last executing test programs:

2m59.012703968s ago: executing program 32 (id=504):
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0)
r2 = dup3(r0, r1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000140)={'#! ', './file0'}, 0xb)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x12, r4, 0x0)
ioctl$MON_IOCG_STATS(r2, 0xc0109207, &(0x7f00000001c0))

2m58.260387478s ago: executing program 33 (id=520):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
bind$tipc(r2, 0x0, 0x0)

2m56.61636425s ago: executing program 34 (id=553):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140))
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0xf7}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f0000000400000004000000a2"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000006c0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)

2m39.598531265s ago: executing program 35 (id=987):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0)
io_setup(0xaea2, &(0x7f0000000000))
syz_io_uring_setup(0x10278e, &(0x7f0000000000)={0x0, 0x256d, 0x10, 0x0, 0x4}, &(0x7f0000000200), &(0x7f00000000c0))

2m39.351122924s ago: executing program 36 (id=994):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f00000012c0)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290)
close_range(r0, 0xffffffffffffffff, 0x0)

2m36.325647157s ago: executing program 37 (id=1011):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
fadvise64(r0, 0x9, 0x4, 0x1)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, 0x0, 0x0)

2m20.807777071s ago: executing program 38 (id=1405):
setrlimit(0xf, &(0x7f0000000000)={0x800000002, 0xfffffffbffffffff})
timer_create(0x3, 0x0, &(0x7f0000000300)=<r0=>0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_settime(r0, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@bridge_delneigh={0x1c, 0x1c, 0xc07, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x40}}, 0x1c}}, 0x50)
prlimit64(0x0, 0xa, 0x0, 0x0)

2m19.877842715s ago: executing program 39 (id=1423):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000010bc0)='kfree\x00', r1}, 0x18)
r2 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff)
r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff)
r4 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000300)={0x0, "6035ae1e0fe721441705322025000000003e2a5b4377f7ad4bcf2b71d17e1ec0ef54e6773fd7264c39ea00c508ba607269613800"}, 0x48, 0xfffffffffffffffe)
keyctl$KEYCTL_MOVE(0x4, r4, r3, r3, 0x0)
keyctl$KEYCTL_MOVE(0x4, r2, r2, 0x0, 0x0)

2m14.384632116s ago: executing program 40 (id=1535):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f0000000180)={[{@discard}, {@dioread_lock}, {@noquota}, {@noblock_validity}, {@inlinecrypt}]}, 0xfc, 0x564, &(0x7f0000002340)="$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")
move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x46)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={0x0, r0}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
link(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
unlink(&(0x7f0000000880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

2m8.563550722s ago: executing program 41 (id=1678):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sched_process_fork\x00', r2}, 0x10)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

1m53.699895934s ago: executing program 42 (id=2085):
syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f00000005c0)='\"', 0x1, 0x4fed0)
sendfile(r0, r0, 0x0, 0xe3aa6ea)
renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611)

1m51.578424434s ago: executing program 2 (id=2122):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000004c0)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3})
bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r2, &(0x7f0000000140)="24000000010006", 0x7)

1m51.512919669s ago: executing program 2 (id=2124):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r3}, &(0x7f0000000a00), &(0x7f0000000a40)=r2}, 0x20)

1m51.37579561s ago: executing program 2 (id=2127):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10)
sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c}, 0x1c}}, 0x0)

1m51.25021433s ago: executing program 2 (id=2132):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x3000046, &(0x7f0000000280)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@errors_remount}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200, 0x400000]})
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0)
pwritev2(r1, &(0x7f0000000940)=[{&(0x7f0000000340)="be85809842d43cbb78329613b3aa8b78f87e932d0db6f110e00ef09327f497b6c6bc81aa4e792dc9c48a1b9a75cf44ce8ce1b856b626a7e4777204471d63392de989c63d", 0x44}], 0x1, 0x9, 0x10000, 0x0)

1m51.215530403s ago: executing program 4 (id=2135):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000040)={[{@usrquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x513, &(0x7f0000000440)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
fallocate(r1, 0x0, 0x0, 0xb2a2)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
socket$kcm(0x10, 0x2, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x1800, r2})

1m51.038924187s ago: executing program 2 (id=2138):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18)
r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_elf32(r2, &(0x7f0000000a00)=ANY=[@ANYBLOB="7f454c4604070003070000000000000002000300030000000903000038000000fcffffff0e000000000020000100050000000000000000000300000008000000f30000007f00000004"], 0x58)
close(r2)
execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0)

1m50.891714479s ago: executing program 4 (id=2140):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000050)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10)
syz_read_part_table(0x106f, &(0x7f0000000000)="$eJzsz6FNBkEQBeDZHf7cnTuLujbogJBgkSgEhCY4EkqgCiQWj8DRAooScEs2d7QAiO8Tm53Je2KCPzXVMSLLyUM+RsZdxDz09dqfw56pZ0vEy9t5fLV2qOXyOiN/+sfz61L2f3uPo9Mceq98ti1Sbq/G6IGpD+vHTb3P56hbIS+efvlcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiXvgMAAP//6XISlw==")

1m50.74912034s ago: executing program 4 (id=2141):
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00'})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

1m50.579752764s ago: executing program 2 (id=2142):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x108000)
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4363}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0})
ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, &(0x7f0000000040))

1m50.558750006s ago: executing program 43 (id=2142):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x108000)
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4363}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0})
ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, &(0x7f0000000040))

1m50.12964244s ago: executing program 4 (id=2159):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x3000046, &(0x7f0000000280)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@errors_remount}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==")
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200, 0x400000]})
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0)
pwritev2(r1, &(0x7f0000000940)=[{&(0x7f0000000340)="be85809842d43cbb78329613b3aa8b78f87e932d0db6f110e00ef09327f497b6c6bc81aa4e792dc9c48a1b9a75cf44ce8ce1b856b626a7e4777204471d63392de989c63d", 0x44}], 0x1, 0x9, 0x10000, 0x0)

1m49.837195294s ago: executing program 4 (id=2164):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xa, 0x4, 0x8, 0x8}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0x1)
capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f})
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x2)

1m45.64071898s ago: executing program 4 (id=2249):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "c4d65ab71f5ef2fe", "9e8ecc7bb5352776725e104757e7dc25c6519a85ef828f711330ff2bb17b5508", "dc5db43f", "80031f0000000200"}, 0x38)

1m45.601935883s ago: executing program 44 (id=2249):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "c4d65ab71f5ef2fe", "9e8ecc7bb5352776725e104757e7dc25c6519a85ef828f711330ff2bb17b5508", "dc5db43f", "80031f0000000200"}, 0x38)

1m19.126141085s ago: executing program 5 (id=3036):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket(0x10, 0x3, 0x0)
syz_usbip_server_init(0x5)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
getpgid(0x0)
syz_usb_connect(0x2, 0x64, 0x0, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x5, 0x2, 0x0, 0x70bd2d, 0x25dfdbfe}, 0x10}}, 0x4)

1m17.70421227s ago: executing program 5 (id=3071):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
write$tun(0xffffffffffffffff, 0x0, 0xfdef)
quotactl$Q_SETINFO(0xffffffff80000602, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)

1m17.664472062s ago: executing program 5 (id=3072):
r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r0, 0x0, 0x4)
symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r3, &(0x7f0000000080)='./file0\x00')
readlinkat(r3, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000780)=""/198, 0xc6)

1m17.635464365s ago: executing program 5 (id=3073):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0)
mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
umount2(&(0x7f00000003c0)='./file0\x00', 0xa)

1m17.585897489s ago: executing program 5 (id=3074):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0x2, 0x80805, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x1ffffffffffffe06, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a31"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0)

1m17.384305325s ago: executing program 5 (id=3085):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x20000001, 0x3, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1m17.383660735s ago: executing program 45 (id=3085):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x20000001, 0x3, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1m4.128566098s ago: executing program 7 (id=3482):
creat(&(0x7f00000000c0)='./file0\x00', 0x48)
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r2 = dup(r1)
write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
utime(&(0x7f0000000100)='./file0\x00', 0x0)

1m4.120265068s ago: executing program 7 (id=3492):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x108284, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x26}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x55, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb90402200800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370401a8001600200001401c00010003580461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3b8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6f4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0)

1m3.933862393s ago: executing program 7 (id=3494):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
dup(0xffffffffffffffff)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x18)
syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file1\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x35d, &(0x7f0000000f00)="$eJzs3c1rO0UYwPEnaZImKW1yEEVBOtiLXpY2ehaDtCAELG0jtoKwbTcasiYlG6oRse3Jq3j3JHgovVnwUND+A71404sI3noRPNiDurJvyeatLzFpfr/2+4GSycw8u7OZSXk27WYv3/3yo0rJ0kp6Q6JJJRERkSuRrEQlEPEfo245IWGH8srMnz+/uL5ZTHoVaiW/8WpOKTU3/8PHn6X8bmfTcpF9//KP3O8Xz148f/nvxodlS5UtVa01lK62a7829G3TULtlq6IptWoaumWoctUy6l77d/52zNreXlPp1d3Z9F7dsCylV5uqYjRVo6Ya9abSP9DLVaVpmppNC25SPF5b0/NDBu+MeDAYk3o9r0+JSKqnpXg8kQEBAICJ6s7/o05KP0z+vyVzhcLymnI6t/P/k5fOGzPvnM75+f9Zol/+/9ov3rY68n/ndKKd/9e884PSzfn/13KH/L83I3pchs7/s2MYDIYzn+ipinQ8c/L/tP/+dR29d7LoFsj/AQAAAAAAAAAAAAAAAAAAAAB4GlzZdsa27UzwGPy0LyHwn+NBGjT/0yKSdGbfZv4fsvXNLUm6F+45c2x+sV/cL3qPfodzETHF+Mfu5qyN4Moj5cjKj+aBH3+wX5xyW/IlKTvxsiQZybrrKRRv2ytvFZaXlMePb12mlA7H5yQjz4Tjv3dXpxOf64z395+QlxdC8Zpk5KcdqYkpu25ke/+fLyn15tuFrviU209Efrv3SQEAAAAAYMQ01dL3/F3TBrV73zKSL7kfExmyKBn5u//5/WLf8/NY5oXYpI8eAAAAAIDHwWp+WtElatTdgmn2K6RkYNMICrGOmriI9O2c6KqJX7flqdAR3nY8CfHuYPJ/j+ub4FW9S1TwjxTOwFtN/h1VZLjxBMfv1kRiw09T5FDcBXAYborKLcJj3YOfdypU384LA7dz5B9Iqyb42Cgx4HWW1d7tRK9ZCfGeGjsy3AJ47qtv/xrdG+T1U38FfHJz5yPTsA/kNpPSVXB20dsUH/svHgAAAAD3rp30BzVvhJvDNxIJ3yyHv9wDAAAAAAAAAAAAAAAAAAAAAAAAAAAAADBCY/lKv67CpI8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFL8FwAA//8GuPOT")
r1 = open(&(0x7f0000000340)='./file1\x00', 0x185102, 0x38)
sync_file_range(r1, 0x6, 0x10000000000000, 0x2)

1m3.891512847s ago: executing program 7 (id=3484):
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2bb, &(0x7f0000000440)="$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")
creat(&(0x7f0000000580)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14113e, 0x6ceac77f206eabb9)
write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b)
mkdir(&(0x7f0000000140)='./control\x00', 0x191)
rmdir(&(0x7f0000000100)='./control\x00')
sched_setscheduler(0x0, 0x1, 0x0)
mkdir(&(0x7f0000000140)='./control\x00', 0x0)

1m3.773258946s ago: executing program 7 (id=3487):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)

1m3.509518677s ago: executing program 7 (id=3500):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94)
recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x0, 0x0)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

1m3.487459149s ago: executing program 46 (id=3500):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94)
recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x0, 0x0)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

22.503514227s ago: executing program 9 (id=4545):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xdec7}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r0, 0x0, 0x80000}, 0x18)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)

22.475112309s ago: executing program 9 (id=4549):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]})
close_range(r3, 0xffffffffffffffff, 0x0)

22.443132222s ago: executing program 9 (id=4553):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x84)
pipe2$9p(&(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r4}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}]}})

22.34900483s ago: executing program 9 (id=4561):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10dc43, 0x0)

22.304254883s ago: executing program 9 (id=4563):
r0 = socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x4}, 0x2012, 0x0, 0x2, 0x2, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x4, 0x523, &(0x7f00000018c0)="$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")
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, 0x0, 0x48420)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0)

22.200747341s ago: executing program 9 (id=4567):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x5}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)

22.200399731s ago: executing program 47 (id=4567):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x5}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)

2.296023186s ago: executing program 0 (id=5085):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x9, 0x0, 0x7ffc0002}]})
rmdir(0x0)

2.256584219s ago: executing program 0 (id=5076):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x4, 0x6, 0x7}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x80000001}, 0x8)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10)
close(r2)

1.432797415s ago: executing program 0 (id=5105):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11c167, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
ustat(0x1, &(0x7f00000001c0))

1.410021357s ago: executing program 0 (id=5107):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r1)
r2 = socket$unix(0x1, 0x5, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

828.980134ms ago: executing program 0 (id=5119):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x2)
capset(&(0x7f0000000ac0)={0x19980330}, &(0x7f0000000180)={0x0, 0x10000, 0xc898, 0x0, 0x0, 0x2})
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)

736.672001ms ago: executing program 0 (id=5110):
ptrace$pokeuser(0x6, 0x0, 0x358, 0x0)
capset(0x0, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000080)={0xc, 0x6, 0xfa00, {0xfffffffffffffffe}}, 0x10)

735.380301ms ago: executing program 6 (id=5123):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r3=>0x0})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r3}, 0x94)

660.811477ms ago: executing program 6 (id=5125):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
io_setup(0x5, &(0x7f0000000040)=<r1=>0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r2}, &(0x7f0000000800), &(0x7f0000000840)=r3}, 0x20)
io_submit(r1, 0x2, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffd, r0, 0x0}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
shutdown(r0, 0x0)

559.786725ms ago: executing program 6 (id=5117):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18)
r2 = io_uring_setup(0x54a0, &(0x7f0000000340)={0x0, 0x0, 0x40, 0x2, 0x27a})
r3 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r3, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24)
listen(r3, 0x4)
recvmmsg(r3, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}}], 0x1, 0x40000100, 0x0)
close_range(r2, r3, 0x0)

477.109901ms ago: executing program 3 (id=5128):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r3=>0x0})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r3}, 0x94)

430.994355ms ago: executing program 6 (id=5129):
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x404c041}, 0x4048)
r0 = socket(0x28, 0x5, 0x0)
r1 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r1, 0x4)
connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0)
r2 = accept4$unix(r1, 0x0, 0x0, 0x800)
recvfrom$unix(r2, &(0x7f0000000140)=""/248, 0x1ffd4, 0x0, 0x0, 0x0)

