZf0/VJf1/1Bd+fr/QyXXA+g+1/hAbLCSv3D9/4ZHAQAAAAAAAAAAAAA7aX7xxuWp2dmZ6zZefTqq0c2NRqNxM/0reFrqs/MbSTZDvSuF5lPhu3+m/Zs5wXyt3+Z+cnnvSQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQLs/AwAA//+JjCTl")
chdir(&(0x7f0000000040)='./file0\x00')
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0xfc, 0x0, &(0x7f00000000c0))
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a028}], 0x1, 0x0, 0x0, 0x804c040}, 0x0)

943.367133ms ago: executing program 3 (id=5158):
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x4c)
eventfd(0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0900000006000000080000000800000040000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000004d6af69d0000000000004600", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)

866.209489ms ago: executing program 3 (id=5159):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x752887e04b6038ce, &(0x7f00000006c0)=ANY=[@ANYBLOB="75746638006d61703d6f983c756661703d6e6f726d616c2c6909000000f2ff00003dda5de4d586f0df206d65656b416d6f64653d3078303030303010303071303030303030302c73657373696f6e3d307830faffffff30303030303030f4e4b4f82c6d61736b3d4d4159574b50be30c8486470722677b93165cfe6f62127553b2017754598752d977369672c7063723d303030303051edb228303030303030303030332c64566e745f6d6561737572652c00000000000000006bbf4d6406b59dbc529c00000000000000fada265ab14119997600a2299d2c35a2efc1bf037787a0d801f26d335ef2ba9ac2423a358ccbb776b21e1d3bf2c4be27453e1a93ea96e73bde359df03f", @ANYRESOCT=0x0, @ANYRES8], 0xfe, 0x68f, &(0x7f0000000c00)="$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")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001440)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a505000000007751e841cca555077e3a159110193dd2ff1fa7c3205bfedbe9d8f3bd23cd78a07e32fe0231368b2264f9c504b2f1f65515b2e1a38d522be18bd10a48b043ccc42646d25dfd73d06d7535f7866925d86751dfced1fd8accae669e173a659c1cfd6587d47578f4c35235138d5521f9453559c35da860e8efbcbfb42c30d294a55e1c46680bee88956f2b3599f455c7a3a49a01010000009f2f0517e4ca0e1803a20000000013d4e21b3336f1ae0796f23526ec0fd97f7325eac34c4dfafe7cc03b0864009d2e7d7ff6ff72ba8972b122b09789d99b3d0524f39d5ae913b2d22eb2c09244ba5dbe9180950f76f7049db5cb19d7962fed44e00f39ed8c13a11fa798de504e2865cd81f2b77fdd76c677f812d249c8130b018d4300000020000000db3947c85c3a9027ce9e856fa8b7fb05000000000000593d60abc9b3e67d127e56f3d3759dcfeb820634fd4d419efaefc74305b2bea2000600000051fcf5d62205561b6efaad206335a309f7b9e01446a6285f4665a7fe3cda2349f8bf400100000000000000f40f420ee83f2d9babe7b922401639ce3c4ff0850a8e078374909413f3fbd3ced3285252dc81a46ef7ce29484dc6b6adfd7a4db730fc594609654d97836f171b766ffd7526847a6bfda9c648e8aa5c558aa6d463ec9d840f3914909187b6b0776952be71b0417d33d3ab25493418ba0fbacf768e07c1a939d31f606085b9e3efc93b0f58d5ec37494d9d10d76e603129e9a726579ac7d672cacd581b7ca77b3610b74039fffd42051d4b7443e5b49c000000000000007d6173050027791c9c1e04ad3711a66da2254a6f911b1469c62a6e1e3f9c1715c009a58e6eadac8f61b45853673df72dc813f7454ae22d79ac48034282f03040889500000000179dcf66d93907cedd49e0c5752f755849953957143a0335d2f62acbf18b251ce63b29fe177745448ccc925770fac12cf9e291200df6bb669d5a57dd74df817ef2f8698f710c359afe73947afebdf5536e4db8b0231d0cbc798766ec60586f14b44775bc9d250e4515cb83275d3b495fa90000e69a68b47ac4595463e1442d88e0606a060000cc914fae896ab129ccdf8792a8435972c8391d132a2fcbd40e865d62cc7c4200000000000000000000000000000800002a77fbbccfdb1ab3d8434905f09726b8145ea99c7640faab578dc98a6134df0a10a54ce7e7ddbb709a27d977d1f91ab9ee940700009594c9a50961b7fcc56d82584dc8254df7c411fa61353a6897c4f3b9f152fdf6f2ab47adb29aefecce96c94f360e129c9f2af569c794b68b2ead404bcdd4aa9cb6a128e1ad45fd4030e1e69adf4986b7860f3122d59c079f0f9a1732f691590f45512aec4ed2413f66cac7dd022301741c576dea82005b166d6c3b9ed0c297ac197a92188a618745e78dca0b3c62f1601243089d9c687563382b0b88a7d80fd7bf7fae8a690f52db1464d29b1b926414cd35705c89662c585e32c881d917b74f027674dbc017499ba15a2e2900000000000000000000000000007b593ecbdd162fee9f239a3c615b3e9a3fb0af254bdd247a5a5abdbc0123c950eec0f1800b295be71418dd65de15e11beef9630499c70fce74135a7c7c8e818b79b85ff65d59d89492d7a663d3f25651e252ab49d358eac853ffe182ee37a5db085a072647719cb8604ba2e0b80af3f1867bd8fb6afca671437e0a5a9d5a088436739262d894986882ec0fb419a377ef47f4920a5de6d8de0d3090b4cb6b773e825442d351f980eed0d997a4d98a5121e941b145e2186546c646128a3e69f52fcad83a026def90b9eb55f4a0a2251bbae428c6c017b5a47f1580831a7ce232857e6aa9e777e99da1a3ad03fdc93fa7ed96228deac5e3bce983971041297a6ba18783a2edc7e3901cc891035872c61e7ea375b0902be0c5cc7fdef968ba1ca17ce5e11f2f384cd28c1194f56d3cf074e8ba4e60e84dc2f352c3cd170581aee0c93ca8ceff84cda40325d340759e79e5c4bcec227e37f7ec2193c78877fb319ec1f2d4dcf1d46a15cde1d6cecce6ecdb0c0a3413394d51341a7b3606ad8c29b6dbf6be3265b528c3208de35161bfe19678df43a45b314e5a0f8754cfaf4f9d3fdf9c8f7b7c296bf2e632d25ba8ee6369b362a8e4c9dff176d482d32249c93680a04f6464f184acfd0376662fee9e1031e569248db9bc724cdd97976a4d7c5c5172d1383fa1e442f68a14b747a9f2597bf115dd0111fe8ba3584a43176f33bd39a408f8648b19839bba9cc47624ea19e46dbbdf0faf591bcdc8613828a0c5a40c04ae34bbf4a0e27828b0c7cb9d7a7455db030425a4bd69cf6dcb4b1d066f8ef4ea1c710e05819df82d5cc94ace6b41c2de37a2eaf24f24b3d9a7dd4d197d51407be3e90000000000000000dbc0b0d6e11ccb71437ebea7ad01d5b93a7a0561e4a1b3fa1aa9c75f3aaec4ace1b6201a3e007b657be62df59133b4d8f0f145d9fc954cc7792077268bf0977e2a699722ce3dbb97248b8a8a771dd0f7d9c97e6587524a44fd6d49330ccbc39ca277b84f7f0a39759ef0b42388bd69fe341a925e8cdc5d7b2d6ddb7331a081bd0672bf4d02255de095a179e51bf5492d4e89c3cbad59db725c0dd7e35cbd9887175286a37d7621a361eb830cc5b842b11b5d040ccceb254d6a0c9c43718d0816bb2465928e236101b8cd46b5ef9cb930378a9249cbb41b92fe3caef70845cde9bb78d71c512153d2f1d765b56d2e5ef3e3d34975787646630051074c9706747fda873ccfdb394fc269c8cfadc0a52c3402f3920001ddd312969ecc08a99f5a3be58de34149af8360a7db3f301e656c5485d5de03be99b04e3593e8e18d7b635ca24a915c82122ac7a5bf6d011ee91573d66fc9522a76fa00211d62dc123fd51d1cb2ce1d4f3a62f99e2d93b2d34324a962a3762b6e8d7d3a7f73af6eb264b44822d8847442c3df4771df9a5d79443174b191878fe586facc18035f09fd70a137809ce970e31c4e6a8e48ce2fc30316087caaa2ed0bda52e969fda35236ac9aedb241a114a8cf1c49b8bd3f73"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f00000005c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00', r0}, 0x10)
open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r2)
sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000009008500000082"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r5}, 0x10)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=@deltaction={0x38, 0x18, 0x1, 0x70bd28, 0x25dfdbfe, {0xa}, [@TCA_ACT_TAB={0x24, 0x1, [{0xc, 0x80, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x38}}, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000040)=0x3, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r7 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x12, r7, 0x0)
getsockopt$MRT(0xffffffffffffffff, 0x0, 0xcf, 0x0, &(0x7f0000000300))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)={@cgroup, 0xffffffffffffffff, 0x24}, 0x14)
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r8)
ptrace$setregs(0xd, r8, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
ptrace$getregset(0x4204, r8, 0x1, &(0x7f0000000480)={&(0x7f0000001240)=""/4096, 0x1000})
r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
write$sndseq(r9, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)

799.391295ms ago: executing program 2 (id=5160):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
timer_settime(r1, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x1, 0x0)

784.502776ms ago: executing program 3 (id=5161):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pipe2(&(0x7f0000001cc0)={<r1=>0xffffffffffffffff}, 0x80000)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000880)=ANY=[@ANYRES8=r0, @ANYRESHEX=r1, @ANYRESDEC, @ANYBLOB="8a64c64b51fec8e5f763f871cb68de26d0c07b0c2d97ee571931f0353375f826f6ada18a33d3404da9e5151da419ca5b23eadf3cda16944eeedf291f86442d701c713d47247aa598ec0c511e50c279f64d01fa9456e847b4af9597b845f3b333c56279a1acdc582337cb184098b9a83be624fb9e049cfff5d44feddb393ebf409cef6f9cba74e198d8680506d0d72a8e30aaf97eb7df4c599eaa7da945d925c6dfbd5af6d230f6e1dab71a3661739937a9d0889a01321107cbf2b847eff2a5e6fe6b2ab4414dcf7114ca4ecfdb68667376", @ANYBLOB=',access=', @ANYRES16=0x0])

737.4225ms ago: executing program 0 (id=5163):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
socket$netlink(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='sched_switch\x00', r3, 0x0, 0xffffffffffffffff}, 0x18)
close(0x3)
r4 = socket$inet6(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4044000)
sendto$inet6(r4, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)
write(r2, &(0x7f0000000740)="cc", 0x1)
sendfile(r2, r1, 0x0, 0x3ffff)
sendfile(r2, r1, 0x0, 0x7fffeffd)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x20, 0xb, &(0x7f0000000180)=ANY=[@ANYRESHEX], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
openat(r2, &(0x7f0000000300)='./bus/file0\x00', 0xa4001, 0x0)
sync()
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB='-4'], 0xc)

731.78792ms ago: executing program 2 (id=5164):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff", 0xe}], 0x2}, 0x0)

731.4198ms ago: executing program 3 (id=5165):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffc4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
lseek(r2, 0x10001, 0x0)

700.437913ms ago: executing program 1 (id=5166):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
openat$rfkill(0xffffffffffffff9c, 0x0, 0x40900, 0x0)
io_setup(0x3, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x1}, 0x50)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x8}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}]}, 0x50}}, 0x0)
r3 = socket$igmp6(0xa, 0x3, 0x3a)
bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffff"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[], 0x0, 0xa}, 0x94)
socket$caif_stream(0x25, 0x1, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r4 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x200003, 0x1af}, &(0x7f0000000040)=<r5=>0x0, &(0x7f00000000c0))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_uring_enter(r4, 0x47f8, 0x0, 0x0, 0x0, 0x0)
setsockopt$MRT6_ADD_MFC(r3, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0xfffc, 0x103, @loopback, 0xa3c}, {0xa, 0xfffe, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x16}, 0x4}, 0x1000, {[0x9, 0xdaa, 0x7fff, 0x31, 0x5, 0x1, 0x6d2e, 0xc33]}}, 0x5c)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a3100"], 0x140}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)

692.666103ms ago: executing program 2 (id=5167):
r0 = gettid()
bpf$MAP_CREATE(0x0, 0x0, 0x48)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x2)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, 0x0, 0x0)

663.385206ms ago: executing program 3 (id=5168):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.numa_stat\x00', 0x275a, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f00000002c0), 0x1}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2)
syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$kcm(r1, 0x0, 0x894)
setsockopt$RDS_GET_MR(r1, 0x114, 0x2, &(0x7f0000000280)={{&(0x7f0000000180)=""/144, 0x90}, &(0x7f0000000000), 0x1}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
open_by_handle_at(0xffffffffffffffff, 0x0, 0x0)
r2 = memfd_create(0x0, 0x6)
fallocate(r2, 0x0, 0x9, 0x4)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x40400)
ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000000)={0x0, 0x5, 0x952})

637.189148ms ago: executing program 4 (id=5169):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10)
accept$unix(0xffffffffffffffff, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kfree\x00', r4, 0x0, 0x40}, 0x18)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000880)=ANY=[@ANYRES8=r1, @ANYRESHEX, @ANYRESDEC, @ANYBLOB="8a64c64b51fec8e5f763f871cb68de26d0c07b0c2d97ee571931f0353375f826f6ada18a33d3404da9e5151da419ca5b23eadf3cda16944eeedf291f86442d701c713d47247aa598ec0c511e50c279f64d01fa9456e847b4af9597b845f3b333c56279a1acdc582337cb184098b9a83be624fb9e049cfff5d44feddb393ebf409cef6f9cba74e198d8680506d0d72a8e30aaf97eb7df4c599eaa7da945d925c6dfbd5af6d230f6e1dab71a3661739937a9d0889a01321107cbf2b847eff2a5e6fe6b2ab4414dcf7114ca4ecfdb68667376", @ANYBLOB=',access=', @ANYRES16=0x0])

610.67041ms ago: executing program 4 (id=5170):
socket$nl_route(0x10, 0x3, 0x0)
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)
r2 = socket$inet6(0xa, 0x800000000000002, 0x0)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000400000000000009000000000000000000000000f189f3ea52758b7659b2109f0dfcd9b620d5afd5e814f26d72b50622f07a1a89b3c2d6d089efb2f27b9e4aed10769e41f4ebe786949f43d58d502e108962582d8ceccc5027fa85d5333e7c0f89d31c537b6bf93db33c9beaaf0ef604468fffefeb101cf837d14a21ed1a0e78c6d69c39a1650c8d3ff31358638440c15cd9bee6"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10)
timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000b80)={@map, 0x15, 0x0, 0x6, &(0x7f0000000900)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000ac0)=[0x0], &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r5=>0x0}, 0x40)
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="00100002e303c4445ac51400"/28, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000040000000400"/28], 0x50)
r7 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000c80)={0xffffffffffffffff, 0xffffffffffffffff, 0x37, 0x0, @void}, 0x10)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000bc0)={@map=r6, 0xffffffffffffffff, 0x1d, 0x2000, 0xffffffffffffffff, @value=r7, @void, @void, @void, r5}, 0x20)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r8=>r2, {0x7}}, './file0\x00'})
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[@ANYRES32=r8, @ANYRES32=r3, @ANYBLOB='0\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="b8a53ff5fe67adb7d8d8c0e81e3e33f53562763303a25e16aba8598e1fe1526ecee913e9a6aafc267936caec8ced983a410052ab38f797df74e2625c59361465f921bbe97c37c9ae21a1804a97b119f3b023898a389a300afece0c4e38d45c2c001dc1f3f7e45b5420599a8500dc0013321d4058957567a4eb", @ANYRES64=r5], 0x20)
timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)=<r9=>0x0)
timer_settime(r9, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
r10 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}}, 0x0)
r11 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x2, 0x0, 0x691, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x800, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0)

