last executing test programs:

3.875450988s ago: executing program 3 (id=193):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e000000000000000000180002801400038010"], 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000000)

3.824858593s ago: executing program 3 (id=194):
r0 = memfd_secret(0x0)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r1, 0x1, 0x0, 0x0, {0x41}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x8, 0x87}}]}, 0x4c}}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000000000))
sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000500)={0x10c, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x44004}, 0x80)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x101042, 0x1b6)
socket$packet(0x11, 0x3, 0x300)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x10, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x2)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18)
syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
readv(r4, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1)

2.735186641s ago: executing program 3 (id=214):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb8af}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000600)='kfree\x00', r0}, 0x18)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000380)={[{@max_batch_time={'max_batch_time', 0x3d, 0xe611}}, {@stripe={'stripe', 0x3d, 0x4}}, {@grpquota}]}, 0x1, 0x25b, &(0x7f0000000e80)="$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")
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000980)={0x0, 0x2904c, 0x5, 0x10003, '\x00', [{0x0, 0x0, 0x700, 0x7}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x40000000000000}], ['\x00', '\x00', '\x00', '\x00', '\x00']})

2.629314979s ago: executing program 2 (id=218):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000140), 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0)
sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x5, 0x901, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "d7c139a0d4fe372efa7e8cdba3417665ffb2b92af56c860b29402f8111302ae84c15b9dd43bda8847acbe40605b5ee1c8f0676814afc7e9f0413567e592c7c15"}}, 0x80}}, 0x0) (fail_nth: 1)

2.628799079s ago: executing program 4 (id=219):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000140), 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000200)='sys_enter\x00', r1}, 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0)
clock_gettime(0x0, &(0x7f0000000000)={<r2=>0x0, <r3=>0x0})
sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="0500000001e669008000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYRES64=r3/1000+10000, @ANYBLOB="00000000010000000000000000000000d7c139a0d4fe372efa7e8cdba3417665ffb2b92af56c860b29402f8111302ae84c15b9dd43bda8847acbe40605b5ee1c8f0676814afc7e9f0413567e592c7c15"], 0x80}}, 0x20080084)

2.569071124s ago: executing program 1 (id=220):
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[], 0x1, 0x1268, &(0x7f0000002500)="$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")
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x4)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{0xffffffffffffffff, <r4=>0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)='%pI4   \x00'}, 0x20)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000800), 0x2000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x2, 0x1, &(0x7f0000000000)=@raw=[@generic={0x4, 0x6, 0x5, 0x439, 0x9}], &(0x7f0000000080)='GPL\x00', 0x8001, 0x0, 0x0, 0x1e00, 0x34, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x2, 0x6, 0x7, 0x51f7f18c}, 0x10, 0xffffffffffffffff, r1, 0x3, &(0x7f0000000840)=[r2, r3, r4, r5], &(0x7f0000000880)=[{0x0, 0x3, 0xe, 0x9}, {0x3, 0x3, 0x0, 0xa}, {0x0, 0x3, 0x6, 0x8}], 0x10, 0xb3f7}, 0x94)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
syz_emit_ethernet(0x3b6, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0)
mkdirat(r6, &(0x7f0000000180)='./bus\x00', 0x0)
chdir(&(0x7f0000000540)='./file0\x00')
creat(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10)
renameat2(r6, &(0x7f0000000140)='./file0\x00', r6, &(0x7f0000000200)='./bus\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x8042, 0x0)

2.479726841s ago: executing program 4 (id=221):
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e7578"], 0x65)
fcntl$addseals(r0, 0x409, 0x0)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x8100, 0xc8, 0xffffffff, 0x0, 0x0, 0x341}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000f40)='neigh_create\x00', r2}, 0x18)
perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1a, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x13}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000000040000cd00000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0xa0bfcd5248097429, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r4}, 0x10)
close(0xffffffffffffffff)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000fffe80"], 0xfdef)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0xffffffffffffffae}, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfdef)
socket$kcm(0x29, 0x2, 0x0)

2.332753273s ago: executing program 4 (id=222):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/14], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[], 0x159c}}, 0x0)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r2, &(0x7f0000000540), 0x10)
sendmsg$can_bcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x2}, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r3}, &(0x7f00000008c0), &(0x7f0000000880)}, 0x20)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000001c0)='cdg\x00', 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000340)='dctcp\x00', 0x6)

2.308925845s ago: executing program 4 (id=223):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x4e21, 0xfef, @private1, 0x8}], 0x1c)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000080)=0x3, 0x4)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
pivot_root(&(0x7f0000000580)='./cgroup.cpu/cpuset.cpus\x00', 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="c0b58a7eaff2babd0802001b6400210000000000e9335e6ce1deb56f8c732c0f71607752b17ab429b20492518340f5ea384327fc8776b4affc9343d8ced36e8a7b65a940d8d9b256d66996084cd5", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00'}, 0x18)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYRES32=r3, @ANYRES32=0x0, @ANYRES32, @ANYRESHEX=r4], 0x15c}}, 0x20008080)
ioctl$SIOCSIFHWADDR(r4, 0x8947, 0x0)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
write$RDMA_USER_CM_CMD_ACCEPT(r6, &(0x7f0000000400)={0x8, 0x120, 0xfa00, {0x1, {0x5, 0x4, "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", 0xf8, 0x0, 0x78, 0x2, 0x5, 0x3, 0xa, 0x1}}}, 0x128)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)

2.226929531s ago: executing program 2 (id=224):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x2, 0xfffffe81, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000400000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000021eeb3c8e483fa1b110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94)
lremovexattr(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000180)=@known='trusted.overlay.upper\x00')
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000380)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$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")

2.226318371s ago: executing program 3 (id=225):
r0 = memfd_secret(0x0)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r1, 0x1, 0x0, 0x0, {0x41}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x8, 0x87}}]}, 0x4c}}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000000000))
sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000500)={0x10c, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x44004}, 0x80)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x101042, 0x1b6)
socket$packet(0x11, 0x3, 0x300)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x10, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000a5"], 0x48)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18)
syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
readv(r4, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1)

2.074092723s ago: executing program 1 (id=227):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102000028"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10)
r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0xc884}, 0x0, 0x0, r2, 0x0)
ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x5)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x1ff, 0xa)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
r5 = getgid()
setfsgid(r5)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
flock(r6, 0x2)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r8}, 0x10)
r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
mkdir(&(0x7f0000000140)='./control\x00', 0x5)
r10 = inotify_init1(0x800)
inotify_add_watch(r10, &(0x7f0000000180)='./control\x00', 0xa4000960)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r11, &(0x7f00000003c0)={0x20000002})
close_range(r9, 0xffffffffffffffff, 0x400000000000000)

2.062686674s ago: executing program 2 (id=228):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102000028"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10)
r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0xc884}, 0x0, 0x0, r2, 0x0)
ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x5)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x1ff, 0xa)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
r5 = getgid()
setfsgid(r5)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
flock(r6, 0x2)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r8}, 0x10)
r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
mkdir(&(0x7f0000000140)='./control\x00', 0x5)
r10 = inotify_init1(0x800)
inotify_add_watch(r10, &(0x7f0000000180)='./control\x00', 0xa4000960)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r11, &(0x7f00000003c0)={0x20000002})
close_range(r9, 0xffffffffffffffff, 0x400000000000000)

2.059465525s ago: executing program 0 (id=229):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmmsg$inet(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="db", 0x1}], 0x1}}], 0x1, 0x40040)
sendmmsg(r0, &(0x7f0000006580)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="ea", 0x1}], 0x1, &(0x7f00000003c0)=ANY=[], 0x10}, 0x4102}], 0x1, 0x4044044)

1.939466294s ago: executing program 0 (id=230):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x2, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="ec00000021000100feffffff000000000000000000000000000000000000000000000000007c0000000000000000000000000000000000001700a00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c00110000000000000000000000000000000000fe8000000000000000000000000000bbac1414210000000000000000000000002001000000000000000000000000000000000000000000000000020000000000000000000000000000000000fe8000000000000000000000000000bb"], 0xec}}, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10)
r3 = io_uring_setup(0x4d3f, &(0x7f0000000240)={0x0, 0xca6a, 0x40, 0x1, 0x6})
io_uring_register$IORING_REGISTER_RESTRICTIONS(r3, 0xb, &(0x7f00000008c0), 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r4}, 0x10)
r6 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x5a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x101, 0x7, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r7, 0xc0a85320, &(0x7f0000000c40)={{0x80, 0x1}, 'port0\x00', 0x0, 0x80462, 0x5, 0x6, 0x2, 0x40, 0x3, 0x0, 0x1, 0x5})
syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0xd, 0x2c0, &(0x7f0000001a80)="$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")
r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0)
r9 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x80881, 0x82)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r10}, 0x10)
write(r9, &(0x7f0000004200)='t', 0x1)
sendfile(r9, r8, 0x0, 0x3ffff)
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r7, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x60, 0x1b1878, 0x4, 0x2, 0x3e4, 0x0, 0x100004, 0x0, 0x6, 0x3})
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r5}, 0x8)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x16, &(0x7f00000003c0)=ANY=[@ANYBLOB="18b2b222d1c5da9c6a1f34aede69472e00f8cb3074a9ef87e5ac1dc8e300008500525c33203956fb370e0e27b826d22fe5f1de393e5c8aa6a8c2aeff5da2f6d2b32d07000000c0595d338470d3070eb6f22a2c6754b6265484e61200980396182c02197b7ac831db5453b7d088548a"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r11}, 0x10)
close(r7)
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000380)='cpu~=0||!')