393.376488ms ago: executing program 3 (id=5131):
socket$inet_udp(0x2, 0x2, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x73, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10)
write$qrtrtun(r1, &(0x7f0000000300)="ca0e808bb35bda", 0x7)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x9}}, 0x40)

393.142189ms ago: executing program 8 (id=5132):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', <r4=>0x0})
r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r4, 0x25, 0x4, @val=@tracing={0x0, 0x20000000}}, 0x1c)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000001800000008000000000000006e14000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe9}, 0x94)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r5, r6}, 0x5)

392.392999ms ago: executing program 1 (id=5141):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xa, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xa8}}, &(0x7f0000000480)='GPL\x00'}, 0x80)

345.983592ms ago: executing program 3 (id=5133):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
io_setup(0x5, &(0x7f0000000040)=<r1=>0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r2}, &(0x7f0000000800), &(0x7f0000000840)=r3}, 0x20)
io_submit(r1, 0x2, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffd, r0, 0x0}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
shutdown(r0, 0x0)

345.797372ms ago: executing program 6 (id=5134):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
listen(r1, 0x0)
r2 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r2, &(0x7f0000002300)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x3, {0x4e20, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x4)
sendmsg$tipc(r2, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0)
accept4(r1, 0x0, 0x0, 0x400000000000000)

345.638862ms ago: executing program 8 (id=5135):
r0 = socket(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x4, 0xb}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x1, 0x8}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)

283.722237ms ago: executing program 6 (id=5136):
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
write(r1, &(0x7f0000004200)='t', 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x10)
sendfile(r1, r0, 0x0, 0x3ffff)
sendfile(r1, r0, 0x0, 0x7ffff000)

283.378537ms ago: executing program 1 (id=5137):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff0000001100a200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c250000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pipe2$9p(&(0x7f0000001900)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r2}, 0x10)
r3 = dup(r1)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}})

213.834093ms ago: executing program 3 (id=5138):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0)

213.644683ms ago: executing program 8 (id=5139):
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x5f}, 0x18)
gettid()
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00'})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', <r3=>0x0})
sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fedbdf25080000001800028014000380100001800400030008000100050000000c00018008000100", @ANYRES32=r3], 0x38}, 0x1, 0x0, 0x0, 0x4000814}, 0x0)

157.823097ms ago: executing program 1 (id=5140):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x4}, 0x18)
r2 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x6)
symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r3, &(0x7f0000000540)='./file0\x00')
readlinkat(r3, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000780)=""/198, 0xc6)

157.146057ms ago: executing program 8 (id=5142):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r1}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r3}, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

114.453891ms ago: executing program 3 (id=5143):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x2)
capset(&(0x7f0000000ac0)={0x19980330}, &(0x7f0000000180)={0x0, 0x10000, 0xc898, 0x0, 0x0, 0x2})
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)

113.609861ms ago: executing program 1 (id=5153):
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x5f}, 0x18)
gettid()
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00'})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', <r3=>0x0})
sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fedbdf25080000001800028014000380100001800400030008000100050000000c00018008000100", @ANYRES32=r3], 0x38}, 0x1, 0x0, 0x0, 0x4000814}, 0x0)

31.876787ms ago: executing program 1 (id=5144):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r3=>0x0})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r3}, 0x94)

31.723957ms ago: executing program 8 (id=5145):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
mount$9p_unix(0x0, 0x0, 0x0, 0x291095, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
fallocate(0xffffffffffffffff, 0x3, 0x9100, 0x3)
fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100)
syz_emit_ethernet(0x0, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x0)

31.255107ms ago: executing program 1 (id=5146):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000020000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000010bc0)='kfree\x00', r1}, 0x18)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)

618.43µs ago: executing program 8 (id=5147):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13325790b55efbdc2dd99ed1c3c609a49cc151870a", 0xc6}, {&(0x7f00000002c0)="9c811ff500139d7d28a5f0de630ec6041ed353d314e58721edf306c382ac611fe34479cb9e2585745ff3c61da74b06eb64f69a4e90d706178176dc533f123b66d04d51fb740c1efdf8db3b99ed18fb67c1f75ef7d55b3bb185f5f38665ea5e09", 0x60}, {&(0x7f0000000380)="3f82090ccda4f8ce1b08afd200c6075794cdd2e0021e32a0f6267447162a208545", 0x21}], 0x3}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000001800)="353a35d6094e4ee7d764b6993f65136c5d6b84d9b1324a0b25e094700c9a66f9181738098f32e3e48859c3878d53a9752474da0d6af299d849d48f2fa2c8c807d7a1521da940585790ff1e6f9da83e32b751d1af9cfac640c1361f5ae8b99c187dafe9ea854120f6eaab11e7fdeb3f2152ebdbc21520ca01f64bb821576deef4ed6696cdddc1768b5b4fbd68a687cb6ba52ecf5cc6f8f05062f26de19d6aaaeb6cbca00e46685f77d2b3e8dd9d0d099e799cd5a76c67ab283f790366f7f744508edc9e48fa101b89215bd330c4e706c1f09d781a5a50aef5e424a7", 0xdb}], 0x1}}], 0x2, 0x0)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

0s ago: executing program 3 (id=5148):
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3)
fcntl$setsig(r1, 0xa, 0x12)
poll(&(0x7f0000b2c000)=[{r2}], 0x2c, 0xffffffffffbffff8)
dup2(r1, r2)
prlimit64(0x0, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0x0)
fcntl$setown(r1, 0x8, r0)
tkill(r0, 0x13)

kernel console output (not intermixed with test programs):