440.236244ms ago: executing program 1 (id=5171):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x752887e04b6038ce, &(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRESOCT=0x0, @ANYRES8], 0xfe, 0x68f, &(0x7f0000000c00)="$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")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001440)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a505000000007751e841cca555077e3a159110193dd2ff1fa7c3205bfedbe9d8f3bd23cd78a07e32fe0231368b2264f9c504b2f1f65515b2e1a38d522be18bd10a48b043ccc42646d25dfd73d06d7535f7866925d86751dfced1fd8accae669e173a659c1cfd6587d47578f4c35235138d5521f9453559c35da860e8efbcbfb42c30d294a55e1c46680bee88956f2b3599f455c7a3a49a01010000009f2f0517e4ca0e1803a20000000013d4e21b3336f1ae0796f23526ec0fd97f7325eac34c4dfafe7cc03b0864009d2e7d7ff6ff72ba8972b122b09789d99b3d0524f39d5ae913b2d22eb2c09244ba5dbe9180950f76f7049db5cb19d7962fed44e00f39ed8c13a11fa798de504e2865cd81f2b77fdd76c677f812d249c8130b018d4300000020000000db3947c85c3a9027ce9e856fa8b7fb05000000000000593d60abc9b3e67d127e56f3d3759dcfeb820634fd4d419efaefc74305b2bea2000600000051fcf5d62205561b6efaad206335a309f7b9e01446a6285f4665a7fe3cda2349f8bf400100000000000000f40f420ee83f2d9babe7b922401639ce3c4ff0850a8e078374909413f3fbd3ced3285252dc81a46ef7ce29484dc6b6adfd7a4db730fc594609654d97836f171b766ffd7526847a6bfda9c648e8aa5c558aa6d463ec9d840f3914909187b6b0776952be71b0417d33d3ab25493418ba0fbacf768e07c1a939d31f606085b9e3efc93b0f58d5ec37494d9d10d76e603129e9a726579ac7d672cacd581b7ca77b3610b74039fffd42051d4b7443e5b49c000000000000007d6173050027791c9c1e04ad3711a66da2254a6f911b1469c62a6e1e3f9c1715c009a58e6eadac8f61b45853673df72dc813f7454ae22d79ac48034282f03040889500000000179dcf66d93907cedd49e0c5752f755849953957143a0335d2f62acbf18b251ce63b29fe177745448ccc925770fac12cf9e291200df6bb669d5a57dd74df817ef2f8698f710c359afe73947afebdf5536e4db8b0231d0cbc798766ec60586f14b44775bc9d250e4515cb83275d3b495fa90000e69a68b47ac4595463e1442d88e0606a060000cc914fae896ab129ccdf8792a8435972c8391d132a2fcbd40e865d62cc7c4200000000000000000000000000000800002a77fbbccfdb1ab3d8434905f09726b8145ea99c7640faab578dc98a6134df0a10a54ce7e7ddbb709a27d977d1f91ab9ee940700009594c9a50961b7fcc56d82584dc8254df7c411fa61353a6897c4f3b9f152fdf6f2ab47adb29aefecce96c94f360e129c9f2af569c794b68b2ead404bcdd4aa9cb6a128e1ad45fd4030e1e69adf4986b7860f3122d59c079f0f9a1732f691590f45512aec4ed2413f66cac7dd022301741c576dea82005b166d6c3b9ed0c297ac197a92188a618745e78dca0b3c62f1601243089d9c687563382b0b88a7d80fd7bf7fae8a690f52db1464d29b1b926414cd35705c89662c585e32c881d917b74f027674dbc017499ba15a2e2900000000000000000000000000007b593ecbdd162fee9f239a3c615b3e9a3fb0af254bdd247a5a5abdbc0123c950eec0f1800b295be71418dd65de15e11beef9630499c70fce74135a7c7c8e818b79b85ff65d59d89492d7a663d3f25651e252ab49d358eac853ffe182ee37a5db085a072647719cb8604ba2e0b80af3f1867bd8fb6afca671437e0a5a9d5a088436739262d894986882ec0fb419a377ef47f4920a5de6d8de0d3090b4cb6b773e825442d351f980eed0d997a4d98a5121e941b145e2186546c646128a3e69f52fcad83a026def90b9eb55f4a0a2251bbae428c6c017b5a47f1580831a7ce232857e6aa9e777e99da1a3ad03fdc93fa7ed96228deac5e3bce983971041297a6ba18783a2edc7e3901cc891035872c61e7ea375b0902be0c5cc7fdef968ba1ca17ce5e11f2f384cd28c1194f56d3cf074e8ba4e60e84dc2f352c3cd170581aee0c93ca8ceff84cda40325d340759e79e5c4bcec227e37f7ec2193c78877fb319ec1f2d4dcf1d46a15cde1d6cecce6ecdb0c0a3413394d51341a7b3606ad8c29b6dbf6be3265b528c3208de35161bfe19678df43a45b314e5a0f8754cfaf4f9d3fdf9c8f7b7c296bf2e632d25ba8ee6369b362a8e4c9dff176d482d32249c93680a04f6464f184acfd0376662fee9e1031e569248db9bc724cdd97976a4d7c5c5172d1383fa1e442f68a14b747a9f2597bf115dd0111fe8ba3584a43176f33bd39a408f8648b19839bba9cc47624ea19e46dbbdf0faf591bcdc8613828a0c5a40c04ae34bbf4a0e27828b0c7cb9d7a7455db030425a4bd69cf6dcb4b1d066f8ef4ea1c710e05819df82d5cc94ace6b41c2de37a2eaf24f24b3d9a7dd4d197d51407be3e90000000000000000dbc0b0d6e11ccb71437ebea7ad01d5b93a7a0561e4a1b3fa1aa9c75f3aaec4ace1b6201a3e007b657be62df59133b4d8f0f145d9fc954cc7792077268bf0977e2a699722ce3dbb97248b8a8a771dd0f7d9c97e6587524a44fd6d49330ccbc39ca277b84f7f0a39759ef0b42388bd69fe341a925e8cdc5d7b2d6ddb7331a081bd0672bf4d02255de095a179e51bf5492d4e89c3cbad59db725c0dd7e35cbd9887175286a37d7621a361eb830cc5b842b11b5d040ccceb254d6a0c9c43718d0816bb2465928e236101b8cd46b5ef9cb930378a9249cbb41b92fe3caef70845cde9bb78d71c512153d2f1d765b56d2e5ef3e3d34975787646630051074c9706747fda873ccfdb394fc269c8cfadc0a52c3402f3920001ddd312969ecc08a99f5a3be58de34149af8360a7db3f301e656c5485d5de03be99b04e3593e8e18d7b635ca24a915c82122ac7a5bf6d011ee91573d66fc9522a76fa00211d62dc123fd51d1cb2ce1d4f3a62f99e2d93b2d34324a962a3762b6e8d7d3a7f73af6eb264b44822d8847442c3df4771df9a5d79443174b191878fe586facc18035f09fd70a137809ce970e31c4e6a8e48ce2fc30316087caaa2ed0bda52e969fda35236ac9aedb241a114a8cf1c49b8bd3f73"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f00000005c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00', r0}, 0x10)
open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r2)
sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000009008500000082"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r5}, 0x10)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=@deltaction={0x38, 0x18, 0x1, 0x70bd28, 0x25dfdbfe, {0xa}, [@TCA_ACT_TAB={0x24, 0x1, [{0xc, 0x80, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x38}}, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000040)=0x3, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r7 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x12, r7, 0x0)
getsockopt$MRT(0xffffffffffffffff, 0x0, 0xcf, 0x0, &(0x7f0000000300))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)={@cgroup, 0xffffffffffffffff, 0x24}, 0x14)
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r8)
ptrace$setregs(0xd, r8, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
ptrace$getregset(0x4204, r8, 0x1, &(0x7f0000000480)={&(0x7f0000001240)=""/4096, 0x1000})
r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
write$sndseq(r9, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)

301.049895ms ago: executing program 4 (id=5172):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x752887e04b6038ce, &(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRESOCT=0x0, @ANYRES8], 0xfe, 0x68f, &(0x7f0000000c00)="$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")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001440)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f00000005c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00', r0}, 0x10)
open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r2)
sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000090085000000820000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r5}, 0x10)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=@deltaction={0x38, 0x18, 0x1, 0x70bd28, 0x25dfdbfe, {0xa}, [@TCA_ACT_TAB={0x24, 0x1, [{0xc, 0x80, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x38}}, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000040)=0x3, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r7 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x12, r7, 0x0)
getsockopt$MRT(0xffffffffffffffff, 0x0, 0xcf, 0x0, &(0x7f0000000300))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)={@cgroup, 0xffffffffffffffff, 0x24}, 0x14)
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r8)
ptrace$setregs(0xd, r8, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
ptrace$getregset(0x4204, r8, 0x1, &(0x7f0000000480)={&(0x7f0000001240)=""/4096, 0x1000})
r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
write$sndseq(r9, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)

260.287838ms ago: executing program 3 (id=5173):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
io_setup(0x3, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x1}, 0x50)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x8}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}]}, 0x50}}, 0x0)
r2 = socket$igmp6(0xa, 0x3, 0x3a)
bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[], 0x0, 0xa}, 0x94)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r3 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x200003, 0x1af}, &(0x7f0000000040)=<r4=>0x0, &(0x7f00000000c0)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0, 0xfffffffffffffea3}], 0x2}, 0x0, 0x3, 0x0, {0x2}})
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_uring_enter(r3, 0x47f8, 0x0, 0x0, 0x0, 0x0)
setsockopt$MRT6_ADD_MFC(r2, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0xfffc, 0x103, @loopback, 0xa3c}, {0xa, 0xfffe, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x16}, 0x4}, 0x1000, {[0x9, 0xdaa, 0x7fff, 0x31, 0x5, 0x1, 0x6d2e, 0xc33]}}, 0x5c)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)

250.527649ms ago: executing program 1 (id=5174):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
timer_settime(r1, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x1, 0x0)

180.945745ms ago: executing program 1 (id=5175):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x108, 0xa, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x537}, [@NFTA_SET_USERDATA={0xe9, 0xd, 0x1, 0x0, "eea2e49ccc16590b9cacab1a1bc9dd155dc16756d651c7dabc23c1ecc2991c104d6eeb4f28a7805e839d9a5dc62447d97c3f0dcbc917cea0e18fdfaaeae2edc845503851291c934baf46bcca4912cc108cd9c33dce9d5dfe91c1c334d65c11aba5e7a73c168bc58a9972c04f8f4d74321b1ac3af2cccbf8617e36f0bb122ab42d492990e51e063e3cf6d804ea664d7235587c717553604ab2b1b82844b8cd2e80313232955b5dea1588c26c76ab93ad1ab11c4196eddaf7e48609b699e05a5d851cda23e3dcda9685445efe3cc2512c6599efcb3c20e9e1a15611ccfaa82a59781550c4fcd"}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3d}]}, 0x108}, 0x1, 0x0, 0x0, 0x4}, 0x0)
close(r0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0xffffffffffffffff, <r1=>0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000400)={0x0, r1}, 0x8)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0xffffffff, 0x10001, 0x7, 0x4000, r1, 0xc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x4, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r2}, &(0x7f00000004c0), &(0x7f0000000540)}, 0x20)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0)
r5 = socket$inet6(0xa, 0x802, 0x0)
bind$inet6(r5, &(0x7f0000000640)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c)
setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c)
sendmmsg$inet6(r5, &(0x7f0000001f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@dstopts={{0x18}}, @tclass={{0x14, 0x29, 0x43, 0x4}}], 0x30}}], 0x1, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r7}, 0x10)
unshare(0x6a040000)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ_RESET(r8, &(0x7f00000044c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x15, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x206}}, 0x14}}, 0x40080a0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='GPL\x00')
socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r9, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7})
ioctl$sock_netdev_private(r9, 0x8943, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)

180.489165ms ago: executing program 4 (id=5176):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pipe2(&(0x7f0000001cc0)={<r1=>0xffffffffffffffff}, 0x80000)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000880)=ANY=[@ANYRES8=r0, @ANYRESHEX=r1, @ANYRESDEC, @ANYBLOB="8a64c64b51fec8e5f763f871cb68de26d0c07b0c2d97ee571931f0353375f826f6ada18a33d3404da9e5151da419ca5b23eadf3cda16944eeedf291f86442d701c713d47247aa598ec0c511e50c279f64d01fa9456e847b4af9597b845f3b333c56279a1acdc582337cb184098b9a83be624fb9e049cfff5d44feddb393ebf409cef6f9cba74e198d8680506d0d72a8e30aaf97eb7df4c599eaa7da945d925c6dfbd5af6d230f6e1dab71a3661739937a9d0889a01321107cbf2b847eff2a5e6fe6b2ab4414dcf7114ca4ecfdb68667376", @ANYBLOB=',access=', @ANYRES16=0x0])

142.158348ms ago: executing program 4 (id=5177):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r1=>r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYRESDEC=r1], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000000), 0x4, 0x5eb, &(0x7f0000000c00)="$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")
chdir(&(0x7f0000000040)='./file0\x00')
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a028}], 0x1, 0x0, 0x0, 0x804c040}, 0x0)

0s ago: executing program 4 (id=5178):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
socket$netlink(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='sched_switch\x00', r3, 0x0, 0xffffffffffffffff}, 0x18)
close(0x3)
r4 = socket$inet6(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4044000)
sendto$inet6(r4, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)
write(r2, &(0x7f0000000740)="cc", 0x1)
sendfile(r2, r1, 0x0, 0x3ffff)
sendfile(r2, r1, 0x0, 0x7fffeffd)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x20, 0xb, &(0x7f0000000180)=ANY=[@ANYRESHEX], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
openat(r2, &(0x7f0000000300)='./bus/file0\x00', 0xa4001, 0x0)
sync()
mount$9p_unix(&(0x7f0000000000)='\x00', &(0x7f0000000240)='./bus/file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=unix'])
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB], 0xc)

kernel console output (not intermixed with test programs):

