last executing test programs:

2.380356615s ago: executing program 3 (id=1165):
r0 = socket(0x2, 0x80805, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x20ffe, 0x0, 0x0, 0x40f00, 0xac, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94)
r2 = bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'})
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000700)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=r1], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r3}, 0x10)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(0xffffffffffffffff, 0x0, 0x0)
fchdir(r5)
r6 = inotify_init1(0x800)
inotify_add_watch(r6, &(0x7f0000000240)='.\x00', 0x60000526)
r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x1aa)
getdents64(r7, &(0x7f0000000f80)=""/4096, 0x1000)
sendmsg$nl_xfrm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x70bd24, 0x0, {{@in6=@mcast1, 0x0, 0x6c}, @in6=@remote, {@in=@rand_addr=0x64010100, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x4e24}, {{@in=@rand_addr=0x64010102, @in=@dev={0xac, 0x14, 0x14, 0xfd}, 0x4e23, 0x269, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, 0x7, 0x6e6bb8, 0x0, 0x0, 0x1}, 0xfffffffe, 0xaea}, [@tmpl={0x44, 0x8, [{{@in6=@remote, 0x4d6}, 0x0, @in=@remote}]}]}, 0x16c}}, 0x4004040)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r8, 0x0, 0xfffffffffffffffc}, 0x18)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)

2.22921632s ago: executing program 4 (id=1167):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d7"], &(0x7f0000000100)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000340)='kfree\x00', r0}, 0x18)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='\x00\x00\x00\x00\x00')
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000)

2.217856861s ago: executing program 3 (id=1168):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e000000000000000500"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00', r2}, 0x10)
r3 = dup2(r1, r1)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8})
ioctl$BLKTRACESETUP(r3, 0x1276, 0x0)

2.156592267s ago: executing program 4 (id=1169):
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000010000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket(0x10, 0x3, 0x6)
r2 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)

2.155880187s ago: executing program 0 (id=1170):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000e91000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000e91000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000f85000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r1 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000080)={@empty}, 0x14)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815000100e000000103600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x4000000)
close(r1)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r3 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4)
io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000540)=0x710, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0xc, 0x4)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r4}, &(0x7f0000000380), &(0x7f00000003c0)=r5}, 0x20)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]})
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r6}, 0x10)
r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9901)
mount_setattr(r7, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000000080)={0xb, 0x0, 0x40000}, 0x20)
sendto$inet6(r0, 0x0, 0x0, 0x20000080, &(0x7f0000006080)={0xa, 0x4e24, 0x4, @loopback, 0x4}, 0x1c)

1.938467658s ago: executing program 4 (id=1171):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0, <r2=>0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r4, 0x0, 0xffef, 0x20000000, &(0x7f0000000240)={0x2, 0x4e22, @remote}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r3}, 0x18)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r5=>r2}, './file0\x00'})
ioctl$RNDZAPENTCNT(r5, 0x5204, &(0x7f0000000180)=0x1)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="495300000000fbdbdf515d66a27a91d10600f41ac1b769497fcfe4ea70ce95ce69479e2d98fdceec2c7750d3edce3d82366a8abe3ff71ae80ba859c45f8fe43e096d698da1ab05213643", @ANYRES32=0x0, @ANYBLOB="10001d800c00008008000d8004000080"], 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0)
syz_genetlink_get_family_id$team(&(0x7f00000003c0), r6)
sendmsg$NL80211_CMD_GET_SURVEY(r6, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14eeff00", @ANYRES16=r7, @ANYBLOB="200027bd7000fddbdf2532000000"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x1)
ioctl$BLKDISCARDZEROES(r5, 0x127c, &(0x7f0000000400))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4050)
recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)

1.82185255s ago: executing program 0 (id=1173):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="09000000040000000800000010"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
socket(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000080), 0x6, 0x454, &(0x7f0000000ac0)="$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")

1.8216242s ago: executing program 4 (id=1174):
epoll_create1(0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
unshare(0x64000600)
listen(0xffffffffffffffff, 0x0)

1.772303005s ago: executing program 0 (id=1175):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000880)="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", 0x2fa}], 0x1}}], 0x1, 0x480e0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x68a, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

1.743502608s ago: executing program 1 (id=1177):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080000000000000010000009400000007ad4160850000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10)
r1 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$inet(0xa, 0x801, 0x84)
r5 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x2, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r5, 0xfffffffd)
listen(r4, 0x8)
r6 = socket$inet(0xa, 0x801, 0x84)
listen(r6, 0x8)
r7 = socket$inet(0xa, 0x801, 0x84)
listen(r7, 0x8)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173"], 0x5c}}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x30040043}, 0x240008c4)
r9 = socket$inet6(0xa, 0x1, 0x8010000000000084)
listen(r9, 0x7)
r10 = socket$netlink(0x10, 0x3, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r10)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='rxrpc_local\x00', r12, 0x0, 0x200ffff}, 0x18)
socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010", @ANYRES64=r6, @ANYRES8=r6, @ANYRES16=r9], 0x10b8}, 0x4004010)
writev(r10, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x12, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x8, 0x4], [0x0, 0x8, 0x1, 0xfffe, 0x5, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xddf0, 0xfffe]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)

1.737538598s ago: executing program 3 (id=1178):
r0 = socket(0x2, 0x80805, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x20ffe, 0x0, 0x0, 0x40f00, 0xac, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94)
r2 = bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'})
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000700)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=r1], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r3}, 0x10)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(0xffffffffffffffff, 0x0, 0x0)
fchdir(r5)
r6 = inotify_init1(0x800)
inotify_add_watch(r6, &(0x7f0000000240)='.\x00', 0x60000526)
r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x1aa)
getdents64(r7, &(0x7f0000000f80)=""/4096, 0x1000)
sendmsg$nl_xfrm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x70bd24, 0x0, {{@in6=@mcast1, 0x0, 0x6c}, @in6=@remote, {@in=@rand_addr=0x64010100, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x4e24}, {{@in=@rand_addr=0x64010102, @in=@dev={0xac, 0x14, 0x14, 0xfd}, 0x4e23, 0x269, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, 0x7, 0x6e6bb8, 0x0, 0x0, 0x1}, 0xfffffffe, 0xaea}, [@tmpl={0x44, 0x8, [{{@in6=@remote, 0x4d6}, 0x0, @in=@remote}]}]}, 0x16c}}, 0x4004040)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r8, 0x0, 0xfffffffffffffffc}, 0x18)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)

1.675817534s ago: executing program 2 (id=1179):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000340)='kfree\x00', r0}, 0x18)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='\x00\x00\x00\x00\x00')
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000)

1.675569204s ago: executing program 1 (id=1180):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000006a0083"], 0x20}}, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (fail_nth: 8)

1.675143354s ago: executing program 3 (id=1181):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x8, &(0x7f00000000c0), 0x1, 0x4d5, &(0x7f0000000a00)="$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")
ppoll(0x0, 0x0, &(0x7f0000000180)={0x0, 0x989680}, &(0x7f00000001c0), 0x8)
chown(&(0x7f0000000040)='./file1\x00', 0x0, 0x0)
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000980)='./file0\x00', 0x2000000, &(0x7f00000010c0)=ANY=[@ANYBLOB='map=off,hide,showassoc,gid=', @ANYRESHEX, @ANYBLOB=',utf8,nojoliet,check=strict,gid=', @ANYRESHEX, @ANYBLOB="2c6e6f636f6d70726573732c6d61703d6e92eb3d7e949c770d696f726d616c2c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',showassoc,unhide,mode=0x0000000000000000,showassoc,mode=0x0000000000000001,norock,smackfshat=obj_user,nomand,euid<', @ANYRESDEC, @ANYBLOB=',obj_user=\\$:,appraise_type=imasig,hash,\x00'], 0x1, 0x943, &(0x7f0000001500)="$eJzs3c1vHGcZAPBnNl7iuFWakrRx3ENXTYxMBM7uRkmIcsHxrp0tthfZjtSKi4G4KIqhiIIUKg5BQpyI4IA4wC1HThG99ITyV3Dgkj+AS8TJN1fv7PojzX44luN13d9Pmp2dmWfe55l9Z+eVP3Yn+Crb2NjIpz0u3/7nQRbL4XOz9vTR44dp+v1afCOOxZXs84jhiChFDEXEaERxurbYnO/T0L2IlYh4EpFFxPFozXdlJbI/x+vby08i+0fK29uum6eHDb7WBn3+AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAYZRN18rlShZzjYXbH5S6y28B3mP7ZnvNQnosNPvmjcjSFMPDm7f6Hj29vfmt9PBenG0tnc1vSB7D8elrb5+6cXqosLl/j4IOxCe//fTej9fWVn816EIGZLa+0FhqNuanZuulxlKzdP3q1fKlWzNLpZnGXH3pw6Xl+nxperE+tdxcLE1Mf7tUuX79cqk++WHz9sJsbWquvrny2ner5fLV0vuTP6xPLS41Fy69P7k0fasxN9dYmM1j0uYUcy2diD9oLJeW61PzpdJHd9dWL/crMgVVdhNU7RdULVerlUq1Wrl65fqVa+Xy0Asryl8SL0QM/qRlsPb9Gg57tdEe/wEAAICjK8t/x55+/i/mv4fPYqYxVy8PuiwAAABgH+V/+T+bZsWIONFe6+d/AAAAOEr6f8aub0T2nTjXijh3pzW/04741/E8YmSmMVefnG7O3ajEt7Y+7de5tWL+7wcXY6wVNTbSmo+0o9qfHBxOUZXJG5W4GO+0It6ZOJ9m5yd2RGYR+b8zVFuR7U/elDYji1uvwlabl1MkABx17/UZj3cz/l+M8VbE+FgadmNorMNoXTayAsBhsfUNNq/wyaCPEQB4nlEaAAAAAAAAAAAAAAAAAAAAAAAAAAAA9t9BfP+/J5548lV7MugrEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA11MWcazT+kLE8YgoR8Slg6/q1Xkw6AIGLFuP9bgfJwddBwAAAAAAAAAAAAAAAAAAAAAAAAAAAADAUdP+/v9CtOavtVbFUCFiPCJWIuJHg65xTzre1SBi/aDrOGR2fP9/6vPYyGKo1e2RFadri8351P35vR8KTx89fpim9q4/f5k8qYGU4bluaGfovteb+V4jtdVP7v3641+WajfzIm8uz8zV5mcXv78d+Hb2WUQpWtOmE+16fzf+7790OPLP0pHuLu9Mnrf2Yt6znfZ+2jNvL3fXVqsp03L9g+Xf/OLu/R2bvhljEecnIiaez/SzNHXJNBbFXtmyZ9kfs5Pxt1jJ+z+9GtlGlrrojfz4T3x0d2118qcfr93pUtOpGI2IOxHDu69pNL+edJSfdYViylrOg9LDmT7t9bSjxUqXY3gzzkXEyEsdw7nux5Dr87q3K7rcpaLT8e5L9/S7fTJ2lD3L/pvdiv/EH3bc/6OQ+n88dvPuTDF55I4zpWtkoRWZH3m1Z5td35XsTaHXxj/FT+J7W/1f2HH9b/fVwVyPdmR89e+L7UHozJdGpPbVp1uV7TrPtKK61PlWXIgYGnupK8qFPleUF/cv7uI4+8ieZX/PJuL/8cD9fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMMvizjWaX0hYjwiTkXEG2m5FLGxH/kKI1n87+R+tLQ3DwaX+lDI1mM97scAewAAAAAAAACA/XSz9vTR44dpytLisbiQfR4x3PpL/1BEnMr+WpyuLTbn+zRUjFiJiCd7qCHtF69vLz9JS6N7aAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCPriwAAAP//hO21Ig==")
setgroups(0x1, &(0x7f00000010c0)=[0x0])
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, 0x0, 0x0)
socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1fb}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r3}, 0x18)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0)
syz_open_procfs(0x0, &(0x7f0000001240)='net/igmp6\x00')
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000001080), 0x4)
recvmsg$unix(r4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x80000, 0x2)

1.577136104s ago: executing program 2 (id=1182):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x56899130b459a9f4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x4}, 0x18)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]})
r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r4 = fsopen(&(0x7f00000006c0)='sysfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x0)
fchdir(r5)
r6 = inotify_init1(0x800)
inotify_add_watch(r6, &(0x7f0000000240)='.\x00', 0x60000526)
r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x1aa)
getdents64(r7, &(0x7f0000000f80)=""/4096, 0x1000)
getdents64(r7, 0x0, 0x0)
syz_io_uring_setup(0x1b7b, &(0x7f0000000340)={0x0, 0xdd25, 0x10000, 0x3, 0x3d7, 0x0, r3}, &(0x7f0000000400)=<r8=>0x0, &(0x7f0000000440))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x110, &(0x7f00000004c0)=0x3ff, 0x0, 0x4)
r9 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r10 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r11 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r11, 0x0)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94)
write$P9_RVERSION(r10, &(0x7f0000000c40)=ANY=[], 0x13)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r12, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40)
mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r9, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)
r13 = socket(0x1e, 0xa, 0xffff412d)
connect$netlink(r13, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc)
kexec_load(0xff0, 0x2, &(0x7f00000002c0)=[{0x0, 0x0, 0x200000000000, 0x10002}, {0x0, 0x0, 0x3e0000, 0xed}], 0x0)
r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001ec0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r14}, 0x10)

1.572907015s ago: executing program 1 (id=1183):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000540)='kfree\x00', r0, 0x0, 0x4}, 0x18)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x94, 0x24, 0xd0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x200, 0x0, 0xfffd]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) (fail_nth: 4)

1.167379234s ago: executing program 2 (id=1184):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000a0095000000000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="00000400000002e800"/21, @ANYRES32=<r4=>0xffffffffffffffff, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00'/24], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="180058f613ecde46e90000000000000000fbffffff850000002a", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085000000330000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r5, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000340)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x31}}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e20, 0x4, @local, 0x1}], 0x3c)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES8=r2, @ANYRES32=r6, @ANYBLOB="5d980a1910b71a5d6573e0ba25a72a718ad850c5c47d68ffa9ac8b8107cee376001bb40293908a962321f6e8dca32fc94930debcc0f6d386baa19327170b9c73034983abf52da8f2cea07529baf3c3dbee109250d25459dc797cc3f08e0e699b7f50ffcd8c9f28712d8852949de9ab92e0c506f322d223a8cde5afd901bfddf3e4864e39fd734a56b00dc02d7f4719fbd0140d5ba712ce5ea27da8a3647866ecdc83d1b0fe237974f608c5262469b80faf2be43122f78b3a2deef40327ced67ebd01427b"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="07000000040000000800000001000000000000004a4cc9952411093d8a907a3ab70d449c1e74c67a3dbd693e52105b3b7f551277a66909bd485d489080b0c186365c01284327cc125b79f2f89d48679bc900ff17cef50b9bed2abb358ac23abf9ddb7a28a61b63503bf63ec1b17d7c485b380860", @ANYRES32, @ANYBLOB="0000927ae74b60bd35469e1d00000002004a00"/30, @ANYRES32=r6, @ANYRES32, @ANYRES32=r4], 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
r7 = open(&(0x7f0000000000)='./file0\x00', 0x1607c0, 0x78e22799f4a46ffe)
socket$inet(0x2, 0x3, 0xd)
fcntl$getflags(r7, 0x401)
r8 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fcntl$setlease(r8, 0x400, 0x1)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0x1ffffffffffffebe, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r10}, 0x10)
fcntl$setlease(r8, 0x400, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r11, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94)

1.166814564s ago: executing program 1 (id=1185):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0xf)
r1 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r1, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0)
sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0, 0x300}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c000400"/44, @ANYRES32=0x0], 0x30}], 0x1, 0x0) (fail_nth: 10)

1.051053426s ago: executing program 1 (id=1186):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2e, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x330b9072}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x18)
quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000000)=@rnullb, 0x0, &(0x7f00000000c0)='./file0\x00')
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020a07b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6f, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r1}, 0x18)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0xfe, 0x0, 0xff, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'sh\x00', 0x15, 0x88, 0xc000067}, 0x2c)

1.050747206s ago: executing program 2 (id=1187):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000540)='kfree\x00', r0, 0x0, 0x4}, 0x18)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', <r2=>0x0})
getsockopt$inet_opts(r1, 0x0, 0xf, &(0x7f0000000400)=""/162, &(0x7f00000004c0)=0xa2)
set_robust_list(&(0x7f0000000280)={&(0x7f0000000240)={&(0x7f0000000180)}, 0x965, 0xfffffffffffffffc}, 0x18)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030f0000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e22ac1414bb0000000000000000020001d6e5d42e000000070c01000000030005000000000002004e21ac3297f87444bc5ffe000000020013000300000028bd700003350000"], 0x78}, 0x1, 0x7}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa)
chdir(&(0x7f00000001c0)='./file0\x00')
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1)
r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xa, 0x4, 0x8, 0xc, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50)
r8 = socket$kcm(0x29, 0x5, 0x0)
sendmsg(r8, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002b80)="b2", 0x1}], 0x1}, 0x4000)
close(r8)
getgroups(0x2, &(0x7f0000000600)=[0xffffffffffffffff, 0x0])
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x94, 0x24, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xe}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0xf, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x200, 0x0, 0xfffe]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)

904.37479ms ago: executing program 0 (id=1188):
prlimit64(0x0, 0xe, &(0x7f0000001140)={0x8, 0x80008b}, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0, &(0x7f00000004c0)='%-5lx  \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000540)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000d000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa10000000000000701", @ANYRES32, @ANYBLOB="0000000000000000b705000008000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000340)="c1dfb080cd21d308098e00000000", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7)
bpf$MAP_CREATE(0x700000000000000, &(0x7f0000001a00)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000048000000030a01020000000000000000010000000900030073797a31000000001c0004800800024000000000080001400000000208000140000000010900010073797a31000000004c000000050a01030000000000000000010020000c00024000000000000000010900010073797a3100003890200004"], 0xdc}}, 0x0)