6] loop8: detected capacity change from 0 to 128
[  177.533109][T15216] ext4 filesystem being mounted at /341/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  177.558214][T15218] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3873'.
[  178.126775][T15252] loop3: detected capacity change from 0 to 512
[  178.140404][T15252] ext4 filesystem being mounted at /149/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  178.217119][T15259] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.252933][T15259] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.319189][T15259] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.336937][    C0] net_ratelimit: 6 callbacks suppressed
[  178.336954][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  178.395442][T15259] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.449307][  T139] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  178.471633][  T139] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  178.483628][  T139] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  178.508929][  T139] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  178.707336][   T29] kauditd_printk_skb: 457 callbacks suppressed
[  178.707350][   T29] audit: type=1400 audit(1755376061.418:7573): avc:  denied  { read } for  pid=15294 comm="syz.9.3908" path="socket:[50003]" dev="sockfs" ino=50003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  178.870363][  T139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  178.878668][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  178.997787][   T29] audit: type=1400 audit(1755376061.733:7574): avc:  denied  { map } for  pid=15323 comm="syz.0.3920" path="socket:[50813]" dev="sockfs" ino=50813 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[  179.060074][T15337] netlink: 'syz.0.3926': attribute type 7 has an invalid length.
[  179.067929][T15337] netlink: 'syz.0.3926': attribute type 8 has an invalid length.
[  179.145465][T15345] loop9: detected capacity change from 0 to 512
[  179.167549][T15345] ext4 filesystem being mounted at /351/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  179.269592][T15360] loop8: detected capacity change from 0 to 128
[  179.299992][T15360] ext4 filesystem being mounted at /347/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  179.317984][   T29] audit: type=1326 audit(1755376062.059:7575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15364 comm="syz.1.3936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631c2aebe9 code=0x7ffc0000
[  179.341676][   T29] audit: type=1326 audit(1755376062.059:7576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15364 comm="syz.1.3936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631c2aebe9 code=0x7ffc0000
[  179.365284][   T29] audit: type=1326 audit(1755376062.059:7577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15364 comm="syz.1.3936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f631c2aebe9 code=0x7ffc0000
[  179.388684][   T29] audit: type=1326 audit(1755376062.059:7578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15364 comm="syz.1.3936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631c2aebe9 code=0x7ffc0000
[  179.412174][   T29] audit: type=1326 audit(1755376062.059:7579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15364 comm="syz.1.3936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631c2aebe9 code=0x7ffc0000
[  179.435768][   T29] audit: type=1326 audit(1755376062.059:7580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15364 comm="syz.1.3936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f631c2aebe9 code=0x7ffc0000
[  179.459278][   T29] audit: type=1326 audit(1755376062.059:7581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15364 comm="syz.1.3936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631c2aebe9 code=0x7ffc0000
[  179.482782][   T29] audit: type=1326 audit(1755376062.059:7582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15364 comm="syz.1.3936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f631c2aebe9 code=0x7ffc0000
[  179.556606][T10980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  179.564820][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  179.585515][   T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  179.644480][T15376] loop9: detected capacity change from 0 to 1024
[  179.654703][T15376] EXT4-fs: Ignoring removed orlov option
[  179.660437][T15376] EXT4-fs: Ignoring removed nomblk_io_submit option
[  179.751332][T15353] Set syz1 is full, maxelem 65536 reached
[  179.771922][T15391] atomic_op ffff888102729128 conn xmit_atomic 0000000000000000
[  179.802448][T15393] loop9: detected capacity change from 0 to 1024
[  179.836916][T15393] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4183: comm syz.9.3946: Allocating blocks 449-513 which overlap fs metadata
[  179.859466][T15393] EXT4-fs (loop9): pa ffff888107272700: logic 48, phys. 177, len 21
[  179.867683][T15393] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4
[  180.261954][T15437] loop9: detected capacity change from 0 to 1024
[  180.281878][T15437] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem
[  180.290258][T15437] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  180.301305][T15437] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869)
[  180.311665][T15437] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  180.322366][T15437] EXT4-fs error (device loop9): ext4_get_journal_inode:5796: inode #17: comm syz.9.3963: iget: bad i_size value: 4398046511204
[  180.336882][T15437] EXT4-fs (loop9): no journal found
[  180.410857][T15446] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.454698][T15446] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.494533][T15455] netlink: 'syz.9.3970': attribute type 13 has an invalid length.
[  180.592725][T15471] __nla_validate_parse: 10 callbacks suppressed
[  180.592742][T15471] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3977'.
[  180.592799][T15455] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  180.611592][T15455] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  180.668131][T15446] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.679521][T10963] netdevsim netdevsim9 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  180.688122][T10963] netdevsim netdevsim9 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  180.708595][T10963] netdevsim netdevsim9 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  180.724539][T15446] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.750953][T10963] netdevsim netdevsim9 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  180.784691][T10980] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  180.813658][T10947] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  180.821952][T10947] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  180.840387][T10947] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  180.897398][T15493] loop1: detected capacity change from 0 to 128
[  180.916650][T15493] ext4 filesystem being mounted at /463/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  181.189369][T15512] netlink: 240 bytes leftover after parsing attributes in process `syz.1.3990'.
[  181.258887][T15486] Set syz1 is full, maxelem 65536 reached
[  181.317668][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  181.326178][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  181.624631][T15575] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4010'.
[  181.633658][T15575] netlink: 212 bytes leftover after parsing attributes in process `syz.3.4010'.
[  181.681104][T15585] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4012'.
[  181.800294][T15602] loop3: detected capacity change from 0 to 512
[  181.820907][T15602] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  181.834180][T15602] EXT4-fs (loop3): 1 orphan inode deleted
[  181.839927][T15602] EXT4-fs (loop3): 1 truncate cleaned up
[  181.849620][T15602] EXT4-fs error (device loop3): ext4_inlinedir_to_tree:1314: inode #12: block 7: comm syz.3.4014: path /183/file0/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0
[  181.871638][T15602] EXT4-fs (loop3): Remounting filesystem read-only
[  181.906994][T15610] lo speed is unknown, defaulting to 1000
[  181.915156][T15610] lo speed is unknown, defaulting to 1000
[  181.928626][T15610] lo speed is unknown, defaulting to 1000
[  181.939518][T15610] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  181.955628][T15610] lo speed is unknown, defaulting to 1000
[  181.976768][T15610] lo speed is unknown, defaulting to 1000
[  181.983060][T15610] lo speed is unknown, defaulting to 1000
[  181.989322][T15610] lo speed is unknown, defaulting to 1000
[  181.995455][T15610] lo speed is unknown, defaulting to 1000
[  182.001483][T15610] lo speed is unknown, defaulting to 1000
[  182.257220][T15655] loop0: detected capacity change from 0 to 512
[  182.280801][T15655] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  182.313462][T15655] EXT4-fs (loop0): 1 truncate cleaned up
[  182.598387][T15682] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.695159][T15682] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.729350][T15682] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.772846][T15682] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.478822][   T29] kauditd_printk_skb: 365 callbacks suppressed
[  183.478834][   T29] audit: type=1326 audit(1755376066.426:7948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15710 comm="syz.1.4038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f631c2a5ba7 code=0x7ffc0000
[  183.509374][   T29] audit: type=1326 audit(1755376066.458:7949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15710 comm="syz.1.4038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f631c24add9 code=0x7ffc0000
[  183.518950][T15821] syz_tun: entered allmulticast mode
[  183.532831][   T29] audit: type=1326 audit(1755376066.458:7950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15710 comm="syz.1.4038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f631c2a5ba7 code=0x7ffc0000
[  183.561425][   T29] audit: type=1326 audit(1755376066.458:7951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15710 comm="syz.1.4038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f631c24add9 code=0x7ffc0000
[  183.584903][   T29] audit: type=1326 audit(1755376066.468:7952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15710 comm="syz.1.4038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f631c2aebe9 code=0x7ffc0000
[  183.608457][   T29] audit: type=1326 audit(1755376066.521:7953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15710 comm="syz.1.4038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f631c2a5ba7 code=0x7ffc0000
[  183.632035][   T29] audit: type=1326 audit(1755376066.521:7954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15710 comm="syz.1.4038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f631c24add9 code=0x7ffc0000
[  183.656034][   T29] audit: type=1326 audit(1755376066.521:7955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15710 comm="syz.1.4038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f631c2aebe9 code=0x7ffc0000
[  183.679458][   T29] audit: type=1326 audit(1755376066.531:7956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15710 comm="syz.1.4038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f631c2a5ba7 code=0x7ffc0000
[  183.702835][   T29] audit: type=1326 audit(1755376066.531:7957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15710 comm="syz.1.4038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f631c24add9 code=0x7ffc0000
[  183.754424][T15825] loop1: detected capacity change from 0 to 1024
[  183.761313][T15825] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  183.761390][T15819] syz_tun: left allmulticast mode
[  183.769600][T15825] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  183.785468][T15825] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869)
[  183.795610][T15825] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  183.807339][T15825] EXT4-fs error (device loop1): ext4_get_journal_inode:5796: inode #17: comm syz.1.4047: iget: bad i_size value: 4398046511204
[  183.821630][T15825] EXT4-fs (loop1): no journal found
[  183.886660][T15834] vhci_hcd: default hub control req: 0310 v0009 i0003 l0
[  183.966179][T15843] veth3: entered promiscuous mode
[  183.978937][T15845] loop1: detected capacity change from 0 to 2048
[  183.991079][T15847] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4057'.
[  184.000113][T15847] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4057'.
[  184.009784][T15847] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4057'.
[  184.026158][T15847] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4057'.
[  184.035141][T15847] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4057'.
[  184.086623][T15857] loop0: detected capacity change from 0 to 1024
[  184.110639][T15857] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  184.168807][T15857] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: block 3: comm syz.0.4058: lblock 3 mapped to illegal pblock 3 (length 13)
[  184.189797][T15857] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117
[  184.202193][T15857] EXT4-fs (loop0): This should not happen!! Data will be lost
[  184.202193][T15857] 
[  184.219221][T15855] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  184.235248][T15857] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 3: comm syz.0.4058: lblock 3 mapped to illegal pblock 3 (length 1)
[  184.251039][T15855] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  184.263581][T15855] EXT4-fs (loop1): This should not happen!! Data will be lost
[  184.263581][T15855] 
[  184.273360][T15855] EXT4-fs (loop1): Total free blocks count 0
[  184.279338][T15855] EXT4-fs (loop1): Free/Dirty block details
[  184.284625][T15857] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 3: comm syz.0.4058: lblock 3 mapped to illegal pblock 3 (length 1)
[  184.285251][T15855] EXT4-fs (loop1): free_blocks=2415919104
[  184.304920][T15855] EXT4-fs (loop1): dirty_blocks=8208
[  184.310280][T15855] EXT4-fs (loop1): Block reservation details
[  184.316264][T15855] EXT4-fs (loop1): i_reserved_data_blocks=513
[  184.322572][T15857] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 3: comm syz.0.4058: lblock 3 mapped to illegal pblock 3 (length 1)
[  184.343787][T15857] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 3: comm syz.0.4058: lblock 3 mapped to illegal pblock 3 (length 1)
[  184.361672][T15857] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 3: comm syz.0.4058: lblock 3 mapped to illegal pblock 3 (length 1)
[  184.379225][T15857] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 3: comm syz.0.4058: lblock 3 mapped to illegal pblock 3 (length 1)
[  184.398162][T10974] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28
[  184.399036][T15870] vhci_hcd: default hub control req: 0310 v0009 i0003 l0
[  184.410917][T10974] EXT4-fs (loop1): This should not happen!! Data will be lost
[  184.410917][T10974] 
[  184.428933][T15857] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 3: comm syz.0.4058: lblock 3 mapped to illegal pblock 3 (length 1)
[  184.445253][T10964] net_ratelimit: 8 callbacks suppressed
[  184.445267][T10964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  184.453465][T15857] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 3: comm syz.0.4058: lblock 3 mapped to illegal pblock 3 (length 1)
[  184.459056][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  184.475800][T15857] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 3: comm syz.0.4058: lblock 3 mapped to illegal pblock 3 (length 1)
[  184.723529][T10964] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  184.727911][T15901] loop9: detected capacity change from 0 to 2048
[  184.741088][T10964] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  184.769453][T10964] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  184.778101][T10963] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  184.779988][T15905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  184.795821][T15905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  184.823269][T15905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  184.842265][T15905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  184.860111][T15905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  184.899354][T15909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  184.907683][T15909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  185.001883][T15909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  185.099999][T15911] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  185.130682][T15911] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  185.143284][T15911] EXT4-fs (loop9): This should not happen!! Data will be lost
[  185.143284][T15911] 
[  185.153000][T15911] EXT4-fs (loop9): Total free blocks count 0
[  185.159059][T15911] EXT4-fs (loop9): Free/Dirty block details
[  185.164978][T15911] EXT4-fs (loop9): free_blocks=2415919104
[  185.170796][T15911] EXT4-fs (loop9): dirty_blocks=8208
[  185.176119][T15911] EXT4-fs (loop9): Block reservation details
[  185.182109][T15911] EXT4-fs (loop9): i_reserved_data_blocks=513
[  185.219723][  T139] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28
[  185.232593][  T139] EXT4-fs (loop9): This should not happen!! Data will be lost
[  185.232593][  T139] 
[  185.439229][T15935] __nla_validate_parse: 4 callbacks suppressed
[  185.439246][T15935] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4085'.
[  185.454555][T15935] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4085'.
[  185.463680][T15935] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4085'.
[  185.484132][T15935] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4085'.
[  185.493281][T15935] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4085'.
[  185.503591][T15935] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4085'.
[  185.513775][T15937] loop8: detected capacity change from 0 to 1024
[  185.568328][T15937] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4183: comm syz.8.4087: Allocating blocks 449-513 which overlap fs metadata
[  185.581626][T15935] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4085'.
[  185.591328][T15935] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4085'.
[  185.601968][T15935] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4085'.
[  185.628191][T15934] EXT4-fs (loop8): pa ffff88810729dd90: logic 48, phys. 177, len 21
[  185.636256][T15934] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4
[  185.653064][T15953] loop0: detected capacity change from 0 to 1024
[  185.666700][T13324] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  185.674180][T13324] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  185.681601][T13324] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  185.689116][T13324] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  185.696604][T13324] hid-generic 0000:0000:0000.0010: unknown main item tag 0x2
[  185.704330][T13324] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  185.709109][T15953] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.4091: Allocating blocks 449-513 which overlap fs metadata
[  185.711731][T13324] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  185.732922][T13324] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  185.740333][T13324] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  185.747804][T13324] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  185.750096][T15953] EXT4-fs (loop0): pa ffff88810729de70: logic 48, phys. 177, len 21