31 callbacks suppressed
[  313.106511][ T3661] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0
[  313.120236][ T3661] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0
[  313.127673][ T3661] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0
[  313.135100][ T3661] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0
[  313.142634][ T3661] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0
[  313.150089][ T3661] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0
[  313.150113][ T3661] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0
[  313.150135][ T3661] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0
[  313.150190][ T3661] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0
[  313.150213][ T3661] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0
[  313.163099][ T3661] hid-generic 0008:0006:0007.0002: hidraw0: <UNKNOWN> HID v0.0b Device [syz1] on syz1
[  313.193392][T17677] loop2: detected capacity change from 0 to 1024
[  313.197088][T17677] EXT4-fs: inline encryption not supported
[  313.197113][T17677] EXT4-fs: Ignoring removed i_version option
[  313.207472][T17677] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  313.208954][T17677] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #3: block 1: comm syz.2.4321: lblock 1 mapped to illegal pblock 1 (length 1)
[  313.209090][T17677] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.4321: Failed to acquire dquot type 0
[  313.209182][T17677] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.4321: Freeing blocks not in datazone - block = 0, count = 4096
[  313.209364][T17677] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.4321: Invalid inode bitmap blk 0 in block_group 0
[  313.209455][T17677] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem
[  313.209569][T17677] EXT4-fs (loop2): 1 orphan inode deleted
[  313.210117][T17677] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  313.212700][T17677] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm syz.2.4321: lblock 1 mapped to illegal pblock 1 (length 1)
[  313.212848][T17677] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.4321: Failed to acquire dquot type 0
[  313.240906][T17366] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:14: lblock 1 mapped to illegal pblock 1 (length 1)
[  313.241232][T17366] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:14: Failed to release dquot type 0
[  313.250030][T17682] fido_id[17682]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  313.255629][T17673] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: comm syz.4.4301: lblock 0 mapped to illegal pblock 0 (length 3)
[  313.255959][T17673] EXT4-fs (loop4): Remounting filesystem read-only
[  313.267023][T17693] loop3: detected capacity change from 0 to 164
[  313.270306][T12605] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  313.281834][T17693] bio_check_eod: 316 callbacks suppressed
[  313.281850][T17693] syz.3.4324: attempt to access beyond end of device
[  313.281850][T17693] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  313.281913][T17693] syz.3.4324: attempt to access beyond end of device
[  313.281913][T17693] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164
[  313.342137][T17698] loop3: detected capacity change from 0 to 164
[  313.345708][T17698] syz.3.4326: attempt to access beyond end of device
[  313.345708][T17698] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  313.345785][T17698] syz.3.4326: attempt to access beyond end of device
[  313.345785][T17698] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164
[  313.649373][T14119] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  313.678751][T17705] loop3: detected capacity change from 0 to 128
[  313.688747][   T29] kauditd_printk_skb: 495 callbacks suppressed
[  313.688762][   T29] audit: type=1326 audit(1755126707.213:15001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17702 comm="syz.1.4329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bebb6ebe9 code=0x7ffc0000
[  313.722151][T17703] loop1: detected capacity change from 0 to 164
[  313.759409][T17708] loop4: detected capacity change from 0 to 164
[  313.773219][   T29] audit: type=1326 audit(1755126707.243:15002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17702 comm="syz.1.4329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f0bebb6ebe9 code=0x7ffc0000
[  313.796884][   T29] audit: type=1326 audit(1755126707.243:15003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17702 comm="syz.1.4329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0bebb6ec23 code=0x7ffc0000
[  313.804311][T17705] syz.3.4327: attempt to access beyond end of device
[  313.804311][T17705] loop3: rw=2049, sector=145, nr_sectors = 16 limit=128
[  313.820378][   T29] audit: type=1326 audit(1755126707.243:15004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17702 comm="syz.1.4329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0bebb6d69f code=0x7ffc0000
[  313.857302][   T29] audit: type=1326 audit(1755126707.243:15005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17702 comm="syz.1.4329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f0bebb6ec77 code=0x7ffc0000
[  313.880878][   T29] audit: type=1326 audit(1755126707.243:15006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17702 comm="syz.1.4329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0bebb6d550 code=0x7ffc0000
[  313.904648][   T29] audit: type=1326 audit(1755126707.243:15007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17702 comm="syz.1.4329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0bebb6e7eb code=0x7ffc0000
[  313.928212][   T29] audit: type=1326 audit(1755126707.263:15008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17702 comm="syz.1.4329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f0bebb6d84a code=0x7ffc0000
[  313.951693][   T29] audit: type=1326 audit(1755126707.263:15009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17702 comm="syz.1.4329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f0bebb6d84a code=0x7ffc0000
[  313.975113][   T29] audit: type=1326 audit(1755126707.263:15010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17702 comm="syz.1.4329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f0bebb6d457 code=0x7ffc0000
[  314.000815][T17705] syz.3.4327: attempt to access beyond end of device
[  314.000815][T17705] loop3: rw=2049, sector=169, nr_sectors = 8 limit=128
[  314.014830][T17705] syz.3.4327: attempt to access beyond end of device
[  314.014830][T17705] loop3: rw=2049, sector=185, nr_sectors = 8 limit=128
[  314.028586][T17705] syz.3.4327: attempt to access beyond end of device
[  314.028586][T17705] loop3: rw=2049, sector=201, nr_sectors = 8 limit=128
[  314.042318][T17705] syz.3.4327: attempt to access beyond end of device
[  314.042318][T17705] loop3: rw=2049, sector=217, nr_sectors = 8 limit=128
[  314.056825][T17705] syz.3.4327: attempt to access beyond end of device
[  314.056825][T17705] loop3: rw=2049, sector=233, nr_sectors = 8 limit=128
[  314.127120][T17714] loop3: detected capacity change from 0 to 512
[  314.162140][T17714] EXT4-fs: inline encryption not supported
[  314.174580][T17714] ext4: Unknown parameter 'noacl'
[  314.332620][T17724] lo speed is unknown, defaulting to 1000
[  314.344846][T17733] loop1: detected capacity change from 0 to 128
[  314.506316][T17744] loop2: detected capacity change from 0 to 128
[  314.693228][T17756] loop4: detected capacity change from 0 to 512
[  314.714435][T17756] EXT4-fs: Ignoring removed nobh option
[  314.758580][T17756] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4347: bg 0: block 393: padding at end of block bitmap is not set
[  314.785930][T17763] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  314.785930][T17763]    program syz.2.4350 not setting count and/or reply_len properly
[  314.857417][T17756] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  314.890255][T17756] EXT4-fs (loop4): 2 truncates cleaned up
[  314.896424][T17756] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  314.922811][T14119] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  314.980662][T17769] lo speed is unknown, defaulting to 1000
[  315.009518][T17778] loop4: detected capacity change from 0 to 512
[  315.018625][T17780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  315.032938][T17780] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  315.035456][T17778] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  315.071845][T17783] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  315.071845][T17783]    program syz.3.4355 not setting count and/or reply_len properly
[  315.101065][T17785] loop1: detected capacity change from 0 to 164
[  315.144133][T17787] __nla_validate_parse: 15 callbacks suppressed
[  315.144150][T17787] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4357'.
[  315.178778][T17789] loop1: detected capacity change from 0 to 128
[  315.236232][T17792] loop3: detected capacity change from 0 to 128
[  315.258870][T17792] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  315.277163][T17792] ext4 filesystem being mounted at /236/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  315.392353][T17801] loop2: detected capacity change from 0 to 512
[  315.455152][T17801] netlink: 'syz.2.4361': attribute type 13 has an invalid length.
[  315.479919][T13859] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  315.506687][T17801] loop2: detected capacity change from 0 to 1024
[  315.515996][T17801] EXT4-fs: inline encryption not supported
[  315.521896][T17801] EXT4-fs: Ignoring removed i_version option
[  315.550771][T17805] loop3: detected capacity change from 0 to 512
[  315.559419][T17801] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  315.580371][T17805] EXT4-fs: inline encryption not supported
[  315.589152][T17805] ext4: Unknown parameter 'noacl'
[  315.598198][T17801] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #3: block 1: comm syz.2.4361: lblock 1 mapped to illegal pblock 1 (length 1)
[  315.641433][T17801] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.4361: Failed to acquire dquot type 0
[  315.699467][T17801] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.4361: Freeing blocks not in datazone - block = 0, count = 4096
[  315.733663][T17801] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.4361: Invalid inode bitmap blk 0 in block_group 0
[  315.767337][T17372] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:20: lblock 1 mapped to illegal pblock 1 (length 1)
[  315.831682][T17801] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem
[  315.847836][T17372] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:20: Failed to release dquot type 0
[  315.884615][T17801] EXT4-fs (loop2): 1 orphan inode deleted
[  315.905854][T17801] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  315.986454][T17801] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm syz.2.4361: lblock 1 mapped to illegal pblock 1 (length 1)
[  316.035526][T17801] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.4361: Failed to acquire dquot type 0
[  316.096960][T14119] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  316.111352][T17810] netlink: 120 bytes leftover after parsing attributes in process `syz.0.4365'.
[  316.120491][T17810] netlink: 120 bytes leftover after parsing attributes in process `syz.0.4365'.
[  316.142175][T12605] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  316.184672][T17818] loop4: detected capacity change from 0 to 128
[  316.217384][T17822] loop2: detected capacity change from 0 to 128
[  316.333275][T17828] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17828 comm=syz.0.4368
[  316.403215][T17823] 9pnet_fd: Insufficient options for proto=fd
[  316.404316][T17832] loop4: detected capacity change from 0 to 164
[  316.460676][T17834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  316.477929][T17834] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  316.482845][T17836] loop1: detected capacity change from 0 to 164
[  316.560507][T17843] loop1: detected capacity change from 0 to 164
[  316.585592][T17831] lo speed is unknown, defaulting to 1000
[  316.605507][T17846] loop1: detected capacity change from 0 to 512
[  316.615958][T17846] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  316.828755][T17854] netlink: 120 bytes leftover after parsing attributes in process `syz.2.4378'.
[  316.837902][T17854] netlink: 120 bytes leftover after parsing attributes in process `syz.2.4378'.
[  316.882499][T17861] loop2: detected capacity change from 0 to 164
[  317.054400][T17867] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4382'.
[  317.073519][T17869] bridge0: entered allmulticast mode
[  317.078987][T17871] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4383'.
[  317.089541][T17871] bridge_slave_1: left allmulticast mode
[  317.095212][T17871] bridge_slave_1: left promiscuous mode
[  317.101018][T17871] bridge0: port 2(bridge_slave_1) entered disabled state
[  317.115194][T17873] loop4: detected capacity change from 0 to 164
[  317.125677][T17875] loop3: detected capacity change from 0 to 164
[  317.129549][T17878] loop2: detected capacity change from 0 to 164
[  317.141401][T17871] bridge_slave_0: left allmulticast mode
[  317.147073][T17871] bridge_slave_0: left promiscuous mode
[  317.153151][T17871] bridge0: port 1(bridge_slave_0) entered disabled state
[  317.178178][T17871] bridge0 (unregistering): left allmulticast mode
[  317.393623][T17880] lo speed is unknown, defaulting to 1000
[  317.418711][T17900] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4395'.
[  317.427795][T17900] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4395'.
[  317.520911][T17910] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17910 comm=syz.2.4394
[  317.547952][T17907] loop4: detected capacity change from 0 to 128
[  317.562855][T17903] 9pnet_fd: Insufficient options for proto=fd
[  317.606794][T17912] loop4: detected capacity change from 0 to 128
[  317.614298][T12885] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  317.666326][T17914] loop4: detected capacity change from 0 to 1024
[  317.674686][T17914] EXT4-fs: Ignoring removed orlov option
[  317.699723][T17914] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  317.759670][T14119] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  317.894487][T17938] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  317.894487][T17938]    program syz.3.4408 not setting count and/or reply_len properly
[  317.956805][T17943] FAULT_INJECTION: forcing a failure.
[  317.956805][T17943] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  317.969907][T17943] CPU: 0 UID: 0 PID: 17943 Comm: syz.3.4410 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094 #0 PREEMPT(voluntary) 
[  317.969961][T17943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  317.969970][T17943] Call Trace:
[  317.969977][T17943]  <TASK>
[  317.969984][T17943]  __dump_stack+0x1d/0x30
[  317.970005][T17943]  dump_stack_lvl+0xe8/0x140
[  317.970096][T17943]  dump_stack+0x15/0x1b
[  317.970113][T17943]  should_fail_ex+0x265/0x280
[  317.970132][T17943]  should_fail+0xb/0x20
[  317.970151][T17943]  should_fail_usercopy+0x1a/0x20
[  317.970173][T17943]  _copy_to_user+0x20/0xa0
[  317.970271][T17943]  simple_read_from_buffer+0xb5/0x130
[  317.970300][T17943]  proc_fail_nth_read+0x10e/0x150
[  317.970377][T17943]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  317.970405][T17943]  vfs_read+0x1a5/0x770
[  317.970425][T17943]  ? strncpy_from_user+0x177/0x230
[  317.970486][T17943]  ? __rcu_read_unlock+0x4f/0x70
[  317.970506][T17943]  ? __fget_files+0x184/0x1c0
[  317.970533][T17943]  ksys_read+0xda/0x1a0
[  317.970557][T17943]  __x64_sys_read+0x40/0x50
[  317.970609][T17943]  x64_sys_call+0x27bc/0x2ff0
[  317.970631][T17943]  do_syscall_64+0xd2/0x200
[  317.970657][T17943]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  317.970681][T17943]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  317.970778][T17943]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  317.970797][T17943] RIP: 0033:0x7f3ca296d5fc
[  317.970886][T17943] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  317.970904][T17943] RSP: 002b:00007f3ca13d7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  317.970923][T17943] RAX: ffffffffffffffda RBX: 00007f3ca2b95fa0 RCX: 00007f3ca296d5fc
[  317.970934][T17943] RDX: 000000000000000f RSI: 00007f3ca13d70a0 RDI: 0000000000000003
[  317.970948][T17943] RBP: 00007f3ca13d7090 R08: 0000000000000000 R09: 0000000000000000
[  317.970961][T17943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  317.970974][T17943] R13: 00007f3ca2b96038 R14: 00007f3ca2b95fa0 R15: 00007ffca3287308
[  317.971017][T17943]  </TASK>
[  318.272410][T17948] lo speed is unknown, defaulting to 1000
[  318.299920][T17951] loop2: detected capacity change from 0 to 164
[  318.359093][T17955] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4414'.
[  318.417046][T17959] loop2: detected capacity change from 0 to 164
[  318.640349][T17972] loop3: detected capacity change from 0 to 1024
[  318.663926][T17972] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  318.683704][T17972] ext4 filesystem being mounted at /248/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  318.726256][T13859] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  318.743654][T17970] netlink: 'syz.2.4421': attribute type 6 has an invalid length.
[  318.754327][T17970] program syz.2.4421 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  318.776308][T17979] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17979 comm=syz.0.4423
[  318.790420][T17979] 9pnet_fd: Insufficient options for proto=fd
[  318.806517][T17985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  318.815210][T17985] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  318.831960][T17983] loop3: detected capacity change from 0 to 128
[  318.933946][   T29] kauditd_printk_skb: 822 callbacks suppressed
[  318.933961][   T29] audit: type=1400 audit(1755126712.453:15828): avc:  denied  { ioctl } for  pid=17998 comm="syz.2.4432" path="socket:[59251]" dev="sockfs" ino=59251 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  318.954825][T17995] lo speed is unknown, defaulting to 1000
[  318.972330][   T29] audit: type=1400 audit(1755126712.493:15829): avc:  denied  { ioctl } for  pid=17998 comm="syz.2.4432" path="socket:[59250]" dev="sockfs" ino=59250 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  318.999432][   T29] audit: type=1400 audit(1755126712.523:15830): avc:  denied  { create } for  pid=17998 comm="syz.2.4432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  319.062989][T18002] loop2: detected capacity change from 0 to 512
[  319.073190][T18002] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  319.138415][   T29] audit: type=1326 audit(1755126712.663:15831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18006 comm="syz.3.4435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ca296ebe9 code=0x7ffc0000
[  319.162154][   T29] audit: type=1326 audit(1755126712.663:15832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18006 comm="syz.3.4435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ca296ebe9 code=0x7ffc0000
[  319.173796][T18009] loop1: detected capacity change from 0 to 1024