885.183522ms ago: executing program 4 (id=1189):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
timer_settime(r1, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x40200, 0x0)
preadv2(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x1, 0x0, 0x4, 0x1)

844.941706ms ago: executing program 0 (id=1190):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e000000000000000500"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00', r2}, 0x10)
r3 = dup2(r1, r1)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8})
ioctl$BLKTRACESETUP(r3, 0x1276, 0x0)

787.455732ms ago: executing program 2 (id=1191):
bpf$ENABLE_STATS(0x20, 0x0, 0xfffffffffffffff5)
r0 = syz_open_dev$usbfs(0x0, 0x3, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0x54bd, <r1=>0x0}, 0x8)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000180)=""/8, 0x101000, 0x800, 0x3, 0x1}, 0x20)
setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000100)=0x1000000, 0x4)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00', <r4=>0x0})
setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000400)=0x20020, 0x4)
bind$xdp(r2, &(0x7f0000000240)={0x2c, 0x8, r4}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r4, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10)
syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f00000000c0)={0x0, 0x80000001, 0x2, 0x2, 0x1, 0x0, [{0xd800000000000000, 0x5, 0x1, '\x00', 0x20a}]})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r7}, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'sit0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48801}, 0x4)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x10, &(0x7f0000000300), 0x1, 0x51a, &(0x7f0000000880)="$eJzs3U1vW1kZAODXbj6cTDrJDLMABEwZBgoqdRJ3JhrNAoYVQmgkxCxB6oTEjaLYcRQ7wyR0kf4HJCqxgiU/gHVX7Nkg2LEpCyQ+IlBTiYXRvb5JXcdO0kliV/bzSFf3fNj3PSeJz/E9SXwCGFk3ImI/IiYi4uOImM3Kc9kRH7SO5HFPDu6vHB7cX8lFs/nRv3JpfVIWbc9JvJJdsxARP/5+xM9yJ+PWd/c2liuV8naWn29Ut+bru3u316vLa+W18maptLS4tPDenXdLl9bXN6sTWerLj/+4/61fJM2ayUra+3GZWl0fP44T2df8h1cRbACuRcRY9vOTuT7I9vBi8hHxekS8lb7+Z+Na+t0EAIZZszkbzdn2PAAw7PLpGlguX8zWAmYiny8WW2t4b8R0vlKrN27dq+1srrbWyuZiPH9vvVJeyNYK52I8l+QX0/SzfKkjfyciXouIX05OpfniSq2yOsg3PgAwwl7pmP//O9ma/wGAIVcYdAMAgL4z/wPA6Dlr/p/oUzsAgP5x/w8Ao+fM+X+/P+0AAPrH/T8AjB7zPwCMlB99+GFyNA+zz79e/WR3Z6P2ye3Vcn2jWN1ZKa7UtreKa7XaWvqZPdWzrlep1bYW34mdT+e+s1VvzNd39+5Wazubjbvp53rfLY/3pVcAwGlee/PRX3IRsf/+VHpE25/7m6thuOUH3QBgYK4NugHAwNjtC0bXBe7xLQ/AkOiyRe9zChEx1VnYbDabV9ck4Ird/IL1fxhVbev//goYRoz1fxhdPdf/T9zsA8Om2cydd8//OO8DAYCXmzV+oMfv/1/Pzr/Lfjnw09XORzzsLPAfBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIyOo/1/i9nOHTORzxeLEdcjYi7Gc/fWK+WFiHg1Iv48OT6Z5BcH3GYA4KLyf89l+3/dnH17prN2Ivd0Mj1HxM9//dGvPl1uNLb/lJT/+7i88TArLw2i/QDAWY7m6fTcdiP/5OD+ytHRz/b843sRUWjFPzyYiMPj+GMxlp4Lk+MRMf2fXJZvybWtXVzE/oOI+Hy3/udiJl0Dae182hk/iX29r/Hzz8XPp3Wtc/K1+Fz3y09cQhNhaD1Kxp8Pur3+8nEjPXd//RfSEerisvEvudTKYToGPoufjX/pWNNt/Ltx3hjv/OEHrdTUyboHEV8ciziKfdg2/qTxvt16Trf4b5+8XFd//dJX3upV1/xNxM3oHr891nyjujVf3927vV5dXiuvlTdLpaXFpYX37rxbmk/XqOd7zwb/fP/Wq73qkv5P94jf+s4X0vjd+v/183U/fvu/j3/y1VPif/Nr3eLn441T4idz4jfOGX95+veFXnVJ/NUe/R87JX5Sduuc8R//be/EtuEAwODUd/c2liuV8nZHInnz06NKQuKMRPLu8EqunPzIvgwd7Jb4br9iTcQLPavZ/Eyxeo0Yl7HqBrwMjl/0EfF00I0BAAAAAAAAAAAAAAC66sd/LA26jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyv/wcAAP//CsfP6Q==")

786.792382ms ago: executing program 3 (id=1192):
r0 = socket(0x2, 0x80805, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x20ffe, 0x0, 0x0, 0x40f00, 0xac, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94)
r2 = bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'})
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000700)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=r1], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r3}, 0x10)
r4 = fsopen(&(0x7f00000006c0)='sysfs\x00', 0x0)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x0)
fchdir(r5)
r6 = inotify_init1(0x800)
inotify_add_watch(r6, &(0x7f0000000240)='.\x00', 0x60000526)
r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x1aa)
getdents64(r7, &(0x7f0000000f80)=""/4096, 0x1000)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x70bd24, 0x0, {{@in6=@mcast1, 0x0, 0x6c}, @in6=@remote, {@in=@rand_addr=0x64010100, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x4e24}, {{@in=@rand_addr=0x64010102, @in=@dev={0xac, 0x14, 0x14, 0xfd}, 0x4e23, 0x269, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, 0x7, 0x6e6bb8, 0x0, 0x0, 0x1}, 0xfffffffe, 0xaea}, [@tmpl={0x44, 0x8, [{{@in6=@remote, 0x4d6}, 0x0, @in=@remote}]}]}, 0x16c}}, 0x4004040)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r8, 0x0, 0xfffffffffffffffc}, 0x18)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)

744.064336ms ago: executing program 3 (id=1193):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="f91bbf5c6d54923af37e434c"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket(0x10, 0x2, 0x0)
getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000010000305ff810000fddbdf2500000000", @ANYRES32=r2, @ANYBLOB="174800002d000200280012800a00010063616e00"], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60040, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000201000085000000430000"], 0x0, 0x1ffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', <r4=>0x0})
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000100)={r4, 0x2, 0x6}, 0x10)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r5}, 0x10)
syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0)

711.832519ms ago: executing program 0 (id=1194):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="f91bbf5c6d54923af37e434c"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket(0x10, 0x2, 0x0)
getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000010000305ff810000fddbdf2500000000", @ANYRES32=r2, @ANYBLOB="174800002d000200280012800a00010063616e00"], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60040, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000201000085000000430000"], 0x0, 0x1ffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', <r5=>0x0})
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={r5, 0x2, 0x6}, 0x10)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x47, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a7000000080000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r7}, 0x10)
syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0)

538.352307ms ago: executing program 2 (id=1195):
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
r0 = getpid()
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000008385000000710000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18)
ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0xd000}], 0x1, 0x0, 0x0, 0x0)
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000080)=@unlock_all, 0xb)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000300)=""/180}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r3}, 0x10)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
mount$9p_rdma(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x40008, &(0x7f0000000540)={'trans=rdma,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@sq={'sq', 0x3d, 0xc}}, {@sq={'sq', 0x3d, 0x80000000}}, {@timeout={'timeout', 0x3d, 0x4}}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'rss_stat\x00'}}]}})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_GET(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="0100010000000000000054"], 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x0)
process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000240)={'gre0\x00', <r7=>0x0, 0x1, 0x20, 0x5, 0x5, {{0x10, 0x4, 0x0, 0x5, 0x40, 0x65, 0x0, 0x2, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x26}, @empty, {[@cipso={0x86, 0x2a, 0xffffffffffffffff, [{0x2, 0x12, "a56a012e8aaba8c4cc768e04134b9dcb"}, {0x7, 0x3, '5'}, {0x5, 0x3, "be"}, {0x6, 0xc, "1efffc706339b5066a75"}]}, @noop, @end]}}}}})
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r8, &(0x7f0000000cc0)=[{{&(0x7f00000004c0)={0xa, 0x4e21, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f00000007c0)=[{&(0x7f0000000680)="e37ef8397ac214d6bff2d5c23b921bd396d170896b6110c99686c25230c9f4f707274722e2f288b12c7dd050728389ff9d72ed7445715b82daaaa1c7a9253266864f79f61ba74380d1e7f1a454a8c496cd1b685eb13ac04b95d1e56515c6e39e7326e1761658c76e3652e12866dd7d9d0663776bc9bf66", 0x77}, {&(0x7f0000000700)="3ba9259b2b33eadec66d9e8a4c1e241b288dd84a63bf445de1b20a020b8c7e360a6a1e44a88100cb6975acfa0414c8586fc55f3dc024bf55a3ba56cb134bcbf0da354af177f5d9b749e3b1a2e62d63dd9cb77ebc3d9827488b91583da93ea0344c0be51c92d49509e8fb4600cc1b2cda9e4e325939f3c8e79918cc153797dbd55895e2bef69dd48acacf7648d15d2c2a2ffd87a5f51f7a9c9c6633d933eaa6f20abffaf7dee0ae2299aeec19240e76ad5e713c34365343f277f749823bbb", 0xbe}], 0x2}}, {{&(0x7f0000000800)={0xa, 0x4e23, 0x9, @local, 0x4}, 0x1c, &(0x7f0000000940)=[{&(0x7f0000000840)="dc8a1777eeadebaa3d4400c089df93f28a65e55ffc8f4dc5ce51463ab70f5f53405dc9a439b960dce5609ac86c5a61eed9146f6eef01a3344e8971633df10bd9882d175409e5161df7ba5bdbc29865ceef1e6f0164def624259f2c3433fb62fc893a22696c5c7e76fedac78dc76ccd84211a495bdf5fe896ebe460c852e52d0e27415ffd5136fd2177fdd42f09bb6445478802bb765f450baa4d02b677a6532b91f190c0444102ec7ffbbd643b7a37a1c1e2bf1a372e51faa639dd157c8f21699fc930ffd3eedf70fffcc23edbdacc76146cdc7bb6be3d405d076d9be0dd68776b90c2eb49cfdae2a5b2", 0xea}, {&(0x7f0000000a40)="73c8ecbec38f94646aae65372a10f453dd465cd394f08cfc3baa129d9fd54c1be439a323564d2c4eaea0c06d79d61c941fb0037cf6c7f62992151018fe1b3a32bf36a776234f52556637312c58e424c809cc4e621e85caf0caab45fbf7aea3cac34085cfa3d55ad4dacd08c24b621f718fb4ce2da0582f4cfaafdb8a3a650fd3a62243729f93ead7a2af609e65b7442acdcf", 0x92}, {&(0x7f0000000b00)="d9af28211e244010808bfc3cc4f47bc5cbab1b765226af4f4737ef4d1946f8528b0d48f4954f75c891aa387872bca03deb94d40d9971b2de397d89fbcfdb5c17aed366031f2c30f12a540a55476b4d516b162d37cc7b277eb800d6022258086da985ba57f38a4b4323ff6f75e75173b1918e0675aa7931d80bc06a5a5b62058bd8c72b3f4006fb19e907912768112b49ddc1e92965d9102545ca6c9681d50a57308116f5a1aa7f6870b5fc434149b2680feb049f4074815433528d76b1ae9ebfa68b0e344432083b3b460c369ecbcd2be8f6855a285937d39baf5e76ae1c10e71bc308bf850b4cc30cec", 0xea}, {&(0x7f0000000c00)="3f33120055be99c07d2dd0751d1f32fa63a13c44cda3387f94c0392e239e8cbba9585f59c9b0cc556cadb174bd7c07154c21921ad591329349e00a2b0ad0551c08646753efeb3e18baeea1fdc5a69a74fbf6c3a757f15383984c796c00ea5680f0f5a5728e324e9a0a1190b97c3a38646fadac4ebd4d2b594378fbaec1bb3b476ae0", 0x82}], 0x4, &(0x7f0000000980)=[@dontfrag={{0x14, 0x29, 0x3e, 0x9}}, @hopopts={{0x28, 0x29, 0x36, {0x88, 0x1, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}], 0x40}}], 0x2, 0x4000000)
r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0x9, 0xc000, 0x9, 0x14, r2, 0x7, '\x00', r7, r9, 0x2, 0x4, 0x4}, 0x50)

330.84µs ago: executing program 1 (id=1196):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000010018110000", @ANYRES32=<r4=>r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IP_VS_SO_GET_DESTS(r5, 0x0, 0x484, &(0x7f0000000000)=""/24, &(0x7f0000000040)=0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000500000002000000ffff00000500", @ANYRES16=r5, @ANYBLOB="0000000080", @ANYRES32=0x0, @ANYRESOCT=r4, @ANYRES16=0x0], 0x48)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0)
add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xfffffffffffffffd)

0s ago: executing program 4 (id=1197):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x8, &(0x7f00000000c0), 0x1, 0x4d5, &(0x7f0000000a00)="$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")
ppoll(0x0, 0x0, &(0x7f0000000180)={0x0, 0x989680}, &(0x7f00000001c0), 0x8)
chown(&(0x7f0000000040)='./file1\x00', 0x0, 0x0)
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000980)='./file0\x00', 0x2000000, &(0x7f00000010c0)=ANY=[@ANYBLOB='map=off,hide,showassoc,gid=', @ANYRESHEX, @ANYBLOB=',utf8,nojoliet,check=strict,gid=', @ANYRESHEX, @ANYBLOB="2c6e6f636f6d70726573732c6d61703d6e92eb3d7e949c770d696f726d616c2c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',showassoc,unhide,mode=0x0000000000000000,showassoc,mode=0x0000000000000001,norock,smackfshat=obj_user,nomand,euid<', @ANYRESDEC, @ANYBLOB=',obj_user=\\$:,appraise_type=imasig,hash,\x00'], 0x1, 0x943, &(0x7f0000001500)="$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")
setgroups(0x1, &(0x7f00000010c0)=[0x0])
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18)
r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={0x0, 0xffffffffffffffff, 0x1, 0x2}}, 0x20)
socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1fb}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r3}, 0x18)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0)
syz_open_procfs(0x0, &(0x7f0000001240)='net/igmp6\x00')
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000001080), 0x4)
recvmsg$unix(r4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x80000, 0x2)

kernel console output (not intermixed with test programs):