[  185.756058][T13324] hid-generic 0000:0000:0000.0010: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  185.763348][T15953] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4
[  185.807925][T15962] loop8: detected capacity change from 0 to 512
[  185.823797][T15962] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  185.843723][T15962] EXT4-fs (loop8): 1 truncate cleaned up
[  185.875891][T15966] loop0: detected capacity change from 0 to 512
[  185.919836][T15970] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4098'.
[  185.939256][T15966] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  186.162531][T15992] netlink: 'syz.1.4106': attribute type 13 has an invalid length.
[  186.172305][T15998] loop8: detected capacity change from 0 to 2048
[  186.332061][T16002] 8021q: adding VLAN 0 to HW filter on device bond0
[  186.353233][T16002] 8021q: adding VLAN 0 to HW filter on device team0
[  186.484637][T16014] netlink: 'syz.1.4113': attribute type 2 has an invalid length.
[  186.716927][T16024] loop1: detected capacity change from 0 to 128
[  186.737759][T16024] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  186.762357][T16024] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  186.795883][T16008] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  186.832644][T16008] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  186.833364][T10963] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  186.845202][T16008] EXT4-fs (loop8): This should not happen!! Data will be lost
[  186.845202][T16008] 
[  186.863793][T16008] EXT4-fs (loop8): Total free blocks count 0
[  186.869774][T16008] EXT4-fs (loop8): Free/Dirty block details
[  186.875694][T16008] EXT4-fs (loop8): free_blocks=2415919104
[  186.881442][T16008] EXT4-fs (loop8): dirty_blocks=8208
[  186.886750][T16008] EXT4-fs (loop8): Block reservation details
[  186.892852][T16008] EXT4-fs (loop8): i_reserved_data_blocks=513
[  186.899982][T16035] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.929615][T16037] loop1: detected capacity change from 0 to 1024
[  186.967752][T16035] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.986585][T10963] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28
[  186.999426][T10963] EXT4-fs (loop8): This should not happen!! Data will be lost
[  186.999426][T10963] 
[  187.009462][T16037] ext4 filesystem being mounted at /488/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  187.045071][T16035] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  187.073349][T16044] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 3: comm syz.1.4123: lblock 3 mapped to illegal pblock 3 (length 13)
[  187.087890][T16044] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117
[  187.100361][T16044] EXT4-fs (loop1): This should not happen!! Data will be lost
[  187.100361][T16044] 
[  187.127979][T16035] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  187.143707][T16037] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 3: comm syz.1.4123: lblock 3 mapped to illegal pblock 3 (length 1)
[  187.167104][T16037] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 3: comm syz.1.4123: lblock 3 mapped to illegal pblock 3 (length 1)
[  187.192469][T10964] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  187.211801][T10964] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  187.221098][T16037] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 3: comm syz.1.4123: lblock 3 mapped to illegal pblock 3 (length 1)
[  187.237913][T16057] loop3: detected capacity change from 0 to 512
[  187.239223][T10964] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  187.253579][T16037] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 3: comm syz.1.4123: lblock 3 mapped to illegal pblock 3 (length 1)
[  187.267662][T10964] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  187.274009][T16057] EXT4-fs: Ignoring removed bh option
[  187.276624][T16037] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 3: comm syz.1.4123: lblock 3 mapped to illegal pblock 3 (length 1)
[  187.306264][T16057] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  187.315360][T16057] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  187.324444][T16037] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 3: comm syz.1.4123: lblock 3 mapped to illegal pblock 3 (length 1)
[  187.340263][T16057] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
[  187.354410][T16057] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006]
[  187.356249][T16037] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 3: comm syz.1.4123: lblock 3 mapped to illegal pblock 3 (length 1)
[  187.377559][T16037] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 3: comm syz.1.4123: lblock 3 mapped to illegal pblock 3 (length 1)
[  187.392048][T16037] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 3: comm syz.1.4123: lblock 3 mapped to illegal pblock 3 (length 1)
[  187.738259][T16102] syzkaller0: entered allmulticast mode
[  187.748283][T16102] syzkaller0: entered promiscuous mode
[  187.763338][T16102] syzkaller0 (unregistering): left allmulticast mode
[  187.770065][T16102] syzkaller0 (unregistering): left promiscuous mode
[  187.814455][T16112] netlink: 'syz.0.4153': attribute type 13 has an invalid length.
[  187.860664][T16112] bridge0: port 2(bridge_slave_1) entered disabled state
[  187.867973][T16112] bridge0: port 1(bridge_slave_0) entered disabled state
[  187.920095][T16112] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  187.930893][T16112] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  187.987975][T10963] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  188.003827][T10963] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  188.026145][T10963] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  188.035532][T10963] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  188.102096][T16123] loop1: detected capacity change from 0 to 512
[  188.110014][T16123] EXT4-fs: Ignoring removed mblk_io_submit option
[  188.120811][T16123] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  188.135940][T16127] loop3: detected capacity change from 0 to 512
[  188.142771][T16123] EXT4-fs (loop1): 1 truncate cleaned up
[  188.149335][T16123] EXT4-fs mount: 43 callbacks suppressed
[  188.149353][T16123] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  188.153793][T16127] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  188.167441][T16125] loop0: detected capacity change from 0 to 1024
[  188.178175][T16127] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[  188.190075][T16127] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.4158: corrupted in-inode xattr: e_value size too large
[  188.204538][T16127] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.4158: couldn't read orphan inode 15 (err -117)
[  188.205505][T16125] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  188.230157][T16127] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  188.331678][   T29] kauditd_printk_skb: 94 callbacks suppressed
[  188.331691][   T29] audit: type=1326 audit(1755376071.529:8052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16124 comm="syz.0.4157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7ff8635bebe9 code=0x7ffc0000
[  188.331834][T16127] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  188.382583][   T29] audit: type=1326 audit(1755376071.571:8053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16124 comm="syz.0.4157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8635bebe9 code=0x7ffc0000
[  188.384470][T16125] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.4157: Allocating blocks 449-513 which overlap fs metadata
[  188.406188][   T29] audit: type=1326 audit(1755376071.571:8054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16124 comm="syz.0.4157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8635bebe9 code=0x7ffc0000
[  188.443427][   T29] audit: type=1326 audit(1755376071.571:8055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16124 comm="syz.0.4157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7ff8635bebe9 code=0x7ffc0000
[  188.466922][   T29] audit: type=1326 audit(1755376071.571:8056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16124 comm="syz.0.4157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8635bebe9 code=0x7ffc0000
[  188.490537][   T29] audit: type=1326 audit(1755376071.571:8057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16124 comm="syz.0.4157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8635bebe9 code=0x7ffc0000
[  188.503920][T16124] EXT4-fs (loop0): pa ffff8881072725b0: logic 48, phys. 177, len 21
[  188.514467][   T29] audit: type=1326 audit(1755376071.571:8058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16124 comm="syz.0.4157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7ff8635bebe9 code=0x7ffc0000
[  188.545998][T16124] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4
[  188.546555][   T29] audit: type=1326 audit(1755376071.655:8059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16124 comm="syz.0.4157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8635bebe9 code=0x7ffc0000
[  188.579576][   T29] audit: type=1326 audit(1755376071.655:8060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16124 comm="syz.0.4157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8635bebe9 code=0x7ffc0000
[  188.694993][T16147] bridge0: port 2(bridge_slave_1) entered disabled state
[  188.705517][T14255] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  188.768314][T16158] loop8: detected capacity change from 0 to 128
[  188.786757][T16158] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  188.798915][T16158] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  188.828391][T10968] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  188.882702][T16163] loop0: detected capacity change from 0 to 1024
[  188.920463][T16163] EXT4-fs: Ignoring removed bh option
[  188.925944][T16163] EXT4-fs: inline encryption not supported
[  188.933713][T16166] lo speed is unknown, defaulting to 1000
[  188.939841][T16166] lo speed is unknown, defaulting to 1000
[  188.946580][T16163] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  188.959252][T16166] lo speed is unknown, defaulting to 1000
[  188.965804][T16166] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  188.979046][T16166] lo speed is unknown, defaulting to 1000
[  188.987793][T16163] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  188.990685][T16166] lo speed is unknown, defaulting to 1000
[  189.003941][T16163] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.4171: lblock 2 mapped to illegal pblock 2 (length 1)
[  189.004810][T16166] lo speed is unknown, defaulting to 1000
[  189.019180][T16163] Quota error (device loop0): qtree_write_dquot: dquota write failed
[  189.030405][T16166] lo speed is unknown, defaulting to 1000
[  189.032686][T16163] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.4171: lblock 0 mapped to illegal pblock 48 (length 1)
[  189.038042][T16166] lo speed is unknown, defaulting to 1000
[  189.058363][T16166] lo speed is unknown, defaulting to 1000
[  189.059063][ T9117] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  189.074501][T16163] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.4171: Failed to acquire dquot type 0
[  189.106875][T16163] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  189.116450][T16163] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.4171: mark_inode_dirty error
[  189.128405][T16163] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  189.138845][T16163] EXT4-fs (loop0): 1 orphan inode deleted
[  189.145043][T16163] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  189.157764][T10968] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:46: lblock 1 mapped to illegal pblock 1 (length 1)
[  189.180587][T10968] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:46: Failed to release dquot type 0
[  189.200626][T16163] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  189.210030][T16163] EXT4-fs error (device loop0): __ext4_get_inode_loc:4861: comm syz.0.4171: Invalid inode table block 1 in block_group 0
[  189.223718][T16163] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  189.231991][T16179] netlink: 'syz.3.4177': attribute type 13 has an invalid length.
[  189.238527][T16163] EXT4-fs error (device loop0): ext4_quota_off:7217: inode #3: comm syz.0.4171: mark_inode_dirty error
[  189.288637][T16179] bridge0: port 1(bridge_slave_0) entered disabled state
[  189.315091][T16188] loop0: detected capacity change from 0 to 512
[  189.322141][T16188] EXT4-fs: Ignoring removed bh option
[  189.328401][T16188] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  189.337758][T16188] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  189.361900][T16188] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended
[  189.371238][T16188] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006]
[  189.385678][T16188] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  189.428692][T14255] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  189.439287][T16197] netlink: 'syz.1.4185': attribute type 13 has an invalid length.
[  189.447221][T16197] netlink: 'syz.1.4185': attribute type 17 has an invalid length.
[  189.463003][T13324] lo speed is unknown, defaulting to 1000
[  189.468755][T13324] syz2: Port: 1 Link DOWN
[  189.501003][T16197] 8021q: adding VLAN 0 to HW filter on device bond0
[  189.509753][T16197] 8021q: adding VLAN 0 to HW filter on device team0
[  189.520103][T16197] net_ratelimit: 4 callbacks suppressed
[  189.520132][T16197] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  189.541602][T10963] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  189.561485][T10963] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  189.572859][T10963] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  189.581565][T10963] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  189.632388][T16207] loop1: detected capacity change from 0 to 512
[  189.651259][T16207] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  189.671546][T16207] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[  189.685359][T16207] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.4189: corrupted in-inode xattr: e_value size too large
[  189.733286][T16207] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.4189: couldn't read orphan inode 15 (err -117)
[  189.768002][T16207] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  189.792799][T16207] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  189.820920][T16222] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16222 comm=syz.9.4195
[  189.857414][T16226] ALSA: seq fatal error: cannot create timer (-22)
[  189.972761][T16231] loop3: detected capacity change from 0 to 8192
[  190.162366][T16239] usb usb1: usbfs: interface 0 claimed by hub while 'syz.9.4203' sets config #0
[  190.283708][T16257] netlink: 'syz.9.4210': attribute type 10 has an invalid length.
[  190.293570][T16257] team0: Port device dummy0 added
[  190.299934][T16257] netlink: 'syz.9.4210': attribute type 10 has an invalid length.
[  190.310730][T16257] team0: Port device dummy0 removed
[  190.318933][T16257] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  190.347645][T16264] loop9: detected capacity change from 0 to 512
[  190.355693][T16264] EXT4-fs (loop9): orphan cleanup on readonly fs
[  190.362544][T16264] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.4212: Failed to acquire dquot type 1
[  190.374316][T16264] EXT4-fs (loop9): 1 truncate cleaned up
[  190.380683][T16264] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  190.403917][T16264] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended
[  190.416253][T16264] EXT4-fs warning (device loop9): read_mmp_block:115: Error -117 while reading MMP block 8
[  190.439795][T16268] openvswitch: netlink: Message has 6 unknown bytes.
[  190.447370][T10482] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  190.583612][T16280] loop3: detected capacity change from 0 to 2048
[  190.608079][T16280] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  190.660280][T16287] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0
[  190.785417][T16283] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  190.989610][T16290] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  191.002192][T16290] EXT4-fs (loop3): This should not happen!! Data will be lost
[  191.002192][T16290] 
[  191.011862][T16290] EXT4-fs (loop3): Total free blocks count 0
[  191.017852][T16290] EXT4-fs (loop3): Free/Dirty block details
[  191.023769][T16290] EXT4-fs (loop3): free_blocks=2415919104
[  191.029545][T16290] EXT4-fs (loop3): dirty_blocks=8208
[  191.034836][T16290] EXT4-fs (loop3): Block reservation details
[  191.040958][T16290] EXT4-fs (loop3): i_reserved_data_blocks=513
[  191.155073][T10963] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28
[  191.186155][T16307] netlink: 'syz.8.4230': attribute type 13 has an invalid length.
[  191.259298][T16309] loop3: detected capacity change from 0 to 128
[  191.266453][T16309] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  191.279680][T16309] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  191.312744][  T139] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  191.511844][T16322] __nla_validate_parse: 10 callbacks suppressed
[  191.511859][T16322] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4236'.
[  191.527071][T16322] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4236'.
[  191.568183][T16323] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4236'.
[  191.577259][T16323] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4236'.
[  191.596200][T16325] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4237'.
[  191.608874][T16325] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4237'.
[  193.626238][T16337] netlink: 'syz.3.4243': attribute type 1 has an invalid length.
[  193.634246][T16338] netlink: 'syz.9.4244': attribute type 1 has an invalid length.
[  193.634454][T16333] loop0: detected capacity change from 0 to 2048
[  193.663039][T16338] bond1: entered promiscuous mode
[  193.668201][T16338] 8021q: adding VLAN 0 to HW filter on device bond1
[  193.685311][T16350] netlink: 3 bytes leftover after parsing attributes in process `syz.9.4244'.
[  193.695804][T16333] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  193.719370][T16337] bond2: (slave bridge1): making interface the new active one
[  193.729936][T16337] bond2: (slave bridge1): Enslaving as an active interface with an up link
[  193.740487][T16338] netlink: 3 bytes leftover after parsing attributes in process `syz.9.4244'.
[  193.752714][T16356] vlan2: entered allmulticast mode
[  193.781991][T16350] batadv1: entered promiscuous mode
[  193.787293][T16350] batadv1: entered allmulticast mode
[  193.826528][T16350] 8021q: adding VLAN 0 to HW filter on device batadv1
[  193.855080][T16350] bond1: (slave batadv1): making interface the new active one
[  193.870406][T16350] bond1: (slave batadv1): Enslaving as an active interface with an up link
[  193.882784][T16338] batadv2: entered promiscuous mode
[  193.888008][T16338] batadv2: entered allmulticast mode
[  193.909624][T16338] 8021q: adding VLAN 0 to HW filter on device batadv2
[  193.924695][T16338] bond1: (slave batadv2): Enslaving as an active interface with an up link
[  194.070025][T16362] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  194.132995][T16362] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  194.145537][T16362] EXT4-fs (loop0): This should not happen!! Data will be lost