[  319.212026][T18009] EXT4-fs: Ignoring removed bh option
[  319.229064][T18009] EXT4-fs: inline encryption not supported
[  319.234079][   T29] audit: type=1326 audit(1755126712.713:15833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18006 comm="syz.3.4435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f3ca296ebe9 code=0x7ffc0000
[  319.258603][   T29] audit: type=1326 audit(1755126712.713:15834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18006 comm="syz.3.4435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ca296ebe9 code=0x7ffc0000
[  319.262859][T18009] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  319.282378][   T29] audit: type=1326 audit(1755126712.713:15835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18006 comm="syz.3.4435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ca296ebe9 code=0x7ffc0000
[  319.316334][   T29] audit: type=1326 audit(1755126712.713:15836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18006 comm="syz.3.4435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ca296ebe9 code=0x7ffc0000
[  319.340682][   T29] audit: type=1326 audit(1755126712.713:15837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18006 comm="syz.3.4435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ca296ebe9 code=0x7ffc0000
[  319.378832][T18009] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  319.390537][T18014] loop3: detected capacity change from 0 to 128
[  319.399007][T18009] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.4436: lblock 2 mapped to illegal pblock 2 (length 1)
[  319.427723][T18009] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.4436: lblock 0 mapped to illegal pblock 48 (length 1)
[  319.448737][T18009] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.4436: Failed to acquire dquot type 0
[  319.461184][T18009] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  319.489848][T18009] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.4436: mark_inode_dirty error
[  319.504450][T18009] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  319.526682][T18009] EXT4-fs (loop1): 1 orphan inode deleted
[  319.539643][T17387] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:32: lblock 1 mapped to illegal pblock 1 (length 1)
[  319.547155][T18009] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  319.583368][T17387] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:32: Failed to release dquot type 0
[  319.628293][T12885] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  319.641043][T12885] EXT4-fs error (device loop1): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0
[  319.680543][T18030] netlink: 'syz.0.4443': attribute type 6 has an invalid length.
[  319.684295][T12885] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  319.690755][T18030] program syz.0.4443 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  319.713409][T12885] EXT4-fs error (device loop1): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error
[  319.803249][T18035] netlink: 'syz.3.4447': attribute type 6 has an invalid length.
[  319.857100][T18035] program syz.3.4447 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  319.910778][T18038] lo speed is unknown, defaulting to 1000
[  319.930190][T18045] netlink: 'syz.0.4449': attribute type 1 has an invalid length.
[  319.978870][T12605] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  320.005216][T18045] veth0: entered promiscuous mode
[  320.026277][T18047] loop3: detected capacity change from 0 to 128
[  320.029123][T18049] loop2: detected capacity change from 0 to 1024
[  320.048322][T18049] EXT4-fs: Ignoring removed orlov option
[  320.067959][T18049] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  320.081020][T18045] veth0 (unregistering): left promiscuous mode
[  320.225289][T18056] loop3: detected capacity change from 0 to 164
[  320.232233][T12605] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  320.314127][T18056] bio_check_eod: 310 callbacks suppressed
[  320.314142][T18056] syz.3.4452: attempt to access beyond end of device
[  320.314142][T18056] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  320.349897][T18056] syz.3.4452: attempt to access beyond end of device
[  320.349897][T18056] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164
[  320.418895][T18060] loop1: detected capacity change from 0 to 128
[  320.448233][T18062] __nla_validate_parse: 4 callbacks suppressed
[  320.448248][T18062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4457'.
[  320.463371][T18062] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4457'.
[  320.512408][T18070] loop4: detected capacity change from 0 to 1024
[  320.538069][T18071] syz.1.4454: attempt to access beyond end of device
[  320.538069][T18071] loop1: rw=2049, sector=145, nr_sectors = 16 limit=128
[  320.553653][T18071] syz.1.4454: attempt to access beyond end of device
[  320.553653][T18071] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128
[  320.655077][T18071] syz.1.4454: attempt to access beyond end of device
[  320.655077][T18071] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128
[  320.691296][T18070] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  320.715008][T18070] ext4 filesystem being mounted at /264/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  320.821788][T18070] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: comm syz.4.4458: lblock 0 mapped to illegal pblock 0 (length 3)
[  320.849207][T18070] EXT4-fs (loop4): Remounting filesystem read-only
[  320.886707][T18089] lo speed is unknown, defaulting to 1000
[  320.895351][T14119] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  320.959472][T18097] loop4: detected capacity change from 0 to 164
[  320.982313][T18097] syz.4.4466: attempt to access beyond end of device
[  320.982313][T18097] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  321.010928][T18101] loop2: detected capacity change from 0 to 128
[  321.017867][T18097] syz.4.4466: attempt to access beyond end of device
[  321.017867][T18097] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164
[  321.068946][T18103] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4469'.
[  321.077862][T18103] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4469'.
[  321.112353][T18106] syz.2.4468: attempt to access beyond end of device
[  321.112353][T18106] loop2: rw=2049, sector=145, nr_sectors = 16 limit=128
[  321.158445][T18106] syz.2.4468: attempt to access beyond end of device
[  321.158445][T18106] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128
[  321.237677][T18106] syz.2.4468: attempt to access beyond end of device
[  321.237677][T18106] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128
[  321.286258][T18108] netlink: 120 bytes leftover after parsing attributes in process `syz.4.4471'.
[  321.295477][T18108] netlink: 120 bytes leftover after parsing attributes in process `syz.4.4471'.
[  321.423400][T18116] loop4: detected capacity change from 0 to 1024
[  321.431411][T18116] EXT4-fs: Ignoring removed bh option
[  321.436943][T18115] loop3: detected capacity change from 0 to 512
[  321.437483][T18116] EXT4-fs: inline encryption not supported
[  321.481391][T18116] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  321.547233][T18115] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  321.572039][T18116] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  321.586629][T18116] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.4473: lblock 2 mapped to illegal pblock 2 (length 1)
[  321.629135][T18116] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.4473: lblock 0 mapped to illegal pblock 48 (length 1)
[  321.657608][T18116] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.4473: Failed to acquire dquot type 0
[  321.673811][T18116] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  321.704988][T18116] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.4473: mark_inode_dirty error
[  321.722524][T18123] netlink: 120 bytes leftover after parsing attributes in process `syz.1.4475'.
[  321.731636][T18123] netlink: 120 bytes leftover after parsing attributes in process `syz.1.4475'.
[  321.754069][T18116] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  321.766207][T18116] EXT4-fs (loop4): 1 orphan inode deleted
[  321.781203][T18116] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  321.793962][T17397] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:42: lblock 1 mapped to illegal pblock 1 (length 1)
[  321.830892][T17397] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:42: Failed to release dquot type 0
[  321.838443][T18132] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4476'.
[  321.894645][T18116] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  321.936906][T18116] EXT4-fs error (device loop4): __ext4_get_inode_loc:4861: comm syz.4.4473: Invalid inode table block 1 in block_group 0
[  321.982077][T18116] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  321.993918][T18116] EXT4-fs error (device loop4): ext4_quota_off:7217: inode #3: comm syz.4.4473: mark_inode_dirty error
[  322.163273][T18143] lo speed is unknown, defaulting to 1000
[  322.208876][T18145] netlink: 120 bytes leftover after parsing attributes in process `syz.4.4482'.
[  322.390218][T18127] syz.3.4472 (18127) used greatest stack depth: 9264 bytes left
[  322.473299][T13859] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  322.725486][T18172] lo speed is unknown, defaulting to 1000
[  322.781617][T18179] loop2: detected capacity change from 0 to 512
[  322.805232][T18179] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  322.976220][T18188] loop3: detected capacity change from 0 to 1024
[  323.000058][T18188] EXT4-fs: Ignoring removed orlov option
[  323.044459][T18188] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  323.188754][T13859] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  323.392655][T18198] lo speed is unknown, defaulting to 1000
[  323.399236][T18211] loop1: detected capacity change from 0 to 1024
[  323.410173][T18212] loop3: detected capacity change from 0 to 512
[  323.432147][T18211] EXT4-fs: Ignoring removed bh option
[  323.445446][T18212] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  323.457037][T18211] EXT4-fs: inline encryption not supported
[  323.494030][T18211] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  323.531413][T18211] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  323.571233][T18211] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.4498: lblock 2 mapped to illegal pblock 2 (length 1)
[  323.594019][T18211] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.4498: lblock 0 mapped to illegal pblock 48 (length 1)
[  323.626998][T18211] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.4498: Failed to acquire dquot type 0
[  323.661334][T18211] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  323.671923][T18211] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.4498: mark_inode_dirty error
[  323.688088][T18211] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  323.718500][T18211] EXT4-fs (loop1): 1 orphan inode deleted
[  323.734526][T18211] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  323.757640][T17372] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:20: lblock 1 mapped to illegal pblock 1 (length 1)
[  323.839722][T17372] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:20: Failed to release dquot type 0
[  323.879931][T12605] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  323.881250][T18221] loop4: detected capacity change from 0 to 128
[  323.900954][T12885] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  323.928271][T12885] EXT4-fs error (device loop1): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0
[  323.947608][T12885] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  323.962531][T18223] loop2: detected capacity change from 0 to 512
[  323.969719][T12885] EXT4-fs error (device loop1): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error
[  323.985239][T18223] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  324.057771][T18226] loop1: detected capacity change from 0 to 1024
[  324.065246][T18226] EXT4-fs: Ignoring removed orlov option
[  324.082655][T18226] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  324.138312][T12885] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  324.264549][   T29] kauditd_printk_skb: 70 callbacks suppressed
[  324.264562][   T29] audit: type=1400 audit(1755126717.783:15899): avc:  denied  { write } for  pid=18238 comm="syz.1.4506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  324.298033][T18239] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  324.315609][T18239] netlink: 'syz.1.4506': attribute type 13 has an invalid length.
[  324.408947][T13859] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  324.428882][T18246] veth0: entered promiscuous mode
[  324.439194][T18246] veth0 (unregistering): left promiscuous mode
[  324.474987][T18250] loop3: detected capacity change from 0 to 512
[  324.641929][T18262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  324.650792][T18262] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  324.951908][T18270] loop4: detected capacity change from 0 to 128
[  325.004286][T18274] loop2: detected capacity change from 0 to 1024
[  325.030145][T18274] ext4 filesystem being mounted at /313/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  325.083544][   T29] audit: type=1326 audit(1755126718.603:15900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18278 comm="syz.0.4521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30d624ebe9 code=0x7ffc0000
[  325.107293][   T29] audit: type=1326 audit(1755126718.603:15901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18278 comm="syz.0.4521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30d624ebe9 code=0x7ffc0000
[  325.131361][   T29] audit: type=1326 audit(1755126718.633:15902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18278 comm="syz.0.4521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f30d624ebe9 code=0x7ffc0000
[  325.155222][   T29] audit: type=1326 audit(1755126718.633:15903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18278 comm="syz.0.4521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f30d624ec23 code=0x7ffc0000
[  325.178723][   T29] audit: type=1326 audit(1755126718.633:15904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18278 comm="syz.0.4521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f30d624d69f code=0x7ffc0000
[  325.202157][   T29] audit: type=1326 audit(1755126718.633:15905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18278 comm="syz.0.4521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f30d624ec77 code=0x7ffc0000
[  325.257837][   T29] audit: type=1326 audit(1755126718.733:15906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18278 comm="syz.0.4521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f30d624d550 code=0x7ffc0000
[  325.281675][   T29] audit: type=1326 audit(1755126718.733:15907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18278 comm="syz.0.4521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f30d624d84a code=0x7ffc0000
[  325.305210][   T29] audit: type=1326 audit(1755126718.733:15908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18278 comm="syz.0.4521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30d624ebe9 code=0x7ffc0000
[  325.333355][T18284] loop4: detected capacity change from 0 to 1024
[  325.417454][T18286] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: comm syz.2.4520: lblock 0 mapped to illegal pblock 0 (length 3)
[  325.431672][T18286] EXT4-fs (loop2): Remounting filesystem read-only
[  325.458595][T18293] loop1: detected capacity change from 0 to 512
[  325.491006][T18293] EXT4-fs error (device loop1): ext4_xattr_inode_iget:442: comm syz.1.4527: error while reading EA inode 32 err=-116
[  325.511386][T18301] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18301 comm=syz.0.4525
[  325.552807][T18297] lo speed is unknown, defaulting to 1000
[  325.613451][T18293] EXT4-fs (loop1): Remounting filesystem read-only
[  325.620205][T18293] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  325.630707][T18293] EXT4-fs (loop1): 1 orphan inode deleted
[  325.690533][T18309] loop1: detected capacity change from 0 to 164
[  325.926782][T18314] loop1: detected capacity change from 0 to 512
[  326.020481][T18314] msdos: Unknown parameter 'gh'
[  326.106398][T18318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  326.206111][T18318] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  326.260688][T18320] macsec1: entered promiscuous mode
[  326.265941][T18320] bridge0: entered promiscuous mode
[  326.405912][T18320] bridge0: port 3(macsec1) entered blocking state
[  326.412404][T18320] bridge0: port 3(macsec1) entered disabled state
[  326.452334][T18320] macsec1: entered allmulticast mode
[  326.457703][T18320] bridge0: entered allmulticast mode
[  326.477784][T18320] macsec1: left allmulticast mode
[  326.482872][T18320] bridge0: left allmulticast mode
[  326.492171][T18320] bridge0: left promiscuous mode
[  326.545837][T18329] loop4: detected capacity change from 0 to 164
[  326.587136][T18331] netlink: 'syz.0.4536': attribute type 13 has an invalid length.
[  326.595054][T18331] __nla_validate_parse: 10 callbacks suppressed
[  326.595068][T18331] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4536'.
[  326.716408][T18335] loop4: detected capacity change from 0 to 512
[  326.724711][T18337] loop1: detected capacity change from 0 to 1024
[  326.780188][T18337] ext4 filesystem being mounted at /316/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  326.984014][T18347] loop3: detected capacity change from 0 to 512
[  327.120422][T18337] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: comm syz.1.4538: lblock 0 mapped to illegal pblock 0 (length 3)
[  327.184804][T18337] EXT4-fs (loop1): Remounting filesystem read-only
[  327.266561][T18357] loop1: detected capacity change from 0 to 128
[  327.268962][T18355] loop2: detected capacity change from 0 to 512
[  327.325414][T18355] ext4 filesystem being mounted at /315/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  327.372655][T18361] loop1: detected capacity change from 0 to 512
[  327.379527][T18361] msdos: Unknown parameter 'gh'
[  327.480052][T18370] macsec1: entered promiscuous mode
[  327.485289][T18370] bridge0: entered promiscuous mode
[  327.508030][T18370] bridge0: port 3(macsec1) entered blocking state
[  327.514619][T18370] bridge0: port 3(macsec1) entered disabled state
[  327.572514][T18370] macsec1: entered allmulticast mode
[  327.577883][T18370] bridge0: entered allmulticast mode
[  327.597077][T18370] macsec1: left allmulticast mode
[  327.602294][T18370] bridge0: left allmulticast mode
[  327.624995][T18370] bridge0: left promiscuous mode
[  327.671309][T18375] netlink: 'syz.0.4548': attribute type 6 has an invalid length.
[  327.741219][T18381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  327.755676][T18383] loop1: detected capacity change from 0 to 512
[  327.763306][T18372] program syz.0.4548 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  327.764327][T18381] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  328.002480][T18395] loop3: detected capacity change from 0 to 1024