pted files will use data=ordered instead of data journaling mode
[   96.588703][ T5434] EXT4-fs (loop1): 1 truncate cleaned up
[   96.616572][ T5434] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   96.681820][ T5436] netlink: 4 bytes leftover after parsing attributes in process `syz.1.606'.
[   96.690827][ T5436] netlink: 24 bytes leftover after parsing attributes in process `syz.1.606'.
[   96.745697][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.859695][ T5456] netlink: 'syz.2.613': attribute type 10 has an invalid length.
[   97.928745][ T5456] bond0: (slave dummy0): Releasing backup interface
[   97.949905][ T5462] loop1: detected capacity change from 0 to 128
[   97.951274][ T5456] team0: Failed to send port change of device dummy0 via netlink (err -105)
[   97.964239][ T5464] netlink: 'syz.2.613': attribute type 10 has an invalid length.
[   98.009251][ T5456] team0: Failed to send options change via netlink (err -105)
[   98.016891][ T5456] team0: Port device dummy0 added
[   98.042835][ T5462] bio_check_eod: 17 callbacks suppressed
[   98.042854][ T5462] syz.1.616: attempt to access beyond end of device
[   98.042854][ T5462] loop1: rw=2049, sector=145, nr_sectors = 8 limit=128
[   98.077822][ T5464] team0: Failed to send port change of device dummy0 via netlink (err -105)
[   98.086899][ T5462] syz.1.616: attempt to access beyond end of device
[   98.086899][ T5462] loop1: rw=2049, sector=161, nr_sectors = 24 limit=128
[   98.105763][ T5464] team0: Failed to send options change via netlink (err -105)
[   98.123832][ T5462] syz.1.616: attempt to access beyond end of device
[   98.123832][ T5462] loop1: rw=2049, sector=193, nr_sectors = 8 limit=128
[   98.138168][ T5462] syz.1.616: attempt to access beyond end of device
[   98.138168][ T5462] loop1: rw=2049, sector=209, nr_sectors = 8 limit=128
[   98.142624][ T5464] team0: Failed to send port change of device dummy0 via netlink (err -105)
[   98.151789][ T5462] syz.1.616: attempt to access beyond end of device
[   98.151789][ T5462] loop1: rw=2049, sector=225, nr_sectors = 8 limit=128
[   98.176062][ T5473] netlink: 'syz.1.616': attribute type 27 has an invalid length.
[   98.185364][ T5462] syz.1.616: attempt to access beyond end of device
[   98.185364][ T5462] loop1: rw=2049, sector=241, nr_sectors = 8 limit=128
[   98.198865][ T5462] syz.1.616: attempt to access beyond end of device
[   98.198865][ T5462] loop1: rw=2049, sector=257, nr_sectors = 8 limit=128
[   98.212348][ T5462] syz.1.616: attempt to access beyond end of device
[   98.212348][ T5462] loop1: rw=2049, sector=273, nr_sectors = 8 limit=128
[   98.212656][ T5464] team0: Port device dummy0 removed
[   98.236171][ T5464] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   98.246900][ T5462] syz.1.616: attempt to access beyond end of device
[   98.246900][ T5462] loop1: rw=2049, sector=289, nr_sectors = 9 limit=128
[   98.346397][ T5478] 9pnet_fd: Insufficient options for proto=fd
[   98.591747][ T5485] netlink: 'syz.2.620': attribute type 10 has an invalid length.
[   98.670051][ T5488] netlink: 'syz.2.620': attribute type 10 has an invalid length.
[   98.702787][ T5485] bond0: (slave dummy0): Releasing backup interface
[   98.733517][ T5485] team0: Failed to send port change of device dummy0 via netlink (err -105)
[   98.763815][ T5485] team0: Failed to send options change via netlink (err -105)
[   98.771370][ T5485] team0: Port device dummy0 added
[   98.860190][ T5488] team0: Failed to send port change of device dummy0 via netlink (err -105)
[   98.877705][   T29] kauditd_printk_skb: 88 callbacks suppressed
[   98.877765][   T29] audit: type=1326 audit(1760820487.263:2053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5489 comm="syz.0.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad734efc9 code=0x7ffc0000
[   98.919083][ T5488] team0: Failed to send options change via netlink (err -105)
[   98.932663][ T5488] team0: Failed to send port change of device dummy0 via netlink (err -105)
[   98.941684][ T5488] team0: Port device dummy0 removed
[   98.945862][   T29] audit: type=1326 audit(1760820487.263:2054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5489 comm="syz.0.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fcad734efc9 code=0x7ffc0000
[   98.970326][   T29] audit: type=1326 audit(1760820487.263:2055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5489 comm="syz.0.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad734efc9 code=0x7ffc0000
[   98.993737][   T29] audit: type=1326 audit(1760820487.263:2056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5489 comm="syz.0.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fcad734efc9 code=0x7ffc0000
[   99.017136][   T29] audit: type=1326 audit(1760820487.263:2057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5489 comm="syz.0.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad734efc9 code=0x7ffc0000
[   99.026297][ T5488] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   99.040694][   T29] audit: type=1326 audit(1760820487.263:2058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5489 comm="syz.0.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcad734efc9 code=0x7ffc0000
[   99.072576][   T29] audit: type=1326 audit(1760820487.263:2059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5489 comm="syz.0.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad734efc9 code=0x7ffc0000
[   99.096070][   T29] audit: type=1326 audit(1760820487.263:2060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5489 comm="syz.0.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcad734efc9 code=0x7ffc0000
[   99.119442][   T29] audit: type=1326 audit(1760820487.263:2061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5489 comm="syz.0.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad734efc9 code=0x7ffc0000
[   99.142839][   T29] audit: type=1326 audit(1760820487.263:2062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5489 comm="syz.0.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7fcad734efc9 code=0x7ffc0000
[   99.191824][ T5493] loop1: detected capacity change from 0 to 512
[   99.204389][ T5493] /dev/loop1: Can't open blockdev
[   99.240478][ T5495] netlink: 24 bytes leftover after parsing attributes in process `syz.2.625'.
[   99.253913][ T5495] syzkaller0: entered allmulticast mode
[   99.372362][ T5497] netlink: 'syz.1.626': attribute type 10 has an invalid length.
[   99.381045][ T5497] bond0: (slave dummy0): Releasing backup interface
[   99.396404][ T5497] team0: Failed to send port change of device dummy0 via netlink (err -105)
[   99.420297][ T5497] team0: Failed to send options change via netlink (err -105)
[   99.427936][ T5497] team0: Port device dummy0 added
[   99.430920][ T5500] netlink: 'syz.1.626': attribute type 10 has an invalid length.
[   99.462904][ T5500] team0: Failed to send port change of device dummy0 via netlink (err -105)
[   99.556011][ T5500] team0: Failed to send options change via netlink (err -105)
[   99.596103][ T5500] team0: Failed to send port change of device dummy0 via netlink (err -105)
[   99.627620][ T5508] loop4: detected capacity change from 0 to 128
[   99.713698][ T5508] syz.4.630: attempt to access beyond end of device
[   99.713698][ T5508] loop4: rw=2049, sector=145, nr_sectors = 8 limit=128
[   99.772923][ T5500] team0: Port device dummy0 removed
[   99.789340][ T5500] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   99.868360][ T5511] 9pnet_fd: Insufficient options for proto=fd
[  100.040129][ T5516] loop0: detected capacity change from 0 to 512
[  100.081647][ T5516] EXT4-fs: Ignoring removed oldalloc option
[  100.149217][ T5516] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  100.281175][ T5494] syzkaller0: left allmulticast mode
[  100.338808][ T5516] EXT4-fs (loop0): 1 truncate cleaned up
[  100.357154][ T5516] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  100.408040][ T5535] validate_nla: 1 callbacks suppressed
[  100.408062][ T5535] netlink: 'syz.2.636': attribute type 10 has an invalid length.
[  100.469442][ T5536] netlink: 'syz.2.636': attribute type 10 has an invalid length.
[  100.478572][ T5535] bond0: (slave dummy0): Releasing backup interface
[  100.493024][ T5535] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  100.501940][ T5535] team0: Failed to send options change via netlink (err -105)
[  100.509485][ T5535] team0: Port device dummy0 added
[  100.515922][ T5536] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  100.526147][ T5536] team0: Failed to send options change via netlink (err -105)
[  100.533741][ T5536] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  100.542934][ T5536] team0: Port device dummy0 removed
[  100.550568][ T5536] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  100.559390][ T5537] netlink: 4 bytes leftover after parsing attributes in process `syz.0.632'.
[  100.568437][ T5537] netlink: 24 bytes leftover after parsing attributes in process `syz.0.632'.
[  100.642674][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.852359][ T5542] loop0: detected capacity change from 0 to 512
[  101.015805][ T5542] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  101.120903][ T5542] ext4 filesystem being mounted at /125/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  101.189754][ T5542] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.638: corrupted xattr block 32: bad e_name length
[  101.203681][ T5542] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[  101.216670][ T5542] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.638: corrupted xattr block 32: bad e_name length
[  101.230364][ T5542] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.638: corrupted xattr block 32: bad e_name length
[  101.249324][ T5542] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[  101.282597][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.306989][ T5563] 9pnet_fd: Insufficient options for proto=fd
[  101.471758][ T5570] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  101.819301][ T5579] netlink: 24 bytes leftover after parsing attributes in process `syz.1.650'.
[  101.895600][ T5579] syzkaller0: entered allmulticast mode
[  102.725226][ T5587] loop4: detected capacity change from 0 to 512
[  103.009327][ T5587] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  103.026277][ T5587] ext4 filesystem being mounted at /122/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  103.065176][ T5587] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.652: corrupted xattr block 32: bad e_name length
[  103.096974][ T5596] loop3: detected capacity change from 0 to 512
[  103.113074][ T5587] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[  103.147032][ T5587] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.652: corrupted xattr block 32: bad e_name length
[  103.163912][ T5596] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  103.202539][ T5596] ext4 filesystem being mounted at /123/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  103.213665][ T5587] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.652: corrupted xattr block 32: bad e_name length
[  103.231210][ T5587] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[  103.241605][ T5596] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.655: corrupted xattr block 32: bad e_name length
[  103.255456][ T5596] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=15
[  103.264841][ T5596] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.655: corrupted xattr block 32: bad e_name length
[  103.282493][ T5596] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.655: corrupted xattr block 32: bad e_name length
[  103.305216][ T5596] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=15
[  103.326426][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.342566][ T5578] syzkaller0: left allmulticast mode
[  103.393731][ T5606] loop4: detected capacity change from 0 to 128
[  103.426703][ T5606] bio_check_eod: 8 callbacks suppressed
[  103.426723][ T5606] syz.4.656: attempt to access beyond end of device
[  103.426723][ T5606] loop4: rw=2049, sector=145, nr_sectors = 8 limit=128
[  103.453320][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.501925][ T5613] FAULT_INJECTION: forcing a failure.
[  103.501925][ T5613] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  103.509451][ T5606] syz.4.656: attempt to access beyond end of device
[  103.509451][ T5606] loop4: rw=2049, sector=161, nr_sectors = 24 limit=128
[  103.515157][ T5613] CPU: 0 UID: 0 PID: 5613 Comm: syz.3.658 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  103.515267][ T5613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  103.515286][ T5613] Call Trace:
[  103.515293][ T5613]  <TASK>
[  103.515304][ T5613]  __dump_stack+0x1d/0x30
[  103.515333][ T5613]  dump_stack_lvl+0xe8/0x140
[  103.515361][ T5613]  dump_stack+0x15/0x1b
[  103.515390][ T5613]  should_fail_ex+0x265/0x280
[  103.515501][ T5613]  should_fail+0xb/0x20
[  103.515610][ T5613]  should_fail_usercopy+0x1a/0x20
[  103.515665][ T5613]  _copy_from_user+0x1c/0xb0
[  103.515701][ T5613]  kstrtouint_from_user+0x69/0xf0
[  103.515795][ T5613]  ? 0xffffffff81000000
[  103.515814][ T5613]  ? selinux_file_permission+0x1e4/0x320
[  103.515856][ T5613]  proc_fail_nth_write+0x50/0x160
[  103.515950][ T5613]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  103.515990][ T5613]  vfs_write+0x269/0x960
[  103.516032][ T5613]  ? vfs_read+0x4e6/0x770
[  103.516062][ T5613]  ? __rcu_read_unlock+0x4f/0x70
[  103.516144][ T5613]  ? __fget_files+0x184/0x1c0
[  103.516184][ T5613]  ksys_write+0xda/0x1a0
[  103.516218][ T5613]  __x64_sys_write+0x40/0x50
[  103.516249][ T5613]  x64_sys_call+0x2802/0x3000
[  103.516335][ T5613]  do_syscall_64+0xd2/0x200
[  103.516369][ T5613]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  103.516414][ T5613]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  103.516444][ T5613]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.516503][ T5613] RIP: 0033:0x7f60cea6da7f
[  103.516524][ T5613] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  103.516552][ T5613] RSP: 002b:00007f60cd4d7030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  103.516579][ T5613] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f60cea6da7f
[  103.516598][ T5613] RDX: 0000000000000001 RSI: 00007f60cd4d70a0 RDI: 0000000000000004
[  103.516616][ T5613] RBP: 00007f60cd4d7090 R08: 0000000000000000 R09: 0000000000000000
[  103.516668][ T5613] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  103.516684][ T5613] R13: 00007f60cecc6038 R14: 00007f60cecc5fa0 R15: 00007ffd75574848
[  103.516711][ T5613]  </TASK>
[  103.534412][ T5611] loop1: detected capacity change from 0 to 512
[  103.557753][ T5610] netlink: 'syz.4.656': attribute type 27 has an invalid length.
[  103.580275][ T5611] EXT4-fs: dax option not supported
[  103.632567][ T5606] syz.4.656: attempt to access beyond end of device
[  103.632567][ T5606] loop4: rw=2049, sector=193, nr_sectors = 8 limit=128
[  103.705011][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0
[  103.745847][ T5606] syz.4.656: attempt to access beyond end of device
[  103.745847][ T5606] loop4: rw=2049, sector=209, nr_sectors = 8 limit=128
[  103.777771][ T5619] 8021q: adding VLAN 0 to HW filter on device team0
[  103.806670][ T5619] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  103.838763][ T5606] syz.4.656: attempt to access beyond end of device
[  103.838763][ T5606] loop4: rw=2049, sector=225, nr_sectors = 8 limit=128
[  103.855720][ T5606] syz.4.656: attempt to access beyond end of device
[  103.855720][ T5606] loop4: rw=2049, sector=241, nr_sectors = 8 limit=128
[  103.871312][ T5635] loop1: detected capacity change from 0 to 128
[  103.880148][ T5606] syz.4.656: attempt to access beyond end of device
[  103.880148][ T5606] loop4: rw=2049, sector=257, nr_sectors = 8 limit=128
[  103.903664][ T5637] netlink: 'syz.3.668': attribute type 10 has an invalid length.
[  103.912476][ T5606] syz.4.656: attempt to access beyond end of device
[  103.912476][ T5606] loop4: rw=2049, sector=273, nr_sectors = 8 limit=128
[  103.924417][ T5635] syz.1.667: attempt to access beyond end of device
[  103.924417][ T5635] loop1: rw=2049, sector=145, nr_sectors = 8 limit=128
[  103.927735][ T5606] syz.4.656: attempt to access beyond end of device
[  103.927735][ T5606] loop4: rw=2049, sector=289, nr_sectors = 9 limit=128
[  103.956381][ T5639] netlink: 'syz.3.668': attribute type 10 has an invalid length.
[  103.969418][ T5637] bond0: (slave dummy0): Releasing backup interface
[  103.978025][ T5637] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  103.979513][ T5635] netlink: 'syz.1.667': attribute type 27 has an invalid length.
[  103.987212][ T5637] team0: Failed to send options change via netlink (err -105)
[  104.002225][ T5637] team0: Port device dummy0 added
[  104.008436][ T5639] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  104.017911][ T5639] team0: Failed to send options change via netlink (err -105)
[  104.025537][ T5639] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  104.034469][ T5639] team0: Port device dummy0 removed
[  104.041868][ T5639] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  104.052471][   T29] kauditd_printk_skb: 56 callbacks suppressed
[  104.052488][   T29] audit: type=1400 audit(1760820492.443:2119): avc:  denied  { bind } for  pid=5628 comm="syz.2.665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  104.077927][   T29] audit: type=1400 audit(1760820492.443:2120): avc:  denied  { name_bind } for  pid=5628 comm="syz.2.665" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  104.099772][   T29] audit: type=1400 audit(1760820492.443:2121): avc:  denied  { node_bind } for  pid=5628 comm="syz.2.665" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[  104.121543][   T29] audit: type=1400 audit(1760820492.443:2122): avc:  denied  { connect } for  pid=5628 comm="syz.2.665" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  104.143018][   T29] audit: type=1400 audit(1760820492.443:2123): avc:  denied  { name_connect } for  pid=5628 comm="syz.2.665" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  104.193950][ T5646] loop1: detected capacity change from 0 to 512
[  104.229724][ T5646] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  104.269139][ T5646] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  104.290811][ T5652] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  104.306409][ T5646] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.669: corrupted xattr block 32: bad e_name length
[  104.321017][ T5646] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop1 ino=15
[  104.330979][ T5646] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.669: corrupted xattr block 32: bad e_name length
[  104.349620][ T5646] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.669: corrupted xattr block 32: bad e_name length
[  104.364079][ T5646] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop1 ino=15
[  104.376074][ T5655] loop4: detected capacity change from 0 to 512
[  104.383063][ T5655] EXT4-fs: dax option not supported
[  104.417091][   T29] audit: type=1326 audit(1760820492.803:2124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5658 comm="syz.4.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9784f9efc9 code=0x7ffc0000
[  104.446588][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.457824][   T29] audit: type=1326 audit(1760820492.813:2125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5658 comm="syz.4.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f9784f9efc9 code=0x7ffc0000