1.734825891s ago: executing program 1 (id=231):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x4e21, 0xfef, @private1, 0x8}], 0x1c)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000080)=0x3, 0x4)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
pivot_root(&(0x7f0000000580)='./cgroup.cpu/cpuset.cpus\x00', 0x0)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="c0b58a7eaff2babd0802001b6400210000000000e9335e6ce1deb56f8c732c0f71607752b17ab429b20492518340f5ea384327fc8776b4affc9343d8ced36e8a7b65a940d8d9b256d66996084cd5", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00'}, 0x18)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYRES32=r3, @ANYRES32=0x0, @ANYRES32, @ANYRESHEX=r4], 0x15c}}, 0x20008080)
ioctl$SIOCSIFHWADDR(r4, 0x8947, 0x0)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
write$RDMA_USER_CM_CMD_ACCEPT(r6, &(0x7f0000000400)={0x8, 0x120, 0xfa00, {0x1, {0x5, 0x4, "be5f262fb5bc97b16447073cd65ae0f0dfe0f20cac883a7db3095ef1350c436bb4e1a0cab0c4491047b7e8c835844546e8db6d7de183e21a16f8c719585e8dacece9bb46659c97d10992ff415b628140d8fe650e45e5881b7f5d6835e0c4ff3563cfd40c7adfe13fc421200b07be41820cecc98ca35cc3b7273a4edbf8b6c0104e80274c73a34611d50483adf30a461340486b734ede09c8a6732fa966744ab5512df70003f00253c1f6cffa6497b0bfcb222bc3bc57ad08adbc98d2430c34384988d9ae6ac3d641bc3420b4fe71b9673077c95e1538f0298108b360cbb49d60313d5b12ab2af4c594b2877a6cf30527b61f3ce38067dcfbe61b4c83a35eb39c", 0xf8, 0x0, 0x78, 0x2, 0x5, 0x3, 0xa, 0x1}}}, 0x128)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)

1.703493693s ago: executing program 2 (id=232):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r0}, 0x10)
getgid()

1.506290599s ago: executing program 2 (id=233):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x7, 0x8, 0x33})
r2 = getpid()
r3 = syz_pidfd_open(r2, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'})
close_range(r3, 0xffffffffffffffff, 0x0)

1.50194296s ago: executing program 0 (id=234):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000080)=0x3, 0x4)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
pivot_root(&(0x7f0000000580)='./cgroup.cpu/cpuset.cpus\x00', 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="c0b58a7eaff2babd0802001b6400210000000000e9335e6ce1deb56f8c732c0f71607752b17ab429b20492518340f5ea384327fc8776b4affc9343d8ced36e8a7b65a940d8d9b256d66996084cd5", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00'}, 0x18)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYRES32=r4, @ANYRES32=0x0, @ANYRES32, @ANYRESHEX=r5], 0x15c}}, 0x20008080)
ioctl$SIOCSIFHWADDR(r5, 0x8947, 0x0)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1)
r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
openat(0xffffffffffffff9c, 0x0, 0x40, 0x0)
write$RDMA_USER_CM_CMD_ACCEPT(r7, &(0x7f0000000400)={0x8, 0x120, 0xfa00, {0x1, {0x5, 0x4, "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", 0xf8, 0x0, 0x78, 0x2, 0x5, 0x3, 0xa, 0x1}}}, 0x128)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)

1.321376044s ago: executing program 3 (id=235):
r0 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e24, 0x10, @loopback, 0x3}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xe}}, @in={0x2, 0x4e20, @multicast1}], 0x3c)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x9, &(0x7f0000000000)={[{@barrier}, {@jqfmt_vfsv0}, {@abort}, {}, {@noquota}, {@usrjquota, 0x2e}], [], 0x2e}, 0x6, 0x48d, &(0x7f0000000980)="$eJzs3EtvG1UbAOB3xnV6/5qv3wV6AQIFEXFJmrRAF2xAIHWDhARIZRnStCpNG9QEiVYVTREqS9RfACyR+AWsYIOAFYgtSGyQEFKFuqGwGjT2TOpcHGzHjil+HsntOTNnfM47M8c+MyfjAAbWSP5PErErIr4fithTzy4vMFL/79bNy9O/37w8nUSWvfRrUiv3283L02XRcrudRWY0jUjfTeLAGvXOX7x0dmp2duZCkR9fOPfG+PzFS4+fOTd1eub0zPnJY8eOHpl46snJJ7oS5+68rfvfnju47/ir11+YPnH9ta8+yZfvKtY3xlE33PJ7b2+yfCRGlu/LBg9F/JRlWct1/N3tbkgnW/rYENpSiYj8cFXz/h97ohK3D96eeP6dvjYO6Kksy7Ktq5ZWysRiBvyDJdF0VbqpDQE2WflFn1//lq9NHH703Y1n6hdAedy3ild9zZZIizLVFde33TQSEScW//ggf8Wa9yEAALrrs3z889ha4780/t9Q7l9Rnxsajoh/R8TeiPhPRPw3Iv4XUSt7V0Tc3Wb9Iyvyq8c/3zabXumKfPz3dDG3dXv8N1SLvzBcKXK7a/FXk1NnZmcOF/tkNKpb8/zEOnV8/tx37y9lti1f1zj+y195/eVYsC79ZcuKG3QnpxamuhB6zY2rS4GuGP8mSzMBSUTsi4j9Hbx/vs/OPPLxwWbr/zr+dXRhnin7KOLh+vFfjBXxl5L15yfHt8XszOHx8qxY7etvrr3YrP4Nxd8FN65G7Fh1/kdj/MNJ43ztfPt1XPvhvabXNJ2e/0PJy7X0ULHsramFhQsTEUPJ4urlk7e3LfNl+Tz+0UNrxZ/W3uPDYrsDEZGfxPdExL0RcV/R9vsj4oGIOLRO/F8+++DrncffW3n8J9s6/u0nKme/+LRZ/a0d/6O11GixpJXPv1YbuJF9BwAAAHeKtPY38Ek6tpRO07GxiFdq93Z3pLNz8wuPnpp78/zJ+t/KD0c1Le90pQ33QyeKe8NlfnJF/kjtvnGWZdn2Wn5sem62V3PqQGt2Nun/uZ8r/W4d0HNtzaM1e6INuCO11f9XPy0E3ME8rw2Dq9X+X+1xO4DN5/sfBtda/f9KxK0+NAXYZL7/YXDp/zC49H8YXPo/DKSNPNe/XmLv8Y43zzZUe/n7Kh1u/mNP9sZ6iUqnm29t42cOepCIdM1V1YjoS3vaSqS9qyI/+drbKj+QrRa+0umJ3XZi2cfEUD8+mwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALrhzwAAAP//dNfhIw==")
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0x11, &(0x7f0000000180)=0x2, 0x4)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000770000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x10)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
set_mempolicy(0x8004, 0x0, 0x5)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000001640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r4}, 0x10)
setpgid(0x0, 0x0)
getrlimit(0xc, &(0x7f00000000c0))
openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/kexec_crash_size', 0x68a82, 0x1a3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x0)
dup(0xffffffffffffffff)
msync(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0a00deff010001000800000008", @ANYRES8, @ANYBLOB="97542155d00a1c05bfd1678661084aea7bc4535be673fc27ed9010e82fe541988766a2133db6eeb2e67eb7bc84ed86c88fd5aa0e2237bd6b63315f26081cfcf445dad2107f7f71c795120a335477f9a79d515cb1f5f61df8c0b4625ec56406e8286778caf43f1c6b6124f6b26bf332463e1fbe554b9e06c8250c87484f19c776abccb8750fd0960e5be9990333be1f7abc51c0ccecc702de134f5b14b1375f535b9a2f73fe433749762d8485de400b519cc83d212cc67372d943866d76e08721abd59b5f1325f5bfc231a28faab93d9446"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af80200000000000000000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10)
connect$llc(r5, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10)
r8 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00')
pread64(r8, &(0x7f0000002240)=""/237, 0xfecf, 0x4eb)

988.392681ms ago: executing program 2 (id=236):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
r0 = socket$inet(0x2, 0x3, 0x1)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000940)='batadv_slave_1\x00', 0x10)
syz_emit_ethernet(0x0, 0x0, 0x0)
epoll_create1(0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x141000, 0x160)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff"], 0x58}}, 0x0)

567.071595ms ago: executing program 0 (id=237):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
creat(&(0x7f00000000c0)='./file0\x00', 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000220000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
pipe2$9p(&(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r4 = dup(r3)
write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94)
write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4])
creat(&(0x7f00000003c0)='./file0\x00', 0x36)

508.35288ms ago: executing program 0 (id=238):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000fff080"], 0x24}}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000040000000000000000000300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002105000d40930000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b80100001800c000100636f756e7465720010000180090001006c617374"], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0)

458.498174ms ago: executing program 4 (id=239):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000000000000000000000afc8481b580bf7", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x48)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e80)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001400)={{r2}, 0x0, &(0x7f00000013c0)}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
prlimit64(0x0, 0xe, 0x0, 0x0)
r4 = socket(0x2a, 0x2, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r6=>0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0)
ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000080)={'dummy0\x00'})
syslog(0x3, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00', <r8=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001e80)=@newlink={0x3c, 0x10, 0x1, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5, 0xf, 0x1}]}}}]}, 0x3c}}, 0x0)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
write$binfmt_script(r11, &(0x7f0000002100)={'#! ', './file0', [{0x20, '},'}, {0x20, 'geneve1\x00'}, {0x20, '\x00'}, {0x20, 'kmem_cache_free\x00'}, {0x20, 'vlan\x00'}], 0xa, "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"}, 0x1030)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'geneve1\x00', <r12=>0x0})
sendmsg$nl_route(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x6c, 0x10, 0x403, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x4, 0x0, 0x300, 0x8002}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x70, 0x8001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x8}}]}]}}}, @IFLA_LINK={0x8, 0x5, r12}]}, 0x6c}}, 0x0)
close(0x3)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r9, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$packet(0x11, 0x3, 0x300)

334.793564ms ago: executing program 0 (id=240):
unshare(0x24020400)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000004c0)=0x1000000, 0x4)
getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f00000002c0), &(0x7f0000000480)=0x30)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001040)={'tunl0\x00', &(0x7f0000001000)={'gre0\x00', <r4=>0x0, 0x0, 0xd810, 0x1, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @rand_addr=0x3}}}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000280)={'syztnl2\x00', r4, 0x40, 0x700, 0x9, 0x6, {{0x5, 0x4, 0x1, 0x37, 0x14, 0x65, 0x0, 0xea, 0x2f, 0x0, @empty, @empty}}}})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={r0, 0x0, 0x0}, 0x10)
socket$netlink(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x109a88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYRES32=r1], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000"], 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r7}, 0x10)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/devices.allow\x00', 0x101103, 0x30)
close(r8)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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")
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
ftruncate(r9, 0x2000009)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0)
pwritev2(r10, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0xf1, 0x563, 0x2f, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x7800, 0x7, 0x3ff}})