[  328.031888][T18395] ext4 filesystem being mounted at /275/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  328.156461][T18395] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: comm syz.3.4555: lblock 0 mapped to illegal pblock 0 (length 3)
[  328.181398][T18395] EXT4-fs (loop3): Remounting filesystem read-only
[  328.279004][T18401] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4557'.
[  328.305972][T18403] loop2: detected capacity change from 0 to 164
[  328.349135][T18405] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4559'.
[  328.432081][T18415] loop2: detected capacity change from 0 to 164
[  328.554344][T18422] netlink: 120 bytes leftover after parsing attributes in process `syz.3.4560'.
[  328.556639][T18421] netlink: 120 bytes leftover after parsing attributes in process `syz.4.4561'.
[  328.563519][T18422] netlink: 120 bytes leftover after parsing attributes in process `syz.3.4560'.
[  328.572531][T18421] netlink: 120 bytes leftover after parsing attributes in process `syz.4.4561'.
[  328.831773][T18430] netlink: 120 bytes leftover after parsing attributes in process `syz.2.4564'.
[  328.840940][T18430] netlink: 120 bytes leftover after parsing attributes in process `syz.2.4564'.
[  329.168985][T18437] loop1: detected capacity change from 0 to 128
[  329.250409][T18437] ext4 filesystem being mounted at /320/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  329.321453][   T29] kauditd_printk_skb: 500 callbacks suppressed
[  329.321467][   T29] audit: type=1400 audit(1755126722.843:16409): avc:  denied  { append } for  pid=18436 comm="syz.1.4566" path="/320/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/pids.current" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  329.423015][T18450] loop2: detected capacity change from 0 to 128
[  329.492111][T18456] usb usb9: usbfs: process 18456 (syz.4.4571) did not claim interface 16 before use
[  329.507573][   T29] audit: type=1400 audit(1755126722.983:16410): avc:  denied  { mount } for  pid=18454 comm="syz.4.4571" name="/" dev="ramfs" ino=61972 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  329.530137][   T29] audit: type=1400 audit(1755126722.983:16411): avc:  denied  { write } for  pid=18454 comm="syz.4.4571" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  329.531818][T18459] bio_check_eod: 158 callbacks suppressed
[  329.531832][T18459] syz.2.4568: attempt to access beyond end of device
[  329.531832][T18459] loop2: rw=2049, sector=145, nr_sectors = 16 limit=128
[  329.553280][   T29] audit: type=1400 audit(1755126722.993:16412): avc:  denied  { mount } for  pid=18449 comm="syz.2.4568" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[  329.596059][T18460] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4572'.
[  329.619103][T18459] syz.2.4568: attempt to access beyond end of device
[  329.619103][T18459] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128
[  329.635522][   T29] audit: type=1400 audit(1755126723.153:16413): avc:  denied  { create } for  pid=18454 comm="syz.4.4571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  329.669779][T18456] loop4: detected capacity change from 0 to 2048
[  329.677622][T18459] syz.2.4568: attempt to access beyond end of device
[  329.677622][T18459] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128
[  329.691337][   T29] audit: type=1326 audit(1755126723.193:16414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18462 comm="syz.3.4573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3ca2965ba7 code=0x7ffc0000
[  329.697869][T18463] loop3: detected capacity change from 0 to 164
[  329.714870][   T29] audit: type=1326 audit(1755126723.193:16415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18462 comm="syz.3.4573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3ca290add9 code=0x7ffc0000
[  329.744659][   T29] audit: type=1326 audit(1755126723.193:16416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18462 comm="syz.3.4573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3ca2965ba7 code=0x7ffc0000
[  329.768236][   T29] audit: type=1326 audit(1755126723.193:16417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18462 comm="syz.3.4573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3ca290add9 code=0x7ffc0000
[  329.791868][   T29] audit: type=1326 audit(1755126723.193:16418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18462 comm="syz.3.4573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ca296ebe9 code=0x7ffc0000
[  329.816540][T18459] syz.2.4568: attempt to access beyond end of device
[  329.816540][T18459] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128
[  330.075275][T18471] loop4: detected capacity change from 0 to 1024
[  330.220114][T18471] ext4 filesystem being mounted at /291/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  330.352431][T18480] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  330.372390][T18469] netlink: 'syz.3.4574': attribute type 13 has an invalid length.
[  330.426586][T18489] loop2: detected capacity change from 0 to 512
[  330.459734][T18492] loop1: detected capacity change from 0 to 128
[  330.479296][T18492] ext4 filesystem being mounted at /324/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  330.523677][T18495] loop3: detected capacity change from 0 to 128
[  330.569287][T18496] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: comm syz.4.4575: lblock 0 mapped to illegal pblock 0 (length 3)
[  330.569520][T18496] EXT4-fs (loop4): Remounting filesystem read-only
[  330.653294][T18502] loop1: detected capacity change from 0 to 512
[  330.680818][T18502] EXT4-fs: inline encryption not supported
[  330.693451][T18502] ext4: Unknown parameter 'noacl'
[  330.930016][T18513] loop4: detected capacity change from 0 to 128
[  330.949956][T18513] ext4 filesystem being mounted at /294/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  331.164509][T18523] loop1: detected capacity change from 0 to 164
[  331.271177][T18533] 9pnet_fd: Insufficient options for proto=fd
[  331.287597][T18537] netlink: 'syz.0.4596': attribute type 1 has an invalid length.
[  331.309806][T18539] loop1: detected capacity change from 0 to 164
[  331.336757][T18541] loop4: detected capacity change from 0 to 164
[  331.363588][T18541] syz.4.4599: attempt to access beyond end of device
[  331.363588][T18541] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  331.392794][T18545] loop2: detected capacity change from 0 to 128
[  331.400187][T18541] syz.4.4599: attempt to access beyond end of device
[  331.400187][T18541] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164
[  331.441784][T18546] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18546 comm=syz.1.4600
[  331.491447][T18553] loop3: detected capacity change from 0 to 512
[  331.493348][T18546] 9pnet: Could not find request transport: fd0x0000000000000007
[  331.499298][T18554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  331.518670][T18553] EXT4-fs: inline encryption not supported
[  331.524918][T18545] syz.2.4601: attempt to access beyond end of device
[  331.524918][T18545] loop2: rw=2049, sector=145, nr_sectors = 16 limit=128
[  331.536085][T18554] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  331.546559][T18553] ext4: Unknown parameter 'noacl'
[  331.551056][T18545] syz.2.4601: attempt to access beyond end of device
[  331.551056][T18545] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128
[  331.552465][T18558] loop4: detected capacity change from 0 to 512
[  331.565753][T18545] syz.2.4601: attempt to access beyond end of device
[  331.565753][T18545] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128
[  331.587352][T18545] syz.2.4601: attempt to access beyond end of device
[  331.587352][T18545] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128
[  331.620154][T18558] netlink: 'syz.4.4605': attribute type 13 has an invalid length.
[  331.641630][T18558] bridge0: left promiscuous mode
[  331.661527][T18558] loop4: detected capacity change from 0 to 1024
[  331.671019][T18558] EXT4-fs: inline encryption not supported
[  331.676894][T18558] EXT4-fs: Ignoring removed i_version option
[  331.687882][T18558] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  331.705521][T18558] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #3: block 1: comm syz.4.4605: lblock 1 mapped to illegal pblock 1 (length 1)
[  331.728020][T18558] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.4605: Failed to acquire dquot type 0
[  331.740240][T18558] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.4605: Freeing blocks not in datazone - block = 0, count = 4096
[  331.758503][T18560] lo speed is unknown, defaulting to 1000
[  331.768896][T18558] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.4605: Invalid inode bitmap blk 0 in block_group 0
[  331.787790][T17363] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:11: lblock 1 mapped to illegal pblock 1 (length 1)
[  331.802280][T18558] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem
[  331.810213][T17363] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:11: Failed to release dquot type 0
[  331.822990][T18558] EXT4-fs (loop4): 1 orphan inode deleted
[  331.836087][T18558] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm syz.4.4605: lblock 1 mapped to illegal pblock 1 (length 1)
[  331.865318][T18558] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.4605: Failed to acquire dquot type 0
[  331.934055][T18567] loop4: detected capacity change from 0 to 128
[  331.968326][T18569] loop4: detected capacity change from 0 to 512
[  331.980357][T18569] ext4 filesystem being mounted at /304/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  332.061691][T18575] __nla_validate_parse: 5 callbacks suppressed
[  332.061775][T18575] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4610'.
[  332.123448][T18583] loop3: detected capacity change from 0 to 164
[  332.133042][T18584] loop2: detected capacity change from 0 to 164
[  332.195683][T18595] netlink: 'syz.3.4615': attribute type 1 has an invalid length.
[  332.198216][T18594] loop2: detected capacity change from 0 to 164
[  332.227140][T18598] loop1: detected capacity change from 0 to 512
[  332.246179][T18595] veth0: entered promiscuous mode
[  332.252037][T18588] netlink: 120 bytes leftover after parsing attributes in process `syz.4.4613'.
[  332.261141][T18588] netlink: 120 bytes leftover after parsing attributes in process `syz.4.4613'.
[  332.272293][T18595] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4615'.
[  332.282008][T18595] veth0 (unregistering): left promiscuous mode
[  332.288535][T18579] netlink: 120 bytes leftover after parsing attributes in process `syz.0.4612'.
[  332.297616][T18579] netlink: 120 bytes leftover after parsing attributes in process `syz.0.4612'.
[  332.334632][T18598] ext4 filesystem being mounted at /330/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  332.429374][T18614] loop3: detected capacity change from 0 to 512
[  332.442109][T18616] netlink: 120 bytes leftover after parsing attributes in process `syz.4.4618'.
[  332.451214][T18616] netlink: 120 bytes leftover after parsing attributes in process `syz.4.4618'.
[  332.473564][T18617] loop2: detected capacity change from 0 to 1024
[  332.482733][T18614] EXT4-fs: inline encryption not supported
[  332.507888][T18614] ext4: Unknown parameter 'noacl'
[  332.517267][T18620] usb usb9: usbfs: process 18620 (syz.1.4620) did not claim interface 16 before use
[  332.529287][T18618] netlink: 'syz.0.4619': attribute type 6 has an invalid length.
[  332.548986][T18617] ext4 filesystem being mounted at /332/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  332.567447][T18618] program syz.0.4619 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  332.602599][T18620] loop1: detected capacity change from 0 to 2048
[  332.728682][T18631] loop4: detected capacity change from 0 to 128
[  332.745801][T18629] loop2: detected capacity change from 0 to 512
[  332.762469][T18631] ext4 filesystem being mounted at /308/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  332.898119][T18642] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4628'.
[  332.917170][T18634] lo speed is unknown, defaulting to 1000
[  333.122447][T18652] netlink: 120 bytes leftover after parsing attributes in process `syz.0.4630'.
[  333.412704][T18648] netlink: 'syz.4.4629': attribute type 6 has an invalid length.
[  333.460951][T18648] program syz.4.4629 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  333.461040][T18668] loop3: detected capacity change from 0 to 164
[  333.565898][T18672] loop4: detected capacity change from 0 to 164
[  333.602218][T18676] usb usb9: usbfs: process 18676 (syz.3.4637) did not claim interface 16 before use
[  333.615507][T18681] loop4: detected capacity change from 0 to 512
[  333.635101][T18683] loop2: detected capacity change from 0 to 512
[  333.641597][T18676] loop3: detected capacity change from 0 to 2048
[  333.660386][T18681] ext4 filesystem being mounted at /312/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  333.761612][T18695] loop4: detected capacity change from 0 to 512
[  333.786713][T18695] msdos: Unknown parameter 'gh'
[  333.901288][T18693] lo speed is unknown, defaulting to 1000
[  334.299806][T18705] loop3: detected capacity change from 0 to 1024
[  334.347361][   T29] kauditd_printk_skb: 425 callbacks suppressed
[  334.347375][   T29] audit: type=1400 audit(1755126727.863:16839): avc:  denied  { write } for  pid=18706 comm="syz.4.4648" name="dev" dev="proc" ino=4026532880 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  334.383987][T18707] 9pnet_fd: Insufficient options for proto=fd
[  334.405279][T18705] ext4 filesystem being mounted at /290/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  334.412038][   T29] audit: type=1400 audit(1755126727.883:16840): avc:  denied  { mounton } for  pid=18704 comm="syz.3.4647" path="/290/file1" dev="tmpfs" ino=1636 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  334.438568][   T29] audit: type=1400 audit(1755126727.923:16841): avc:  denied  { create } for  pid=18710 comm="syz.1.4649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  334.458428][   T29] audit: type=1400 audit(1755126727.923:16842): avc:  denied  { mount } for  pid=18704 comm="syz.3.4647" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  334.485376][   T29] audit: type=1400 audit(1755126727.933:16843): avc:  denied  { connect } for  pid=18710 comm="syz.1.4649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  334.505348][   T29] audit: type=1400 audit(1755126727.933:16844): avc:  denied  { create } for  pid=18710 comm="syz.1.4649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  334.630060][   T29] audit: type=1400 audit(1755126728.143:16845): avc:  denied  { unmount } for  pid=12605 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  334.708202][   T29] audit: type=1326 audit(1755126728.213:16846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18719 comm="syz.2.4652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1af8fdebe9 code=0x7ffc0000
[  334.732040][   T29] audit: type=1326 audit(1755126728.213:16847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18719 comm="syz.2.4652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1af8fdebe9 code=0x7ffc0000
[  334.755380][T18716] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: comm syz.3.4647: lblock 0 mapped to illegal pblock 0 (length 3)
[  334.755874][   T29] audit: type=1326 audit(1755126728.223:16848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18719 comm="syz.2.4652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1af8fdebe9 code=0x7ffc0000
[  334.829720][T18716] EXT4-fs (loop3): Remounting filesystem read-only
[  334.883947][T18729] loop2: detected capacity change from 0 to 512
[  334.890251][T18730] usb usb9: usbfs: process 18730 (syz.4.4655) did not claim interface 16 before use
[  334.938037][T18729] ext4 filesystem being mounted at /336/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  334.989564][T18730] loop4: detected capacity change from 0 to 2048
[  335.014034][T18738] loop2: detected capacity change from 0 to 164
[  335.064788][T18741] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  335.101773][T18744] loop1: detected capacity change from 0 to 512
[  335.127206][T18744] msdos: Unknown parameter 'gh'
[  335.172918][T18732] netlink: 'syz.3.4656': attribute type 13 has an invalid length.
[  335.234012][T18746] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  335.252802][T18746] netlink: 'syz.2.4660': attribute type 13 has an invalid length.
[  335.262253][T18749] macsec1: entered promiscuous mode
[  335.267458][T18749] bridge0: entered promiscuous mode
[  335.274505][T18749] bridge0: port 3(macsec1) entered blocking state
[  335.281000][T18749] bridge0: port 3(macsec1) entered disabled state
[  335.295575][T18749] macsec1: entered allmulticast mode
[  335.300975][T18749] bridge0: entered allmulticast mode
[  335.322208][T18749] macsec1: left allmulticast mode
[  335.327313][T18749] bridge0: left allmulticast mode
[  335.343317][T18749] bridge0: left promiscuous mode
[  335.453840][T18754] netlink: 'syz.3.4662': attribute type 6 has an invalid length.
[  335.480317][T18754] program syz.3.4662 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  335.542226][T18763] loop1: detected capacity change from 0 to 512
[  335.591653][T18770] loop2: detected capacity change from 0 to 512
[  335.620097][T18770] ext4 filesystem being mounted at /340/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  335.710348][T18781] netlink: 'syz.0.4671': attribute type 1 has an invalid length.
[  335.793487][T18789] netlink: 'syz.3.4672': attribute type 1 has an invalid length.
[  335.856817][T18797] loop2: detected capacity change from 0 to 128
[  335.858151][T18796] netlink: 'syz.0.4673': attribute type 13 has an invalid length.
[  336.010757][T18803] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  336.036076][T18803] netlink: 'syz.2.4677': attribute type 13 has an invalid length.
[  336.066878][T18807] netlink: 'syz.3.4678': attribute type 6 has an invalid length.
[  336.099608][T18807] program syz.3.4678 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  336.137143][T18811] loop4: detected capacity change from 0 to 512
[  336.164720][T18811] ext4 filesystem being mounted at /318/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  336.307414][T18819] loop2: detected capacity change from 0 to 164
[  336.330530][T18818] loop4: detected capacity change from 0 to 164
[  336.475816][T18823] loop2: detected capacity change from 0 to 512
[  336.523864][T18823] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  336.592242][T18823] EXT4-fs (loop2): mount failed
[  336.692411][T18836] netlink: 'syz.4.4687': attribute type 1 has an invalid length.
[  336.722334][T18837] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  336.734043][T18836] veth0: entered promiscuous mode
[  336.759028][T18836] veth0 (unregistering): left promiscuous mode
[  336.789131][T18841] loop2: detected capacity change from 0 to 512
[  336.808302][T18832] netlink: 'syz.3.4683': attribute type 13 has an invalid length.
[  336.819689][T18841] msdos: Unknown parameter 'gh'
[  336.835045][T18841] macsec1: entered promiscuous mode
[  336.840434][T18841] bridge0: entered promiscuous mode