[  104.481235][   T29] audit: type=1326 audit(1760820492.813:2126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5658 comm="syz.4.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9784f9efc9 code=0x7ffc0000
[  104.504646][   T29] audit: type=1326 audit(1760820492.813:2127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5658 comm="syz.4.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9784f9efc9 code=0x7ffc0000
[  104.528007][   T29] audit: type=1326 audit(1760820492.813:2128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5658 comm="syz.4.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f9784f9efc9 code=0x7ffc0000
[  104.658179][ T5675] netlink: 32 bytes leftover after parsing attributes in process `syz.4.681'.
[  104.668510][ T5675] loop4: detected capacity change from 0 to 128
[  104.678914][ T5675] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  104.691841][ T5675] ext4 filesystem being mounted at /128/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  104.723411][ T3312] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  104.763131][ T5682] netlink: 16 bytes leftover after parsing attributes in process `syz.4.683'.
[  104.772057][ T5682] netlink: 40 bytes leftover after parsing attributes in process `syz.4.683'.
[  104.797874][ T5684] loop4: detected capacity change from 0 to 128
[  104.820568][ T5684] netlink: 'syz.4.684': attribute type 27 has an invalid length.
[  104.840198][ T5684] 8021q: adding VLAN 0 to HW filter on device bond0
[  104.848290][ T5684] 8021q: adding VLAN 0 to HW filter on device team0
[  104.858153][ T5684] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  105.745442][ T5710] loop1: detected capacity change from 0 to 512
[  105.756643][ T5714] loop4: detected capacity change from 0 to 512
[  105.775639][ T5714] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  105.798369][ T5714] ext4 filesystem being mounted at /133/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  105.813625][ T5710] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  105.826833][ T5710] ext4 filesystem being mounted at /140/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  105.837679][ T5719] loop0: detected capacity change from 0 to 512
[  105.839787][ T5714] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.696: corrupted xattr block 32: bad e_name length
[  105.844549][ T5719] EXT4-fs: dax option not supported
[  105.858190][ T5710] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.694: corrupted xattr block 32: bad e_name length
[  105.876800][ T5710] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop1 ino=15
[  105.876974][ T5714] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[  105.886145][ T5710] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.694: corrupted xattr block 32: bad e_name length
[  105.909308][ T5710] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.694: corrupted xattr block 32: bad e_name length
[  105.945453][ T5714] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.696: corrupted xattr block 32: bad e_name length
[  105.959365][ T5710] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop1 ino=15
[  105.983822][ T5727] loop0: detected capacity change from 0 to 128
[  106.036666][ T5714] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.696: corrupted xattr block 32: bad e_name length
[  106.067831][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.078596][ T5714] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[  106.119415][ T5734] loop3: detected capacity change from 0 to 512
[  106.137043][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.152643][ T5738] netlink: 'syz.1.704': attribute type 10 has an invalid length.
[  106.153491][ T5734] EXT4-fs: Ignoring removed oldalloc option
[  106.166898][ T5738] bond0: (slave dummy0): Releasing backup interface
[  106.166981][ T5734] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  106.185756][ T5734] EXT4-fs (loop3): 1 truncate cleaned up
[  106.192206][ T5738] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  106.201770][ T5734] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  106.216797][ T5741] loop4: detected capacity change from 0 to 128
[  106.226080][ T5742] netlink: 'syz.1.704': attribute type 10 has an invalid length.
[  106.233390][ T5738] team0: Failed to send options change via netlink (err -105)
[  106.241398][ T5738] team0: Port device dummy0 added
[  106.248403][ T5742] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  106.264315][ T5742] team0: Failed to send options change via netlink (err -105)
[  106.272108][ T5742] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  106.282258][ T5742] team0: Port device dummy0 removed
[  106.282341][ T5745] netlink: 4 bytes leftover after parsing attributes in process `syz.3.702'.
[  106.289363][ T5742] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  106.300362][ T5741] netlink: 'syz.4.703': attribute type 27 has an invalid length.
[  106.325778][ T5745] netlink: 24 bytes leftover after parsing attributes in process `syz.3.702'.
[  106.377281][ T5752] loop1: detected capacity change from 0 to 512
[  106.384801][ T5751] 8021q: adding VLAN 0 to HW filter on device bond0
[  106.385235][ T5752] EXT4-fs: dax option not supported
[  106.395288][ T5751] 8021q: adding VLAN 0 to HW filter on device team0
[  106.418354][ T5754] loop0: detected capacity change from 0 to 512
[  106.426910][ T5754] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  106.438024][ T5754] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #2: block 9: comm syz.0.707: lblock 0 mapped to illegal pblock 9 (length 1)
[  106.457878][ T5751] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  106.463137][ T5754] EXT4-fs (loop0): mount failed
[  106.473589][ T5750] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  106.505284][ T5757] loop1: detected capacity change from 0 to 512
[  106.517449][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.527232][ T5757] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  106.543812][ T5757] EXT4-fs (loop1): 1 truncate cleaned up
[  106.554723][ T5757] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  106.588117][ T5757] netlink: 'syz.1.709': attribute type 1 has an invalid length.
[  106.606851][ T5757] 8021q: adding VLAN 0 to HW filter on device bond1
[  106.608307][ T5765] loop3: detected capacity change from 0 to 512
[  106.625208][ T5765] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  106.638539][ T5765] ext4 filesystem being mounted at /133/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  106.664240][ T5765] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.712: corrupted xattr block 32: bad e_name length
[  106.764123][ T5765] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=15
[  106.781812][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.852359][ T5765] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.712: corrupted xattr block 32: bad e_name length
[  106.931081][ T5765] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.712: corrupted xattr block 32: bad e_name length
[  106.979269][ T5765] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=15
[  107.078853][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.153645][ T5781] loop4: detected capacity change from 0 to 512
[  107.173383][ T5785] netlink: 'syz.3.718': attribute type 10 has an invalid length.
[  107.186739][ T5781] EXT4-fs: dax option not supported
[  107.196176][ T5785] bond0: (slave dummy0): Releasing backup interface
[  107.219986][ T5785] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  107.242932][ T5785] team0: Failed to send options change via netlink (err -105)
[  107.250469][ T5785] team0: Port device dummy0 added
[  107.263420][ T5790] netlink: 'syz.3.718': attribute type 10 has an invalid length.
[  107.265957][ T5789] netlink: 68 bytes leftover after parsing attributes in process `syz.2.721'.
[  107.294031][ T5790] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  107.309556][ T5790] team0: Failed to send options change via netlink (err -105)
[  107.318209][ T5790] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  107.327347][ T5790] team0: Port device dummy0 removed
[  107.334459][ T5790] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  107.461233][ T5800] loop3: detected capacity change from 0 to 1024
[  107.469805][ T5800] EXT4-fs: Ignoring removed orlov option
[  107.475556][ T5800] EXT4-fs: Ignoring removed nomblk_io_submit option
[  107.636504][ T5800] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  107.678797][ T5808] loop1: detected capacity change from 0 to 128
[  107.708647][ T5803] netlink: 36 bytes leftover after parsing attributes in process `syz.2.727'.
[  107.973427][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.982736][ T5820] ALSA: seq fatal error: cannot create timer (-19)
[  107.990897][ T5820] netlink: 8 bytes leftover after parsing attributes in process `syz.1.730'.
[  108.022078][ T5825] loop1: detected capacity change from 0 to 128
[  108.058032][ T5827] ALSA: seq fatal error: cannot create timer (-19)
[  108.066727][ T5827] netlink: 8 bytes leftover after parsing attributes in process `syz.3.731'.
[  108.082089][ T5825] netlink: 'syz.1.733': attribute type 27 has an invalid length.
[  108.138254][ T5832] netlink: 'syz.3.735': attribute type 10 has an invalid length.
[  108.149470][ T5834] loop1: detected capacity change from 0 to 128
[  108.156476][ T5832] bond0: (slave dummy0): Releasing backup interface
[  108.165265][ T5832] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  108.174409][ T5832] team0: Failed to send options change via netlink (err -105)
[  108.181941][ T5832] team0: Port device dummy0 added
[  108.188514][ T5832] netlink: 'syz.3.735': attribute type 10 has an invalid length.
[  108.193505][ T5834] netlink: 'syz.1.734': attribute type 27 has an invalid length.
[  108.196949][ T5832] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  108.213431][ T5832] team0: Failed to send options change via netlink (err -105)
[  108.221070][ T5832] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  108.230448][ T5832] team0: Port device dummy0 removed
[  108.238696][ T5832] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  108.856524][ T5847] netlink: 68 bytes leftover after parsing attributes in process `syz.1.738'.
[  108.942708][ T5847] loop1: detected capacity change from 0 to 1024
[  108.956557][ T5847] EXT4-fs: dax option not supported
[  109.187352][ T5854] loop1: detected capacity change from 0 to 2364
[  109.201123][ T5854] iso9660: Bad value for 'gid'
[  109.206011][ T5854] iso9660: Bad value for 'gid'
[  109.215487][ T5858] ALSA: seq fatal error: cannot create timer (-19)
[  109.255151][ T5862] bridge0: entered promiscuous mode
[  109.260508][ T5862] macsec1: entered promiscuous mode
[  109.266585][ T5862] bridge0: port 3(macsec1) entered blocking state
[  109.273143][ T5862] bridge0: port 3(macsec1) entered disabled state
[  109.279724][ T5862] macsec1: entered allmulticast mode
[  109.285050][ T5862] bridge0: entered allmulticast mode
[  109.291304][ T5862] macsec1: left allmulticast mode
[  109.296433][ T5862] bridge0: left allmulticast mode
[  109.302125][ T5862] bridge0: left promiscuous mode
[  109.336881][   T29] kauditd_printk_skb: 140 callbacks suppressed
[  109.336967][   T29] audit: type=1326 audit(1760820497.723:2269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5863 comm="syz.1.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32bf8efc9 code=0x7ffc0000
[  109.337235][   T29] audit: type=1326 audit(1760820497.723:2270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5863 comm="syz.1.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fd32bf8efc9 code=0x7ffc0000
[  109.337454][   T29] audit: type=1326 audit(1760820497.723:2271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5863 comm="syz.1.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32bf8efc9 code=0x7ffc0000
[  109.337677][   T29] audit: type=1326 audit(1760820497.723:2272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5863 comm="syz.1.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32bf8efc9 code=0x7ffc0000
[  109.337892][   T29] audit: type=1326 audit(1760820497.723:2273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5863 comm="syz.1.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fd32bf8efc9 code=0x7ffc0000
[  109.338213][   T29] audit: type=1326 audit(1760820497.723:2274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5863 comm="syz.1.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32bf8efc9 code=0x7ffc0000
[  109.338357][   T29] audit: type=1326 audit(1760820497.723:2275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5863 comm="syz.1.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd32bf8efc9 code=0x7ffc0000
[  109.338516][   T29] audit: type=1326 audit(1760820497.723:2276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5863 comm="syz.1.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32bf8efc9 code=0x7ffc0000
[  109.338640][   T29] audit: type=1326 audit(1760820497.723:2277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5863 comm="syz.1.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7fd32bf8efc9 code=0x7ffc0000
[  109.338773][   T29] audit: type=1326 audit(1760820497.723:2278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5863 comm="syz.1.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32bf8efc9 code=0x7ffc0000
[  109.605566][ T5878] bond0: (slave dummy0): Releasing backup interface
[  109.607318][ T5878] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  109.668117][ T5878] team0: Failed to send options change via netlink (err -105)
[  109.675825][ T5878] team0: Port device dummy0 added
[  109.682607][ T5880] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  109.698975][ T5880] team0: Failed to send options change via netlink (err -105)
[  109.706637][ T5880] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  109.715989][ T5880] team0: Port device dummy0 removed
[  109.722550][ T5880] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  109.733470][ T5883] bond0: (slave dummy0): Releasing backup interface
[  109.742125][ T5883] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  109.751297][ T5883] team0: Failed to send options change via netlink (err -105)
[  109.758971][ T5883] team0: Port device dummy0 added
[  109.770915][ T5884] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  109.781381][ T5884] team0: Failed to send options change via netlink (err -105)
[  109.789153][ T5884] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  109.798530][ T5884] team0: Port device dummy0 removed
[  109.808959][ T5884] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  109.954683][ T5894] loop4: detected capacity change from 0 to 512
[  109.964618][ T5892] loop0: detected capacity change from 0 to 2364
[  109.972926][ T5892] iso9660: Bad value for 'gid'
[  109.977790][ T5892] iso9660: Bad value for 'gid'
[  110.031000][ T5899] loop0: detected capacity change from 0 to 128
[  110.042999][ T5894] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  110.064511][ T5894] ext4 filesystem being mounted at /137/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  110.064592][ T5899] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  110.089584][ T5894] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.757: corrupted xattr block 32: bad e_name length
[  110.103215][ T5899] ext4 filesystem being mounted at /151/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  110.112816][ T5894] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[  110.123154][ T5894] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.757: corrupted xattr block 32: bad e_name length
[  110.152336][ T5908] loop1: detected capacity change from 0 to 512
[  110.159037][ T5894] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.757: corrupted xattr block 32: bad e_name length
[  110.175888][ T3318] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  110.181596][ T5894] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[  110.207515][ T5908] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  110.220517][ T5908] ext4 filesystem being mounted at /158/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  110.233027][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.241475][ T5908] __nla_validate_parse: 1 callbacks suppressed
[  110.241504][ T5908] netlink: 36 bytes leftover after parsing attributes in process `syz.1.761'.
[  110.289437][ T5914] bond0: (slave dummy0): Releasing backup interface
[  110.303857][ T5912] loop0: detected capacity change from 0 to 512
[  110.310649][ T5912] EXT4-fs: Ignoring removed oldalloc option
[  110.317225][ T5912] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  110.318934][ T5914] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  110.346594][ T5912] EXT4-fs (loop0): 1 truncate cleaned up
[  110.358169][ T5912] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  110.375102][ T5914] team0: Failed to send options change via netlink (err -105)
[  110.382774][ T5914] team0: Port device dummy0 added
[  110.404526][ T5918] loop3: detected capacity change from 0 to 512
[  110.412237][ T5915] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  110.416988][ T5918] EXT4-fs: dax option not supported
[  110.434805][ T5922] netlink: 4 bytes leftover after parsing attributes in process `syz.0.762'.
[  110.449271][ T5922] netlink: 24 bytes leftover after parsing attributes in process `syz.0.762'.
[  110.452068][ T5915] team0: Failed to send options change via netlink (err -105)
[  110.468673][ T5915] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  110.477963][ T5915] team0: Port device dummy0 removed
[  110.485636][ T5915] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  110.511361][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.547785][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.588302][ T5929] netlink: 68 bytes leftover after parsing attributes in process `syz.1.767'.
[  110.657216][ T5939] loop4: detected capacity change from 0 to 128
[  110.677423][ T5939] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  110.696976][ T5939] ext4 filesystem being mounted at /140/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  110.720210][ T3312] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  110.770108][ T5952] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  111.036973][ T5963] netlink: 16 bytes leftover after parsing attributes in process `syz.4.781'.
[  111.046014][ T5963] netlink: 56 bytes leftover after parsing attributes in process `syz.4.781'.
[  111.098038][ T5963] macvlan0: entered allmulticast mode
[  111.103646][ T5963] veth1_vlan: entered allmulticast mode
[  111.120607][ T5964] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  111.441494][ T5972] netlink: 68 bytes leftover after parsing attributes in process `syz.4.785'.
[  111.476421][ T5975] loop4: detected capacity change from 0 to 512
[  111.494997][ T5975] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  111.507983][ T5975] ext4 filesystem being mounted at /148/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  111.570957][ T5979] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.786: corrupted xattr block 32: bad e_name length
[  111.628542][ T5979] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[  111.641219][ T5981] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  111.650576][ T5979] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.786: corrupted xattr block 32: bad e_name length
[  111.668395][ T5981] loop0: detected capacity change from 0 to 512