282.130438ms ago: executing program 3 (id=241):
r0 = creat(&(0x7f0000000080)='./file0\x00', 0xc7)
close(r0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20)
setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', <r3=>0x0})
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x8, r3}, 0x10)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x9c)
r6 = socket$netlink(0x10, 0x3, 0x14)
getsockopt$MRT6(r0, 0x29, 0x0, &(0x7f0000000340), &(0x7f0000000380)=0x4)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0)
r7 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_clone(0x48002000, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
ioctl$LOOP_SET_BLOCK_SIZE(r5, 0x4c09, 0x3)
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r5, 0x40089413, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000f80)=ANY=[@ANYRESDEC, @ANYBLOB="302b6eff52a55a9c3ff89c5391ed0178b7d6df01911c727d8c7a8d340a26ff2cb8921987aab69a1fb47fa5edf3bee3d2ca09657d8f2cc07be31fc642150b9ef2713becedbcc15cb8f783369416847ab9e77cd53f9026e0c77fe6f2fbff2b1a332c4344eb249088cd52895b0e1a309825e5cf51c5cbe8a460cbe94538496111b394f5dc09b64e9dbd25085e14659cd3203fd7c10cb02800b7360fd3d69ca5eabca7c397a554c715df475d5dd4820a47", @ANYRES16=r5, @ANYRES64=r5, @ANYRESOCT, @ANYRES16=r4, @ANYBLOB="0ffe05", @ANYRES8, @ANYBLOB="e8fa88e70da1b9c76cfaf3d80659ae68eb29563234049e665da79cebc620be16778776225013943b37faa22e2cf1c8182f9f145839b2c310bbb276b81cf5e8f79bbcdaca26dc11e2aac8f915fd6f248216e714865dc635d6f0f3b375b0dbba056bdf18a7f200de6a9e995dca5fa8beda1ef93e1a9b241640634e6a6687d44c4cb189bcdfa08b86714d70495d799a713d0b284c17e515c6f31fb7427d327feaf324", @ANYBLOB="8e992400028447ab6903d457b10100c104a0b14ac8f07d96cff44ef48944010165fbcfdd", @ANYBLOB="02000200", @ANYRES32=0xee00, @ANYRES8=r6, @ANYBLOB="7de0de6148d7d44c4d01eeff92df69b773e9c6727f8fbda7576c2a151378b664926695450adc68e745", @ANYRESDEC, @ANYRESOCT, @ANYBLOB='\b', @ANYRES32, @ANYBLOB="08000300", @ANYRES32=0xee00, @ANYBLOB="080004", @ANYRES16], 0x94, 0x1)
quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000400, 0x0, &(0x7f0000000040))
r8 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1)
r9 = getuid()
fchown(r8, r9, 0x0)
openat(r5, &(0x7f00000002c0)='./file0\x00', 0x44001, 0x89)
newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, <r10=>0x0}, 0x6000)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@uid_gt}, {@euid_lt={'euid<', r9}}, {@obj_user={'obj_user', 0x3d, '(%[}{'}}, {@seclabel}, {@dont_appraise}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@fowner_eq={'fowner', 0x3d, r10}}, {@seclabel}, {@euid_eq={'euid', 0x3d, r10}}, {@fowner_gt={'fowner>', r10}}]}})

141.918469ms ago: executing program 4 (id=242):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000008c0)=0x2, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', <r2=>0x0})
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x1082302, 0x0)
ioctl$TIOCGWINSZ(r3, 0x5413, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0x3, 0x6}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0)
syz_emit_ethernet(0x82, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb08"], 0x0)
r4 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="940000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c0002800500010000000000080007400000000020e814d6497699cde458addc78e052c34fb31abb4c782270b702c18f5ddeb7e240c2f34e014b76b82b28c9994b79162d6a442fea53259a0f880b227d04ba7128a044084711f1e692ba46524a7725a18ad95f10ac8674cc73ebdc9374532bc1"], 0x94}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1018ed8, &(0x7f00000002c0)={[{@sysvgroups}, {@noload}, {@data_err_ignore}, {}, {@grpid}, {@norecovery}, {@commit={'commit', 0x3d, 0x8000}}, {@quota}]}, 0x1, 0x644, &(0x7f00000006c0)="$eJzs3c9rHG0dAPDvzCZ5kzS+6SsiNigGPLQgTZNarHqxrQd7KFiwBxEPDU1SQ7c/SFKwtdAEPCgoiHgt0ov/gHfp3ZsI6s2zUEUqFrR0ZWZnm81mN7ttsrtJ5vOBzT7zzLN5nm9mn8wzM/vsBFBas9mPNOJUxNubScR007qpqK+cLcq9+teTW9kjiVrtu/9MIinyGuWT4vlEsTAeEX+8EvHpyu561x89vrNYrdU9jTi3cffBufVHj8+u3l28vXx7+d7C+a9duDj/9YULC00N/XAniuer177z+V/85IdfXflT9WwSl+LG6I+XoiWOgzIbs/G2CLE5fyQiLmaJNn+Xo+YYhFBqleL9OBoRn43pqORLddOx+vOhNg7oq1olora3pFsB4KjSvaGsGuOAxrF9b8fBN/o8Khmcl5frB0C74x8pTjmM58dGk6+SpiOj+rmNkwdQf1bHmyfjz948mXkWO85DvH63dUYOoJ5ONrci4nPt4k/ytp3MI83iT3cc6ycRMR8RY0X7vrWPNiRN6X6ch9lLj/FXsvibt0MaEZeK5yz/ygfW33paa9DxA1BOLy4XO/LNbGl7/5eNPRrjn9ge/zxtvG5q/5dkcsPe/3Ue/zX29+P5uCdtGYdlY5br7X/laGvG33529Ved6q+P/2aeNR5Z/Y2x4CC83IqYaYn/p1mwxfgniz9pM/7Nity81Fsd3/7zP652Wjfs+GvPI063Pf7ZHpVmqT2uT55bWa0uz9d/tq3j93/4wW871d8+/o/6EGl72faf7BB/0/ZPW1+X/U0etP+VW60Zv7v+/G6n+qe6bv/072NJ/XhzrMj50dbGxtpCxFhyrShS5C9ubKyd3zveepnXtfx5oR7/mS+17/873v8tUU00/mX24MH37rzqtO5D3v9NF5Pf1npsQydZ/Evdt/+u/p/l/bLHOv7z/Ydf6LSuffzJvmICAAAAAACAskrza7BJOvcunaZzc/X5sp+JybR6f33jyyv3H95bijiTfx5yNI00yT8yMl1fTlZWq8sLxedhG8vnW5a/EhGfRMSvKxP58tyt+9WlYQcPAAAAAAAAAAAAAAAAAAAAh8SJYv5/4z7V/67U5/8DJdH9BnO77v8AHBP9vMEkcLjl/X+vXfzHg2sLMFj2/1Be+j+Ul/4P5aX/Q3np/1Be+j+Ul/4P5aX/AwAAAMCx9MkXX/w1iYjNb0zkj8xYsc6kXzjeRt+rdKVv7QAGT4+G8np36d9gH0qnp/H/f4svB+x/c4AhSNpl5oOD2t6d/0XbV27b2n/bAAAAAAAAAAAAAIC606c6z/9/v7nBwFFj2h+U1z7m//vqADjifPU/lJdjfKDLLP4Y77Si2/x/AAAAAAAAAAAAAODATOWPJJ0r5gJPRZrOzUV8KiJOxmiyslpdno+IjyPiL5XRj7LlhWE3GgAAAAAAAAAAAAAAAAAAAI6Z9UeP7yxWq8trzYn/7co53onGXVC7F671UGbPxDfjPV8VyeD/LBMRMfSN0rfESFNOErGZbflD0bC19TgczcgTQ/7HBAAAAAAAAAAAAAAAAAAAJdQ097i9md8MuEUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMHjb9//vkliarL+gp8I7E8OOEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4mv4fAAD//6AzO/k=")
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x1809049, 0x0, 0xff, 0x0, 0x0)
syz_open_dev$evdev(&(0x7f0000000380), 0x7, 0x84000)
setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0)
lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v3, 0x18, 0x0)
lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)

115.851291ms ago: executing program 1 (id=243):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00')
writev(r0, 0x0, 0x0)
read$hiddev(r0, &(0x7f0000000640)=""/226, 0xe2)

6.25396ms ago: executing program 1 (id=244):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r0}, 0x10)
getgid()