[  336.849973][T18841] bridge0: port 3(macsec1) entered blocking state
[  336.856456][T18841] bridge0: port 3(macsec1) entered disabled state
[  336.864045][T18841] macsec1: entered allmulticast mode
[  336.869413][T18841] bridge0: entered allmulticast mode
[  336.877161][T18841] macsec1: left allmulticast mode
[  336.882268][T18841] bridge0: left allmulticast mode
[  336.915107][T18841] bridge0: left promiscuous mode
[  336.939444][T18851] loop3: detected capacity change from 0 to 512
[  337.128723][T18864] __nla_validate_parse: 13 callbacks suppressed
[  337.128811][T18864] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4698'.
[  337.169923][T18867] netlink: 'syz.0.4697': attribute type 13 has an invalid length.
[  337.206732][T18869] loop2: detected capacity change from 0 to 1024
[  337.220438][T18869] ext4 filesystem being mounted at /350/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  337.255138][T18873] netlink: 200 bytes leftover after parsing attributes in process `syz.0.4700'.
[  337.261877][T18869] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: comm syz.2.4699: lblock 0 mapped to illegal pblock 0 (length 3)
[  337.278396][T18869] EXT4-fs (loop2): Remounting filesystem read-only
[  337.309190][T18877] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4701'.
[  337.318199][T18876] usb usb9: usbfs: process 18876 (syz.1.4702) did not claim interface 16 before use
[  337.328347][T12605] EXT4-fs unmount: 67 callbacks suppressed
[  337.328361][T12605] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  337.340362][T18876] loop1: detected capacity change from 0 to 2048
[  337.359438][T18876] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  337.377796][T18881] rdma_op ffff8881196ca580 conn xmit_rdma 0000000000000000
[  337.392966][T18876] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  337.461421][T18885] netlink: 4120 bytes leftover after parsing attributes in process `syz.0.4705'.
[  337.573544][T18895] netlink: 120 bytes leftover after parsing attributes in process `syz.0.4707'.
[  337.582701][T18895] netlink: 120 bytes leftover after parsing attributes in process `syz.0.4707'.
[  337.591853][T18897] loop2: detected capacity change from 0 to 164
[  337.621958][T18897] bio_check_eod: 2 callbacks suppressed
[  337.621975][T18897] syz.2.4708: attempt to access beyond end of device
[  337.621975][T18897] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  337.645421][T18897] syz.2.4708: attempt to access beyond end of device
[  337.645421][T18897] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164
[  337.733118][T18899] netlink: 120 bytes leftover after parsing attributes in process `syz.0.4709'.
[  337.742216][T18899] netlink: 120 bytes leftover after parsing attributes in process `syz.0.4709'.
[  337.785737][T18909] netlink: 200 bytes leftover after parsing attributes in process `syz.4.4712'.
[  337.858651][T18913] loop4: detected capacity change from 0 to 164
[  337.888329][T18916] loop2: detected capacity change from 0 to 128
[  337.899073][T18911] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4713'.
[  337.908405][T18913] syz.4.4714: attempt to access beyond end of device
[  337.908405][T18913] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  337.940787][T18913] syz.4.4714: attempt to access beyond end of device
[  337.940787][T18913] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164
[  337.986421][T13859] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  338.063187][T18930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  338.094184][T18922] netlink: 'syz.0.4718': attribute type 6 has an invalid length.
[  338.105504][T18930] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  338.136861][T18922] program syz.0.4718 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  338.242912][T18940] loop4: detected capacity change from 0 to 512
[  338.253555][T18940] EXT4-fs (loop4): orphan cleanup on readonly fs
[  338.262307][T18940] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4720: bg 0: block 131: padding at end of block bitmap is not set
[  338.277472][T18940] EXT4-fs (loop4): Remounting filesystem read-only
[  338.284427][T18940] EXT4-fs (loop4): 1 truncate cleaned up
[  338.292406][T18940] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  338.335938][T18888] Process accounting resumed
[  338.370589][T18954] loop1: detected capacity change from 0 to 128
[  338.460418][T18966] loop1: detected capacity change from 0 to 1024
[  338.469478][T18963] program syz.2.4731 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  338.481313][T18966] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  338.493539][T18966] ext4 filesystem being mounted at /350/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  338.519761][T12885] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  338.560465][T18973] usb usb9: usbfs: process 18973 (syz.1.4734) did not claim interface 16 before use
[  338.584304][T18973] loop1: detected capacity change from 0 to 2048
[  338.618136][T18981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  338.618193][T18973] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  338.626728][T18981] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  338.648976][T18973] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  338.668846][T18984] loop3: detected capacity change from 0 to 164
[  338.730257][T18988] loop3: detected capacity change from 0 to 1024
[  338.750592][T18988] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  338.762804][T18988] ext4 filesystem being mounted at /301/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  338.806794][T13859] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  338.886486][T19003] program syz.1.4745 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  338.976581][T14119] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  338.998350][T19012] loop4: detected capacity change from 0 to 512
[  339.009361][T19012] EXT4-fs: inline encryption not supported
[  339.016051][T19012] ext4: Unknown parameter 'noacl'
[  339.253120][T19031] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19031 comm=syz.1.4751
[  339.265773][T19035] loop2: detected capacity change from 0 to 1024
[  339.276490][T19031] 9pnet: Could not find request transport: fd0x0000000000000007
[  339.303319][T19035] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  339.319856][T19035] ext4 filesystem being mounted at /365/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  339.356014][T12605] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  339.415403][   T29] kauditd_printk_skb: 570 callbacks suppressed
[  339.415418][   T29] audit: type=1326 audit(1755126732.933:17418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19046 comm="syz.4.4755" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f67a15febe9 code=0x0
[  339.473474][T19052] loop2: detected capacity change from 0 to 128
[  339.484107][T19053] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19053 comm=syz.4.4755
[  339.498703][T19053] 9pnet_fd: Insufficient options for proto=fd
[  339.516703][   T29] audit: type=1400 audit(1755126733.033:17419): avc:  denied  { wake_alarm } for  pid=19056 comm="syz.2.4758" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  339.541188][   T29] audit: type=1400 audit(1755126733.063:17420): avc:  denied  { mount } for  pid=19056 comm="syz.2.4758" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  339.564248][   T29] audit: type=1400 audit(1755126733.063:17421): avc:  denied  { ioctl } for  pid=19056 comm="syz.2.4758" path="socket:[62969]" dev="sockfs" ino=62969 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  339.589720][   T29] audit: type=1400 audit(1755126733.063:17422): avc:  denied  { bind } for  pid=19056 comm="syz.2.4758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  339.701275][T19071] loop3: detected capacity change from 0 to 512
[  339.714327][T19071] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  339.748061][T19074] usb usb9: usbfs: process 19074 (syz.2.4763) did not claim interface 16 before use
[  339.773165][T19074] loop2: detected capacity change from 0 to 2048
[  339.799638][T19074] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  339.813739][T19074] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  339.905182][T19079] loop2: detected capacity change from 0 to 1024
[  339.919567][T19079] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  339.932171][T19079] ext4 filesystem being mounted at /374/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  339.967781][T12605] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  340.090475][   T29] audit: type=1326 audit(1755126733.613:17423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19089 comm="syz.0.4768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30d624ebe9 code=0x7ffc0000
[  340.114169][   T29] audit: type=1326 audit(1755126733.613:17424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19089 comm="syz.0.4768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30d624ebe9 code=0x7ffc0000
[  340.137895][T19092] usb usb9: usbfs: process 19092 (syz.0.4769) did not claim interface 16 before use
[  340.140134][T19085] program syz.1.4766 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  340.168567][   T29] audit: type=1326 audit(1755126733.613:17425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19089 comm="syz.0.4768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f30d624ebe9 code=0x7ffc0000
[  340.192300][   T29] audit: type=1326 audit(1755126733.613:17426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19089 comm="syz.0.4768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f30d624ec23 code=0x7ffc0000
[  340.216861][   T29] audit: type=1326 audit(1755126733.613:17427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19089 comm="syz.0.4768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f30d624d69f code=0x7ffc0000
[  340.447538][T19099] lo speed is unknown, defaulting to 1000
[  340.586946][T13859] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  340.605162][T19111] loop1: detected capacity change from 0 to 128
[  340.642794][T19113] loop3: detected capacity change from 0 to 512
[  340.658879][T19113] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  340.749510][T19111] syz.1.4775: attempt to access beyond end of device
[  340.749510][T19111] loop1: rw=2049, sector=145, nr_sectors = 16 limit=128
[  340.770057][T19111] syz.1.4775: attempt to access beyond end of device
[  340.770057][T19111] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128
[  340.784953][T19111] syz.1.4775: attempt to access beyond end of device
[  340.784953][T19111] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128
[  340.799626][T19111] syz.1.4775: attempt to access beyond end of device
[  340.799626][T19111] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128
[  340.817868][T19111] syz.1.4775: attempt to access beyond end of device
[  340.817868][T19111] loop1: rw=2049, sector=217, nr_sectors = 8 limit=128
[  340.871840][T19126] loop4: detected capacity change from 0 to 164
[  340.970301][T19136] loop2: detected capacity change from 0 to 164
[  341.006826][T19141] loop4: detected capacity change from 0 to 512
[  341.065488][T19141] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  341.200188][T19147] lo speed is unknown, defaulting to 1000
[  341.270757][T19158] loop1: detected capacity change from 0 to 1024
[  341.289435][T19158] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  341.369993][T12885] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  341.531614][T13859] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  341.533472][T19174] loop2: detected capacity change from 0 to 164
[  341.812944][T19172] validate_nla: 3 callbacks suppressed
[  341.812959][T19172] netlink: 'syz.1.4796': attribute type 6 has an invalid length.
[  341.850443][T19190] loop3: detected capacity change from 0 to 512
[  341.860609][T14119] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  341.884815][T19172] program syz.1.4796 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  341.903474][T19192] 9pnet_fd: Insufficient options for proto=fd
[  341.921103][T19190] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  341.932494][T19188] lo speed is unknown, defaulting to 1000
[  341.967822][T19196] loop4: detected capacity change from 0 to 164
[  342.034155][T19200] loop1: detected capacity change from 0 to 164
[  342.277996][T19209] lo speed is unknown, defaulting to 1000
[  342.285902][T19212] cgroup: fork rejected by pids controller in /syz2
[  342.380412][T19318] loop2: detected capacity change from 0 to 128
[  342.619541][T19320] __nla_validate_parse: 37 callbacks suppressed
[  342.619554][T19320] netlink: 120 bytes leftover after parsing attributes in process `syz.2.4811'.
[  342.634928][T19320] netlink: 120 bytes leftover after parsing attributes in process `syz.2.4811'.
[  342.704358][T19325] loop4: detected capacity change from 0 to 512
[  342.729105][T19327] loop2: detected capacity change from 0 to 512
[  342.738103][T19327] msdos: Unknown parameter 'gh'
[  342.760073][T19325] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  342.792609][T19327] macsec1: entered promiscuous mode
[  342.797990][T19327] bridge0: entered promiscuous mode
[  342.854017][T19327] bridge0: port 3(macsec1) entered blocking state
[  342.860572][T19327] bridge0: port 3(macsec1) entered disabled state
[  342.908540][T19327] macsec1: entered allmulticast mode
[  342.913884][T19327] bridge0: entered allmulticast mode
[  342.922369][T19432] 9pnet_fd: Insufficient options for proto=fd
[  342.940550][T19327] macsec1: left allmulticast mode
[  342.945597][T19327] bridge0: left allmulticast mode
[  342.993710][T19327] bridge0: left promiscuous mode
[  343.014688][T19436] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4817'.
[  343.053515][T19436] loop1: detected capacity change from 0 to 512
[  343.121578][T19436] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  343.148937][T13859] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  343.211114][T19436] ext4 filesystem being mounted at /371/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  343.283065][T19452] usb usb9: usbfs: process 19452 (syz.3.4820) did not claim interface 16 before use
[  343.302727][T19451] netlink: 120 bytes leftover after parsing attributes in process `syz.2.4823'.
[  343.311919][T19451] netlink: 120 bytes leftover after parsing attributes in process `syz.2.4823'.
[  343.341121][T19452] loop3: detected capacity change from 0 to 2048
[  343.369868][T19452] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  343.403182][T19452] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  343.469660][T19563] loop3: detected capacity change from 0 to 164
[  343.478886][T19449] lo speed is unknown, defaulting to 1000
[  343.499425][T12885] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  343.518062][T19565] loop2: detected capacity change from 0 to 164
[  343.540912][T19563] syz.3.4824: attempt to access beyond end of device
[  343.540912][T19563] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  343.565463][T14119] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  343.575926][T19563] syz.3.4824: attempt to access beyond end of device
[  343.575926][T19563] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164
[  343.596485][T19565] syz.2.4826: attempt to access beyond end of device
[  343.596485][T19565] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  343.618315][T19565] syz.2.4826: attempt to access beyond end of device
[  343.618315][T19565] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164
[  343.735546][T19573] loop2: detected capacity change from 0 to 512
[  343.754534][T19573] netlink: 'syz.2.4829': attribute type 13 has an invalid length.
[  343.812234][T19573] loop2: detected capacity change from 0 to 1024
[  343.843602][T19573] EXT4-fs: inline encryption not supported
[  343.849530][T19573] EXT4-fs: Ignoring removed i_version option
[  343.882050][T19573] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  343.908486][T19573] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #3: block 1: comm syz.2.4829: lblock 1 mapped to illegal pblock 1 (length 1)
[  343.928276][T19573] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.4829: Failed to acquire dquot type 0
[  343.950011][T19573] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.4829: Freeing blocks not in datazone - block = 0, count = 4096
[  343.967326][T19573] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.4829: Invalid inode bitmap blk 0 in block_group 0
[  343.983391][T17402] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:47: lblock 1 mapped to illegal pblock 1 (length 1)
[  343.997976][T19573] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem
[  344.020807][T19573] EXT4-fs (loop2): 1 orphan inode deleted
[  344.039701][T19573] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  344.045418][T19585] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4831'.
[  344.061203][T19585] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4831'.
[  344.070616][T17402] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:47: Failed to release dquot type 0
[  344.092870][T19573] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm syz.2.4829: lblock 1 mapped to illegal pblock 1 (length 1)
[  344.206458][T19573] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.4829: Failed to acquire dquot type 0
[  344.259813][T12605] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  344.318777][T19593] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4834'.
[  344.494481][   T29] kauditd_printk_skb: 580 callbacks suppressed
[  344.494571][   T29] audit: type=1400 audit(1755126738.013:18003): avc:  denied  { create } for  pid=19603 comm="syz.1.4837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  344.589967][T19614] netlink: 120 bytes leftover after parsing attributes in process `syz.0.4836'.
[  344.599060][T19614] netlink: 120 bytes leftover after parsing attributes in process `syz.0.4836'.
[  344.639964][   T29] audit: type=1400 audit(1755126738.163:18004): avc:  denied  { connect } for  pid=19603 comm="syz.1.4837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  344.729271][   T29] audit: type=1400 audit(1755126738.183:18005): avc:  denied  { create } for  pid=19603 comm="syz.1.4837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  344.757764][T19709] loop4: detected capacity change from 0 to 164
[  344.952578][   T29] audit: type=1326 audit(1755126738.473:18006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19713 comm="syz.1.4841" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0bebb6ebe9 code=0x0
[  345.005579][T19711] lo speed is unknown, defaulting to 1000
[  345.074893][T19718] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19718 comm=syz.1.4841
[  345.126768][T19715] 9pnet_fd: Insufficient options for proto=fd
[  345.134467][   T29] audit: type=1400 audit(1755126738.643:18007): avc:  denied  { mounton } for  pid=19713 comm="syz.1.4841" path="/374/file0" dev="tmpfs" ino=2098 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  345.576573][T19722] netlink: 'syz.4.4842': attribute type 6 has an invalid length.