[  111.676634][ T5981] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  111.704435][ T5979] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.786: corrupted xattr block 32: bad e_name length
[  111.718338][ T5981] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #2: block 9: comm syz.0.787: lblock 0 mapped to illegal pblock 9 (length 1)
[  111.733112][ T5981] EXT4-fs (loop0): mount failed
[  111.738432][ T5979] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[  111.817511][ T5988] validate_nla: 6 callbacks suppressed
[  111.817529][ T5988] netlink: 'syz.2.790': attribute type 27 has an invalid length.
[  111.869318][ T5988] 8021q: adding VLAN 0 to HW filter on device bond0
[  111.877985][ T5988] 8021q: adding VLAN 0 to HW filter on device team0
[  111.888761][ T5988] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  111.978741][ T5994] loop0: detected capacity change from 0 to 128
[  112.049257][ T6003] netlink: 24 bytes leftover after parsing attributes in process `syz.1.796'.
[  112.059627][ T6003] syzkaller0: entered allmulticast mode
[  112.067139][ T6002] syzkaller0: left allmulticast mode
[  112.197707][ T6013] loop0: detected capacity change from 0 to 512
[  112.253350][ T6015] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  112.270183][ T6013] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  112.343456][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.385001][ T6013] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.799: invalid indirect mapped block 4294967295 (level 1)
[  112.400448][ T6013] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.799: invalid indirect mapped block 4294967295 (level 1)
[  112.416002][ T6013] EXT4-fs (loop0): 2 truncates cleaned up
[  112.423418][ T6013] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  112.515443][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.689896][ T6023] netlink: 'syz.2.801': attribute type 10 has an invalid length.
[  112.700037][ T6023] bond0: (slave dummy0): Releasing backup interface
[  112.712172][ T6023] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  112.721437][ T6023] team0: Failed to send options change via netlink (err -105)
[  112.729027][ T6023] team0: Port device dummy0 added
[  112.753981][ T6023] netlink: 'syz.2.801': attribute type 10 has an invalid length.
[  112.762395][ T6023] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  112.776407][ T6023] team0: Failed to send options change via netlink (err -105)
[  112.785861][ T6023] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  112.795091][ T6023] team0: Port device dummy0 removed
[  112.799973][ T6025] netlink: 32 bytes leftover after parsing attributes in process `syz.0.811'.
[  112.803416][ T6023] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  112.845157][ T6025] loop0: detected capacity change from 0 to 512
[  112.856882][ T6029] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  112.869722][ T6029] loop4: detected capacity change from 0 to 512
[  112.874296][ T6025] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  112.883958][ T6029] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  112.903802][ T6025] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  112.925006][ T6029] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #2: block 9: comm syz.4.803: lblock 0 mapped to illegal pblock 9 (length 1)
[  112.941756][ T6029] EXT4-fs (loop4): mount failed
[  112.980897][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.044544][ T6047] netlink: 24 bytes leftover after parsing attributes in process `syz.2.808'.
[  113.076033][ T6047] syzkaller0: entered allmulticast mode
[  113.099761][ T6051] loop3: detected capacity change from 0 to 128
[  113.107779][ T6043] syzkaller0: left allmulticast mode
[  113.142472][ T6051] bio_check_eod: 44 callbacks suppressed
[  113.142508][ T6051] syz.3.812: attempt to access beyond end of device
[  113.142508][ T6051] loop3: rw=2049, sector=145, nr_sectors = 8 limit=128
[  113.170287][ T6054] loop0: detected capacity change from 0 to 512
[  113.199877][ T6054] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  113.202177][ T6051] syz.3.812: attempt to access beyond end of device
[  113.202177][ T6051] loop3: rw=2049, sector=161, nr_sectors = 24 limit=128
[  113.219170][ T6054] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000001)
[  113.246043][ T6058] netlink: 'syz.3.812': attribute type 27 has an invalid length.
[  113.298057][ T6051] syz.3.812: attempt to access beyond end of device
[  113.298057][ T6051] loop3: rw=2049, sector=193, nr_sectors = 8 limit=128
[  113.317848][ T6058] 8021q: adding VLAN 0 to HW filter on device bond0
[  113.327704][ T6058] 8021q: adding VLAN 0 to HW filter on device team0
[  113.339029][ T6051] syz.3.812: attempt to access beyond end of device
[  113.339029][ T6051] loop3: rw=2049, sector=209, nr_sectors = 8 limit=128
[  113.363606][ T6051] syz.3.812: attempt to access beyond end of device
[  113.363606][ T6051] loop3: rw=2049, sector=225, nr_sectors = 8 limit=128
[  113.377326][ T6058] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  113.377431][ T6051] syz.3.812: attempt to access beyond end of device
[  113.377431][ T6051] loop3: rw=2049, sector=241, nr_sectors = 8 limit=128
[  113.408699][ T6051] syz.3.812: attempt to access beyond end of device
[  113.408699][ T6051] loop3: rw=2049, sector=257, nr_sectors = 8 limit=128
[  113.423413][ T6051] syz.3.812: attempt to access beyond end of device
[  113.423413][ T6051] loop3: rw=2049, sector=273, nr_sectors = 8 limit=128
[  113.442665][ T6051] syz.3.812: attempt to access beyond end of device
[  113.442665][ T6051] loop3: rw=2049, sector=289, nr_sectors = 9 limit=128
[  113.690907][ T6084] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  113.746315][ T6088] syzkaller0: entered allmulticast mode
[  113.753951][ T6087] syzkaller0: left allmulticast mode
[  113.985741][ T6099] netlink: 'syz.2.831': attribute type 27 has an invalid length.
[  114.058171][ T6099] 8021q: adding VLAN 0 to HW filter on device bond0
[  114.066583][ T6099] 8021q: adding VLAN 0 to HW filter on device team0
[  114.077131][ T6099] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  114.142733][ T6113] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  114.156483][ T6113] loop3: detected capacity change from 0 to 512
[  114.165544][ T6113] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  114.176179][ T6116] FAULT_INJECTION: forcing a failure.
[  114.176179][ T6116] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  114.189484][ T6116] CPU: 0 UID: 0 PID: 6116 Comm: syz.4.839 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  114.189512][ T6116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  114.189525][ T6116] Call Trace:
[  114.189532][ T6116]  <TASK>
[  114.189542][ T6116]  __dump_stack+0x1d/0x30
[  114.189570][ T6116]  dump_stack_lvl+0xe8/0x140
[  114.189593][ T6116]  dump_stack+0x15/0x1b
[  114.189623][ T6116]  should_fail_ex+0x265/0x280
[  114.189670][ T6116]  should_fail_alloc_page+0xf2/0x100
[  114.189786][ T6116]  __alloc_frozen_pages_noprof+0xff/0x360
[  114.189824][ T6116]  alloc_pages_mpol+0xb3/0x260
[  114.189844][ T6116]  alloc_pages_noprof+0x90/0x130
[  114.189869][ T6116]  __pmd_alloc+0x47/0x420
[  114.189973][ T6116]  handle_mm_fault+0x19d4/0x2be0
[  114.190030][ T6116]  ? vma_start_read+0x141/0x1f0
[  114.190148][ T6116]  do_user_addr_fault+0x630/0x1080
[  114.190215][ T6116]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  114.190249][ T6116]  exc_page_fault+0x62/0xa0
[  114.190269][ T6116]  asm_exc_page_fault+0x26/0x30
[  114.190361][ T6116] RIP: 0033:0x7f9784e60ca6
[  114.190383][ T6116] Code: f0 72 6e 48 63 cd 48 01 c1 49 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 <47> 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01
[  114.190408][ T6116] RSP: 002b:00007f9783a064a0 EFLAGS: 00010246
[  114.190477][ T6116] RAX: 0000000000000001 RBX: 00007f9783a06540 RCX: 0000000000000101
[  114.190494][ T6116] RDX: 0000000000000030 RSI: 0000000000000001 RDI: 00007f9783a065e0
[  114.190511][ T6116] RBP: 0000000000000102 R08: 00007f977b5e7000 R09: 0000000000000000
[  114.190528][ T6116] R10: 0000000000000000 R11: 00007f9783a06550 R12: 0000000000000001
[  114.190574][ T6116] R13: 00007f978503dc40 R14: 0000000000000000 R15: 00007f9783a065e0
[  114.190601][ T6116]  </TASK>
[  114.190630][ T6116] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  114.196348][ T6113] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #2: block 9: comm syz.3.838: lblock 0 mapped to illegal pblock 9 (length 1)
[  114.210741][ T6116] loop4: detected capacity change from 0 to 512
[  114.215188][ T6113] EXT4-fs (loop3): mount failed
[  114.253631][ T6116] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  114.404251][ T6116] EXT4-fs (loop4): orphan cleanup on readonly fs
[  114.424185][ T6116] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #16: comm syz.4.839: corrupted inode contents
[  114.454793][ T6116] EXT4-fs (loop4): Remounting filesystem read-only
[  114.466506][ T6116] EXT4-fs (loop4): 1 truncate cleaned up
[  114.472352][ T3700] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  114.482964][ T3700] __quota_error: 108 callbacks suppressed
[  114.482980][ T3700] Quota error (device loop4): write_blk: dquota write failed
[  114.483089][ T6124] loop3: detected capacity change from 0 to 512
[  114.488767][ T3700] Quota error (device loop4): remove_free_dqentry: Can't write block (5) with free entries
[  114.512483][ T3700] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  114.519506][ T6124] ------------[ cut here ]------------
[  114.523026][ T3700] Quota error (device loop4): write_blk: dquota write failed
[  114.523046][ T3700] Quota error (device loop4): free_dqentry: Can't move quota data block (5) to free list
[  114.528522][ T6124] EA inode 11 i_nlink=2
[  114.528861][ T6124] WARNING: CPU: 1 PID: 6124 at fs/ext4/xattr.c:1058 ext4_xattr_inode_update_ref+0x36a/0x380
[  114.536138][ T3700] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started
[  114.545773][ T6124] Modules linked in:
[  114.549926][ T3700] Quota error (device loop4): v2_write_file_info: Can't write info structure
[  114.560065][ T6124] CPU: 1 UID: 0 PID: 6124 Comm: syz.3.841 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  114.560105][ T6124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  114.560118][ T6124] RIP: 0010:ext4_xattr_inode_update_ref+0x36a/0x380
[  114.570931][ T3700] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  114.574316][ T6124] Code: 90 49 8d 7e 40 e8 66 00 b9 ff 4d 8b 6e 40 4c 89 e7 e8 7a fb b8 ff 41 8b 56 48 48 c7 c7 d6 4e 55 86 4c 89 ee e8 c7 07 68 ff 90 <0f> 0b 90 90 e9 ff fe ff ff e8 08 76 b0 03 0f 1f 84 00 00 00 00 00
[  114.585006][ T6116] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  114.592887][ T6124] RSP: 0018:ffffc90001f9b778 EFLAGS: 00010246
[  114.658086][ T6124] RAX: 8e5ebc28c0237f00 RBX: ffff88811a45c600 RCX: 0000000000080000
[  114.666192][ T6124] RDX: ffffc900046c3000 RSI: 000000000000cb8b RDI: 000000000000cb8c
[  114.674284][ T6124] RBP: 0000000000000002 R08: 0001ffff8684802f R09: 0000000000000000
[  114.682274][ T6124] R10: ffffc90001f9b450 R11: 0001c90001f9b450 R12: ffff88811a45c5b0
[  114.690458][ T6124] R13: 000000000000000b R14: ffff88811a45c568 R15: 0000000000000001
[  114.698679][ T6124] FS:  00007f60cd4d76c0(0000) GS:ffff8882aef3a000(0000) knlGS:0000000000000000
[  114.707743][ T6124] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  114.714375][ T6124] CR2: 00007efd381b8000 CR3: 000000012c3a4000 CR4: 00000000003506f0
[  114.722371][ T6124] Call Trace:
[  114.725690][ T6124]  <TASK>
[  114.728774][ T6124]  ext4_xattr_inode_dec_ref_all+0x579/0x830
[  114.734734][ T6124]  ? errseq_check+0x2c/0x50
[  114.739288][ T6124]  ext4_xattr_delete_inode+0x6b7/0x790
[  114.744823][ T6124]  ext4_evict_inode+0xa6a/0xd90
[  114.749702][ T6124]  ? __pfx_ext4_evict_inode+0x10/0x10
[  114.755145][ T6124]  evict+0x2e3/0x550
[  114.759089][ T6124]  ? __dquot_initialize+0x146/0x7c0
[  114.764336][ T6124]  iput+0x4ed/0x650
[  114.768178][ T6124]  ext4_process_orphan+0x1a9/0x1c0
[  114.773409][ T6124]  ext4_orphan_cleanup+0x6a8/0xa00
[  114.778582][ T6124]  ext4_fill_super+0x3483/0x3810
[  114.783588][ T6124]  ? snprintf+0x86/0xb0
[  114.787779][ T6124]  ? set_blocksize+0x1a8/0x310
[  114.792610][ T6124]  ? sb_set_blocksize+0xe3/0x100
[  114.797576][ T6124]  ? setup_bdev_super+0x30e/0x370
[  114.802681][ T6124]  ? __pfx_ext4_fill_super+0x10/0x10
[  114.808336][ T6124]  get_tree_bdev_flags+0x291/0x300
[  114.813684][ T6124]  ? __pfx_ext4_fill_super+0x10/0x10
[  114.818989][ T6124]  get_tree_bdev+0x1f/0x30
[  114.823701][ T6124]  ext4_get_tree+0x1c/0x30
[  114.828158][ T6124]  vfs_get_tree+0x57/0x1d0
[  114.832631][ T6124]  do_new_mount+0x24d/0x660
[  114.837175][ T6124]  path_mount+0x4a5/0xb70
[  114.841534][ T6124]  ? user_path_at+0x109/0x130
[  114.846332][ T6124]  __se_sys_mount+0x28c/0x2e0
[  114.851033][ T6124]  ? do_mkdirat+0x3ac/0x3f0
[  114.855684][ T6124]  __x64_sys_mount+0x67/0x80
[  114.860392][ T6124]  x64_sys_call+0x2b51/0x3000
[  114.865115][ T6124]  do_syscall_64+0xd2/0x200
[  114.869708][ T6124]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  114.875845][ T6124]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  114.881614][ T6124]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.887565][ T6124] RIP: 0033:0x7f60cea7076a
[  114.892029][ T6124] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  114.911698][ T6124] RSP: 002b:00007f60cd4d6e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  114.920261][ T6124] RAX: ffffffffffffffda RBX: 00007f60cd4d6ef0 RCX: 00007f60cea7076a
[  114.928390][ T6124] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f60cd4d6eb0
[  114.936486][ T6124] RBP: 0000200000000180 R08: 00007f60cd4d6ef0 R09: 0000000000800700
[  114.944518][ T6124] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0
[  114.952524][ T6124] R13: 00007f60cd4d6eb0 R14: 000000000000046c R15: 0000200000000740
[  114.960519][ T6124]  </TASK>
[  114.963579][ T6124] ---[ end trace 0000000000000000 ]---
[  114.970665][ T6124] EXT4-fs (loop3): 1 orphan inode deleted
[  114.976983][ T6124] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  115.001202][   T29] audit: type=1326 audit(1760820503.383:2387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6122 comm="syz.3.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60cea6efc9 code=0x7ffc0000
[  115.030557][   T29] audit: type=1326 audit(1760820503.423:2388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6122 comm="syz.3.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f60cea6efc9 code=0x7ffc0000
[  115.054141][   T29] audit: type=1326 audit(1760820503.423:2389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6122 comm="syz.3.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60cea6efc9 code=0x7ffc0000
[  115.077595][   T29] audit: type=1326 audit(1760820503.423:2390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6122 comm="syz.3.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f60cea6efc9 code=0x7ffc0000
[  115.118080][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.128889][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.355113][ T6139] netlink: 'syz.1.849': attribute type 11 has an invalid length.
[  115.362907][ T6139] __nla_validate_parse: 5 callbacks suppressed
[  115.362924][ T6139] netlink: 36 bytes leftover after parsing attributes in process `syz.1.849'.
[  115.386633][ T6143] loop4: detected capacity change from 0 to 128
[  115.413657][ T6141] netlink: 68 bytes leftover after parsing attributes in process `syz.3.844'.
[  115.437877][ T6141] loop3: detected capacity change from 0 to 1024
[  115.444910][ T6148] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6148 comm=syz.1.851
[  115.457823][ T6141] EXT4-fs: dax option not supported
[  115.470472][ T6143] Driver unsupported XDP return value 0 on prog  (id 733) dev N/A, expect packet loss!
[  115.531462][ T6155] loop1: detected capacity change from 0 to 512
[  115.538754][ T6155] EXT4-fs: dax option not supported
[  115.627112][ T6169] loop1: detected capacity change from 0 to 512
[  115.649966][ T6169] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  115.677259][ T6169] ext4 filesystem being mounted at /179/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  115.699736][ T6174] netlink: 'syz.2.860': attribute type 10 has an invalid length.
[  115.709301][ T6169] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.859: corrupted xattr block 32: bad e_name length
[  115.723982][ T6174] bond0: (slave dummy0): Releasing backup interface
[  115.734096][ T6174] team0: Port device dummy0 added
[  115.739252][ T6169] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop1 ino=15
[  115.750795][ T6169] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.859: corrupted xattr block 32: bad e_name length
[  115.750869][ T6175] netlink: 'syz.2.860': attribute type 10 has an invalid length.
[  115.773225][ T6169] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.859: corrupted xattr block 32: bad e_name length
[  115.773517][ T6175] team0: Port device dummy0 removed
[  115.794559][ T6169] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop1 ino=15
[  115.826168][ T6175] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  115.847627][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.159884][ T6192] 9pnet_fd: Insufficient options for proto=fd
[  116.414208][ T6218] netlink: 68 bytes leftover after parsing attributes in process `syz.4.875'.
[  116.429850][ T6221] netlink: 24 bytes leftover after parsing attributes in process `syz.0.876'.
[  116.468694][ T6225] 9pnet_fd: Insufficient options for proto=fd
[  116.475296][ T6221] syzkaller0: entered allmulticast mode
[  116.483458][ T6224] loop3: detected capacity change from 0 to 512
[  116.491622][ T6220] syzkaller0: left allmulticast mode
[  116.513737][ T6224] EXT4-fs: dax option not supported
[  116.600043][ T6241] loop4: detected capacity change from 0 to 1024
[  116.627876][ T6241] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  116.640712][ T6240] loop0: detected capacity change from 0 to 128
[  116.647244][ T6241] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28
[  116.659573][ T6241] EXT4-fs (loop4): This should not happen!! Data will be lost
[  116.659573][ T6241] 
[  116.669439][ T6241] EXT4-fs (loop4): Total free blocks count 0
[  116.675458][ T6241] EXT4-fs (loop4): Free/Dirty block details
[  116.681389][ T6241] EXT4-fs (loop4): free_blocks=0
[  116.686374][ T6241] EXT4-fs (loop4): dirty_blocks=0
[  116.691429][ T6241] EXT4-fs (loop4): Block reservation details
[  116.697474][ T6241] EXT4-fs (loop4): i_reserved_data_blocks=0
[  116.721851][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.784277][ T6259] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  116.821642][ T6261] loop0: detected capacity change from 0 to 512
[  116.834662][ T6261] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  116.847365][ T6261] ext4 filesystem being mounted at /178/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  116.870650][ T6261] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.889: corrupted xattr block 32: bad e_name length
[  116.884632][ T6261] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[  116.893819][ T6261] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.889: corrupted xattr block 32: bad e_name length
[  116.907748][ T6261] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.889: corrupted xattr block 32: bad e_name length