0s ago: executing program 1 (id=245):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
semtimedop(0x0, &(0x7f0000000480)=[{0x4, 0xfff6}], 0x1, 0x0)
r1 = socket(0x6, 0x7fd, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
socket(0x10, 0x3, 0x0)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
recvmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/77, 0x4d}], 0x1}, 0x5}], 0x40000, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.164' (ED25519) to the list of known hosts.
[   34.178604][   T29] audit: type=1400 audit(1756013907.553:62): avc:  denied  { mounton } for  pid=3293 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   34.179815][ T3293] cgroup: Unknown subsys name 'net'
[   34.201445][   T29] audit: type=1400 audit(1756013907.563:63): avc:  denied  { mount } for  pid=3293 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   34.228852][   T29] audit: type=1400 audit(1756013907.583:64): avc:  denied  { unmount } for  pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   34.349967][ T3293] cgroup: Unknown subsys name 'cpuset'
[   34.356330][ T3293] cgroup: Unknown subsys name 'rlimit'
[   34.507796][   T29] audit: type=1400 audit(1756013907.883:65): avc:  denied  { setattr } for  pid=3293 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   34.531426][   T29] audit: type=1400 audit(1756013907.883:66): avc:  denied  { create } for  pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   34.551946][   T29] audit: type=1400 audit(1756013907.883:67): avc:  denied  { write } for  pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   34.552274][ T3296] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   34.572479][   T29] audit: type=1400 audit(1756013907.883:68): avc:  denied  { read } for  pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   34.601429][   T29] audit: type=1400 audit(1756013907.883:69): avc:  denied  { mounton } for  pid=3293 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   34.626428][   T29] audit: type=1400 audit(1756013907.883:70): avc:  denied  { mount } for  pid=3293 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   34.639369][ T3293] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   34.649744][   T29] audit: type=1400 audit(1756013907.963:71): avc:  denied  { relabelto } for  pid=3296 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   36.778337][ T3304] chnl_net:caif_netlink_parms(): no params data found
[   36.822423][ T3310] chnl_net:caif_netlink_parms(): no params data found
[   36.850675][ T3312] chnl_net:caif_netlink_parms(): no params data found
[   36.884663][ T3303] chnl_net:caif_netlink_parms(): no params data found
[   36.912515][ T3309] chnl_net:caif_netlink_parms(): no params data found
[   36.944606][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.951718][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.958920][ T3304] bridge_slave_0: entered allmulticast mode
[   36.965461][ T3304] bridge_slave_0: entered promiscuous mode
[   36.972253][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.979374][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.986572][ T3304] bridge_slave_1: entered allmulticast mode
[   36.993023][ T3304] bridge_slave_1: entered promiscuous mode
[   37.055909][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.063089][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state
[   37.070494][ T3310] bridge_slave_0: entered allmulticast mode
[   37.076899][ T3310] bridge_slave_0: entered promiscuous mode
[   37.084672][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   37.096213][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.103371][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state
[   37.110600][ T3303] bridge_slave_0: entered allmulticast mode
[   37.116989][ T3303] bridge_slave_0: entered promiscuous mode
[   37.123490][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.130586][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state
[   37.137740][ T3312] bridge_slave_0: entered allmulticast mode
[   37.144255][ T3312] bridge_slave_0: entered promiscuous mode
[   37.150944][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.158038][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state
[   37.165184][ T3310] bridge_slave_1: entered allmulticast mode
[   37.171657][ T3310] bridge_slave_1: entered promiscuous mode
[   37.183581][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   37.195415][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.202542][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state
[   37.209735][ T3303] bridge_slave_1: entered allmulticast mode
[   37.216173][ T3303] bridge_slave_1: entered promiscuous mode
[   37.227410][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.234491][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state
[   37.241849][ T3312] bridge_slave_1: entered allmulticast mode
[   37.248379][ T3312] bridge_slave_1: entered promiscuous mode
[   37.264869][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   37.299165][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   37.310358][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   37.320124][ T3304] team0: Port device team_slave_0 added
[   37.336573][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   37.345711][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.352864][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state
[   37.360226][ T3309] bridge_slave_0: entered allmulticast mode
[   37.366768][ T3309] bridge_slave_0: entered promiscuous mode
[   37.374192][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   37.389178][ T3304] team0: Port device team_slave_1 added
[   37.401598][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   37.410926][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.418102][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state
[   37.425242][ T3309] bridge_slave_1: entered allmulticast mode
[   37.431689][ T3309] bridge_slave_1: entered promiscuous mode
[   37.452857][ T3310] team0: Port device team_slave_0 added
[   37.468506][ T3312] team0: Port device team_slave_0 added
[   37.479965][ T3310] team0: Port device team_slave_1 added
[   37.486378][ T3303] team0: Port device team_slave_0 added
[   37.492972][ T3303] team0: Port device team_slave_1 added
[   37.504355][ T3312] team0: Port device team_slave_1 added
[   37.515723][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0
[   37.522998][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   37.548946][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   37.571241][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   37.585494][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1
[   37.592531][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   37.618573][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   37.639736][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0
[   37.646725][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   37.672736][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   37.684590][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   37.693957][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0
[   37.700967][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   37.726997][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   37.741385][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0
[   37.748342][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   37.774485][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   37.789345][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1
[   37.796348][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   37.822392][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   37.838034][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1
[   37.845098][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   37.871168][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   37.882790][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1
[   37.889768][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   37.915717][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   37.937049][ T3309] team0: Port device team_slave_0 added
[   37.944336][ T3309] team0: Port device team_slave_1 added
[   37.963113][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0
[   37.970118][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   37.996071][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   38.020607][ T3304] hsr_slave_0: entered promiscuous mode
[   38.026745][ T3304] hsr_slave_1: entered promiscuous mode
[   38.033222][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1
[   38.040207][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   38.066182][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   38.121880][ T3303] hsr_slave_0: entered promiscuous mode
[   38.127898][ T3303] hsr_slave_1: entered promiscuous mode
[   38.134052][ T3303] debugfs: 'hsr0' already exists in 'hsr'
[   38.139821][ T3303] Cannot create hsr debugfs directory
[   38.147227][ T3312] hsr_slave_0: entered promiscuous mode
[   38.153686][ T3312] hsr_slave_1: entered promiscuous mode
[   38.159659][ T3312] debugfs: 'hsr0' already exists in 'hsr'
[   38.165378][ T3312] Cannot create hsr debugfs directory
[   38.172959][ T3310] hsr_slave_0: entered promiscuous mode
[   38.178938][ T3310] hsr_slave_1: entered promiscuous mode
[   38.184819][ T3310] debugfs: 'hsr0' already exists in 'hsr'
[   38.190578][ T3310] Cannot create hsr debugfs directory
[   38.204728][ T3309] hsr_slave_0: entered promiscuous mode
[   38.211307][ T3309] hsr_slave_1: entered promiscuous mode
[   38.217097][ T3309] debugfs: 'hsr0' already exists in 'hsr'
[   38.222889][ T3309] Cannot create hsr debugfs directory
[   38.433341][ T3303] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   38.444463][ T3303] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   38.453427][ T3303] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   38.464663][ T3303] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   38.485104][ T3309] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   38.495544][ T3309] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   38.504237][ T3309] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   38.513111][ T3309] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   38.545513][ T3312] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   38.554420][ T3312] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   38.566643][ T3312] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   38.575405][ T3312] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   38.625282][ T3304] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   38.638883][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0
[   38.649491][ T3304] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   38.659153][ T3304] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   38.672518][ T3304] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   38.705101][ T3310] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   38.715077][ T3303] 8021q: adding VLAN 0 to HW filter on device team0
[   38.722921][ T3310] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   38.732451][ T3310] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   38.741376][ T3310] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   38.754248][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0
[   38.771782][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.778854][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.803102][  T135] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.810278][  T135] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.822217][ T3309] 8021q: adding VLAN 0 to HW filter on device team0
[   38.834097][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0
[   38.850430][  T135] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.857495][  T135] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.882986][  T135] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.890140][  T135] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.903876][ T3312] 8021q: adding VLAN 0 to HW filter on device team0
[   38.925009][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0
[   38.952895][ T1383] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.960061][ T1383] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.969002][ T1383] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.976202][ T1383] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.996330][ T3310] 8021q: adding VLAN 0 to HW filter on device team0
[   39.018721][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0
[   39.030200][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.037278][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[   39.052543][ T3304] 8021q: adding VLAN 0 to HW filter on device team0
[   39.070218][ T2647] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.077320][ T2647] bridge0: port 2(bridge_slave_1) entered forwarding state
[   39.120652][ T1383] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.127743][ T1383] bridge0: port 1(bridge_slave_0) entered forwarding state
[   39.136411][ T1383] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.143502][ T1383] bridge0: port 2(bridge_slave_1) entered forwarding state
[   39.165599][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0
[   39.174947][ T3310] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   39.185435][ T3310] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   39.222382][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0
[   39.252534][ T3304] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   39.262937][ T3304] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   39.289237][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0