[  194.145537][T16362] 
[  194.155293][T16362] EXT4-fs (loop0): Total free blocks count 0
[  194.161367][T16362] EXT4-fs (loop0): Free/Dirty block details
[  194.167301][T16362] EXT4-fs (loop0): free_blocks=2415919104
[  194.173015][T16362] EXT4-fs (loop0): dirty_blocks=8208
[  194.178360][T16362] EXT4-fs (loop0): Block reservation details
[  194.184340][T16362] EXT4-fs (loop0): i_reserved_data_blocks=513
[  194.283885][T10963] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28
[  194.318039][T16422] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=16422 comm=syz.9.4257
[  194.330755][T16422] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=16422 comm=syz.9.4257
[  194.536865][T16470] loop0: detected capacity change from 0 to 512
[  194.547131][T16470] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  194.557041][T16470] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities
[  194.580259][T16470] netlink: zone id is out of range
[  194.585474][T16470] netlink: zone id is out of range
[  194.590901][T16470] netlink: zone id is out of range
[  194.596104][T16470] netlink: zone id is out of range
[  194.601614][T16470] netlink: zone id is out of range
[  194.606918][T16470] netlink: zone id is out of range
[  194.612160][T16470] netlink: zone id is out of range
[  194.617443][T16470] netlink: zone id is out of range
[  194.622833][T16470] netlink: zone id is out of range
[  194.628272][T16470] netlink: zone id is out of range
[  194.639587][T16477] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4265'.
[  194.711224][T16481] loop9: detected capacity change from 0 to 8192
[  194.871878][   T29] kauditd_printk_skb: 154 callbacks suppressed
[  194.871895][   T29] audit: type=1326 audit(1755376078.395:8211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16492 comm="syz.0.4273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8635bebe9 code=0x7ffc0000
[  194.902196][   T29] audit: type=1326 audit(1755376078.395:8212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16492 comm="syz.0.4273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8635bebe9 code=0x7ffc0000
[  194.925728][   T29] audit: type=1326 audit(1755376078.395:8213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16492 comm="syz.0.4273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff8635bebe9 code=0x7ffc0000
[  194.949750][   T29] audit: type=1326 audit(1755376078.395:8214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16492 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8635bebe9 code=0x7ffc0000
[  194.972775][   T29] audit: type=1326 audit(1755376078.406:8215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16492 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff8635bebe9 code=0x7ffc0000
[  194.995740][   T29] audit: type=1326 audit(1755376078.406:8216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16492 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8635bebe9 code=0x7ffc0000
[  195.018774][   T29] audit: type=1326 audit(1755376078.406:8217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16492 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff8635bebe9 code=0x7ffc0000
[  195.065072][T16495] loop9: detected capacity change from 0 to 128
[  195.074995][T16495] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100)
[  195.082943][T16495] FAT-fs (loop9): Filesystem has been set read-only
[  195.089751][T16495] ’: attempt to access beyond end of device
[  195.089751][T16495] loop9: rw=524288, sector=2065, nr_sectors = 8 limit=128
[  195.103081][T16495] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100)
[  195.103237][   T29] audit: type=1326 audit(1755376078.448:8218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16492 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8635bebe9 code=0x7ffc0000
[  195.110979][T16495] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100)
[  195.133872][   T29] audit: type=1326 audit(1755376078.458:8219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16492 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8635bebe9 code=0x7ffc0000
[  195.164641][   T29] audit: type=1326 audit(1755376078.469:8220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16492 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff8635bebe9 code=0x7ffc0000
[  195.188913][T16498] syz.9.4272: attempt to access beyond end of device
[  195.188913][T16498] loop9: rw=0, sector=2065, nr_sectors = 1 limit=128
[  195.202159][T16498] Buffer I/O error on dev loop9, logical block 2065, async page read
[  195.210556][T16498] syz.9.4272: attempt to access beyond end of device
[  195.210556][T16498] loop9: rw=0, sector=2066, nr_sectors = 1 limit=128
[  195.223876][T16498] Buffer I/O error on dev loop9, logical block 2066, async page read
[  195.232060][T16498] syz.9.4272: attempt to access beyond end of device
[  195.232060][T16498] loop9: rw=0, sector=2067, nr_sectors = 1 limit=128
[  195.245378][T16498] Buffer I/O error on dev loop9, logical block 2067, async page read
[  195.260883][T16500] SELinux: failed to load policy
[  195.275833][T16498] syz.9.4272: attempt to access beyond end of device
[  195.275833][T16498] loop9: rw=0, sector=2068, nr_sectors = 1 limit=128
[  195.289123][T16498] Buffer I/O error on dev loop9, logical block 2068, async page read
[  195.297865][T16498] syz.9.4272: attempt to access beyond end of device
[  195.297865][T16498] loop9: rw=0, sector=2069, nr_sectors = 1 limit=128
[  195.311154][T16498] Buffer I/O error on dev loop9, logical block 2069, async page read
[  195.320772][T16498] syz.9.4272: attempt to access beyond end of device
[  195.320772][T16498] loop9: rw=0, sector=2070, nr_sectors = 1 limit=128
[  195.334192][T16498] Buffer I/O error on dev loop9, logical block 2070, async page read
[  195.345626][T16498] syz.9.4272: attempt to access beyond end of device
[  195.345626][T16498] loop9: rw=0, sector=2071, nr_sectors = 1 limit=128
[  195.358884][T16498] Buffer I/O error on dev loop9, logical block 2071, async page read
[  195.369017][T16498] syz.9.4272: attempt to access beyond end of device
[  195.369017][T16498] loop9: rw=0, sector=2072, nr_sectors = 1 limit=128
[  195.382325][T16498] Buffer I/O error on dev loop9, logical block 2072, async page read
[  195.391282][T16495] ’: attempt to access beyond end of device
[  195.391282][T16495] loop9: rw=0, sector=2065, nr_sectors = 1 limit=128
[  195.404019][T16495] Buffer I/O error on dev loop9, logical block 2065, async page read
[  195.415985][T16495] Buffer I/O error on dev loop9, logical block 2066, async page read
[  195.462624][T16506] ipvlan2: entered promiscuous mode
[  195.468612][T16506] bridge0: port 1(ipvlan2) entered blocking state
[  195.475105][T16506] bridge0: port 1(ipvlan2) entered disabled state
[  195.493535][T16506] ipvlan2: entered allmulticast mode
[  195.498950][T16506] bridge0: entered allmulticast mode
[  195.514522][T16506] ipvlan2: left allmulticast mode
[  195.519588][T16506] bridge0: left allmulticast mode
[  195.641719][T16518] loop8: detected capacity change from 0 to 128
[  195.649579][T16518] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  195.662310][T16518] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  195.842803][T16548] loop9: detected capacity change from 0 to 128
[  195.851506][T16548] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  195.864238][T16548] ext4 filesystem being mounted at /433/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  195.898373][T16548] EXT4-fs warning (device loop9): ext4_dirblock_csum_verify:375: inode #2: comm syz.9.4293: No space for directory leaf checksum. Please run e2fsck -D.
[  195.913702][T16548] EXT4-fs error (device loop9): htree_dirblock_to_tree:1051: inode #2: comm syz.9.4293: Directory block failed checksum
[  195.937796][T10482] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  196.022266][T16567] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4301'.
[  196.120214][T16572] sg_write: data in/out 220/14 bytes for SCSI command 0x0-- guessing data in;
[  196.120214][T16572]    program syz.8.4303 not setting count and/or reply_len properly
[  196.142685][T16574] loop1: detected capacity change from 0 to 1024
[  196.159562][T16574] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  196.213104][T16574] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.4304: Allocating blocks 449-513 which overlap fs metadata
[  196.239661][T16573] EXT4-fs (loop1): pa ffff88810729df50: logic 48, phys. 177, len 21
[  196.247694][T16573] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4
[  196.254936][T16588] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=16588 comm=syz.9.4310
[  196.278772][ T9117] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.438221][T16617] loop9: detected capacity change from 0 to 1024
[  196.482100][T16617] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  196.511564][T16617] netlink: 'syz.9.4324': attribute type 1 has an invalid length.
[  196.546053][T10482] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.565454][T16608] __nla_validate_parse: 1 callbacks suppressed
[  196.565470][T16608] netlink: 4104 bytes leftover after parsing attributes in process `syz.1.4320'.
[  196.614810][T16631] loop0: detected capacity change from 0 to 512
[  196.637804][T16631] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  196.651076][T16631] ext4 filesystem being mounted at /117/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  196.680168][T16631] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  196.729679][T14255] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.779831][T16649] pim6reg1: entered promiscuous mode
[  196.785319][T16649] pim6reg1: entered allmulticast mode
[  196.878448][T16659] netlink: 2 bytes leftover after parsing attributes in process `syz.8.4340'.
[  196.948147][T16672] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4346'.
[  196.957338][T16672] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4346'.
[  197.251711][T16709] loop1: detected capacity change from 0 to 1024
[  197.279589][T16709] EXT4-fs: Ignoring removed orlov option
[  197.298536][T16709] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  197.319582][T16711] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4364'.
[  197.546555][T16727] syzkaller0: entered promiscuous mode
[  197.552184][T16727] syzkaller0: entered allmulticast mode
[  197.598356][T16731] syzkaller1: entered promiscuous mode
[  197.603845][T16731] syzkaller1: entered allmulticast mode
[  197.636064][ T9117] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.726682][T16745] loop9: detected capacity change from 0 to 4096
[  197.742446][T16745] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  197.804206][T10482] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.917691][T16758] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  197.925834][T16758] tipc: Enabled bearer <udp:syz1>, priority 10
[  197.960555][T16762] loop1: detected capacity change from 0 to 512
[  197.967313][T16762] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  197.977102][T16762] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.4386: corrupted in-inode xattr: overlapping e_value 
[  197.991152][T16762] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.4386: couldn't read orphan inode 15 (err -117)
[  198.003302][T16762] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  198.154990][ T9117] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.271660][T16773] loop1: detected capacity change from 0 to 2048
[  198.301964][T16773] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  198.314222][T16775] loop3: detected capacity change from 0 to 8192
[  198.430291][ T9117] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.463406][T16780] loop1: detected capacity change from 0 to 1024
[  198.483450][T16780] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  198.508149][T16780] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt.
[  198.544037][ T9117] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.615965][T16794] loop8: detected capacity change from 0 to 128
[  198.670726][T16799] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4396'.
[  198.995866][ T3383] tipc: Node number set to 1007708866
[  199.015887][T16821] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4407'.
[  199.230492][T16836] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4414'.
[  199.253990][T16836] bond0 (unregistering): (slave macvlan2): Releasing backup interface
[  199.262752][T16836] bond0 (unregistering): Released all slaves
[  199.270970][T16840] bridge0: port 3(bond0) entered blocking state
[  199.277333][T16840] bridge0: port 3(bond0) entered disabled state
[  199.283832][T16840] bond0: entered allmulticast mode
[  199.289002][T16840] bond_slave_0: entered allmulticast mode
[  199.294768][T16840] bond_slave_1: entered allmulticast mode
[  199.302305][T16840] bond0: entered promiscuous mode
[  199.307343][T16840] bond_slave_0: entered promiscuous mode
[  199.313195][T16840] bond_slave_1: entered promiscuous mode
[  199.346677][T16847] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4419'.
[  199.356079][T16844] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4418'.
[  199.376007][T16844] team0 (unregistering): Port device team_slave_0 removed
[  199.385119][T16844] team0 (unregistering): Port device team_slave_1 removed
[  199.723321][T16878] lo speed is unknown, defaulting to 1000
[  199.730557][T16878] lo speed is unknown, defaulting to 1000
[  199.848109][   T29] kauditd_printk_skb: 138 callbacks suppressed
[  199.848124][   T29] audit: type=1400 audit(1755376083.624:8359): avc:  denied  { create } for  pid=16885 comm="syz.3.4437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  199.896375][   T29] audit: type=1400 audit(1755376083.656:8360): avc:  denied  { ioctl } for  pid=16885 comm="syz.3.4437" path="socket:[56978]" dev="sockfs" ino=56978 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  199.921997][T16888] loop3: detected capacity change from 0 to 164
[  199.931557][T16888] rock: directory entry would overflow storage
[  199.937726][T16888] rock: sig=0x4543, size=28, remaining=18
[  200.295376][   T29] audit: type=1326 audit(1755376084.086:8361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16910 comm="syz.1.4448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631c2aebe9 code=0x7ffc0000
[  200.318973][   T29] audit: type=1326 audit(1755376084.086:8362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16910 comm="syz.1.4448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f631c2aebe9 code=0x7ffc0000
[  200.342486][   T29] audit: type=1326 audit(1755376084.086:8363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16910 comm="syz.1.4448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631c2aebe9 code=0x7ffc0000
[  200.366016][   T29] audit: type=1326 audit(1755376084.086:8364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16910 comm="syz.1.4448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f631c2aebe9 code=0x7ffc0000
[  200.389600][   T29] audit: type=1326 audit(1755376084.086:8365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16910 comm="syz.1.4448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631c2aebe9 code=0x7ffc0000
[  200.440506][   T29] audit: type=1326 audit(1755376084.223:8366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16910 comm="syz.1.4448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f631c2aebe9 code=0x7ffc0000
[  200.464056][   T29] audit: type=1326 audit(1755376084.223:8367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16910 comm="syz.1.4448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631c2aebe9 code=0x7ffc0000
[  200.487612][   T29] audit: type=1326 audit(1755376084.223:8368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16910 comm="syz.1.4448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f631c2aebe9 code=0x7ffc0000
[  200.849841][T16951] loop8: detected capacity change from 0 to 512
[  200.869292][T16951] EXT4-fs: Ignoring removed bh option
[  200.883027][T16951] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  200.891616][T16951] EXT4-fs (loop8): fragment/cluster size (4096) != block size (2048)
[  201.001082][T16964] loop1: detected capacity change from 0 to 128
[  201.015081][T16964] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  201.080508][T16964] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  201.130589][T11017] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  201.188724][T16992] loop1: detected capacity change from 0 to 1024
[  201.195990][T16992] EXT4-fs: Ignoring removed bh option
[  201.201884][T16992] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  201.222285][T16992] EXT4-fs error (device loop1): ext4_quota_enable:7124: comm syz.1.4485: inode #2304: comm syz.1.4485: iget: illegal inode #
[  201.246303][T16992] EXT4-fs (loop1): Remounting filesystem read-only
[  201.252867][T16992] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix.
[  201.253062][T16994] loop0: detected capacity change from 0 to 512
[  201.278057][T16992] EXT4-fs (loop1): mount failed
[  201.291186][T16994] EXT4-fs: Ignoring removed bh option
[  201.303309][T16994] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  201.312428][T16994] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  201.337098][T16994] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended
[  201.343926][T17004] loop9: detected capacity change from 0 to 1024
[  201.353221][T17004] EXT4-fs: inline encryption not supported
[  201.360415][T16994] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006]
[  201.368697][T17004] EXT4-fs: Ignoring removed bh option
[  201.374729][T16994] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  201.409917][T17004] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  201.430450][T14255] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.459612][T10482] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.674205][T17028] lo speed is unknown, defaulting to 1000
[  201.690936][T17028] lo speed is unknown, defaulting to 1000
[  201.977923][T10980] nci: nci_ntf_packet: unknown ntf opcode 0x406
[  202.063728][T17056] pim6reg1: entered promiscuous mode
[  202.069157][T17056] pim6reg1: entered allmulticast mode
[  202.314568][T17078] net_ratelimit: 76 callbacks suppressed
[  202.314582][T17078] IPv4: Oversized IP packet from 127.202.26.0
[  202.415178][T17085] lo speed is unknown, defaulting to 1000
[  202.421146][T17085] lo speed is unknown, defaulting to 1000
[  202.669309][T17104] __nla_validate_parse: 4 callbacks suppressed
[  202.669325][T17104] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4531'.
[  202.686007][T17104] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4531'.
[  202.760889][T17112] loop1: detected capacity change from 0 to 512
[  202.771284][T17112] EXT4-fs (loop1): orphan cleanup on readonly fs
[  202.779834][T17112] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.4535: Failed to acquire dquot type 1
[  202.792342][T17116] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17116 comm=syz.8.4537
[  202.806584][T17112] EXT4-fs (loop1): 1 truncate cleaned up
[  202.816201][T17112] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  202.834071][T17112] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended
[  202.856523][T17112] EXT4-fs warning (device loop1): read_mmp_block:115: Error -117 while reading MMP block 8
[  202.906494][ T9117] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.983102][T17147] netlink: 'syz.0.4551': attribute type 10 has an invalid length.
[  202.996723][T17147] dummy0: entered promiscuous mode
[  203.023137][T17147] dummy0: entered allmulticast mode