[  116.922466][ T6261] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[  116.972003][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.014297][ T6271] netlink: 24 bytes leftover after parsing attributes in process `syz.0.890'.
[  117.025553][ T6271] syzkaller0: entered allmulticast mode
[  117.035387][ T6270] syzkaller0: left allmulticast mode
[  117.062717][ T6274] 9pnet_fd: Insufficient options for proto=fd
[  117.624358][ T6303] netlink: 68 bytes leftover after parsing attributes in process `syz.4.901'.
[  118.217080][ T6319] 9pnet_fd: Insufficient options for proto=fd
[  118.311698][ T6324] netlink: 24 bytes leftover after parsing attributes in process `syz.0.907'.
[  118.333083][ T6324] syzkaller0: entered allmulticast mode
[  118.342005][ T6323] syzkaller0: left allmulticast mode
[  118.353003][ T6328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.909'.
[  118.416420][ T6332] loop0: detected capacity change from 0 to 1024
[  118.425123][ T6332] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  118.436066][ T6332] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  118.484805][ T6332] JBD2: no valid journal superblock found
[  118.490594][ T6332] EXT4-fs (loop0): Could not load journal inode
[  118.665274][ T6341] loop1: detected capacity change from 0 to 128
[  118.708824][ T6341] syz.1.915: attempt to access beyond end of device
[  118.708824][ T6341] loop1: rw=2049, sector=145, nr_sectors = 8 limit=128
[  118.722390][ T6341] syz.1.915: attempt to access beyond end of device
[  118.722390][ T6341] loop1: rw=2049, sector=161, nr_sectors = 24 limit=128
[  118.752888][ T6341] syz.1.915: attempt to access beyond end of device
[  118.752888][ T6341] loop1: rw=2049, sector=193, nr_sectors = 8 limit=128
[  118.766515][ T6341] syz.1.915: attempt to access beyond end of device
[  118.766515][ T6341] loop1: rw=2049, sector=209, nr_sectors = 8 limit=128
[  118.785609][ T6341] syz.1.915: attempt to access beyond end of device
[  118.785609][ T6341] loop1: rw=2049, sector=225, nr_sectors = 8 limit=128
[  118.799631][ T6341] syz.1.915: attempt to access beyond end of device
[  118.799631][ T6341] loop1: rw=2049, sector=241, nr_sectors = 8 limit=128
[  118.813333][ T6341] syz.1.915: attempt to access beyond end of device
[  118.813333][ T6341] loop1: rw=2049, sector=257, nr_sectors = 8 limit=128
[  118.813651][ T6353] netlink: 24 bytes leftover after parsing attributes in process `syz.2.913'.
[  118.828786][ T6341] syz.1.915: attempt to access beyond end of device
[  118.828786][ T6341] loop1: rw=2049, sector=273, nr_sectors = 8 limit=128
[  118.849145][ T6341] syz.1.915: attempt to access beyond end of device
[  118.849145][ T6341] loop1: rw=2049, sector=289, nr_sectors = 9 limit=128
[  118.948667][ T6341] netlink: 'syz.1.915': attribute type 27 has an invalid length.
[  119.091872][ T6356] loop1: detected capacity change from 0 to 512
[  119.110595][ T6356] EXT4-fs: dax option not supported
[  119.226433][ T6362] netlink: 24 bytes leftover after parsing attributes in process `syz.1.921'.
[  119.237574][ T6362] syzkaller0: entered allmulticast mode
[  119.246620][ T6361] syzkaller0: left allmulticast mode
[  119.265469][ T6363] 9pnet_fd: Insufficient options for proto=fd
[  119.404576][ T6372] loop4: detected capacity change from 0 to 1024
[  119.424149][ T6372] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  119.463981][ T6372] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 15: block 369:freeing already freed block (bit 23); block bitmap corrupt.
[  119.532551][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.559911][ T6379] syzkaller0: entered allmulticast mode
[  119.568443][ T6381] loop4: detected capacity change from 0 to 128
[  119.674803][ T6381] syz.4.928: attempt to access beyond end of device
[  119.674803][ T6381] loop4: rw=2049, sector=145, nr_sectors = 8 limit=128
[  119.753620][ T6381] netlink: 'syz.4.928': attribute type 27 has an invalid length.
[  119.789012][ T6381] veth1_vlan: left allmulticast mode
[  119.803972][ T6381] macvlan0: left allmulticast mode
[  119.867819][ T6387] loop0: detected capacity change from 0 to 128
[  119.875376][ T6385] 8021q: adding VLAN 0 to HW filter on device bond0
[  119.894145][ T6387] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  119.940204][ T6385] 8021q: adding VLAN 0 to HW filter on device team0
[  119.958828][ T6387] ext4 filesystem being mounted at /188/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  119.976719][ T6385] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  120.007266][ T3318] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  120.089209][   T29] kauditd_printk_skb: 204 callbacks suppressed
[  120.089227][   T29] audit: type=1400 audit(1760820508.473:2595): avc:  denied  { write } for  pid=6393 comm="syz.2.933" lport=38195 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  120.121557][   T29] audit: type=1400 audit(1760820508.473:2596): avc:  denied  { setopt } for  pid=6393 comm="syz.2.933" lport=38195 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  120.207070][ T6399] 9pnet_fd: Insufficient options for proto=fd
[  120.239723][   T29] audit: type=1400 audit(1760820508.623:2597): avc:  denied  { execute } for  pid=6400 comm="syz.2.936" path="/217/cpuacct.usage_sys" dev="tmpfs" ino=1160 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  120.271915][ T6405] loop0: detected capacity change from 0 to 512
[  120.278956][ T6403] loop1: detected capacity change from 0 to 512
[  120.313502][ T6405] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  120.331744][ T6403] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  120.336346][ T6405] ext4 filesystem being mounted at /192/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  120.376067][ T6403] EXT4-fs (loop1): 1 truncate cleaned up
[  120.387953][ T6378] syzkaller0: left allmulticast mode
[  120.397139][ T6403] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  120.425167][ T6405] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.938: corrupted xattr block 32: bad e_name length
[  120.454599][ T6413] __nla_validate_parse: 4 callbacks suppressed
[  120.454619][ T6413] netlink: 32 bytes leftover after parsing attributes in process `syz.3.941'.
[  120.470499][ T6405] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[  120.485016][ T6413] loop3: detected capacity change from 0 to 128
[  120.491729][ T6405] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.938: corrupted xattr block 32: bad e_name length
[  120.524129][ T6413] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  120.538967][ T6418] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=6418 comm=syz.1.937
[  120.558177][ T6413] ext4 filesystem being mounted at /166/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  120.612020][ T6405] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.938: corrupted xattr block 32: bad e_name length
[  120.628245][ T3324] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  120.643539][ T6405] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[  120.670420][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  120.750864][ T6427] loop3: detected capacity change from 0 to 128
[  120.796206][   T29] audit: type=1400 audit(1760820509.183:2598): avc:  denied  { mount } for  pid=6428 comm="syz.0.945" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[  120.872937][ T6427] netlink: 'syz.3.944': attribute type 27 has an invalid length.
[  120.888666][ T6434] netlink: 24 bytes leftover after parsing attributes in process `syz.4.943'.
[  120.905023][ T6432] ALSA: seq fatal error: cannot create timer (-19)
[  120.915593][ T6432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.946'.
[  120.956810][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  120.989778][ T6427] 8021q: adding VLAN 0 to HW filter on device bond0
[  121.006887][ T6436] 9pnet_fd: Insufficient options for proto=fd
[  121.018261][ T6427] 8021q: adding VLAN 0 to HW filter on device team0
[  121.032028][ T6439] loop1: detected capacity change from 0 to 128
[  121.050913][ T6427] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  121.122472][   T29] audit: type=1326 audit(1760820509.493:2599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6441 comm="syz.0.949" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcad734efc9 code=0x0
[  121.128583][ T6439] netlink: 'syz.1.947': attribute type 27 has an invalid length.
[  121.158512][ T6444] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  121.176787][ T6439] 8021q: adding VLAN 0 to HW filter on device bond0
[  121.185112][ T6439] 8021q: adding VLAN 0 to HW filter on device team0
[  121.195666][ T6439] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  121.362971][   T29] audit: type=1400 audit(1760820509.753:2600): avc:  denied  { create } for  pid=6449 comm="syz.2.951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  121.401676][ T6452] netlink: 24 bytes leftover after parsing attributes in process `syz.2.952'.
[  121.412352][ T6452] syzkaller0: entered allmulticast mode
[  121.432965][   T29] audit: type=1400 audit(1760820509.753:2601): avc:  denied  { setopt } for  pid=6449 comm="syz.2.951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  121.679580][ T6456] netlink: 32 bytes leftover after parsing attributes in process `syz.3.954'.
[  121.717006][ T6456] loop3: detected capacity change from 0 to 128
[  121.735156][ T6456] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  121.775773][ T6456] ext4 filesystem being mounted at /169/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  121.829785][ T3324] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  122.135579][   T29] audit: type=1400 audit(1760820510.523:2602): avc:  denied  { watch watch_reads } for  pid=6465 comm="syz.4.960" path="/175/bus" dev="tmpfs" ino=960 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  122.170389][ T6468] 9pnet_fd: Insufficient options for proto=fd
[  122.215818][ T6470] ALSA: seq fatal error: cannot create timer (-19)
[  122.255139][ T6451] syzkaller0: left allmulticast mode
[  122.261864][ T6470] netlink: 8 bytes leftover after parsing attributes in process `syz.1.958'.
[  122.313067][ T6481] netlink: 32 bytes leftover after parsing attributes in process `syz.1.965'.
[  122.324184][ T6481] loop1: detected capacity change from 0 to 128
[  122.340823][ T6481] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  122.398051][ T6481] ext4 filesystem being mounted at /193/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  122.424398][ T3320] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  122.453071][ T6491] loop0: detected capacity change from 0 to 512
[  122.459980][ T6491] EXT4-fs: dax option not supported
[  122.475934][ T6494] netlink: 68 bytes leftover after parsing attributes in process `syz.1.969'.
[  122.497735][ T6494] loop1: detected capacity change from 0 to 1024
[  122.510751][ T6494] EXT4-fs: dax option not supported
[  122.530439][ T6499] loop0: detected capacity change from 0 to 128
[  122.544330][ T6500] netlink: 24 bytes leftover after parsing attributes in process `syz.2.966'.
[  122.607127][ T6502] 9pnet_fd: Insufficient options for proto=fd
[  122.621541][ T6499] netlink: 'syz.0.970': attribute type 27 has an invalid length.
[  122.703575][ T6499] 8021q: adding VLAN 0 to HW filter on device bond0
[  122.720884][ T6499] 8021q: adding VLAN 0 to HW filter on device team0
[  122.747104][ T6499] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  122.773162][ T6506] loop1: detected capacity change from 0 to 128
[  122.935883][ T6509] ALSA: seq fatal error: cannot create timer (-19)
[  122.952696][ T6509] netlink: 8 bytes leftover after parsing attributes in process `syz.3.973'.
[  124.173189][ T6530] 9pnet_fd: Insufficient options for proto=fd
[  124.207789][   T29] audit: type=1400 audit(1760820512.583:2603): avc:  denied  { append } for  pid=6534 comm="syz.3.983" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  124.287132][   T29] audit: type=1400 audit(1760820512.673:2604): avc:  denied  { setopt } for  pid=6534 comm="syz.3.983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  124.294503][ T6535] program syz.3.983 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  124.358959][ T6537] syzkaller0: entered allmulticast mode
[  124.372892][ T6536] syzkaller0: left allmulticast mode
[  124.436947][ T6550] netlink: 'syz.0.989': attribute type 6 has an invalid length.
[  124.452619][ T6548] loop1: detected capacity change from 0 to 128
[  124.560965][ T6563] 9pnet_fd: Insufficient options for proto=fd
[  124.589279][ T6566] loop0: detected capacity change from 0 to 512
[  124.596522][ T6566] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  124.636532][ T6566] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #2: block 9: comm syz.0.995: lblock 0 mapped to illegal pblock 9 (length 1)
[  124.654326][ T6566] EXT4-fs (loop0): mount failed
[  124.811416][ T6578] syzkaller0: entered allmulticast mode
[  125.546902][ T6577] syzkaller0: left allmulticast mode
[  125.599995][   T29] kauditd_printk_skb: 16 callbacks suppressed
[  125.600012][   T29] audit: type=1400 audit(1760820513.983:2621): avc:  denied  { create } for  pid=6590 comm="syz.3.1003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1
[  125.669335][ T6605] 9pnet_fd: Insufficient options for proto=fd
[  125.707468][   T29] audit: type=1326 audit(1760820514.093:2622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6606 comm="syz.3.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60cea6efc9 code=0x7ffc0000
[  125.762527][   T29] audit: type=1326 audit(1760820514.123:2623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6606 comm="syz.3.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f60cea6efc9 code=0x7ffc0000
[  125.785937][   T29] audit: type=1326 audit(1760820514.123:2624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6606 comm="syz.3.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60cea6efc9 code=0x7ffc0000
[  125.809543][   T29] audit: type=1326 audit(1760820514.123:2625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6606 comm="syz.3.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60cea6efc9 code=0x7ffc0000
[  125.833021][   T29] audit: type=1326 audit(1760820514.133:2626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6606 comm="syz.3.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f60cea6efc9 code=0x7ffc0000
[  125.840191][ T6613] loop4: detected capacity change from 0 to 128
[  125.856524][   T29] audit: type=1326 audit(1760820514.133:2627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6606 comm="syz.3.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60cea6efc9 code=0x7ffc0000
[  125.886380][   T29] audit: type=1326 audit(1760820514.133:2628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6606 comm="syz.3.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60cea6efc9 code=0x7ffc0000
[  125.909825][   T29] audit: type=1326 audit(1760820514.133:2629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6606 comm="syz.3.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f60cea6efc9 code=0x7ffc0000
[  125.915405][ T6612] ªªªªªªÿÿòÿÿÿòÿÿ: renamed from wg2
[  125.933284][   T29] audit: type=1326 audit(1760820514.133:2630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6606 comm="syz.3.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60cea6efc9 code=0x7ffc0000
[  126.281119][ T6618] loop1: detected capacity change from 0 to 512
[  126.304704][ T6618] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  126.317765][ T6618] ext4 filesystem being mounted at /203/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  126.343060][ T6618] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.1009: corrupted xattr block 32: bad e_name length
[  126.357261][ T6618] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop1 ino=15
[  126.366414][ T6618] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.1009: corrupted xattr block 32: bad e_name length
[  126.380208][ T6618] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.1009: corrupted xattr block 32: bad e_name length
[  126.394977][ T6618] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop1 ino=15
[  126.449736][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  126.474801][ T6627] netlink: 'syz.2.1011': attribute type 27 has an invalid length.
[  126.513660][ T6631] loop1: detected capacity change from 0 to 128
[  126.520974][ T6627] 8021q: adding VLAN 0 to HW filter on device bond0
[  126.533114][ T6627] 8021q: adding VLAN 0 to HW filter on device team0
[  126.544662][ T6627] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  126.549478][ T6631] bio_check_eod: 35 callbacks suppressed
[  126.549497][ T6631] syz.1.1013: attempt to access beyond end of device
[  126.549497][ T6631] loop1: rw=2049, sector=145, nr_sectors = 8 limit=128
[  126.583602][ T6631] syz.1.1013: attempt to access beyond end of device
[  126.583602][ T6631] loop1: rw=2049, sector=161, nr_sectors = 24 limit=128
[  126.597733][ T6631] syz.1.1013: attempt to access beyond end of device
[  126.597733][ T6631] loop1: rw=2049, sector=193, nr_sectors = 8 limit=128
[  126.612120][ T6631] syz.1.1013: attempt to access beyond end of device
[  126.612120][ T6631] loop1: rw=2049, sector=209, nr_sectors = 8 limit=128
[  126.629186][ T6631] syz.1.1013: attempt to access beyond end of device
[  126.629186][ T6631] loop1: rw=2049, sector=225, nr_sectors = 8 limit=128
[  126.654763][ T6637] __nla_validate_parse: 12 callbacks suppressed
[  126.654780][ T6637] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1015'.
[  126.662486][ T6635] netlink: 'syz.1.1013': attribute type 27 has an invalid length.
[  126.673511][ T6631] syz.1.1013: attempt to access beyond end of device
[  126.673511][ T6631] loop1: rw=2049, sector=241, nr_sectors = 8 limit=128
[  126.692027][ T6631] syz.1.1013: attempt to access beyond end of device
[  126.692027][ T6631] loop1: rw=2049, sector=257, nr_sectors = 8 limit=128
[  126.705901][ T6631] syz.1.1013: attempt to access beyond end of device
[  126.705901][ T6631] loop1: rw=2049, sector=273, nr_sectors = 8 limit=128
[  126.719526][ T6631] syz.1.1013: attempt to access beyond end of device
[  126.719526][ T6631] loop1: rw=2049, sector=289, nr_sectors = 9 limit=128
[  126.743182][ T6642] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1016'.
[  126.765223][ T6644] 9pnet_fd: Insufficient options for proto=fd
[  126.771586][ T6639] 8021q: adding VLAN 0 to HW filter on device bond0
[  126.780083][ T6639] 8021q: adding VLAN 0 to HW filter on device team0
[  126.797600][ T6639] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  126.814760][ T6642] syzkaller0: entered allmulticast mode
[  126.828372][ T6641] syzkaller0: left allmulticast mode
[  127.313202][ T6657] netlink: 'syz.2.1021': attribute type 10 has an invalid length.
[  127.322871][ T6657] bond0: (slave dummy0): Releasing backup interface
[  127.331579][ T6657] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  127.340404][ T6657] team0: Failed to send options change via netlink (err -105)
[  127.347929][ T6657] team0: Port device dummy0 added
[  127.361022][ T6657] netlink: 'syz.2.1021': attribute type 10 has an invalid length.
[  127.369867][ T6657] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  127.393072][ T6657] team0: Failed to send options change via netlink (err -105)
[  127.401682][ T6657] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  127.411046][ T6657] team0: Port device dummy0 removed
[  127.428105][ T6657] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  127.452019][ T6662] loop3: detected capacity change from 0 to 512