[   39.324935][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0
[   39.383083][ T3303] veth0_vlan: entered promiscuous mode
[   39.421810][ T3303] veth1_vlan: entered promiscuous mode
[   39.430843][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0
[   39.465484][ T3309] veth0_vlan: entered promiscuous mode
[   39.483471][ T3303] veth0_macvtap: entered promiscuous mode
[   39.505079][ T3303] veth1_macvtap: entered promiscuous mode
[   39.517773][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.531340][ T3310] veth0_vlan: entered promiscuous mode
[   39.549042][ T3310] veth1_vlan: entered promiscuous mode
[   39.556072][ T3309] veth1_vlan: entered promiscuous mode
[   39.571313][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.604142][ T3310] veth0_macvtap: entered promiscuous mode
[   39.611096][   T51] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.625811][   T51] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.640417][ T3310] veth1_macvtap: entered promiscuous mode
[   39.646850][ T3304] veth0_vlan: entered promiscuous mode
[   39.657284][   T51] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.674672][ T3304] veth1_vlan: entered promiscuous mode
[   39.681350][   T51] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.692492][ T3309] veth0_macvtap: entered promiscuous mode
[   39.699714][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.715537][ T3309] veth1_macvtap: entered promiscuous mode
[   39.723589][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.736526][   T29] kauditd_printk_skb: 9 callbacks suppressed
[   39.736582][   T29] audit: type=1400 audit(1756013913.113:81): avc:  denied  { mounton } for  pid=3303 comm="syz-executor" path="/root/syzkaller.hVghl4/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[   39.742454][ T3304] veth0_macvtap: entered promiscuous mode
[   39.742648][   T29] audit: type=1400 audit(1756013913.113:82): avc:  denied  { mount } for  pid=3303 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   39.771388][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.772545][   T29] audit: type=1400 audit(1756013913.113:83): avc:  denied  { mounton } for  pid=3303 comm="syz-executor" path="/root/syzkaller.hVghl4/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   39.797294][ T3312] veth0_vlan: entered promiscuous mode
[   39.801713][   T29] audit: type=1400 audit(1756013913.113:84): avc:  denied  { mount } for  pid=3303 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   39.854142][   T29] audit: type=1400 audit(1756013913.113:85): avc:  denied  { mounton } for  pid=3303 comm="syz-executor" path="/root/syzkaller.hVghl4/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   39.880784][   T29] audit: type=1400 audit(1756013913.113:86): avc:  denied  { mounton } for  pid=3303 comm="syz-executor" path="/root/syzkaller.hVghl4/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4679 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[   39.908287][   T29] audit: type=1400 audit(1756013913.113:87): avc:  denied  { unmount } for  pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   39.930450][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.941201][   T37] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.950266][ T3304] veth1_macvtap: entered promiscuous mode
[   39.959503][   T29] audit: type=1400 audit(1756013913.333:88): avc:  denied  { mounton } for  pid=3303 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[   39.960963][   T37] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.982495][   T29] audit: type=1400 audit(1756013913.343:89): avc:  denied  { mount } for  pid=3303 comm="syz-executor" name="/" dev="gadgetfs" ino=4680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[   40.003412][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0
[   40.028207][ T3312] veth1_vlan: entered promiscuous mode
[   40.037168][ T3303] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   40.040230][   T37] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   40.064568][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1
[   40.075911][   T37] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   40.084978][   T37] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   40.108854][   T29] audit: type=1400 audit(1756013913.473:90): avc:  denied  { read write } for  pid=3303 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   40.160284][   T37] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   40.169807][   T37] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   40.186944][ T3312] veth0_macvtap: entered promiscuous mode
[   40.201335][   T37] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   40.212843][ T3474] loop0: detected capacity change from 0 to 8192
[   40.220857][ T3312] veth1_macvtap: entered promiscuous mode
[   40.239972][ T3478] SELinux:  policydb version 0 does not match my version range 15-35
[   40.243411][ T3294]  loop0: p1 p2 p3 p4
[   40.254938][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0
[   40.260290][ T3294] loop0: p2 start 164919041 is beyond EOD, truncated
[   40.269106][ T3294] loop0: p3 size 66846464 extends beyond EOD, truncated
[   40.271270][ T3478] SELinux: failed to load policy
[   40.277871][   T37] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   40.307216][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1
[   40.324341][ T3294] loop0: p4 size 37048832 extends beyond EOD, truncated
[   40.336344][   T37] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   40.347251][   T37] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   40.356096][   T37] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   40.367622][ T3474]  loop0: p1 p2 p3 p4
[   40.373538][ T3484] loop2: detected capacity change from 0 to 512
[   40.389770][ T3474] loop0: p2 start 164919041 is beyond EOD, truncated
[   40.390062][   T37] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   40.396493][ T3474] loop0: p3 size 66846464 extends beyond EOD, truncated
[   40.409539][ T3484] EXT4-fs: Ignoring removed orlov option
[   40.444752][ T3484] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[   40.458195][ T3487] loop3: detected capacity change from 0 to 128
[   40.466545][   T37] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   40.477603][ T3485] pim6reg1: entered promiscuous mode
[   40.482983][ T3485] pim6reg1: entered allmulticast mode
[   40.484129][ T3487] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[   40.496325][ T3487] FAT-fs (loop3): Filesystem has been set read-only
[   40.506259][ T3484] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[   40.507446][ T3474] loop0: p4 size 37048832 extends beyond EOD, truncated
[   40.518404][ T3484] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.3: corrupted in-inode xattr: e_value size too large
[   40.538379][   T37] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   40.553668][ T3487] ’: attempt to access beyond end of device
[   40.553668][ T3487] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128
[   40.558360][   T37] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   40.571101][ T3487] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[   40.583382][ T3487] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[   40.597793][ T3484] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.3: couldn't read orphan inode 15 (err -117)
[   40.615621][ T3487] ’: attempt to access beyond end of device
[   40.615621][ T3487] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128
[   40.629439][ T3493] SELinux:  Context Ü is not valid (left unmapped).
[   40.639912][ T3484] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   40.701303][ T3486] syz.3.6: attempt to access beyond end of device
[   40.701303][ T3486] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128
[   40.717159][ T3487] ’: attempt to access beyond end of device
[   40.717159][ T3487] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128
[   40.740469][ T3495] mmap: syz.1.7 (3495) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   40.752771][ T3486] syz.3.6: attempt to access beyond end of device
[   40.752771][ T3486] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128
[   40.793774][ T3487] ’: attempt to access beyond end of device
[   40.793774][ T3487] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128
[   40.823843][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.834166][ T3486] syz.3.6: attempt to access beyond end of device
[   40.834166][ T3486] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128
[   40.847446][ T3487] ’: attempt to access beyond end of device
[   40.847446][ T3487] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128
[   40.861491][ T3486] syz.3.6: attempt to access beyond end of device
[   40.861491][ T3486] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128
[   40.876828][ T3486] syz.3.6: attempt to access beyond end of device
[   40.876828][ T3486] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128
[   40.912271][ T3503] loop2: detected capacity change from 0 to 512
[   40.929866][ T3505] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11'.
[   40.939777][ T3486] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[   40.947636][ T3486] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[   40.958375][ T3503] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   40.971434][ T3486] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[   40.979389][ T3486] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[   40.986808][ T3503] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   40.989698][ T3486] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[   41.005321][ T3486] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[   41.014661][ T3486] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[   41.058061][ T3503] netlink: 'syz.2.10': attribute type 27 has an invalid length.
[   41.069985][ T3492] Buffer I/O error on dev loop3, logical block 2065, async page read
[   41.087872][ T3509] loop1: detected capacity change from 0 to 1024
[   41.094883][ T3492] Buffer I/O error on dev loop3, logical block 2066, async page read
[   41.105122][ T3509] =======================================================
[   41.105122][ T3509] WARNING: The mand mount option has been deprecated and
[   41.105122][ T3509]          and is ignored by this kernel. Remove the mand
[   41.105122][ T3509]          option from the mount to silence this warning.
[   41.105122][ T3509] =======================================================
[   41.110095][ T3492] Buffer I/O error on dev loop3, logical block 2067, async page read
[   41.154807][ T3492] Buffer I/O error on dev loop3, logical block 2068, async page read
[   41.163128][ T3492] Buffer I/O error on dev loop3, logical block 2069, async page read
[   41.165638][ T3513] loop4: detected capacity change from 0 to 128
[   41.171666][ T3492] Buffer I/O error on dev loop3, logical block 2070, async page read
[   41.179581][ T3509] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   41.185943][ T3492] Buffer I/O error on dev loop3, logical block 2071, async page read
[   41.196008][ T3509] EXT4-fs (loop1): can't mount with commit=, fs mounted w/o journal
[   41.214245][ T3492] Buffer I/O error on dev loop3, logical block 2072, async page read
[   41.224937][ T3515] ucma_write: process 4 (syz.2.10) changed security contexts after opening file descriptor, this is not allowed.
[   41.228479][ T3513] FAT-fs (loop4): bogus number of reserved sectors
[   41.243552][ T3513] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[   41.244395][ T3487] Buffer I/O error on dev loop3, logical block 2065, async page read
[   41.252930][ T3513] FAT-fs (loop4): Can't find a valid FAT filesystem
[   41.265649][ T3487] Buffer I/O error on dev loop3, logical block 2066, async page read
[   41.312465][ T3503] bridge0: port 2(bridge_slave_1) entered disabled state
[   41.319844][ T3503] bridge0: port 1(bridge_slave_0) entered disabled state
[   41.375430][ T3503] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   41.397681][ T3503] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   41.473335][ T3514] 8021q: adding VLAN 0 to HW filter on device bond0
[   41.481610][ T3514] 8021q: adding VLAN 0 to HW filter on device team0
[   41.491470][ T3514] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   41.509212][   T51] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   41.518280][   T51] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   41.540414][   T51] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   41.550741][   T51] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   41.551204][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.588386][ T3520] FAULT_INJECTION: forcing a failure.
[   41.588386][ T3520] name failslab, interval 1, probability 0, space 0, times 1
[   41.601206][ T3520] CPU: 0 UID: 0 PID: 3520 Comm: syz.2.14 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   41.601239][ T3520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   41.601255][ T3520] Call Trace:
[   41.601263][ T3520]  <TASK>
[   41.601323][ T3520]  __dump_stack+0x1d/0x30
[   41.601347][ T3520]  dump_stack_lvl+0xe8/0x140
[   41.601372][ T3520]  dump_stack+0x15/0x1b
[   41.601392][ T3520]  should_fail_ex+0x265/0x280
[   41.601417][ T3520]  should_failslab+0x8c/0xb0
[   41.601480][ T3520]  __kmalloc_node_noprof+0xa9/0x410
[   41.601590][ T3520]  ? allocate_slab+0x144/0x3a0
[   41.601684][ T3520]  allocate_slab+0x144/0x3a0
[   41.601779][ T3520]  ___slab_alloc+0x3c9/0x900
[   41.601807][ T3520]  ? kstrtouint+0x76/0xc0
[   41.601823][ T3520]  ? hugetlbfs_alloc_inode+0xbc/0x100