[  345.646896][T19720] program syz.4.4842 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  345.827249][   T29] audit: type=1400 audit(1755126739.343:18008): avc:  denied  { create } for  pid=19734 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  345.887675][   T29] audit: type=1400 audit(1755126739.373:18009): avc:  denied  { connect } for  pid=19734 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  345.907135][   T29] audit: type=1326 audit(1755126739.373:18010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19734 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30d624ebe9 code=0x7ffc0000
[  345.930226][   T29] audit: type=1326 audit(1755126739.373:18011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19734 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30d624ebe9 code=0x7ffc0000
[  345.953336][   T29] audit: type=1326 audit(1755126739.373:18012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19734 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f30d624ebe9 code=0x7ffc0000
[  346.074550][T19747] loop4: detected capacity change from 0 to 512
[  346.091154][T19753] loop2: detected capacity change from 0 to 164
[  346.118604][T19747] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  346.187695][T19763] loop2: detected capacity change from 0 to 512
[  346.221809][T19763] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  346.255872][T19771] netlink: 'syz.3.4855': attribute type 1 has an invalid length.
[  346.468086][T12605] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  346.505684][T19884] loop3: detected capacity change from 0 to 164
[  346.519409][T19886] loop2: detected capacity change from 0 to 164
[  346.541298][T19886] syz.2.4859: attempt to access beyond end of device
[  346.541298][T19886] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  346.566618][T19886] syz.2.4859: attempt to access beyond end of device
[  346.566618][T19886] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164
[  346.596890][T19888] loop3: detected capacity change from 0 to 512
[  346.609463][T19888] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  346.671954][T19891] loop2: detected capacity change from 0 to 512
[  346.691868][T19891] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  346.754642][T19901] netlink: 'syz.0.4866': attribute type 1 has an invalid length.
[  346.855111][ T3661] Process accounting resumed
[  346.880424][T19938] loop1: detected capacity change from 0 to 512
[  346.911685][T19938] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  346.928456][T12605] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  347.226885][T14119] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  347.244046][T20017] lo speed is unknown, defaulting to 1000
[  347.455201][T20027] loop4: detected capacity change from 0 to 164
[  347.674164][T20029] __nla_validate_parse: 8 callbacks suppressed
[  347.674181][T20029] netlink: 120 bytes leftover after parsing attributes in process `syz.4.4876'.
[  347.689494][T20029] netlink: 120 bytes leftover after parsing attributes in process `syz.4.4876'.
[  347.732036][T13859] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  347.837315][T12885] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  347.872821][T20045] usb usb9: usbfs: process 20045 (syz.3.4882) did not claim interface 16 before use
[  347.893667][T20034] lo speed is unknown, defaulting to 1000
[  347.938142][T20045] loop3: detected capacity change from 0 to 2048
[  347.948663][T20051] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4881'.
[  348.025034][T20045] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  348.049972][T20045] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  348.089181][T20036] lo speed is unknown, defaulting to 1000
[  348.175674][T20057] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20057 comm=syz.1.4885
[  348.413530][T20059] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  348.457127][T20059] netlink: 'syz.3.4886': attribute type 13 has an invalid length.
[  348.577060][T20066] loop2: detected capacity change from 0 to 512
[  348.608111][T20066] msdos: Unknown parameter 'gh'
[  348.675331][T20072] loop3: detected capacity change from 0 to 164
[  348.721208][T20066] macsec1: entered promiscuous mode
[  348.726467][T20066] bridge0: entered promiscuous mode
[  348.728744][T20065] netlink: 120 bytes leftover after parsing attributes in process `syz.0.4888'.
[  348.740770][T20065] netlink: 120 bytes leftover after parsing attributes in process `syz.0.4888'.
[  348.844562][T20066] bridge0: port 3(macsec1) entered blocking state
[  348.851248][T20066] bridge0: port 3(macsec1) entered disabled state
[  348.904670][T20066] macsec1: entered allmulticast mode
[  348.910145][T20066] bridge0: entered allmulticast mode
[  348.966843][T20066] macsec1: left allmulticast mode
[  348.972146][T20066] bridge0: left allmulticast mode
[  349.022666][T20066] bridge0: left promiscuous mode
[  349.052013][T20079] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4890'.
[  349.068717][T20080] loop1: detected capacity change from 0 to 512
[  349.087453][T20076] loop3: detected capacity change from 0 to 512
[  349.192178][T20080] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  349.213755][T20076] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  349.231882][T20092] loop2: detected capacity change from 0 to 1024
[  349.260046][T20076] ext4 filesystem being mounted at /324/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  349.271581][T20093] loop4: detected capacity change from 0 to 512
[  349.288556][T20093] msdos: Unknown parameter 'gh'
[  349.314710][T20092] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  349.377821][T20092] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4893'.
[  349.416869][T12605] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  349.500824][   T29] kauditd_printk_skb: 274 callbacks suppressed
[  349.500838][   T29] audit: type=1400 audit(1755126743.023:18287): avc:  denied  { write } for  pid=20075 comm="syz.3.4890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  349.625593][T20108] usb usb9: usbfs: process 20108 (syz.4.4897) did not claim interface 16 before use
[  349.664830][   T29] audit: type=1400 audit(1755126743.053:18288): avc:  denied  { sys_module } for  pid=20075 comm="syz.3.4890" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  349.686205][   T29] audit: type=1400 audit(1755126743.093:18289): avc:  denied  { mount } for  pid=20105 comm="syz.4.4897" name="/" dev="ramfs" ino=64920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  349.708773][   T29] audit: type=1400 audit(1755126743.113:18290): avc:  denied  { write } for  pid=20105 comm="syz.4.4897" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  349.732610][T13859] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  349.772557][T20106] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  349.779804][T20106] netlink: 'syz.2.4896': attribute type 13 has an invalid length.
[  349.788758][T20108] loop4: detected capacity change from 0 to 2048
[  349.819347][   T29] audit: type=1400 audit(1755126743.273:18291): avc:  denied  { read } for  pid=20105 comm="syz.4.4897" name="qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  349.824499][T20108] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  349.842688][   T29] audit: type=1400 audit(1755126743.273:18292): avc:  denied  { open } for  pid=20105 comm="syz.4.4897" path="/dev/qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  349.878450][   T29] audit: type=1400 audit(1755126743.273:18293): avc:  denied  { create } for  pid=20105 comm="syz.4.4897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  349.898603][   T29] audit: type=1400 audit(1755126743.283:18294): avc:  denied  { create } for  pid=20103 comm="syz.2.4896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  349.918330][   T29] audit: type=1400 audit(1755126743.283:18295): avc:  denied  { create } for  pid=20103 comm="syz.2.4896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  349.938731][   T29] audit: type=1400 audit(1755126743.293:18296): avc:  denied  { write } for  pid=20103 comm="syz.2.4896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  349.958818][T20108] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  350.024976][T20119] loop2: detected capacity change from 0 to 128
[  350.085639][T12885] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  350.144535][T20117] netlink: 120 bytes leftover after parsing attributes in process `syz.3.4898'.
[  350.153737][T20117] netlink: 120 bytes leftover after parsing attributes in process `syz.3.4898'.
[  350.181018][T20127] loop2: detected capacity change from 0 to 512
[  350.220756][T20127] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  350.242429][T20133] loop4: detected capacity change from 0 to 512
[  350.271585][T20133] msdos: Unknown parameter 'gh'
[  350.339375][T20130] netlink: 'syz.1.4901': attribute type 6 has an invalid length.
[  350.388203][T20130] program syz.1.4901 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  350.554220][T20143] loop4: detected capacity change from 0 to 512
[  350.578607][T20143] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  350.658698][T20152] loop1: detected capacity change from 0 to 512
[  350.666472][T20153] netlink: 'syz.0.4905': attribute type 6 has an invalid length.
[  350.681584][T20152] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  350.704100][T20145] program syz.0.4905 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  351.224573][T12605] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  351.432234][T14119] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  351.491716][T20175] loop4: detected capacity change from 0 to 164
[  351.525143][T20177] loop3: detected capacity change from 0 to 164
[  351.564781][T20177] syz.3.4916: attempt to access beyond end of device
[  351.564781][T20177] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  351.590726][T20177] syz.3.4916: attempt to access beyond end of device
[  351.590726][T20177] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164
[  351.669836][T20182] loop2: detected capacity change from 0 to 512
[  351.740366][T20182] netlink: 'syz.2.4918': attribute type 13 has an invalid length.
[  351.807746][T20182] loop2: detected capacity change from 0 to 1024
[  351.833001][T20182] EXT4-fs: inline encryption not supported
[  351.835254][T20189] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4921'.
[  351.838926][T20182] EXT4-fs: Ignoring removed i_version option
[  351.876023][T20180] lo speed is unknown, defaulting to 1000
[  351.888147][T20182] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  351.901446][T12885] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  351.915266][T20182] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #3: block 1: comm syz.2.4918: lblock 1 mapped to illegal pblock 1 (length 1)
[  351.930293][T20194] loop3: detected capacity change from 0 to 164
[  351.942234][T20182] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.4918: Failed to acquire dquot type 0
[  351.954885][T20182] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.4918: Freeing blocks not in datazone - block = 0, count = 4096
[  351.968760][T20182] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.4918: Invalid inode bitmap blk 0 in block_group 0
[  351.992656][T17402] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:47: lblock 1 mapped to illegal pblock 1 (length 1)
[  352.024504][T17402] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:47: Failed to release dquot type 0
[  352.036890][T20182] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem
[  352.058735][T20202] loop3: detected capacity change from 0 to 164
[  352.061756][T20182] EXT4-fs (loop2): 1 orphan inode deleted
[  352.099356][T20182] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  352.161273][T20182] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm syz.2.4918: lblock 1 mapped to illegal pblock 1 (length 1)
[  352.193388][T20182] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.4918: Failed to acquire dquot type 0
[  352.222028][T20210] netlink: 'syz.3.4928': attribute type 1 has an invalid length.
[  352.282273][T12605] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  352.358684][T20221] loop2: detected capacity change from 0 to 512
[  352.492377][T20218] lo speed is unknown, defaulting to 1000
[  352.600998][T20332] loop2: detected capacity change from 0 to 512
[  352.608144][T20332] msdos: Unknown parameter 'gh'
[  352.736460][T20337] macsec1: entered promiscuous mode
[  352.741764][T20337] bridge0: entered promiscuous mode
[  352.758668][T20337] bridge0: port 3(macsec1) entered blocking state
[  352.765350][T20337] bridge0: port 3(macsec1) entered disabled state
[  352.775450][T20337] macsec1: entered allmulticast mode
[  352.780842][T20337] bridge0: entered allmulticast mode
[  352.813292][T20337] macsec1: left allmulticast mode
[  352.818546][T20337] bridge0: left allmulticast mode
[  352.878281][T20337] bridge0: left promiscuous mode
[  353.101564][T20454] loop2: detected capacity change from 0 to 512
[  353.123983][T20459] loop1: detected capacity change from 0 to 512
[  353.172563][T20455] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  353.180736][T20459] msdos: Unknown parameter 'gh'
[  353.284988][T20459] macsec1: entered promiscuous mode
[  353.290250][T20459] bridge0: entered promiscuous mode
[  353.303509][T20455] netlink: 'syz.4.4944': attribute type 13 has an invalid length.
[  353.315337][T20459] bridge0: port 3(macsec1) entered blocking state
[  353.321894][T20459] bridge0: port 3(macsec1) entered disabled state
[  353.333402][T20459] macsec1: entered allmulticast mode
[  353.338860][T20459] bridge0: entered allmulticast mode
[  353.412143][T20459] macsec1: left allmulticast mode
[  353.417307][T20459] bridge0: left allmulticast mode
[  353.483727][T20459] bridge0: left promiscuous mode
[  353.661205][T20570] __nla_validate_parse: 5 callbacks suppressed
[  353.661218][T20570] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4949'.
[  353.705874][T20577] netlink: 'syz.2.4953': attribute type 1 has an invalid length.
[  353.737914][T20577] veth0: entered promiscuous mode
[  353.748047][T20577] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4953'.
[  353.762822][T20577] veth0 (unregistering): left promiscuous mode
[  353.815986][T20568] lo speed is unknown, defaulting to 1000
[  353.918211][T20590] loop2: detected capacity change from 0 to 164
[  354.148686][T20595] lo speed is unknown, defaulting to 1000
[  354.339808][T20606] netlink: 'syz.4.4963': attribute type 6 has an invalid length.
[  354.397128][T20606] program syz.4.4963 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  354.551439][   T29] kauditd_printk_skb: 352 callbacks suppressed
[  354.551454][   T29] audit: type=1400 audit(1755126748.073:18644): avc:  denied  { mount } for  pid=20616 comm="syz.1.4966" name="/" dev="ramfs" ino=66142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  354.596306][T20617] usb usb9: usbfs: process 20617 (syz.1.4966) did not claim interface 16 before use
[  354.605855][   T29] audit: type=1400 audit(1755126748.103:18645): avc:  denied  { write } for  pid=20616 comm="syz.1.4966" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  354.632505][   T29] audit: type=1400 audit(1755126748.153:18646): avc:  denied  { create } for  pid=20616 comm="syz.1.4966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  354.723815][T20617] loop1: detected capacity change from 0 to 2048
[  354.739826][T20627] loop2: detected capacity change from 0 to 512
[  354.749832][T20631] loop3: detected capacity change from 0 to 512
[  354.756160][   T29] audit: type=1400 audit(1755126748.273:18647): avc:  denied  { mounton } for  pid=20616 comm="syz.1.4966" path="/file1" dev="ramfs" ino=65301 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1
[  354.757370][T20627] msdos: Unknown parameter 'gh'
[  354.784025][T20631] EXT4-fs: inline encryption not supported
[  354.797104][T20631] ext4: Unknown parameter 'noacl'
[  354.806065][T20624] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4970'.
[  354.818070][   T29] audit: type=1400 audit(1755126748.343:18648): avc:  denied  { create } for  pid=20623 comm="syz.0.4970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  354.926400][   T29] audit: type=1400 audit(1755126748.363:18649): avc:  denied  { write } for  pid=20623 comm="syz.0.4970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  354.937876][T20635] macsec1: entered promiscuous mode
[  354.946234][   T29] audit: type=1400 audit(1755126748.363:18650): avc:  denied  { connect } for  pid=20623 comm="syz.0.4970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  354.951265][T20635] bridge0: entered promiscuous mode
[  354.974509][T20635] bridge0: port 3(macsec1) entered blocking state
[  354.976585][   T29] audit: type=1400 audit(1755126748.363:18651): avc:  denied  { name_connect } for  pid=20623 comm="syz.0.4970" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  354.983097][T20635] bridge0: port 3(macsec1) entered disabled state
[  355.012753][   T29] audit: type=1400 audit(1755126748.363:18652): avc:  denied  { mount } for  pid=20616 comm="syz.1.4966" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  355.032170][T20635] macsec1: entered allmulticast mode
[  355.034968][   T29] audit: type=1400 audit(1755126748.383:18653): avc:  denied  { connect } for  pid=20616 comm="syz.1.4966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  355.040156][T20635] bridge0: entered allmulticast mode
[  355.040890][T20702] loop1: detected capacity change from 0 to 512
[  355.075517][T20635] macsec1: left allmulticast mode
[  355.080653][T20635] bridge0: left allmulticast mode
[  355.090050][T20635] bridge0: left promiscuous mode
[  355.099251][T20630] lo speed is unknown, defaulting to 1000
[  355.105988][T20739] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4974'.
[  355.358767][T20753] netlink: 120 bytes leftover after parsing attributes in process `syz.2.4976'.
[  355.367951][T20753] netlink: 120 bytes leftover after parsing attributes in process `syz.2.4976'.
[  355.452764][T20755] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4977'.
[  355.703952][T20765] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20765 comm=syz.4.4980
[  355.759157][T20771] loop3: detected capacity change from 0 to 164
[  355.950735][T20779] loop3: detected capacity change from 0 to 164
[  356.017088][T20781] usb usb9: usbfs: process 20781 (syz.2.4985) did not claim interface 16 before use
[  356.075494][T20781] loop2: detected capacity change from 0 to 2048
[  356.191498][T20787] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4987'.
[  356.200628][T20787] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4987'.
[  356.223308][T20789] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4988'.
[  356.236132][T20789] loop2: detected capacity change from 0 to 512
[  356.262562][T20789] ext4 filesystem being mounted at /424/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  356.335411][T20794] loop1: detected capacity change from 0 to 512
[  356.378299][T20794] ext4 filesystem being mounted at /394/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  356.509873][T20804] loop2: detected capacity change from 0 to 512
[  356.543592][T20804] EXT4-fs: inline encryption not supported