[  203.032854][T17147] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  203.402546][T17202] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4576'.
[  203.455170][T10981] bond0 (unregistering): (slave ªªªªªª): Releasing backup interface
[  203.464153][T10981] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  203.473503][T10981] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  203.482641][T10981] bond0 (unregistering): Released all slaves
[  203.491946][T10981] bond1 (unregistering): (slave batadv1): Releasing active interface
[  203.501157][T10981] bond1 (unregistering): (slave batadv2): Releasing active interface
[  203.510203][T10981] bond1 (unregistering): Released all slaves
[  203.517565][T17200] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4575'.
[  203.547086][T17184] lo speed is unknown, defaulting to 1000
[  203.553142][T17184] lo speed is unknown, defaulting to 1000
[  203.594624][T10981] hsr_slave_0: left promiscuous mode
[  203.601557][T10981] hsr_slave_1: left promiscuous mode
[  203.607643][T10981] batman_adv: batadv0: Removing interface: batadv_slave_0
[  203.615505][T10981] batman_adv: batadv0: Removing interface: batadv_slave_1
[  203.625403][T17215] 9pnet_fd: Insufficient options for proto=fd
[  203.674858][T10981] team0 (unregistering): Port device team_slave_1 removed
[  203.688577][T10981] team0 (unregistering): Port device team_slave_0 removed
[  203.735517][ T3383] lo speed is unknown, defaulting to 1000
[  203.741391][ T3383] infiniband syz0: ib_query_port failed (-19)
[  203.823558][T17184] chnl_net:caif_netlink_parms(): no params data found
[  203.863159][T17231] loop0: detected capacity change from 0 to 128
[  203.913861][T17184] bridge0: port 1(bridge_slave_0) entered blocking state
[  203.921045][T17184] bridge0: port 1(bridge_slave_0) entered disabled state
[  203.933661][T17184] bridge_slave_0: entered allmulticast mode
[  203.940357][T17184] bridge_slave_0: entered promiscuous mode
[  203.946979][T17184] bridge0: port 2(bridge_slave_1) entered blocking state
[  203.954386][T17184] bridge0: port 2(bridge_slave_1) entered disabled state
[  203.961729][T17184] bridge_slave_1: entered allmulticast mode
[  203.968107][T17184] bridge_slave_1: entered promiscuous mode
[  203.975601][T17231] bio_check_eod: 5679 callbacks suppressed
[  203.975614][T17231] syz.0.4586: attempt to access beyond end of device
[  203.975614][T17231] loop0: rw=2049, sector=145, nr_sectors = 16 limit=128
[  203.995010][T17231] syz.0.4586: attempt to access beyond end of device
[  203.995010][T17231] loop0: rw=2049, sector=169, nr_sectors = 8 limit=128
[  204.013264][T17231] syz.0.4586: attempt to access beyond end of device
[  204.013264][T17231] loop0: rw=2049, sector=185, nr_sectors = 8 limit=128
[  204.027790][T17231] syz.0.4586: attempt to access beyond end of device
[  204.027790][T17231] loop0: rw=2049, sector=201, nr_sectors = 8 limit=128
[  204.043400][T17184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  204.054362][T17184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  204.061964][T17231] syz.0.4586: attempt to access beyond end of device
[  204.061964][T17231] loop0: rw=2049, sector=217, nr_sectors = 8 limit=128
[  204.077513][T17231] syz.0.4586: attempt to access beyond end of device
[  204.077513][T17231] loop0: rw=2049, sector=233, nr_sectors = 8 limit=128
[  204.091632][T17231] syz.0.4586: attempt to access beyond end of device
[  204.091632][T17231] loop0: rw=2049, sector=249, nr_sectors = 8 limit=128
[  204.093042][T17184] team0: Port device team_slave_0 added
[  204.105132][T17231] syz.0.4586: attempt to access beyond end of device
[  204.105132][T17231] loop0: rw=2049, sector=265, nr_sectors = 8 limit=128
[  204.125974][T17184] team0: Port device team_slave_1 added
[  204.136376][T17231] syz.0.4586: attempt to access beyond end of device
[  204.136376][T17231] loop0: rw=2049, sector=281, nr_sectors = 8 limit=128
[  204.150863][T17231] syz.0.4586: attempt to access beyond end of device
[  204.150863][T17231] loop0: rw=2049, sector=297, nr_sectors = 8 limit=128
[  204.175815][T17184] batman_adv: batadv0: Adding interface: batadv_slave_0
[  204.182794][T17184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  204.208930][T17184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  204.221072][T17184] batman_adv: batadv0: Adding interface: batadv_slave_1
[  204.228068][T17184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  204.254011][T17184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  204.290570][T17249] loop3: detected capacity change from 0 to 164
[  204.301471][T17249] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  204.303698][T17184] hsr_slave_0: entered promiscuous mode
[  204.310372][T17249] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  204.323814][T17184] hsr_slave_1: entered promiscuous mode
[  204.329928][T17184] debugfs: 'hsr0' already exists in 'hsr'
[  204.335658][T17184] Cannot create hsr debugfs directory
[  204.489595][T17271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4603'.
[  204.508969][T17274] sit0: entered allmulticast mode
[  204.592216][T17288] netlink: 'syz.3.4611': attribute type 9 has an invalid length.
[  204.600147][T17288] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4611'.
[  204.614480][T17294] loop0: detected capacity change from 0 to 1024
[  204.621322][T17294] EXT4-fs: Ignoring removed orlov option
[  204.624029][T17296] netlink: 'syz.3.4616': attribute type 39 has an invalid length.
[  204.630378][T17294] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  204.662046][T14255] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.669691][T17184] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  204.680392][T17184] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  204.689317][T17184] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  204.699211][T17301] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4617'.
[  204.720703][T17184] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  204.745642][   T29] kauditd_printk_skb: 266 callbacks suppressed
[  204.745655][   T29] audit: type=1326 audit(1755376088.758:8633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17303 comm="syz.8.4619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51d066ebe9 code=0x7ffc0000
[  204.775450][   T29] audit: type=1326 audit(1755376088.758:8634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17303 comm="syz.8.4619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51d066ebe9 code=0x7ffc0000
[  204.806254][   T29] audit: type=1326 audit(1755376088.821:8635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17303 comm="syz.8.4619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7f51d066ebe9 code=0x7ffc0000
[  204.829786][   T29] audit: type=1326 audit(1755376088.821:8636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17303 comm="syz.8.4619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51d066ebe9 code=0x7ffc0000
[  204.853364][   T29] audit: type=1326 audit(1755376088.821:8637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17303 comm="syz.8.4619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51d066ebe9 code=0x7ffc0000
[  204.929310][   T29] audit: type=1326 audit(1755376088.947:8638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17322 comm="syz.3.4624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29314cebe9 code=0x7ffc0000
[  204.938888][T17184] 8021q: adding VLAN 0 to HW filter on device bond0
[  204.952968][   T29] audit: type=1326 audit(1755376088.947:8639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17322 comm="syz.3.4624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f29314cebe9 code=0x7ffc0000
[  204.965073][T17184] 8021q: adding VLAN 0 to HW filter on device team0
[  204.983065][   T29] audit: type=1326 audit(1755376088.947:8640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17322 comm="syz.3.4624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29314cebe9 code=0x7ffc0000
[  205.003465][T17184] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  205.023704][T17184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  205.065417][T10980] bridge0: port 1(bridge_slave_0) entered blocking state
[  205.072495][T10980] bridge0: port 1(bridge_slave_0) entered forwarding state
[  205.081394][T10980] bridge0: port 2(bridge_slave_1) entered blocking state
[  205.088514][T10980] bridge0: port 2(bridge_slave_1) entered forwarding state
[  205.101386][   T29] audit: type=1326 audit(1755376089.136:8641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17337 comm="syz.8.4632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51d066ebe9 code=0x7ffc0000
[  205.125016][   T29] audit: type=1326 audit(1755376089.136:8642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17337 comm="syz.8.4632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51d066ebe9 code=0x7ffc0000
[  205.145382][T17184] 8021q: adding VLAN 0 to HW filter on device batadv0
[  205.161556][T17332] veth0: entered promiscuous mode
[  205.166975][T17332] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4629'.
[  205.184162][T17332] veth0 (unregistering): left promiscuous mode
[  205.208856][T17349] loop3: detected capacity change from 0 to 2048
[  205.231917][T17349] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  205.257917][T17349] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4634: bg 0: block 234: padding at end of block bitmap is not set
[  205.274926][T17349] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 117
[  205.287298][T17349] EXT4-fs (loop3): This should not happen!! Data will be lost
[  205.287298][T17349] 
[  205.322719][T13091] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.361932][T17184] veth0_vlan: entered promiscuous mode
[  205.371305][T17184] veth1_vlan: entered promiscuous mode
[  205.388427][T17184] veth0_macvtap: entered promiscuous mode
[  205.396557][T17184] veth1_macvtap: entered promiscuous mode
[  205.407407][T17184] batman_adv: batadv0: Interface activated: batadv_slave_0
[  205.419575][T17184] batman_adv: batadv0: Interface activated: batadv_slave_1
[  205.430805][ T2863] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  205.439901][ T2863] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  205.449535][ T2863] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  205.467393][T10980] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  205.497633][T17386] loop3: detected capacity change from 0 to 512
[  205.513805][T17386] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  205.523793][T17386] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities
[  205.562040][T17386] netlink: zone id is out of range
[  205.570042][T17393] loop1: detected capacity change from 0 to 512
[  205.574987][T17386] netlink: zone id is out of range
[  205.583822][T17393] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  205.591855][T17386] netlink: zone id is out of range
[  205.597394][T17386] netlink: zone id is out of range
[  205.607446][T17393] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  205.615445][T17386] netlink: zone id is out of range
[  205.630166][T17393] ext4 filesystem being mounted at /590/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  205.644668][T17393] netlink: 'syz.1.4639': attribute type 27 has an invalid length.
[  205.657182][T17393] sit0: left allmulticast mode
[  205.671761][T17386] netlink: zone id is out of range
[  205.677142][T17386] netlink: zone id is out of range
[  205.682388][T17386] netlink: zone id is out of range
[  205.687620][T17386] netlink: zone id is out of range
[  205.724993][T17393] macvlan2: left promiscuous mode
[  205.766800][T17401] 8021q: adding VLAN 0 to HW filter on device team0
[  205.799394][T17411] lo speed is unknown, defaulting to 1000
[  205.806078][T17415] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4649'.
[  205.815668][T17415] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4649'.
[  205.844397][ T9117] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.998360][T17441] loop6: detected capacity change from 0 to 512
[  206.020008][T17441] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  206.113170][T17184] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  206.144562][T17452] netlink: 'syz.8.4659': attribute type 1 has an invalid length.
[  206.184138][T17452] bond1: entered promiscuous mode
[  206.207048][T17452] 8021q: adding VLAN 0 to HW filter on device bond1
[  206.233711][T17460] batadv0: entered promiscuous mode
[  206.239026][T17460] batadv0: entered allmulticast mode
[  206.249845][T17460] 8021q: adding VLAN 0 to HW filter on device batadv0
[  206.264396][T17460] bond1: (slave batadv0): making interface the new active one
[  206.273044][T17460] bond1: (slave batadv0): Enslaving as an active interface with an up link
[  206.298141][T17452] batadv2: entered promiscuous mode
[  206.303465][T17452] batadv2: entered allmulticast mode
[  206.309371][T17452] 8021q: adding VLAN 0 to HW filter on device batadv2
[  206.317607][T17452] bond1: (slave batadv2): Enslaving as an active interface with an up link
[  206.992148][T17600] netlink: 'syz.1.4679': attribute type 1 has an invalid length.
[  207.010992][T17600] bond0: entered promiscuous mode
[  207.016457][T17600] 8021q: adding VLAN 0 to HW filter on device bond0
[  207.032605][T17600] batadv0: entered promiscuous mode
[  207.037850][T17600] batadv0: entered allmulticast mode
[  207.044153][T17600] 8021q: adding VLAN 0 to HW filter on device batadv0
[  207.052312][T17600] bond0: (slave batadv0): making interface the new active one
[  207.075107][T17600] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  207.085462][T17605] loop0: detected capacity change from 0 to 1024
[  207.102235][T17606] batadv1: entered promiscuous mode
[  207.107498][T17606] batadv1: entered allmulticast mode
[  207.113922][T17606] 8021q: adding VLAN 0 to HW filter on device batadv1
[  207.124059][T17605] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  207.137828][T17606] bond0: (slave batadv1): Enslaving as an active interface with an up link
[  207.185881][T17605] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.4670: Allocating blocks 449-513 which overlap fs metadata
[  207.241535][T17604] EXT4-fs (loop0): pa ffff88810729dee0: logic 48, phys. 177, len 21
[  207.249710][T17604] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4
[  207.278828][T17620] syz_tun: entered allmulticast mode
[  207.305155][T14255] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  207.309529][T17622] lo speed is unknown, defaulting to 1000
[  207.548339][T17640] loop3: detected capacity change from 0 to 8192
[  207.602623][T17653] loop1: detected capacity change from 0 to 1024
[  207.621606][T17653] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  207.657476][T17653] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #3: block 1: comm syz.1.4692: lblock 1 mapped to illegal pblock 1 (length 1)
[  207.691363][T17653] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.4692: Failed to acquire dquot type 0
[  207.721700][T17653] EXT4-fs error (device loop1): ext4_free_blocks:6696: comm syz.1.4692: Freeing blocks not in datazone - block = 0, count = 4096
[  207.727486][T17657] loop0: detected capacity change from 0 to 512
[  207.772712][T17653] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.4692: Invalid inode bitmap blk 0 in block_group 0
[  207.796684][T10981] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:56: lblock 1 mapped to illegal pblock 1 (length 1)
[  207.817449][T17653] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem
[  207.818542][T17657] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  207.841420][T10981] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:56: Failed to release dquot type 0
[  207.843713][T17657] ext4 filesystem being mounted at /190/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  207.853607][T17653] EXT4-fs (loop1): 1 orphan inode deleted
[  207.902775][T17653] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  207.927270][T17657] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.4694: corrupted inode contents
[  207.989281][T17657] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.4694: mark_inode_dirty error
[  208.013001][T17657] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.4694: corrupted inode contents
[  208.047399][T17657] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.4694: mark_inode_dirty error
[  208.076535][ T9117] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.098689][T17657] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.4694: corrupted inode contents
[  208.128255][T17657] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.4694: mark_inode_dirty error
[  208.153887][T17657] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.4694: corrupted inode contents
[  208.235677][T14255] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.305336][T17681] loop3: detected capacity change from 0 to 1024
[  208.362395][T17681] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  208.388537][T17688] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=17688 comm=syz.6.4705
[  208.457075][T17681] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.4703: Allocating blocks 449-513 which overlap fs metadata
[  208.463946][T17698] loop0: detected capacity change from 0 to 128
[  208.484573][T17698] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  208.497004][T17698] ext4 filesystem being mounted at /192/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  208.499600][T17680] EXT4-fs (loop3): pa ffff88810729dee0: logic 48, phys. 177, len 21
[  208.536921][T17680] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4
[  208.559522][T13091] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.570637][T17698] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:375: inode #2: comm syz.0.4708: No space for directory leaf checksum. Please run e2fsck -D.
[  208.586135][T17698] EXT4-fs error (device loop0): htree_dirblock_to_tree:1051: inode #2: comm syz.0.4708: Directory block failed checksum
[  208.625496][T17702] loop8: detected capacity change from 0 to 512
[  208.633196][T14255] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  208.667628][T17702] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  208.680784][T17707] loop3: detected capacity change from 0 to 128
[  208.700166][T17702] ext4 filesystem being mounted at /484/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  208.715531][T17707] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[  208.723413][T17707] FAT-fs (loop3): Filesystem has been set read-only
[  208.729853][T17705] loop6: detected capacity change from 0 to 8192
[  208.768646][T17707] bio_check_eod: 101 callbacks suppressed
[  208.768659][T17707] ’: attempt to access beyond end of device
[  208.768659][T17707] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128
[  208.851685][T17707] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[  208.859624][T17707] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[  208.868114][T17713] syz.3.4711: attempt to access beyond end of device
[  208.868114][T17713] loop3: rw=0, sector=2065, nr_sectors = 1 limit=128
[  208.881423][T17713] buffer_io_error: 5678 callbacks suppressed
[  208.881437][T17713] Buffer I/O error on dev loop3, logical block 2065, async page read
[  208.895961][T17702] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  208.904577][T17713] syz.3.4711: attempt to access beyond end of device
[  208.904577][T17713] loop3: rw=0, sector=2066, nr_sectors = 1 limit=128
[  208.917826][T17713] Buffer I/O error on dev loop3, logical block 2066, async page read