[   41.601847][ T3520]  ? should_fail_ex+0xdb/0x280
[   41.601937][ T3520]  kmem_cache_alloc_lru_noprof+0x1f6/0x310
[   41.601960][ T3520]  ? hugetlbfs_alloc_inode+0xbc/0x100
[   41.601985][ T3520]  hugetlbfs_alloc_inode+0xbc/0x100
[   41.602080][ T3520]  ? __pfx_hugetlbfs_alloc_inode+0x10/0x10
[   41.602156][ T3520]  alloc_inode+0x3d/0x170
[   41.602176][ T3520]  new_inode+0x1d/0xe0
[   41.602196][ T3520]  hugetlbfs_get_inode+0x7b/0x370
[   41.602218][ T3520]  hugetlb_file_setup+0x192/0x3d0
[   41.602251][ T3520]  ksys_mmap_pgoff+0x157/0x310
[   41.602293][ T3520]  x64_sys_call+0x14a3/0x2ff0
[   41.602318][ T3520]  do_syscall_64+0xd2/0x200
[   41.602358][ T3520]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   41.602379][ T3520]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   41.602400][ T3520]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   41.602417][ T3520] RIP: 0033:0x7fee2f25ebe9
[   41.602476][ T3520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   41.602490][ T3520] RSP: 002b:00007fee2dcbf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[   41.602506][ T3520] RAX: ffffffffffffffda RBX: 00007fee2f485fa0 RCX: 00007fee2f25ebe9
[   41.602516][ T3520] RDX: 0000000000000900 RSI: 0000000001400000 RDI: 0000200000000000
[   41.602539][ T3520] RBP: 00007fee2dcbf090 R08: ffffffffffffffff R09: 0000000000000000
[   41.602549][ T3520] R10: 00000000000c3072 R11: 0000000000000246 R12: 0000000000000001
[   41.602560][ T3520] R13: 00007fee2f486038 R14: 00007fee2f485fa0 R15: 00007ffd044b6758
[   41.602575][ T3520]  </TASK>
[   41.857513][ T3523] loop3: detected capacity change from 0 to 128
[   41.908779][ T3527] serio: Serial port ttyS3
[   41.917322][ T3523] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[   41.931876][ T3523] ext4 filesystem being mounted at /3/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   42.003583][ T3304] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   42.013535][ T3525] Zero length message leads to an empty skb
[   42.020528][ T3525] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.16'.
[   42.034951][ T3525] netlink: zone id is out of range
[   42.040340][ T3525] netlink: zone id is out of range
[   42.045756][ T3525] netlink: zone id is out of range
[   42.051397][ T3525] netlink: del zone limit has 8 unknown bytes
[   42.055646][ T3532] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18'.
[   42.083647][ T3534] SELinux:  policydb version 0 does not match my version range 15-35
[   42.092228][ T3534] SELinux: failed to load policy
[   42.125327][ T3538] loop2: detected capacity change from 0 to 128
[   42.134093][ T3538] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[   42.142049][ T3538] FAT-fs (loop2): Filesystem has been set read-only
[   42.148863][ T3538] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[   42.156710][ T3538] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[   42.170528][ T3540] loop3: detected capacity change from 0 to 512
[   42.186557][ T3537] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[   42.194574][ T3537] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[   42.203692][ T3537] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[   42.211571][ T3537] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[   42.219641][ T3537] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[   42.220868][ T3540] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a84ec018, mo2=0002]
[   42.227577][ T3537] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[   42.227857][ T3537] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[   42.235978][ T3540] System zones: 0-2, 18-18, 34-35
[   42.260617][ T3540] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.276568][ T3540] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   42.303218][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.328974][ T3545] SELinux:  policydb version 0 does not match my version range 15-35
[   42.343730][ T3545] SELinux: failed to load policy
[   42.540729][ T3550] netlink: 8 bytes leftover after parsing attributes in process `syz.0.25'.
[   42.771765][ T3555] loop0: detected capacity change from 0 to 1024
[   42.821662][ T3555] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   42.973500][ T3565] netlink: 20 bytes leftover after parsing attributes in process `syz.1.31'.
[   42.982511][ T3565] netlink: 21 bytes leftover after parsing attributes in process `syz.1.31'.
[   42.991370][ T3565] netlink: 'syz.1.31': attribute type 2 has an invalid length.
[   42.998971][ T3565] netlink: 21 bytes leftover after parsing attributes in process `syz.1.31'.
[   43.069004][ T3571] SELinux:  policydb version 0 does not match my version range 15-35
[   43.094268][ T3574] loop1: detected capacity change from 0 to 512
[   43.105046][ T3571] SELinux: failed to load policy
[   43.145854][ T3574] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   43.164873][ T3583] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[   43.171572][ T3574] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   43.183011][ T3555] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt.
[   43.266969][ T3588] loop4: detected capacity change from 0 to 2048
[   43.284271][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.305576][ T3593] netlink: 12 bytes leftover after parsing attributes in process `syz.3.42'.
[   43.315093][ T3294]  loop4: p1 < > p4
[   43.329862][ T3294] loop4: p4 size 8388608 extends beyond EOD, truncated
[   43.367843][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.379845][ T3588]  loop4: p1 < > p4
[   43.411426][ T3606] netlink: 28 bytes leftover after parsing attributes in process `syz.0.49'.
[   43.481542][ T3588] loop4: p4 size 8388608 extends beyond EOD, truncated
[   43.549984][ T3613] wireguard0: entered promiscuous mode
[   43.555508][ T3613] wireguard0: entered allmulticast mode
[   43.606605][ T3621] SELinux:  policydb version 0 does not match my version range 15-35
[   43.617338][ T3621] SELinux: failed to load policy
[   43.644411][ T3482] udevd[3482]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[   43.742090][ T3624] tipc: Started in network mode
[   43.747030][ T3624] tipc: Node identity , cluster identity 4711
[   43.753227][ T3624] tipc: Failed to obtain node identity
[   43.758718][ T3624] tipc: Enabling of bearer <eth:ip6gre0> rejected, failed to enable media
[   43.769317][ T3482] udevd[3482]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[   43.783983][ T3626] loop8: detected capacity change from 0 to 16384
[   43.793553][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[   43.860093][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[   43.875605][ T3482] udevd[3482]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[   43.990982][ T3637] FAULT_INJECTION: forcing a failure.
[   43.990982][ T3637] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   44.004262][ T3637] CPU: 0 UID: 0 PID: 3637 Comm: syz.1.57 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   44.004293][ T3637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   44.004307][ T3637] Call Trace:
[   44.004325][ T3637]  <TASK>
[   44.004334][ T3637]  __dump_stack+0x1d/0x30
[   44.004393][ T3637]  dump_stack_lvl+0xe8/0x140
[   44.004411][ T3637]  dump_stack+0x15/0x1b
[   44.004430][ T3637]  should_fail_ex+0x265/0x280
[   44.004450][ T3637]  should_fail+0xb/0x20
[   44.004470][ T3637]  should_fail_usercopy+0x1a/0x20
[   44.004497][ T3637]  _copy_from_user+0x1c/0xb0
[   44.004588][ T3637]  snd_seq_write+0x1d3/0x530
[   44.004625][ T3637]  ? __pfx_snd_seq_write+0x10/0x10
[   44.004657][ T3637]  vfs_write+0x269/0x960
[   44.004678][ T3637]  ? __rcu_read_unlock+0x4f/0x70
[   44.004711][ T3637]  ? __fget_files+0x184/0x1c0
[   44.004776][ T3637]  ksys_write+0xda/0x1a0
[   44.004806][ T3637]  __x64_sys_write+0x40/0x50
[   44.004832][ T3637]  x64_sys_call+0x27fe/0x2ff0
[   44.004858][ T3637]  do_syscall_64+0xd2/0x200
[   44.004891][ T3637]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   44.004960][ T3637]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   44.004991][ T3637]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   44.005027][ T3637] RIP: 0033:0x7f994ad2ebe9
[   44.005043][ T3637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   44.005062][ T3637] RSP: 002b:00007f9949797038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   44.005083][ T3637] RAX: ffffffffffffffda RBX: 00007f994af55fa0 RCX: 00007f994ad2ebe9
[   44.005143][ T3637] RDX: 000000000000ffc8 RSI: 0000200000000000 RDI: 0000000000000004
[   44.005156][ T3637] RBP: 00007f9949797090 R08: 0000000000000000 R09: 0000000000000000
[   44.005223][ T3637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   44.005235][ T3637] R13: 00007f994af56038 R14: 00007f994af55fa0 R15: 00007ffe5b15d068
[   44.005255][ T3637]  </TASK>
[   44.006524][ T3630] loop8: detected capacity change from 16384 to 16383
[   44.037261][ T3639] netlink: 104 bytes leftover after parsing attributes in process `syz.3.58'.
[   44.381290][ T3657] loop1: detected capacity change from 0 to 128
[   44.405163][ T3657] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100)
[   44.413111][ T3657] FAT-fs (loop1): Filesystem has been set read-only
[   44.444869][ T3657] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100)
[   44.452885][ T3657] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100)
[   44.512014][ T3655] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100)
[   44.520116][ T3655] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100)
[   44.520565][ T3675] loop2: detected capacity change from 0 to 512
[   44.558958][ T3655] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100)
[   44.566902][ T3655] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100)
[   44.590185][ T3655] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100)
[   44.598175][ T3655] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100)
[   44.630323][ T3675] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   44.646846][ T3655] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100)
[   44.662826][ T3675] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   44.861113][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.874943][   T29] kauditd_printk_skb: 251 callbacks suppressed
[   44.874959][   T29] audit: type=1400 audit(1756013918.253:342): avc:  denied  { name_connect } for  pid=3689 comm="syz.0.75" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[   44.972441][   T29] audit: type=1400 audit(1756013918.283:343): avc:  denied  { listen } for  pid=3689 comm="syz.0.75" lport=37326 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   44.995456][   T29] audit: type=1400 audit(1756013918.343:344): avc:  denied  { accept } for  pid=3689 comm="syz.0.75" lport=37326 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   45.203499][ T3706] SELinux:  policydb version 0 does not match my version range 15-35
[   45.211792][ T3706] SELinux: failed to load policy
[   45.230636][ T3708] batman_adv: batadv0: Removing interface: batadv_slave_0
[   45.248487][ T3711] loop4: detected capacity change from 0 to 512
[   45.268704][ T3708] batman_adv: batadv0: Removing interface: batadv_slave_1
[   45.290016][ T3711] EXT4-fs: Ignoring removed orlov option
[   45.317605][ T3711] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[   45.339910][ T3711] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[   45.386993][   T29] audit: type=1400 audit(1756013918.763:345): avc:  denied  { connect } for  pid=3714 comm="syz.1.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   45.406398][   T29] audit: type=1400 audit(1756013918.763:346): avc:  denied  { write } for  pid=3714 comm="syz.1.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   45.425600][   T29] audit: type=1400 audit(1756013918.763:347): avc:  denied  { create } for  pid=3714 comm="syz.1.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   45.445264][   T29] audit: type=1400 audit(1756013918.793:348): avc:  denied  { setopt } for  pid=3714 comm="syz.1.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   45.446005][ T3711] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.83: corrupted in-inode xattr: e_value size too large
[   45.464571][   T29] audit: type=1400 audit(1756013918.793:349): avc:  denied  { connect } for  pid=3714 comm="syz.1.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   45.512150][ T3715] loop0: detected capacity change from 0 to 1024
[   45.547250][ T3711] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.83: couldn't read orphan inode 15 (err -117)
[   45.573215][ T3715] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   45.583608][ T3715] EXT4-fs (loop0): can't mount with commit=, fs mounted w/o journal
[   45.597083][ T3719] loop2: detected capacity change from 0 to 128
[   45.609892][ T3711] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   45.642030][ T3719] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[   45.716412][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.740810][ T3719] ext4 filesystem being mounted at /19/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   45.777271][   T29] audit: type=1400 audit(1756013919.153:350): avc:  denied  { create } for  pid=3721 comm="syz.1.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   45.799999][ T3722] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check.
[   45.818160][   T29] audit: type=1400 audit(1756013919.183:351): avc:  denied  { setopt } for  pid=3721 comm="syz.1.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   45.862084][ T3724] loop4: detected capacity change from 0 to 1024
[   45.870381][ T3309] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   45.885163][ T3724] EXT4-fs: Ignoring removed nomblk_io_submit option