[  356.565942][T20804] ext4: Unknown parameter 'noacl'
[  356.583770][T20808] loop4: detected capacity change from 0 to 1024
[  356.662838][T20816] loop4: detected capacity change from 0 to 164
[  356.688425][T20820] loop1: detected capacity change from 0 to 512
[  356.713020][T20820] msdos: Unknown parameter 'gh'
[  356.736267][T20823] netlink: 'syz.0.4997': attribute type 13 has an invalid length.
[  356.837990][T20828] macsec1: entered promiscuous mode
[  356.843243][T20828] bridge0: entered promiscuous mode
[  356.853934][T20828] bridge0: port 3(macsec1) entered blocking state
[  356.860485][T20828] bridge0: port 3(macsec1) entered disabled state
[  356.870648][T20828] macsec1: entered allmulticast mode
[  356.875975][T20828] bridge0: entered allmulticast mode
[  356.888939][T20828] macsec1: left allmulticast mode
[  356.894023][T20828] bridge0: left allmulticast mode
[  356.935303][T20828] bridge0: left promiscuous mode
[  356.952288][T20824] lo speed is unknown, defaulting to 1000
[  357.130379][T20846] loop3: detected capacity change from 0 to 1024
[  357.160676][T20863] loop1: detected capacity change from 0 to 164
[  357.163807][T20871] loop4: detected capacity change from 0 to 1024
[  357.460505][T20970] loop4: detected capacity change from 0 to 164
[  357.493091][T20972] loop1: detected capacity change from 0 to 512
[  357.528289][T20972] msdos: Unknown parameter 'gh'
[  357.625674][T20978] program syz.2.5017 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  357.649345][T20983] macsec1: entered promiscuous mode
[  357.654578][T20983] bridge0: entered promiscuous mode
[  357.672459][T20985] loop3: detected capacity change from 0 to 164
[  357.679270][T20983] bridge0: port 3(macsec1) entered blocking state
[  357.685800][T20983] bridge0: port 3(macsec1) entered disabled state
[  357.716779][T20983] macsec1: entered allmulticast mode
[  357.722300][T20983] bridge0: entered allmulticast mode
[  357.762863][T20983] macsec1: left allmulticast mode
[  357.767974][T20983] bridge0: left allmulticast mode
[  357.788233][T20983] bridge0: left promiscuous mode
[  357.801487][T20991] loop3: detected capacity change from 0 to 512
[  357.888781][T20989] lo speed is unknown, defaulting to 1000
[  358.138851][T21006] loop2: detected capacity change from 0 to 512
[  358.164984][T21006] ext4 filesystem being mounted at /428/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  358.389540][T21019] loop4: detected capacity change from 0 to 164
[  358.435649][T21023] loop2: detected capacity change from 0 to 164
[  358.490778][T21025] loop4: detected capacity change from 0 to 512
[  358.510629][T21025] netlink: 'syz.4.5033': attribute type 13 has an invalid length.
[  358.544032][T21025] loop4: detected capacity change from 0 to 1024
[  358.568085][T21025] EXT4-fs: inline encryption not supported
[  358.573974][T21025] EXT4-fs: Ignoring removed i_version option
[  358.583995][T21025] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  358.620737][T21025] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #3: block 1: comm syz.4.5033: lblock 1 mapped to illegal pblock 1 (length 1)
[  358.696806][T21025] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.5033: Failed to acquire dquot type 0
[  358.713885][T21025] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.5033: Freeing blocks not in datazone - block = 0, count = 4096
[  358.728332][T21025] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.5033: Invalid inode bitmap blk 0 in block_group 0
[  358.741253][T17367] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:15: lblock 1 mapped to illegal pblock 1 (length 1)
[  358.742108][T21025] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem
[  358.756065][T17367] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:15: Failed to release dquot type 0
[  358.764791][T21025] EXT4-fs (loop4): 1 orphan inode deleted
[  358.791787][T21025] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm syz.4.5033: lblock 1 mapped to illegal pblock 1 (length 1)
[  358.806180][T21025] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.5033: Failed to acquire dquot type 0
[  358.867981][T21037] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21037 comm=syz.3.5037
[  358.890423][T21043] __nla_validate_parse: 7 callbacks suppressed
[  358.890435][T21043] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5040'.
[  358.909600][T21043] loop1: detected capacity change from 0 to 512
[  358.927934][T21043] ext4 filesystem being mounted at /407/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  358.954037][T21040] lo speed is unknown, defaulting to 1000
[  359.043027][T21052] loop1: detected capacity change from 0 to 164
[  359.068922][T21052] syz.1.5042: attempt to access beyond end of device
[  359.068922][T21052] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  359.095470][T21052] syz.1.5042: attempt to access beyond end of device
[  359.095470][T21052] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164
[  359.115070][T21056] loop4: detected capacity change from 0 to 164
[  359.172675][T21059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5045'.
[  359.233201][T21057] program syz.0.5043 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  359.281600][T21066] loop4: detected capacity change from 0 to 512
[  359.294308][T21066] netlink: 'syz.4.5048': attribute type 13 has an invalid length.
[  359.431644][T21074] loop1: detected capacity change from 0 to 164
[  359.549634][T21082] netlink: 'syz.2.5055': attribute type 1 has an invalid length.
[  359.561339][   T29] kauditd_printk_skb: 861 callbacks suppressed
[  359.561354][   T29] audit: type=1326 audit(1755126753.083:19510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21083 comm="syz.0.5052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30d624ebe9 code=0x7ffc0000
[  359.602079][   T29] audit: type=1400 audit(1755126753.093:19511): avc:  denied  { ioctl } for  pid=21081 comm="syz.2.5055" path="socket:[67753]" dev="sockfs" ino=67753 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  359.613086][T21082] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5055'.
[  359.627296][   T29] audit: type=1326 audit(1755126753.113:19512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21083 comm="syz.0.5052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f30d624ebe9 code=0x7ffc0000
[  359.659957][   T29] audit: type=1326 audit(1755126753.113:19513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21083 comm="syz.0.5052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30d624ebe9 code=0x7ffc0000
[  359.683666][   T29] audit: type=1326 audit(1755126753.113:19514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21083 comm="syz.0.5052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30d624ebe9 code=0x7ffc0000
[  359.699432][T21088] loop3: detected capacity change from 0 to 164
[  359.707383][   T29] audit: type=1326 audit(1755126753.113:19515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21083 comm="syz.0.5052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f30d624ebe9 code=0x7ffc0000
[  359.737200][   T29] audit: type=1326 audit(1755126753.113:19516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21083 comm="syz.0.5052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30d624ebe9 code=0x7ffc0000
[  359.761036][   T29] audit: type=1326 audit(1755126753.113:19517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21083 comm="syz.0.5052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30d624ebe9 code=0x7ffc0000
[  359.784846][   T29] audit: type=1326 audit(1755126753.113:19518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21083 comm="syz.0.5052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f30d624ebe9 code=0x7ffc0000
[  359.808642][   T29] audit: type=1326 audit(1755126753.113:19519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21083 comm="syz.0.5052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30d624ebe9 code=0x7ffc0000
[  359.863818][T21091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5057'.
[  359.876130][T21092] loop3: detected capacity change from 0 to 1024
[  359.907661][T21092] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5058'.
[  360.046552][T21110] loop1: detected capacity change from 0 to 512
[  360.066569][T21113] loop2: detected capacity change from 0 to 512
[  360.089051][T21107] program syz.0.5061 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  360.253595][T21167] loop3: detected capacity change from 0 to 512
[  360.263811][T21182] netlink: 'syz.4.5068': attribute type 1 has an invalid length.
[  360.271852][T21167] msdos: Unknown parameter 'gh'
[  360.347014][T21182] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5068'.
[  360.389403][T21232] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5070'.
[  360.636542][T21246] loop3: detected capacity change from 0 to 1024
[  360.648688][T21248] loop4: detected capacity change from 0 to 512
[  360.680697][T21248] netlink: 'syz.4.5077': attribute type 13 has an invalid length.
[  360.737050][T21246] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5076'.
[  360.991592][T21255] loop3: detected capacity change from 0 to 512
[  361.052972][T21261] loop4: detected capacity change from 0 to 164
[  361.182481][T21270] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5084'.
[  361.275946][T21276] usb usb9: usbfs: process 21276 (syz.2.5085) did not claim interface 16 before use
[  361.315822][T21276] loop2: detected capacity change from 0 to 2048
[  361.346971][T21280] loop4: detected capacity change from 0 to 512
[  361.384912][T21280] msdos: Unknown parameter 'gh'
[  361.450375][T21284] loop2: detected capacity change from 0 to 512
[  361.460431][T21284] EXT4-fs: inline encryption not supported
[  361.468979][T21284] ext4: Unknown parameter 'noacl'
[  361.874648][T21294] loop4: detected capacity change from 0 to 512
[  362.118703][T21353] loop3: detected capacity change from 0 to 164
[  362.138112][T21353] syz.3.5094: attempt to access beyond end of device
[  362.138112][T21353] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  362.170617][T21353] syz.3.5094: attempt to access beyond end of device
[  362.170617][T21353] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164
[  362.385619][T21417] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21417 comm=syz.3.5095
[  362.434918][T21419] usb usb9: usbfs: process 21419 (syz.0.5098) did not claim interface 16 before use
[  362.936882][T21434] loop4: detected capacity change from 0 to 512
[  362.958062][T21434] ext4 filesystem being mounted at /405/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  362.972016][T21437] loop1: detected capacity change from 0 to 512
[  363.231074][T21446] loop4: detected capacity change from 0 to 164
[  363.260725][T21449] loop2: detected capacity change from 0 to 164
[  363.310858][T21449] syz.2.5106: attempt to access beyond end of device
[  363.310858][T21449] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  363.312713][T21451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  363.367779][T21449] syz.2.5106: attempt to access beyond end of device
[  363.367779][T21449] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164
[  363.372637][T21451] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  363.390614][T21453] loop4: detected capacity change from 0 to 1024
[  363.420091][T21453] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5107'.
[  363.460743][T21458] loop2: detected capacity change from 0 to 1024
[  363.503244][T21451] 9pnet_fd: Insufficient options for proto=fd
[  363.754938][T21479] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21479 comm=syz.2.5115
[  363.785638][T21469] program syz.4.5113 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  363.950977][T21481] loop1: detected capacity change from 0 to 164
[  364.198924][T21495] __nla_validate_parse: 4 callbacks suppressed
[  364.198940][T21495] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5124'.
[  364.230033][T21494] loop3: detected capacity change from 0 to 164
[  364.392518][T21498] loop1: detected capacity change from 0 to 164
[  364.539380][T21505] loop3: detected capacity change from 0 to 164
[  364.567310][T21506] loop2: detected capacity change from 0 to 512
[  364.573795][   T29] kauditd_printk_skb: 798 callbacks suppressed
[  364.573809][   T29] audit: type=1326 audit(1755126758.083:20318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21511 comm="syz.0.5131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f30d6245ba7 code=0x7ffc0000
[  364.603612][   T29] audit: type=1326 audit(1755126758.083:20319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21511 comm="syz.0.5131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f30d61eadd9 code=0x7ffc0000
[  364.627221][   T29] audit: type=1326 audit(1755126758.083:20320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21511 comm="syz.0.5131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f30d6245ba7 code=0x7ffc0000
[  364.650811][   T29] audit: type=1326 audit(1755126758.083:20321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21511 comm="syz.0.5131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f30d61eadd9 code=0x7ffc0000
[  364.674439][   T29] audit: type=1326 audit(1755126758.083:20322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21511 comm="syz.0.5131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30d624ebe9 code=0x7ffc0000
[  364.700267][   T29] audit: type=1326 audit(1755126758.103:20323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21511 comm="syz.0.5131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30d624ebe9 code=0x7ffc0000
[  364.724010][   T29] audit: type=1326 audit(1755126758.103:20324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21511 comm="syz.0.5131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f30d624ebe9 code=0x7ffc0000
[  364.747881][   T29] audit: type=1326 audit(1755126758.103:20325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21511 comm="syz.0.5131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f30d624ec23 code=0x7ffc0000
[  364.771455][   T29] audit: type=1326 audit(1755126758.103:20326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21511 comm="syz.0.5131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f30d624d69f code=0x7ffc0000
[  364.794990][   T29] audit: type=1326 audit(1755126758.103:20327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21511 comm="syz.0.5131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f30d624ec77 code=0x7ffc0000
[  364.823924][T21510] loop4: detected capacity change from 0 to 164
[  365.166497][T21524] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5133'.
[  365.241816][T21506] ext4 filesystem being mounted at /449/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  365.280990][T21527] loop3: detected capacity change from 0 to 512
[  365.288419][T21506] EXT4-fs error (device loop2): ext4_lookup:1787: inode #12: comm syz.2.5128: iget: bad i_size value: 2533274857506816
[  365.290471][T21529] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5135'.
[  365.347742][T21530] EXT4-fs error (device loop2): ext4_lookup:1787: inode #12: comm syz.2.5128: iget: bad i_size value: 2533274857506816
[  365.376577][T21527] ext4 filesystem being mounted at /373/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  365.524425][T21541] loop4: detected capacity change from 0 to 164
[  365.665163][T21556] loop4: detected capacity change from 0 to 164
[  365.675018][T21554] netlink: 'syz.0.5145': attribute type 13 has an invalid length.
[  365.736226][T21560] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5146'.
[  365.745261][T21560] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5146'.
[  365.871540][T21565] loop3: detected capacity change from 0 to 164
[  365.968115][T21565] syz.3.5148: attempt to access beyond end of device
[  365.968115][T21565] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  366.031806][T21565] syz.3.5148: attempt to access beyond end of device
[  366.031806][T21565] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164
[  366.167334][T21578] loop3: detected capacity change from 0 to 164
[  366.272883][T21575] lo speed is unknown, defaulting to 1000
[  366.334824][T21586] loop3: detected capacity change from 0 to 164
[  366.480947][T21588] loop1: detected capacity change from 0 to 1024
[  366.586461][T21592] loop3: detected capacity change from 0 to 164
[  366.913292][T21612] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5166'.
[  366.960998][T21625] program syz.3.5168 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  366.999363][T21624] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  367.015402][T21624] netlink: 'syz.4.5170': attribute type 13 has an invalid length.
[  367.040187][T21632] loop1: detected capacity change from 0 to 164
[  367.150081][T21635] loop4: detected capacity change from 0 to 164
[  367.326601][T21644] loop4: detected capacity change from 0 to 1024
[  367.356278][T21644] EXT4-fs mount: 56 callbacks suppressed
[  367.356292][T21644] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  367.405100][T21640] lo speed is unknown, defaulting to 1000
[  367.438472][T14119] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  367.518218][T21619] ==================================================================
[  367.526327][T21619] BUG: KCSAN: data-race in touch_atime / touch_atime
[  367.527204][T21654] loop4: detected capacity change from 0 to 512
[  367.533013][T21619] 
[  367.533023][T21619] write to 0xffff888112d05830 of 4 bytes by task 21604 on cpu 1:
[  367.533040][T21619]  touch_atime+0x1e8/0x340
[  367.533066][T21619]  shmem_file_splice_read+0x5b1/0x600
[  367.559115][T21619]  splice_direct_to_actor+0x26c/0x680
[  367.564490][T21619]  do_splice_direct+0xda/0x150
[  367.569255][T21619]  do_sendfile+0x380/0x650
[  367.573676][T21619]  __x64_sys_sendfile64+0x105/0x150
[  367.578869][T21619]  x64_sys_call+0x2bb0/0x2ff0
[  367.583533][T21619]  do_syscall_64+0xd2/0x200
[  367.588031][T21619]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  367.593919][T21619] 
[  367.596239][T21619] read to 0xffff888112d05830 of 4 bytes by task 21619 on cpu 0:
[  367.603858][T21619]  touch_atime+0x194/0x340
[  367.608273][T21619]  shmem_file_splice_read+0x5b1/0x600
[  367.613637][T21619]  splice_direct_to_actor+0x26c/0x680
[  367.618999][T21619]  do_splice_direct+0xda/0x150
[  367.623750][T21619]  do_sendfile+0x380/0x650
[  367.628158][T21619]  __x64_sys_sendfile64+0x105/0x150
[  367.633349][T21619]  x64_sys_call+0x2bb0/0x2ff0
[  367.638017][T21619]  do_syscall_64+0xd2/0x200
[  367.642519][T21619]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  367.648411][T21619] 
[  367.650745][T21619] value changed: 0x020c78c5 -> 0x0291a211
[  367.656444][T21619] 
[  367.658748][T21619] Reported by Kernel Concurrency Sanitizer on:
[  367.664877][T21619] CPU: 0 UID: 0 PID: 21619 Comm: syz.0.5163 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094 #0 PREEMPT(voluntary) 
[  367.677362][T21619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  367.687422][T21619] ==================================================================
[  367.750646][T21654] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  368.368643][T14119] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.