[  208.925968][T17713] syz.3.4711: attempt to access beyond end of device
[  208.925968][T17713] loop3: rw=0, sector=2067, nr_sectors = 1 limit=128
[  208.939211][T17713] Buffer I/O error on dev loop3, logical block 2067, async page read
[  208.974058][T17713] syz.3.4711: attempt to access beyond end of device
[  208.974058][T17713] loop3: rw=0, sector=2068, nr_sectors = 1 limit=128
[  208.987464][T17713] Buffer I/O error on dev loop3, logical block 2068, async page read
[  208.995896][T10188] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  209.026306][T17713] syz.3.4711: attempt to access beyond end of device
[  209.026306][T17713] loop3: rw=0, sector=2069, nr_sectors = 1 limit=128
[  209.039629][T17713] Buffer I/O error on dev loop3, logical block 2069, async page read
[  209.078628][T17713] syz.3.4711: attempt to access beyond end of device
[  209.078628][T17713] loop3: rw=0, sector=2070, nr_sectors = 1 limit=128
[  209.091897][T17713] Buffer I/O error on dev loop3, logical block 2070, async page read
[  209.101936][T17713] syz.3.4711: attempt to access beyond end of device
[  209.101936][T17713] loop3: rw=0, sector=2071, nr_sectors = 1 limit=128
[  209.115187][T17713] Buffer I/O error on dev loop3, logical block 2071, async page read
[  209.124908][T17713] syz.3.4711: attempt to access beyond end of device
[  209.124908][T17713] loop3: rw=0, sector=2072, nr_sectors = 1 limit=128
[  209.138176][T17713] Buffer I/O error on dev loop3, logical block 2072, async page read
[  209.149213][T17713] syz.3.4711: attempt to access beyond end of device
[  209.149213][T17713] loop3: rw=0, sector=2065, nr_sectors = 1 limit=128
[  209.162476][T17713] Buffer I/O error on dev loop3, logical block 2065, async page read
[  209.201985][T17713] Buffer I/O error on dev loop3, logical block 2066, async page read
[  209.212554][T17727] loop6: detected capacity change from 0 to 1024
[  209.268849][T17727] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  209.318467][T17734] loop1: detected capacity change from 0 to 1024
[  209.346453][T17727] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4183: comm syz.6.4720: Allocating blocks 449-513 which overlap fs metadata
[  209.373837][T17726] EXT4-fs (loop6): pa ffff888107272850: logic 48, phys. 177, len 21
[  209.381935][T17726] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4
[  209.407683][T17734] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  209.429665][T17741] loop0: detected capacity change from 0 to 128
[  209.481535][T17742] loop8: detected capacity change from 0 to 2048
[  209.510669][   T29] kauditd_printk_skb: 212 callbacks suppressed
[  209.510682][   T29] audit: type=1326 audit(1755376093.766:8852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17745 comm="syz.1.4726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f631c2aebe9 code=0x7ffc0000
[  209.566113][   T29] audit: type=1326 audit(1755376093.798:8853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17745 comm="syz.1.4726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f631c2a5ba7 code=0x7ffc0000
[  209.589711][   T29] audit: type=1326 audit(1755376093.798:8854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17745 comm="syz.1.4726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f631c24add9 code=0x7ffc0000
[  209.613097][   T29] audit: type=1326 audit(1755376093.798:8855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17745 comm="syz.1.4726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631c2aebe9 code=0x7ffc0000
[  209.636653][   T29] audit: type=1326 audit(1755376093.798:8856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17745 comm="syz.1.4726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631c2aebe9 code=0x7ffc0000
[  209.660177][   T29] audit: type=1326 audit(1755376093.798:8857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17745 comm="syz.1.4726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f631c2aebe9 code=0x7ffc0000
[  209.683693][   T29] audit: type=1326 audit(1755376093.798:8858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17745 comm="syz.1.4726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f631c2a5ba7 code=0x7ffc0000
[  209.707109][   T29] audit: type=1326 audit(1755376093.798:8859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17745 comm="syz.1.4726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f631c24add9 code=0x7ffc0000
[  209.730577][   T29] audit: type=1326 audit(1755376093.798:8860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17745 comm="syz.1.4726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f631c2aebe9 code=0x7ffc0000
[  209.754057][   T29] audit: type=1326 audit(1755376093.808:8861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17745 comm="syz.1.4726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f631c2a5ba7 code=0x7ffc0000
[  209.812856][T17760] pimreg: entered allmulticast mode
[  209.819960][T17760] pimreg: left allmulticast mode
[  210.076028][T17777] loop8: detected capacity change from 0 to 512
[  210.092999][T17777] ext4 filesystem being mounted at /491/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  210.108277][T17777] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #2: comm syz.8.4739: corrupted inode contents
[  210.121976][T17777] EXT4-fs error (device loop8): ext4_dirty_inode:6538: inode #2: comm syz.8.4739: mark_inode_dirty error
[  210.134487][T17777] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #2: comm syz.8.4739: corrupted inode contents
[  210.147852][T17777] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #2: comm syz.8.4739: mark_inode_dirty error
[  210.164430][T17777] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #2: comm syz.8.4739: corrupted inode contents
[  210.176341][T17777] EXT4-fs error (device loop8): ext4_dirty_inode:6538: inode #2: comm syz.8.4739: mark_inode_dirty error
[  210.189467][T17777] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #2: comm syz.8.4739: corrupted inode contents
[  210.222637][T17786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  210.231095][T17786] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  210.243411][T17786] loop8: detected capacity change from 0 to 1024
[  210.250182][T17786] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  210.259156][T17786] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  210.269846][T17786] EXT4-fs (loop8): revision level too high, forcing read-only mode
[  210.279588][T17786] EXT4-fs (loop8): orphan cleanup on readonly fs
[  210.286509][T17786] EXT4-fs error (device loop8): ext4_free_blocks:6696: comm syz.8.4742: Freeing blocks not in datazone - block = 0, count = 4096
[  210.305569][T17786] EXT4-fs (loop8): 1 orphan inode deleted
[  210.347620][T17794] loop3: detected capacity change from 0 to 2048
[  210.356719][T17795] loop1: detected capacity change from 0 to 4096
[  210.408985][T17800] pimreg: entered allmulticast mode
[  210.418771][T17800] pimreg: left allmulticast mode
[  210.517740][T17808] loop1: detected capacity change from 0 to 512
[  210.525656][T17808] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  210.536736][T17808] EXT4-fs (loop1): 1 truncate cleaned up
[  210.819413][T17818] loop8: detected capacity change from 0 to 1024
[  210.826976][T17821] loop1: detected capacity change from 0 to 512
[  210.846150][T17821] ext4 filesystem being mounted at /615/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  210.872655][T17821] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.4754: corrupted inode contents
[  210.890186][T17818] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4183: comm syz.8.4753: Allocating blocks 449-513 which overlap fs metadata
[  210.905939][T17821] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.4754: mark_inode_dirty error
[  210.917871][T17821] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.4754: corrupted inode contents
[  210.938123][T17817] EXT4-fs (loop8): pa ffff88810729df50: logic 48, phys. 177, len 21
[  210.946266][T17817] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4
[  210.964997][T17821] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.4754: mark_inode_dirty error
[  210.983603][T17821] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.4754: corrupted inode contents
[  211.011275][T17821] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.4754: mark_inode_dirty error
[  211.031386][T17821] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.4754: corrupted inode contents
[  211.400078][T17857] loop6: detected capacity change from 0 to 1024
[  211.408563][T17857] EXT4-fs: Ignoring removed orlov option
[  211.428538][T17858] loop8: detected capacity change from 0 to 8192
[  211.654267][T17868] loop3: detected capacity change from 0 to 4096
[  211.824448][T17885] __nla_validate_parse: 4 callbacks suppressed
[  211.824462][T17885] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4776'.
[  211.846251][T17881] loop0: detected capacity change from 0 to 512
[  211.853080][T17881] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  211.865225][T17881] EXT4-fs (loop0): 1 truncate cleaned up
[  211.897367][T17892] loop0: detected capacity change from 0 to 512
[  211.904947][T17892] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  211.913188][T17892] EXT4-fs (loop0): orphan cleanup on readonly fs
[  211.919937][T17892] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.4779: Failed to acquire dquot type 1
[  211.931917][T17892] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.4779: bg 0: block 40: padding at end of block bitmap is not set
[  211.947909][T17892] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  211.958940][T17892] EXT4-fs (loop0): 1 truncate cleaned up
[  212.012953][T17897] loop6: detected capacity change from 0 to 1024
[  212.062443][T17906] loop1: detected capacity change from 0 to 128
[  212.111542][T17897] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4183: comm syz.6.4784: Allocating blocks 449-513 which overlap fs metadata
[  212.150828][T17903] loop0: detected capacity change from 0 to 8192
[  212.184681][T17896] EXT4-fs (loop6): pa ffff888107272770: logic 48, phys. 177, len 21
[  212.192828][T17896] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4
[  212.302799][T17913] loop8: detected capacity change from 0 to 164
[  212.322593][T17915] bridge0: port 3(bond0) entered blocking state
[  212.328915][T17915] bridge0: port 3(bond0) entered disabled state
[  212.343628][T17913] rock: directory entry would overflow storage
[  212.349961][T17913] rock: sig=0x4543, size=28, remaining=18
[  212.355978][T17915] bond0: entered allmulticast mode
[  212.361207][T17915] bond_slave_0: entered allmulticast mode
[  212.367001][T17915] bond_slave_1: entered allmulticast mode
[  212.407641][T17915] bond0: entered promiscuous mode
[  212.412766][T17915] bond_slave_0: entered promiscuous mode
[  212.418539][T17915] bond_slave_1: entered promiscuous mode
[  212.442846][T17915] bridge0: port 3(bond0) entered blocking state
[  212.449196][T17915] bridge0: port 3(bond0) entered forwarding state
[  212.647615][T17933] loop8: detected capacity change from 0 to 1024
[  212.654978][T17933] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  212.667916][T17933] EXT4-fs error (device loop8): ext4_map_blocks:814: inode #3: block 1: comm syz.8.4798: lblock 1 mapped to illegal pblock 1 (length 1)
[  212.684532][T17933] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.4798: Failed to acquire dquot type 0
[  212.696403][T17933] EXT4-fs error (device loop8): ext4_free_blocks:6696: comm syz.8.4798: Freeing blocks not in datazone - block = 0, count = 4096
[  212.711460][T17933] EXT4-fs error (device loop8): ext4_read_inode_bitmap:139: comm syz.8.4798: Invalid inode bitmap blk 0 in block_group 0
[  212.725590][T10980] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:55: lblock 1 mapped to illegal pblock 1 (length 1)
[  212.741695][T17933] EXT4-fs error (device loop8) in ext4_free_inode:361: Corrupt filesystem
[  212.750345][T10980] EXT4-fs error (device loop8): ext4_release_dquot:6969: comm kworker/u8:55: Failed to release dquot type 0
[  212.763765][T17933] EXT4-fs (loop8): 1 orphan inode deleted
[  212.790892][T17942] ªªªªª: renamed from vlan1
[  212.825118][T17944] loop6: detected capacity change from 0 to 1024
[  212.857024][T17949] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4803'.
[  212.879391][T17951] loop8: detected capacity change from 0 to 2048
[  212.894307][T17944] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4183: comm syz.6.4801: Allocating blocks 449-513 which overlap fs metadata
[  212.947721][T17943] EXT4-fs (loop6): pa ffff888107272850: logic 48, phys. 177, len 21
[  212.955771][T17943] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4
[  213.029621][T17961] loop6: detected capacity change from 0 to 128
[  213.253952][T17970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4809'.
[  213.275013][T17971] netlink: 14 bytes leftover after parsing attributes in process `syz.6.4810'.
[  213.286377][T17971] bridge0: port 3(bond0) entered disabled state
[  213.298440][T17971] bond0 (unregistering): left allmulticast mode
[  213.304735][T17971] bond_slave_0: left allmulticast mode
[  213.310198][T17971] bond_slave_1: left allmulticast mode
[  213.315679][T17971] bond0 (unregistering): left promiscuous mode
[  213.321888][T17971] bond_slave_0: left promiscuous mode
[  213.327431][T17971] bond_slave_1: left promiscuous mode
[  213.332894][T17971] bridge0: port 3(bond0) entered disabled state
[  213.341016][T17971] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  213.351779][T17971] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  213.361729][T17971] bond0 (unregistering): Released all slaves
[  213.371608][T17973] bridge0: port 1(bond0) entered blocking state
[  213.377954][T17973] bridge0: port 1(bond0) entered disabled state
[  213.384441][T17973] bond0: entered allmulticast mode
[  213.389673][T17973] bond_slave_0: entered allmulticast mode
[  213.395538][T17973] bond_slave_1: entered allmulticast mode
[  213.416947][T17973] bond0: entered promiscuous mode
[  213.422067][T17973] bond_slave_0: entered promiscuous mode
[  213.427857][T17973] bond_slave_1: entered promiscuous mode
[  213.481151][T17986] bridge0: port 3(bond0) entered blocking state
[  213.487569][T17986] bridge0: port 3(bond0) entered disabled state
[  213.501723][T17986] bond0: entered allmulticast mode
[  213.506887][T17986] bond_slave_0: entered allmulticast mode
[  213.512787][T17986] bond_slave_1: entered allmulticast mode
[  213.533659][T17986] bond0: entered promiscuous mode
[  213.538716][T17986] bond_slave_0: entered promiscuous mode
[  213.544619][T17986] bond_slave_1: entered promiscuous mode
[  213.591241][T17997] loop6: detected capacity change from 0 to 2048
[  213.716251][T18011] loop1: detected capacity change from 0 to 512
[  213.736493][T18011] EXT4-fs: Ignoring removed bh option
[  213.755363][T18011] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  213.763847][T18011] EXT4-fs (loop1): fragment/cluster size (4096) != block size (2048)
[  213.866073][T18018] loop8: detected capacity change from 0 to 1024
[  213.879236][T18018] EXT4-fs: Ignoring removed bh option
[  213.894365][T18018] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  213.934099][T18018] EXT4-fs error (device loop8): ext4_quota_enable:7124: comm syz.8.4828: inode #2304: comm syz.8.4828: iget: illegal inode #
[  213.974697][T18018] EXT4-fs (loop8): Remounting filesystem read-only
[  213.981249][T18018] EXT4-fs warning (device loop8): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix.
[  214.041886][T18018] EXT4-fs (loop8): mount failed
[  214.071972][T18039] loop3: detected capacity change from 0 to 1024
[  214.080644][T18039] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  214.092510][T18039] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #3: block 1: comm syz.3.4838: lblock 1 mapped to illegal pblock 1 (length 1)
[  214.108085][T18039] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.4838: Failed to acquire dquot type 0
[  214.119849][T18039] EXT4-fs error (device loop3): ext4_free_blocks:6696: comm syz.3.4838: Freeing blocks not in datazone - block = 0, count = 4096
[  214.144317][T18039] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.4838: Invalid inode bitmap blk 0 in block_group 0
[  214.157268][T18039] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem
[  214.165935][T18039] EXT4-fs (loop3): 1 orphan inode deleted
[  214.172528][T10964] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:42: lblock 1 mapped to illegal pblock 1 (length 1)
[  214.190862][T10964] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:42: Failed to release dquot type 0
[  214.227521][T18046] loop6: detected capacity change from 0 to 512
[  214.253438][T18046] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  214.291450][T18046] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.4839: corrupted inode contents
[  214.308265][T18051] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4841'.
[  214.328968][T18046] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.4839: mark_inode_dirty error
[  214.352187][T18051] bond0 (unregistering): left allmulticast mode
[  214.358443][T18051] bond_slave_0: left allmulticast mode
[  214.363961][T18051] bond_slave_1: left allmulticast mode
[  214.369424][T18051] bond0 (unregistering): left promiscuous mode
[  214.375624][T18051] bond_slave_0: left promiscuous mode
[  214.381147][T18051] bond_slave_1: left promiscuous mode
[  214.386567][T18051] bridge0: port 3(bond0) entered disabled state
[  214.399942][T18046] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.4839: corrupted inode contents
[  214.413632][T18046] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #2: comm syz.6.4839: mark_inode_dirty error
[  214.428739][T18051] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  214.449585][T18046] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.4839: corrupted inode contents
[  214.462427][T18051] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  214.471383][T18046] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.4839: mark_inode_dirty error
[  214.492227][T18046] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.4839: corrupted inode contents
[  214.523346][T18051] bond0 (unregistering): Released all slaves
[  214.560682][T18061] loop6: detected capacity change from 0 to 128
[  214.903930][T18073] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4850'.
[  215.861863][T18098] loop8: detected capacity change from 0 to 128
[  215.868789][T18101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  215.884391][T18099] loop6: detected capacity change from 0 to 1024
[  215.891056][T18101] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  215.893050][T18102] veth0_to_team: entered promiscuous mode
[  215.958840][   T29] kauditd_printk_skb: 340 callbacks suppressed
[  215.958853][   T29] audit: type=1326 audit(1755376100.538:9194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18114 comm="syz.0.4866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8635bebe9 code=0x7ffc0000
[  215.990460][   T29] audit: type=1326 audit(1755376100.570:9195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18114 comm="syz.0.4866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8635bebe9 code=0x7ffc0000
[  216.014124][   T29] audit: type=1326 audit(1755376100.570:9196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18114 comm="syz.0.4866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff8635bebe9 code=0x7ffc0000