[   45.911151][ T3724] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   45.965212][ T3739] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[   45.976947][ T3737] vhci_hcd: default hub control req: 1f18 v0008 i0000 l2
[   45.989929][ T3741] SELinux:  policydb version 0 does not match my version range 15-35
[   45.998151][ T3741] SELinux: failed to load policy
[   46.046297][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.050415][ T3745] loop2: detected capacity change from 0 to 512
[   46.062378][ T3745] EXT4-fs: Ignoring removed oldalloc option
[   46.068313][ T3745] EXT4-fs: dax option not supported
[   46.076559][ T3745] __nla_validate_parse: 4 callbacks suppressed
[   46.076588][ T3745] netlink: 4 bytes leftover after parsing attributes in process `syz.2.95'.
[   46.132075][ T3750] netlink: 'syz.4.96': attribute type 1 has an invalid length.
[   46.215559][ T3755] loop4: detected capacity change from 0 to 512
[   46.283347][ T3755] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   46.297316][ T3755] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   46.356368][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.470316][ T3775] loop4: detected capacity change from 0 to 512
[   46.481217][ T3775] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.106: bg 0: block 288: padding at end of block bitmap is not set
[   46.502266][ T3775] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem
[   46.512826][ T3775] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.106: attempt to clear invalid blocks 1024 len 1
[   46.527290][ T3775] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.106: invalid indirect mapped block 1819239214 (level 0)
[   46.542455][ T3775] EXT4-fs (loop4): 1 truncate cleaned up
[   46.548523][ T3775] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   46.588985][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.620309][ T3781] netlink: 4 bytes leftover after parsing attributes in process `syz.2.107'.
[   46.681655][ T3783] netlink: 'syz.4.109': attribute type 1 has an invalid length.
[   46.693255][ T3784] loop2: detected capacity change from 0 to 1024
[   46.714355][ T3784] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   46.724754][ T3784] EXT4-fs (loop2): can't mount with commit=, fs mounted w/o journal
[   46.768779][ T3786] netlink: 'syz.4.110': attribute type 1 has an invalid length.
[   46.871381][ T3792] loop3: detected capacity change from 0 to 128
[   46.933919][ T3792] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[   46.934580][ T3798] 9pnet_fd: Insufficient options for proto=fd
[   46.941895][ T3792] FAT-fs (loop3): Filesystem has been set read-only
[   46.988318][ T3800] loop4: detected capacity change from 0 to 512
[   47.032281][ T3800] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   47.047302][ T3792] bio_check_eod: 44190 callbacks suppressed
[   47.047321][ T3792] ’: attempt to access beyond end of device
[   47.047321][ T3792] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128
[   47.054505][ T3800] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   47.066803][ T3792] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[   47.084917][ T3792] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[   47.098059][ T3792] ’: attempt to access beyond end of device
[   47.098059][ T3792] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128
[   47.125481][ T3791] syz.3.113: attempt to access beyond end of device
[   47.125481][ T3791] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128
[   47.160291][ T3792] ’: attempt to access beyond end of device
[   47.160291][ T3792] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128
[   47.192803][ T3791] syz.3.113: attempt to access beyond end of device
[   47.192803][ T3791] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128
[   47.222972][ T3792] ’: attempt to access beyond end of device
[   47.222972][ T3792] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128
[   47.269929][ T3807] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.119'.
[   47.278915][ T3791] syz.3.113: attempt to access beyond end of device
[   47.278915][ T3791] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128
[   47.280262][ T3807] netlink: zone id is out of range
[   47.303791][ T3792] ’: attempt to access beyond end of device
[   47.303791][ T3792] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128
[   47.316737][ T3792] ’: attempt to access beyond end of device
[   47.316737][ T3792] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128
[   47.329487][ T3791] syz.3.113: attempt to access beyond end of device
[   47.329487][ T3791] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128
[   47.338857][ T3807] netlink: zone id is out of range
[   47.358327][ T3807] netlink: zone id is out of range
[   47.374576][ T3807] netlink: del zone limit has 8 unknown bytes
[   47.380366][ T3791] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[   47.388512][ T3791] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[   47.409579][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.422398][ T3808] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59 sclass=netlink_route_socket pid=3808 comm=syz.1.119
[   47.468286][ T3813] loop2: detected capacity change from 0 to 128
[   47.474210][ T3791] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[   47.482702][ T3791] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[   47.486994][ T3813] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[   47.498403][ T3813] FAT-fs (loop2): Filesystem has been set read-only
[   47.518919][ T3813] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[   47.526902][ T3813] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[   47.528879][ T3791] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[   47.542824][ T3791] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[   47.563721][ T3791] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[   47.595448][ T3812] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[   47.603514][ T3812] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[   47.621827][ T3812] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[   47.629714][ T3812] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[   47.647909][ T3817] SELinux:  policydb version 0 does not match my version range 15-35
[   47.668902][ T3817] SELinux: failed to load policy
[   47.688172][ T3812] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[   47.696112][ T3812] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[   47.754101][ T3812] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[   47.772626][ T3815] buffer_io_error: 13470 callbacks suppressed
[   47.772644][ T3815] Buffer I/O error on dev loop2, logical block 2065, async page read
[   47.799099][ T3815] Buffer I/O error on dev loop2, logical block 2066, async page read
[   47.807314][ T3815] Buffer I/O error on dev loop2, logical block 2067, async page read
[   47.816541][ T3815] Buffer I/O error on dev loop2, logical block 2068, async page read
[   47.849434][ T3815] Buffer I/O error on dev loop2, logical block 2069, async page read
[   47.857721][ T3815] Buffer I/O error on dev loop2, logical block 2070, async page read
[   47.865946][ T3815] Buffer I/O error on dev loop2, logical block 2071, async page read
[   47.874075][ T3815] Buffer I/O error on dev loop2, logical block 2072, async page read
[   47.882256][ T3815] Buffer I/O error on dev loop2, logical block 2065, async page read
[   47.894155][ T3815] Buffer I/O error on dev loop2, logical block 2066, async page read
[   47.917008][ T3822] loop3: detected capacity change from 0 to 128
[   47.949963][ T3827] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[   48.170562][ T3833] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 52)
[   48.178736][ T3833] FAT-fs (loop3): Filesystem has been set read-only
[   48.184603][ T3836] loop4: detected capacity change from 0 to 2048
[   48.275657][ T3836] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   48.326339][ T3847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.132'.
[   48.363447][ T3847] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check.
[   48.390845][ T3851] netlink: 4 bytes leftover after parsing attributes in process `syz.1.131'.
[   48.522945][ T3845] loop1: detected capacity change from 0 to 1024
[   48.532954][ T3845] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   48.543301][ T3845] EXT4-fs (loop1): can't mount with commit=, fs mounted w/o journal
[   49.052715][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.095517][ T3864] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[   49.109102][    C1] hrtimer: interrupt took 56396 ns
[   49.114478][ T3864] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   49.142919][ T3864] loop0: detected capacity change from 0 to 1764
[   49.234323][ T3873] loop1: detected capacity change from 0 to 128
[   49.250731][ T3873] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100)
[   49.258627][ T3873] FAT-fs (loop1): Filesystem has been set read-only
[   49.274957][ T3873] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100)
[   49.282851][ T3873] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100)
[   49.325169][ T3872] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100)
[   49.333167][ T3872] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100)
[   49.372888][ T3878] loop2: detected capacity change from 0 to 128
[   49.387822][ T3880] syz.0.144 uses obsolete (PF_INET,SOCK_PACKET)
[   49.403839][ T3872] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100)
[   49.411794][ T3872] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100)
[   49.445315][ T3880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.144'.
[   49.457046][ T3878] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[   49.467898][ T3872] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100)
[   49.477388][ T3872] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100)
[   49.485458][ T3872] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100)
[   49.511693][ T3878] ext4 filesystem being mounted at /33/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   49.908115][ T3309] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   50.088871][   T29] kauditd_printk_skb: 227 callbacks suppressed
[   50.088888][   T29] audit: type=1400 audit(1756013923.463:579): avc:  denied  { read write } for  pid=3888 comm="syz.0.148" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   50.118520][   T29] audit: type=1400 audit(1756013923.463:580): avc:  denied  { open } for  pid=3888 comm="syz.0.148" path="/dev/ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   50.188270][ T3890] netlink: 28 bytes leftover after parsing attributes in process `syz.2.145'.
[   50.359750][   T29] audit: type=1400 audit(1756013923.683:581): avc:  denied  { read } for  pid=3888 comm="syz.0.148" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   50.382283][   T29] audit: type=1400 audit(1756013923.683:582): avc:  denied  { open } for  pid=3888 comm="syz.0.148" path="/dev/cpu/1/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   50.405880][   T29] audit: type=1400 audit(1756013923.683:583): avc:  denied  { ioctl } for  pid=3888 comm="syz.0.148" path="/dev/cpu/1/msr" dev="devtmpfs" ino=87 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   50.430799][   T29] audit: type=1326 audit(1756013923.703:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3897 comm="syz.1.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994ad2ebe9 code=0x7ffc0000
[   50.454176][   T29] audit: type=1326 audit(1756013923.703:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3897 comm="syz.1.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994ad2ebe9 code=0x7ffc0000
[   50.477580][   T29] audit: type=1326 audit(1756013923.733:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3897 comm="syz.1.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7f994ad2ebe9 code=0x7ffc0000
[   50.500949][   T29] audit: type=1326 audit(1756013923.733:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3897 comm="syz.1.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994ad2ebe9 code=0x7ffc0000
[   50.524424][   T29] audit: type=1326 audit(1756013923.733:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3897 comm="syz.1.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994ad2ebe9 code=0x7ffc0000
[   50.813583][ T3909] netlink: 8 bytes leftover after parsing attributes in process `syz.2.151'.
[   50.834445][ T3909] IPVS: Error joining to the multicast group
[   50.843110][ T3911] loop3: detected capacity change from 0 to 128
[   50.895881][ T3911] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[   50.904195][ T3911] FAT-fs (loop3): Filesystem has been set read-only
[   50.986590][ T3911] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[   50.994489][ T3911] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[   51.113898][ T3920] netlink: 8 bytes leftover after parsing attributes in process `syz.0.159'.
[   51.128123][ T3920] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check.
[   51.155568][ T3910] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[   51.163463][ T3910] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[   51.316395][ T3910] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[   51.324335][ T3910] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[   51.408867][ T3910] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[   51.416822][ T3910] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[   51.466853][ T3940] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[   51.469199][ T3930] netlink: 14 bytes leftover after parsing attributes in process `syz.4.138'.