[  127.467739][ T6662] /dev/loop3: Can't open blockdev
[  127.544993][ T6668] loop1: detected capacity change from 0 to 128
[  127.558351][ T6671] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1027'.
[  127.569946][ T6671] loop3: detected capacity change from 0 to 128
[  127.581537][ T6671] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  127.594052][ T6671] ext4 filesystem being mounted at /184/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  127.616243][ T3324] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  127.639800][ T6676] 9pnet_fd: Insufficient options for proto=fd
[  127.672985][ T6678] loop3: detected capacity change from 0 to 512
[  127.714044][ T6678] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.1029: corrupted inode contents
[  127.733983][ T6680] program syz.0.1030 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  127.750957][ T6678] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #16: comm syz.3.1029: mark_inode_dirty error
[  127.798836][ T6678] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.1029: corrupted inode contents
[  127.833681][ T6678] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.1029: mark_inode_dirty error
[  127.846253][ T6686] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1032'.
[  127.858492][ T6678] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.1029: corrupted inode contents
[  127.870788][ T6678] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem
[  127.879627][ T6678] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.1029: corrupted inode contents
[  127.894445][ T6678] EXT4-fs error (device loop3): ext4_truncate:4637: inode #16: comm syz.3.1029: mark_inode_dirty error
[  127.906119][ T6686] loop0: detected capacity change from 0 to 1024
[  127.906149][ T6678] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem
[  127.915495][ T6686] EXT4-fs: dax option not supported
[  127.922947][ T6678] EXT4-fs (loop3): 1 truncate cleaned up
[  127.933262][ T3692] EXT4-fs error (device loop3): ext4_release_dquot:6981: comm kworker/u8:18: Failed to release dquot type 1
[  127.943280][ T6678] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  128.131945][ T6678] ext4 filesystem being mounted at /186/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  128.244846][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.429879][ T6697] netlink: 'syz.2.1036': attribute type 10 has an invalid length.
[  128.445802][ T6697] bond0: (slave dummy0): Releasing backup interface
[  128.458028][ T6697] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  128.467898][ T6697] team0: Failed to send options change via netlink (err -105)
[  128.475529][ T6697] team0: Port device dummy0 added
[  128.481320][ T6700] netlink: 'syz.2.1036': attribute type 10 has an invalid length.
[  128.489816][ T6700] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  128.500500][ T6700] team0: Failed to send options change via netlink (err -105)
[  128.508209][ T6700] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  128.517680][ T6700] team0: Port device dummy0 removed
[  128.525617][ T6700] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  128.534752][ T6702] loop3: detected capacity change from 0 to 512
[  128.555929][ T6702] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  128.568571][ T6702] ext4 filesystem being mounted at /188/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  128.594321][ T6702] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.1037: corrupted xattr block 32: bad e_name length
[  128.608363][ T6702] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=15
[  128.617641][ T6702] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.1037: corrupted xattr block 32: bad e_name length
[  128.633584][ T6702] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.1037: corrupted xattr block 32: bad e_name length
[  128.647942][ T6702] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=15
[  128.666148][ T6707] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1038'.
[  128.688708][ T6710] 9pnet_fd: Insufficient options for proto=fd
[  128.711479][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.747548][ T6714] loop3: detected capacity change from 0 to 128
[  129.814106][ T6755] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1052'.
[  129.907271][ T6761] loop1: detected capacity change from 0 to 128
[  129.958886][ T6765] loop4: detected capacity change from 0 to 512
[  129.983833][ T6765] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  129.996499][ T6765] ext4 filesystem being mounted at /187/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  130.021137][ T6765] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.1057: corrupted xattr block 32: bad e_name length
[  130.034897][ T6765] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[  130.044117][ T6765] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.1057: corrupted xattr block 32: bad e_name length
[  130.058451][ T6765] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.1057: corrupted xattr block 32: bad e_name length
[  130.072614][ T6765] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[  130.109262][ T6774] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  130.117362][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.280004][ T6785] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1064'.
[  130.392085][ T6787] loop1: detected capacity change from 0 to 512
[  130.399065][ T6787] EXT4-fs: dax option not supported
[  130.501944][ T6800] loop1: detected capacity change from 0 to 128
[  130.660469][ T6802] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1070'.
[  130.788380][ T6802] loop3: detected capacity change from 0 to 1024
[  130.824015][ T6802] EXT4-fs: dax option not supported
[  131.020686][ T6810] netlink: 'syz.1.1072': attribute type 10 has an invalid length.
[  131.032655][ T6810] bond0: (slave dummy0): Releasing backup interface
[  131.044810][ T6810] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  131.053835][ T6810] team0: Failed to send options change via netlink (err -105)
[  131.061319][ T6810] team0: Port device dummy0 added
[  131.068577][ T6810] netlink: 'syz.1.1072': attribute type 10 has an invalid length.
[  131.082671][ T6810] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  131.109748][ T6810] team0: Failed to send options change via netlink (err -105)
[  131.119612][ T6810] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  131.133188][ T6810] team0: Port device dummy0 removed
[  131.143572][ T6810] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  131.179348][ T6817] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1076'.
[  131.279769][ T6825] loop3: detected capacity change from 0 to 512
[  131.293299][ T6825] EXT4-fs: dax option not supported
[  131.364448][ T6833] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1083'.
[  131.398161][ T6838] netlink: 'syz.3.1087': attribute type 10 has an invalid length.
[  131.414865][ T6840] FAULT_INJECTION: forcing a failure.
[  131.414865][ T6840] name failslab, interval 1, probability 0, space 0, times 0
[  131.427616][ T6840] CPU: 0 UID: 0 PID: 6840 Comm: syz.1.1086 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  131.427658][ T6840] Tainted: [W]=WARN
[  131.427665][ T6840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  131.427685][ T6840] Call Trace:
[  131.427692][ T6840]  <TASK>
[  131.427702][ T6840]  __dump_stack+0x1d/0x30
[  131.427729][ T6840]  dump_stack_lvl+0xe8/0x140
[  131.427752][ T6840]  dump_stack+0x15/0x1b
[  131.427773][ T6840]  should_fail_ex+0x265/0x280
[  131.427810][ T6840]  should_failslab+0x8c/0xb0
[  131.427835][ T6840]  kmem_cache_alloc_noprof+0x50/0x480
[  131.427867][ T6840]  ? vm_area_alloc+0x2c/0xb0
[  131.427906][ T6840]  vm_area_alloc+0x2c/0xb0
[  131.427939][ T6840]  mmap_region+0xa99/0x1620
[  131.427995][ T6840]  do_mmap+0x9b3/0xbe0
[  131.428034][ T6840]  vm_mmap_pgoff+0x17a/0x2e0
[  131.428064][ T6840]  ksys_mmap_pgoff+0xc2/0x310
[  131.428097][ T6840]  ? __x64_sys_mmap+0x49/0x70
[  131.428125][ T6840]  x64_sys_call+0x14a3/0x3000
[  131.428153][ T6840]  do_syscall_64+0xd2/0x200
[  131.428180][ T6840]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  131.428215][ T6840]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  131.428241][ T6840]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  131.428266][ T6840] RIP: 0033:0x7fd32bf8f003
[  131.428282][ T6840] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7
[  131.428299][ T6840] RSP: 002b:00007fd32a9eee18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  131.428319][ T6840] RAX: ffffffffffffffda RBX: 0000000000000474 RCX: 00007fd32bf8f003
[  131.428334][ T6840] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000
[  131.428369][ T6840] RBP: 0000200000000542 R08: 00000000ffffffff R09: 0000000000000000
[  131.428384][ T6840] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000006
[  131.428423][ T6840] R13: 00007fd32a9eeef0 R14: 00007fd32a9eeeb0 R15: 0000200000000080
[  131.428447][ T6840]  </TASK>
[  131.626092][ T6838] bond0: (slave dummy0): Releasing backup interface
[  131.632784][ T6841] netlink: 'syz.3.1087': attribute type 10 has an invalid length.
[  131.685400][ T6838] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  131.685387][ T6843] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1088'.
[  131.686705][ T6843] loop1: detected capacity change from 0 to 128
[  131.724013][ T6838] team0: Failed to send options change via netlink (err -105)
[  131.731556][ T6838] team0: Port device dummy0 added
[  131.750716][ T6843] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  131.788871][ T6843] ext4 filesystem being mounted at /227/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  131.817874][ T6841] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  131.829393][ T6841] team0: Failed to send options change via netlink (err -105)
[  131.837724][ T6841] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  131.848158][ T6841] team0: Port device dummy0 removed
[  131.855943][ T3320] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  131.857101][ T6841] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  131.934734][ T6852] netlink: 'syz.1.1090': attribute type 3 has an invalid length.
[  131.942600][ T6852] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1090'.
[  132.043766][ T6855] FAULT_INJECTION: forcing a failure.
[  132.043766][ T6855] name failslab, interval 1, probability 0, space 0, times 0
[  132.056557][ T6855] CPU: 0 UID: 0 PID: 6855 Comm: syz.1.1092 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  132.056599][ T6855] Tainted: [W]=WARN
[  132.056607][ T6855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  132.056624][ T6855] Call Trace:
[  132.056632][ T6855]  <TASK>
[  132.056642][ T6855]  __dump_stack+0x1d/0x30
[  132.056665][ T6855]  dump_stack_lvl+0xe8/0x140
[  132.056683][ T6855]  dump_stack+0x15/0x1b
[  132.056703][ T6855]  should_fail_ex+0x265/0x280
[  132.056738][ T6855]  should_failslab+0x8c/0xb0
[  132.056764][ T6855]  kmem_cache_alloc_noprof+0x50/0x480
[  132.056797][ T6855]  ? mas_alloc_nodes+0x1a2/0x210
[  132.056827][ T6855]  mas_alloc_nodes+0x1a2/0x210
[  132.056849][ T6855]  mas_preallocate+0x2ca/0x510
[  132.056883][ T6855]  mmap_region+0xbd4/0x1620
[  132.056941][ T6855]  do_mmap+0x9b3/0xbe0
[  132.056985][ T6855]  vm_mmap_pgoff+0x17a/0x2e0
[  132.057017][ T6855]  ksys_mmap_pgoff+0xc2/0x310
[  132.057051][ T6855]  ? __x64_sys_mmap+0x49/0x70
[  132.057074][ T6855]  x64_sys_call+0x14a3/0x3000
[  132.057096][ T6855]  do_syscall_64+0xd2/0x200
[  132.057125][ T6855]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  132.057158][ T6855]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  132.057186][ T6855]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.057213][ T6855] RIP: 0033:0x7fd32bf8f003
[  132.057232][ T6855] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7
[  132.057255][ T6855] RSP: 002b:00007fd32a9eee18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  132.057278][ T6855] RAX: ffffffffffffffda RBX: 000000000000054e RCX: 00007fd32bf8f003
[  132.057290][ T6855] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000
[  132.057302][ T6855] RBP: 0000200000001782 R08: 00000000ffffffff R09: 0000000000000000
[  132.057314][ T6855] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000005
[  132.057332][ T6855] R13: 00007fd32a9eeef0 R14: 00007fd32a9eeeb0 R15: 00002000000003c0
[  132.057353][ T6855]  </TASK>
[  132.313381][   T29] kauditd_printk_skb: 66 callbacks suppressed
[  132.313398][   T29] audit: type=1400 audit(1760820520.673:2696): avc:  denied  { mount } for  pid=6857 comm="syz.0.1093" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  132.398885][ T6866] loop1: detected capacity change from 0 to 512
[  132.411834][ T6866] EXT4-fs: dax option not supported
[  132.419825][   T29] audit: type=1400 audit(1760820520.803:2697): avc:  denied  { unmount } for  pid=3318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  132.482265][ T6876] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1100'.
[  132.495797][ T6876] loop4: detected capacity change from 0 to 128
[  132.502954][   T29] audit: type=1326 audit(1760820520.893:2698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6877 comm="syz.1.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32bf8efc9 code=0x7ffc0000
[  132.529080][ T6878] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64
[  132.536810][ T6878] audit: out of memory in audit_log_start
[  132.543640][ T6876] ext4 filesystem being mounted at /191/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  132.568874][   T29] audit: type=1326 audit(1760820520.893:2699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6877 comm="syz.1.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32bf8efc9 code=0x7ffc0000
[  132.592443][   T29] audit: type=1326 audit(1760820520.893:2700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6877 comm="syz.1.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd32bf8efc9 code=0x7ffc0000
[  132.615961][   T29] audit: type=1326 audit(1760820520.893:2701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6877 comm="syz.1.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32bf8efc9 code=0x7ffc0000
[  132.639426][   T29] audit: type=1326 audit(1760820520.893:2702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6877 comm="syz.1.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32bf8efc9 code=0x7ffc0000
[  132.666028][   T29] audit: type=1326 audit(1760820520.893:2703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6877 comm="syz.1.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd32bf8efc9 code=0x7ffc0000
[  132.815391][ T6891] loop1: detected capacity change from 0 to 128
[  132.839423][ T6891] netlink: 'syz.1.1105': attribute type 27 has an invalid length.
[  133.495079][ T6902] loop1: detected capacity change from 0 to 128
[  133.732365][ T6911] loop3: detected capacity change from 0 to 2048
[  133.770497][ T6911] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1111'.
[  133.796066][ T3324] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set
[  133.819545][ T3324] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6667: Corrupt filesystem
[  134.012916][   T10] IPVS: starting estimator thread 0...
[  134.012931][ T6931] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  134.038625][ T6941] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1123'.
[  134.049028][ T6941] syzkaller0: entered allmulticast mode
[  134.115624][ T6937] IPVS: using max 2016 ests per chain, 100800 per kthread
[  134.136872][ T6943] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1124'.
[  134.147840][ T6943] syzkaller0: entered allmulticast mode
[  134.411347][ T6947] loop1: detected capacity change from 0 to 128
[  134.424021][ T6947] ext4 filesystem being mounted at /237/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  134.880745][ T6940] syzkaller0: left allmulticast mode
[  134.886912][ T6962] netlink: 'syz.4.1131': attribute type 10 has an invalid length.
[  134.909271][ T6964] wireguard0: entered promiscuous mode
[  134.914856][ T6964] wireguard0: entered allmulticast mode
[  134.924696][ T6962] bond0: (slave dummy0): Releasing backup interface
[  134.933560][ T6962] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  134.943077][ T6962] team0: Failed to send options change via netlink (err -105)
[  134.943912][ T6970] netlink: 'syz.4.1131': attribute type 10 has an invalid length.
[  134.950632][ T6962] team0: Port device dummy0 added
[  134.958169][ T6942] syzkaller0: left allmulticast mode
[  134.969548][ T6970] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  134.983112][ T6970] team0: Failed to send options change via netlink (err -105)
[  134.990845][ T6970] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  135.000000][ T6970] team0: Port device dummy0 removed
[  135.007583][ T6970] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  135.048704][ T6976] loop0: detected capacity change from 0 to 128
[  135.078273][ T6976] netlink: 'syz.0.1135': attribute type 27 has an invalid length.
[  135.089313][ T6979] loop3: detected capacity change from 0 to 512
[  135.099880][ T6979] EXT4-fs: dax option not supported
[  135.194267][ T6990] loop0: detected capacity change from 0 to 128
[  135.266085][ T6996] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  135.324331][ T7000] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1143'.
[  135.333605][ T6998] ALSA: seq fatal error: cannot create timer (-19)
[  135.355069][ T7000] loop0: detected capacity change from 0 to 1024
[  135.372914][ T7000] EXT4-fs: dax option not supported
[  135.406794][ T7006] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1145'.
[  135.416855][ T7006] syzkaller0: entered allmulticast mode
[  136.170344][ T7016] loop1: detected capacity change from 0 to 512
[  136.276526][ T7023] loop4: detected capacity change from 0 to 512
[  136.290914][ T7022] loop3: detected capacity change from 0 to 1024
[  136.301473][ T7005] syzkaller0: left allmulticast mode
[  136.315921][ T7022] EXT4-fs: Ignoring removed nobh option
[  136.339866][ T7023] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  136.361803][ T7016] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.1148: error while reading EA inode 32 err=-116
[  136.377679][ T7022] /dev/loop3: Can't open blockdev
[  136.393512][ T7016] EXT4-fs (loop1): Remounting filesystem read-only
[  136.400175][ T7016] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  136.422941][ T7023] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #2: block 9: comm syz.4.1151: lblock 0 mapped to illegal pblock 9 (length 1)
[  136.442453][ T7016] EXT4-fs (loop1): 1 orphan inode deleted
[  136.470960][ T7016] EXT4-fs mount: 6 callbacks suppressed
[  136.470975][ T7016] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  136.490483][ T7023] EXT4-fs (loop4): mount failed
[  136.583211][ T7016] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.595818][ T7040] loop4: detected capacity change from 0 to 512
[  136.660826][ T7040] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  136.686105][ T7040] ext4 filesystem being mounted at /200/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  136.730976][ T7040] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.1157: corrupted xattr block 32: bad e_name length
[  136.754467][ T7040] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[  136.763877][ T7040] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.1157: corrupted xattr block 32: bad e_name length