[  216.037763][   T29] audit: type=1326 audit(1755376100.570:9197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18114 comm="syz.0.4866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8635bebe9 code=0x7ffc0000
[  216.061321][   T29] audit: type=1326 audit(1755376100.570:9198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18114 comm="syz.0.4866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff8635bebe9 code=0x7ffc0000
[  216.084851][   T29] audit: type=1326 audit(1755376100.591:9199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18114 comm="syz.0.4866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8635bebe9 code=0x7ffc0000
[  216.108407][   T29] audit: type=1326 audit(1755376100.601:9200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18114 comm="syz.0.4866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8635bebe9 code=0x7ffc0000
[  216.132126][   T29] audit: type=1326 audit(1755376100.622:9201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18114 comm="syz.0.4866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7ff8635bebe9 code=0x7ffc0000
[  216.155723][   T29] audit: type=1326 audit(1755376100.622:9202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18114 comm="syz.0.4866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8635bebe9 code=0x7ffc0000
[  216.179341][   T29] audit: type=1326 audit(1755376100.622:9203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18114 comm="syz.0.4866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8635bebe9 code=0x7ffc0000
[  216.285366][T18140] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4876'.
[  216.296554][T18140] bond0 (unregistering): left allmulticast mode
[  216.302874][T18140] bond_slave_0: left allmulticast mode
[  216.308418][T18140] bond_slave_1: left allmulticast mode
[  216.313918][T18140] dummy0: left allmulticast mode
[  216.318901][T18140] bond0 (unregistering): left promiscuous mode
[  216.325167][T18140] bond_slave_0: left promiscuous mode
[  216.330621][T18140] bond_slave_1: left promiscuous mode
[  216.336078][T18140] dummy0: left promiscuous mode
[  216.341051][T18140] bridge0: port 3(bond0) entered disabled state
[  216.348346][T18140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  216.357546][T18140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  216.367182][T18140] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  216.376328][T18140] bond0 (unregistering): Released all slaves
[  216.450390][T18143] veth0_to_team: entered promiscuous mode
[  216.468392][T18149] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4880'.
[  216.502113][T18149] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4880'.
[  216.617281][T18170] netlink: 14 bytes leftover after parsing attributes in process `syz.8.4890'.
[  216.655765][T18170] bond0 (unregistering): left allmulticast mode
[  216.662096][T18170] bond_slave_0: left allmulticast mode
[  216.667698][T18170] bond_slave_1: left allmulticast mode
[  216.673200][T18170] bond0 (unregistering): left promiscuous mode
[  216.679353][T18170] bond_slave_0: left promiscuous mode
[  216.684776][T18170] bond_slave_1: left promiscuous mode
[  216.690330][T18170] bridge0: port 1(bond0) entered disabled state
[  216.698271][T18170] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  216.707752][T18170] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  216.716773][T18170] bond0 (unregistering): Released all slaves
[  217.004422][T18213] loop6: detected capacity change from 0 to 2048
[  217.021088][T18213] EXT4-fs mount: 42 callbacks suppressed
[  217.021103][T18213] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  217.168833][T18229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  217.177354][T18229] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  217.199813][T17184] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  217.718093][T18246] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18246 comm=syz.1.4922
[  217.766974][T18250] pim6reg1: entered promiscuous mode
[  217.772392][T18250] pim6reg1: entered allmulticast mode
[  217.980819][T18268] loop8: detected capacity change from 0 to 512
[  218.018936][T18268] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.4934: bg 0: block 248: padding at end of block bitmap is not set
[  218.064561][T18268] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.4934: Failed to acquire dquot type 1
[  218.088585][T18268] EXT4-fs (loop8): 1 truncate cleaned up
[  218.095037][T18268] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  218.107837][T18268] ext4 filesystem being mounted at /531/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  218.131043][T18267] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  218.743983][T18325] 9pnet_fd: Insufficient options for proto=fd
[  219.271380][T18364] netlink: 'syz.0.4974': attribute type 39 has an invalid length.
[  219.356576][T18371] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4978'.
[  219.942471][T18400] netlink: 'syz.3.4988': attribute type 39 has an invalid length.
[  219.953831][T18400] syz_tun (unregistering): left allmulticast mode
[  220.298034][T18431] netlink: 'syz.0.5013': attribute type 9 has an invalid length.
[  220.306101][T18431] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5013'.
[  220.338358][T18436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5004'.
[  220.735243][   T29] kauditd_printk_skb: 1037 callbacks suppressed
[  220.735257][   T29] audit: type=1326 audit(1755376105.546:10239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18441 comm="syz.6.5006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ab01debe9 code=0x7ffc0000
[  220.765197][   T29] audit: type=1326 audit(1755376105.546:10240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18441 comm="syz.6.5006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ab01debe9 code=0x7ffc0000
[  220.788993][   T29] audit: type=1326 audit(1755376105.546:10241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18441 comm="syz.6.5006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ab01debe9 code=0x7ffc0000
[  220.816745][   T29] audit: type=1326 audit(1755376105.546:10242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18441 comm="syz.6.5006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ab01debe9 code=0x7ffc0000
[  220.840541][   T29] audit: type=1326 audit(1755376105.546:10243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18441 comm="syz.6.5006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ab01debe9 code=0x7ffc0000
[  220.864191][   T29] audit: type=1326 audit(1755376105.546:10244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18441 comm="syz.6.5006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ab01debe9 code=0x7ffc0000
[  220.887822][   T29] audit: type=1326 audit(1755376105.546:10245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18441 comm="syz.6.5006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ab01debe9 code=0x7ffc0000
[  220.911476][   T29] audit: type=1326 audit(1755376105.546:10246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18441 comm="syz.6.5006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ab01debe9 code=0x7ffc0000
[  220.935098][   T29] audit: type=1326 audit(1755376105.546:10247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18441 comm="syz.6.5006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ab01debe9 code=0x7ffc0000
[  220.958665][   T29] audit: type=1326 audit(1755376105.546:10248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18441 comm="syz.6.5006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ab01debe9 code=0x7ffc0000
[  220.985359][T18448] loop6: detected capacity change from 0 to 164
[  220.993986][T18448] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  221.003753][T18448] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  221.079733][T18458] netlink: 'syz.1.5012': attribute type 39 has an invalid length.
[  222.041959][T18519] tipc: Started in network mode
[  222.046990][T18519] tipc: Node identity fe4cfd3cc03f, cluster identity 4711
[  222.054224][T18519] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  222.062262][T18519] tipc: Disabling bearer <eth:syzkaller0>
[  222.174388][T18532] syz_tun: entered allmulticast mode
[  222.510200][T18566] loop8: detected capacity change from 0 to 512
[  222.528347][T18566] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  222.576037][T18566] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  222.588696][T18566] ext4 filesystem being mounted at /558/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  222.607498][T18566] netlink: 'syz.8.5065': attribute type 27 has an invalid length.
[  222.626115][T18566] bond1: left promiscuous mode
[  222.631708][T18566] batadv0: left promiscuous mode
[  222.636689][T18566] batadv0: left allmulticast mode
[  222.642074][T18566] batadv2: left promiscuous mode
[  222.647051][T18566] batadv2: left allmulticast mode
[  222.665611][T18566] 8021q: adding VLAN 0 to HW filter on device team0
[  222.674598][T18566] net_ratelimit: 76 callbacks suppressed
[  222.674609][T18566] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  222.715047][T10188] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  223.216634][T18598] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5078'.
[  223.225962][T18598] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5078'.
[  223.809359][T18634] lo speed is unknown, defaulting to 1000
[  223.841036][T18663] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5113'.
[  223.852072][T18663] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5113'.
[  223.880161][T18634] chnl_net:caif_netlink_parms(): no params data found
[  223.911270][T18634] bridge0: port 1(bridge_slave_0) entered blocking state
[  223.918392][T18634] bridge0: port 1(bridge_slave_0) entered disabled state
[  223.925585][T18634] bridge_slave_0: entered allmulticast mode
[  223.932049][T18634] bridge_slave_0: entered promiscuous mode
[  223.938633][T18634] bridge0: port 2(bridge_slave_1) entered blocking state
[  223.945749][T18634] bridge0: port 2(bridge_slave_1) entered disabled state
[  223.952981][T18634] bridge_slave_1: entered allmulticast mode
[  223.959477][T18634] bridge_slave_1: entered promiscuous mode
[  223.976030][T18634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  223.986340][T18634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  224.004524][T18634] team0: Port device team_slave_0 added
[  224.011125][T18634] team0: Port device team_slave_1 added
[  224.047719][T18634] batman_adv: batadv0: Adding interface: batadv_slave_0
[  224.054916][T18634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  224.080855][T18634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  224.093933][T18634] batman_adv: batadv0: Adding interface: batadv_slave_1
[  224.100906][T18634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  224.126866][T18634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  224.141251][T18676] syzkaller0: entered promiscuous mode
[  224.164972][T18634] hsr_slave_0: entered promiscuous mode
[  224.171031][T18634] hsr_slave_1: entered promiscuous mode
[  224.176734][T18634] debugfs: 'hsr0' already exists in 'hsr'
[  224.182469][T18634] Cannot create hsr debugfs directory
[  224.381976][T18634] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  224.390457][T18634] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  224.398525][T18634] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  224.406807][T18634] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  224.420418][T18634] bridge0: port 2(bridge_slave_1) entered blocking state
[  224.427584][T18634] bridge0: port 2(bridge_slave_1) entered forwarding state
[  224.435107][T18634] bridge0: port 1(bridge_slave_0) entered blocking state
[  224.442151][T18634] bridge0: port 1(bridge_slave_0) entered forwarding state
[  224.466795][T18634] 8021q: adding VLAN 0 to HW filter on device bond0
[  224.477327][ T2863] bridge0: port 1(bridge_slave_0) entered disabled state
[  224.485035][ T2863] bridge0: port 2(bridge_slave_1) entered disabled state
[  224.496191][T18634] 8021q: adding VLAN 0 to HW filter on device team0
[  224.506122][T11017] bridge0: port 1(bridge_slave_0) entered blocking state
[  224.513258][T11017] bridge0: port 1(bridge_slave_0) entered forwarding state
[  224.523745][ T2863] bridge0: port 2(bridge_slave_1) entered blocking state
[  224.530805][ T2863] bridge0: port 2(bridge_slave_1) entered forwarding state
[  224.583680][T18634] 8021q: adding VLAN 0 to HW filter on device batadv0
[  224.657813][T18634] veth0_vlan: entered promiscuous mode
[  224.667061][T18634] veth1_vlan: entered promiscuous mode
[  224.682838][T18634] veth0_macvtap: entered promiscuous mode
[  224.690884][T18634] veth1_macvtap: entered promiscuous mode
[  224.703644][T18634] batman_adv: batadv0: Interface activated: batadv_slave_0
[  224.714763][T18634] batman_adv: batadv0: Interface activated: batadv_slave_1
[  224.726452][T10981] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  224.746082][T10981] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  224.771349][T10981] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  224.793454][T10981] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  225.139753][T18762] loop6: detected capacity change from 0 to 1024
[  225.164131][T18762] EXT4-fs: Ignoring removed orlov option
[  225.173570][T18762] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  225.480610][T18762] ==================================================================
[  225.488715][T18762] BUG: KCSAN: data-race in generic_buffers_fsync_noflush / writeback_single_inode
[  225.497924][T18762] 
[  225.500241][T18762] write to 0xffff8881073c0ea8 of 4 bytes by task 18769 on cpu 0:
[  225.507929][T18762]  writeback_single_inode+0x14a/0x3e0
[  225.513292][T18762]  sync_inode_metadata+0x5b/0x90
[  225.518232][T18762]  generic_buffers_fsync_noflush+0xd9/0x120
[  225.524132][T18762]  ext4_sync_file+0x1ab/0x690
[  225.528814][T18762]  vfs_fsync_range+0x10a/0x130
[  225.533582][T18762]  ext4_buffered_write_iter+0x34f/0x3c0
[  225.534301][   T29] kauditd_printk_skb: 904 callbacks suppressed
[  225.534313][   T29] audit: type=1400 audit(1755376110.586:11153): avc:  denied  { write } for  pid=3291 comm="syz-executor" path="pipe:[2497]" dev="pipefs" ino=2497 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[  225.539127][T18762]  ext4_file_write_iter+0x383/0xf00
[  225.573590][T18762]  iter_file_splice_write+0x669/0x9e0
[  225.578961][T18762]  direct_splice_actor+0x156/0x2a0
[  225.584060][T18762]  splice_direct_to_actor+0x312/0x680
[  225.589418][T18762]  do_splice_direct+0xda/0x150
[  225.594173][T18762]  do_sendfile+0x380/0x650
[  225.598589][T18762]  __x64_sys_sendfile64+0x105/0x150
[  225.603794][T18762]  x64_sys_call+0x2bb0/0x2ff0
[  225.608460][T18762]  do_syscall_64+0xd2/0x200
[  225.612963][T18762]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.618845][T18762] 
[  225.621150][T18762] read to 0xffff8881073c0ea8 of 4 bytes by task 18762 on cpu 1:
[  225.628760][T18762]  generic_buffers_fsync_noflush+0x80/0x120
[  225.634642][T18762]  ext4_sync_file+0x1ab/0x690
[  225.639312][T18762]  vfs_fsync_range+0x10a/0x130
[  225.644063][T18762]  ext4_buffered_write_iter+0x34f/0x3c0
[  225.649631][T18762]  ext4_file_write_iter+0x383/0xf00
[  225.654828][T18762]  iter_file_splice_write+0x669/0x9e0
[  225.660184][T18762]  direct_splice_actor+0x156/0x2a0
[  225.665279][T18762]  splice_direct_to_actor+0x312/0x680
[  225.670634][T18762]  do_splice_direct+0xda/0x150
[  225.675378][T18762]  do_sendfile+0x380/0x650
[  225.679793][T18762]  __x64_sys_sendfile64+0x105/0x150
[  225.684981][T18762]  x64_sys_call+0x2bb0/0x2ff0
[  225.689641][T18762]  do_syscall_64+0xd2/0x200
[  225.694130][T18762]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.700010][T18762] 
[  225.702310][T18762] value changed: 0x00000038 -> 0x00000002
[  225.708004][T18762] 
[  225.710306][T18762] Reported by Kernel Concurrency Sanitizer on:
[  225.716456][T18762] CPU: 1 UID: 0 PID: 18762 Comm: syz.6.5136 Tainted: G        W           6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(voluntary) 
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  225.730513][T18762] Tainted: [W]=WARN
[  225.734300][T18762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  225.744344][T18762] ==================================================================
[  225.941426][T18769] syz_tun (unregistering): left allmulticast mode
[  226.118748][T10981] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.145386][T18769] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  226.163513][T10981] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.229377][T10981] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.285976][T10981] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.342869][T10981] bridge_slave_1: left allmulticast mode
[  226.348534][T10981] bridge_slave_1: left promiscuous mode
[  226.354358][T10981] bridge0: port 2(bridge_slave_1) entered disabled state
[  226.362142][T10981] bridge_slave_0: left allmulticast mode
[  226.367765][T10981] bridge_slave_0: left promiscuous mode
[  226.373516][T10981] bridge0: port 1(bridge_slave_0) entered disabled state
[  226.477195][T10981] hsr_slave_0: left promiscuous mode
[  226.482857][T10981] hsr_slave_1: left promiscuous mode
[  226.488571][T10981] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  226.495979][T10981] batman_adv: batadv0: Removing interface: batadv_slave_0
[  226.503468][T10981] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  226.510831][T10981] batman_adv: batadv0: Removing interface: batadv_slave_1
[  226.520902][T10981] veth1_macvtap: left promiscuous mode
[  226.526428][T10981] veth0_macvtap: left promiscuous mode
[  226.531967][T10981] veth1_vlan: left promiscuous mode
[  226.537159][T10981] veth0_vlan: left promiscuous mode
[  226.593210][T10981] team0 (unregistering): Port device team_slave_1 removed
[  226.602785][T10981] team0 (unregistering): Port device team_slave_0 removed
[  227.552832][T10937] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  228.819041][T10937] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  228.868003][T10937] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  228.914560][T10937] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  228.980600][T10937] bridge_slave_1: left allmulticast mode
[  228.986270][T10937] bridge_slave_1: left promiscuous mode
[  228.991872][T10937] bridge0: port 2(bridge_slave_1) entered disabled state
[  228.999507][T10937] bridge_slave_0: left allmulticast mode
[  229.005144][T10937] bridge_slave_0: left promiscuous mode
[  229.010806][T10937] bridge0: port 1(bridge_slave_0) entered disabled state
[  229.095104][T10937] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  229.105170][T10937] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  229.114872][T10937] bond0 (unregistering): Released all slaves
[  229.173367][T10937] hsr_slave_0: left promiscuous mode
[  229.179128][T10937] hsr_slave_1: left promiscuous mode
[  229.184677][T10937] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  229.192144][T10937] batman_adv: batadv0: Removing interface: batadv_slave_0
[  229.199746][T10937] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  229.207104][T10937] batman_adv: batadv0: Removing interface: batadv_slave_1
[  229.216939][T10937] veth1_macvtap: left promiscuous mode
[  229.222403][T10937] veth0_macvtap: left promiscuous mode
[  229.227924][T10937] veth1_vlan: left promiscuous mode
[  229.233212][T10937] veth0_vlan: left promiscuous mode
[  229.288901][T10937] team0 (unregistering): Port device team_slave_1 removed
[  229.299538][T10937] team0 (unregistering): Port device team_slave_0 removed