[   51.492006][ T3910] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[   51.500862][ T3930] hsr_slave_0: left promiscuous mode
[   51.509079][ T3930] hsr_slave_1: left promiscuous mode
[   51.761156][ T3954] serio: Serial port ttyS3
[   52.112019][ T3967] netlink: 8 bytes leftover after parsing attributes in process `syz.4.172'.
[   52.132117][ T3968] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.178'.
[   52.171169][ T3967] IPVS: Error joining to the multicast group
[   52.202389][ T3968] netlink: zone id is out of range
[   52.250533][ T3968] netlink: zone id is out of range
[   52.257018][ T3968] netlink: zone id is out of range
[   52.352287][ T3968] netlink: del zone limit has 8 unknown bytes
[   52.591552][ T3977] netlink: 'syz.0.181': attribute type 1 has an invalid length.
[   52.665584][ T3979] -1: renamed from syzkaller0
[   53.295778][ T4000] netlink: 'syz.3.191': attribute type 1 has an invalid length.
[   53.462796][ T4007] serio: Serial port ttyS3
[   53.470248][ T4009] SELinux:  policydb version 0 does not match my version range 15-35
[   53.491816][ T4002] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.192'.
[   53.493726][ T4009] SELinux: failed to load policy
[   53.501380][ T4002] netlink: zone id is out of range
[   53.512291][ T4002] netlink: zone id is out of range
[   53.517522][ T4002] netlink: zone id is out of range
[   53.523082][ T4002] netlink: del zone limit has 8 unknown bytes
[   53.736911][ T4028] loop4: detected capacity change from 0 to 512
[   53.744996][ T4030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.204'.
[   53.773501][ T4028] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.203: error while reading EA inode 32 err=-116
[   53.801332][ T4028] EXT4-fs (loop4): Remounting filesystem read-only
[   53.807883][ T4028] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   53.820965][ T4028] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[   53.843816][ T4028] EXT4-fs (loop4): 1 orphan inode deleted
[   53.929402][ T4028] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   53.957800][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.993272][ T4038] SELinux:  policydb version 0 does not match my version range 15-35
[   54.001844][ T4038] SELinux: failed to load policy
[   54.026012][ T4041] netlink: 8 bytes leftover after parsing attributes in process `syz.4.208'.
[   54.076884][ T4042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.205'.
[   54.106977][ T4042] IPVS: Error joining to the multicast group
[   54.142712][ T4046] loop4: detected capacity change from 0 to 512
[   54.185520][ T4046] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.210: error while reading EA inode 32 err=-116
[   54.199534][ T4046] EXT4-fs (loop4): Remounting filesystem read-only
[   54.206167][ T4046] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[   54.223225][ T4046] EXT4-fs (loop4): 1 orphan inode deleted
[   54.229558][ T4046] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   54.266306][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.499353][ T4053] loop3: detected capacity change from 0 to 128
[   54.548746][ T4060] netlink: 8 bytes leftover after parsing attributes in process `syz.1.216'.
[   54.559762][ T4053] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[   54.638419][ T4066] FAULT_INJECTION: forcing a failure.
[   54.638419][ T4066] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   54.651676][ T4066] CPU: 0 UID: 0 PID: 4066 Comm: syz.2.218 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   54.651784][ T4066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   54.651797][ T4066] Call Trace:
[   54.651804][ T4066]  <TASK>
[   54.651847][ T4066]  __dump_stack+0x1d/0x30
[   54.651893][ T4066]  dump_stack_lvl+0xe8/0x140
[   54.651912][ T4066]  dump_stack+0x15/0x1b
[   54.651937][ T4066]  should_fail_ex+0x265/0x280
[   54.652037][ T4066]  should_fail+0xb/0x20
[   54.652059][ T4066]  should_fail_usercopy+0x1a/0x20
[   54.652082][ T4066]  _copy_from_user+0x1c/0xb0
[   54.652137][ T4066]  ___sys_sendmsg+0xc1/0x1d0
[   54.652222][ T4066]  __x64_sys_sendmsg+0xd4/0x160
[   54.652248][ T4066]  x64_sys_call+0x191e/0x2ff0
[   54.652269][ T4066]  do_syscall_64+0xd2/0x200
[   54.652319][ T4066]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   54.652343][ T4066]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   54.652369][ T4066]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   54.652390][ T4066] RIP: 0033:0x7fee2f25ebe9
[   54.652427][ T4066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   54.652445][ T4066] RSP: 002b:00007fee2dcbf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   54.652464][ T4066] RAX: ffffffffffffffda RBX: 00007fee2f485fa0 RCX: 00007fee2f25ebe9
[   54.652496][ T4066] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003
[   54.652533][ T4066] RBP: 00007fee2dcbf090 R08: 0000000000000000 R09: 0000000000000000
[   54.652545][ T4066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   54.652557][ T4066] R13: 00007fee2f486038 R14: 00007fee2f485fa0 R15: 00007ffd044b6758
[   54.652576][ T4066]  </TASK>
[   54.698149][ T4053] ext4 filesystem being mounted at /33/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   54.789073][ T4070] SELinux:  policydb version 0 does not match my version range 15-35
[   54.810740][ T4068] loop1: detected capacity change from 0 to 8192
[   54.876637][ T4070] SELinux: failed to load policy
[   54.956041][ T4068] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 2074)
[   54.964984][ T4068] FAT-fs (loop1): Filesystem has been set read-only
[   54.985703][ T4068] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 2074)
[   55.000646][ T3304] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   55.022714][ T4076] loop2: detected capacity change from 0 to 512
[   55.024823][ T4068] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 2074)
[   55.038126][ T4068] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 2074)
[   55.069636][ T4078] serio: Serial port ttyS3
[   55.070568][ T4076] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.224: error while reading EA inode 32 err=-116
[   55.095442][ T4076] EXT4-fs (loop2): Remounting filesystem read-only
[   55.102141][ T4076] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[   55.133125][ T4076] EXT4-fs (loop2): 1 orphan inode deleted
[   55.139482][ T4076] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   55.176248][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.230991][   T29] kauditd_printk_skb: 42 callbacks suppressed
[   55.231008][   T29] audit: type=1326 audit(1756013928.613:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4084 comm="syz.1.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994ad2ebe9 code=0x7ffc0000
[   55.264382][   T29] audit: type=1326 audit(1756013928.643:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4084 comm="syz.1.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7f994ad2ebe9 code=0x7ffc0000
[   55.287796][   T29] audit: type=1326 audit(1756013928.643:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4084 comm="syz.1.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994ad2ebe9 code=0x7ffc0000
[   55.311303][   T29] audit: type=1326 audit(1756013928.643:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4084 comm="syz.1.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7f994ad2ebe9 code=0x7ffc0000
[   55.335030][   T29] audit: type=1326 audit(1756013928.643:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4084 comm="syz.1.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994ad2ebe9 code=0x7ffc0000
[   55.358356][   T29] audit: type=1326 audit(1756013928.643:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4084 comm="syz.1.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f994ad2ebe9 code=0x7ffc0000
[   55.381750][   T29] audit: type=1326 audit(1756013928.643:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4084 comm="syz.1.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994ad2ebe9 code=0x7ffc0000
[   55.405210][   T29] audit: type=1326 audit(1756013928.643:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4084 comm="syz.1.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994ad2ebe9 code=0x7ffc0000
[   55.428576][   T29] audit: type=1326 audit(1756013928.643:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4084 comm="syz.1.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f994ad2ebe9 code=0x7ffc0000
[   55.451662][   T29] audit: type=1326 audit(1756013928.643:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4084 comm="syz.1.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994ad2ebe9 code=0x7ffc0000
[   55.627964][ T4091] loop0: detected capacity change from 0 to 256
[   55.926379][ T4105] loop3: detected capacity change from 0 to 512
[   56.258135][ T4105] EXT4-fs (loop3): orphan cleanup on readonly fs
[   56.264597][ T4105] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13
[   56.422738][ T4105] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[   56.437572][ T4105] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.235: attempt to clear invalid blocks 2 len 1
[   56.459221][ T4105] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.235: invalid indirect mapped block 1819239214 (level 0)
[   56.485420][ T4105] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.235: invalid indirect mapped block 1819239214 (level 1)
[   56.525772][ T4111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.236'.
[   56.534959][ T4111] IPVS: Error joining to the multicast group
[   56.539926][ T4105] EXT4-fs (loop3): 1 truncate cleaned up
[   56.553172][ T4105] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   56.800907][ T4116] netlink: 8 bytes leftover after parsing attributes in process `syz.0.238'.
[   56.815696][ T4118] batman_adv: batadv0: Adding interface: dummy0
[   56.822064][ T4118] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.885286][ T4118] batman_adv: batadv0: Interface activated: dummy0
[   56.904691][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   56.954113][ T4119] batadv0: mtu less than device minimum
[   56.960216][ T4119] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   56.970962][ T4119] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   56.981803][ T4119] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   56.992622][ T4119] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   57.055150][ T4124] lo speed is unknown, defaulting to 1000
[   57.093723][ T4124] lo speed is unknown, defaulting to 1000
[   57.105636][ T4124] lo speed is unknown, defaulting to 1000
[   57.140776][ T4124] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   57.151215][ T4133] netlink: 4 bytes leftover after parsing attributes in process `syz.4.242'.
[   57.179949][ T4124] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   57.190927][ T4130] lo speed is unknown, defaulting to 1000
[   57.214708][ T4125] loop0: detected capacity change from 0 to 8192
[   57.254607][ T3482] ==================================================================
[   57.262779][ T3482] BUG: KCSAN: data-race in _copy_to_iter / fat16_ent_put
[   57.269853][ T3482] 
[   57.272192][ T3482] write to 0xffff88811c7442b6 of 2 bytes by task 4125 on cpu 1:
[   57.279834][ T3482]  fat16_ent_put+0x28/0x60
[   57.284313][ T3482]  fat_alloc_clusters+0x4ce/0xa80
[   57.289381][ T3482]  fat_get_block+0x258/0x5e0
[   57.293993][ T3482]  __block_write_begin_int+0x400/0xf90
[   57.299474][ T3482]  cont_write_begin+0x5fc/0x970
[   57.304336][ T3482]  fat_write_begin+0x4f/0xe0
[   57.308937][ T3482]  cont_write_begin+0x1b0/0x970
[   57.313802][ T3482]  fat_write_begin+0x4f/0xe0
[   57.318403][ T3482]  generic_cont_expand_simple+0xad/0x150
[   57.324052][ T3482]  fat_cont_expand+0x3e/0x170
[   57.328745][ T3482]  fat_setattr+0x2a5/0x8a0
[   57.333176][ T3482]  notify_change+0x806/0x890
[   57.337792][ T3482]  do_ftruncate+0x34b/0x450
[   57.342308][ T3482]  __x64_sys_ftruncate+0x68/0xc0
[   57.347286][ T3482]  x64_sys_call+0x2d52/0x2ff0
[   57.351971][ T3482]  do_syscall_64+0xd2/0x200
[   57.356483][ T3482]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   57.362398][ T3482] 
[   57.364727][ T3482] read to 0xffff88811c744200 of 512 bytes by task 3482 on cpu 0:
[   57.372443][ T3482]  _copy_to_iter+0x130/0xe70
[   57.377045][ T3482]  copy_page_to_iter+0x18f/0x2d0
[   57.381993][ T3482]  filemap_read+0x407/0xa00
[   57.386513][ T3482]  blkdev_read_iter+0x22d/0x2e0
[   57.391483][ T3482]  vfs_read+0x649/0x770
[   57.395642][ T3482]  ksys_read+0xda/0x1a0
[   57.399810][ T3482]  __x64_sys_read+0x40/0x50
[   57.404322][ T3482]  x64_sys_call+0x27bc/0x2ff0
[   57.409008][ T3482]  do_syscall_64+0xd2/0x200
[   57.413551][ T3482]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   57.419449][ T3482] 
[   57.421772][ T3482] Reported by Kernel Concurrency Sanitizer on:
[   57.427920][ T3482] CPU: 0 UID: 0 PID: 3482 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) 
[   57.437206][ T3482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   57.447353][ T3482] ==================================================================
[   57.590865][ T4124] lo speed is unknown, defaulting to 1000
[   57.614713][ T4124] lo speed is unknown, defaulting to 1000
[   57.640294][ T4124] lo speed is unknown, defaulting to 1000
[   57.646391][ T4141] loop4: detected capacity change from 0 to 1024
[   57.684427][ T4141] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   57.689499][ T4124] lo speed is unknown, defaulting to 1000
[   57.694760][ T4141] EXT4-fs (loop4): can't mount with commit=, fs mounted w/o journal
[   57.733534][ T4124] lo speed is unknown, defaulting to 1000