[  136.778940][ T7053] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  136.786564][ T7040] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.1157: corrupted xattr block 32: bad e_name length
[  136.808142][ T7040] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[  136.843522][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.946782][ T7013] syz.1.1148 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  136.957926][ T7013] CPU: 1 UID: 0 PID: 7013 Comm: syz.1.1148 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  136.957980][ T7013] Tainted: [W]=WARN
[  136.957987][ T7013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  136.958001][ T7013] Call Trace:
[  136.958008][ T7013]  <TASK>
[  136.958017][ T7013]  __dump_stack+0x1d/0x30
[  136.958044][ T7013]  dump_stack_lvl+0xe8/0x140
[  136.958069][ T7013]  dump_stack+0x15/0x1b
[  136.958092][ T7013]  dump_header+0x81/0x220
[  136.958173][ T7013]  oom_kill_process+0x342/0x400
[  136.958212][ T7013]  out_of_memory+0x979/0xb80
[  136.958254][ T7013]  try_charge_memcg+0x610/0xa10
[  136.958306][ T7013]  charge_memcg+0x51/0xc0
[  136.958388][ T7013]  mem_cgroup_swapin_charge_folio+0xcc/0x150
[  136.958423][ T7013]  __read_swap_cache_async+0x17b/0x2d0
[  136.958472][ T7013]  swap_cluster_readahead+0x262/0x3c0
[  136.958557][ T7013]  swapin_readahead+0xde/0x6f0
[  136.958583][ T7013]  ? mod_memcg_lruvec_state+0x1fc/0x2c0
[  136.958627][ T7013]  ? __lruvec_stat_mod_folio+0xd6/0x120
[  136.958659][ T7013]  ? __rcu_read_unlock+0x4f/0x70
[  136.958758][ T7013]  ? swap_cache_get_folio+0x277/0x280
[  136.958855][ T7013]  do_swap_page+0x2ae/0x2370
[  136.958894][ T7013]  ? css_rstat_updated+0xb7/0x240
[  136.958935][ T7013]  ? __pfx_default_wake_function+0x10/0x10
[  136.959113][ T7013]  handle_mm_fault+0x9a5/0x2be0
[  136.959146][ T7013]  ? vma_start_read+0x141/0x1f0
[  136.959190][ T7013]  do_user_addr_fault+0x630/0x1080
[  136.959224][ T7013]  exc_page_fault+0x62/0xa0
[  136.959252][ T7013]  asm_exc_page_fault+0x26/0x30
[  136.959346][ T7013] RIP: 0033:0x7fd32be611be
[  136.959405][ T7013] Code: e9 97 c8 12 00 0f 1f 80 00 00 00 00 48 83 c4 28 48 c7 c0 ff ff ff ff 5b 5d c3 66 90 41 57 41 56 41 55 41 54 55 53 48 83 ec 38 <80> 3d 3b 0e 38 00 00 89 7c 24 0c 88 54 24 10 48 89 74 24 28 0f 85
[  136.959430][ T7013] RSP: 002b:00007fffce025240 EFLAGS: 00010202
[  136.959451][ T7013] RAX: 00007fd32c1e6090 RBX: 00007fd32c1e6090 RCX: 0000000000000026
[  136.959469][ T7013] RDX: 0000000000000001 RSI: 00007fd32c1e6128 RDI: 000000000000000f
[  136.959547][ T7013] RBP: 00007fd32c1e7da0 R08: 0000000000000000 R09: 0000000000000026
[  136.959563][ T7013] R10: 3fffffffffffffff R11: 0000000000000293 R12: 000000000002167d
[  136.959575][ T7013] R13: 00007fd32c1e6180 R14: ffffffffffffffff R15: 00007fffce0253c0
[  136.959603][ T7013]  </TASK>
[  136.959620][ T7013] memory: usage 307200kB, limit 307200kB, failcnt 725
[  137.191343][ T7013] memory+swap: usage 282152kB, limit 9007199254740988kB, failcnt 0
[  137.199306][ T7013] kmem: usage 274692kB, limit 9007199254740988kB, failcnt 0
[  137.206629][ T7013] Memory cgroup stats for /syz1:
[  137.218249][ T7013] cache 524288
[  137.226635][ T7013] rss 4096
[  137.229426][ T7061] ALSA: seq fatal error: cannot create timer (-19)
[  137.229679][ T7013] shmem 0
[  137.239185][ T7013] mapped_file 65536
[  137.243039][ T7013] dirty 0
[  137.246001][ T7013] writeback 16384
[  137.249647][ T7013] workingset_refault_anon 6
[  137.254341][ T7013] workingset_refault_file 128
[  137.259025][ T7013] swap 184320
[  137.262482][ T7013] swapcached 40960
[  137.266433][ T7013] pgpgin 75414
[  137.269818][ T7013] pgpgout 75276
[  137.273327][ T7013] pgfault 97864
[  137.276800][ T7013] pgmajfault 7
[  137.280261][ T7013] inactive_anon 28672
[  137.284301][ T7013] active_anon 12288
[  137.288200][ T7013] inactive_file 0
[  137.291842][ T7013] active_file 524288
[  137.295801][ T7013] unevictable 0
[  137.299416][ T7013] hierarchical_memory_limit 314572800
[  137.304868][ T7013] hierarchical_memsw_limit 9223372036854771712
[  137.311040][ T7013] total_cache 524288
[  137.315127][ T7013] total_rss 4096
[  137.318709][ T7013] total_shmem 0
[  137.322193][ T7013] total_mapped_file 65536
[  137.326622][ T7013] total_dirty 0
[  137.330111][ T7013] total_writeback 16384
[  137.334313][ T7013] total_workingset_refault_anon 6
[  137.339344][ T7013] total_workingset_refault_file 128
[  137.344604][ T7013] total_swap 184320
[  137.348423][ T7013] total_swapcached 40960
[  137.352708][ T7013] total_pgpgin 75414
[  137.356624][ T7013] total_pgpgout 75276
[  137.360712][ T7013] total_pgfault 97864
[  137.364778][ T7013] total_pgmajfault 7
[  137.368706][ T7013] total_inactive_anon 28672
[  137.373325][ T7013] total_active_anon 12288
[  137.377732][ T7013] total_inactive_file 0
[  137.382014][ T7013] total_active_file 524288
[  137.386508][ T7013] total_unevictable 0
[  137.390547][ T7013] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1148,pid=7013,uid=0
[  137.405391][ T7013] Memory cgroup out of memory: Killed process 7013 (syz.1.1148) total-vm:94088kB, anon-rss:1264kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000
[  137.465777][ T7071] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1166'.
[  137.490735][ T7071] syzkaller0: entered allmulticast mode
[  137.504631][ T7070] syzkaller0: left allmulticast mode
[  137.533810][ T7080] netlink: 'syz.0.1170': attribute type 1 has an invalid length.
[  137.541823][ T7080] netlink: 'syz.0.1170': attribute type 3 has an invalid length.
[  137.549640][ T7080] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1170'.
[  137.569017][   T29] kauditd_printk_skb: 139 callbacks suppressed
[  137.569035][   T29] audit: type=1326 audit(1760820525.953:2843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7079 comm="syz.0.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad734efc9 code=0x7ffc0000
[  137.598834][   T29] audit: type=1326 audit(1760820525.953:2844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7079 comm="syz.0.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad734efc9 code=0x7ffc0000
[  137.622302][   T29] audit: type=1326 audit(1760820525.953:2845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7079 comm="syz.0.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcad734efc9 code=0x7ffc0000
[  137.645735][   T29] audit: type=1326 audit(1760820525.953:2846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7079 comm="syz.0.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad734efc9 code=0x7ffc0000
[  137.669308][   T29] audit: type=1326 audit(1760820525.953:2847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7079 comm="syz.0.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcad734efc9 code=0x7ffc0000
[  137.692800][   T29] audit: type=1326 audit(1760820525.953:2848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7079 comm="syz.0.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad734efc9 code=0x7ffc0000
[  137.716218][   T29] audit: type=1326 audit(1760820525.953:2849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7079 comm="syz.0.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fcad734efc9 code=0x7ffc0000
[  137.747991][   T29] audit: type=1326 audit(1760820525.953:2850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7079 comm="syz.0.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad734efc9 code=0x7ffc0000
[  137.771592][   T29] audit: type=1326 audit(1760820525.953:2851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7079 comm="syz.0.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7fcad734efc9 code=0x7ffc0000
[  137.795183][   T29] audit: type=1326 audit(1760820525.953:2852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7079 comm="syz.0.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad734efc9 code=0x7ffc0000
[  137.849784][ T7086] loop0: detected capacity change from 0 to 512
[  137.858709][ T7086] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  137.871276][ T7086] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #2: block 9: comm syz.0.1173: lblock 0 mapped to illegal pblock 9 (length 1)
[  137.887405][ T7086] EXT4-fs (loop0): mount failed
[  137.955688][ T7097] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7097 comm=syz.1.1177
[  138.013634][ T7104] loop3: detected capacity change from 0 to 512
[  138.014216][ T7106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1180'.
[  138.031360][ T7106] FAULT_INJECTION: forcing a failure.
[  138.031360][ T7106] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  138.044626][ T7106] CPU: 0 UID: 0 PID: 7106 Comm: syz.1.1180 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  138.044656][ T7106] Tainted: [W]=WARN
[  138.044664][ T7106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  138.044679][ T7106] Call Trace:
[  138.044686][ T7106]  <TASK>
[  138.044701][ T7106]  __dump_stack+0x1d/0x30
[  138.044727][ T7106]  dump_stack_lvl+0xe8/0x140
[  138.044809][ T7106]  dump_stack+0x15/0x1b
[  138.044831][ T7106]  should_fail_ex+0x265/0x280
[  138.044891][ T7106]  should_fail+0xb/0x20
[  138.044932][ T7106]  should_fail_usercopy+0x1a/0x20
[  138.044958][ T7106]  _copy_to_user+0x20/0xa0
[  138.044999][ T7106]  simple_read_from_buffer+0xb5/0x130
[  138.045029][ T7106]  proc_fail_nth_read+0x10e/0x150
[  138.045130][ T7106]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  138.045211][ T7106]  vfs_read+0x1a8/0x770
[  138.045238][ T7106]  ? __rcu_read_unlock+0x4f/0x70
[  138.045270][ T7106]  ? __fget_files+0x184/0x1c0
[  138.045330][ T7106]  ksys_read+0xda/0x1a0
[  138.045385][ T7106]  __x64_sys_read+0x40/0x50
[  138.045414][ T7106]  x64_sys_call+0x27c0/0x3000
[  138.045480][ T7106]  do_syscall_64+0xd2/0x200
[  138.045548][ T7106]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  138.045584][ T7106]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  138.045612][ T7106]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.045639][ T7106] RIP: 0033:0x7fd32bf8d9dc
[  138.045708][ T7106] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  138.045733][ T7106] RSP: 002b:00007fd32a9ef030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  138.045758][ T7106] RAX: ffffffffffffffda RBX: 00007fd32c1e5fa0 RCX: 00007fd32bf8d9dc
[  138.045774][ T7106] RDX: 000000000000000f RSI: 00007fd32a9ef0a0 RDI: 0000000000000004
[  138.045790][ T7106] RBP: 00007fd32a9ef090 R08: 0000000000000000 R09: 0000000000000000
[  138.045848][ T7106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  138.045864][ T7106] R13: 00007fd32c1e6038 R14: 00007fd32c1e5fa0 R15: 00007fffce025148
[  138.045902][ T7106]  </TASK>
[  138.053262][ T7104] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  138.130515][ T7112] FAULT_INJECTION: forcing a failure.
[  138.130515][ T7112] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  138.133462][ T7104] ext4 filesystem being mounted at /217/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  138.136974][ T7112] CPU: 0 UID: 0 PID: 7112 Comm: syz.1.1183 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  138.137072][ T7112] Tainted: [W]=WARN
[  138.137082][ T7112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  138.137102][ T7112] Call Trace:
[  138.137111][ T7112]  <TASK>
[  138.137121][ T7112]  __dump_stack+0x1d/0x30
[  138.137154][ T7112]  dump_stack_lvl+0xe8/0x140
[  138.137193][ T7112]  dump_stack+0x15/0x1b
[  138.137216][ T7112]  should_fail_ex+0x265/0x280
[  138.137271][ T7112]  should_fail+0xb/0x20
[  138.137365][ T7112]  should_fail_usercopy+0x1a/0x20
[  138.137434][ T7112]  _copy_from_iter+0xd2/0xe80
[  138.137464][ T7112]  ? __build_skb_around+0x1ab/0x200
[  138.137501][ T7112]  ? __alloc_skb+0x223/0x320
[  138.137616][ T7112]  netlink_sendmsg+0x471/0x6b0
[  138.137662][ T7112]  ? __pfx_netlink_sendmsg+0x10/0x10
[  138.137706][ T7112]  __sock_sendmsg+0x145/0x180
[  138.137735][ T7112]  ____sys_sendmsg+0x31e/0x4e0
[  138.137817][ T7112]  ___sys_sendmsg+0x17b/0x1d0
[  138.137878][ T7112]  __x64_sys_sendmsg+0xd4/0x160
[  138.137926][ T7112]  x64_sys_call+0x191e/0x3000
[  138.138029][ T7112]  do_syscall_64+0xd2/0x200
[  138.138094][ T7112]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  138.138139][ T7112]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  138.138171][ T7112]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.138202][ T7112] RIP: 0033:0x7fd32bf8efc9
[  138.138300][ T7112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  138.138327][ T7112] RSP: 002b:00007fd32a9ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  138.138353][ T7112] RAX: ffffffffffffffda RBX: 00007fd32c1e5fa0 RCX: 00007fd32bf8efc9
[  138.138372][ T7112] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000006
[  138.138390][ T7112] RBP: 00007fd32a9ef090 R08: 0000000000000000 R09: 0000000000000000
[  138.138408][ T7112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  138.138426][ T7112] R13: 00007fd32c1e6038 R14: 00007fd32c1e5fa0 R15: 00007fffce025148
[  138.138528][ T7112]  </TASK>
[  138.518982][ T7104] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.1181: corrupted xattr block 32: bad e_name length
[  138.533917][ T7104] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=15
[  138.536541][ T7117] FAULT_INJECTION: forcing a failure.
[  138.536541][ T7117] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  138.542955][ T7104] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.1181: corrupted xattr block 32: bad e_name length
[  138.556090][ T7117] CPU: 0 UID: 0 PID: 7117 Comm: syz.1.1185 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  138.556139][ T7117] Tainted: [W]=WARN
[  138.556168][ T7117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  138.556188][ T7117] Call Trace:
[  138.556253][ T7117]  <TASK>
[  138.556266][ T7117]  __dump_stack+0x1d/0x30
[  138.556296][ T7117]  dump_stack_lvl+0xe8/0x140
[  138.556324][ T7117]  dump_stack+0x15/0x1b
[  138.556349][ T7117]  should_fail_ex+0x265/0x280
[  138.556398][ T7117]  should_fail+0xb/0x20
[  138.556458][ T7117]  should_fail_usercopy+0x1a/0x20
[  138.556507][ T7117]  _copy_to_user+0x20/0xa0
[  138.556544][ T7117]  simple_read_from_buffer+0xb5/0x130
[  138.556586][ T7117]  proc_fail_nth_read+0x10e/0x150
[  138.556635][ T7117]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  138.556681][ T7117]  vfs_read+0x1a8/0x770
[  138.556713][ T7117]  ? __rcu_read_unlock+0x4f/0x70
[  138.556748][ T7117]  ? __fget_files+0x184/0x1c0
[  138.556789][ T7117]  ksys_read+0xda/0x1a0
[  138.556850][ T7117]  __x64_sys_read+0x40/0x50
[  138.556931][ T7117]  x64_sys_call+0x27c0/0x3000
[  138.557048][ T7117]  do_syscall_64+0xd2/0x200
[  138.557160][ T7117]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  138.557198][ T7117]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  138.557279][ T7117]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.557310][ T7117] RIP: 0033:0x7fd32bf8d9dc
[  138.557331][ T7117] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  138.557356][ T7117] RSP: 002b:00007fd32a9ef030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  138.557408][ T7117] RAX: ffffffffffffffda RBX: 00007fd32c1e5fa0 RCX: 00007fd32bf8d9dc
[  138.557426][ T7117] RDX: 000000000000000f RSI: 00007fd32a9ef0a0 RDI: 0000000000000006
[  138.557443][ T7117] RBP: 00007fd32a9ef090 R08: 0000000000000000 R09: 0000000000000000
[  138.557460][ T7117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  138.557557][ T7117] R13: 00007fd32c1e6038 R14: 00007fd32c1e5fa0 R15: 00007fffce025148
[  138.557585][ T7117]  </TASK>
[  138.809649][ T7104] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.1181: corrupted xattr block 32: bad e_name length
[  138.837252][ T7129] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  138.852686][ T7104] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=15
[  138.894908][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.945682][ T7135] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1193'.
[  138.987841][ T7138] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1194'.
[  139.075268][ T7138] syzkaller0: entered allmulticast mode
[  139.725927][ T7147] loop4: detected capacity change from 0 to 512
[  139.742470][    C0] ==================================================================
[  139.750611][    C0] BUG: KCSAN: data-race in wq_worker_tick / wq_worker_tick
[  139.757930][    C0] 
[  139.760274][    C0] read-write to 0xffff888100073ab8 of 8 bytes by interrupt on cpu 1:
[  139.768369][    C0]  wq_worker_tick+0x60/0x230
[  139.772998][    C0]  sched_tick+0x11a/0x270
[  139.777359][    C0]  update_process_times+0x15f/0x190
[  139.782584][    C0]  tick_nohz_handler+0x249/0x2d0
[  139.787572][    C0]  __hrtimer_run_queues+0x20f/0x5a0
[  139.792805][    C0]  hrtimer_interrupt+0x21a/0x460
[  139.797776][    C0]  __sysvec_apic_timer_interrupt+0x5f/0x1d0
[  139.803700][    C0]  sysvec_apic_timer_interrupt+0x6f/0x80
[  139.809360][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  139.815359][    C0]  _raw_spin_unlock_irq+0x2f/0x50
[  139.820406][    C0]  process_scheduled_works+0x486/0x9d0
[  139.825881][    C0]  worker_thread+0x582/0x770
[  139.830476][    C0]  kthread+0x489/0x510
[  139.834557][    C0]  ret_from_fork+0x122/0x1b0
[  139.839155][    C0]  ret_from_fork_asm+0x1a/0x30
[  139.843926][    C0] 
[  139.846250][    C0] read-write to 0xffff888100073ab8 of 8 bytes by interrupt on cpu 0:
[  139.854319][    C0]  wq_worker_tick+0x60/0x230
[  139.858915][    C0]  sched_tick+0x11a/0x270
[  139.863251][    C0]  update_process_times+0x15f/0x190
[  139.868458][    C0]  tick_nohz_handler+0x249/0x2d0
[  139.873426][    C0]  __hrtimer_run_queues+0x20f/0x5a0
[  139.878634][    C0]  hrtimer_interrupt+0x21a/0x460
[  139.883580][    C0]  __sysvec_apic_timer_interrupt+0x5f/0x1d0
[  139.889487][    C0]  sysvec_apic_timer_interrupt+0x6f/0x80
[  139.895146][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  139.901131][    C0]  queue_delayed_work_on+0x10f/0x170
[  139.906506][    C0]  nsim_dev_trap_report_work+0x60f/0x630
[  139.912163][    C0]  process_scheduled_works+0x4ce/0x9d0
[  139.917641][    C0]  worker_thread+0x582/0x770
[  139.922235][    C0]  kthread+0x489/0x510
[  139.926308][    C0]  ret_from_fork+0x122/0x1b0
[  139.930903][    C0]  ret_from_fork_asm+0x1a/0x30
[  139.935675][    C0] 
[  139.937999][    C0] value changed: 0x000000000004baf0 -> 0x000000000004e200
[  139.945101][    C0] 
[  139.947423][    C0] Reported by Kernel Concurrency Sanitizer on:
[  139.953590][    C0] CPU: 0 UID: 0 PID: 4961 Comm: kworker/u8:68 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  139.965147][    C0] Tainted: [W]=WARN
[  139.968951][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  139.979042][    C0] Workqueue: events_unbound nsim_dev_trap_report_work
[  139.985834][    C0] ==================================================================
[  139.999043][ T7147] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  140.011731][ T7147] ext4 filesystem being mounted at /209/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  140.039230][ T7147] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.1197: corrupted xattr block 32: bad e_name length
[  140.066142][ T7147] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[  140.081326][ T7147] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.1197: corrupted xattr block 32: bad e_name length
[  140.095704][ T7147] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.1197: corrupted xattr block 32: bad e_name length
[  140.113072][ T7137] syzkaller0: left allmulticast mode
[  140.119170][ T7147] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[  140.166065][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.